Cosign CVE-2007-2232 Security Bypass Vulnerability

Cosign is prone to a security bypass vulnerability. The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.


 

Privacy Statement
Copyright 2010, SecurityFocus