Bugtraq mailing list archives
Re: Vulnerability in CB Captcha for Joomla and Mambo
From: nant () joomlapolis com
Date: 16 Apr 2010 14:04:50 -0000
Hello viewers. This is Nick (aka nant) - one of the original (not the forked Russian version) CB Captcha plugin developers. We are responsible for version 2.2 that is referenced in the report. Some facts for those reading: MustLive notified us on 13.4.2010 - that's 13 days after disclosure. This should not be classified as any kind of vulnerability as there is no way that any harm can be done to a website using this script. The CB Captcha 2.2 plugin, as all similar Captcha scripts, are used to insure that human intervention is needed. The "bug" (at best) reported only allows a single user seeing the generated Captcha image, to use its code during the active session period. There is no harm that can be done to the system using this. Thus while this is a bit of odd behavior it does not represent a asecurity flaw. This will be fixed however as soon as possible. Thank you.
Current thread:
- Vulnerability in CB Captcha for Joomla and Mambo MustLive (Apr 15)
- Re: Vulnerability in CB Captcha for Joomla and Mambo Susan Bradley (Apr 16)
- Re: Vulnerability in CB Captcha for Joomla and Mambo James Martin (Apr 19)
- Re: Vulnerability in CB Captcha for Joomla and Mambo Susan Bradley (Apr 19)
- Re: Vulnerability in CB Captcha for Joomla and Mambo Matteo Valenza (Apr 19)
- Re: Vulnerability in CB Captcha for Joomla and Mambo MustLive (Apr 19)
- Re: Vulnerability in CB Captcha for Joomla and Mambo James Martin (Apr 19)
- <Possible follow-ups>
- Re: Vulnerability in CB Captcha for Joomla and Mambo nant (Apr 16)
- Re: Vulnerability in CB Captcha for Joomla and Mambo nant (Apr 19)
- Re: Re: Vulnerability in CB Captcha for Joomla and Mambo none (Apr 20)
- Re: Vulnerability in CB Captcha for Joomla and Mambo MustLive (Apr 28)
- Re: Vulnerability in CB Captcha for Joomla and Mambo Susan Bradley (Apr 16)