lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <201404241124.s3OBOh61029900@sf01web2.securityfocus.com>
Date: Thu, 24 Apr 2014 11:24:43 GMT
From: harun.esur@...ptive.com
To: bugtraq@...urityfocus.com
Subject: Birebin.com Android App SSL certificate validation weakness

Title: Birebin.com Android App SSL certificate validation weakness
Advisory URL:http://sceptive.com/p/birebincom-android-app-ssl-certificate-validation-weakness-

== Overview

Birebin.com is an online betting web-site which also provides Android app. for the members to ease on betting.

We have found that Android app vulnerable to SSL mitm attacks (http://en.wikipedia.org/wiki/Man-in-the-middle_attack) which eventually let attackers to gather user name-password and session hijacking capabilities against app. users.

== Description

On misconfigured network environments it is possible to redirect HTTPS packets over MITM tools for SSL sessions.

When we redirected our network on such a configuration we have observed that app sends/receives user data unecrypted.

REQUEST

{
    "Password": "123456",
    "UserName": "abc@....com"
    }
And also Token value which is used for session awarenes is vulnerable for attackers to use on their own configurations to hijack other users' sessions.

== Affected Version(s)

No verison is given in app. But we provide md5 hash of the vulnerable APK

MD5 (birebin-android-latest.apk) = 60bea6a1694b1ffc87c4dc3f2ba6a8be

== Fixes
No known fixes has been released yet.

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