Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses

Bugtraq ID:	42526
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 18 2010 12:00AM
Updated:	Aug 18 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Mollify mollify 1.6.5 3 Mollify mollify 1.6.5 2 Mollify mollify 1.6.5 1 Mollify mollify 1.6.5
Not Vulnerable:	Mollify mollify 1.6.5.5

Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses

Mollify is prone to an authentication-bypass vulnerability and multiple information-disclosure weaknesses.

Attackers may exploit these issues to gain unauthorized access to restricted content by bypassing intended security restrictions or to obtain sensitive information that may aid in launching further attacks.

Versions prior to Mollify 1.6.5.5 are vulnerable; other versions may be affected.

Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses

Attackers can exploit these issues by using readily available tools.

Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses

Solution:
The vendor has supplied a fix. Please see the references for more information.

Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses

References:

• ChangeLog - Version 1.6.5.5 (Mollify)
  
• Netautor - Homepage (Netautor)