BID:20026

Blojsom Cross-Site Scripting Vulnerability

CVE-2006-4829 |

Info

Blojsom Cross-Site Scripting Vulnerability

Bugtraq ID:	20026
Class:	Input Validation Error
CVE:	CVE-2006-4829
Remote:	Yes
Local:	No
Published:	Sep 14 2006 12:00AM
Updated:	Mar 14 2007 03:24PM
Credit:	Avinash Shenoi of Cenzic Inc. is credited with the discovery of this vulnerability.
Vulnerable:	Blojsom Blojsom 2.31 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4

Not Vulnerable:	Blojsom Blojsom 2.32 Apple Mac OS X Server 10.4.9 Apple Mac OS X 10.4.9

Discussion

Blojsom Cross-Site Scripting Vulnerability

Blojsom is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Exploit / POC

Blojsom Cross-Site Scripting Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept information is available:

To demonstrate the vulnerability, simply embed the following encoded text into the identified vulnerable fields.

'><script>alert(1234)</script>

This will have the effect of popping up an alert window. This proof of concept could easily be altered to cause the script to return authentication credentials to an attacker-controlled server.

Solution / Fix

Blojsom Cross-Site Scripting Vulnerability

Solution:
This issue has been fixed in the vendor's CVS repository and will be made available in the Blojsom 2.32 update.

Please see the references for information on how to acquire this update.

Apple Mac OS X Server 10.4