Drupal Janrain Engage / RPX Module Cross-Site Scripting And Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	45926
Class:	Input Validation Error
CVE:	CVE-2011-0771
Remote:	Yes
Local:	No
Published:	Jan 19 2011 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Greg Dunlap
Vulnerable:	Nathan Rambeck Janrain Engage / RPX 6.X-1.3
Not Vulnerable:	Nathan Rambeck Janrain Engage / RPX 6.X-1.4

Drupal Janrain Engage / RPX Module Cross-Site Scripting And Arbitrary Code Execution Vulnerabilities

The Janrain Engage / RPX module for Drupal is prone to a cross-site-scripting vulnerability and an arbitrary-code-execution vulnerability because the application fails to sufficiently sanitize user-supplied data.

Attackers can exploit these issues to execute arbitrary code in the context of the webserver and steal cookie-based authentication credentials from legitimate users of the site. Other attacks are also possible.

Janrain Engage / RPX module 6.x-1.3 is vulnerable.

Drupal Janrain Engage / RPX Module Cross-Site Scripting And Arbitrary Code Execution Vulnerabilities

Attackers can exploit these issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.

Drupal Janrain Engage / RPX Module Cross-Site Scripting And Arbitrary Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Nathan Rambeck Janrain Engage / RPX 6.X-1.3

• Nathan Rambeck rpx 6.x-1.4
  http://drupal.org/node/1032622

Drupal Janrain Engage / RPX Module Cross-Site Scripting And Arbitrary Code Execution Vulnerabilities

References:

• Drupal Homepage (Drupal)
  
• Janrain Engage / RPX Module Homepage (Drupal)
  
• SA-CONTRIB-2011-003 - Janrain Engage (RPX) - Multiple Vulnerabilities (Drupal)