Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability
BID:9020
Info
Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability
Bugtraq ID:
9020
Class:
Input Validation Error
CVE:
Remote:
Yes
Local:
No
Published:
Nov 12 2003 12:00AM
Updated:
Nov 12 2003 12:00AM
Credit:
Discovery credited to Arian J. Evans.
Vulnerable:
Nokia IPSO 3.7 Build 29
Nokia IPSO 3.7
Nokia IPSO 3.6
+
Nokia IP380
+
Nokia IP380
Nokia IPSO 3.5
+
Nokia IP380
+
Nokia IP380
Nokia IPSO 3.4.2
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.0 SP8
+
Check Point Software Firewall-1 4.0 SP8
+
Check Point Software Firewall-1 4.0 SP7
+
Check Point Software Firewall-1 4.0 SP7
+
Check Point Software Firewall-1 4.0 SP6
+
Check Point Software Firewall-1 4.0 SP6
+
Check Point Software Firewall-1 4.0 SP5
+
Check Point Software Firewall-1 4.0 SP5
+
Check Point Software Firewall-1 4.0 SP4
+
Check Point Software Firewall-1 4.0 SP4
+
Check Point Software Firewall-1 4.0 SP3
+
Check Point Software Firewall-1 4.0 SP3
+
Check Point Software Firewall-1 4.0 SP2
+
Check Point Software Firewall-1 4.0 SP2
+
Check Point Software Firewall-1 4.0 SP1
+
Check Point Software Firewall-1 4.0 SP1
+
Check Point Software Firewall-1 4.0
+
Check Point Software Firewall-1 4.0
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
Nokia IPSO 3.4.1
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
Nokia IPSO 3.4
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
+
Nokia IP380
+
Nokia IP380
Nokia IPSO 3.3.1
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
Nokia IPSO 3.3 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
Nokia IPSO 3.3 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
Nokia IPSO 3.3 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
Nokia IPSO 3.3 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
Nokia IPSO 3.3
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
Nokia IPSO 3.1.3
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP5
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP4
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP3
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP2
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1 SP1
+
Check Point Software Firewall-1 4.1
+
Check Point Software Firewall-1 4.1
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP4
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP3
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP2
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1 SP1
+
Check Point Software VPN-1 4.1
+
Check Point Software VPN-1 4.1
Not Vulnerable:
Discussion
Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability
It has been reported that Nokia IPSO httpdaccesslog.tcl script does not properly handle some types of input from access logs. Because of this, an attacker render HTML in the browser of an individual viewing the access logs.
Exploit / POC
Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability
No exploit is required for this vulnerability.
Solution / Fix
Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Nokia IPSO Voyager HTTPDAccessLog.TCL Remote Script injection Vulnerability