PT-2006-1634 · Phpstatus · Phpstatus

Aliaksandr Hartsuyeu · Published 2006-02-07 · Updated 2018-10-19 · CVE-2006-0572

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpstatus version 1.0

Description The issue allows remote attackers to bypass authentication due to the lack of password requirement when using cookies to identify a user.

Recommendations For phpstatus version 1.0, consider implementing password requirements for cookie-based user identification as a mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0572

Affected Products

Phpstatus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0572 · Security Note
• http://evuln.com/vulns/61/summary.html · Vendor Advisory
• http://securityreason.com/securityalert/427 · Note
• http://securityfocus.com/archive/1/424842/100/0/threaded · Note
• http://secunia.com/advisories/18791 · Note
• http://securityfocus.com/bid/16587 · Note