From full-disclosure Fri Aug 28 13:44:34 2015 From: Vulnerability Lab Date: Fri, 28 Aug 2015 13:44:34 +0000 To: full-disclosure Subject: [FD] LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability Message-Id: <55E065C2.9010204 () vulnerability-lab ! com> X-MARC-Message: https://marc.info/?l=full-disclosure&m=144076967709925 RG9jdW1lbnQgVGl0bGU6Cj09PT09PT09PT09PT09PQpMaW51eE9wdGljIENNUyAyMDA5IC0gQXV0 aCBCeXBhc3MgU2Vzc2lvbiBWdWxuZXJhYmlsaXR5CgoKUmVmZXJlbmNlcyAoU291cmNlKToKPT09 PT09PT09PT09PT09PT09PT0KaHR0cDovL3d3dy52dWxuZXJhYmlsaXR5LWxhYi5jb20vZ2V0X2Nv bnRlbnQucGhwP2lkPTE1ODUKCgpSZWxlYXNlIERhdGU6Cj09PT09PT09PT09PT0KMjAxNS0wOC0y NgoKClZ1bG5lcmFiaWxpdHkgTGFib3JhdG9yeSBJRCAoVkwtSUQpOgo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KMTU4NQoKCkNvbW1vbiBWdWxuZXJhYmlsaXR5IFNjb3Jpbmcg U3lzdGVtOgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KOC4xCgoKUHJvZHVj dCAmIFNlcnZpY2UgSW50cm9kdWN0aW9uOgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 CkJ5IGVtcGxveWluZyB0aGUgYmVzdCBicmFpbnMgaW4gc29mdHdhcmUgcHJvZ3JhbW1pbmcsIGdy YXBoaWMgZGVzaWduaW5nIGFuZCB3ZWJtYXN0ZXJzIGluIG91ciBmb2xkLCB3ZSBhcmUgdG9kYXkg YWJsZSB0byAKb2ZmZXIgYWxsLWluLWFsbCBzZXJ2aWNlcyBpbiBhcmVhcyBhcyBkaXZlcnNlIGFz OgoKICAgIE9mZnNob3JlIFNvZnR3YXJlIERldmVsb3BtZW50CiAgICBXZWItYmFzZWQgYW5kIHN0 YW5kYWxvbmUgQXBwbGljYXRpb24gRGV2ZWxvcG1lbnQKICAgIFJpY2ggSW50ZXJuZXQgQXBwbGlj YXRpb25zCiAgICBXZWIgRGVzaWduIGFuZCBEZXZlbG9wbWVudAogICAgQ3VzdG9tIFNvZnR3YXJl IFByb2dyYW1taW5nCiAgICBDdXN0b20gYXJ0d29yaywgZ3JhcGhpY3MgYW5kIGxvZ29zIGFuZCBt dWx0aW1lZGlhIGRlc2lnbmluZwogICAgT3BlbiBTb3VyY2UgRGV2ZWxvcG1lbnQgYW5kIFNvbHV0 aW9ucwogICAgSW50ZXJuZXQgTWFya2V0aW5nCgooQ29weSBvZiB0aGUgVmVuZG9yIEhvbWVwYWdl OiBodHRwOi8vd3d3LmxpbnV4b3B0aWMuY29tL2NvbnRlbnQucGhwP3BhZ2U9YWJvdXQgICkKCgpB YnN0cmFjdCBBZHZpc29yeSBJbmZvcm1hdGlvbjoKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09CkFuIGluZGVwZW5kZW50IHZ1bG5lcmFiaWxpdHkgbGFib3JhdG9yeSByZXNlYXJjaGVyIGRp c2NvdmVyZWQgYSBzZXNzaW9uIGF1dGggYnlwYXNzIHZ1bG5lcmFiaWxpdHkgaW4gdGhlIG9mZmlj