Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
BID:34669
Info
Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
| Bugtraq ID: | 34669 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1428 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2009 12:00AM |
| Updated: | May 01 2009 12:36AM |
| Credit: | Mark Litchfield from Next Generation Security Software |
| Vulnerable: |
Symantec Norton Internet Security 2008 0 Symantec Norton Internet Security 2007 0 Symantec Norton Internet Security 2006 Professional Edition Symantec Norton Internet Security 2006 0 Symantec Norton Internet Security 2005 Professional Edition Symantec Norton Internet Security 2005 Anti Spyware Edition 0 Symantec Norton Internet Security 2005 11.5.6 .14 Symantec Norton Internet Security 2005 11.0.9 Symantec Norton Internet Security 2005 11.0 Symantec Norton Internet Security 2005 Symantec Norton 360 1.0 Symantec Endpoint Protection 11.0 Symantec Client Security 3.1.7 .7000 (MR7) Symantec Client Security 3.1.6 .6010 (MR6-MP1) Symantec Client Security 3.1.5 .5010 (MR5-MP1) Symantec Client Security 3.1.5 .5001 (MR5-PP1) Symantec Client Security 3.1.5 .5000 (MR5) Symantec Client Security 3.1.4 MR4 MP1 - build 4010 Symantec Client Security 3.1.4 .4000 (MR4) Symantec Client Security 3.1 .401 Symantec Client Security 3.1 .400 Symantec Client Security 3.1 .396 Symantec Client Security 3.1 .394 Symantec Client Security 2.0.6 MR6 MP1 - build 1100 Symantec Client Security 2.0.6 MR6 Symantec Client Security 2.0.6 .1000 (MR6) Symantec Client Security 2.0.5 build 1100 Symantec Client Security 2.0.5 .1001 (MR5-PP1) Symantec Client Security 2.0.5 .1000 (MR5) Symantec Client Security 2.0.4 MR4 build 1000 Symantec Client Security 2.0.4 Symantec Client Security 2.0.3 .1100 (MR3-MP1) Symantec Client Security 2.0.3 .1000 (MR3) Symantec Client Security 2.0.3 MR3 b9.0.3.1000 Symantec Client Security 2.0.2 .1000 (MR2) Symantec Client Security 2.0.2 MR2 b9.0.2.1000 Symantec Client Security 2.0.1 .1100 (MR1-MP1) Symantec Client Security 2.0.1 .1001 (MR1-PP1) Symantec Client Security 2.0.1 .1000 (MR1) Symantec Client Security 2.0.1 MR1 b9.0.1.1000 Symantec Client Security 2.0 .338 (STM) Symantec Client Security 2.0 .1400 (STM-PP2) Symantec Client Security 2.0 .1300 (STM-PP1) Symantec Client Security 2.0 STM build 9.0.0.338 Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1 MR7 Symantec Client Security 3.1 MR6 MP1 Symantec Client Security 3.1 MR6 Symantec Client Security 3.1 Symantec Client Security 2.0 MR6 MP1 Symantec AntiVirus Corporate Edition 10.2.1 .1000 (MR1) Symantec AntiVirus Corporate Edition 10.2 .313 (STM-PP1) Symantec AntiVirus Corporate Edition 10.2 .298 (STM 64-bit) Symantec AntiVirus Corporate Edition 10.2 .276 (STM 32-bit) Symantec AntiVirus Corporate Edition 10.1.7 .7000 (MR7) Symantec AntiVirus Corporate Edition 10.1.6 .6010 (MR6-MP1) Symantec AntiVirus Corporate Edition 10.1.5 .5010 (MR5-MP1) Symantec AntiVirus Corporate Edition 10.1.5 .5001 (MR5-PP1) Symantec AntiVirus Corporate Edition 10.1.5 .5000 (MR5) Symantec AntiVirus Corporate Edition 10.1.4 MR4 MP1 - build 4010 Symantec AntiVirus Corporate Edition 10.1.4 .4000 (MR4) Symantec AntiVirus Corporate Edition 10.1.4 Symantec AntiVirus