----------------------------------------------------------------------

Want to join the Secunia Security Team?

Secunia offers a position as a security specialist, where your daily
work involves reverse engineering of software and exploit code,
auditing of source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

----------------------------------------------------------------------

TITLE:
Lanap BotDetect ASP.NET CAPTCHA Bypass Weakness

SECUNIA ADVISORY ID:
SA20830

VERIFY ADVISORY:
http://secunia.com/advisories/20830/

CRITICAL:
Not critical

IMPACT:
Security Bypass

WHERE:
>From remote

SOFTWARE:
Lanap BotDetect ASP.NET CAPTCHA 1.x
http://secunia.com/product/10628/

DESCRIPTION:
Michael White and Graham Murphy have reported a weakness in Lanap
BotDetect ASP.NET, which can be exploited by malicious people to
bypass certain security restrictions.

The weakness is caused due to the UUID and hash for a given CAPTCHA
being stored within the page's ViewState. This can be exploited to
bypass the security feature by replaying the ViewState.

The weakness has been reported in versions prior to 1.5.4.0.

SOLUTION:
Update to version 1.5.4.0.

PROVIDED AND/OR DISCOVERED BY:
Michael White and Graham Murphy, Symantec.

ORIGINAL ADVISORY:
http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------