Design/Logic Flaw

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

CVE-2006-0864

Affected product: ViRobot Linux Server (filescan component). Vulnerability: Cookie-based authentication bypass due to Cookie header verification failure, enabling an unauthenticated attacker to gain administrative access and potentially delete files or disrupt the service. Impact (as stated): Adm...

CVE-2006-0864

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...