Corporate Edition 10.1 .401 Symantec AntiVirus Corporate Edition 10.1 .400 Symantec AntiVirus Corporate Edition 10.1 .396 Symantec AntiVirus Corporate Edition 10.1 .394 Symantec AntiVirus Corporate Edition 9.0.6 MR6 MP1 - build 1100 Symantec AntiVirus Corporate Edition 9.0.6 .1000 (MR6) Symantec AntiVirus Corporate Edition 9.0.5 .1100 Symantec AntiVirus Corporate Edition 9.0.5 .1001 (MR5-PP1) Symantec AntiVirus Corporate Edition 9.0.5 .1000 (MR5) Symantec AntiVirus Corporate Edition 9.0.5 Symantec AntiVirus Corporate Edition 9.0.4 MR4 build 1000 Symantec AntiVirus Corporate Edition 9.0.4 Symantec AntiVirus Corporate Edition 9.0.3 .1100 (MR3-MP1) Symantec AntiVirus Corporate Edition 9.0.3 .1000 Symantec AntiVirus Corporate Edition 9.0.2 .1000 Symantec AntiVirus Corporate Edition 9.0.1 .1100 (MR1-MP1) Symantec AntiVirus Corporate Edition 9.0.1 .1001 (MR1-PP1) Symantec AntiVirus Corporate Edition 9.0.1 .1000 (MR1) Symantec AntiVirus Corporate Edition 9.0.1 .1.1000 Symantec AntiVirus Corporate Edition 9.0 .1400 (STM-PP2) Symantec AntiVirus Corporate Edition 9.0 .1300 (STM-PP1) Symantec AntiVirus Corporate Edition 9.0 .0.338 Symantec AntiVirus Corporate Edition 9.0 Symantec AntiVirus Corporate Edition 9.0.6.1000 Symantec AntiVirus Corporate Edition 9 MR6 MP1 Symantec AntiVirus Corporate Edition 10.2 MR1 Symantec AntiVirus Corporate Edition 10.2 Symantec AntiVirus Corporate Edition 10.1.6.6000 Symantec AntiVirus Corporate Edition 10.1.6.600 Symantec AntiVirus Corporate Edition 10.1.4.4010 Symantec AntiVirus Corporate Edition 10.1 MR7 Symantec AntiVirus Corporate Edition 10.1 MR6 MP1 Symantec AntiVirus Corporate Edition 10.1 MR6 Symantec AntiVirus Corporate Edition 10.1 |
| Not Vulnerable: |
Symantec Norton Internet Security 2009 0 Symantec Norton 360 2.0 Symantec Endpoint Protection 11.0 MR1 Symantec Client Security 3.1 MR8 Symantec Client Security 2.0 MR7 Symantec AntiVirus Corporate Edition 9.0 MR7 Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec AntiVirus Corporate Edition 10.1 MR8 |
Discussion
Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
Multiple Symantec products are prone to multiple script-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
These issues affect the following products:
Norton 360 1.0
Norton Internet Security 2005 through 2008
Symantec AntiVirus 9.0MR6 and earlier
Symantec AntiVirus 10.1 MR7 and earlier
Symantec AntiVirus 10.2 MR1 and earlier
Symantec Endpoint Protection 11.0
Symantec Client Security 2.0 MR6 and earlier
Symantec Client Security 3.1 MR7 and earlier
http://drupal.org/node/207891
Multiple Symantec products are prone to multiple script-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
These issues affect the following products:
Norton 360 1.0
Norton Internet Security 2005 through 2008
Symantec AntiVirus 9.0MR6 and earlier
Symantec AntiVirus 10.1 MR7 and earlier
Symantec AntiVirus 10.2 MR1 and earlier
Symantec Endpoint Protection 11.0
Symantec Client Security 2.0 MR6 and earlier
Symantec Client Security 3.1 MR7 and earlier
http://drupal.org/node/207891
Exploit / POC
Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
Multiple Symantec Products Log Viewer Multiple Script Injection Vulnerabilities
References:
References: