NuSOAP 'cURL' API Security Bypass Vulnerability
BID:57053
Info
NuSOAP 'cURL' API Security Bypass Vulnerability
| Bugtraq ID: | 57053 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 26 2012 12:00AM |
| Updated: | Dec 26 2012 12:00AM |
| Credit: | Alessandro Ghedini |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
NuSOAP 'cURL' API Security Bypass Vulnerability
NuSOAP is prone to a security-bypass vulnerability because it uses the 'cURL' API in an insecure way.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
NuSOAP is prone to a security-bypass vulnerability because it uses the 'cURL' API in an insecure way.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Exploit / POC
NuSOAP 'cURL' API Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
NuSOAP 'cURL' API Security Bypass Vulnerability
Solution:
A vendor patch is available. Please see the references for more information.
Solution:
A vendor patch is available. Please see the references for more information.