Autonomy Ultraseek 'cs.html' URI Redirection Vulnerability

Bugtraq ID:	33500
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 28 2009 12:00AM
Updated:	Jan 30 2009 08:59PM
Credit:	buzzy
Vulnerable:	Autonomy Ultraseek 0
Not Vulnerable:

Autonomy Ultraseek 'cs.html' URI Redirection Vulnerability

Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks.

Autonomy Ultraseek 'cs.html' URI Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim into following a malicious URI.

The following example URI is available:

http://www.example.com/cs.html?url=http://www.example2.com

Autonomy Ultraseek 'cs.html' URI Redirection Vulnerability

Solution:
Reports indicate that the vendor released an update to address this issue; Symantec has not confirmed this. Please contact the vendor for more information.

Autonomy Ultraseek 'cs.html' URI Redirection Vulnerability

References:

• Redirection vulnerability ? (buzzy)
  
• The constant stream of Ultraseek redirects to malware (Alex Eckelberry)
  
• Ultraseek Product Page (Verity)
  
• Vulnerability Note VU#202753 Autonomy Ultraseek URL redirection vulnerability (US-CERT)