eOffer still vulnerable, consultant says.

Set-Aside Alert, January, 2006

GSA's eOffer online bidding website is still wide open to security breaches, according to the computer consultant who found the vulnerability that shut down the site for a week.

Aaron Greenspan, CEO of the small Dallas software company Think Computer, told Set-Aside Alert it is still possible to hijack a registered company's information and change it at will. He described how to do it, but those details are not being published.

After Greenspan alerted GSA to the vulnerability in December, the site was shut down from Jan. 11 until Jan. 18. A notice said it was offline for "maintenance."

GSA reactivated eOffer, but Greenspan said the security holes have not been plugged: "In my opinion it is a vulnerability. In the opinion of GSA, it is not."...

Read the rest of this article with a Free Trial at HighBeam Research.

Premium Content Partnership | HighBeam Research provides an in-depth online archive library of reference works.