OneOrZero Helpdesk Install.PHP Administrative Access Vulnerability
BID:7611
Info
OneOrZero Helpdesk Install.PHP Administrative Access Vulnerability
| Bugtraq ID: | 7611 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 15 2003 12:00AM |
| Updated: | May 15 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to "Frog Man" <[email protected]>. |
| Vulnerable: |
OneOrZero Helpdesk 1.4 rc4 |
| Not Vulnerable: | |
Discussion
OneOrZero Helpdesk Install.PHP Administrative Access Vulnerability
OneOrZero Helpdesk has been reported prone to an issue that may result in an attacker obtaining unauthorized administrative access.
The issue presents itself due to a programming error in a Helpdesk script.
Reportedly a script does not sufficiently check if an instance of OneOrZero Helpdesk has already been installed.
OneOrZero Helpdesk has been reported prone to an issue that may result in an attacker obtaining unauthorized administrative access.
The issue presents itself due to a programming error in a Helpdesk script.
Reportedly a script does not sufficiently check if an instance of OneOrZero Helpdesk has already been installed.
Exploit / POC
Solution / Fix
OneOrZero Helpdesk Install.PHP Administrative Access Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
OneOrZero Helpdesk Install.PHP Administrative Access Vulnerability
References:
References:
- OneOrZero Helpdesk Homepage (OneOrZero)
- OneOrZero Security Problems (PHP) ("Frog Man"