Vulnerabilities in Ektron CMS Could Allow Arbitrary Code Execution

Executive Summary

Microsoft is providing notification of the discovery and remediation of two vulnerabilities affecting Ektron Web Content Management System (CMS). Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Ektron. Ektron has remediated these vulnerabilities in their software.

The first vulnerability exists when Ektron Web CMS improperly handles user-controlled XSL data within the XslCompiledTransform class, resulting in unauthenticated arbitrary code execution. This vulnerability has been assigned the entry, CVE-2012-5357, in the Common Vulnerabilities and Exposures list.

The second vulnerability exists in the XSLTCompiledTransform function, allowing an attacker to bypass authentication. This vulnerability has been assigned the entry, CVE-2012-5358, in the Common Vulnerabilities and Exposures list.

Microsoft Vulnerability Research reported this issue to and coordinated with Ektron to ensure remediation of this issue. For more information, including information about updates from Ektron, see the latest Ektron Product Release Notes. For more information from Ektron about remediation of this issue, see the Ektron Product Release Notes for Version 8.02 SP5.

Mitigating Factors

• No mitigating factors have been identified for these vulnerabilities.