jetlib.sec » Tags » external-entity

Feeds

133360 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "external entity"

Related tags: external [+], security [+], raptor [+], information disclosure vulnerability [+], adobe [+], xml entity [+], version 6 [+], server [+], red hat security [+], proof of concept [+], mail server [+], mail [+], jboss [+], information disclosure [+], icewarp [+], entity [+], dom document [+], adobe products [+], webdav [+], txt [+], security assessment [+], liferay [+], file [+], blazeds [+], security bulletins [+], password properties [+], coldfusion [+], xml [+]

• April 23, 2012
• 0:00

  Vuln: Raptor XML External Entity Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Raptor XML External Entity Information Disclosure Vulnerability

  Tags:  external xml raptor information-disclosure-vulnerability external-entity  

• April 20, 2012
• 17:17

  Liferay 6.0.5 ce WebDAV File Reading

   » ‎ Packet Storm Security Exploits
  By creating a specially crafted webdav request that contains an external entity it is possible to read files from Liferay Portal version 6.0.5 ce. Proof of concept code included.

  Tags:  webdav file liferay proof-of-concept external-entity version-6  

• 17:17

  Liferay 6.0.5 ce WebDAV File Reading

   » ‎ Packet Storm Security Recent Files
  By creating a specially crafted webdav request that contains an external entity it is possible to read files from Liferay Portal version 6.0.5 ce. Proof of concept code included.

  Tags:  webdav file liferay proof-of-concept external-entity version-6  

• 17:17

  Liferay 6.0.5 ce WebDAV File Reading

   » ‎ Packet Storm Security Misc. Files
  By creating a specially crafted webdav request that contains an external entity it is possible to read files from Liferay Portal version 6.0.5 ce. Proof of concept code included.

  Tags:  proof-of-concept external-entity version-6  

• April 12, 2012
• 0:00

  Vuln: Raptor XML External Entity Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Raptor XML External Entity Information Disclosure Vulnerability

  Tags:  external xml raptor information-disclosure-vulnerability external-entity  

• April 02, 2012
• 18:27

  Red Hat Security Advisory 2012-0441-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0441-01 - JBoss Enterprise BRMS Platform is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This roll up patch serves as a cumulative upgrade for JBoss Enterprise BRMS Platform 5.2.0. It includes various bug fixes and enhancements. The following security issues are also fixed with this release: It was found that RESTEasy was vulnerable to XML External Entity attacks. If a remote attacker submitted a request containing an external XML entity to a RESTEasy endpoint, the entity would be resolved, allowing the attacker to read files accessible to the user running the application server. This flaw affected DOM Document and JAXB input.

  Tags:  entity jboss security dom-document red-hat-security xml-entity external-entity  

• 18:27

  Red Hat Security Advisory 2012-0441-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0441-01 - JBoss Enterprise BRMS Platform is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This roll up patch serves as a cumulative upgrade for JBoss Enterprise BRMS Platform 5.2.0. It includes various bug fixes and enhancements. The following security issues are also fixed with this release: It was found that RESTEasy was vulnerable to XML External Entity attacks. If a remote attacker submitted a request containing an external XML entity to a RESTEasy endpoint, the entity would be resolved, allowing the attacker to read files accessible to the user running the application server. This flaw affected DOM Document and JAXB input.

  Tags:  entity jboss security dom-document red-hat-security xml-entity external-entity  

• 18:27

  Red Hat Security Advisory 2012-0441-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0441-01 - JBoss Enterprise BRMS Platform is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This roll up patch serves as a cumulative upgrade for JBoss Enterprise BRMS Platform 5.2.0. It includes various bug fixes and enhancements. The following security issues are also fixed with this release: It was found that RESTEasy was vulnerable to XML External Entity attacks. If a remote attacker submitted a request containing an external XML entity to a RESTEasy endpoint, the entity would be resolved, allowing the attacker to read files accessible to the user running the application server. This flaw affected DOM Document and JAXB input.

