Mhonarc Mail Header HTML Injection Vulnerability

Bugtraq ID:	6204
Class:	Input Validation Error
CVE:	CVE-2002-1307
Remote:	Yes
Local:	No
Published:	Nov 19 2002 12:00AM
Updated:	Jul 11 2009 07:16PM
Credit:	Discovery of this vulnerability is credited to Steven Christey.
Vulnerable:	MHonArc MHonArc 2.5.13 MHonArc MHonArc 2.5.12 MHonArc MHonArc 2.5.11 MHonArc MHonArc 2.5.3 MHonArc MHonArc 2.5.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 MHonArc MHonArc 2.5.1 MHonArc MHonArc 2.5 MHonArc MHonArc 2.4.4 + Debian Linux 2.2 pre potato + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2
Not Vulnerable:	MHonArc MHonArc 2.5.13

Mhonarc Mail Header HTML Injection Vulnerability

A HTML injection vulnerability has been discovered in Mhonarc.

An attacker may exploit this issue by sending a specially constructed email containing malicious HTML code in the header section. When the vulnerable Mhonarc client converts the message to HTML, any malicious HTML code will be executed within the context of the displayed web page.

Mhonarc Mail Header HTML Injection Vulnerability

There is no exploit code required. Simply crafting a message similar to the following provided by Earl Hood <[email protected]> can exploit the vulnerability:

To: <[email protected]>
From: <[email protected]>
Header<SCRIPT>hello</SCRIPT>def: whatever

Mhonarc Mail Header HTML Injection Vulnerability

Solution:
Debian has released a security announcement. Fixes are available.

Fixes:


MHonArc MHonArc 2.4.4

• Debian mhonarc_2.4.4-1.2.diff.gz
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.4.4-1 .2.diff.gz


• Debian mhonarc_2.4.4-1.2.dsc
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.4.4-1 .2.dsc


• Debian mhonarc_2.4.4-1.2_all.deb
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.4.4-1 .2_all.deb


• Debian mhonarc_2.4.4.orig.tar.gz
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.4.4.o rig.tar.gz


• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5

• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5.1

• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5.11

• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5.12

• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5.2

• Debian mhonarc_2.5.2-1.2.diff.gz
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.5.2-1 .2.diff.gz


• Debian mhonarc_2.5.2-1.2.dsc
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.5.2-1 .2.dsc


• Debian mhonarc_2.5.2-1.2_all.deb
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.5.2-1 .2_all.deb


• Debian mhonarc_2.5.2.orig.tar.gz
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.5.2.o rig.tar.gz


• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

MHonArc MHonArc 2.5.3

• MHonArc MHonArc2.5.13.tar.bz2
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.bz2


• MHonArc MHonArc2.5.13.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.13.tar.gz


• MHonArc MHonArc2.5.13.zip
  http://www.mhonarc.org/tar/MHonArc2.5.13.zip

Mhonarc Mail Header HTML Injection Vulnerability

References:

• MHonArc Homepage (MHonArc)
  
• MHonArc Security Advisory: XSS vulnerability (Earl Hood )