kv Poll Cookie Security Bypass Vulnerability

Bugtraq ID:	4736
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 14 2002 12:00AM
Updated:	May 14 2002 12:00AM
Credit:	Discovered by frog frog <[email protected]>.
Vulnerable:	KillerVault kv Poll 1.1
Not Vulnerable:

kv Poll Cookie Security Bypass Vulnerability

kv Poll is a web based poll script maintained by KillerVault.

A user may modify cookie data in order to vote more than once. The cookie is designed as a security measure for kv Poll voting poll information. As a result, the poll data could be corrupted by a malicious user.

kv Poll Cookie Security Bypass Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

kv Poll Cookie Security Bypass Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

kv Poll Cookie Security Bypass Vulnerability

References:

• kv Poll Homepage (KillerVault)
  
• Security holes : Pseudo-Frame, PG, KvPoll, Phorum, BanMat (frog frog )