Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
BID:16198
Info
Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
| Bugtraq ID: | 16198 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-4644 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2006 12:00AM |
| Updated: | Feb 07 2006 08:55PM |
| Credit: | [email protected] is credited with the discovery of this vulnerability. |
| Vulnerable: |
Edgewall Software Trac 0.9.2 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: |
Wire One Tanberg 880 0.9.3 |
Discussion
Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
Trac is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
Trac is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
Solution:
The vendor has released version 0.9.3 to address this issue.
Please see the referenced advisories for further information:
- Debian Linux has released security advisory DSA 951-1 to address this issue.
- Debian Linux has released updated security advisory DSA 951-2 addressing this issue.
Edgewall Software Trac 0.9.2
Solution:
The vendor has released version 0.9.3 to address this issue.
Please see the referenced advisories for further information:
- Debian Linux has released security advisory DSA 951-1 to address this issue.
- Debian Linux has released updated security advisory DSA 951-2 addressing this issue.
Edgewall Software Trac 0.9.2
-
EdgeWall Software trac-0.9.3.tar.gz
http://ftp.edgewall.com/pub/trac/trac-0.9.3.tar.gz
References
Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
References:
References:
- [DSA 951-1] New trac packages fix SQL injection and cross-site scripting (Debian)
- [DSA 951-2] New trac packages fix SQL injection and cross-site scripting (Debian)
- Edgewall Software Trouble Ticket 2473 (Edgewall Software)
- Trac (Edgewall Software)
- Trac Changelog (Edgewall Software)