PT-2003-2256 · Netegrity · Netegrity Siteminder

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1311

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netegrity SiteMinder (affected versions not specified)

Description The issue concerns the siteminderagent/SmMakeCookie.ccc component in Netegrity SiteMinder, which fails to validate the TARGET parameter. This allows remote attackers to create a URL that could deceive users into visiting an arbitrary web site referenced by this parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-1311

Produtos afetados

Netegrity Siteminder

Referências · 3

• 🔥 http://curl.haxx.se/mail/archive-2003-05/0172.html · Exploit
• 🔥 http://osvdb.org/30741 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1311 · Nota de Segurança