Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
BID:10533
Info
Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
| Bugtraq ID: | 10533 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2004 12:00AM |
| Updated: | Jun 14 2004 12:00AM |
| Credit: | Discovery is credited to Tyler Guenter aka scriptX <[email protected]>. |
| Vulnerable: |
Linksys Web Camera Software 2.10 |
| Not Vulnerable: | |
Discussion
Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
It is reported that Linksys Web Camera software is prone to a cross-site scripting vulnerability that may allow a remote attacker to steal cookie-based authentication credentials or carry out other attacks.
The problem presents itself when an attacker passes malicious HTML or script code to the application via the 'next_file' parameter of the 'main.cgi' script.
Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well.
It is reported that Linksys Web Camera software is prone to a cross-site scripting vulnerability that may allow a remote attacker to steal cookie-based authentication credentials or carry out other attacks.
The problem presents itself when an attacker passes malicious HTML or script code to the application via the 'next_file' parameter of the 'main.cgi' script.
Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well.
Exploit / POC
Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
No exploit is required.
The following proof of concept is available:
http://www.example.com/main.cgi?next_file=poop<script>alert('scriptX :P');</script>
No exploit is required.
The following proof of concept is available:
http://www.example.com/main.cgi?next_file=poop<script>alert('scriptX :P');</script>
Solution / Fix
Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Linksys Web Camera Software Next_file Parameter Cross-Site Scripting Vulnerability
References:
References:
- Linksys Homepage (Linksys)
- Linksys Web Camera Cross-site Scripting Vuln (Tyler Guenter aka scriptX