Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Intersil HTTP Basic auth pass reset (originally #453) #494

Merged
merged 1 commit into from Jun 17, 2012

Conversation

wchen-r7
Copy link
Contributor

The modified version of pull request #453. This addresses a couple
of things including:

  • Change the description to better explain what the vulnerability is.
    The advisory focuses the problem as an auth bypass, not DoS,
    although it can end up dosing the server.
  • The title and filename are changed as a result of matching that
    advisory's description.
  • Use 'TARGETURI' option instead of 'URI'.
  • The reset attempt needs to check if the directory actually has
    401 in place, otherwise this may result a false-positive.
  • The last HTTP request needs to check a possible nil return value.
  • More verbose outputs.

The modified version of pull request rapid7#453. This addresses a couple
of things including:
* Change the description to better explain what the vulnerability is.
  The advisory focuses the problem as an auth bypass, not DoS,
  although it can end up dosing the server.
* The title and filename are changed as a result of matching that
  advisory's description.
* Use 'TARGETURI' option instead of 'URI'.
* The reset attempt needs to check if the directory actually has
  401 in place, otherwise this may result a false-positive.
* The last HTTP request needs to check a possible nil return value.
* More verbose outputs.
@wchen-r7 wchen-r7 merged commit e72303a into rapid7:master Jun 17, 2012
@wchen-r7 wchen-r7 deleted the intersil_dos branch August 22, 2016 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants