It was discovered that the XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation.
(CVE-2009-0217)

It was discovered that Mono did not properly escape certain attributes in the ASP.net class libraries which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output.
With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data (such as passwords), within the same domain. This issue only affected Ubuntu 8.04 LTS. (CVE-2008-3422)

It was discovered that Mono did not properly filter CRLF injections in the query string. If a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, steal confidential data (such as passwords), or perform cross-site request forgeries. This issue only affected Ubuntu 8.04 LTS. (CVE-2008-3906).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートホストは、Microsoft .NET開発プラットフォームのオープンソースUNIX実装であるMonoを実行しています。 

リモートホストにインストールされているバージョンのMonoは、フォームのデフォルトの「アクション」に使用する前に、ユーザー指定の入力をURLにエンコードできません。攻撃者がこれを利用して、任意のHTMLおよびスクリプトコードをユーザーのブラウザに注入し、影響を受けるサイトのセキュリティコンテキスト内で実行させることがあります。

This patch fixes two security problems and one critical bug :

Makes sure that values of all the tags which can be exploited are encoded to make sure no exploit is possible. (CVE-2008-3422)

A header injection problem in Sys.Web was fixed.

Fix a problem with the Novell.Directory.Ldap.dll as exposed by iFolder3. (Novell Bugzilla 383357)

遠端主機正在執行 Mono，這是 Microsoft .NET 開發平台的開放原始碼 UNIX 實作。 

遠端主機上安裝的 Mono 版本未對 URL 的使用者輸入內容進行編碼，便將其用於表單的預設「動作」。攻擊者可能會利用此弱點，將任意 HTML 和指令碼插入使用者的瀏覽器，以便在受影響網站的安全性內容中執行。

Multiple vulnerabilities has been found and corrected in mono :

Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren) (CVE-2008-3422).

The XML HMAC signature system did not correctly check certain lengths.
If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation (CVE-2009-0217).

This update fixes these vulnerabilities.

This patch fixes two security problems and one critical bug :

Makes sure that values of all the tags which can be exploited are encoded to make sure no exploit is possible. (CVE-2008-3422)

A header injection problem in Sys.Web was fixed.

The remote host is running Mono, an open source, UNIX implementation of the Microsoft .NET development platform. 

The version of Mono installed on the remote host fails to encode user-supplied input to the URL before using it for the default 'action' of a form.  An attacker may be able to leverage this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

Multiple vulnerabilities has been found and corrected in mono :

IOActive Inc. found a buffer overflow in Mono.Math.BigInteger class in Mono 1.2.5.1 and previous versions, which allows arbitrary code execution by context-dependent attackers (CVE-2007-5197).

Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren) (CVE-2008-3422).

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string (CVE-2008-3906).

The XML HMAC signature system did not correctly check certain lengths.
If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation (CVE-2009-0217).

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

The updated packages have been patched to fix these issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
40794	Ubuntu 8.04 LTS / 8.10 / 9.04 : mono vulnerabilities (USN-826-1)	Nessus	Ubuntu Local Security Checks	2009/8/27	2021/1/19	medium
35556	Mono ASP.NETのaction属性のXSS	Nessus	CGI abuses : XSS	2009/1/30	2022/4/11	medium
34071	SuSE 10 Security Update : Mono (ZYPP Patch Number 5560)	Nessus	SuSE Local Security Checks	2008/9/3	2021/1/14	medium
35556	Mono ASP.NET 動作屬性 XSS	Nessus	CGI abuses : XSS	2009/1/30	2022/4/11	medium
42095	Mandriva Linux Security Advisory : mono (MDVSA-2009:268)	Nessus	Mandriva Local Security Checks	2009/10/13	2021/1/6	medium
39925	openSUSE Security Update : bytefx-data-mysql (bytefx-data-mysql-173)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
34070	openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-5558)	Nessus	SuSE Local Security Checks	2008/9/3	2021/1/14	medium
35556	Mono ASP.NET action Attribute XSS	Nessus	CGI abuses : XSS	2009/1/30	2022/4/11	medium
43041	Mandriva Linux Security Advisory : mono (MDVSA-2009:322)	Nessus	Mandriva Local Security Checks	2009/12/8	2021/1/6	high

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

high