Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
BID:35592
Info
Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 35592 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-3760 CVE-2009-3759 CVE-2009-3758 CVE-2009-3757 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 07 2009 12:00AM |
| Updated: | Nov 26 2009 09:05PM |
| Credit: | Claudio Criscione and Alberto Trivero |
| Vulnerable: |
Citrix XenCenterWeb 0 |
| Not Vulnerable: | |
Discussion
Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
Citrix XenCenterWeb is prone to the following input-validation vulnerabilities:
- Multiple cross-site request-forgery vulnerabilities
- Multiple cross-site scripting vulnerabilities
- Multiple SQL-injection vulnerabilities
- A remote command-execution vulnerability
Exploiting these issues could allow an attacker to execute arbitrary code, perform unauthorized actions, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Citrix XenCenterWeb is prone to the following input-validation vulnerabilities:
- Multiple cross-site request-forgery vulnerabilities
- Multiple cross-site scripting vulnerabilities
- Multiple SQL-injection vulnerabilities
- A remote command-execution vulnerability
Exploiting these issues could allow an attacker to execute arbitrary code, perform unauthorized actions, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
Solution / Fix
Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor reports that the vulnerable tool (currently unsupported) was created to demonstrate how the SDK could be used to create unique solutions. Customers currently using the tool should assess the risks of continued use in light of the findings in this report. If the risks prove to be unacceptable, discontinue using the tool.
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor reports that the vulnerable tool (currently unsupported) was created to demonstrate how the SDK could be used to create unique solutions. Customers currently using the tool should assess the risks of continued use in light of the findings in this report. If the risks prove to be unacceptable, discontinue using the tool.
References
Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
References:
References: