E-Zone Media FuzeTalk Banning.CFM Authentication Bypass Vulnerability

Bugtraq ID:	10278
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 05 2004 12:00AM
Updated:	May 05 2004 12:00AM
Credit:	Disclosure of this issue is credited to Stuart Jamieson <[email protected]>.
Vulnerable:	e-Zone Media Inc. FuseTalk 4.0 e-Zone Media Inc. FuseTalk 3.0 e-Zone Media Inc. FuseTalk 2.0
Not Vulnerable:

E-Zone Media FuzeTalk Banning.CFM Authentication Bypass Vulnerability

It has been reported that FuseTalk is affected by an authentication bypass vulnerability allowing access to the 'banning.cfm' script. This issue is due to a failure of the application to properly validate authentication credentials.

This issue may be leveraged by an attacker ban arbitrary hosts from accessing the affected forum by flagging their IP address.

E-Zone Media FuzeTalk Banning.CFM Authentication Bypass Vulnerability

No exploit is required to leverage this issue.

E-Zone Media FuzeTalk Banning.CFM Authentication Bypass Vulnerability

Solution:
It has been reported that updates exists that deal with this issue. Please see the reference section and contact the vendor for more information on obtaining the relevant updates.

E-Zone Media FuzeTalk Banning.CFM Authentication Bypass Vulnerability

References:

• FuseTalk (e-Zone Media)
  
• Fuse Talk Vunerabilities (Stuart Jamieson )