Bug #24456: Information disclosure during backend login - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #24456

closed

Information disclosure during backend login

Added by Helmut Hummel over 13 years ago. Updated over 6 years ago.

Status:

Closed

Priority:

Must have

Assignee:

Category:

Target version:

4.5.4

Start date:

2011-01-03

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

4.2

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

In case a wrong username is submitted other HTTP headers are sent, than
in case only the password is wrong. This provides an attacker more
information than intended.

I tracked down this problem to the various session_start() calls, which
also send HTTP headers by default. If the submitted username exists, a
php session is started to get the challange out of the session
(compareUident()). This sends out some HTTP headers which will then
partly be overridden by header() calls (sendNoCacheHeaders()) with the
same HTTP headers (both happening in t3lib_userauth).

OTRS: 2011010210000017
Reporter: Sebastian Schinzel
(issue imported from #M16894)

Files

Download all files

16894_trunk.diff (616 Bytes) 16894_trunk.diff		Administrator Admin, 2011-01-03 00:52
24456_42.patch (545 Bytes) 24456_42.patch	Updated patch	Oliver Hader, 2011-04-28 22:23
24456_v2.diff (1.04 KB) 24456_v2.diff		Helmut Hummel, 2011-07-13 23:27
24456_43.patch (1.02 KB) 24456_43.patch		Oliver Hader, 2011-07-22 16:08
24456_44.patch (1.02 KB) 24456_44.patch		Oliver Hader, 2011-07-22 16:08
24456_45.patch (1.01 KB) 24456_45.patch		Oliver Hader, 2011-07-22 16:08
24456_46.patch (1.03 KB) 24456_46.patch		Oliver Hader, 2011-07-22 16:08