Ha.ckers.fr Team has reported a weakness and some vulnerabilities in IPdiva SSL VPN Server, which can be exploited by malicious people to conduct brute force and cross-site scripting attacks.

1) The number of failed login attempts is stored in a cookie. This can be exploited to e.g. conduct brute force attacks by reseting the cookie's value.

2) Input passed to multiple unspecified parameters is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in version prior to 2.2.8 (November 2007).

Solution
Update to version 2.2.8 from November 2007 or later.

Provided and/or discovered by
Ha.ckers.fr Team

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060314.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html

Deep Links
Links available to Secunia VIM customers