Check Point Connectra R62 /Login cross site scripting

VulDB: Check Point Connectra R62 /Login cross site scripting

General

Check Point

scipID: 4020
Affected: Check Point Connectra R62
Published: 09/21/2009 (Stefan Friedli)
Risk: critical
Entry: 92.9% complete
Created: 09/04/2009
Updated: 09/21/2009

Summary

A vulnerability classified as critical has been found in Check Point Connectra R62. Affected is an unknown function of the file /Login. The manipulation with an unknown input leads to a cross site scripting vulnerability. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published 09/21/2009 by Stefan Friedli with scip AG. The advisory is shared for download at scip.ch. It is possible to launch the attack remotely. Technical details and a exploit are known.

The exploit is shared for download at securityfocus.com. The vulnerability was handled as a non-public zero-day exploit for at least 17 days. By approaching the search of inurl:/Login it is possible to find vulnerable targets with Google Hacking.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at supportcenter.checkpoint.com. The vulnerability is also documented in the databases at OSVDB (58265), Secunia (SA36821), SecurityFocus (BID 36466) and SecurityTracker (ID 1022917). Further details are available at juniper.net.