Mobotix multiple scripts cross-site scripting
| mobotix-multiple-xss (26538) |  Medium Risk |
Description:
Mobotix is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the 'help', 'event player' or 'events.tar' script. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site, allowing the attacker to steal the victim's cookie-based authentication credentials.
Platforms Affected:
- Mobotix AG, Mobotix M1
- Mobotix AG, Mobotix M10/D10
- Mobotix AG, Mobotix M22
Remedy:
For Camera Model M22:
Upgrade to the latest version (V3.0.3.31) available from the Software Downloads page of the Mobotix IP Network Cameras Web site. See References.
For Camera Model M10/D10:
Upgrade to the latest version (V2.2.3.18) available from the Software Downloads page of the Mobotix IP Network Cameras Web site. See References.
Consequences:
Obtain Information
References:
- BugTraq Mailing List, Tue Aug 22 2006 - 03:31:56 CDT, Vendor Statement: fixed Mobotix IP Network Cameras Multiple XSS bug at http://archives.neohapsis.com/archives/bugtraq/2006-08/0422.html.
- BugTraq Mailing List, Wed May 17 2006 - 15:20:28 CDT, Mobotix IP Network Cameras Multiple XSS at http://archives.neohapsis.com/archives/bugtraq/2006-05/0337.html.
- Eazel Web site, Mobotix IP Network Cameras Multiple XSS at http://www.eazel.es/media/advisory001.html.
- Mobotix IP Network Cameras Web site, Mobotix at http://www.mobotix.com/company.
- Software Downloads Web page, Mobotix at http://www.mobotix.com/services/software_downloads.
- BID-18022: Mobotix IP Camera Multiple Cross-Site Scripting Vulnerabilities
- CVE-2006-2490: Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.
- OSVDB ID: 25621: Mobotix IP Network Camera help Script XSS
- OSVDB ID: 25622: Mobotix IP Network Camera events.tar source_ip Variable XSS
- OSVDB ID: 25623: Mobotix IP Network Camera eventplayer get_image_info_abspath Variable XSS
- SA20151: Mobotix IP Network Cameras Cross-Site Scripting Vulnerability
- SECTRACK ID: 1016128: MOBOTIX IP Network Camera Input Validation Bugs Permit Cross-Site Scripting Attacks
- VUPEN/ADV-2006-1857: Mobotix IP Network Cameras M1/M10 Multiple Cross Site Scripting Vulnerabilities
Reported:
May 17, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net