Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

Remi Perrot fixed several security related bugs in the bonsai, the Mozilla CVS query tool by web interface. Vulnerabilities include arbitrary code execution, cross-site scripting and access to configuration parameters. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2003-0152 - Remote execution of arbitrary commands     as www-data
  - CAN-2003-0153 - Absolute path disclosure

  - CAN-2003-0154 - Cross site scripting attacks 

  - CAN-2003-0155 - Unauthenticated access to parameters     page

The remote host has the CGI suite 'Bonsai' installed. This suite is used to navigate a CVS repository with a web browser. The remote Bonsai might be vulnerable to various flaws, including path disclosure, cross-site scripting and remote command execution.

The remote host has the CGI suite 'Bonsai' installed. 

This suite is used to browse a CVS repository with a web browser. 

The remote version of this software is to be vulnerable to various flaws ranging from path disclosure and cross-site scripting to remote command execution. 

An attacker may exploit these flaws to temper with the integrity of the remote host.

ID	Name	Product	Family	Severity
15102	Debian DSA-265-1 : bonsai - several vulnerabilities	Nessus	Debian Local Security Checks	high
1584	Bonsai < 1.4 Multiple Vulnerabilities	Nessus Network Monitor	CGI	critical
11440	Mozilla Bonsai Mutiple Flaws (Auth Bypass, XSS, Cmd Exec, PD)	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2003-0154

medium

Tenable Plugins

high

critical

critical