[SA20596] TWiki Registration Account Override Vulnerability

Les derniers commentaires publiés sur SecuObs (1-5):

- Researchers unite to distribute quantum keys - Apple patching serious SMS vulnerability on iPhone - CERT Resiliency Management Model v1.0 Released - ESRT @milw0rm Apple Safari 4x JavaScript Reload Remote Crash Exploit - ESRT @packet_storm Oracle 10g SYSLTCOMPRESSWORKSPACETREE SQL Injection Les derniers commentaires publiés sur SecuObs (6-25) Tous les commentaires publiés sur SecuObs avant les 5 derniers

[Message Precedent sur la mailing][Message Suivant sur la mailing][Precedent dans le fil][Prochain dans le fil][Index par Date][Index par fil] [SA20596] TWiki Registration Account Override Vulnerability

Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports.

link://[click]

TITLE: TWiki Registration Account Override Vulnerability

SECUNIA ADVISORY ID: SA20596

VERIFY ADVISORY: link://[click]

CRITICAL: Moderately critical

IMPACT: Security Bypass, Privilege escalation

WHERE: From remote SOFTWARE: TWiki link://[click]

DESCRIPTION: A vulnerability has been reported in TWiki, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an error in the registration process. This can be exploited to register as an already registered user by changing the action attribute of the form element to the Sandbox web.

Successful exploitation allows a malicious person to gain the privileges of an already registered user (e.g. a user with TWikiAdminGroup privileges), but requires that the "MapUserToWikiName" setting is enabled.

The vulnerability has been reported in the following releases: * TWikiRelease04x00x02 * TWikiRelease04x00x01 * TWikiRelease04x00x00 SOLUTION: Apply patch (see original advisory).

PROVIDED AND/OR DISCOVERED BY: The vendor credits Harald Jörg.

ORIGINAL ADVISORY: link://[click]

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: link://[click]

Definitions: (Criticality, Where etc.) link://[click]

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Precedent par Date: [SA20750] Debian update for horde2
Suivant par Date: [SA20745] Mambo "Name" SQL Injection Vulnerability
Precedent par fil : [SA20750] Debian update for horde2
Suivant par fil : [SA20745] Mambo "Name" SQL Injection Vulnerability
Index(s):
- Date
- Fil

Archives de la liste de diffusion Secunia
Archives de la liste de diffusion BugTraq
Archives de la liste de diffusion DailyDave
Archives de la liste de diffusion FunSec
Archives de la liste de diffusion Full Disclosure
Archives de la liste de diffusion Focus-IDS (FD)
Archives de la liste de diffusion Webappsec (FD)
Archives de la liste de diffusion Security-basics (FD)
Archives de la liste de diffusion Vulndiscuss
Archives de la liste de diffusion Vulnwatch

Les derniers commentaires publiés sur SecuObs (6-25):

- ESRT @devilok - Unsung tools - Raptor forensics livecd - Bluetooth 3.0 + HS : Compromising Your Security at 24 Mbps - SparkFun Electronics - Open source hardware kits - Stealthy Click Fraud Tool Exploits 9ball Attack - Getting the EXE out of the RTF - Calcul on encrypted data possible without decrypting, says IBM - ESRT @phenrycissp Live View 0.7b to run forensic dd images in VMware - ESRT @Infosanity kismet2gmapstatic PoC tool released - Vidéo : Encrypt your entire hard drive ! Hak5 - Linux exploit : Even when one byte matters - Apache mod_negotiation exploit - New Tool: ProcDump v1.0, Updates: Autoruns v9.51, VMMap v2.1, PsExec v1.96 - New Attack on AES - MD6 Withdrawn from SHA-3 Competition - RIAA Victory Over Usenet.com In Copyright Case - Torrentreactor Website compromised - 3 Web Application Firewall Advisories and Whitepaper Published - Event IDs for Windows Server 2008 and Vista Revealed - Mozilla Content Security Policy - ESRT @bearo80 IBM homomorphic encryption scheme for cloud security and spam filt Les cinq derniers commentaires publiés sur SecuObs Tous les commentaires publiés sur SecuObs avant les 25 derniers

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / WEP aircrack + Ubiquiti (MadWifi) 300 mW + Yagi / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, windows, exploit, microsoft, réseau, attaque, vulnérabilité, système, audit, outil, virus, internet, données, linux, présentation, bluetooth, vista, metasploit, protocol, shell, scanner, réseaux, trames, téléphone, paquet, wishmaster, rootkit, engineering, sysun, https, black, mobile, noyau, téléphones, conférence, mémoire, source, scapy, google, reverse, détection, malveillant, snort, sécurise, patch + de mots clés avec l'annuaire des articles publiés sur SecuObs

Archives Failles Secunia :

- SA35655 SUSE update for acroread - SA35673 AudioPLUS Playlist Processing Buffer Overflow Vulnerability - SA35656 Ubuntu update for linux and linux-source-2.6.15 - SA35681 Drupal Multiple Vulnerabilities - SA35644 HP-UX NFS/ONCplus Denial of Service Vulnerability + d'archives failles avec Secunia et SecuMail

Archives Mailing Full Disclosure :

- Full-disclosure Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products - Full-disclosure Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability - Full-disclosure Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability - Full-disclosure Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability - Full-disclosure GLSA 200907-02 ModSecurity: Denial of Service + d'archives Full Disclosure avec SecuMail

Archives Mailing Bugtraq :

- Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products - Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability - Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability - Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability - Multiple Flaws in Axesstel MV 410R - GLSA 200907-02 ModSecurity: Denial of Service + d'archives Bugtraq avec SecuMail

Mini-Tagwall de l'annuaire video :

virus, spyware, vmware, firmware, security, malware, lockpicking, biometric, kernel, iphone, windows, adware, password, wimax, botnet, tutorial, phish, linux, symantec, rootkit, knoppix, metasploit, network, attack, server, virtual, internet, jailbreak, notacon, conference, exploit, google, wireshark, hacker, backtrack, defcon, openbsd, intel, ettercap, firewall, source, samsung, reprap, wireless, norton + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, vulnérabilité, windows, vulnerability, network, attack, google, hacker, exploit, inject, internet, remote, server, mobile, malware, apple, iphone, black, patch, sécurité, virus, linux, ebook, conficker, crypt, source, intel, virtual, facebook, access, trojan, twitter, research, firefox, overflow, pirate, phish, vista, cisco, obama, office, local, opera, adobe + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, cisco, linux, defcon, firewall, vmware, metasploit, attack, server, phish, network, twitter, windows, exploit, nessus, botnet, inject, backtrack, wireshark, crypt, vulnerabi, python, acking, black, iphone, source, engineering, google, social, pentest, clouds, conficker, vulnerability, patch, podcast, juniper, hacker, apple, virus, proxy, client, virtual, apache, javascript, complianc + de mots clés avec l'annuaire de la revue Twitter