McAfee Firewall Reporter 'GernalUtilities.pm' Authentication Bypass Vulnerability

Bugtraq ID:	47306
Class:	Input Validation Error
CVE:	CVE-2011-5100
Remote:	Yes
Local:	No
Published:	Apr 11 2011 12:00AM
Updated:	Aug 23 2012 06:20PM
Credit:	Andrea Micatizzi (rgod)
Vulnerable:	McAfee Firewall Reporter 5.1.0.6
Not Vulnerable:	McAfee Firewall Reporter 5.1.0.13

McAfee Firewall Reporter 'GernalUtilities.pm' Authentication Bypass Vulnerability

McAfee Firewall Reporter is prone to an authentication-bypass vulnerability.

Successfully exploiting this issue will allow attackers to point the 'cgisess' cookie value to an arbitrary file that exists on the server, bypassing certain security restrictions.

This issue may allow websites to bypass certain security restrictions and gain access to potentially sensitive information.

This issue was introduced in McAfee Firewall Reporter 5.1.0.6

McAfee Firewall Reporter 'GernalUtilities.pm' Authentication Bypass Vulnerability

An attacker can exploit this issue through a browser.

McAfee Firewall Reporter 'GernalUtilities.pm' Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

McAfee Firewall Reporter 'GernalUtilities.pm' Authentication Bypass Vulnerability

References:

• McAfee Homepage (McAfee)
  
• Re: ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm isValidClient Auth ([email protected])
  
• ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm ([email protected])
  
• Security Bulletin - McAfee Firewall Reporter update fixes authentication bypass (McAfee)