full-disclosure - DDIVRT-2009-25 IPsession SQL Injection Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAC55533D7413142AF4351CD00FE250D3D7A1E@hypercom.defense.local>
Date: Thu, 21 May 2009 10:16:32 -0500
From: "DDI_Vulnerability_Alert" <DDI.VulnerabilityAlert@...frontline.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: DDIVRT-2009-25 IPsession SQL Injection
	Vulnerability

Title

-----

DDIVRT-2009-25 IPsession SQL Injection Vulnerability

Severity

--------

Medium

Date Discovered

---------------

March 31, 2009

Discovered By

-------------

Digital Defense, Inc. Vulnerability Research Team

Credit: David Marshall and r@...$

Vulnerability Description

-------------------------

IPsession runs a web interface on port 8090 that requires valid login
credentials.  This interface uses user supplied input to form a database
query and is vulnerable to SQL injection.  This may be used to bypass
authentication.

Solution Description

--------------------

Limit access to the login page to internal networks and trusted users
only.

Tested Systems / Software (with versions)

------------------------------------------

Unknown version on Windows 2003

Vendor Contact

--------------

Name: IPcelerate

Website: http://www.ipcelerate.com/ipsession.html

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/