Merak Mail Server cross-site scripting
| merak-xss (17024) |  Medium Risk |
Description:
Merak Mail Server is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could embed malicious script in a specially-crafted URL request to a vulnerable script or post a message containing malicious script embedded in a vulnerable field, which would be executed in the victim's Web browser, once the URL is clicked or the message is viewed. An attacker could use this vulnerability to steal another user's cookie-based authentication credentials.
Consequences:
Gain Access
Remedy:
Upgrade to the latest version of Merak Mail Server (7.5.2 or later), available from the Merak Mail Server Software Download Web page. See References.
References:
- Merak Mail Server Software Download Web page: Merak Mail Server Software Downloads.
- Merak Mail Server Web page: Merak Mail Server Software.
- BID-10966: Merak Mail Server Webmail Multiple Vulnerabilities
- CVE-2004-1719: Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
- OSVDB ID: 9037: IceWarp WebMail address.html Multiple Variable XSS
- OSVDB ID: 9038: IceWarp WebMail settings.html Multiple Variable XSS
- OSVDB ID: 9039: IceWarp WebMail readmail.html folder Variable XSS
- OSVDB ID: 9040: IceWarp WebMail attachment.html attachmentpage_text_error Variable XSS
- OSVDB ID: 9041: IceWarp WebMail calendar.html Multiple Variable XSS
- OSVDB ID: 9042: IceWarp WebMail HTML Message Body XSS
- SA12269: IceWarp Web Mail Multiple Unspecified Vulnerabilities
- SECTRACK ID: 1010969: Merak Mail Server Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks
Platforms Affected:
- IceWarp Software Merak Mail Server 5.2.7
Reported:
Aug 17, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net