[UNIX] Sympa Mailing List System Cross Site Scripting
From: SecuriTeam (support_at_securiteam.com)
Date: 08/22/04
- Previous message: SecuriTeam: "[UNIX] MyDMS SQL Injection and Directory Traversal Vulnerabilities"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: list@securiteam.com Date: 22 Aug 2004 17:18:37 +0200
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Sympa Mailing List System Cross Site Scripting
------------------------------------------------------------------------
SUMMARY
<http://www.sympa.org/> Sympa is a rich open source mailing list
software. Its design highly focuses on customization possibilities and
ease of administration.The Sympa mailing list software is vulnerable to
cross site scripting vulnerabilities.
DETAILS
Vulnerable Systems:
* Sympa version 4.1.x
The creation list option is vulnerable to cross site-scripting attacks. It
could allow an attacker to inject malicious HTML or script code into the
system that can later be executed on a victim's machine. Normal uses for
such attacks are cookie credential theft. Follow the steps below to test
the vulnerability:
* Navigate to http:// Reference to the bug can be found in the Symba bug tracking list, at
ADDITIONAL INFORMATION
The information has been provided by <mailto:joxeankoret@yahoo.es> Joxean
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
====================
DISCLAIMER:
* Login with a valid e-mail and password (or click in the Send me
Password option and follow the instructions)
* Click on create list option
* In the "List Name" field enter the text that you want
* In the "Subject" field enter the subject that you want
* Select your preferred topic
* In the description field insert the following text:
<script>alert("Your cookie is " + document.cookie)</script>
* Click on "Submit your creation Request" button
* The list is created
* Now, click on "List Info". You will see your cookie in a JavaScript
"alert" message box
<http://listes.cru.fr/mantis/view_bug_advanced_page.php?f_id=0000327>
http://listes.cru.fr/mantis/view_bug_advanced_page.php?f_id=0000327.
Koret.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
Relevant Pages
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... Horde Framework and Horde
IMP /index.php Cross Site Referencing ... web-based vulnerabilities that were identified
in Horde 3.0.4 and verified ... This is very useful within technical supported phishing attacks.
... (Securiteam)
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... CA ARCServe Backup for Laptops
and Desktops Multiple Buffer Overflow ... Remote exploitation of multiple buffer overflow
vulnerabilities in ... rxsGetSubDirs, rxsGetServerDBPathName, rxsSetServerOptions,
rxsDeleteFile, ... (Securiteam)
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... Novell eDirectory Multiple
Vulnerabilities ... Three different vulnerabilities were discovered in Novell's eDirectory
... NCP over IP length Heap Overflow: ... (Securiteam)
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... Multiple Vendor ImageMagick
DCM and XWD Buffer Overflow Vulnerabilities ... (Securiteam)
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... Apache HTTPD suEXEC Multiple
Vulnerabilities ... Local exploitation of multiple vulnerabilities within Apache Software
... Foundation's suexec utility could allow an attacker to execute arbitrary ...
(Securiteam)
