Secunia

A vulnerability has been reported in Naroun ADSL-Tools, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to the application allowing users to view the details of arbitrary accounts by accessing the operator/members_general_info_print.asp script. This can be exploited to disclose a user's username and password by passing a valid account number via the "nick" parameter to the affected script.

Solution
The vendor has fixed the vulnerability in patch 2009-08-18-14-45. Contact the vendor for more information.

Provided and/or discovered by
Ostoure sazan sharif

Original Advisory
http://packetstormsecurity.org/0908-exploits/naroun-bypass.txt

Deep Links
Links available in Customer Area