CVE-2011-1038
published 2011-02-22CVE-2011-1038: Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web…
PriorityP423medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
3.05%
86.1th percentile
Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_sametime | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
suricata·2011-03-01
CVE-2011-1038 ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt"; flow:established,to_server; http.uri; content:"stconf.nsf"; nocase; content:"unescape"; nocase; fast_pattern; pcre:"/stconf.nsf.+(script|onmouse[a-z]+|onkey[a-z]+|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange|style\x3D).+unescape/i"; reference:bid,46471; reference:cve,2011-1038; classtype:web-application-attack; sid:2012395; rev:4; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2011_03_01, cve CVE_2011_1038, deployment Datacenter, signature_severity Major, tag XSS,
Suricata
ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
suricata·2011-03-01
CVE-2011-1038 ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf Cross Site Scripting Attempt"; flow:established,to_server; http.uri; content:"stconf.nsf/WebMessage"; nocase; content:"OpenView"; nocase; content:"messageString="; nocase; pcre:"/messageString\x3D.+(script|onmouse[a-z]+|onkey[a-z]+|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange|style\x3D)/i"; reference:bid,46471; reference:cve,2011-1038; classtype:web-application-attack; sid:2012394; rev:4; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2011_03_01, cve CVE_2011_1038, deployment Datacenter, signatu
Exploit-DB
Netmechanica NetDecision Dashboard Server - Information Disclosure
exploitdb·2012-02-29
CVE-2012-1464 Netmechanica NetDecision Dashboard Server - Information Disclosure
Netmechanica NetDecision Dashboard Server - Information Disclosure
---
##############################################################################
#
# Title : Netmechanica NetDecision Dashboard Server Information Disclosure
# Vulnerability
# Author : Prabhu S Angadi SecPod Technologies (www.secpod.com)
# Vendor : http://www.netmechanica.com
# Advisory : http://secpod.org/blog/?p=478
# http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_Vuln.txt
# http://secpod.org/exploits/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_PoC.py
# Software : Netmechanica NetDecision Dashboard Server version 1.0
# Date : 05/12/2011
#
###############################################################################
SecPod ID: 1038 05/12/2011 Issue Discovered
2
Exploit-DB
IBM Lotus Sametime - '/stconf.nsf/WebMessage?messageString' Cross-Site Scripting
exploitdb·2011-02-21
CVE-2011-1038 IBM Lotus Sametime - '/stconf.nsf/WebMessage?messageString' Cross-Site Scripting
IBM Lotus Sametime - '/stconf.nsf/WebMessage?messageString' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/46471/info
IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
IBM Lotus Sametime 8.0.1 is vulnerable; other versions may also be affected.
http://www.example.com/stconf.nsf/WebMessage?OpenView&messageString=";>alert("XSS!")#
Bugzilla
CVE-2010-1679 dpkg: directory traversal flaw allows for arbitrary file creation
bugzilla·2011-01-12·CVSS 6.8
CVE-2010-1679 [MEDIUM] CVE-2010-1679 dpkg: directory traversal flaw allows for arbitrary file creation
CVE-2010-1679 dpkg: directory traversal flaw allows for arbitrary file creation
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-1679 to
the following vulnerability:
Name: CVE-2010-1679
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1679
Assigned: 20100430
Reference: DEBIAN:DSA-2142
Reference: URL: http://www.debian.org/security/2011/dsa-2142
Reference: UBUNTU:USN-1038-1
Reference: URL: http://www.ubuntu.com/usn/USN-1038-1
Reference: SECUNIA:42826
Reference: URL: http://secunia.com/advisories/42826
Reference: SECUNIA:42831
Reference: URL: http://secunia.com/advisories/42831
Reference: VUPEN:ADV-2011-0040
Reference: URL: http://www.vupen.com/english/advisories/2011/0040
Reference: VUPEN:ADV-2011-0044
Reference: URL: http://www.vupen.com/english/advisories/
Bugzilla
CVE-2011-0402 dpkg: arbitrary file modification via symlink attack
bugzilla·2011-01-12·CVSS 6.8
CVE-2011-0402 [MEDIUM] CVE-2011-0402 dpkg: arbitrary file modification via symlink attack
CVE-2011-0402 dpkg: arbitrary file modification via symlink attack
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-0402 to
the following vulnerability:
Name: CVE-2011-0402
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0402
Assigned: 20110110
Reference: DEBIAN:DSA-2142
Reference: URL: http://www.debian.org/security/2011/dsa-2142
Reference: UBUNTU:USN-1038-1
Reference: URL: http://www.ubuntu.com/usn/USN-1038-1
Reference: SECUNIA:42826
Reference: URL: http://secunia.com/advisories/42826
Reference: SECUNIA:42831
Reference: URL: http://secunia.com/advisories/42831
Reference: VUPEN:ADV-2011-0040
Reference: URL: http://www.vupen.com/english/advisories/2011/0040
Reference: VUPEN:ADV-2011-0044
Reference: URL: http://www.vupen.com/english/advisories/2011/0044
dp
http://secunia.com/advisories/43430http://securityreason.com/securityalert/8100http://www.securityfocus.com/archive/1/516563/100/0/threadedhttp://www.securityfocus.com/bid/46471https://exchange.xforce.ibmcloud.com/vulnerabilities/65555http://secunia.com/advisories/43430http://securityreason.com/securityalert/8100http://www.securityfocus.com/archive/1/516563/100/0/threadedhttp://www.securityfocus.com/bid/46471https://exchange.xforce.ibmcloud.com/vulnerabilities/65555
2011-02-22
Published