Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
BID:24521
Info
Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 24521 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3254 CVE-2007-3255 CVE-2007-3256 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 26 2007 12:00AM |
| Updated: | Jun 27 2007 12:18AM |
| Credit: | Brian Reilly is credited with the discovery these issues. |
| Vulnerable: |
Xythos Enterprise Document Management Suite 6.0 Xythos Enterprise Document Management Suite 5.0 |
| Not Vulnerable: |
Xythos Enterprise Document Management Suite 6.0.46.1 Xythos Enterprise Document Management Suite 5.0.25.8 |
Discussion
Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
Xythos Enterprise Document Manager is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data. These issues include multiple HTML-injection vulnerabilities, a cross-site scripting issue, and a Content-Type-spoofing weakness.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
The Content-Type-spoofing weakness may provide a vector of attack for attackers trying to exploit latent vulnerabilities in arbitrary applications.
Enterprise Document Manager in the 5.0 and 6.0 series, prior to 5.0.25.8 and 6.0.46.1, are vulnerable; other versions may also be affected.
Xythos Enterprise Document Manager is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data. These issues include multiple HTML-injection vulnerabilities, a cross-site scripting issue, and a Content-Type-spoofing weakness.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
The Content-Type-spoofing weakness may provide a vector of attack for attackers trying to exploit latent vulnerabilities in arbitrary applications.
Enterprise Document Manager in the 5.0 and 6.0 series, prior to 5.0.25.8 and 6.0.46.1, are vulnerable; other versions may also be affected.
Exploit / POC
Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
An attacker can exploit these issues with a web browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
An attacker can exploit these issues with a web browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
Solution / Fix
Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
Solution:
The vendor has addressed these issues in versions 5.0.25.8 and 6.0.46.1 and plans to release them by the end of June 2007. Please contact the vendor for details.
Solution:
The vendor has addressed these issues in versions 5.0.25.8 and 6.0.46.1 and plans to release them by the end of June 2007. Please contact the vendor for details.
References
Xythos Enterprise Document Manager Multiple Input Validation Vulnerabilities
References:
References:
- Xythos Homepage (Xythos)
- Multiple Vulnerabilities in Xythos Enterprise (Symantec)