Ultimate PHP Board Encrypted Password Disclosure Vulnerability
BID:4602
Info
Ultimate PHP Board Encrypted Password Disclosure Vulnerability
| Bugtraq ID: | 4602 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 25 2002 12:00AM |
| Updated: | Apr 25 2002 12:00AM |
| Credit: | Discovery of this issue is credited to frog frog <[email protected]>. |
| Vulnerable: |
X-Crew Ultimate PHP Board 1.0 Beta |
| Not Vulnerable: |
X-Crew Ultimate PHP Board 1.1 |
Discussion
Ultimate PHP Board Encrypted Password Disclosure Vulnerability
Ultimate PHP Board (UPB) is web forum software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.
Encrypted UPB user passwords are included in files which may be accessible to a malicious user. The malicious user may construct a cookie using the encrypted password of a registered UPB user and gain access to their account.
UPB cookie data is constructed using the following format:
ID + 'þ' + 'Xb' + 'encrypted user password'
Ultimate PHP Board (UPB) is web forum software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.
Encrypted UPB user passwords are included in files which may be accessible to a malicious user. The malicious user may construct a cookie using the encrypted password of a registered UPB user and gain access to their account.
UPB cookie data is constructed using the following format:
ID + 'þ' + 'Xb' + 'encrypted user password'
Exploit / POC
Ultimate PHP Board Encrypted Password Disclosure Vulnerability
This issue may be exploited using a web browser.
This issue may be exploited using a web browser.
References
Ultimate PHP Board Encrypted Password Disclosure Vulnerability
References:
References:
- Security holes : Ultimate PHP Board (frog frog
- X-Crew Homepage (X-Crew)