OSVDB ID: 15787

Title: ACS Blog inc_login_check.asp Cookie Modification Admin Privilege Escalation

Info

Disclosure
Apr 23, 2005

Discovery
Unknown

Dates

Exploit
Apr 23, 2005

Solution
Unknown

Description

 ACS Blog contains a flaw that may allow a remote attacker to gain access to unauthorized privileges. The issue is triggered when sending a specially crafted cookie to the "inc_login_check.asp" script, which may allow a remote attacker to gain access to administrative privileges, resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Exploit: Exploit Public
OSVDB: Web Related

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

ASPPress

ACS Blog

 1.1.3
1.1.2
1.1
1.0.x
0.8

References

Credit
  • farhad koosha - farhadkeyyahoo.com -


Direct URL: http://osvdb.org/15787