Computer Associates SiteMinder '%00' Cross Site Scripting Protection Security Bypass Vulnerability

Bugtraq ID:	36086
Class:	Input Validation Error
CVE:	CVE-2009-2704
Remote:	Yes
Local:	No
Published:	Jun 08 2009 12:00AM
Updated:	Aug 21 2009 03:55PM
Credit:	Arshan Dabirsiaghi and Jeff Williams
Vulnerable:	Computer Associates SiteMinder 0
Not Vulnerable:

Computer Associates SiteMinder '%00' Cross Site Scripting Protection Security Bypass Vulnerability

Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in further attacks.

We don't know which versions of SiteMinder are affected. We will update this BID when more details become available.

Computer Associates SiteMinder '%00' Cross Site Scripting Protection Security Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

• /data/vulnerabilities/exploits/36086.txt

Computer Associates SiteMinder '%00' Cross Site Scripting Protection Security Bypass Vulnerability

Solution:
Reports indicate that the vendor has resolved this issue. Please contact the vendor for details.

Computer Associates SiteMinder '%00' Cross Site Scripting Protection Security Bypass Vulnerability

References:

• SiteMinder Homepage (Computer Associates)
  
• Two SiteMinder Flaws and Painful Disclosure (Arshan Dabirsiaghi)