PT-2007-2861 · Cisco · Cisco Wireless Lan Controllers+18

Published 2007-03-15 · Updated 2018-10-16 · CVE-2007-1467

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server (ACS) (affected versions not specified) Cisco VPN Client (affected versions not specified) Cisco Unified Personal Communicator (affected versions not specified) Cisco MeetingPlace (affected versions not specified) Cisco Unified MeetingPlace (affected versions not specified) Cisco Unified MeetingPlace Express (affected versions not specified) Cisco CallManager (affected versions not specified) Cisco IP Communicator (affected versions not specified) Cisco Unified Video Advantage (affected versions not specified) Cisco Unified Videoconferencing 35xx products (affected versions not specified) Cisco Unified Videoconferencing Manager (affected versions not specified) Cisco WAN Manager (affected versions not specified) Cisco Security Device Manager (affected versions not specified) Cisco Network Analysis Module (NAM) (affected versions not specified) CiscoWorks (affected versions not specified) Cisco Wireless LAN Solution Engine (WLSE) (affected versions not specified) 2006 Cisco Wireless LAN Controllers (WLC) (affected versions not specified) Cisco Wireless Control System (WCS) (affected versions not specified)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in various Cisco products. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the text field of the search form. The vulnerability exists because the search feature of the web-based Online Help System interface fails to sufficiently filter user-supplied input. An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to follow a crafted link, which could allow the attacker to execute arbitrary code in a user's browser in the context of the affected site. This may permit the attacker to access sensitive browser information or take actions on the affected site as the targeted user. In some cases, an attacker may make configuration changes on an affected system with the privileges of the targeted user.

Recommendations For all affected versions, consider disabling the search feature of the web-based Online Help System interface until a patch is available. Restrict access to the Online Help System to minimize the risk of exploitation. Avoid following unsolicited links while performing maintenance tasks on any of the affected systems. Ensure that administrators log out after the completion of an administration session to prevent valid authentication cookies from remaining on administrator workstations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1467

Affected Products

Cisco Callmanager

Cisco Ip Communicator

Cisco Meetingplace

Cisco Network Analysis Module

Cisco Secure Access Control Server

Cisco Security Device Manager

Cisco Unified Meetingplace

Cisco Unified Meetingplace Express

Cisco Unified Personal Communicator

Cisco Unified Video Advantage

Cisco Unified Videoconferencing 35Xx Products

Cisco Unified Videoconferencing Manager

Cisco Vpn Client

Cisco Wan Manager

Cisco Wireless Control System

Cisco Wireless Lan Controllers

Cisco Wireless Lan Solution Engine

Cisco Wls

Ciscoworks

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2007-1467 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070315-CVE-2007-1467 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_response09186a0080803fe4.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1467 · Security Note
• http://vupen.com/english/advisories/2007/0973 · Note
• http://securityfocus.com/archive/1/462932/100/0/threaded · Note
• http://securityfocus.com/bid/22982 · Note
• http://secunia.com/advisories/24499 · Note
• http://securitytracker.com/id?1017778 · Note
• http://securityreason.com/securityalert/2437 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33024 · Note
• http://securityfocus.com/archive/1/462944/100/0/threaded · Note