RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
BID:28792
Info
RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
| Bugtraq ID: | 28792 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 15 2008 12:00AM |
| Updated: | May 24 2008 07:04PM |
| Credit: | HouSSaMix |
| Vulnerable: |
BosDev BosNews 4.0 BosDev BosNews 2006 BosDev BosNews 2002 |
| Not Vulnerable: | |
Discussion
RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
BosDev BosNews is prone to an authentication-bypass vulnerability because it fails to restrict access to certain scripts.
Attackers can leverage this issue to create arbitrary administrative user accounts and gain unauthorized access to the application. Successful attacks will compromise the application and possibly the underlying webserver.
BosNews 4.0 and 2002 through 2006 are vulnerable; other versions may also be affected.
RETIRED: This BID is being retired because the vendor states that only guest user accounts can be created in the described manner.
BosDev BosNews is prone to an authentication-bypass vulnerability because it fails to restrict access to certain scripts.
Attackers can leverage this issue to create arbitrary administrative user accounts and gain unauthorized access to the application. Successful attacks will compromise the application and possibly the underlying webserver.
BosNews 4.0 and 2002 through 2006 are vulnerable; other versions may also be affected.
RETIRED: This BID is being retired because the vendor states that only guest user accounts can be created in the described manner.
Exploit / POC
RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
Attackers can leverage this issue using a browser.
The following example URIs are available:
http://www.example.com/path/admin/index.php?action=create
http://www.example.com/path/admin/index.php?action=create_account
Attackers can leverage this issue using a browser.
The following example URIs are available:
http://www.example.com/path/admin/index.php?action=create
http://www.example.com/path/admin/index.php?action=create_account
Solution / Fix
RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: BosDev BosNews '/admin/index.php' Authentication Bypass Vulnerability
References:
References: