F5 Networks FirePass 4100 SSL VPN Download_Plugin.PHP3 Cross-Site Scripting Vulnerability

Bugtraq ID:	26661
Class:	Input Validation Error
CVE:	CVE-2007-6704
Remote:	Yes
Local:	No
Published:	Nov 30 2007 12:00AM
Updated:	May 07 2015 05:35PM
Credit:	Adrian Pastor and Jan Fry of ProCheckUp are credited with the discovery of this vulnerability.
Vulnerable:	F5 FirePass 4100 0 F5 FirePass 6.0.1 F5 FirePass 5.5.2 F5 FirePass 6.0 F5 FirePass 5.4
Not Vulnerable:

F5 Networks FirePass 4100 SSL VPN Download_Plugin.PHP3 Cross-Site Scripting Vulnerability

F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.

F5 FirePass 4100 SSL VPNs running these firmware versions are vulnerable:

5.4.1 through 5.5.2
6.0 through 6.0.1

F5 Networks FirePass 4100 SSL VPN Download_Plugin.PHP3 Cross-Site Scripting Vulnerability

Attackers can exploit this issue via a browser.

The following example URI demonstrates this issue:

• /data/vulnerabilities/exploits/26661.html

F5 Networks FirePass 4100 SSL VPN Download_Plugin.PHP3 Cross-Site Scripting Vulnerability

Solution:
The vendor released a patch to address this issue. Please see the references for more information.

F5 Networks FirePass 4100 SSL VPN Download_Plugin.PHP3 Cross-Site Scripting Vulnerability

References:

• PR07-14: Cross-site Scripting (XSS) / HTML injection (ProCheckUp)
  
• SQL7493 (F5)
  
• Vendor Homepage (F5)
  
• PR07-14: Cross-site Scripting (XSS) / HTML injection FirePass 4100 SSL VPN ([email protected])