OSVDB ID: 27531

Title: Novell GroupWise WebAccess webacc Multiple Parameter XSS

Info

Disclosure
Jan 31, 2008

Discovery
Nov 14, 2006

Dates

Exploit
Jan 31, 2008

Solution
Jan 31, 2008

Description

 Novell GroupWise WebAccess contains a flaw that may allow a remote cross-site scripting attack. The 'webacc' program fails to validate the 'User.html', 'Error', 'User.Theme.index' and 'User.lang' variables before being returned to the user. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified
OSVDB: Web Related

Solution

 Upgrade to GroupWise 7 Support Pack 3 Public Beta or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Novell, Inc.

GroupWise WebAccess

 5.57e
6.5.7
7.00.01

References

Credit
  • Brian Martin - brian.martinins.com - BT INS
  • Frederic Loudet -


Direct URL: http://osvdb.org/27531