Actions
Bug #19831
closed
Session fixation vulnerability in user authentication
Start date:
2009-01-15
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.0
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
references TYPO3 Security Team OTRS issue #2008102610000015
Versions:
4.0 up to trunk (4.0, 4.1, 4.2, trunk)
Problem:
Session IDs are reused by TYPO3 even when they not yet exist in the db but are submitted by a client.
Solution:
Check if there's a session record in the database before using submitted session ids.
Provided by TYPO3 Security Team
(issue imported from #M10146)
Files
Updated by Marcus Krause almost 16 years ago
The first patch is for trunk only as it makes use of newly added function exec_SELECTcountRows(), the other one is for 4-0 up to 4-2 where the row counting is down the old way.
ready to be committed
Updated by Marcus Krause almost 16 years ago
adding new patch 10146_trunk_v1.diff which replaces variablename $dbres by $count as requested by Francois
Updated by Ingmar Schlecht almost 16 years ago
Committed to 4.0, 4.1, 4.2 and trunk.
Updated by
Actions