AN HTTPD Cross Site Scripting Vulnerability

Bugtraq ID:	6529
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 06 2003 12:00AM
Updated:	Jan 06 2003 12:00AM
Credit:	Discovery credited to D4rkGr3y <[email protected]>.
Vulnerable:	AN AN-HTTPd 1.41 e
Not Vulnerable:	AN AN-HTTPd 1.42 f

AN HTTPD Cross Site Scripting Vulnerability

AN HTTPD does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user. All code will be executed within the context of the website running AN HTTPD.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software.

AN HTTPD Cross Site Scripting Vulnerability

The following proof of concept was provided:

http://www.target.com/[script]?<h1>HACKED</h1>aaaa..[up_to_1kb]..aaaa

AN HTTPD Cross Site Scripting Vulnerability

Solution:
The vendor has released AN-HTTPD 1.42f which addresses this issue. Users are advised to upgrade as soon as possible.


AN AN-HTTPd 1.41 e

• AN httpd142f.exe
  http://www.st.rim.or.jp/~nakata/httpd142f.exe

AN HTTPD Cross Site Scripting Vulnerability

References:

• AN-HTTPD Home Page (AN-HTTPD)
  
• AN HTTPd v.1.41e: DoS, CSS, real patch attack (D4rkGr3y )