CVE-2007-2233

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR \r sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username...

CVE-2007-2233

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR \r sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username...

CVE-2007-2233

Cosign 2.0.2 and earlier (cosign-bin/cosign.cgi) are affected. The issue allows remote authenticated users to perform unauthorized actions as an arbitrary user by injecting LOGIN and REGISTER commands via CR (\r) sequences in the service parameter. Root cause is input handling that does not neutr...