CVE-2009-2820 Cross-site scripting in n/a
Remote attackers can execute cross-site scripting and HTTP response splitting attacks via the CUPS web interface, potentially stealing session data or modifying responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2009-2820?
CVE-2009-2820 is a medium-severity cross-site scripting vulnerability in Apple Mac Os X, published on 10 Nov 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
Weakness: CWE-79
Which versions are affected by CVE-2009-2820?
It affects 2 products.
Products include Apple Mac Os X, Apple Mac Os X Server.
How do I fix CVE-2009-2820?
Upgrade to a fixed version.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2009-2820 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-2820 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as DEBIAN-CVE-2009-2820, DSA-1933-1, GHSA-hmf5-7mhf-fpjh.