REDHAT-BUG-797777: XSS
A stored cross-site scripting (XSS) flaw was found in the way Kadu, the instant messenger compatible with the Gadu-Gadu protocol, performed sanitization of status and sms messages for particular contact in user's history. A remote attacker could provide a specially-crafted status or sms message, which would be stored in victim's Kadu history file, if the attacker was present on the contact list of the victim and the victim has had storage of statuses enabled for their history file. When the victim later examined the content of the status history, this flaw could lead to arbitrary HTML or webscript execution.
References: [1] https://bugzilla.novell.com/showbug.cgi?id=749036
Upstream patches: [2] https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52 (patch for the XSS issue)
[3] https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84 (additional hardening)
[4] https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6 (disable xhtmlrequests)
[5] https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0 (allow only GET and HEADER requests, additional hardening)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-797777?
The severity of REDHAT-BUG-797777 is classified as a stored cross-site scripting (XSS) vulnerability.
How do I fix REDHAT-BUG-797777?
To fix REDHAT-BUG-797777, update Kadu to the latest version that includes the security patches addressing the XSS issue.
What kind of attack can occur due to REDHAT-BUG-797777?
A remote attacker can exploit REDHAT-BUG-797777 by sending specially-crafted status or SMS messages to execute arbitrary scripts in the user's browser.
Is the software Kadu affected by REDHAT-BUG-797777?
Yes, Kadu, the instant messenger, is affected by REDHAT-BUG-797777 due to improper sanitization of input messages.
Who can be impacted by the vulnerability REDHAT-BUG-797777?
Users of Kadu who receive modified messages from attackers can be impacted by the vulnerability REDHAT-BUG-797777, leading to potential security risks.