Re: [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue
From: admin@xxxxxxxxxxxxxxxx
Date: 7 Jun 2007 15:33:22 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hello.
The vendor released a new working patch which fixes this issue. It is available 
as chameleon cms "build 2085/17". 

Regards,

David Vieira-Kurz
(Security Researcher, majorsecurity.de)

Prev by Date: WmsCMS < = 2.0 Multiple XSS Vulnerabilities
Next by Date: Re: Sudo: local root compromise with krb5 enabled
Previous by thread: [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue
Next by thread: RevokeBB Blind SQL Injection / Hash Extractor
Index(es):
- Date
- Thread