Cisco Guard Meta-Refresh Cross-Site Scripting Vulnerability

Bugtraq ID:	20122
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2006 12:00AM
Updated:	Sep 21 2006 05:56PM
Credit:	This vendor disclosed this issue.
Vulnerable:	Cisco Guard 3.1 (0) Cisco Guard 3.0 8.12 Cisco Guard 3.0 8 Cisco Guard 5.1(5) Cisco Guard 5.0(3) Cisco Guard 5.0(1) Cisco Guard 4.0 Cisco Guard 3.1(0.12) Cisco Anomaly Guard Module 5.0(3) Cisco Anomaly Guard Module 5.0(1)
Not Vulnerable:	Cisco Guard 5.1(6)

Cisco Guard Meta-Refresh Cross-Site Scripting Vulnerability

Cisco Guard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the visited site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Cisco Guard Meta-Refresh Cross-Site Scripting Vulnerability

Attackers exploit this issue by enticing unsuspecting users into following a malicious URI.

Cisco Guard Meta-Refresh Cross-Site Scripting Vulnerability

Solution:
The vendor has released version 5.1(6) to address this issue. Please contact the vendor for details on obtaining and applying the appropriate updates.

Cisco Guard Meta-Refresh Cross-Site Scripting Vulnerability

References:

• Cisco Guard Configuration Page (Cisco)
  
• Cisco Security Advisory: Cisco Guard Enables Cross Site Scripting (Cisco)
  
• Guard Product Page (CIsco)
  
• Cisco Security Advisory: Cisco Guard enables Cross Site Scripting (Cisco)