AnalogX Proxy DNS Lookup Error Page Cross-Site Scripting Vulnerability

Bugtraq ID:	8487
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2003 12:00AM
Updated:	Aug 25 2003 12:00AM
Credit:	Discovery is credited to Chris Sharp <[email protected]>.
Vulnerable:	AnalogX Proxy 4.14 AnalogX Proxy 4.13 AnalogX Proxy 4.10 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 AnalogX Proxy 4.0 7 AnalogX Proxy 4.0 6 AnalogX Proxy 4.0 5 AnalogX Proxy 4.0 4 AnalogX Proxy 4.0 3 AnalogX Proxy 4.0 2 AnalogX Proxy 4.0 1 AnalogX Proxy 4.0
Not Vulnerable:

AnalogX Proxy DNS Lookup Error Page Cross-Site Scripting Vulnerability

AnalogX Proxy is reportedly prone to a cross-site scripting vulnerability. This issue can be exploited through the AnalogX error pages that are returned for non-existant domains.

Exploitation of this issue may lead to theft of cookie-based credentials and other attacks.

AnalogX Proxy DNS Lookup Error Page Cross-Site Scripting Vulnerability

No exploit is required.

AnalogX Proxy DNS Lookup Error Page Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AnalogX Proxy DNS Lookup Error Page Cross-Site Scripting Vulnerability

References:

• AnalogX Proxy Home Page (AnalogX)