SUBJECT: Axigen XSS vulnerability for html attachments
DESCRIPTION: Axigen's WebMail Ajax interface implements a view
attachment function that executes javascript code that is part of email
HTML attachments.
This allows a malicious user to craft email messages that could expose
an Axigen WebMail Ajax user to cross site scripting or other attacks
that rely on arbitrary javascript code running within a trusted domain.
Axigen versions starting with 9.0 address this issue by limiting the
attachment types that are loaded in the browser.
For earlier Axigen versions patches are available on the Axigen support
channel.
Affected Products and Versions: Axigen Mail Server [1] 8.x versions
Vendor Internal ID: AXI-CVE-20150601
Vendor security advisory : [2]
Reported by: An anonymous researcher working with Beyond Security's
SecuriTeam Secure Disclosure program [3]
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CA0
150715025927Z
160715101804Z0L1!0 Uioan.indreias (at) axigen (dot) com1 [email concealed]'0% *?H?÷
ioan.indreias (at) axigen (dot) com0 [email concealed]?"0
*?H?÷
?0?
?¹!¶?qa@YíÛW7¯x V®Î?»À%èHî«â>ê?\Ôð|Wf¬Äµöÿ_¹¡þw/(Î?V!öö^3 ??äÐ\¢ü%W?LBe ÊpI?ûÎ4³\:vk:??";SS ?eÚ?Yð±ø)¾¾ÞÏÛê_äÓÈ"Çì.¥?? ÆzÊbHSb óþ6Ú(cÝuDíÿÙÔõ s?wëfBNÿ¾*?#HÒy'íñÆ?MÀ+¡?½)±R?yY®T¿Ë«HÚÄÅÔ'4
'=$¿|?£2?X® Ê?tè=«PÆQ?²8Ó@R¨?`¡£?Þ0?Ú0 U 00 U °0 U %0++0 U « ÙÆMo&yë
$~lr`pAféð0 U #0?Srí??àÚË\|~?5NòÔ¸Q?0#U 0ioan.indreias@a
xigen.com0?LU ?C0??0?; +µ70?*0.+"http://www.startssl.com/polic
y.pdf0÷+0ê0' StartCom Certification Authority0¾This certificate was issued according to the Class 1 Validation requirements of the StartCom CA policy, reliance only for the intended purpose in compliance of the relying party obligations.06U /0-0+ ) '?%http://crl.startssl.com/crtu1-crl.crl0?
+009+0?-http://ocsp.startssl.com/sub/class1/client/c
a0B+0?6http://aia.startssl.com/certs/sub.class1.client.ca.crt0#
U 0?http://www.startssl.com/0
*?H?÷
??Bûèj??ñ?JÆ9µ´Á
º~<xÒ?79Ñß?Ö(J?Ô±r??p$ t? DËÒ^Â?O?ºý?²iåïõf+VÂê Äp¤¢gú /pÔ¨5RPg÷{×¥Ý/?Iï?ç°Púõ}I¼[:R?µmÍ@*?s?%?,i,zJ??Ü
«ÀbízT??0.nýþX?» ¬F¹yÈä=ÛX8¤øfï???Q?a?ïº?sþ"?ÞMUå~ð:õ3??k?¦²T?8
*Çø ý[tòvßÖÆ9´?
ùx?¹óþÌ09'è?ì?43ü8>ª.Z¼~} ¨?¸¦/1?í0?é0?0?1 0 UIL10U
SUBJECT: Axigen XSS vulnerability for html attachments
DESCRIPTION: Axigen's WebMail Ajax interface implements a view
attachment function that executes javascript code that is part of email
HTML attachments.
This allows a malicious user to craft email messages that could expose
an Axigen WebMail Ajax user to cross site scripting or other attacks
that rely on arbitrary javascript code running within a trusted domain.
Axigen versions starting with 9.0 address this issue by limiting the
attachment types that are loaded in the browser.
For earlier Axigen versions patches are available on the Axigen support
channel.
Affected Products and Versions: Axigen Mail Server [1] 8.x versions
Vendor Internal ID: AXI-CVE-20150601
Vendor security advisory : [2]
Reported by: An anonymous researcher working with Beyond Security's
SecuriTeam Secure Disclosure program [3]
[1] https://www.axigen.com
[2]
https://www.axigen.com/knowledgebase/Ajax-WebMail-8-x-security-patch-CVE
-2015-5379-_341.html
[3] http://www.beyondsecurity.com/ssd.html
0? *?H?÷
?0?10
`?He0? *?H?÷
?r0?40? 0
*?H?÷
0}1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1)0'U StartCom Certification Authority0
071024210155Z
171024210155Z0?1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CA0?"0
*?H?÷
?0?
?Ç ?ÌÎ-ر)¤.«?¾?2??¦?A?UGÔoêê¿#Gá
ï?B|N?D¢§»ÌÏRpºM-²õB?¥=oí?Í -êweÑ5¹JÿQpa>O??.Û#??âêÂû.Ïßý_µ<¡ÆüV?ÿ
[~â*»?*ÌpØz¨?~Æ3¡WåGÍ.á?????ÍMl?r[<CÏe¡6û«Èf?þ¿qàö¹?×õO?é"?uÆÐ
xf«WN?#uù¯ýi¹ÅcÂgkÿãv$²®´?Lb¤%æëýÿáæßy??`¬ÍØÿØ_×{`ý?óxK'G±N§ë?
£?0?©0U ÿ0ÿ0U ÿ0 U Srí??àÚË\|~?5Nò
Ô¸Q?0 U #0?N ï¤@[¥i?0Ê4hCÐA®ò0f+Z0X0'+0?http:
//ocsp.startssl.com/ca0-+0?!http://www.startssl.com/sfsca.crt0[
U T0R0' % #?!http://www.startssl.com/sfsca.crl0' % #?!http://crl.star
tssl.com/sfsca.crl0?U y0w0u +µ70f0.+"http://www.startssl.com/policy.pdf04
+(http://www.startssl.com/intermediate.pdf0
*?H?÷
?
