SudBox Boutique Multiple Administrative Scripts Authentication Bypass Vulnerabilities

Bugtraq ID:	28525
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 31 2008 12:00AM
Updated:	Apr 01 2008 12:09AM
Credit:	ZoRLu
Vulnerable:	SudBox SudBox Boutique 1.2
Not Vulnerable:

SudBox Boutique Multiple Administrative Scripts Authentication Bypass Vulnerabilities

SudBox Boutique is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.

An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes to its configuration. This may lead to further attacks.

SudBox Boutique 1.2 is vulnerable; other versions may also be affected.

SudBox Boutique Multiple Administrative Scripts Authentication Bypass Vulnerabilities

An attacker can use a browser to exploit these issues.

SudBox Boutique Multiple Administrative Scripts Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SudBox Boutique Multiple Administrative Scripts Authentication Bypass Vulnerabilities

References:

• Vendor Homepage (SudBox)