Tech guides

Whether you need removal instructions for a specific virus or just a quick tech tip - here is where you'll find advice from our team of technicians. These guides will reflect the latest security threats and hottest topics on our Antivirus Forum.

Automatic patch released for vulnerability in BullGuard Backup

 



Monday, May 26 2008

A vulnerability in BullGuard Backup has been discovered and patched. The patch is being automatically distributed to all users of BullGuard Backup. No user-action is needed to receive the patch.

 

 

As disclosed in the online magazine Heise.de Friday May 23 2008, a number of Online Backup services are exposed to a vulnerability, compromising the security of the traffic between the end-user and the backup servers. The story can be found here:

 

http://www.heise-online.co.uk/security/Some-online-backup-services-insecure--/news/110771

 

 

BullGuard has investigated the issue, and confirmed that BullGuard Backup was vulnerable to the attack described, due to not properly verifying the SSL certificate on the server, as otherwise designed. We have created a patch for this issue, which is currently being released through the auto-update feature in BullGuard Backup. The release-schedule for the patch is as follows:

 

- Monday, May 26 2008, 6PM: German, French, Spanish, Dutch

- Tuesday, May 27 2008, 10AM: Danish

- Wednedsay, May 28 2008, 10AM: English

 

 

No action is required by the user to receive the patch, as it is released through our auto-update system.

 

 

Kind regards

The BullGuard Team