• info
• discussion
• exploit
• solution
• references

Cosign CGI Register Command Remote Authentication Bypass Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.


University of Michigan cosign 2.9.4a

• University of Michigan cosign-1.9.4b.tar.gz
  http://www.umich.edu/~umweb/downloads/cosign-1.9.4b.tar.gz

University of Michigan cosign 2.0.1

• University of Michigan cosign-2.0.2a.tar.gz
  http://www.umich.edu/~umweb/downloads/cosign-2.0.2a.tar.gz