Blackboard Academic Suite Frameset.JSP Cross-Domain Frameset Loading Vulnerability

Bugtraq ID:	15814
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 12 2005 12:00AM
Updated:	Dec 20 2006 09:32PM
Credit:	Discovered by dr_insane.
Vulnerable:	Blackboard Blackboard Academic Suite 6.2.3.23
Not Vulnerable:

Blackboard Academic Suite Frameset.JSP Cross-Domain Frameset Loading Vulnerability

Blackboard Academic Suite is prone to a cross-domain frameset-loading vulnerability.

Successful exploitation may result in various attacks, such as information disclosure and session hijacking. An attacker may also be able to exploit this vulnerability to carry out phishing-style attacks.

Blackboard Academic Suite version 6.0 is reportedly affected by this issue.

Blackboard Academic Suite Frameset.JSP Cross-Domain Frameset Loading Vulnerability

An exploit is not required.

The following proof of concept is available:
http://www.example.com/webapps/portal/frameset.jsp?tab_id=[tabid]&url=[url]

Blackboard Academic Suite Frameset.JSP Cross-Domain Frameset Loading Vulnerability

Solution:
The vendor has released a patch to address this issue. Users are advised to install Service Pack 2 for Release 6 Application Pack 3. Please contact the vendor for more information.

Blackboard Academic Suite Frameset.JSP Cross-Domain Frameset Loading Vulnerability

References:

• Blackboard Homepage (Blackboard)