?}x«,\¸c?^® ¹#wM¡qØ}?¼>UK/ú^yÛXÖy ÷ ?ð¨fÊrMIŲéB6Û1ymQó¸??ÆҨݬZ?µ¶0?¶?&äø;½@ú?#13qÛ??& åÈÌ¢?öÔò?ûo? 6Ørú?_?;GO>*Iô( 74·?ä¹XS1r3¹?)!úÇ?ºy²®6Ko²þ¡ÄtË?#
_Ïw?SÝrÒôâ¦
ÿ;¾B
AÃDp?(fÏôs?ÏÛ÷½áíä°·6%??¯¬±.W0J3?:b?Cô<·8t X»Ò¹1?<øüCÓänñ=°?Ïìãt==äwS?¨âT?º¾?êú~?ÔÐ\ñwkBðfº|1?ïµ5¸¾ÓzU?æP)±°(
?º?Iôéj?ÅVBø?!?øÑÒOfI=b?Íbé\4?-*em?/нSJm¾7çËNú?ÎíÃ[?]'þª@Ú½¦ù D9
?Kr>ù£ªR?é7/¸ñ?|?oõãì^I@ÆÙ¼'±?Pa $ z?ä9ìa'Lò)??(
¼IÝó}võöc H]ÕÛ¸¨D¦ãýÂ*ì?Wº}
mæ>QÓ»ØÆ|?C.Õ(,?lÌÎQâ0?60? µË0
*?H?÷
0?1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CA0
150715025927Z
160715101804Z0L1!0 Uioan.indreias (at) axigen (dot) com1 [email concealed]'0% *?H?÷
ioan.indreias (at) axigen (dot) com0 [email concealed]?"0
*?H?÷
?0?
?¹!¶?qa@YíÛW7¯x V®Î?»À%èHî«â>ê?\Ôð|Wf¬Äµöÿ_¹¡þw/(Î?V!öö^3 ??äÐ\¢ü%W?LBe ÊpI?ûÎ4³\:vk:??";SS ?eÚ?Yð±ø)¾¾ÞÏÛê_äÓÈ"Çì.¥?? ÆzÊbHSb óþ6Ú(cÝuDíÿÙÔõ s?wëfBNÿ¾*?#HÒy'íñÆ?MÀ+¡?½)±R?yY®T¿Ë«HÚÄÅÔ'4
'=$¿|?£2?X® Ê?tè=«PÆQ?²8Ó@R¨?`¡£?Þ0?Ú0 U 00 U °0 U %0++0 U « ÙÆMo&yë
$~lr`pAféð0 U #0?Srí??àÚË\|~?5NòÔ¸Q?0#U 0ioan.indreias@a
xigen.com0?LU ?C0??0?; +µ70?*0.+"http://www.startssl.com/polic
y.pdf0÷+0ê0' StartCom Certification Authority0¾This certificate was issued according to the Class 1 Validation requirements of the StartCom CA policy, reliance only for the intended purpose in compliance of the relying party obligations.06U /0-0+ ) '?%http://crl.startssl.com/crtu1-crl.crl0?
+009+0?-http://ocsp.startssl.com/sub/class1/client/c
a0B+0?6http://aia.startssl.com/certs/sub.class1.client.ca.crt0#
U 0?http://www.startssl.com/0
*?H?÷
??Bûèj??ñ?JÆ9µ´Á
º~<xÒ?79Ñß?Ö(J?Ô±r??p$ t? DËÒ^Â?O?ºý?²iåïõf+VÂê Äp¤¢gú /pÔ¨5RPg÷{×¥Ý/?Iï?ç°Púõ}I¼[:R?µmÍ@*?s?%?,i,zJ??Ü
«ÀbízT??0.nýþX?» ¬F¹yÈä=ÛX8¤øfï???Q?a?ïº?sþ"?ÞMUå~ð:õ3??k?¦²T?8
*Çø ý[tòvßÖÆ9´?
ùx?¹óþÌ09'è?ì?43ü8>ª.Z¼~} ¨?¸¦/1?í0?é0?0?1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CAµË0
`?He ?)0 *?H?÷
1 *?H?÷
0 *?H?÷
1
150721103847Z0/ *?H?÷
1" /0¯Kñ(¢@d÷íq0-X$?%ÿ?Þ*L^?ÔD0l *?H?÷
1_0]0 `?He*0 `?He0
*?H?÷
0*?H?÷
?0
*?H?÷
@0+0
*?H?÷
(0¥ +?71?0?0?1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CAµË0§ *?H?÷
1? ?0?1 0 UIL10U
StartCom Ltd.1+0)U "Secure Digital Certificate Signing1806U/StartCom Class 1 Primary Intermediate Client CAµË0
*?H?÷
??¨ ÿ½½?º-Åó?ÓÒj /àm?÷¤'Ú«cª?-qëc¨Ïú%2ß?Äð®T¥ÌKÖæ©(Ó¯?á^lÔ x½å?±ûâªçLcfhHé»uÎ?JñßèNe ÓRYÍRñx7úóÝæ´.ôsÒ9MNdþ|F?i¤Ó?ÓïÆ??P]Ï|¸gñ?wöy·°-5'þ??9?=øS]ËËô?VéG?[¸è3n"óMýõV nм³?ÂýnÁÝ ýÂÀ:¯¼v?ñ&kì$7Pç©??u¢½« ä$öv*6mß!x>Ï?Ï
;x-¸Óç Ó¾OuSí?
[ reply ]