aWFsIExpbnV4T3B0aWMgMjAwOSBjb250ZW50IG1hbmFnZW1lbnQgc3lzdGVtLgoKClZ1bG5lcmFi aWxpdHkgRGlzY2xvc3VyZSBUaW1lbGluZToKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQoyMDE1LTA4LTI2OiBQdWJsaWMgRGlzY2xvc3VyZSAoVnVsbmVyYWJpbGl0eSBMYWJvcmF0 b3J5KQoKCkRpc2NvdmVyeSBTdGF0dXM6Cj09PT09PT09PT09PT09PT09ClB1Ymxpc2hlZAoKCkV4 cGxvaXRhdGlvbiBUZWNobmlxdWU6Cj09PT09PT09PT09PT09PT09PT09PT09ClJlbW90ZQoKClNl dmVyaXR5IExldmVsOgo9PT09PT09PT09PT09PT0KSGlnaAoKClRlY2huaWNhbCBEZXRhaWxzICYg RGVzY3JpcHRpb246Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09CkFuIGF1dGggYnlw YXNzIHNlc3Npb24gdnVsbmVyYWJpbGl0eSBoYXMgYmVlbiBkaXNjb3ZlcmVkIGluIHRoZSBvZmZp Y2lhbCBMaW51eE9wdGljIDIwMDkgY29udGVudCBtYW5hZ2VtZW50IHN5c3RlbS4KVGhlIHNlc3Np b24gdnVsbmVyYWJpbGl0eSBhbGxvd3MgcmVtb3RlIGF0dGFja2VycyB0byB1bmF1dGhvcml6ZWQg YWNjZXNzIHRoZSBhZG1pbmlzdHJhdG9yIHBhbmVsIG9yIHRoZSB3ZWIgdXNlciBpbnRlcmZhY2Uu CgpUaGUgdnVsbmVyYWJpbGl0eSBpcyBsb2NhdGVkIGluIHRoZSBzZXNzaW9uIGNyZWRlbnRpYWxz IHJlcXVlc3Qgb2YgdGhlIGhvbWUucGhwIGZpbGUuIFRoZSBmaWxlIGFsbG93cyBkaXJlY3QgcmVx dWVzdHMgb2YgYWRtaW5pc3RyYXRvcnMgCndpdGhvdXQgc2VjdXJlIHNlc3Npb24gY3JlZGVudGlh bCBjaGVjay4gVGh1cyByZXN1bHRzIGluIGEgc2Vzc2lvbiBhdXRoIGJ5cGFzcyBpc3N1ZSB0aGF0 IGNhbiBmaW5hbGx5IGxlYWQgdG8gYSBmdWxsIGFwcGxpY2F0aW9uIGNvbXByb21pc2UuClRoZSB2 dWxuZXJhYmlsaXR5IGlzIGEgY2xhc3NpYyBhdXRoIGJ5cGFzcyBzZXNzaW9uIGlzc3VlIGluIHRo ZSBhZG1pbiBwYW5lbCBvZiB0aGUgY29udGVudCBtYW5hZ2VtZW50IHN5c3RlbS4gVGhlIHJlcXVl c3QgbWV0aG9kIHRvIGJ5cGFzcyAKaXMgR0VUIGFuZCB0aGUgYXR0YWNrIHZlY3RvciBvZiB0aGUg aXNzdWUgaXMgb24gdGhlIGFwcGxpY2F0aW9uLXNpZGUgb2YgdGhlIHNlcnZpY2UuCgpUaGUgc2Vj dXJpdHkgcmlzayBvZiB0aGUgYXV0aCBieXBhc3MgdnVsbmVyYWJpbGl0eSBpcyBlc3RpbWF0ZWQg YXMgaGlnaCB3aXRoIGEgY3ZzcyAoY29tbW9uIHZ1bG5lcmFiaWxpdHkgc2NvcmluZyBzeXN0ZW0p IGNvdW50IG9mIDguMS4gCkV4cGxvaXRhdGlvbiBvZiB0aGUgYXV0aCBieXBhc3Mgc2Vzc2lvbiB3 ZWIgdnVsbmVyYWJpbGl0eSByZXF1aXJlcyBubyBwcml2aWxlZ2UgYXBwbGljYXRpb24gdXNlciBh Y2NvdW50IG9yIHVzZXIgaW50ZXJhY3Rpb24uIApTdWNjZXNzZnVsIGV4cGxvaXRhdGlvbiBvZiB0 