BID:10483

NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabilities

Info

NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabilities

Bugtraq ID:	10483
Class:	Input Validation Error
CVE:	CVE-2004-2547 CVE-2004-2548
Remote:	Yes
Local:	No
Published:	Jun 07 2004 12:00AM
Updated:	Jun 07 2004 12:00AM
Credit:	Discovery is credited to Donnie Werner of exploitlabs <[email protected]>.
Vulnerable:	NetWin WebMail 3.1 d NetWin SurgeMail 2.0 a2 NetWin SurgeMail 1.9 b2 NetWin SurgeMail 1.9 NetWin SurgeMail 1.8 g3 NetWin SurgeMail 1.8 e NetWin SurgeMail 1.8 d NetWin SurgeMail 1.8 b3 NetWin SurgeMail 1.8 a

Not Vulnerable:	NetWin SurgeMail 2.0 c

Discussion

NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabilities

SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks.

SurgeMail versions 1.9 and prior and WebMail 3.1d are affected by these issues.

Exploit / POC

NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabilities

No exploit is required.

The following proof of concept is available:
http://www.example.com/[non-existant request]
http://www.example.com:7080/<script>alert(document.cookie)</script>

Solution / Fix

NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabilities

Solution:
SurgeMail 2.0c is available to address this issue:

NetWin SurgeMail 1.8 d