Posted by: David Harley | December 15, 2016

Authentication bypass vulnerability in Skype for OS X

Trustwave’s analysis of what it describes as a possible ‘backdoor’ in Skype:

‘As described in the Trustwave advisory, the issue is an authentication by-pass discovered in the API whereby a local program could by-pass authentication if they identified themselves as the program responsible for interfacing with the Desktop API on behalf of the Skype Dashboard widget program.’

Microsoft denies that it’s a backdoor, but acknowledges the vulnerability.

Commentary by John Leyden for The Register: Infosec bods: This is a backdoor in Skype for Macs. Microsoft: No. – Dodgy API let apps and plugins silently pry into chat logs, record calls and more

David Harley

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Categories

%d bloggers like this: