DUware Software Multiple Vulnerabilities

Bugtraq ID:	9462
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 20 2004 12:00AM
Updated:	Jan 20 2004 12:00AM
Credit:	Discovery is credited to Security Corporation.
Vulnerable:	DUware DUportal 3.0 DUWare DUpoll 3.0 DUware DUpics 3.0 DUware DUpaypal 3.0 DUware DUnews 1.0 DUware DUgallery 3.3 DUware DUgallery 3.2 DUware DUgallery 3.1 DUware DUgallery 3.0 DUWare DUforum 3.0 DUware DUfaq 1.0 DUware DUdownload 1.0 DUware DUdirectory 3.0 DUware DUclassmate 1.0 DUware DUclassified 4.1 DUware DUclassified 4.0 DUware DUcalendar 1.1 DUware DUcalendar 1.0 DUware DUarticle 1.0 DUware DUamazon 3.0
Not Vulnerable:	DUWare DUpoll 3.1 DUware DUpics 3.1 DUware DUpaypal 3.1 DUware DUnews 1.1 DUWare DUforum 3.1 DUware DUdownload 1.1 DUware DUdirectory 3.1 DUware DUclassmate 1.1 DUware DUclassified 4.2 DUware DUcalendar 1.1 DUware DUbanner 3.1 DUware DUarticle 1.1 DUware DUamazon 3.1

DUware Software Multiple Vulnerabilities

Solution:
The vendor has issued updates for various to address these issues. Users are advised to contact the vendor to obtain fixes.

DUware Software Multiple Vulnerabilities

References:

• DUware Homepage (DUware)
  
• Security Corporation Security Advisory [SCSA-026] (Security Corporation)
  
• [SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability ([email protected])