SSL toolkit flaw poses risk

The Register reports: “A vulnerability has been discovered in versions of software development toolkits
from RSA Security, which could allow an attacker to bypass SSL client
authentication.

In a security notice on the issue, RSA said the vulnerability meant that hackers
“might potentially gain access to data intended only for authorised users”. The
company has a patch and it advises customers to apply this to affected software.”