HTTP: 427BB Authentication Bypass
This signature detects attempts to exploit a known flaw against 427BB bulletin board system. A successful attack can lead to bypass the authentication mechanism and gain access to the affected application as an administrative user.
Extended Description
427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authentication mechanism and gain access to the affected application as an administrative user. This may facilitate a compromise of the underlying system; other attacks are also possible. This issue affects version 2.2 and 2.2.1; other versions may also be vulnerable.
Affected Products
427bb fourtwosevenbb
Short Name
HTTP:PHP:427BB-AUTH-BYPASS
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
427BB Authentication Bypass CVE-2006-0153 bid:16178
Release Date
04/23/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
427bb
CVSS Score
7.5