TCPDB 'user/index.php' Authentication Bypass Vulnerability
BID:34866
Info
TCPDB 'user/index.php' Authentication Bypass Vulnerability
| Bugtraq ID: | 34866 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-1670 |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2009 12:00AM |
| Updated: | May 25 2009 07:40PM |
| Credit: | Mr.tro0oqy |
| Vulnerable: |
TCPDB TCPDB 3.8 |
| Not Vulnerable: | |
Discussion
TCPDB 'user/index.php' Authentication Bypass Vulnerability
TCPDB is prone to a vulnerability that lets an attacker add an administrative user because it fails to adequately secure access to administrative functionality.
This may allow the attacker to compromise the application and the computer; other attacks are also possible.
TCPDB 3.8 is vulnerable; other versions may also be affected.
TCPDB is prone to a vulnerability that lets an attacker add an administrative user because it fails to adequately secure access to administrative functionality.
This may allow the attacker to compromise the application and the computer; other attacks are also possible.
TCPDB 3.8 is vulnerable; other versions may also be affected.
Exploit / POC
TCPDB 'user/index.php' Authentication Bypass Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
TCPDB 'user/index.php' Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].