Asp-Nuke Community Cookie Privilege Escalation Vulnerability

Bugtraq ID:	21309
Class:	Design Error
CVE:	CVE-2006-7152
Remote:	Yes
Local:	No
Published:	Nov 27 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Ajann is credited with discovering this issue.
Vulnerable:	ASP-Nuke ASP-Nuke 1.3 ASP-Nuke ASP-Nuke 1.2 ASP-Nuke ASP-Nuke 1.0 ASP-Nuke ASP-Nuke RC3 ASP-Nuke ASP-Nuke RC2 ASP-Nuke ASP-Nuke RC1 ASP-Nuke ASP-Nuke 1.5
Not Vulnerable:

Asp-Nuke Community Cookie Privilege Escalation Vulnerability

Asp-Nuke Community is prone to a privilege-escalation vulnerability due to a design error.

Successful exploits may allow remote authenticated attackers to gain access to the vulnerable application using elevated account privileges.

Asp-Nuke Community 1.5 and prior versions are reported vulnerable.

Asp-Nuke Community Cookie Privilege Escalation Vulnerability

An attacker may exploit this issue through a web browser.

Asp-Nuke Community Cookie Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Asp-Nuke Community Cookie Privilege Escalation Vulnerability

References:

• ASP-Nuke Homepage (ASP-Nuke)