EUVD-2007-2227

Malware in sbrugna...

Authentication flaw

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR \r sequences in the cosign cookie parameter...