Description
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25330 ↗
- http://securityreason.com/securityalert/594 ↗
- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp ↗
- http://www.osvdb.org/24121 ↗
- http://www.securityfocus.com/bid/17134 ↗
- http://www.securityfocus.com/archive/1/427974/100/0/threaded ↗