Sign-up

ID

VAR-200902-0031


CVE

CVE-2009-0467


TITLE

Profense Web Application Firewall of proxy.html Vulnerable to cross-site scripting

Trust: 0.8

sources: JVNDB: JVNDB-2009-003237

DESCRIPTION

Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action. Profense is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks. Other attacks are also possible. Profense 2.6.2 is vulnerable; other versions may also be affected. Profense Web Application Firewal is a website firewall. ---------------------------------------------------------------------- Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list? Click here to learn more: http://secunia.com/advisories/business_solutions/ ---------------------------------------------------------------------- TITLE: Profense Web Application Firewall Cross-Site Scripting and Cross-Site Request Forgery SECUNIA ADVISORY ID: SA33739 VERIFY ADVISORY: http://secunia.com/advisories/33739/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: >From remote SOFTWARE: Profense Web Application Firewall 2.x http://secunia.com/advisories/product/21280/ DESCRIPTION: Michael Brooks has discovered some vulnerabilities in Profense Web Application Firewall, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks. 1) Input passed via the "proxy" parameter in proxy.html is not properly sanitised before being returned to the user. 2) The application allows users to perform certain actions via HTTP requests without performing any validity check to verify the request. This can be exploited to perform certain actions, e.g. to shutdown the system, by enticing a logged-in administrator to visit a malicious web site. The vulnerability is reported in version 2.6.2 and confirmed in version 2.6.3. SOLUTION: Do not follow untrusted links and do not visit untrusted web sites while being logged-in to the web-based management interface. PROVIDED AND/OR DISCOVERED BY: Michael Brooks ORIGINAL ADVISORY: http://milw0rm.com/exploits/7919 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2009-0467 // JVNDB: JVNDB-2009-003237 // BID: 33523 // VULHUB: VHN-37913 // PACKETSTORM: 74477

AFFECTED PRODUCTS

vendor:armorlogicmodel:profense web application firewallscope:eqversion:2.6.2

Trust: 1.6

vendor:armorlogicmodel:profense web application firewallscope:eqversion:2.6.3

Trust: 1.6

vendor:armorlogicmodel:profense web application firewallscope:eqversion:2.6.2 and 2.6.3

Trust: 0.8

vendor:armorlogicmodel:profensescope:eqversion:2.6.2

Trust: 0.3

vendor:armorlogicmodel:profensescope:neversion:2.6.4

Trust: 0.3

sources: BID: 33523 // JVNDB: JVNDB-2009-003237 // CNNVD: CNNVD-200902-234 // NVD: CVE-2009-0467

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2009-0467
value: MEDIUM

Trust: 1.0

NVD: CVE-2009-0467
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-200902-234
value: MEDIUM

Trust: 0.6

VULHUB: VHN-37913
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2009-0467
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-37913
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-37913 // JVNDB: JVNDB-2009-003237 // CNNVD: CNNVD-200902-234 // NVD: CVE-2009-0467

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 1.9

sources: VULHUB: VHN-37913 // JVNDB: JVNDB-2009-003237 // NVD: CVE-2009-0467

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200902-234

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-200902-234

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2009-003237

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-37913

PATCH
title:Top Pageurl:http://www.armorlogic.com/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2009-003237

EXTERNAL IDS
db:NVDid:CVE-2009-0467
Trust: 2.5
db:BIDid:33523
Trust: 2.0
db:SECUNIAid:33739
Trust: 1.9
db:EXPLOIT-DBid:7919
Trust: 1.8
db:OSVDBid:51659
Trust: 1.7
db:JVNDBid:JVNDB-2009-003237
Trust: 0.8
db:MILW0RMid:7919
Trust: 0.6
db:CNNVDid:CNNVD-200902-234
Trust: 0.6
db:SEEBUGid:SSVID-66247
Trust: 0.1
db:VULHUBid:VHN-37913
Trust: 0.1
db:PACKETSTORMid:74477
Trust: 0.1
sources:
            
            
            VULHUB: VHN-37913 // 
            
            
            
            BID: 33523 // 
            
            
            
            JVNDB: JVNDB-2009-003237 // 
            
            
            
            PACKETSTORM: 74477 // 
            
            
            
            CNNVD: CNNVD-200902-234 // 
            
            
            
            NVD: CVE-2009-0467

REFERENCES
url:http://www.securityfocus.com/bid/33523
Trust: 1.7
url:http://osvdb.org/51659
Trust: 1.7
url:http://secunia.com/advisories/33739
Trust: 1.7
url:https://www.exploit-db.com/exploits/7919
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0467
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0467
Trust: 0.8
url:http://www.milw0rm.com/exploits/7919
Trust: 0.6
url:http://www.armorlogic.com/index.html
Trust: 0.3
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/advisories/33739/
Trust: 0.1
url:http://secunia.com/advisories/business_solutions/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://milw0rm.com/exploits/7919
Trust: 0.1
url:http://secunia.com/advisories/product/21280/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-37913 // 
            
            
            
            BID: 33523 // 
            
            
            
            JVNDB: JVNDB-2009-003237 // 
            
            
            
            PACKETSTORM: 74477 // 
            
            
            
            CNNVD: CNNVD-200902-234 // 
            
            
            
            NVD: CVE-2009-0467

CREDITS
Michael Brooks
Trust: 0.9
sources:
            
            
            BID: 33523 // 
            
            
            
            CNNVD: CNNVD-200902-234

SOURCES
db:VULHUBid:VHN-37913
db:BIDid:33523
db:JVNDBid:JVNDB-2009-003237
db:PACKETSTORMid:74477
db:CNNVDid:CNNVD-200902-234
db:NVDid:CVE-2009-0467

LAST UPDATE DATE
2025-04-10T23:19:48.947000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-37913date:2017-09-29T00:00:00
db:BIDid:33523date:2009-02-18T22:17:00
db:JVNDBid:JVNDB-2009-003237date:2012-06-26T00:00:00
db:CNNVDid:CNNVD-200902-234date:2009-02-12T00:00:00
db:NVDid:CVE-2009-0467date:2025-04-09T00:30:58.490

SOURCES RELEASE DATE
db:VULHUBid:VHN-37913date:2009-02-10T00:00:00
db:BIDid:33523date:2009-01-29T00:00:00
db:JVNDBid:JVNDB-2009-003237date:2012-06-26T00:00:00
db:PACKETSTORMid:74477date:2009-01-30T11:11:49
db:CNNVDid:CNNVD-200902-234date:2009-02-10T00:00:00
db:NVDid:CVE-2009-0467date:2009-02-10T07:00:24.670