BID:40892

Apple Mac OS X Wiki Server Comment HTML Injection Vulnerability

Info

Apple Mac OS X Wiki Server Comment HTML Injection Vulnerability

Bugtraq ID:	40892
Class:	Input Validation Error
CVE:	CVE-2010-1382
Remote:	Yes
Local:	No
Published:	Jun 15 2010 12:00AM
Updated:	Jun 15 2010 12:00AM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5

Not Vulnerable:	Apple Mac OS X Server 10.6.4 Apple Mac OS X 10.6.4

Discussion

Apple Mac OS X Wiki Server Comment HTML Injection Vulnerability

Apple Mac OS X Wiki Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

NOTE: This issue was previously covered in BID 40871 (Apple Mac OS X Prior to 10.6.4 Multiple Security Vulnerabilities), but has been given its own record to better document it.

Exploit / POC

Apple Mac OS X Wiki Server Comment HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Solution / Fix

Apple Mac OS X Wiki Server Comment HTML Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apple Mac OS X Server 10.6