The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Authentication Bypass in Rational Soft's Hidden Administrator
------------------------------------------------------------------------
SUMMARY
rewterz has discovered a critical vulnerability in Hidden Administrator.
This vulnerability allows a remote attacker to execute arbitrary code in
the context of the user who executed Hidden Administrator.
DETAILS
Vulnerable Systems:
* Hidden Administrator version 1.7 and prior
Authentication mechanism of Hidden Administrator can be bypassed with ease
via this vulnerability. With authentication bypassed at the Hidden
Administrator server, any malicious user can cause Hidden Administrator to
run arbitrary code and assume full control of the system on which Hidden
Administrator is running.
ADDITIONAL INFORMATION
The information has been provided by <mailto:advisories@rewterz.com>
rewterz security team.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
