Ipswitch WhatsUp Professional 2006 - Authentication Bypass

Author: Kenneth F. Belva
type: remote
platform: hardware
port: 0
date_added: 2006-05-17
date_updated: 2013-08-27
verified: 1
codes: CVE-2006-2531;OSVDB-25839
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/18019/info

Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability.

This issue allows remote attackers to gain administrative access to the web-based administrative interface of the application. This will aid them in further network attacks.

The HTTP requests containing the following header information are sufficient to demonstrate this issue:

User-Agent: Ipswitch/1.0
User-Application: NmConsole