PT-2006-1507 · Text Rider · Text Rider

Aliaksandr Hartsuyeu · Publicado 2006-01-26 · Atualizado 2018-10-19 · CVE-2006-0440

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Text Rider version 2.4

Description The issue allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password, then including the hash in a cookie.

Recommendations For Text Rider version 2.4, consider disabling the authentication bypass functionality until a patch is available. Restrict access to file upload features to minimize the risk of exploitation. Avoid using the MD5 hash of the password in cookies until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0440

Produtos afetados

Text Rider

Referências · 4

• 🔥 http://evuln.com/vulns/46/summary.html · Exploit
• http://securitytracker.com/id?1015533 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0440 · Nota de Segurança
• http://securityfocus.com/archive/1/423130/100/0/threaded · Nota