Check Point Connectra "vpid_prefix" Cross Site Scripting Vulnerability


Description   A vulnerability has been identified in Check Point Connectra, which could be exploited by attackers to execute arbitrary scripting code. This issue is caused by an input validation error in the "/Login/Login" script when processing the "vpid_prefix" parameter, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected site.
     
Vulnerable Products   Vulnerable Software:
Check Point Connectra NGX R62Check Point Connectra NGX R62CMCheck Point Connectra NGX R66
     
Solution   Apply hotfix for Connectra NGX R66.1 : http://downloads.checkpoint.com/dc/download.htm?ID=10419Apply hotfix for Connectra NGX R62 HFA_01 http://downloads.checkpoint.com/dc/download.htm?ID=10421Apply hotfix for Connectra NGX R62CM HFA_01 : http://downloads.checkpoint.com/dc/download.htm?ID=10420
     
CVE  
     
References   https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk42793
http://www.scip.ch/publikationen/advisories/scip_advisory-4020_checkpoint_connectra_r62_script_injection.txt
http://www.scip.ch/?vuldb.4020
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
XSS - Prevention - POST : suspicious tag with event found in data
3.2.0
XSS - Prevention - POST : suspicious 'object' tag found in data
3.2.0
XSS - Prevention - POST : suspicious 'applet' tag found in data
3.2.0
XSS - Prevention - POST : 'location' javascript object found in data
3.2.0
XSS - Prevention - POST : javascript code found in data
3.2.0
XSS - Prevention - POST : suspicious 'iframe' tag found in data
3.2.0
XSS - Prevention - POST : code allowing cookie access found in data
3.2.0
XSS - Prevention - POST : suspicious 'embed' tag found in data
3.2.0
XSS - Prevention - POST : suspicious 'style' tag found in data
3.2.0
XSS - Prevention - POST : suspicious 'div' tag found in data
3.2.0
XSS - Prevention - POST : 'script' tag found in data
3.2.0
XSS - Prevention - POST : suspicious 'style' attribute found in data
3.2.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2009-09-22 

 Target Type 
Client 

 Possible exploit 
Local & Remote