PT-2007-5600 · Olate · Olate Download

Publicado 2007-08-18 · Atualizado 2018-10-15 · CVE-2007-4419

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Olate Download (od) version 3.4.1

Description The issue allows remote attackers to more easily guess the authentication cookie, potentially granting access to the Admin area. This is due to the composition of the OD3 AutoLogin authentication cookie using an MD5 hash of the admin username, user id, and group id.

Recommendations For Olate Download (od) version 3.4.1, consider disabling the use of the OD3 AutoLogin authentication cookie until a more secure method is implemented. Restrict access to the Admin area to minimize the risk of exploitation. Avoid using the username, user id, and group id in the composition of the authentication cookie. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-4419

Produtos afetados

Olate Download

Referências · 13

• 🔥 https://exploit-db.com/exploits/30504 · Exploit
• 🔥 http://securityfocus.com/bid/25343 · Exploit
• http://osvdb.org/39714 · Nota
• http://securityreason.com/securityalert/3028 · Nota
• http://sourceforge.net/forum/forum.php?forum_id=727807 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36088 · Nota
• http://secunia.com/advisories/26533 · Nota
• http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4419 · Nota de Segurança
• http://securityfocus.com/archive/1/477223/100/0/threaded · Nota
• http://sourceforge.net/project/shownotes.php?release_id=533628&group_id=188052 · Nota
• http://securityfocus.com/archive/1/476760/100/0/threaded · Nota
• http://sourceforge.net/project/shownotes.php?group_id=188052&release_id=533628 · Nota