Noah Grey Greymatter IE Bookmarklet Account Compromise Vulnerability

Bugtraq ID:	4169
Class:	Race Condition Error
CVE:	CVE-2002-0324
Remote:	Yes
Local:	No
Published:	Feb 10 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	Published on www.dangerousmonkey.com.
Vulnerable:	Noah Grey Greymatter 1.21 b Noah Grey Greymatter 1.21 a Noah Grey Greymatter 1.21 Noah Grey Greymatter 1.2
Not Vulnerable:	Noah Grey Greymatter 1.1 b

Noah Grey Greymatter IE Bookmarklet Account Compromise Vulnerability

Greymatter is a web based log and journal maintenance system. It is written in Perl as a collection of CGI scripts, and should work under Linux and most other Unix platforms.

When the Greymatter 'bookmarklet' feature is enabled by a user, a Windows registry file is created. This file has a name of the form 'gmrightclick-n.reg', where n is a six digit decimal number. This file is world readable, and includes the author's username and password.

This file is deleted when Greymatter page navigation is used after the feature is enabled.

Noah Grey Greymatter IE Bookmarklet Account Compromise Vulnerability

No exploit is required.

Noah Grey Greymatter IE Bookmarklet Account Compromise Vulnerability

References:

• dangerous data - 02/10/2002: "" (www.dangerousmonkey.com)
  
• Greymatter Product Homepage (Noah Grey)