SurfControl SuperScout Email Filter User Credential Disclosure Vulnerability

Bugtraq ID:	5929
Class:	Design Error
CVE:	CVE-2002-1530
Remote:	Yes
Local:	No
Published:	Oct 08 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery of this issue is credited to "'ken'@FTU" <[email protected]>.
Vulnerable:	SurfControl SuperScout Email Filter for SMTP 4.0 SurfControl SuperScout Email Filter 3.5.1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows NT 4.0 SP6a SurfControl SuperScout Email Filter 3.5
Not Vulnerable:

SurfControl SuperScout Email Filter User Credential Disclosure Vulnerability

SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.

One of the files (userlist.asp) that comes with the web interface contains a listing of administrative usernames/passwords. Users who can access this file will gain access to authentication credentials for other users.

SurfControl SuperScout Email Filter User Credential Disclosure Vulnerability

This issue may be exploited with a web browser. The following example was submitted:

http://www.example.com/web/usermgr/userlist.asp

SurfControl SuperScout Email Filter User Credential Disclosure Vulnerability

Solution:
The vendor has reportedly released a fix. Affected users should contact the vendor about obtaining fixes.

SurfControl SuperScout Email Filter User Credential Disclosure Vulnerability

References:

• SurfControl Home Page (SurfControl)