JVN#77730435
Multiple Cybozu products vulnerable to HTTP header injection
Overview
Multiple Cybozu products are vulnerable to HTTP header injection.
Products Affected
- Cybozu Office 6.6 (1.3) and earlier
- Cybozu Garoon 1.5 (4.1)
- Cybozu Garoon Workflow 1.0 (1.1) and earlier
- Cybozu Garoon File Management Server 1.0 (0.7) and earlier
- Cybozu Garoon Bulletin Board Server 1.0 (0.7) and earlier
- Cybozu Garoon Facility Reservation Server 1.0 (0.7) and earlier
Description
Multiple Cybozu products are vulnerable to HTTP header injection because they do not properly process HTTP headers.
Impact
A remote attacker can conduct cache poisoning, send an arbitrary cookie, or execute an arbitrary script on the user's web browser.
Solution
Update the Software
For more information, refer to the vendor's website.
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
Analyzed on 2007.12.11
| Measures | Conditions | Severity |
|---|---|---|
| Access Required | Routed - can be attacked over the Internet using packets |
|
| Authentication | None - anonymous or no authentication (IP addresses do not count) |
|
| User Interaction Required | Simple - the user must be convinced to take a standard action that does not feel harmful to most users, such as click on a link or view a file |
|
| Exploit Complexity | Low - little to no expertise and/or luck required to exploit (cross-site scripting) |
|
Credit
Daiki Fukumori of Secure Sky Technology, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.
Other Information
| JPCERT Alert | |
| JPCERT Reports | |
| CERT Advisory | |
| CPNI Advisory | |
| TRnotes | |
| CVE | |
| JVN iPedia |
JVNDB-2007-000814 |