Cross-Site Scripting Vulnerabilities in Cisco VPN 3000 Series and ASA 5500 Series

CVE-2006-3073

Summary

Two separate cross-site scripting (XSS) vulnerabilities exist in the WebVPN feature of the Cisco VPN 3000 Series Concentrators and ASA 5500 Series Adaptive Security Appliances. These vulnerabilities allow remote attackers to execute arbitrary scripts or HTML by injecting malicious code through the 'domain' parameter in specific error pages (dnserror.html and connecterror.html) when the devices are in clientless WebVPN mode. It is important to note that devices operating in 'full-network-access mode' are not affected, according to vendor statements.

References