PT-2011-3646 · Smartertools · Smarterstats

Published 2011-05-20 · Updated 2017-08-29 · CVE-2011-2158

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0

Description The issue concerns the SmarterTools SmarterStats web server sending incorrect Content-Type headers for certain resources. This could potentially allow remote attackers to leverage an interpretation conflict, affecting either clients or the SmarterStats product itself. The affected resources include specific API endpoints such as "Admin/frmSite.aspx", "Admin/frmSites.aspx", "Admin/frmViewReports.aspx", "App Themes/AboutThisFolder.txt", "Client/frmViewReports.aspx", "Temp/AboutThisFolder.txt", "default.aspx", "login.aspx", and certain ".jpg" URIs under "Temp/".

Recommendations For SmarterTools SmarterStats version 6.0, consider updating the Content-Type headers for the specified resources to prevent potential interpretation conflicts. As a temporary workaround, restrict access to the affected API endpoints, such as "Admin/frmSite.aspx", "Admin/frmSites.aspx", "Admin/frmViewReports.aspx", "Client/frmViewReports.aspx", "default.aspx", and "login.aspx", until a proper fix is applied. Additionally, limit access to the "App Themes/AboutThisFolder.txt", "Temp/AboutThisFolder.txt", and certain ".jpg" URIs under "Temp/" to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-2158

Affected Products

Smarterstats

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-2158 · Security Note
• http://kb.cert.org/vuls/id/240150 · Note
• http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html · Note
• http://kb.cert.org/vuls/id/MORO-8GYQR4 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2158 · Note
• http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67824 · Note