Mantis Multiple Input Validation Vulnerabilities
BID:29297
Info
Mantis Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 29297 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-3332 CVE-2008-3331 CVE-2008-2276 |
| Remote: | Yes |
| Local: | No |
| Published: | May 20 2008 12:00AM |
| Updated: | Sep 22 2008 04:09PM |
| Credit: | Antonio "s4tan" Parata and Francesco "ascii" Ongaro |
| Vulnerable: |
Mantis Mantis 1.1.1 Mantis Mantis 1.1 Mantis Mantis 1.0.1 Mantis Mantis 1.0 .0RC4 Mantis Mantis 1.0 .0RC3 Mantis Mantis 1.0 .0rc2 Mantis Mantis 1.0 .0rc1 Mantis Mantis 1.0 .0a3 Mantis Mantis 1.0 .0a2 Mantis Mantis 1.0 .0a1 Mantis Mantis 1.0 Mantis Mantis 0.19.4 Mantis Mantis 0.19.3 Mantis Mantis 0.19.2 Mantis Mantis 0.19.1 Mantis Mantis 0.19 .0RC1 Mantis Mantis 0.19 .0a2 Mantis Mantis 0.19 .0a1 Mantis Mantis 0.19 .0a Mantis Mantis 0.19 .0 Mantis Mantis 0.18.3 Mantis Mantis 0.18.2 Mantis Mantis 0.18 a1 Mantis Mantis 0.18 0rc1 Mantis Mantis 0.18 0a4 Mantis Mantis 0.18 0a3 Mantis Mantis 0.18 0a2 Mantis Mantis 0.18 Mantis Mantis 0.17.5 Mantis Mantis 0.17.5 Mantis Mantis 0.17.4 a Mantis Mantis 0.17.4 a Mantis Mantis 0.17.4 Mantis Mantis 0.17.4 Mantis Mantis 0.17.3 Mantis Mantis 0.17.3 Mantis Mantis 0.17.2 Mantis Mantis 0.17.2 Mantis Mantis 0.17.1 Mantis Mantis 0.17.1 Mantis Mantis 0.17 .0 Mantis Mantis 0.17 Mantis Mantis 0.16.1 Mantis Mantis 0.16.1 Mantis Mantis 0.16 .0 Mantis Mantis 0.16 Mantis Mantis 0.15.12 Mantis Mantis 0.15.12 Mantis Mantis 0.15.11 Mantis Mantis 0.15.11 Mantis Mantis 0.15.10 Mantis Mantis 0.15.9 Mantis Mantis 0.15.9 Mantis Mantis 0.15.8 Mantis Mantis 0.15.8 Mantis Mantis 0.15.7 Mantis Mantis 0.15.7 Mantis Mantis 0.15.6 Mantis Mantis 0.15.6 Mantis Mantis 0.15.5 Mantis Mantis 0.15.5 Mantis Mantis 0.15.4 Mantis Mantis 0.15.4 Mantis Mantis 0.15.3 Mantis Mantis 0.15.3 Mantis Mantis 0.15.2 Mantis Mantis 0.15.1 Mantis Mantis 0.15 Mantis Mantis 0.14.8 Mantis Mantis 0.14.7 Mantis Mantis 0.14.6 Mantis Mantis 0.14.5 Mantis Mantis 0.14.4 Mantis Mantis 0.14.3 Mantis Mantis 0.14.2 Mantis Mantis 0.14.1 Mantis Mantis 0.14 Mantis Mantis 0.13.1 Mantis Mantis 0.13 Mantis Mantis 0.12 Mantis Mantis 0.11.1 Mantis Mantis 0.11 Mantis Mantis 0.10.2 Mantis Mantis 0.10.1 Mantis Mantis 0.10 Mantis Mantis 0.9.1 Mantis Mantis 0.9 Mantis Mantis 1.1.0a2 Mantis Mantis 1.0.0 RC5 Gentoo Linux |
| Not Vulnerable: |
Mantis Mantis 1.1.2 |
Discussion
Mantis Multiple Input Validation Vulnerabilities
Mantis is prone to a cross-site scripting vulnerability and an arbitrary-script-execution vulnerability because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers with a valid administrator account may be able to execute PHP code.
Mantis 1.1.1 is vulnerable; other versions may also be affected.
Mantis is prone to a cross-site scripting vulnerability and an arbitrary-script-execution vulnerability because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers with a valid administrator account may be able to execute PHP code.
Mantis 1.1.1 is vulnerable; other versions may also be affected.
Exploit / POC
Mantis Multiple Input Validation Vulnerabilities
Attackers can exploit the cross-site scripting issue by enticing an unsuspecting user to follow a malicious URI. Attackers can exploit the code-execution vulnerability with a browser.
The following proof-of-concept URIs are available:
Attackers can exploit the cross-site scripting issue by enticing an unsuspecting user to follow a malicious URI. Attackers can exploit the code-execution vulnerability with a browser.
The following proof-of-concept URIs are available:
Solution / Fix
Mantis Multiple Input Validation Vulnerabilities
Solution:
The vendor has released an update. Please see the references for more information.
Solution:
The vendor has released an update. Please see the references for more information.
References
Mantis Multiple Input Validation Vulnerabilities
References:
References: