IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
BID:16577
Info
IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
| Bugtraq ID: | 16577 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-0663 CVE-2006-0662 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 10 2006 12:00AM |
| Updated: | Jun 27 2007 09:08PM |
| Credit: | Discovered by Jakob Balle and Tan Chew Keong. |
| Vulnerable: |
IBM Domino Web Access 6.5.4 IBM Domino Web Access 6.5.3 IBM Domino Web Access 6.5.2 IBM Domino Web Access 6.5.1 IBM Domino Web Access 6.0.5 IBM Domino Web Access 6.0.4 IBM Domino Web Access 6.0.3 IBM Domino Web Access 6.0.2 .2 IBM Domino Web Access 6.0.2 .1 IBM Domino Web Access 6.0.1 .3 IBM Domino Web Access 6.0.1 .2 IBM Domino Web Access 6.0.1 .1 IBM Domino Web Access 6.0.1 IBM Domino Web Access 7.0 IBM Domino Web Access 6.5 IBM Domino Web Access 6.0 |
| Not Vulnerable: |
IBM Domino Web Access 7.0.1 IBM Domino Web Access 6.5.5 |
Discussion
IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities.
These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials.
IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities.
These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials.
Exploit / POC
IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
An exploit is not required.
A proof of concept example for the issue exploited through a 'javascript:' URI is available:
<a href="java script:alert('Vulnerable!');">Link</a>
Proof of concept for the email subject field script injection:
</TITLE><SCRIPT>alert("Vulnerable!");</SCRIPT>
An exploit is not required.
A proof of concept example for the issue exploited through a 'javascript:' URI is available:
<a href="java script:alert('Vulnerable!');">Link</a>
Proof of concept for the email subject field script injection:
</TITLE><SCRIPT>alert("Vulnerable!");</SCRIPT>
Solution / Fix
IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
Solution:
IBM has released iNotes or Domino Web Access versions 6.5.5 or 7.0.1 to address these issues. Please see the referenced IBM advisory for more information.
Solution:
IBM has released iNotes or Domino Web Access versions 6.5.5 or 7.0.1 to address these issues. Please see the referenced IBM advisory for more information.
References
IBM Lotus Domino iNotes Multiple HTML and Script Injection Vulnerabilities
References:
References: