Signature Detail

APP: Sophos Web Appliance change_password Admin Password

This signature detects attempts to exploit a known flaw in Sophos Web Appliance. A successful attack may allow attackers to change admin's password allowing them to gain unauthorized access in the context of the affected user.

Extended Description

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.

Affected Products

• Sophos web_appliance -
• Sophos web_appliance_firmware 3.0.0
• Sophos web_appliance_firmware 3.0.1
• Sophos web_appliance_firmware 3.0.1.1
• Sophos web_appliance_firmware 3.0.2
• Sophos web_appliance_firmware 3.0.3
• Sophos web_appliance_firmware 3.0.4
• Sophos web_appliance_firmware 3.0.5
• Sophos web_appliance_firmware 3.0.5.1
• Sophos web_appliance_firmware 3.1.0
• Sophos web_appliance_firmware 3.1.0.1
• Sophos web_appliance_firmware 3.1.1
• Sophos web_appliance_firmware 3.1.2
• Sophos web_appliance_firmware 3.1.3
• Sophos web_appliance_firmware 3.1.4
• Sophos web_appliance_firmware 3.2.1
• Sophos web_appliance_firmware 3.2.2
• Sophos web_appliance_firmware 3.2.2.1
• Sophos web_appliance_firmware 3.2.3
• Sophos web_appliance_firmware 3.2.4
• Sophos web_appliance_firmware 3.2.5
• Sophos web_appliance_firmware 3.2.6
• Sophos web_appliance_firmware 3.2.7
• Sophos web_appliance_firmware 3.3.0
• Sophos web_appliance_firmware 3.3.1
• Sophos web_appliance_firmware 3.3.2
• Sophos web_appliance_firmware 3.3.3
• Sophos web_appliance_firmware 3.3.3.1
• Sophos web_appliance_firmware 3.3.4
• Sophos web_appliance_firmware 3.3.5
• Sophos web_appliance_firmware 3.3.5.1
• Sophos web_appliance_firmware 3.3.6
• Sophos web_appliance_firmware 3.3.6.1
• Sophos web_appliance_firmware 3.4.0
• Sophos web_appliance_firmware 3.4.1
• Sophos web_appliance_firmware 3.4.2
• Sophos web_appliance_firmware 3.4.3
• Sophos web_appliance_firmware 3.4.3.1
• Sophos web_appliance_firmware 3.4.4
• Sophos web_appliance_firmware 3.4.5
• Sophos web_appliance_firmware 3.4.6
• Sophos web_appliance_firmware 3.4.7
• Sophos web_appliance_firmware 3.4.8
• Sophos web_appliance_firmware 3.5.0
• Sophos web_appliance_firmware 3.5.1
• Sophos web_appliance_firmware 3.5.1.1
• Sophos web_appliance_firmware 3.5.1.2
• Sophos web_appliance_firmware 3.5.2
• Sophos web_appliance_firmware 3.5.3
• Sophos web_appliance_firmware 3.5.4
• Sophos web_appliance_firmware 3.5.5
• Sophos web_appliance_firmware 3.5.6
• Sophos web_appliance_firmware 3.6.1
• Sophos web_appliance_firmware 3.6.1.1
• Sophos web_appliance_firmware 3.6.2
• Sophos web_appliance_firmware 3.6.2.1
• Sophos web_appliance_firmware 3.6.2.3
• Sophos web_appliance_firmware 3.6.2.4.0
• Sophos web_appliance_firmware 3.6.2.4.1
• Sophos web_appliance_firmware 3.6.3
• Sophos web_appliance_firmware 3.6.4
• Sophos web_appliance_firmware 3.6.4.1
• Sophos web_appliance_firmware 3.6.4.2
• Sophos web_appliance_firmware 3.7.0
• Sophos web_appliance_firmware 3.7.1
• Sophos web_appliance_firmware 3.7.2
• Sophos web_appliance_firmware 3.7.3
• Sophos web_appliance_firmware 3.7.4
• Sophos web_appliance_firmware 3.7.5
• Sophos web_appliance_firmware 3.7.6
• Sophos web_appliance_firmware 3.7.7
• Sophos web_appliance_firmware 3.7.8
• Sophos web_appliance_firmware 3.7.8.1
• Sophos web_appliance_firmware 3.7.8.2
• Sophos web_appliance_firmware 3.7.9
• Sophos web_appliance_firmware 3.7.9.1
• Sophos web_appliance_firmware 3.8.0
• Sophos web_appliance_firmware 3.8.1
• Sophos web_appliance_firmware 3.8.1.1

References

• CVE: CVE-2014-2849
• URL: http://www.zerodayinitiative.com/advisories/zdi-14-069/