Re-Boot Design ASP Forum SQL Injection Flaw Yields Remote Access to Any User Account
|
|
SecurityTracker Alert ID: 1007804 |
|
SecurityTracker URL: http://securitytracker.com/id/1007804
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Sep 24 2003
|
Impact:
User access via network
|
Exploit Included: Yes
|
Version(s): 1.01
|
Description:
A vulnerability was reported in Re-Boot Design's ASP Forum. A remote user can inject SQL commands to gain access to accounts on the application.
It is reported that the software does not properly validate user-supplied input. A remote user can supply the following string as a password to login to any user account:
'or''='
|
Impact:
A remote user can inject SQL commands to gain access to a specified target user's account.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.re-bootd.com/ (Links to External Site)
|
Cause:
Authentication error, Input validation error
|
Underlying OS:
Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: 24 Sep 2003 21:05:51 -0000
Subject: Re-Boot Design ASP Forum SQL injection Vulnerability
|
Re-Boot Design ASP Forum SQL injection Vulnerability
Published: 24 September 2003
Released: 24 September 2003
Affected Systems: Re-Boot Design ASP Forum Version 1.01
Vendor: http://www.re-bootd.com
Issue: attackers can access users accounts without them knowing their passwords.
Description:
============
"This is a complete, standalone forum that can be run on a server using IIS for web services. It has been fully tested on a Windows
2000 Server machine using IIS5. It is complete with user registration, administration, latest posts."
Details:
========
It's possibile to access users accounts without them knowing their passwords.
by using this code: 'or''=' as a password it possiblie to access any user account.
Discovered by / credit:
=======================
Bahaa Naamneh
b_naamneh@hotmail.com
http://www.bsecurity.tk
|
|
