|
MondoSearch Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA11279
|
|
|
Release Date:
|
2004-04-02
|
|
Popularity:
|
7,839 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Exposure of sensitive information
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | MondoSearch 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Protego has reported flere vulnerabilities in MondoSearch, which can be exploited by malicious people to use the application as a proxy, cause a DoS (Denial of Service), or disclose certain administrative usernames.
1) An insecurity in "MsmHigh.exe" can be exploited to use a vulnerable web server as a proxy for web requests by passing a specially crafted query string.
2) It is possible to gain knowledge of the usernames of users, who have access to the administration site, by accessing the "MsmChgPw.msk" file with certain parameters.
3) The processes "MsmHigh.exe" and "MsmLink.exe" load a new instance of themselves each time a request is received. This can be exploited to consume all available memory by making multiple requests.
The vulnerabilities have been reported in versions prior to 5.1b.
Solution:
Update to version 5.1b.
http://www.mondosoft.com/download/default.asp
Provided and/or discovered by:
1+2) Uffe Nielsen, Protego.
3) Dennis Rand, Protego.
Changelog:
2004-04-02: Added information about two other vulnerabilities.
Original Advisory:
Mondosoft:
http://www.mondosoft.com/security/
PROTEGO:
http://www.protego.dk/advisories/200401.html
http://www.protego.dk/advisories/200402.html
http://www.protego.dk/advisories/200403.html
http://www.protego.dk/advisories/200404.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
