[39566] in bugtraq
Re: SiteMinder Multiple Vulnerabilities
daemon@ATHENA.MIT.EDU (Tero =?ISO-8859-1?Q?H=E4nninen?=)
Mon Jul 11 15:21:57 2005
From: Tero =?ISO-8859-1?Q?H=E4nninen?= <tero@betabyte.net>
Reply-To: tero@betabyte.net
To: bugtraq@securityfocus.com
In-Reply-To: <20050708140311.20979.qmail@securityfocus.com>
Content-Type: text/plain; charset=ISO-8859-15
Date: Mon, 11 Jul 2005 19:26:12 +0200
Message-Id: <1121102772.7471.9.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
On Fri, 2005-07-08 at 14:03 +0000, c0ntexb@gmail.com wrote:
> /*
> *****************************************************************************************************************
> $ An open security advisory #10 - Siteminder v5.5 Vulnerabilities
> *****************************************************************************************************************
> 1: Bug Researcher: c0ntex - c0ntexb[at]gmail.com
> 2: Bug Released: July 08 2005
> 3: Bug Impact Rate: Medium / Hi
> 4: Bug Scope Rate: Remote
> *****************************************************************************************************************
> $ This advisory and/or proof of concept code must not be used for commercial gain.
> *****************************************************************************************************************
What patch level did you research this on? I've tested with 5QMR7 HF-08 and it doesn't seem to be
working.
Similar (the same?) vulnerability was reported on 17th of January by
Marc Ruef (http://www.securityfocus.com/archive/1/387569) and has been
fixed by Netegrity/CA some time ago in the 5QMR7 agents (HF-06 if I
recall correctly).
Best Regards,
Tero Hänninen
--
Tero Hänninen | tero@betabyte.net | http://www.betabyte.net/ |
Overflow error in /dev/null
