OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA10520] Canon VB-C10R Network Camera Cross-Site Scripting Vulnerability

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jan 02 2004 - 16:48:37 CST

TITLE:
Canon VB-C10R Network Camera Cross-Site Scripting Vulnerability

SECUNIA ADVISORY ID:
SA10520

VERIFY ADVISORY:
http://www.secunia.com/advisories/10520/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting

WHERE:
From remote

OPERATING SYSTEM:
Canon VB-C10R Network Camera

DESCRIPTION:
Casey Townsend has reported a vulnerability in Canon VB-C10R Network
Camera, which can be exploited by malicious people to conduct
cross-site scripting attacks.

The vulnerability is caused due to an input validation error in the
built-in Boa web server. This can be exploited by including arbitrary
HTML or script code in a HTTP request to the web server, which will
execute it in a user's browser session when viewed.

Example:
http://[vulnerable_device]/<script>alert(document.cookie)</script>.jsp

The vulnerability has been reported in firmware ver. 1.0 Rev. 21
running Boa 0.92o.

SOLUTION:
Filter malicious characters and character sequences in a HTTP proxy
or firewall with URL filtering capabilities.

PROVIDED AND/OR DISCOVERED BY:
Casey Townsend

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://www.secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://www.secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------