Liferay Portal Login Script Cross-Site Scripting Vulnerability
BID:26470
Info
Liferay Portal Login Script Cross-Site Scripting Vulnerability
| Bugtraq ID: | 26470 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6055 CVE-2009-1294 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2007 12:00AM |
| Updated: | Apr 16 2009 06:36PM |
| Credit: | Adrian Pastor of ProcheckUp is credited with the discovery of this vulnerability. |
| Vulnerable: |
Novell Teaming + Conferencing 0 Novell Teaming 1.0 SP3 Novell Teaming 1.0 SP2 Novell Teaming 1.0 SP1 Novell Teaming 1.0 Liferay Enterprise Portal 4.1.1 Liferay Enterprise Portal 4.1 |
| Not Vulnerable: |
Liferay Enterprise Portal 4.1.3 |
Discussion
Liferay Portal Login Script Cross-Site Scripting Vulnerability
Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Liferay Portal 4.1.0 and 4.1.1 are vulnerable; other versions may also be affected.
Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Liferay Portal 4.1.0 and 4.1.1 are vulnerable; other versions may also be affected.
Exploit / POC
Liferay Portal Login Script Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URI is available:
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URI is available:
Solution / Fix
Liferay Portal Login Script Cross-Site Scripting Vulnerability
Solution:
The vendor addressed this issue in Liferay Portal 4.1.3. Please see the references for more information.
Liferay Enterprise Portal 4.1
Liferay Enterprise Portal 4.1.1
Solution:
The vendor addressed this issue in Liferay Portal 4.1.3. Please see the references for more information.
Liferay Enterprise Portal 4.1
-
Liferay Liferay Portal 4.1.3
http://sourceforge.net/project/showfiles.php?group_id=49260&package_id =42607&release_id=465475
Liferay Enterprise Portal 4.1.1
-
Liferay Liferay Portal 4.1.3
http://sourceforge.net/project/showfiles.php?group_id=49260&package_id =42607&release_id=465475
References
Liferay Portal Login Script Cross-Site Scripting Vulnerability
References:
References:
- Liferay Homepage (Liferay)
- SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming (Bernhard Mueller
- 7002999: Novell Teaming Cross-Site Scripting Vulnerability fix (Novell)