CVE

Id
25589  
CVE No.
CVE-2007-2232  
Status
Candidate  
Description
The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR ( ) sequences in the cosign cookie parameter.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255676 25589 CVE-2007-2232 BUGTRAQ:20070411 Cosign SSO Authentication Bypass  View
255677 25589 CVE-2007-2232 URL:http://www.securityfocus.com/archive/1/archive/1/465386/100/100/threaded  View
255678 25589 CVE-2007-2232 CONFIRM:http://www.umich.edu/~umweb/software/cosign/cosign-vuln-2007-001.txt  View
255679 25589 CVE-2007-2232 VUPEN:ADV-2007-1359  View
255680 25589 CVE-2007-2232 URL:http://www.vupen.com/english/advisories/2007/1359  View
255681 25589 CVE-2007-2232 SECUNIA:24845  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56754 JVNDB-2007-005446 PunBB の include/common.php における global パラメータを登録される脆弱性 PunBB の include/common.php は、register_globals の設定をチェックしている際、無効な ini_get 関数を適切に処理しないため、global パラメータを登録される脆弱性が存在します。 CVE-2007-2234 25589 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005446.html  View