full-disclosure - Re: Vulnerabilities in TAK cms

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <w2uf5dc671004081330k8a11ce7z19025d467e5a5e4b@mail.gmail.com>
Date: Thu, 8 Apr 2010 21:30:10 +0100
From: Benji <me@...ji.com>
To: T Biehn <tbiehn@...il.com>
Cc: full-disclosure@...ts.grok.org.uk, MustLive <mustlive@...security.com.ua>
Subject: Re: Vulnerabilities in TAK cms

nah, he'd be telling us how that was an easy way to find valid accounts.

-Benji

On Thu, Apr 8, 2010 at 6:30 PM, T Biehn <tbiehn@...il.com> wrote:

> If there were an account lockout after 5 tries would you be telling us
> about how there was a DOS vector on the same software?
>
> -Travis
>
> On Mon, Apr 5, 2010 at 4:35 PM, MustLive <mustlive@...security.com.ua>
> wrote:
> > Hello Full-Disclosure!
> >
> > I want to warn you about security vulnerabilities in TAK cms. It's
> Ukrainian
> > commercial CMS.
> >
> > -----------------------------
> > Advisory: Vulnerabilities in TAK cms
> > -----------------------------
> > URL: http://websecurity.com.ua/4050/
> > -----------------------------
> > Timeline:
> > 04.02.2009 - found vulnerabilities.
> > 30.09.2009 - informed owners of web sites where I found these
> > vulnerabilities. Taking into account, that I didn't find any contact data
> of
> > developer of TAK cms, then I hope, that owners of that site informed him
> > about these vulnerabilities. This is one of those cases with commercial
> CMS,
> > where developers didn't leave any contact data and there is no
> information
> > about them in Internet.
> > 19.03.2010 - disclosed at my site.
> > -----------------------------
> > Details:
> >
> > These are Insufficient Anti-automation and Brute Force vulnerabilities.
> >
> > Insufficient Anti-automation:
> >
> > http://site/about/contacts/
> > http://site/register/getpassword/
> >
> > At these pages there is not protection from automated requests (captcha).
> >
> > Brute Force:
> >
> > http://site/auth/
> > http://site/admin/
> >
> > In login forms there is no protection from Brute Force attacks.
> >
> > Vulnerable are all versions of TAK cms.
> >
> > Best wishes & regards,
> > MustLive
> > Administrator of Websecurity web site
> > http://websecurity.com.ua
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
>
>
> --
> FD1D E574 6CAB 2FAF 2921  F22E B8B7 9D0D 99FF A73C
> http://pgp.mit.edu:11371/pks/lookup?search=tbiehn&op=index&fingerprint=on
> http://pastebin.com/f6fd606da
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/