CVE-2007-3386.txt

`-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA1  
  
CVE-2007-3386: XSS in Host Manager  
  
Severity:  
Low (Cross-site scripting)  
  
Vendor:  
The Apache Software Foundation  
  
Versions Affected:  
6.0.0 to 6.0.13  
5.5.0 to 5.5.24  
  
Description:  
The Host Manager Servlet does not filter user supplied data before  
display. This enables an XSS attack.  
  
Mitigation:  
Log out (close browser) of the Host Manager application once admin  
tasks are complete  
Upgrade to 6.0.14  
  
Credit:  
This issue was discovered by the NTT OSS CENTER who worked with the  
JPCERT/CC to report the vulnerability.  
  
Example:  
<form action="http://localhost:8080/host-manager/html/add" method="get">  
<input type="hidden" NAME='name' VALUE="aaa">  
<input type="hidden" NAME='aliases' VALUE="<script>alert()</script>">  
<input type="submit">  
</form>  
  
References:  
http://tomcat.apache.org/security.html  
  
  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1.4.7 (MingW32)  
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org  
  
iD8DBQFGwSFyb7IeiTPGAkMRAlgMAKCe0hS+c6so9pxK3KfN7LggWv+3uQCfUsAg  
95+vMfHDJlrKHP/yKUZ0SYc=  
=1pQc  
-----END PGP SIGNATURE-----  
`