ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
BID:12142
Info
ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
| Bugtraq ID: | 12142 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 31 2004 12:00AM |
| Updated: | Dec 31 2004 12:00AM |
| Credit: | "C H F" <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
ZyXEL B-420 Wireless Ethernet Adapter 0 |
| Not Vulnerable: | |
Discussion
ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
A remote cross-site scripting vulnerability reportedly affects the Web-administration interface of the ZyXEL B-240 Wireless Ethernet Adapter. This issue is due to a failure of the application to properly sanitize URI input prior to including it in dymanic content.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the Web administration page. This may facilitate theft of cookie-based authentication credentials as well as other attacks. Apparently denial of service attacks are possible as well.
A remote cross-site scripting vulnerability reportedly affects the Web-administration interface of the ZyXEL B-240 Wireless Ethernet Adapter. This issue is due to a failure of the application to properly sanitize URI input prior to including it in dymanic content.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the Web administration page. This may facilitate theft of cookie-based authentication credentials as well as other attacks. Apparently denial of service attacks are possible as well.
Exploit / POC
ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
No exploit is required to leverage this issue. The following proof of concept is designed to trigger a denial of service condition in the affected device:
http://www.example.com/Forms/rpAuth_1?ZyXEL%20ZyWALL%20Series<script>top.location.pathname=""</script>
No exploit is required to leverage this issue. The following proof of concept is designed to trigger a denial of service condition in the affected device:
http://www.example.com/Forms/rpAuth_1?ZyXEL%20ZyWALL%20Series<script>top.location.pathname=""</script>
Solution / Fix
ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ZyXEL B-240 Wireless Ethernet Adapter Web Interface Remote Cross-Site Scripting Vulnerability
References:
References: