Detections
Analytics
Sun Java System Web Server Search Module XSS
medium Nessus Plugin ID 32136
Language:
Synopsis
The remote web server contains a JSP application that is affected by a cross-site scripting vulnerability.Description
The remote host is running Sun Java System Web Server, a Java application for user provisioning and identity auditing in enterprise environments.The version of Sun Java System Web Server installed on the remote host fails to sanitize user-supplied input to its Search module before using it to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the security context of the affected site.
Solution
Either edit the default search web application file named 'index.jsp', which is located at '<WS-install>/lib/webapps/search/index.jsp' to remove the line containing the text 'out.println(s);' or apply the appropriate patch as described in the vendor advisory above.See Also
Plugin Details
Severity: Medium
ID: 32136
File Name: sun_java_web_server_search_xss.nasl
Version: 1.24
Type: remote
Family: CGI abuses : XSS
Published: 5/9/2008
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2008-2166
Vulnerability Information
CPE: cpe:/a:sun:java_system_web_server
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 5/6/2008
Reference Information
CVE: CVE-2008-2166
BID: 29087