4.3 - CVE-2009-4416

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2009-4416	First vendor Publication	2009-12-24
Vendor	Cve	Last vendor Modification	2017-08-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw_" sequence.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4416

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13367

Oval ID:	oval:org.mitre.oval:def:13367
Title:	DSA-1978-1 phpgroupware -- several
Description:	Several remote vulnerabilities have been discovered in phpgroupware, a Web based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-4414 An SQL injection vulnerability was found in the authentication module. CVE-2009-4415 Multiple directory traversal vulnerabilities were found in the addressbook module. CVE-2009-4416 The authentication module is affected by cross-site scripting. For the stable distribution these problems have been fixed in version 1:0.9.16.012+dfsg-8+lenny1. For the unstable distribution these problems have been fixed in version 0.9.16.012+dfsg-9. We recommend that you upgrade your phpgroupware packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1978-1 CVE-2009-4414 CVE-2009-4415 CVE-2009-4416	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):	phpgroupware
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all Packages section phpgroupware-0.9.16-phpgwapi DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-addressbook DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-email DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-setup DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-phpgwapi-doc DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-todo DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-preferences DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-core-base DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-news-admin DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-manual DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16 DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-filemanager DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-calendar DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-admin DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-doc DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-notes DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-core DPKG is earlier than 1:0.9.16.012+dfsg-8+lenny1

Definition Id: oval:org.mitre.oval:def:6675

Oval ID:	oval:org.mitre.oval:def:6675
Title:	DSA-1978 phpgroupware -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in phpgroupware, a Web based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems: An SQL injection vulnerability was found in the authentication module. Multiple directory traversal vulnerabilities were found in the addressbook module. The authentication module is affected by cross-site scripting.
Family:	unix	Class:	patch
Reference(s):	DSA-1978 CVE-2009-4414 CVE-2009-4415 CVE-2009-4416	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):	phpgroupware
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all Packages section phpgroupware-0.9.16-phpgwapi is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-addressbook is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-news-admin is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-setup is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-phpgwapi-doc is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-filemanager is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-preferences is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-todo is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-core-base is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-email is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16 is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-manual is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-core is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-calendar is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-admin is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-doc is earlier than 1:0.9.16.012+dfsg-8+lenny1 AND phpgroupware-0.9.16-notes is earlier than 1:0.9.16.012+dfsg-8+lenny1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Phpgroupware cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.12:::::::*	1

OpenVAS Exploits

Date	Description
2010-02-01	Name : Debian Security Advisory DSA 1978-1 (phpgroupware) File : nvt/deb_1978_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
56179	phpGroupWare login.php phpgw_* Parameter XSS phpGroupWare contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate parameters that start with 'phpgw_' upon submission to the login.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Description

56179

phpGroupWare login.php phpgw_* Parameter XSS

phpGroupWare contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate parameters that start with 'phpgw_' upon submission to the login.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Nessus® Vulnerability Scanner

Date	Description
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1978.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/35761
CONFIRM	http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=... http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r... http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/do...
MISC	http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupwa...
MLIST	http://www.openwall.com/lists/oss-security/2009/12/20/1
OSVDB	http://www.osvdb.org/56179
SECUNIA	http://secunia.com/advisories/35519
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/51923

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:10:37	Multiple Updates
2021-04-22 01:11:06	Multiple Updates
2020-05-23 00:24:44	Multiple Updates
2017-08-17 09:22:49	Multiple Updates
2016-06-28 17:55:48	Multiple Updates
2016-04-26 19:20:10	Multiple Updates
2014-02-17 10:52:45	Multiple Updates
2013-05-11 00:02:58	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	2
CPE ID(s)	1
Sources(s)	9
osvdb(s)	1
Openvas Exploit(s)	1
Nessus® Exploit(s)	1

	Related
7.5	DSA-1978
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)