Description
2X ThinClientServer Enterprise Edition before 4.0.2248 allows remote attackers to create multiple privileged accounts via a replay attack using the initial account creation request.
References
- ADV-2006-4883 vdb-entry
- http://www.symantec.com/enterprise/research/SYMSA-2006-012.txt
- 1017350 vdb-entry
- 23248 third-party-advisory
- 21300 vdb-entry
- 20061206 SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability mailing-list
- 2012 third-party-advisory
- thinclientserver-request-bypass-security(30759) vdb-entry