F5 Networks FirePass 4100 SSL VPN 'installControl.php3' Cross-Site Scripting Vulnerability

Bugtraq ID:	28902
Class:	Input Validation Error
CVE:	CVE-2008-2030
Remote:	Yes
Local:	No
Published:	Apr 23 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Alberto Cuesta Partida and __GiReX__
Vulnerable:	F5 FirePass 4100 0 F5 FirePass 6.0.2 F5 FirePass 6.0.1 F5 FirePass 5.5.2 F5 FirePass 5.4.1 F5 FirePass 6.0 F5 FirePass 5.4
Not Vulnerable:	F5 FirePass 6.0.2.3

F5 Networks FirePass 4100 SSL VPN 'installControl.php3' Cross-Site Scripting Vulnerability

F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.

FirePass 4100 SSL VPN Firmware 5.4.2-5.5.2 and 6.0-6.2 are vulnerable.

F5 Networks FirePass 4100 SSL VPN 'installControl.php3' Cross-Site Scripting Vulnerability

Attackers can exploit this issue via a browser.

The following example URIs demonstrate this issue:

• /data/vulnerabilities/exploits/28902.html

F5 Networks FirePass 4100 SSL VPN 'installControl.php3' Cross-Site Scripting Vulnerability

Solution:
The vendor has released an update. Please contact the vendor for information on how to obtain and apply this update.

F5 Networks FirePass 4100 SSL VPN 'installControl.php3' Cross-Site Scripting Vulnerability

References:

• Vendor Homepage (F5)