ASP-Rider Malformed Cookie Administrative Access Vulnerability

Bugtraq ID:	10565
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2004 12:00AM
Updated:	Jun 17 2004 12:00AM
Credit:	Discovery is credited to Sina Mobtaker <[email protected]>.
Vulnerable:	ASP-Rider ASP-Rider 1.6
Not Vulnerable:

ASP-Rider Malformed Cookie Administrative Access Vulnerability

ASP-Rider is reported prone to an administrative account access vulnerability that can allow a remote attacker to gain administrative access to a vulnerable site. The issue presents itself when an attacker sends a specially crafted malformed cookie to a vulnerable site.

ASP-Rider version 1.6 is reported prone to this vulnerability, however, other versions could be affected as well.

ASP-Rider Malformed Cookie Administrative Access Vulnerability

No exploit is required.

ASP-Rider Malformed Cookie Administrative Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ASP-Rider Malformed Cookie Administrative Access Vulnerability

References:

• ASP-Rider Web Blog Homepage (ASP-Rider)