Sun Java System Access Manager Cross-Site Scripting Vulnerability

Sunday, 16 March 2008

Description:
A vulnerability has been reported in Sun Java System Access Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via unspecified parameters when displaying the "Help" and "Version" windows in the Administration Console is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in versions 7 2005Q4 (7.0) and 7.1.

Solution:
Apply vendor patches.

-- SPARC Platform --

Sun Java System Access Manager 7.1 (for Solaris 8, 9 and 10):
Apply patch 126356-01 or later.

Sun Java System Access Manager 7 2005Q4 (7.0) (for Solaris 8, 9 and 10):
Apply patch 120954-06 or later.

-- x86 Platform --

Sun Java System Access Manager 7.1 (for Solaris 8, 9 and 10):
Apply patch 126357-01 or later.

Sun Java System Access Manager 7 2005Q4 (7.0) (for Solaris 9 and 10):
Apply patch 120955-06 or later.

-- Linux --

Sun Java System Access Manager 7.1:
Apply patch 126358-01 or later.

Sun Java System Access Manager 7 2005Q4 (7.0):
Apply patch 120956-06 or later.

-- Windows --

Sun Java System Access Manager 7.1:
Apply patch 126359-01 or later.

Sun Java System Access Manager 7 2005Q4 (7.0):
Apply patch 124296-06 or later.

-- HP-UX --

A final resolution is pending completion.

Provided and/or discovered by:
The vendor credits Steven Adair, NASA.

Changelog:
2008-03-11: Added CVE reference.

Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201251-1

http://secunia.com/advisories/29252/