Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
BID:8841
Info
Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
| Bugtraq ID: | 8841 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2003 12:00AM |
| Updated: | Oct 16 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to "Oliver Karow" <[email protected]>. |
| Vulnerable: |
Bajie Java HTTP Server 0.95 zxv4 Bajie Java HTTP Server 0.95 zxe1 Bajie Java HTTP Server 0.95 zxe Bajie Java HTTP Server 0.95 zxc Bajie Java HTTP Server 0.95 d Bajie Java HTTP Server 0.95 |
| Not Vulnerable: | |
Discussion
Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
Demonstration scripts and servlets that are distributed as part of Bajie HTTP Server have been reported prone to multiple cross-site scripting vulnerabilities.
It has been reported that a remote attacker may construct a malicious link containing script and HTML code to any one of the vulnerable demonstration scripts or servlets on the affected server. If this link is followed the code contained therein will be rendered in the browser of the user who followed the link.
Demonstration scripts and servlets that are distributed as part of Bajie HTTP Server have been reported prone to multiple cross-site scripting vulnerabilities.
It has been reported that a remote attacker may construct a malicious link containing script and HTML code to any one of the vulnerable demonstration scripts or servlets on the affected server. If this link is followed the code contained therein will be rendered in the browser of the user who followed the link.
Exploit / POC
Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
The following proof of concept has been supplied:
http://www.example.com/cgi/bin/test.txt?<script>alert(document.cookie)</script>
POST /servlet/custMsg?guestName=<script>alert("bang")</script> HTTP/1.0
POST /servlet/CookieExample?cookiename=<script>alert("bang")</script>&cookievalue=&cookiepath=
HTTP/1.0
The following proof of concept has been supplied:
http://www.example.com/cgi/bin/test.txt?<script>alert(document.cookie)</script>
POST /servlet/custMsg?guestName=<script>alert("bang")</script> HTTP/1.0
POST /servlet/CookieExample?cookiename=<script>alert("bang")</script>&cookievalue=&cookiepath=
HTTP/1.0
Solution / Fix
Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
Solution:
The author has fixed this issue in version 0.95zxv4 versions available on October 16th.
Bajie Java HTTP Server 0.95 d
Bajie Java HTTP Server 0.95 zxv4
Bajie Java HTTP Server 0.95 zxe
Bajie Java HTTP Server 0.95 zxe1
Bajie Java HTTP Server 0.95
Bajie Java HTTP Server 0.95 zxc
Solution:
The author has fixed this issue in version 0.95zxv4 versions available on October 16th.
Bajie Java HTTP Server 0.95 d
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
Bajie Java HTTP Server 0.95 zxv4
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
Bajie Java HTTP Server 0.95 zxe
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
Bajie Java HTTP Server 0.95 zxe1
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
Bajie Java HTTP Server 0.95
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
Bajie Java HTTP Server 0.95 zxc
-
Bajie httpsrv.95zxv4rel.zip
http://www.utdallas.edu/~gxz014000/websrv/httpsrv.95zxv4rel.zip
References
Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability
References:
References:
- Bajie HTTP Web Server Homepage (Bajie)
- CSS Vulnerability in Bajie HTTP JServer ("Oliver Karow"
)