SmartStuff FoolProof Security Program Administrative Password Recovery Vulnerability

Bugtraq ID:	10467
Class:	Design Error
CVE:	CVE-2004-2555
Remote:	Yes
Local:	No
Published:	Jun 05 2004 12:00AM
Updated:	Jun 05 2004 12:00AM
Credit:	Discovery is credited to Cyrillium Security <http://www.cyrillium.com/>.
Vulnerable:	SmartStuff FoolProof Security 3.9.7 SmartStuff FoolProof Security 3.9.4
Not Vulnerable:	SmartStuff FoolProof Security 5.0 SmartStuff FoolProof Security 4.0.2

SmartStuff FoolProof Security Program Administrative Password Recovery Vulnerability

FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized administrative access to the application.

This issue occurs because an attacker can manipulate the password recovery algorithm to recover an 'Administrator' password.

FoolProof versions 3.9.7 for Windows 98/ME and 3.9.4 for Windows 95 are affected by this issue. Subsequent versions of FoolProof do not contain the password recovery feature.

SmartStuff FoolProof Security Program Administrative Password Recovery Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/foolpw.c

SmartStuff FoolProof Security Program Administrative Password Recovery Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SmartStuff FoolProof Security Program Administrative Password Recovery Vulnerability

References:

• FoolProof Security Product Page (SmartStuff)