Nokia Intellisync Mobile Suite multiple scripts cross-site scripting
| nokia-multiple-scripts-xss (34187) |  Medium Risk |
Description:
Nokia's Intellisync Mobile Suite is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the dev_logon.asp, registerAccount.asp and the create_account.asp scripts. A remote attacker could exploit this vulnerability using various parameters in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Note: Nokia Intellisync Wireless Email Express is partially affected by this vulnerability.
*CVSS:
| Base Score: | 2.8 |
| Access Vector: | Remote |
| Access Complexity: | High |
| Authentication: | Not Required |
| Confidentiality Impact: | Partial |
| Integrity Impact: | None |
| Availability Impact: | None |
| Temporal Score: | 2.4 |
| Exploitability: | High |
| Remediation Level: | Official-Fix |
| Report Confidence: | Confirmed |
Consequences:
Gain Access
Remedy:
Upgrade to GroupWise Mobile Server version 2, available from the Nokia Web site. See References.
Refer to Novell Information Document ID: 5005120 for patch, upgrade, or suggested workaround information. See References.
References:
- Nokia Web site: Intellisync Mobile Suite.
- Novell Information Document ID: 5005120: GroupWise Mobile Server 1.0 HP1 1.0 HP1.
- SEC Consult Security Advisory 20070509-0 : Multiple vulnerabilites in Nokia Intellisync Mobile Suite / Wireless Email Express (Information / Source Code Disclosure, Cross Site Scripting, Denial of Service) .
- BID-23889: Novell GroupWise Mobile Server Multiple Vulnerabilities
- CVE-2007-2592: Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
- SA25212: Nokia Intellisync Mobile Suite Multiple Vulnerabilities
- SA26199: Novell GroupWise Mobile Server Multiple Vulnerabilities
- SECTRACK ID: 1018454: Novell GroupWise Mobile Server Bugs Permit Denial of Service and Cross-Site Scripting Attacks
- VUPEN/ADV-2007-1727: Nokia Intellisync Mobile Suite Information Disclosure and Denial of Service Issues
- VUPEN/ADV-2007-2657: Novell GroupWise Mobile Server Multiple Cross Site Scripting Vulnerabilities
Platforms Affected:
- Nokia Groupwise Mobile Server
- Nokia Intellisync Mobile Suite 6.4.31.2
- Nokia Intellisync Mobile Suite 6.6.0.107
- Nokia Intellisync Mobile Suite 6.6.2.2
- Nokia Intellisync Wireless Email Express
Reported:
May 09, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net
* According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall IBM be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.