Summaryinfo

A vulnerability classified as critical was found in Sun iPlanet. The impacted element is an unknown function of the component Error Page. The manipulation of the argument Request URI as part of HREF Link results in cross site scripting. The attack may be performed from remote. In addition, an exploit is available. Applying restrictive firewalling is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in Sun iPlanet (version unknown). Affected is an unknown function of the component Error Page. The manipulation of the argument Request URI as part of a HREF Link leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on confidentiality, and integrity.

The weakness was presented 06/30/2012 by Bugs NotHugs as not defined mailinglist post (Full-Disclosure). The advisory is shared for download at seclists.org. The public release happened without coordination with the vendor. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details and a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1059.007.

A public exploit has been developed by BugsNotHugs in HTTP Request and been published immediately after the advisory. The exploit is shared for download at seclists.org. It is declared as proof-of-concept.

It is possible to mitigate the weakness by firewalling Web Server Port. It is possible to mitigate the problem by adding .htaccess as an authentication mechanism. The problem might be mitigated by replacing the product with Apache or MS IIS as an alternative. The best possible mitigation is suggested to be applying a restrictive firewalling.

The vulnerability is also documented in the vulnerability database at OSVDB (83485†). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Sun

Name

• iPlanet

License

• commercial

Website

• Vendor: https://www.oracle.com/sun/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion