Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
BID:46215
Info
Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
| Bugtraq ID: | 46215 |
| Class: | Design Error |
| CVE: |
CVE-2011-0885 CVE-2011-0886 CVE-2011-0887 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 06 2011 12:00AM |
| Updated: | Feb 06 2011 12:00AM |
| Credit: | Trustwave's SpiderLabs |
| Vulnerable: |
Comcast DOCSIS 3.0 |
| Not Vulnerable: | |
Discussion
Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
Comcast DOCSIS is prone to multiple cross-site request-forgery and security-bypass vulnerabilities in business gateways.
Exploiting these issues may allow a remote attacker to perform certain administrative actions, bypass certain security restrictions, gain unauthorized access to the affected device, or delete certain data. Other attacks are also possible.
Comcast DOCSIS 3.0 is vulnerable; other versions may also be affected.
Comcast DOCSIS is prone to multiple cross-site request-forgery and security-bypass vulnerabilities in business gateways.
Exploiting these issues may allow a remote attacker to perform certain administrative actions, bypass certain security restrictions, gain unauthorized access to the affected device, or delete certain data. Other attacks are also possible.
Comcast DOCSIS 3.0 is vulnerable; other versions may also be affected.
Exploit / POC
Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
An attacker can exploit these issues through a browser. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.
The following example proof-of-concepts are available:
An attacker can exploit these issues through a browser. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.
The following example proof-of-concepts are available:
Solution / Fix
Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
Solution:
Report indicates that vendor patch is available but Symantec has not confirmed it.
Solution:
Report indicates that vendor patch is available but Symantec has not confirmed it.
References
Comcast DOCSIS 3.0 Business Gateways Cross Site Request Forgery and Security Bypass Vulnerabilities
References:
References:
- DOCSIS Homepage (Comcast)
- Comcast DOCSIS 3.0 Business Gateways Multiple Vulnerabilities (Trustwave's SpiderLabs)