... ::: May The source Be with You ::: ... ~ Articles ~ Vulnerability ~ 94

[Guest@unixcoder.org]~ ... ::: May The source Be with You ::: ... ~ Articles ~ Vulnerability ~ 94

Main Menu

Google Search

Latest Links

More Info

Home : Articles : Vulnerability

IE Vulnerability

Published on 06/08/06 at 10:37:02 PST by Root

IE Vulnerability

Vulnerability Summary CVE-2006-2900
Original release date: 6/7/2006
Last revised: 6/8/2006
Source: US-CERT/NIST

Overview

Internet Explorer 6 allows user-complicit remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.

Impact

CVSS Severity: 3.7 (Low)
Range: Victim must voluntarily interact with attack mechanism
Authentication: Not required to exploit
Impact Type: Allows unauthorized disclosure of information , Allows unauthorized modification

References to Advisories, Solutions, and Tools

External Source: FRSIRT (disclaimer)

Name: ADV-2006-2161

Type: Advisory
Hyperlink: http://www.frsirt.com/english/advisories/2006/2161

External Source: SECUNIA (disclaimer)

Name: 20449

Type: Advisory
Hyperlink: http://secunia.com/advisories/20449

External Source: FULLDISC (disclaimer)

Name: 20060605 file upload widgets in IE and Firefox have issues

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html

Vulnerable software and versions

Microsoft, Internet Explorer, 5.01 SP4 for Microsoft Windows 2000 SP4

Microsoft, Internet Explorer, 6 SP1 for Microsoft Windows 2000 SP4

Microsoft, Internet Explorer, 6 SP1 for Microsoft Windows XP SP1

Microsoft, Internet Explorer, 6 for Microsoft Windows XP SP2

Microsoft, Internet Explorer, 6 for Microsoft Windows Server 2003

Microsoft, Internet Explorer, 6 for Microsoft Windows Server 2003 SP1

Microsoft, Internet Explorer, 6 for Microsoft Windows Server 2003 (Itanium)

Microsoft, Internet Explorer, 6 for Microsoft Windows Server 2003 SP1 (Itanium)

Microsoft, Internet Explorer, 6 for Microsoft Windows Server 2003 64-bit

Microsoft, Internet Explorer, 6 for Microsoft Windows XP Professional 64-bit

Microsoft, Internet Explorer, 6 SP1 for Microsoft Windows 98

Microsoft, Internet Explorer, 6 SP1 for Microsoft Windows 98 SE

Microsoft, Internet Explorer, 6 SP1 for Microsoft Windows Millennium Edition

Technical Details

CVSS Base Score Vector: (AV:R/AC:H/Au:NR/C:P/I:P/A:N/B:N) (legend)

Vulnerability Type: Input Validation Error

CVE Standard Vulnerability Entry:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2900

~ Utore Security Center

Printer Friendly version - IE Vulnerability

(248 reads)

All Articles by Root

Comments on this article:

IE Vulnerability | 0 comments | Sign Up

The comments are owned by the poster. We aren't responsible for its content.
Only registered members may comment on articles.

No comments so far.

About

Contact

Help

Recommend

This web site was made with UtoreAPP v0.0.1 , a web portal system written in Perl
All Comments, trademarks and copyrights on this page are owned by UnixCoder.org.