o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
BID:47261
Info
o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
| Bugtraq ID: | 47261 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 07 2011 12:00AM |
| Updated: | Apr 07 2011 12:00AM |
| Credit: | Hanno Böck |
| Vulnerable: |
Telefónica Germany GmbH & Co. OHG o2 DSL Router Classic 0 |
| Not Vulnerable: | |
Discussion
o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
o2 DSL Router Classic is prone to a cross-site request-forgery vulnerability and multiple HTML-injection vulnerabilities.
An attacker can exploit the cross-site request-forgery issue to perform unauthorized actions in the context of a user's session. This may aid in other attacks.
The attacker can exploit the HTML-injection issues to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, or to control how the site is rendered. Other attacks are also possible.
o2 DSL Router Classic is prone to a cross-site request-forgery vulnerability and multiple HTML-injection vulnerabilities.
An attacker can exploit the cross-site request-forgery issue to perform unauthorized actions in the context of a user's session. This may aid in other attacks.
The attacker can exploit the HTML-injection issues to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, or to control how the site is rendered. Other attacks are also possible.
Exploit / POC
o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
An attacker can exploit these issues with readily available tools.
An attacker can exploit these issues with readily available tools.
Solution / Fix
o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
o2 DSL Router Classic Cross Site Request Forgery and HTML Injection Vulnerabilities
References:
References:
- O2 classic router: persistent cross site scripting (XSS) and cross site request (Hanno Böck )
- o2 DSL Router Classic Homepage (Telefónica Germany GmbH & Co. OHG)