F5 FirePass 1000 SSL VPN My.AccTab.PHP3 Cross-Site Scripting Vulnerability

Bugtraq ID:	20583
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 17 2006 12:00AM
Updated:	Oct 18 2006 09:24PM
Credit:	Richard Brain is credited with the discovery of this vulnerability.
Vulnerable:	F5 FirePass 1000 5.5
Not Vulnerable:

F5 FirePass 1000 SSL VPN My.AccTab.PHP3 Cross-Site Scripting Vulnerability

F5 FirePass 1000 SSL VPN is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 5.5 is vulnerable; other versions may also be affected.

F5 FirePass 1000 SSL VPN My.AccTab.PHP3 Cross-Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

F5 FirePass 1000 SSL VPN My.AccTab.PHP3 Cross-Site Scripting Vulnerability

Solution:
The vendor has addressed this issue in versions 5.52 and 6.0. Please see the references for more information on how to obtain and install these fixes.

F5 FirePass 1000 SSL VPN My.AccTab.PHP3 Cross-Site Scripting Vulnerability

References:

• Firepass Homepage (F5)
  
• PR06-03b: F5 Firepass 1000 SSL VPN version 5.5 vulnerable to ([email protected] )