Cisco Secure Access Control Server (ACS) CSUserCGI.exe Help Facility XSS

medium Nessus Plugin ID 33945

Language:

Synopsis

The remote web server hosts a CGI script that is affected by multiple cross-site scripting vulnerabilities.

Description

Multiple cross-site scripting (XSS) vulnerabilities exist in the 'securecgi-bin/CSuserCGI.exe' CGI included with User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine.

A remote attacker may be able to leverage these vulnerabilities to inject arbitrary JavaScript or HTML into a user's browser via an argument located immediately after the Help argument, and possibly unspecified other vectors.

Solution

Upgrade to UCP Version 4.2 or later.

Plugin Details

Severity: Medium

ID: 33945

File Name: cisco_acs_ucp_xss.nbin

Version: 1.92

Type: remote

Family: CGI abuses : XSS

Published: 8/19/2008

Updated: 7/17/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.6

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2008-0533

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/12/2008

Vulnerability Publication Date: 3/12/2008

Exploitable With

CANVAS (D2ExploitPack)

Reference Information

CVE: CVE-2008-0533

BID: 28222

CWE: 79

IAVB: 2008-B-0025-S

Detections

Analytics