----------------------------------------------------------------------

Become a PSI 3.0 beta tester!
Test-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface.
Download it here!
http://secunia.com/psi_30_beta_launch

----------------------------------------------------------------------

TITLE:
Bradford Network Sentry Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA47478

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/47478/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=47478

RELEASE DATE:
2012-06-13

DISCUSS ADVISORY:
http://secunia.com/advisories/47478/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA:
 * Last Update
 * Popularity
 * Comments
 * Criticality Level
 * Impact
 * Where
 * Solution Status
 * Operating System / Software
 * CVE Reference(s)

http://secunia.com/advisories/47478/

ONLY AVAILABLE IN CUSTOMER AREA:
 * Authentication Level
 * Report Reliability
 * Secunia PoC
 * Secunia Analysis
 * Systems Affected
 * Approve Distribution
 * Remediation Status
 * Secunia CVSS Score
 * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=47478

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:
 * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/
http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION:
Multiple vulnerabilities have been reported in Bradford Network
Sentry, which can be exploited by malicious users to conduct script
insertion attacks and by malicious people to conduct cross-site
request forgery attacks and bypass certain security restrictions.

1) Certain input passed to GuestAccess.jsp is not properly sanitised
before being displayed to the user. This can be exploited to insert
arbitrary HTML and script code, which will be executed in a user's
browser session when the malicious data is viewed.

2) The application's web interface allows users to perform certain
actions via HTTP requests without performing any validity checks to
verify the requests. This can be exploited to perform certain actions
with administrative privileges if a logged-in administrator visits a
malicious web site.

3) An error within the Bradford agent does not check for
authentication when processing certain actions, which can be
exploited to display arbitrary messages on a user's screen via a
specially crafted request sent to UDP port 4567.

The vulnerabilities are reported in version 5.3 NS500. Other versions
may also be affected.

SOLUTION:
Update to version 5.3.3.

PROVIDED AND/OR DISCOVERED BY:
US-CERT credits Travis Lee.

ORIGINAL ADVISORY:
US-CERT VU#709939
http://www.kb.cert.org/vuls/id/709939

OTHER REFERENCES:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

DEEP LINKS:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXPLOIT:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------