CVE-2007-2232: Undefined Security Weakness

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR \r sequences in the cosign cookie parameter...

CVE-2007-2233: Undefined Security Weakness

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR \r sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username...

Cosign 2.0.12.9.4a - CGI Check Cookie Command Remote Authentication Bypass

Cosign 2.0.12.9.4a - CGI Check Cookie Command Remote Authentication Bypass source: https://www.securityfocus.com/bid/23422/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An attacker can exploit this iss...

Cosign 2.0.1/2.9.4a - CGI Check Cookie Command Remote Authentication Bypass

source: https://www.securityfocus.com/bid/23422/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An attacker can exploit this issue to gain unauthorized access to services hosted on an affected computer...

[Full-disclosure] Cosign SSO Authentication Bypass

Author: Jon Oberheide [email protected] Date: Wed, April 11th, 2007 Summary ======= Application: Cosign Single Sign-On Affected Versions: 2.0.1 and previous Vendor Website: http://weblogin.org Type of Vulnerability: Authentication Bypass - Remote Background ========== cosign is a web single-sign-...

Cosign 2.0.1/2.9.4a - CGI Register Command Remote Authentication Bypass

source: https://www.securityfocus.com/bid/23424/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An authenticated attacker can exploit this issue to access services hosted on an affected computer by...