Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
BID:63486
Info
Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
| Bugtraq ID: | 63486 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2013 12:00AM |
| Updated: | Nov 01 2013 12:00AM |
| Credit: | SteveTalbot |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
Zend Framework is prone to multiple security vulnerabilities that may allow attackers to spoof IP address.
An attacker can exploit these issues to spoof an IP address which may lead to a false sense of trust, allowing the attacker to perform malicious activities. Other attacks may also be possible.
Versions prior to Zend Framework 2.2.5 are vulnerable.
Zend Framework is prone to multiple security vulnerabilities that may allow attackers to spoof IP address.
An attacker can exploit these issues to spoof an IP address which may lead to a false sense of trust, allowing the attacker to perform malicious activities. Other attacks may also be possible.
Versions prior to Zend Framework 2.2.5 are vulnerable.
Exploit / POC
Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
An attacker can exploit these issues using a web browser.
An attacker can exploit these issues using a web browser.
Solution / Fix
Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Zend Framework IP Address Spoofing Multiple Security Vulnerabilities
References:
References: