Netegrity SiteMinder Input Validation Vulnerability

Bugtraq ID:	6060
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 24 2001 12:00AM
Updated:	Aug 24 2001 12:00AM
Credit:	Discovery is credited to the SANS Institute.
Vulnerable:	Netegrity SiteMinder 4.5.1 Netegrity SiteMinder 4.5 Netegrity SiteMinder 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 2.5.1 _x86 - Sun Solaris 2.5.1 _ppc - Sun Solaris 2.5.1 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.5_x86 - Sun Solaris 2.5 - Sun Solaris 2.4_x86 - Sun Solaris 2.4 - Sun Solaris 2.3 - Sun Solaris 2.2 - Sun Solaris 2.1 - Sun Solaris 2.0 Netegrity SiteMinder 3.6 - Microsoft Windows NT 4.0 - Sun Solaris 2.5.1 _x86 - Sun Solaris 2.5.1 _ppc - Sun Solaris 2.5.1 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.5_x86 - Sun Solaris 2.5 - Sun Solaris 2.4_x86 - Sun Solaris 2.4 - Sun Solaris 2.3 - Sun Solaris 2.2 - Sun Solaris 2.1 - Sun Solaris 2.0
Not Vulnerable:	Netegrity SiteMinder 4.5.1 SP1

Netegrity SiteMinder Input Validation Vulnerability

This issue may be exploited with a web browser.

Netegrity SiteMinder Input Validation Vulnerability

Solution:
This issue is reportedly not present in Netegrity SiteMinder versions 4.5.1 SP1 and later.

It has been reported but not confirmed that the vendor has released a patch for earlier versions. Users should contact the vendor for details regarding the availability of fixes.