Multiple vulnerabilities have been reported in Bradford Network Sentry, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site request forgery attacks and bypass certain security restrictions.

1) Certain input passed to GuestAccess.jsp is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session when the malicious data is viewed.

2) The application's web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in administrator visits a malicious web site.

3) An error within the Bradford agent does not check for authentication when processing certain actions, which can be exploited to display arbitrary messages on a user's screen via a specially crafted request sent to UDP port 4567.

The vulnerabilities are reported in version 5.3 NS500. Other versions may also be affected.

Solution
Update to version 5.3.3.

Provided and/or discovered by
US-CERT credits Travis Lee.

Original Advisory
US-CERT VU#709939
http://www.kb.cert.org/vuls/id/709939

Deep Links
Links available to Secunia VIM customers