PHP Nuke Weak Encryption In User Cookie Vulnerability
BID:3567
Info
PHP Nuke Weak Encryption In User Cookie Vulnerability
| Bugtraq ID: | 3567 |
| Class: | Design Error |
| CVE: |
CVE-2001-0911 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | Posted by Cabezon Aurélien <[email protected]> to the BugTraq mailing list on November 22, 2001. |
| Vulnerable: |
PostNuke Development Team PostNuke 0.64 Francisco Burzi PHP-Nuke 5.3.1 Francisco Burzi PHP-Nuke 5.2 Francisco Burzi PHP-Nuke 5.1 |
| Not Vulnerable: | |
Discussion
PHP Nuke Weak Encryption In User Cookie Vulnerability
PHP-Nuke is a popular web based Portal system. It allows users to create accounts and contribute content to the site.
When a user authenticates to a PHP-Nuke based page, a cookie is created which includes that user's account name and password. This password is encoded using Base 64 encoding, and can be immediately decoded by anyone with access to the cookies contents. This, an attacker able to gain access to this cookie may trivially learn the user's account name and password, and compromise that account.
Older versions of PHP-Nuke may also be vulnerable. PostNuke 0.6.4(and possibly earlier versions) is also vulnerable.
PHP-Nuke is a popular web based Portal system. It allows users to create accounts and contribute content to the site.
When a user authenticates to a PHP-Nuke based page, a cookie is created which includes that user's account name and password. This password is encoded using Base 64 encoding, and can be immediately decoded by anyone with access to the cookies contents. This, an attacker able to gain access to this cookie may trivially learn the user's account name and password, and compromise that account.
Older versions of PHP-Nuke may also be vulnerable. PostNuke 0.6.4(and possibly earlier versions) is also vulnerable.
Solution / Fix
PHP Nuke Weak Encryption In User Cookie Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP Nuke Weak Encryption In User Cookie Vulnerability
References:
References:
- PostNuke Homepage (PostNuke Development Team)