Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
BID:12746
Info
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 12746 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-0548 CVE-2005-0549 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 07 2005 12:00AM |
| Updated: | Dec 11 2009 03:44PM |
| Credit: | Discovery is credited to Thomas Liam Romanis. |
| Vulnerable: |
Sun AnswerBook2 1.4.4 Sun AnswerBook2 1.4.3 Sun AnswerBook2 1.4.2 Sun AnswerBook2 1.4.1 Sun AnswerBook2 1.4 Sun AnswerBook2 1.3 Sun AnswerBook2 1.2 |
| Not Vulnerable: | |
Discussion
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials and launch other attacks.
The Search function and the AnswerBook2 admin interface are affected.
AnswerBook2 1.4.4 and prior versions are vulnerable.
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials and launch other attacks.
The Search function and the AnswerBook2 admin interface are affected.
AnswerBook2 1.4.4 and prior versions are vulnerable.
Exploit / POC
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
An exploit is not required.
The following proofs of concept are available:
For the cross-site scripting issue in the Answerbook2 search function:
http://www.example.com/ab2/Help_C/@Ab2HelpSearch?scope=HELP&DwebQuery=%3Cscript%3Ealert%28%22hello%22%
29%3C%2Fscript%3E&Search=+Search+
For the admin interface 'View Log Files' function:
http://www.example.com/ab2/@Ab2Admin?command=view_access
An exploit is not required.
The following proofs of concept are available:
For the cross-site scripting issue in the Answerbook2 search function:
http://www.example.com/ab2/Help_C/@Ab2HelpSearch?scope=HELP&DwebQuery=%3Cscript%3Ealert%28%22hello%22%
29%3C%2Fscript%3E&Search=+Search+
For the admin interface 'View Log Files' function:
http://www.example.com/ab2/@Ab2Admin?command=view_access
Solution / Fix
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
Solution:
Sun has released an advisory to address these issues. Please see the referenced advisory for details.
Solution:
Sun has released an advisory to address these issues. Please see the referenced advisory for details.
References
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
References:
References: