RETIRED: IBM OmniFind Multiple Vulnerabilities
BID:44740
Info
RETIRED: IBM OmniFind Multiple Vulnerabilities
| Bugtraq ID: | 44740 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Nov 09 2010 12:00AM |
| Updated: | Nov 18 2010 06:16PM |
| Credit: | Fatih Kilic |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: IBM OmniFind Multiple Vulnerabilities
IBM OmniFind is prone to the following vulnerabilities:
1. Cross-site scripting
2. Cross-site request forgery
3. Session fixation
4. Session impersonation
5. Remote buffer overflow
6. Privilege escalation
7. Security bypass
8. Information disclosure
9. Denial of service
An attacker may exploit these issues to execute arbitrary script code in the context of the application, steal administrator authentication credentials, execute arbitrary code with root privileges, escalate privileges, bypass security restrictions and perform unauthorized actions, disclose sensitive information, or perform denial-of-service attacks.
IBM OmniFind versions 8.5 and 9.0 are affected; other versions may also be vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
44937 IBM OmniFind Domain Root Path Cookie Security Bypass Vulnerability
44939 IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability
44940 IBM OmniFind 'command' Parameter Cross Site Scripting Vulnerability
44941 IBM OmniFind Crawler Component Denial of Service Vulnerability
44942 IBM OmniFind Remote Information Disclosure Vulnerability
44943 IBM OmniFind Session-Fixation Vulnerability
44944 IBM OmniFind 'esRunCommand' and 'estaskwrapper' Multiple Local Privilege Escalation Vulnerabilities
44945 IBM OmniFind 'ESAdmin/security.do' Cross Site Request Forgery Vulnerability
44946 IBM OmniFind Session-Impersonation Weakness
44948 IBM OmniFind 'ESSearchApplication' Security Bypass Vulnerability
IBM OmniFind is prone to the following vulnerabilities:
1. Cross-site scripting
2. Cross-site request forgery
3. Session fixation
4. Session impersonation
5. Remote buffer overflow
6. Privilege escalation
7. Security bypass
8. Information disclosure
9. Denial of service
An attacker may exploit these issues to execute arbitrary script code in the context of the application, steal administrator authentication credentials, execute arbitrary code with root privileges, escalate privileges, bypass security restrictions and perform unauthorized actions, disclose sensitive information, or perform denial-of-service attacks.
IBM OmniFind versions 8.5 and 9.0 are affected; other versions may also be vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
44937 IBM OmniFind Domain Root Path Cookie Security Bypass Vulnerability
44939 IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability
44940 IBM OmniFind 'command' Parameter Cross Site Scripting Vulnerability
44941 IBM OmniFind Crawler Component Denial of Service Vulnerability
44942 IBM OmniFind Remote Information Disclosure Vulnerability
44943 IBM OmniFind Session-Fixation Vulnerability
44944 IBM OmniFind 'esRunCommand' and 'estaskwrapper' Multiple Local Privilege Escalation Vulnerabilities
44945 IBM OmniFind 'ESAdmin/security.do' Cross Site Request Forgery Vulnerability
44946 IBM OmniFind Session-Impersonation Weakness
44948 IBM OmniFind 'ESSearchApplication' Security Bypass Vulnerability
Exploit / POC
RETIRED: IBM OmniFind Multiple Vulnerabilities
Attackers can use a browser to exploit some of these issues.
The following exploits and proof of concepts are available:
Attackers can use a browser to exploit some of these issues.
The following exploits and proof of concepts are available:
Solution / Fix
RETIRED: IBM OmniFind Multiple Vulnerabilities
Solution:
Reportedly the vendor has fixed some of the issues however Symantec has not confirmed it. Please contact the vendor for more information.
Solution:
Reportedly the vendor has fixed some of the issues however Symantec has not confirmed it. Please contact the vendor for more information.
References
RETIRED: IBM OmniFind Multiple Vulnerabilities
References:
References:
- IBM OmniFind Homepage (IBM)
- IBM OmniFind several issues (Fatih Kilic)
- IBM OmniFind - several vulnerabilities (Fatih Kilic