CIA RESEARCH

Alerts

[CIA-1039-Alert] Apache Mod_Imap Cross-Site Scripting

Summary:

A vulnerability in the mod_imap Apache Module allows a remote attacker to conduct Cross-Site Scripting attacks against the server.

Technical Details:

When Apache Server is configured with the mod_imap Module, and image maps are in use, it is possible for an attacker to launch Cross-Site Scripting (XSS) attacks against the server to execute arbitrary scripts or inject HTML. The vulnerability arises due to faulty input validation of the HTTP Referrer Field when mod_imap is installed. Any scripts that are injected in this manner will execute in the security context of the Apache Server.

Cross-Site Scripting allows an attacker to perpetrate a large number of actions, including cookie-credential theft, as well as exploiting browser-based security holes when the injected script involves redirection.

Solution:

Upgrade to a fixed version of Apache. Versions prior to 1.3.35-dev and 2.0.56-dev are vulnerable.

CVE Reference:

CVE-2005-3352

SecurityTracker Number(s):

1015344

Vendor URL:

Apache Project

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC