SurfControl SuperScout Email Filter MsgError.ASP Cross-Site Scripting Vulnerability

Bugtraq ID:	5928
Class:	Input Validation Error
CVE:	CVE-2002-1529
Remote:	Yes
Local:	No
Published:	Oct 08 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery of this issue is credited to 'ken'@FTU <[email protected]>.
Vulnerable:	SurfControl SuperScout Email Filter for SMTP 4.0 SurfControl SuperScout Email Filter 3.5.1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows NT 4.0 SP6a SurfControl SuperScout Email Filter 3.5
Not Vulnerable:

SurfControl SuperScout Email Filter MsgError.ASP Cross-Site Scripting Vulnerability

SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.

The web-based admin interface is prone to cross-site scripting attacks.

It is possible to create a link containing malicious HTML and script code to certain pages in the interface. When this link is visited by a web user, the attacker-supplied script code will execute in user's web client in the security context of the web interface.

This may potentially be exploited to steal cookie-based authentication credentials from legitimate users of the interface.

SurfControl SuperScout Email Filter MsgError.ASP Cross-Site Scripting Vulnerability

The following proof-of-concept example was provided:

http://www.example.com/web/msgError.asp?Redirect=loginhtm&Reason=<script>alert(document.cookie);</script>

SurfControl SuperScout Email Filter MsgError.ASP Cross-Site Scripting Vulnerability

Solution:
The vendor has reportedly released a fix. Affected users should contact the vendor about obtaining fixes.

SurfControl SuperScout Email Filter MsgError.ASP Cross-Site Scripting Vulnerability

References:

• SurfControl Home Page (SurfControl)