Vulnerability CVE-2009-4187 - CERT Civis.Net

Vulnerability Name:

CVE-2009-4187 (CCN-54522)

Assigned:

2009-12-01

Published:

2009-12-01

Updated:

2009-12-04

Summary:

Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2009-4187

Source: CCN
Type: SA37574
Sun Java System Portal Server Gateway Cross-Site Scripting Vulnerabilities

Source: CCN
Type: SECTRACK ID: 1023260
Sun Java System Portal Server Gateway Input Validation Flaw Permits Cross-Site Scripting Attacks

Source: SECTRACK
Type: UNKNOWN
1023260

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-04-1

Source: CCN
Type: Sun Alert ID: 269368
Cross-Site Scripting (XSS) Vulnerabilities in Sun Java System Portal Server's Gateway May Lead to Execution of Arbitrary Code

Source: SUNALERT
Type: Patch, Vendor Advisory
269368

Source: CCN
Type: OSVDB ID: 60590
Sun Java System Portal Server Gateway Component Unspecified XSS

Source: BID
Type: UNKNOWN
37186

Source: CCN
Type: BID-37186
Sun Java System Portal Server Multiple Unspecified Cross Site Scripting Vulnerabilities

Source: XF
Type: UNKNOWN
javasystem-gateway-xss(54522)

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:9:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:x86:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

Configuration 2:

cpe:/a:sun:java_system_portal_server:6.3.1:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:8:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:8:*:x86:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:x86:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

Configuration 3:

cpe:/a:sun:java_system_portal_server:6.3.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:java_system_portal_server:7.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:java_system_portal_server:7.2:*:linux:*:*:*:*:*

Configuration CCN 1:

cpe:/a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_portal_server:6.3.1:*:*:*:*:*:*:*

Denotes that component is vulnerable