Secure Entry Server CVE-2013-2764 URI Redirection Vulnerability
BID:64422
CVE-2013-2764 |Info
Secure Entry Server CVE-2013-2764 URI Redirection Vulnerability
| Bugtraq ID: | 64422 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2764 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 18 2013 12:00AM |
| Updated: | Dec 18 2013 12:00AM |
| Credit: | Alexandre Herzog |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Secure Entry Server CVE-2013-2764 URI Redirection Vulnerability
Secure Entry Server is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.
A successful exploit may aid in phishing attacks; other attacks are possible.
Secure Entry Server is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.
A successful exploit may aid in phishing attacks; other attacks are possible.
Exploit / POC
Secure Entry Server CVE-2013-2764 URI Redirection Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
Secure Entry Server CVE-2013-2764 URI Redirection Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.