Description
The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."
References
- http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt
- ADV-2006-2518 vdb-entry
- 1139 third-party-advisory
- 18315 vdb-entry
- 1016371 vdb-entry
- lanap-botdetect-captcha-security-bypass(27409) vdb-entry
- 20060622 SYMSA-2006-005 mailing-list
- 20830 third-party-advisory