Google Mini Search Appliance Input Validation Hole in 'ie' Parameter P

Impact:  Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information
Fix Available:  Yes   Exploit Included:  Yes   Vendor Confirmed:  Yes 
Description:  A vulnerability was reported in Google Mini Search Appliance. A remote user can conduct cross-site scripting attacks.

网管朋友网www_bitscn_net

The device does not properly filter HTML code from user-supplied input in the 'ie' parameter before displaying the input. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to be executed by the target user's browser. The code will originate from the Google Mini Search Appliance device and will run in the security context of that device. As a result, the code will be able to access the target user's cookies (including authentication cookies), if any, associated with the device, access data recently submitted by the target user via web form to the device, or take actions on the device acting as the target user. 网管有家bitscn.net

A demonstration exploit URL is provided: 网管联盟bitsCN@com

http://[target]/search?ie=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
&site=x& output=xml_no_dtd'&client=x&proxystylesheet=x'

网管u家www.bitscn.net

The original advisory is available at:

http://websecurity.com.ua/1368/
Impact:  A remote user can access the target user's cookies (including authentication cookies), if any, associated with the Google Mini Search Appliance device, access data recently submitted by the target user via web form to the device, or take actions on the device acting as the target user.
Solution:  The vendor has issued a fix.

The Google advisory is available at:

https://support.google.com/enterprise/doc/mini/advisories/ga-2007-09-m.html
Vendor URL:  www.google.com/ (Links to External Site)
Cause:  Input validation error