0
Welcome Guest! Login
0 items Join Now

J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

Last Post
Search Topic
    • Terp's Avatar
    • Terp
    • Elite Rocketeer
    • Posts: 1720
    • Thanks: 23

    J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

    Posted 16 years 9 months ago
    • Project: Joomla!
      SubProject: com_user
      Severity: Critical
      Versions: 1.5.5 and all previous 1.5 releases
      Exploit type: Password Reset Forgery
      Reported Date: 2008-August-12
      Fixed Date: 2008-August-12

      Description A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user (lowest id). Typically, this is an administrator user. Note, that changing the first users username may lessen the impact of this exploit (since the person who changed the password does not know the login associated with the new password). However, the only way to completely rectify the issue is to upgrade to 1.5.6 (or patch the /components/com_user/models/reset.php file).


      developer.joomla.org/security/news/241-2...d-functionality.html
    #211024
    • CG Icon's Avatar
    • CG Icon
    • Hero Rocketeer
    • Posts: 371
    • Thanks: 0

    Re: J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

    Posted 16 years 9 months ago
    • is this specific to the 1.5X environment? or is this vulnerability also an issue with 1.0.15 as well??
    #211055
    • Terp's Avatar
    • Terp
    • Elite Rocketeer
    • Posts: 1720
    • Thanks: 23

    Re: J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

    Posted 16 years 9 months ago
    • The Joomla site says, "1.5.5 and all previous 1.5 releases," so I think you are good with a J1.0.x site...just the 1.5s.
    #211058
    • Andy Miller's Avatar
    • Andy Miller
    • Preeminent Rocketeer
    • Posts: 9919
    • Thanks: 96
    • Web Kahuna

    Re: J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

    Posted 16 years 9 months ago
    • If you've not updated, update to 1.5.6 immediately. We had 2 of our demo sites compromised in the few hours between the fix being released and the servers being patched. All good now though.
    #211363

  • Re: J1.5 Exploit: Attackers Can Remotely Change Admin Password: Patch Now!

    Posted 16 years 9 months ago
    #211422

Time to create page: 0.078 seconds