Martin Eiszner has reported a vulnerability in LIN:BOX, which can be exploited by malicious people to bypass the user authentication of the web-based management interface.

The problem is that the resource "//admin/user.pl" can be requested directly without any user authentication, thereby granting the user administrative access to the "Administration" section.

Example:
http://[victim]:8080//admin/user.pl

This can be exploited to disclose users' passwords by viewing the source code when editing a user or create a new administrative account and then log in via the web-interface or potentially SSH.

Solution
Apply Security Update 1.
Further details available in Customer Area

Provided and/or discovered by
Martin Eiszner

Original Advisory
http://www.websec.org/adv/linbit.txt.html

Deep Links
Links available in Customer Area