exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

remedy-enumerate.txt

remedy-enumerate.txt
Posted Jan 16, 2007
Authored by Davide Del Vecchio

Remedy Action Request System 5.01.02 Patch 1267 suffers from a user enumeration flaw.

tags | advisory
SHA-256 | c91485e8cd570f655024b88b05b5b416846fdf3d0c5163d1c561286d9a1907f4

remedy-enumerate.txt

Change Mirror Download
=======================================================
Remedy Action Request System User Enumeration
=======================================================

Davide Del Vecchio Adv#11

Discovered in: 08/01/2007

Version affected: Remedy Action Request System 5.01.02 Patch 1267.
The same vulnerable code could be present in other versions.

Reference: http://www.alighieri.org/advisories/advisory-remedy50102.txt

Software description:

From BMC Software website:
"Remedy Action Request System 5.01.02 provides a consolidated Service
Process Management platform for automating and managing Service
Management business processes."


The problem:

During user login phase, it is possible to enumerate existing users
examining the error messages provided by the software.

Suppling a non-existing user the error message is:


ARERR [612] No such user is registered with this server
user: test, server: 10.10.10.11

Unable to successfully log in to any server.


Suppling an existing user the error message is:


ARERR [329] Invalid password for an existing user
user: user, server: 10.10.10.11

Unable to successfully log in to any server.


Solution:

Vendor has been contacted 3 times with no answer.


Credits:

Davide Del Vecchio would like to thank his family and all
the people supporting him and his research.
Support the rosewitch project.


Disclaimer:

The information within this paper may change without notice. Use of this
information constitutes acceptance for use in an AS IS condition.
There are NO warranties with regard to this information. In no event shall
the author be liable for any damages whatsoever arising out of or in
connection with the use or spread of this information. Any use of this
information is at the user's own risk.
^^^^^^^^

Please send suggestions, updates, and comments to:
Davide Del Vecchio "Dante Alighieri" - dante at alighieri dot org
http://www.alighieri.org ~ http://legaest.blogspot.com
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close