Description
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
References
- mscs-authfiles-authentication-bypass(25330) vdb-entry
- 594 third-party-advisory
- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp
- 24121 vdb-entry
- 17134 vdb-entry
- 20060316 Microsoft Commerce Server 2002: Logon as known user with a false password mailing-list