Title: SandSurfer Unspecified User Authentication Bypass
Info
Disclosure
Feb 08, 2004
Discovery
Feb 08, 2004
Dates
Exploit
Unknown
Solution
Unknown
Description
SandSurfer contains a flaw that may allow a malicious user to bypass authentication. The issue is triggered by unspecified conditions. It is possible that the flaw may allow unauthorized login resulting in a loss of confidentiality, integrity, and/or availability.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Disclosure:
OSVDB Verified
OSVDB:
Web Related
Solution
Upgrade to version 1.7.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.