Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
BID:31543
Info
Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
| Bugtraq ID: | 31543 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-4485 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 02 2008 12:00AM |
| Updated: | May 07 2015 05:22PM |
| Credit: | Juan Pablo Lopez Yacubian |
| Vulnerable: |
Blue Coat Systems WebFilter 5.3 Blue Coat Systems WebFilter 5.2 Blue Coat Systems WebFilter 4.2 |
| Not Vulnerable: |
Blue Coat Systems WebFilter 5.3.1 .7 Blue Coat Systems WebFilter 5.2.5 Blue Coat Systems WebFilter 4.2.9 |
Discussion
Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
Blue Coat WebFilter is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the vulnerable application. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Blue Coat WebFilter 4.2, 5.2, and 5.3 are vulnerable.
Blue Coat WebFilter is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the vulnerable application. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Blue Coat WebFilter 4.2, 5.2, and 5.3 are vulnerable.
Exploit / POC
Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
To exploit this issue an attacker entices an unsuspecting user into following a malicious URI.
To exploit this issue an attacker entices an unsuspecting user into following a malicious URI.
Solution / Fix
Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
Solution:
The vendor has released an advisory and fixes. Please contact the vendor for details.
Solution:
The vendor has released an advisory and fixes. Please contact the vendor for details.
References
Blue Coat WebFilter ICAP Patience Page Cross Site Scripting Vulnerability
References:
References:
- Blue Coat Systems Homepage (Blue Coat Systems)
- CROSS-SITE SCRIPTING VULNERABILITY IN ICAP PATIENCE PAGE (Blue Coat)
- Blue Coat xss ([email protected])
- Re: Blue Coat xss (Tom Kelly