Nokia Intellisync Mobile Suite multiple scripts cross-site scripting
| nokia-multiple-scripts-xss (34187) |  Medium Risk |
Description:
Nokia's Intellisync Mobile Suite is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the dev_logon.asp, registerAccount.asp and the create_account.asp scripts. A remote attacker could exploit this vulnerability using various parameters in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Note: Nokia Intellisync Wireless Email Express is partially affected by this vulnerability.
Platforms Affected:
- Nokia, Groupwise Mobile Server
- Nokia, Intellisync Mobile Suite 6.4.31.2
- Nokia, Intellisync Mobile Suite 6.6.0.107
- Nokia, Intellisync Mobile Suite 6.6.2.2
- Nokia, Intellisync Wireless Email Express
Remedy:
Upgrade to GroupWise Mobile Server version 2, available from the Nokia Web site. See References.
Refer to Novell Information Document ID: 5005120 for patch, upgrade, or suggested workaround information. See References.
Consequences:
Gain Access
References:
- Nokia Web site, Intellisync Mobile Suite at http://usa.nokia.com/A4179208.
- Novell Information Document ID: 5005120, GroupWise Mobile Server 1.0 HP1 1.0 HP1 at http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html.
- SEC Consult Security Advisory 20070509-0 , Multiple vulnerabilites in Nokia Intellisync Mobile Suite / Wireless Email Express (Information / Source Code Disclosure, Cross Site Scripting, Denial of Service) at http://www.sec-consult.com/289.html.
- BID-23889: Novell GroupWise Mobile Server Multiple Vulnerabilities
- CVE-2007-2592: Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
- SA25212: Nokia Intellisync Mobile Suite Multiple Vulnerabilities
- SA26199: Novell GroupWise Mobile Server Multiple Vulnerabilities
- SECTRACK ID: 1018454: Novell GroupWise Mobile Server Bugs Permit Denial of Service and Cross-Site Scripting Attacks
- VUPEN/ADV-2007-1727: Nokia Intellisync Mobile Suite Information Disclosure and Denial of Service Issues
- VUPEN/ADV-2007-2657: Novell GroupWise Mobile Server Multiple Cross Site Scripting Vulnerabilities
Reported:
May 09, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net