Sun ONE/iPlanet Messaging Server Webmail MSIE HTML Injection Vulnerability

Bugtraq ID:	13988
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2005 12:00AM
Updated:	Jun 17 2005 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Sun ONE Messaging Server 6.2 + Sun Solaris 9_x86 + Sun Solaris 9 + Sun Solaris 8_sparc + Sun Solaris 10.0_x86 + Sun Solaris 10 Sun iPlanet Messaging Server 5.2
Not Vulnerable:

Sun ONE/iPlanet Messaging Server Webmail MSIE HTML Injection Vulnerability

Sun ONE/iPlanet Messaging Server Webmail is prone to an HTML injection vulnerability. This issue may allow a remote attacker to inject hostile HTML and script code into the session of a Webmail user.

Sun has stated that this issue only affects users who access Webmail with Internet Explorer. This issue appears distinct from the vulnerability described in BID 11972 "Sun ONE/iPlanet Messaging Server Webmail HTML Injection Vulnerability".

Sun ONE/iPlanet Messaging Server Webmail MSIE HTML Injection Vulnerability

There is no exploit required.

Sun ONE/iPlanet Messaging Server Webmail MSIE HTML Injection Vulnerability

Solution:
Sun has released patches to address this issue for affected platforms. Symantec was not able to locate publicly available patches therefore customers are advised to contact Sun for more information.

Sun has updated Sun Alert 101770. More patches for various affected products are available. Please see the referenced alert for more information.


Sun ONE Messaging Server 6.2

• Sun 118207-36
  For Solaris 8, Solaris 9, Solaris 10 running on SPARC.
  


• Sun 118208-36
  For Solaris 8, Solaris 9, Solaris 10 running on x86.
  

Sun ONE/iPlanet Messaging Server Webmail MSIE HTML Injection Vulnerability

References:

• Sun Alert ID: 101770 Security Vulnerability in Webmail (Sun)