Megalith Authentication Security Bypass Vulnerability

Bugtraq ID:	49533
Class:	Access Validation Error
CVE:	CVE-2011-2671
Remote:	Yes
Local:	No
Published:	Sep 08 2011 12:00AM
Updated:	Sep 08 2011 12:00AM
Credit:	Dr. Chuan Guanglunshan
Vulnerable:	Megalith Megalith 0
Not Vulnerable:

Megalith Authentication Security Bypass Vulnerability

Megalith is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.

Attackers can exploit this issue to bypass authentication to gain administrative privileges ; this may aid in launching further attacks.

Megalith Authentication Security Bypass Vulnerability

Attackers can use a Web browser or readily available tools to exploit this issue.

Megalith Authentication Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

Megalith Authentication Security Bypass Vulnerability

References:

• administrative login bypass vulnerability in earlier versions Megalith No. 27 (Megalith)
  
• JVNDB-2011-000073 :Megalith authentication bypass vulnerability ( IPA)
  
• Megalith authentication bypass vulnerability (JPCERT / CC and IPA)
  
• Product Homepage (Megalith)