filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virobot | Hauri | 2.0_2005-08-17 (including) | 2.0_2005-08-17 (including) |
References
- http://secunia.com/advisories/18974
- http://securitytracker.com/id?1015658
- http://www.securityfocus.com/archive/1/425788/100/0/threaded
- http://www.securityfocus.com/bid/16768
- http://www.vupen.com/english/advisories/2006/0691
- http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24850
- http://secunia.com/advisories/18974
- http://securitytracker.com/id?1015658
- http://www.securityfocus.com/archive/1/425788/100/0/threaded
- http://www.securityfocus.com/bid/16768
- http://www.vupen.com/english/advisories/2006/0691
- http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24850