Signature Detail
Short Name |
HTTP:STC:OPERA:TELNET-URI |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Opera Telnet URI Handler File Creation |
Release Date |
2013/06/20 |
Update Number |
2275 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Opera Telnet URI Handler File Creation
This signature detects attempts to exploit a known vulnerability against Opera Web Browser. An attacker can invoke telnet with a trace file name as argument by requesting an URI address to opera web browser, which allows the attacker to create malicious files on the victim machine.
Extended Description
A vulnerability has been identified in multiple products from multiple vendors that may allow a remote attacker to create or modify arbitrary files; these issues relate to the processing of URI requests via various protocol handlers including telnet, rlogin, ssh and mailto. The vulnerability presents itself because applications fail to validate URI input; if a '-' character precedes the host name it is possible to pass options to an application that handles the protocol. Successful exploitation of this issue may allow a remote attacker to create or modify arbitrary files, resulting in a denial of service condition in the browser. The attack would occur in the context of the user running the vulnerable browser. This BID is currently under review and will be updated, and possible separated into multiple issues, when more information becomes available.
Affected Products
- Alexander Clauss & iCab Company iCab 2.9.8
- Alexander Clauss & iCab Company iCab Pre 2.7.0
- Alexander Clauss & iCab Company iCab Pre 2.71.0
- Apple Safari 1.0.0
- Apple Safari 1.1.0
- Apple Safari Beta 2
- KDE 3.1.4
- KDE 3.1.5
- KDE kdelibs 2.0.0
- KDE kdelibs 2.0.1
- KDE kdelibs 2.1.0
- KDE kdelibs 2.1.1
- KDE kdelibs 2.1.2
- KDE kdelibs 3.1.0
- KDE kdelibs 3.1.1
- KDE kdelibs 3.1.2
- KDE kdelibs 3.1.3
- KDE kdelibs 3.2.0
- KDE kdelibs 3.2.1
- KDE kdelibs 3.2.2
- MacWarriors TrailBlazer 0.52.0
- Microsoft Internet Explorer 5.0
- Microsoft Internet Explorer 5.0.1
- Microsoft Internet Explorer 5.0.1 SP1
- Microsoft Internet Explorer 5.0.1 SP2
- Microsoft Internet Explorer 5.0.1 SP3
- Microsoft Internet Explorer 5.0.1 SP4
- Microsoft Internet Explorer 5.5
- Microsoft Internet Explorer 5.5 SP1
- Microsoft Internet Explorer 5.5 SP2
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0 SP1
- Mozilla Firefox 0.8.0
- Omni Group OmniWeb 4.0.6
- Omni Group OmniWeb 4.1.0 beta11
- Omni Group OmniWeb 4.5.0
- Opera Software Opera Web Browser 7.23.0
References
- BugTraq: 10341
- CVE: CVE-2004-0473