Secure Authentication Bypass Vulnerability

Bugtraq ID:	4621
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 17 2002 12:00AM
Updated:	Apr 17 2002 12:00AM
Credit:	Discovery of this issue is credited to frog frog <[email protected]>.
Vulnerable:	Ludovic STIOT Secure 17/09/2001 - Apache Apache 1.3.24 - Apache Apache 1.3.24 - Apache Apache 1.3.23 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.19
Not Vulnerable:

Secure Authentication Bypass Vulnerability

Secure is a simple script for adding authentication to any website. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

Attackers may send a specially crafted cookie to the Secure script to bypass authentication for a webpage it is protecting.

Secure Authentication Bypass Vulnerability

The attacker must construct and send a cookie to the webpage protected by Secure. The cookie must contain the following data:

"secure_site, ok"

Secure Authentication Bypass Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Secure Authentication Bypass Vulnerability

References:

• Secure Homepage (php.doudou.net)
  
• Security holes in 11 products... (frog frog )