aGUgdnVsbmVyYWJpbGl0eSByZXN1bHRzIGluIHVuYXV0aG9yaXplZCBhY2Nlc3MgdG8gdGhlIGFk bWluIHBhbmVsLCBkZWZhY2VtZW50LCB3ZWItYXBwbGljYXRpb24gYW5kIGRibXMgY29tcHJvbWlz ZS4KClJlcXVlc3QgTWV0aG9kKHMpOgogICAgWytdIEdFVAoKVnVsbmVyYWJsZSBNb2R1bGUocykK ICAgIFsrXSBMb2dpbiAoU2Vzc2lvbikKClZ1bG5lcmFibGUgRmlsZShzKToKICAgIFsrXSBob21l LnBocAoKQWZmZWN0ZWQgTW9kdWxlKHMpCiAgICBbK10gQWNjb3VudCBTeXN0ZW0gLSAoQWRtaW4g UGFuZWwpCgoKUHJvb2Ygb2YgQ29uY2VwdCAoUG9DKToKPT09PT09PT09PT09PT09PT09PT09PT0K VGhlIGF1dGggYnlwYXNzIHNlc3Npb24gdnVsbmVyYWJpbGl0eSBjYW4gYmUgZXhwbG9pdGVkIGJ5 IHJlbW90ZSBhdHRhY2tlcnMgd2l0aG91dCBwcml2aWxlZ2UgYXBwbGljYXRpb24gdXNlciBhY2Nv dW50IG9yIHVzZXIgaW50ZXJhY3Rpb24uCkZvciBzZWN1cml0eSBkZW1vbnN0cmF0aW9uIG9yIHRv IHJlcHJvZHVjZSB0aGUgdnVsbmVyYWJpbGl0eSBmb2xsb3cgdGhlIHByb3ZpZGVkIGluZm9ybWF0 aW9uIGFuZCBzdGVwcyBiZWxvdyB0byBjb250aW51ZS4KCk1hbnVhbCBzdGVwcyB0byByZXByb2R1 Y2UgdGhlIHZ1bG5lcmFiaWxpdHkgLi4uCjEuIEZpcnN0IHR5cGUgdGhlIGRvcmsgIkRlc2lnbiBi eSB3d3cubGludXhvcHRpYy5jb20gMjAwOSIgaW4gZ29vZ2xlIHdpdGhvdXQgRG91YmxlIHF1b3Rl cygiKS4KMi4gVGhlbiBhZnRlciBmaW5kIHRoZSBzaXRlIGluIHdoaWNoIHRoZWlyIGlzIHdyaXR0 ZW4gRGVzaWduIGJ5IHd3dy5saW51eG9wdGljLmNvbSAyMDA5IGluIHRoZSBmb290ZXIKMy4gTm93 LCBnbyB0byBpdCdzIGFkbWluIHBhZ2UgaHR0cDovL3d3dy50YXJnZXRzaXRlLmNvbS9hZG1pbnBh bmVsCjQuIEFmdGVyIG9wZW5pbmcgdGhlIGFkbWluIHBhbmVsIC4gRm9sbG93IHRoaXMgbGluayBo dHRwOi8vd3d3LnRhcmdldHNpdGUuY29tL2FkbWlucGFuZWwvaG9tZS5waHAKLi4uIGFuZCB2b2ls YSB5b3Ugd2lsbCBiZSBkaXJlY3RseSBsb2dpbiBpbnRvIHRoZSBhZG1pbiBwYW5lbCBhbmQgeW91 IGNhbiBhbHNvIHVwbG9hZCB5b3VyIGJhY2tkb29yIGFuZCBkZWZhY2UuCjUuIFN1Y2Nlc3NmdWwg cmVwcm9kdWNlIG9mIHRoZSByZW1vdGUgdnVsbmVyYWJpbGl0eSEKClBvQzoKQWRtaW4gUGFuZWw6 IAkJCQkJaHR0cDovL2xvY2FsaG9zdDo4MDgwL2FkbWlucGFuZWwKQXV0aCBCeXBhc3MgTG9naW4g U2Vzc2lvbiBBZG1pbiBQYW5lbDogCQlodHRwOi8vbG9jYWxob3N0OjgwODAvYWRtaW5wYW5lbC9o b21lLnBocAoKClNlY3VyaXR5IFJpc2s6Cj09PT09PT09PT09PT09ClRoZSBzZWN1cml0eSByaXNr IG9mIHRoZSBhdXRoIGJ5cGFzcyBzZXNzaW9uIHdlYiB2dWxuZXJhYmlsaXR5IGlzIGVzdGltYXRl