Symantec Reporting Server URL Handling Phishing Vulnerability

Bugtraq ID:	34668
Class:	Input Validation Error
CVE:	CVE-2009-1432
Remote:	Yes
Local:	No
Published:	Apr 28 2009 12:00AM
Updated:	Apr 29 2009 04:06PM
Credit:	Dave Lewis of LiquidMatrix
Vulnerable:	Symantec Endpoint Protection 11.0 MR1 Symantec Endpoint Protection 11.0 Symantec Client Security 3.1.4 MR4 MP1 - build 4010 Symantec Client Security 3.1 .401 Symantec Client Security 3.1 .400 Symantec Client Security 3.1 .396 Symantec Client Security 3.1 .394 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1 MR7 Symantec Client Security 3.1 MR6 MP1 Symantec Client Security 3.1 MR6 Symantec Client Security 3.1 Symantec AntiVirus Corporate Edition 10.1.4 MR4 MP1 - build 4010 Symantec AntiVirus Corporate Edition 10.1.4 Symantec AntiVirus Corporate Edition 10.1 .401 Symantec AntiVirus Corporate Edition 10.1 .400 Symantec AntiVirus Corporate Edition 10.1 .396 Symantec AntiVirus Corporate Edition 10.1 .394 Symantec AntiVirus Corporate Edition 10.0.2 .2021 Symantec AntiVirus Corporate Edition 10.0.2 .2020 Symantec AntiVirus Corporate Edition 10.0.2 .2011 Symantec AntiVirus Corporate Edition 10.0.2 .2010 Symantec AntiVirus Corporate Edition 10.0.2 .2010 Symantec AntiVirus Corporate Edition 10.0.2 .2002 Symantec AntiVirus Corporate Edition 10.0.2 .2001 Symantec AntiVirus Corporate Edition 10.0.2 .2000 Symantec AntiVirus Corporate Edition 10.0 Symantec AntiVirus Corporate Edition 10.2 MR1 Symantec AntiVirus Corporate Edition 10.2 Symantec AntiVirus Corporate Edition 10.1.6.6000 Symantec AntiVirus Corporate Edition 10.1.6.600 Symantec AntiVirus Corporate Edition 10.1.4.4010 Symantec AntiVirus Corporate Edition 10.1 MR7 Symantec AntiVirus Corporate Edition 10.1 MR6 MP1 Symantec AntiVirus Corporate Edition 10.1 MR6 Symantec AntiVirus Corporate Edition 10.1 Symantec AntiVirus Corporate Edition 10.0.2.2000 Symantec AntiVirus Corporate Edition 10.0.1.1008 Symantec AntiVirus Corporate Edition 10.0.1.1007 Symantec AntiVirus Corporate Edition 10.0.1.1000 Symantec AntiVirus Corporate Edition 10.0.0.359
Not Vulnerable:	Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Endpoint Protection 11.0 MR2 Symantec Client Security 3.1 MR8 Symantec AntiVirus Corporate Edition 10.1 MR8

Symantec Reporting Server URL Handling Phishing Vulnerability

Symantec Reporting Server is prone to a vulnerability that can aid in phishing attacks.

An attacker can exploit this issue to display a message of their choice on the login screen of Reporting Server. Successful exploits could aid in further attacks.

Symantec Reporting Server URL Handling Phishing Vulnerability

Attackers can exploit this issue by tricking an unsuspecting victim into following a malicious URI.

Symantec Reporting Server URL Handling Phishing Vulnerability

Solution:
The vendor has released a fix. Please see the references for details.

Symantec Reporting Server URL Handling Phishing Vulnerability

References:

• SYM09-008: Symantec Reporting Server Improper URL Handling Exposure (Symantec)
  
• Symantec Client Security Homepage (Symantec)
  
• Symantec Homepage (Symantec)