osCommerce Sage Pay Direct Module SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	57424
Class:	Design Error
CVE:	CVE-2012-5792
Remote:	Yes
Local:	No
Published:	Nov 04 2012 12:00AM
Updated:	Nov 04 2012 12:00AM
Credit:	Reported at the ACM CCS 2012 conference.
Vulnerable:	Sagepay Sage Pay Direct 0
Not Vulnerable:

osCommerce Sage Pay Direct Module SSL Certificate Validation Security Bypass Vulnerability

The Sage Pay Direct module is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from the server.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

osCommerce Sage Pay Direct Module SSL Certificate Validation Security Bypass Vulnerability

An attacker can use readily available network utilities to exploit this issue.

osCommerce Sage Pay Direct Module SSL Certificate Validation Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

osCommerce Sage Pay Direct Module SSL Certificate Validation Security Bypass Vulnerability

References:

• osCommerce Homepage (osCommerce)
  
• Validating SSL Certificates in Non-Browser Software (ACM)