ZCBhcyBoaWdoLiAoQ1ZTUyA4LjEpCgoKQ3JlZGl0cyAmIEF1dGhvcnM6Cj09PT09PT09PT09PT09 PT09PQpDb250YWN0OiBodHRwczovL3NlY3VyaXR5cmVzZWFyY2hpbmRpYS53b3JkcHJlc3MuY29t ID4gaHR0cHM6Ly90d2l0dGVyLmNvbS9hYWRpdHlhX3B1cmFuaQoKCkRpc2NsYWltZXIgJiBJbmZv cm1hdGlvbjoKPT09PT09PT09PT09PT09PT09PT09PT09PQpUaGUgaW5mb3JtYXRpb24gcHJvdmlk ZWQgaW4gdGhpcyBhZHZpc29yeSBpcyBwcm92aWRlZCBhcyBpdCBpcyB3aXRob3V0IGFueSB3YXJy YW50eS4gVnVsbmVyYWJpbGl0eSBMYWIgZGlzY2xhaW1zIGFsbCB3YXJyYW50aWVzLCBlaXRoZXIg ZXhwcmVzc2VkIApvciBpbXBsaWVkLCBpbmNsdWRpbmcgdGhlIHdhcnJhbnRpZXMgb2YgbWVyY2hh bnRhYmlsaXR5IGFuZCBjYXBhYmlsaXR5IGZvciBhIHBhcnRpY3VsYXIgcHVycG9zZS4gVnVsbmVy YWJpbGl0eS1MYWIgb3IgaXRzIHN1cHBsaWVycyBhcmUgbm90IGxpYWJsZSAKaW4gYW55IGNhc2Ug b2YgZGFtYWdlLCBpbmNsdWRpbmcgZGlyZWN0LCBpbmRpcmVjdCwgaW5jaWRlbnRhbCwgY29uc2Vx dWVudGlhbCBsb3NzIG9mIGJ1c2luZXNzIHByb2ZpdHMgb3Igc3BlY2lhbCBkYW1hZ2VzLCBldmVu IGlmIFZ1bG5lcmFiaWxpdHktTGFiIApvciBpdHMgc3VwcGxpZXJzIGhhdmUgYmVlbiBhZHZpc2Vk IG9mIHRoZSBwb3NzaWJpbGl0eSBvZiBzdWNoIGRhbWFnZXMuIFNvbWUgc3RhdGVzIGRvIG5vdCBh bGxvdyB0aGUgZXhjbHVzaW9uIG9yIGxpbWl0YXRpb24gb2YgbGlhYmlsaXR5IGZvciAKY29uc2Vx dWVudGlhbCBvciBpbmNpZGVudGFsIGRhbWFnZXMgc28gdGhlIGZvcmVnb2luZyBsaW1pdGF0aW9u IG1heSBub3QgYXBwbHkuIFdlIGRvIG5vdCBhcHByb3ZlIG9yIGVuY291cmFnZSBhbnlib2R5IHRv IGJyZWFrIGFueSB2ZW5kb3IgbGljZW5zZXMsIApwb2xpY2llcywgZGVmYWNlIHdlYnNpdGVzLCBo YWNrIGludG8gZGF0YWJhc2VzIG9yIHRyYWRlIHdpdGggZnJhdWQvc3RvbGVuIG1hdGVyaWFsLgoK RG9tYWluczogICAgd3d3LnZ1bG5lcmFiaWxpdHktbGFiLmNvbSAgIAktIHd3dy52dWxuLWxhYi5j b20JCQkgICAgICAgCQktIHd3dy5ldm9sdXRpb24tc2VjLmNvbQpDb250YWN0OiAgICBhZG1pbkB2 dWxuZXJhYmlsaXR5LWxhYi5jb20gCS0gcmVzZWFyY2hAdnVsbmVyYWJpbGl0eS1sYWIuY29tIAkg ICAgICAgCQktIGFkbWluQGV2b2x1dGlvbi1zZWMuY29tClNlY3Rpb246ICAgIG1hZ2F6aW5lLnZ1 bG5lcmFiaWxpdHktZGIuY29tCS0gdnVsbmVyYWJpbGl0eS1sYWIuY29tL2NvbnRhY3QucGhwCQkg ICAgICAgCS0gZXZvbHV0aW9uLXNlYy5jb20vY29udGFjdApTb2NpYWw6CSAgICB0d2l0dGVyLmNv bS8jIS92dWxuX2xhYiAJCS0gZmFjZWJvb2suY29tL1Z1bG5lcmFiaWxpdHlMYWIgCSAgICAgICAJ CS0geW91dHViZS5jb20vdXNlci92dWxuZXJhYmlsaXR5MGxhYgpGZWVkczoJICAgIHZ1bG5lcmFi aWxpdHktbGFiLmNvbS9yc3MvcnNzLnBocAktIHZ1bG5lcmFiaWxpdHktbGFiLmNvbS9yc3MvcnNz X3VwY29taW5nLnBocCAgIAkJLSB2dWxuZXJhYmlsaXR5LWxhYi5jb20vcnNzL3Jzc19uZXdzLnBo cApQcm9ncmFtczogICB2dWxuZXJhYmlsaXR5LWxhYi5jb20vc3VibWl0LnBocCAgCS0gdnVsbmVy YWJpbGl0eS1sYWIuY29tL2xpc3Qtb2YtYnVnLWJvdW50eS1wcm9ncmFtcy5waHAJLSB2dWxuZXJh YmlsaXR5LWxhYi5jb20vcmVnaXN0ZXIvCgpBbnkgbW9kaWZpZWQgY29weSBvciByZXByb2R1Y3Rp b24sIGluY2x1ZGluZyBwYXJ0aWFsbHkgdXNhZ2VzLCBvZiB0aGlzIGZpbGUgcmVxdWlyZXMgYXV0 aG9yaXphdGlvbiBmcm9tIFZ1bG5lcmFiaWxpdHkgTGFib3JhdG9yeS4gUGVybWlzc2lvbiB0byAK ZWxlY3Ryb25pY2FsbHkgcmVkaXN0cmlidXRlIHRoaXMgYWxlcnQgaW4gaXRzIHVubW9kaWZpZWQg Zm9ybSBpcyBncmFudGVkLiBBbGwgb3RoZXIgcmlnaHRzLCBpbmNsdWRpbmcgdGhlIHVzZSBvZiBv dGhlciBtZWRpYSwgYXJlIHJlc2VydmVkIGJ5IApWdWxuZXJhYmlsaXR5LUxhYiBSZXNlYXJjaCBU ZWFtIG9yIGl0cyBzdXBwbGllcnMuIEFsbCBwaWN0dXJlcywgdGV4dHMsIGFkdmlzb3JpZXMsIHNv dXJjZSBjb2RlLCB2aWRlb3MgYW5kIG90aGVyIGluZm9ybWF0aW9uIG9uIHRoaXMgd2Vic2l0ZSAK aXMgdHJhZGVtYXJrIG9mIHZ1bG5lcmFiaWxpdHktbGFiIHRlYW0gJiB0aGUgc3BlY2lmaWMgYXV0 aG9ycyBvciBtYW5hZ2Vycy4gVG8gcmVjb3JkLCBsaXN0IChmZWVkKSwgbW9kaWZ5LCB1c2Ugb3Ig ZWRpdCBvdXIgbWF0ZXJpYWwgY29udGFjdCAKKGFkbWluQHZ1bG5lcmFiaWxpdHktbGFiLmNvbSBv ciByZXNlYXJjaEB2dWxuZXJhYmlsaXR5LWxhYi5jb20pIHRvIGdldCBhIHBlcm1pc3Npb24uCgoJ CQkJQ29weXJpZ2h0IMKpIDIwMTUgfCBWdWxuZXJhYmlsaXR5IExhYm9yYXRvcnkgLSBbRXZvbHV0 aW9uIFNlY3VyaXR5IEdtYkhd4oSiCgoKCi0tIApWVUxORVJBQklMSVRZIExBQk9SQVRPUlkgLSBS RVNFQVJDSCBURUFNClNFUlZJQ0U6IHd3dy52dWxuZXJhYmlsaXR5LWxhYi5jb20KQ09OVEFDVDog cmVzZWFyY2hAdnVsbmVyYWJpbGl0eS1sYWIuY29tClBHUCBLRVk6IGh0dHA6Ly93d3cudnVsbmVy YWJpbGl0eS1sYWIuY29tL2tleXMvYWRtaW5AdnVsbmVyYWJpbGl0eS1sYWIuY29tJTI4MHgxOThF OTkyOCUyOS50eHQKCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KU2VudCB0aHJvdWdoIHRoZSBGdWxsIERpc2Nsb3N1cmUgbWFpbGluZyBsaXN0Cmh0dHBz Oi8vbm1hcC5vcmcvbWFpbG1hbi9saXN0aW5mby9mdWxsZGlzY2xvc3VyZQpXZWIgQXJjaGl2ZXMg JiBSU1M6IGh0dHA6Ly9zZWNsaXN0cy5vcmcvZnVsbGRpc2Nsb3N1cmUv