DotNetNuke Multiple Security Bypass Vulnerabilities

Bugtraq ID:	48584
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 06 2011 12:00AM
Updated:	Jul 06 2011 12:00AM
Credit:	Robb Bryn, Simon Meraner and Laurence Neville
Vulnerable:	DotNetNuke DotNetNuke 5.6 DotNetNuke DotNetNuke 5.5.1 DotNetNuke DotNetNuke 5.5 DotNetNuke DotNetNuke 5.4.3 DotNetNuke DotNetNuke 5.4.2 DotNetNuke DotNetNuke 5.4.1 DotNetNuke DotNetNuke 5.4 DotNetNuke DotNetNuke 5.3.1 DotNetNuke DotNetNuke 5.3 DotNetNuke DotNetNuke 5.2.3 DotNetNuke DotNetNuke 5.2 DotNetNuke DotNetNuke 5.1.4 DotNetNuke DotNetNuke 5.1.3 DotNetNuke DotNetNuke 5.1.2 DotNetNuke DotNetNuke 5.1.1 DotNetNuke DotNetNuke 5.1 DotNetNuke DotNetNuke 5.0.1 DotNetNuke DotNetNuke 5.6.1 DotNetNuke DotNetNuke 5.0
Not Vulnerable:	DotNetNuke DotNetNuke 5.6.3

DotNetNuke Multiple Security Bypass Vulnerabilities

DotNetNuke is prone to multiple security-bypass vulnerabilities.

Successfully exploiting these issues will allow attackers to bypass security restrictions and perform unauthorized actions.

Versions prior to DotNetNuke 5.6.3 are vulnerable.

DotNetNuke Multiple Security Bypass Vulnerabilities

Attackers can exploit these issues using a browser.

DotNetNuke Multiple Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

DotNetNuke Multiple Security Bypass Vulnerabilities

References:

• ability to reactivate user profiles of soft-deleted users (DotNetNuke)
  
• DotNetNuke HomePage (DotNetNuke)
  
• Module Permissions Editable by anyone with the URL (DotNetNuke)
  
• remove support for legacy skin/container upload from filemanager (DotNetNuke)
  
• User management mechanisms can be executed by invalid users (DotNetNuke)