Multiple Adobe Products XML External Entity (XXE) Injection (APSB10-05)

medium Nessus Plugin ID 44937

Language:

Synopsis

The remote host is susceptible to XML External Entity (XXE) attacks.

Description

The remote host appears to be running an Adobe product that is susceptible to XML External Entity (XXE) attacks. The installed version of the product fails to block the use of external XML entities while using the HTTPChannel to transport data in AMFX format. A remote, unauthenticated attacker could exploit this vulnerability to read arbitrary files from the remote system.

According to the Adobe advisory, Adobe BlazeDS, LiveCycle, LiveCycle Data Services, Flex Data Services and ColdFusion are known to be affected by this issue.

Solution

Apply the appropriate vendor-supplied patches.

Plugin Details

Severity: Medium

ID: 44937

File Name: adobe_multiple_products_xxe.nasl

Version: 1.28

Type: remote

Family: CGI abuses

Published: 3/1/2010

Updated: 4/25/2023

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.1

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.6

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2009-3960

Vulnerability Information

CPE: cpe:/a:adobe:flex_data_services, cpe:/a:adobe:coldfusion, cpe:/a:adobe:lifecycle, cpe:/a:adobe:blazeds, cpe:/a:adobe:lifecycle_data_services

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 2/11/2010

Vulnerability Publication Date: 2/11/2010

CISA Known Exploited Vulnerability Due Dates: 9/7/2022

Exploitable With

CANVAS (D2ExploitPack)

Elliot (Adobe XML External Entity File Disclosure)

Reference Information

CVE: CVE-2009-3960

BID: 38197

SECUNIA: 38543

Detections

Analytics