medium4.6Public exploit code
CVE-2005-1708
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Blue Coat Reporter 7.0/7.1 - Privilege Escalation2005-05-24 · remote · windows · Verified
Impact
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bluecoat | Reporter | through 7.1.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111695726810435&w=2
- http://secunia.com/advisories/15452
- http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html
- http://www.osvdb.org/16763
- http://www.securityfocus.com/bid/13723
- http://www.vupen.com/english/advisories/2005/0589
- http://marc.info/?l=bugtraq&m=111695726810435&w=2
- http://secunia.com/advisories/15452
- http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html
- http://www.osvdb.org/16763
- http://www.securityfocus.com/bid/13723
- http://www.vupen.com/english/advisories/2005/0589