Signature Detail
Short Name |
HTTP:PHP:427BB-AUTH-BYPASS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
427BB Authentication Bypass |
Release Date |
2013/04/23 |
Update Number |
2256 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: 427BB Authentication Bypass
This signature detects attempts to exploit a known flaw against 427BB bulletin board system. A successful attack can lead to bypass the authentication mechanism and gain access to the affected application as an administrative user.
Extended Description
427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authentication mechanism and gain access to the affected application as an administrative user. This may facilitate a compromise of the underlying system; other attacks are also possible. This issue affects version 2.2 and 2.2.1; other versions may also be vulnerable.
Affected Products
- 427BB fourtwosevenbb 2.2.0
- 427BB fourtwosevenbb 2.2.1
References
- BugTraq: 16178
- CVE: CVE-2006-0153