Simple Machines Forum PHPSessionID Session Fixation Vulnerability
BID:24482
Info
Simple Machines Forum PHPSessionID Session Fixation Vulnerability
| Bugtraq ID: | 24482 |
| Class: | Design Error |
| CVE: |
CVE-2007-2546 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | David Vieira-Kurz is credited with the discovery of this vulnerability. |
| Vulnerable: |
Simple Machines SMF 1.1.2 |
| Not Vulnerable: |
Simple Machines SMF 1.1.3 |
Discussion
Simple Machines Forum PHPSessionID Session Fixation Vulnerability
Simple Machines Forum is prone to a session-fixation vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
NOTE: This issue can be exploited only if 'session.use_transid' is enabled in the 'php.ini' file.
Simple Machines Forum 1.1.2 is vulnerable; other versions may also be affected.
Simple Machines Forum is prone to a session-fixation vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
NOTE: This issue can be exploited only if 'session.use_transid' is enabled in the 'php.ini' file.
Simple Machines Forum 1.1.2 is vulnerable; other versions may also be affected.
Exploit / POC
Simple Machines Forum PHPSessionID Session Fixation Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI. Then, the attacker can use a browser to gain unauthorized access to a vulnerable application.
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI. Then, the attacker can use a browser to gain unauthorized access to a vulnerable application.
Solution / Fix
Simple Machines Forum PHPSessionID Session Fixation Vulnerability
Solution:
The vendor has released version 1.1.3 to address this issue. Please see the references for more information.
Simple Machines SMF 1.1.2
Solution:
The vendor has released version 1.1.3 to address this issue. Please see the references for more information.
Simple Machines SMF 1.1.2
-
Simple Machines smf_1-1-3_install.tar.gz
http://www.simplemachines.org/download/index.php?thanks;filename=smf_1 -1-3_install.tar.gz
References
Simple Machines Forum PHPSessionID Session Fixation Vulnerability
References:
References: