Exploit Ipswitch WhatsUp Professional 2006 - Authentication Bypass

[Exploiter]

EDB-ID

27891

Проверка EDB

1. Пройдено

Автор

KENNETH F. BELVA

Тип уязвимости

REMOTE

Платформа

HARDWARE

CVE

cve-2006-2531

Дата публикации

2006-05-17

source: https://www.securityfocus.com/bid/18019/info

Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability.

This issue allows remote attackers to gain administrative access to the web-based administrative interface of the application. This will aid them in further network attacks.

The HTTP requests containing the following header information are sufficient to demonstrate this issue:

User-Agent: Ipswitch/1.0
User-Application: NmConsole