TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability

Bugtraq ID:	36736
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 20 2009 12:00AM
Updated:	Oct 20 2009 04:48PM
Credit:	Wolo Wolski
Vulnerable:	Typo3 freeCap CAPTCHA 1.2.1
Not Vulnerable:	Typo3 freeCap CAPTCHA 1.2.2

TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability

The 'freeCap CAPTCHA' module (sr_freecap) for TYPO3 is prone to an unspecified unauthorized-access vulnerability.

Exploiting this issue could allow attackers to gain unauthorized access to the affected application.

Versions prior to freeCap CAPTCHA 1.2.2. are vulnerable.

TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references for details.

TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability

References:

• Title freeCap CAPTCHA Extension key ( sr_freecap ) 1.2.2 (TYPO3)
  
• TYPO3 Collective Security Bulletin TYPO3-SA-2009-14: Several vulnerabilities in (TYPO3)