Bottomline Technologies WebSeries Design Error Vulnerabilities

Bugtraq ID:	12231
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 11 2005 12:00AM
Updated:	Jan 11 2005 12:00AM
Credit:	Discovered by Portcullis Security Testing Service.
Vulnerable:	BottomLine WebSeries Payment Application 4.0
Not Vulnerable:

Bottomline Technologies WebSeries Design Error Vulnerabilities

WebSeries is an enterprise payment system with web-based functionality that is produced by Bottomline Technologies.

It has been reported that WebSeries is affected by four security issues, all of which appear to be due to design oversights.

Bottomline Technologies WebSeries Design Error Vulnerabilities

None of these vulnerabilities require specialized exploit code.

Bottomline Technologies WebSeries Design Error Vulnerabilities

Solution:
Bottomline Technologies is aware of this vulnerability and is releasing a
security patch. For information, please contact Bottomline directly at
603-501-5500.

Bottomline Technologies WebSeries Design Error Vulnerabilities

References:

• Portcullis Advisory 05-001 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Advisory 05-005 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Advisory 05-006 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Advisory 05-007 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Advisory 05-008 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Advisory 05-009 Update, Webseries Payment Application ("Paul J Docherty" )
  
• Portcullis Security Advisory 05-001 ("Paul J Docherty" )
  
• Portcullis Security Advisory 05-005 ("Paul J Docherty" )
  
• Portcullis Security Advisory 05-006 ("Paul J Docherty" )
  
• Portcullis Security Advisory 05-007 ("Paul J Docherty" )
  
• Portcullis Security Advisory 05-008 ("Paul J Docherty" )