Paros HSQLDB Remote Authentication Bypass Vulnerability
BID:15141
Info
Paros HSQLDB Remote Authentication Bypass Vulnerability
| Bugtraq ID: | 15141 |
| Class: | Design Error |
| CVE: |
CVE-2005-3280 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 19 2005 12:00AM |
| Updated: | Feb 07 2006 08:54PM |
| Credit: | FortConsult ApS is credited with the discovery of this vulnerability. Marc Schoenefeld <[email protected]> is credited with pointing out the localhost attack scenario. |
| Vulnerable: |
Paros Paros 3.2.6 Paros Paros 3.2.5 Gentoo Linux |
| Not Vulnerable: |
Paros Paros 3.2.7 Paros Paros 3.2.6 |
Discussion
Paros HSQLDB Remote Authentication Bypass Vulnerability
Paros is prone to a remote authentication-bypass vulnerability.
This issue may result in the disclosure of sensitive information, and possible execution of commands on the victim machine.
Paros version 3.2.5 is affected; earlier versions may also be vulnerable.
Update: version 3.2.6 was released and addresses this issue from remote computers, because the database listens only on localhost by default. This still allows local users to connect, since the default username of 'sa' with a blank password is still used.
Paros is prone to a remote authentication-bypass vulnerability.
This issue may result in the disclosure of sensitive information, and possible execution of commands on the victim machine.
Paros version 3.2.5 is affected; earlier versions may also be vulnerable.
Update: version 3.2.6 was released and addresses this issue from remote computers, because the database listens only on localhost by default. This still allows local users to connect, since the default username of 'sa' with a blank password is still used.
Exploit / POC
Paros HSQLDB Remote Authentication Bypass Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Paros HSQLDB Remote Authentication Bypass Vulnerability
Solution:
The vendor has released version 3.2.7 to address this issue. Version 3.2.7 uses the database in-process, and remote/localhost access is no longer possible.
Gentoo Linux has released security advisory GLSA 200601-15 addressing this issue. Gentoo recommends that all Paros users upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-proxy/paros-3.2.8"
Paros Paros 3.2.5
Paros Paros 3.2.6
Solution:
The vendor has released version 3.2.7 to address this issue. Version 3.2.7 uses the database in-process, and remote/localhost access is no longer possible.
Gentoo Linux has released security advisory GLSA 200601-15 addressing this issue. Gentoo recommends that all Paros users upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-proxy/paros-3.2.8"
Paros Paros 3.2.5
-
Paros paros-3.2.6-unix.zip
http://prdownloads.sourceforge.net/paros/paros-3.2.6-unix.zip -
Paros paros-3.2.7-src.zip
http://prdownloads.sourceforge.net/paros/paros-3.2.7-src.zip?download
Paros Paros 3.2.6
-
Paros paros-3.2.7-src.zip
http://prdownloads.sourceforge.net/paros/paros-3.2.7-src.zip?download
References
Paros HSQLDB Remote Authentication Bypass Vulnerability
References:
References:
- Paros Web Site (Paros)
- Release Name: Version 3.2.6 (Paros)
- Release Name: Version 3.2.7 (Paros)
- Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability (Marc Schoenefeld