Technical Description

Two vulnerabilities were identified in Helpdesk software Hesk, which could be exploited by remote attackers to bypass the authentication mechanism or disclose sensitive information.

The first flaw is due to an input validation error in "admin.php" and "admin_main.php" when processing the "PHPSESSID" parameter, which could be exploited by remote attackers to bypass the authentication procedure and gain unauthorized access to the application.

The second issue is due to input validation errors in multiple scripts when handling a malformed "PHPSESSID" parameter, which may be exploited by attackers to determine the installation path.

Affected Products

Helpdesk software Hesk version 0.93 and prior

Solution

Upgrade to Helpdesk software Hesk version 0.93.1 :
http://www.phpjunkyard.com/dnl/hesk0931.zip

References

http://www.vupen.com/english/advisories/2005/1792

Credits

Vulnerabilities reported by Rajesh Sethumadhavan, Rahul Mohandas, and Jayesh K.S.

ChangeLog

2005-09-20 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.