  Tags:  entity jboss security dom-document red-hat-security xml-entity external-entity  

• March 27, 2012
• 0:00

  Vuln: Raptor XML External Entity Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Raptor XML External Entity Information Disclosure Vulnerability

  Tags:  external xml raptor information-disclosure-vulnerability external-entity  

• March 23, 2012
• 0:00

  Vuln: Raptor XML External Entity Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Raptor XML External Entity Information Disclosure Vulnerability

  Tags:  external xml raptor information-disclosure-vulnerability external-entity  

• March 22, 2012
• 0:00

  Vuln: Raptor XML External Entity Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Raptor XML External Entity Information Disclosure Vulnerability

  Tags:  external xml raptor information-disclosure-vulnerability external-entity  

• September 23, 2011
• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Exploits
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Recent Files
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Misc. Files
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• November 06, 2010
• 5:57

  Adobe XML Injection Metasploit Module

   » ‎ Carnal0wnage
  I just pushed out code coverage for the Adobe XML External Entity Injection vulnerability in multiple adobe products including: BlazeDS 3.2 and earlier versions, LiveCycle 9.0, 8.2.1, and
  8.0.1, LiveCycle Data Services 3.0, 2.6.1, and 2.5.1, Flex Data
  Services 2.0.1, ColdFusion 9.0, 8.0.1, 8.0, and 7.0.2
  
  References Here:
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3960
  http://www.osvdb.org/62292
  http://www.securityfocus.com/bid/38197
  http://www.security-assessment.com/files/advisories/2010-02-22_Multiple_Adobe_Products-XML_External_Entity_and_XML_Injection.pdf
  http://www.adobe.com/support/security/bulletins/apsb10-05.html
  
  I recommend you read security-asessment's pdf on it, its good.
  
  Anyway, its a cool bug.
  1 -->because it affects several products although most people have probably never heard of most of them except for ColdFusion.
  2 -->its enabled by default on all those products you've never heard of except for ColdFusion, with the exception of CF 8 which appears to have it turned on by default.
  3 -->You have to apply patches for CF individually and there is no automated process. Since this vuln got little media attention I've seen alot of hosts that are still missing this patch and/or didn't turn off the vuln service.
  
  On with the demo!
  
  So against a patched host or someone that has disabled the service in ColdFusion you'll see one of two things; either 404's for the checks or 200 for /flex2gateway/ and 500 for the http or https check.
  
  
  
  If you get a bunch of 400's then you need to set the VHOST
  
  
  When it works, you'll see something like this for /etc/passwd
  
  
  and like this when you asked for a file that doesn't exist or doesn't have permission to read (since CF doesn't run as root on linux, requesting /etc/shadow wont work) :-(
  
  
  At this point, you're probably like "so what" well whats cool about arbitrary file read is that 1. it also works on Windows:
  
  and 2. that whole password.properties attack is now cool again because you can just request that file too
  
  
  -CG

  Tags:  xml coldfusion adobe password-properties security-bulletins external-entity  

• March 05, 2010
• 0:00

  Vuln: Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

  Tags:  xml blazeds adobe external-entity  

• February 23, 2010
• 0:00

  adobexml-injection.txt

   » ‎ Packet Storm Security Recent Files
  Security-Assessment.com discovered that multiple Adobe products with different Data Services versions are vulnerable to XML External Entity (XXE) and XML injection attacks.

  Tags:  txt xml security external-entity security-assessment adobe-products  

• 0:00

  adobexml-injection.txt

   » ‎ Packet Storm Security Exploits
  Security-Assessment.com discovered that multiple Adobe products with different Data Services versions are vulnerable to XML External Entity (XXE) and XML injection attacks.

  Tags:  txt xml security external-entity security-assessment adobe-products  

• February 22, 2010
• 9:00

  Adobe Products XML External Entity And XML Injection Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Adobe Products XML External Entity And XML Injection Vulnerabilities

  Tags:  external xml adobe external-entity adobe-products  

• 0:00

  Vuln: Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

  Tags:  xml blazeds adobe external-entity