McAfee Unified Threat Management Firewall 'page' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	40708
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 07 2010 12:00AM
Updated:	Jun 07 2010 12:00AM
Credit:	Adam Baldwin
Vulnerable:	McAfee Unified Threat Management Firewall 4.0.6
Not Vulnerable:	McAfee Unified Threat Management Firewall 4.0.7

McAfee Unified Threat Management Firewall 'page' Parameter Cross Site Scripting Vulnerability

McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

UTM Firewall firmware versions 3.0.0 through 4.0.6 are vulnerable.

McAfee Unified Threat Management Firewall 'page' Parameter Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following example URI is available:

• /data/vulnerabilities/exploits/40708.txt

McAfee Unified Threat Management Firewall 'page' Parameter Cross Site Scripting Vulnerability

Solution:
Updates are available; please see the references for more information.

McAfee Unified Threat Management Firewall 'page' Parameter Cross Site Scripting Vulnerability

References:

• McAfee UTM Firewall Help Cross-Site Scripting (nGenuity Information Security)
  
• Unified Threat Management Firewall Homepage (McAfee)
  
• McAfee UTM Firewall Help Reflected Cross-Site Scripting (Adam Baldwin )