Authentication flaw

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR \r sequences in the cosign cookie parameter...

CVE-2007-2232

CVE-2007-2232 concerns the Cosign vulnerability where the CHECK command in Cosign 2.0.1 and earlier can be abused to bypass authentication through CR (\r) sequences in the cosign cookie parameter. Affected software is Cosign up to version 2.0.1 and earlier; the underlying issue is improper handli...

CVE-2007-2233

Cosign 2.0.2 and earlier (cosign-bin/cosign.cgi) are affected. The issue allows remote authenticated users to perform unauthorized actions as an arbitrary user by injecting LOGIN and REGISTER commands via CR (\r) sequences in the service parameter. Root cause is input handling that does not neutr...

CVE-2007-2232

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR \r sequences in the cosign cookie parameter...

Cosign 2.0.12.9.4a - CGI Check Cookie Command Remote Authentication Bypass

Cosign 2.0.12.9.4a - CGI Check Cookie Command Remote Authentication Bypass source: https://www.securityfocus.com/bid/23422/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An attacker can exploit this iss...

Cosign 2.0.1/2.9.4a - CGI Check Cookie Command Remote Authentication Bypass

source: https://www.securityfocus.com/bid/23422/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An attacker can exploit this issue to gain unauthorized access to services hosted on an affected computer...

[Full-disclosure] Cosign SSO Authentication Bypass

Author: Jon Oberheide [email protected] Date: Wed, April 11th, 2007 Summary ======= Application: Cosign Single Sign-On Affected Versions: 2.0.1 and previous Vendor Website: http://weblogin.org Type of Vulnerability: Authentication Bypass - Remote Background ========== cosign is a web single-sign-...

Cosign 2.0.1/2.9.4a - CGI Register Command Remote Authentication Bypass

source: https://www.securityfocus.com/bid/23424/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An authenticated attacker can exploit this issue to access services hosted on an affected computer by...