base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to yes.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Base | Basic_analysis_and_security_engine | 1.1.2_zora (including) | 1.1.2_zora (including) |
| Base | Basic_analysis_and_security_engine | 1.1.3_lynn (including) | 1.1.3_lynn (including) |
| Base | Basic_analysis_and_security_engine | 1.1.4_cheryl (including) | 1.1.4_cheryl (including) |
| Base | Basic_analysis_and_security_engine | 1.1_elizabeth (including) | 1.1_elizabeth (including) |
| Base | Basic_analysis_and_security_engine | 1.2.1_kris (including) | 1.2.1_kris (including) |
| Base | Basic_analysis_and_security_engine | 1.2.2_cindy (including) | 1.2.2_cindy (including) |
| Base | Basic_analysis_and_security_engine | 1.2_betty (including) | 1.2_betty (including) |
| Acidbase | Ubuntu | dapper | * |
| Acidbase | Ubuntu | devel | * |
| Acidbase | Ubuntu | edgy | * |
| Acidbase | Ubuntu | feisty | * |
| Acidbase | Ubuntu | gutsy | * |
| Acidbase | Ubuntu | hardy | * |
| Acidbase | Ubuntu | intrepid | * |
| Acidbase | Ubuntu | jaunty | * |
| Acidbase | Ubuntu | karmic | * |