From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jul 11 2003 - 12:01:13 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
BillingExplorer Authentication Vulnerability

READ ONLINE:
http://www.secunia.com/advisories/9243/

CRITICAL:
Highly critical

IMPACT:
ID Spoofing, Manipulation of data, Exposure of sensitive information,
DoS

WHERE:
From remote

SOFTWARE:
BillingExplorer 4.x

DESCRIPTION:
A vulnerability has been reported in BillingExplorer caused due to
missing client authentication.

This can be exploited to manipulate billing information and cause a
DoS (Denial of Service) on other clients by shutting them down.

SOLUTION:
Use another product.

REPORTED BY / CREDITS:
Xnuxer Research

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]