SiteCubed MailWorks Professional - Authentication Bypass



EKU-ID: 29949 CVE: CVE-2004-1661;OSVDB-9559 OSVDB-ID:
Author: Paul Craig Published: 2004-09-02 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/11095/info

MailWorks Professional is reported prone to an authentication bypass vulnerability.

The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing the web application using specially crafted cookie data is able to bypass the authentication process to access the site as an administrative user.

This vulnerability allows a remote attacker to gain administrative access to the affected application.

Cookie: auth=1; uId=1