Apache HTTP TRACE Cross Site Scripting Vulnerability

Bugtraq ID:	36990
Class:	Input Validation Error
CVE:	CVE-2009-2823
Remote:	Yes
Local:	No
Published:	Nov 09 2009 12:00AM
Updated:	Jan 07 2010 03:52PM
Credit:	Apple
Vulnerable:	Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.6.2 Apple Mac OS X 10.6.2

Apache HTTP TRACE Cross Site Scripting Vulnerability

Apache is prone to a cross-site scripting vulnerability

The issue presents itself because the server supports the HTTP TRACE request by default.

With HTTP TRACE functionality enabled by default, an attacker can compromise user accounts by gaining access to sensitive header information. The attacker may exploit this issue to steal cookie-based authentication credentials and carry out other attacks.

NOTE: This issue was previously covered in BID 36956 (Apple Mac OS X 2009-006 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apache HTTP TRACE Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Apache HTTP TRACE Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva apache-conf-2.2.11-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache-conf-2.2.9-2.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.2.dmg
  For Mac OS X Server v10.6
  http://www.apple.com/support/downloads/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva apache-conf-2.2.9-2.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva apache-conf-2.2.6-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva apache-conf-2.2.9-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva apache-conf-2.2.6-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0

• Mandriva apache-conf-2.2.14-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva apache-conf-2.2.14-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0

• Mandriva apache-conf-2.2.9-2.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva apache-conf-2.2.3-1.2.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.2.dmg
  For Mac OS X v10.6
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva apache-conf-2.2.9-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1

• Mandriva apache-conf-2.2.11-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache-conf-2.2.9-2.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Apple Mac OS X Server 10.5.8

• Apple SecUpdSrvr2009-006.dmg
  For Mac OS X Server v10.5.8
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.8

• Apple SecUpd2009-006.dmg
  For Mac OS X v10.5.8
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpd10.6.2.dmg
  For Mac OS X v10.6.1
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.1

• Apple MacOSXServerUpd10.6.2.dmg
  For Mac OS X Server v10.6.1
  http://www.apple.com/support/downloads/

MandrakeSoft Multi Network Firewall 2.0

• Mandriva apache-conf-2.0.48-4.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva apache-conf-2.0.48-4.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva apache-conf-2.0.48-4.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva apache-conf-2.2.3-1.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Apache HTTP TRACE Cross Site Scripting Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)