bugtraq - Re: PHPXMAIL - Authentication Bypass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 6 Jul 2005 14:04:10 -0600
From: security@...efoot.com
To: bugtraq@...urityfocus.com
Cc: Steve <steve01@...llo.at>
Subject: Re: PHPXMAIL - Authentication Bypass


Hi Steve

On Wednesday 06 July 2005 11:57, Steve <St> wrote:
> Author:  	Stefan Lochbihler
> Date:    	6. Juli 2005
> Affected 	Software: PHPXMAIL
> Software 	Version: 0.7 -> 1.1
> Software 	URL: http://phpxmail.sourceforge.net/
> Attack:  	Authentication Bypass

[...details snipped...]

> The problem occurs when we try to log in with an overlong password 
> because we get no response message from the server and the function dont
> exit.
>
> Now when we login with a username like postmaster@...alhost and an
> overlong password
> we bypass the error handler and successfully log in.

[...]

> Solution: Maybe insert a maxsize tag to the passwords input field.
>
>
>
> Discovered by Steve

Erm... a maxsize tag will not prevent the attack at all.

J

-- 
There is no such thing as fortune.  Try again.