BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
BID:34573
Info
BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
| Bugtraq ID: | 34573 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-0307 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2009 12:00AM |
| Updated: | Apr 17 2009 06:16PM |
| Credit: | Ken Millar of Sensient Technologies Corporation, Michael Thumann of ERNW, and Martin O'Neal and Stephen de Vries of Corsaire |
| Vulnerable: |
Rim Blackberry Enterprise Server 4.1.6 MR4 Rim Blackberry Enterprise Server 4.1.6 Rim Blackberry Enterprise Server 4.1.5 Rim Blackberry Enterprise Server 4.1.4 Rim Blackberry Enterprise Server 4.1.3 Rim Blackberry Enterprise Server 4.0.3 Rim Blackberry Enterprise Server 4.0 Rim Blackberry Enterprise Server 2.0 .0.65 Rim Blackberry Enterprise Server 4.0 SP3 |
| Not Vulnerable: |
Rim Blackberry Enterprise Server 4.1.6 MR5 |
Discussion
BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
BlackBerry Enterprise Server MDS Connection Service is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.
Versions prior to BlackBerry Enterprise Server 4.1.6 MR5 are vulnerable.
BlackBerry Enterprise Server MDS Connection Service is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.
Versions prior to BlackBerry Enterprise Server 4.1.6 MR5 are vulnerable.
Exploit / POC
BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
The following example POST data is available:
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
The following example POST data is available:
Solution / Fix
BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Solution:
The vendor has released an advisory and updates. Please see the references for details.
References
BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
References:
References: