Cybozu Garoon 2 SQL Injection Vulnerability Advisory

Vulnerability Key Information Summary Vulnerability Type: SQL Injection Vulnerability Affected Software: Cybozu Garoon 2 Version 2.1.0 for Windows Release Date: 2006-08-28 Tested Version Cybozu Garoon 2 Version 2.1.0 for Windows Details Vulnerability Description: - 1) TODO List View/Modify SQL Injection: When a logged-in user exploits the TODO List View and Modify functions, due to improper filtering of the parameter, an SQL injection attack can be constructed to retrieve arbitrary data from the database, such as administrator password hashes. - 2) Workflow View/Print SQL Injection: When a logged-in user exploits the Workflow View and Print functions, due to improper filtering of the parameter, an SQL injection attack can also be constructed. - 3) Other SQL Injection Vulnerabilities: Additional SQL injection vulnerabilities, not detailed, may be exploited to cause the MySQL database engine to consume excessive CPU resources, leading to a DoS attack. Mitigation Update to version 2.1.1 References http://cybozu.co.jp/products/dlinote_060825/ Disclosure Timeline 2006-07-04: Vulnerability discovered 2006-07-13: Initial vendor notification 2006-07-13: Initial vendor response 2006-07-14: Received vendor’s planned patch release date 2006-08-16: Received notification that patch release would be delayed 2006-08-25: Vendor released patch information 2006-08-28: Public disclosure 2006-08-31: Corrected spelling error in product name

Goal Reached Thanks to every supporter — we hit 100%!

Cybozu Garoon 2 SQL Injection Vulnerability Advisory