Adam Patterson Addess Book Multiple Script Authentication Bypass Vulnerability

Bugtraq ID:	34652
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 21 2009 12:00AM
Updated:	Apr 23 2009 06:06PM
Credit:	ThE g0bL!N
Vulnerable:	Adam Patterson Address Book 2.5
Not Vulnerable:

Adam Patterson Addess Book Multiple Script Authentication Bypass Vulnerability

Adam Patterson Address Book is prone to a vulnerability that allows an attacker to bypass authentication and gain unauthorized access to the affected application.

Attackers may exploit this issue to connect to the application without proper authentication, which may lead to a compromise of the application or may aid in further attacks.

Address Book 2.5 is vulnerable; other versions may also be affected.

Adam Patterson Addess Book Multiple Script Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/addressbook/home.php

Adam Patterson Addess Book Multiple Script Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adam Patterson Addess Book Multiple Script Authentication Bypass Vulnerability

References:

• Address Book Homepage (Adam Patterson)