IBM Lotus Domino BaseTarget Parameter Cross-Site Scripting Vulnerability

Bugtraq ID:	14845
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 15 2005 12:00AM
Updated:	Sep 15 2005 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	IBM Lotus Domino Enterprise Server 6.5.2 IBM Lotus Domino 6.5.2
Not Vulnerable:

IBM Lotus Domino BaseTarget Parameter Cross-Site Scripting Vulnerability

IBM Lotus Domino is prone to a cross-site scripting vulnerability. This is due to insufficient input validation of data supplied through URI parameters.

An attacker may exploit this by enticing a victim user into visiting a malicious link that contains HTML and script code.

Exploitation may permit theft of cookie-based authentication credentials. Other attacks are also possible.

IBM Lotus Domino BaseTarget Parameter Cross-Site Scripting Vulnerability

The following examples were provided:

Footer?OpenForm&BaseTarget=";+alert(document.cookie);+var+mit="a

WNAV?OpenForm&BaseTarget=";+alert(document.cookie);+var+mit="a

IBM Lotus Domino BaseTarget Parameter Cross-Site Scripting Vulnerability

Solution:
IBM has released APAR LO07850 to address this issue.


IBM Lotus Domino 6.5.2

• IBM LO07850
  http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07850&loc=en_U S&cs=utf-8&cc=us&lang=all

IBM Lotus Domino Enterprise Server 6.5.2

• IBM LO07850
  http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07850&loc=en_U S&cs=utf-8&cc=us&lang=all

IBM Lotus Domino BaseTarget Parameter Cross-Site Scripting Vulnerability

References:

• LO07850: CROSS SITE SCRIPTING (XSS) (A) WITH BASETARGET PARAMETER (IBM)