dl Download Ticket Service Authentication Bypass Vulnerability

Bugtraq ID:	51347
Class:	Access Validation Error
CVE:	CVE-2011-5253
Remote:	Yes
Local:	No
Published:	Jan 10 2012 12:00AM
Updated:	Jan 16 2013 06:00PM
Credit:	dl Download Ticket Service
Vulnerable:	dl Download Ticket Service dl Download Ticket Service 0.9 dl Download Ticket Service dl Download Ticket Service 0.7 dl Download Ticket Service dl Download Ticket Service 0.6 dl Download Ticket Service dl Download Ticket Service 0.3
Not Vulnerable:	dl Download Ticket Service dl Download Ticket Service 0.9.1

dl Download Ticket Service Authentication Bypass Vulnerability

dl Download Ticket Service is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication process and gain unauthorized access to the affected system.

dl Download Ticket Service 0.3 to 0.9 is vulnerable; other versions may also be affected.

dl Download Ticket Service Authentication Bypass Vulnerability

An attacker can use readily available tools to exploit this issue.

dl Download Ticket Service Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

dl Download Ticket Service Authentication Bypass Vulnerability

References:

• dl Download Ticket Service Change log (dl Download Ticket Service)
  
• dl Download Ticket Service Homepage (dl Download Ticket Service)