Description
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Cisco ASA Appliance 8.x - WebVPN DOM Wrapper Cross-Site Scripting EDB-33055 · remote · May 24, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 35476 vdb-entry
- https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt
- 20090624 Trustwave's SpiderLabs Security Advisory TWSL2009-002 mailing-list
- 1022457 vdb-entry
- ADV-2009-1713 vdb-entry
- 35511 third-party-advisory