COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
BID:3373
Info
COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
| Bugtraq ID: | 3373 |
| Class: | Design Error |
| CVE: |
CVE-2001-1254 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 27 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | This vulnerability was submitted to BugTraq on September 27th, 2001 by Clint Byrum <[email protected]>. |
| Vulnerable: |
COM2001 Alexis Server 2.1 COM2001 Alexis Server 2.0 |
| Not Vulnerable: |
COM2001 Alexis Server 1.1 |
Discussion
COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
COM2001 Alexis Server is commercial voicemail/internet-based PBX management software for Microsoft Windows NT/2000 and Exchange systems.
The Web Access component in Alexis Server transmits usernames/passwords in plaintext. Alexis Server v2.1 has the option to secure transmissions using SSL. However, as a side effect the Web Access toolbar opens a java applet which sends the username/password back to the server.
If the transmitted information is sniffed at this point then the username/password will be disclosed to the attacker.
It should be noted that Alexis Server 1.1 is not prone to this issue. Alexis Server 2.0 should be considered extra vulnerable as it does not include the option to use SSL to secure communications.
Sucessful exploitation of this issue will allow a remote attacker to gain unauthorized access to voicemail and PBX services.
COM2001 Alexis Server is commercial voicemail/internet-based PBX management software for Microsoft Windows NT/2000 and Exchange systems.
The Web Access component in Alexis Server transmits usernames/passwords in plaintext. Alexis Server v2.1 has the option to secure transmissions using SSL. However, as a side effect the Web Access toolbar opens a java applet which sends the username/password back to the server.
If the transmitted information is sniffed at this point then the username/password will be disclosed to the attacker.
It should be noted that Alexis Server 1.1 is not prone to this issue. Alexis Server 2.0 should be considered extra vulnerable as it does not include the option to use SSL to secure communications.
Sucessful exploitation of this issue will allow a remote attacker to gain unauthorized access to voicemail and PBX services.
Exploit / POC
COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
No exploit is required.
No exploit is required.
Solution / Fix
COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
Solution:
The vendor is aware of this issue and will release a fix in an upcoming service pack.
Solution:
The vendor is aware of this issue and will release a fix in an upcoming service pack.
References
COM2001 Alexis Server Web Access Plaintext Password Vulnerabilty
References:
References:
- Alexis Homepage (COM2001)