[CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other.
From: support@xxxxxxxxxxx
Date: 25 May 2006 00:45:01 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

This issue has been resolved as of 5/23/2006.  The problem was related to the 
customer-specific implementation of the user authentication system and is not a 
general problem with Lithium?s software.  This does not affect any of Lithium?s 
other customers.

Prev by Date: Re: Default Screen Saver Vulnerability in Microsoft Windows
Next by Date: Re: mybb v1.1.1(rss.php) SQL Injection Exploit
Previous by thread: VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Buffer Overflow
Next by thread: Kaspersky antivirus 6: POP3 state machine error
Index(es):
- Date
- Thread