Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
BID:18565
CVE-2006-3147 |Info
Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
| Bugtraq ID: | 18565 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2006 12:00AM |
| Updated: | Jul 07 2006 10:29PM |
| Credit: | Soroush Dalili discovered this vulnerability |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1.0 Hotfix 3.1 0 Hosting Controller Hosting Controller 6.1 Hotfix 2.4 Hosting Controller Hosting Controller 6.1 Hotfix 2.3 Hosting Controller Hosting Controller 6.1 Hotfix 2.2 Hosting Controller Hosting Controller 6.1 Hotfix 2.1 Hosting Controller Hosting Controller 6.1 Hotfix 2.0 Hosting Controller Hosting Controller 6.1 Hotfix 1.9 Hosting Controller Hosting Controller 6.1 Hotfix 1.7 Hosting Controller Hosting Controller 6.1 Hotfix 1.4 Hosting Controller Hosting Controller 6.1 Hosting Controller Hosting Controller 6.1.Hotfix 2.8 |
| Not Vulnerable: |
Hosting Controller Hosting Controller 6.1.0 Hotfix 3.2 0 |
Discussion
Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
Hosting Controller contains an error that allows an authenticated user to escalate privileges.
Attackers can exploit this issue to gain web administrative privileges.
Hosting Controller contains an error that allows an authenticated user to escalate privileges.
Attackers can exploit this issue to gain web administrative privileges.
Exploit / POC
Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
Attackers can exploit this issue through a web client.
The following proof of concept is available:
Attackers can exploit this issue through a web client.
The following proof of concept is available:
Solution / Fix
Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
Solution:
The vendor has released a hotfix that eliminates this vulnerability.
Solution:
The vendor has released a hotfix that eliminates this vulnerability.
References
Hosting Controller Addreseller.ASP Privilege Escalation Vulnerability
References:
References:
- Hosting Controller Homepage (Hosting Controller)
- Hotfix 3.2 Release Notes (Hosting Controller)
- HostingController: An attacker can gain reseller privileges and after that can g ([email protected])