Full Disclosure mailing list archives
Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack
From: "CIRT Advisory" <advisory () cirt dk>
Date: Thu, 13 Jan 2005 19:27:19 +0100
The web application are vulnerable to a replay attack, meaning that the username and password are encrypted but there are not used any form of timestamp to make this mechanism more advanced and secure. If it is possible to sniff the traffic when a user login to the administrative interface, it is possible to replay this sequence and get a valid login session, with the rights of the user. Vendors response to this was, it is a feature not a vulnerability and all the others also have this problem. Read the full advisory at http://www.cirt.dk/advisories/cirt-28-advisory.pdf ---------------------------------------------------------------------- Danish Incident Response Team http://www.cirt.dk ----------------------------------------------------------------------
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack CIRT Advisory (Jan 13)