OSVDB ID: 61193

Title: Juniper Clientless SSL VPN URL Rewriting Cross Domain Same Origin Policy Bypass

Info

Disclosure

Jun 08, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified
OSVDB: Web Related, Security Software

Solution

Products

Unknown or Incomplete

References

CVE ID: 2009-2631 (see also: NVD)
CERT VU: 261869
Bugtraq ID: 37152
Secunia Advisory ID: 37786
ISS X-Force ID: 54523
Related OSVDB ID: 61190 61191 61192 61194 61195
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2009-12/0015.html
http://seclists.org/fulldisclosure/2006/Jun/238
http://seclists.org/fulldisclosure/2006/Jun/269
http://seclists.org/fulldisclosure/2006/Jun/270
http://www.securityfocus.com/archive/1/archive/1/508164/100/0/threaded
Vendor Specific News/Changelog Entry: http://kb.juniper.net/KB15799
http://www.sonicwall.com/us/2123_14882.html
http://www.sonicwall.com/us/2123_14883.html
http://www.stonesoft.com/en/support/security_advisories/2009_03_12.html
Other Advisory URL: http://www.frsirt.com/english/advisories/2009/3569
News Article: http://www.itweb.co.za/index.php?option=com_content&view=article&id=28597:cisco-juniper-vulnerable-to-hacking&catid=219:reuters
Vendor Specific Advisory URL: http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2009-11-580&viewMode=view

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/61193