EGroupWare Multiple Input Validation Vulnerabilities
BID:11013
Info
EGroupWare Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 11013 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 23 2004 12:00AM |
| Updated: | Aug 23 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities is credited to Joxean Koret <[email protected]>. |
| Vulnerable: |
Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Gentoo Linux 1.2 Gentoo Linux 1.1 a Gentoo Linux 0.7 Gentoo Linux 0.5 eGroupWare eGroupWare 1.0.3 eGroupWare eGroupWare 1.0 |
| Not Vulnerable: | |
Discussion
EGroupWare Multiple Input Validation Vulnerabilities
It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities.
The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is also reported that data input through the 'Search' fields of the 'addressbook', 'calendar', and 'search between projects' functionality are not sufficiently sanitized.
An attacker can exploit these issues for theft of cookie-based authentication credentials and other attacks.
Additionally HTML injection vulnerabilities are reported for the eGroupWare 'Messenger' module and 'Ticket' module.
Attackers may potentially exploit these issues to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.
It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities.
The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is also reported that data input through the 'Search' fields of the 'addressbook', 'calendar', and 'search between projects' functionality are not sufficiently sanitized.
An attacker can exploit these issues for theft of cookie-based authentication credentials and other attacks.
Additionally HTML injection vulnerabilities are reported for the eGroupWare 'Messenger' module and 'Ticket' module.
Attackers may potentially exploit these issues to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.
Exploit / POC
EGroupWare Multiple Input Validation Vulnerabilities
There are no exploits required. The following examples are available:
http://www.example.com/egroupware/index.php?menuaction=calendar.uicalendar.day&date=20040701"><script>alert(document.cookie)</script
There are no exploits required. The following examples are available:
http://www.example.com/egroupware/index.php?menuaction=calendar.uicalendar.day&date=20040701"><script>alert(document.cookie)</script
Solution / Fix
EGroupWare Multiple Input Validation Vulnerabilities
Solution:
Gentoo has released an advisory (GLSA 200409-06) and an updated eBuild to address this issue. Please see the referenced advisory for more information. Gentoo users can carry out the following commands to update their computer:
emerge sync
emerge -pv ">=www-apps/egroupware-1.0.00.004"
emerge ">=www-apps/egroupware-1.0.00.004"
Solution:
Gentoo has released an advisory (GLSA 200409-06) and an updated eBuild to address this issue. Please see the referenced advisory for more information. Gentoo users can carry out the following commands to update their computer:
emerge sync
emerge -pv ">=www-apps/egroupware-1.0.00.004"
emerge ">=www-apps/egroupware-1.0.00.004"
References
EGroupWare Multiple Input Validation Vulnerabilities
References:
References:
- eGroupWare Homepage (eGroupWare)
- Multiple Cross Site Scripting Vulnerabilities in eGroupWare (Joxean Koret