Spyware, viruses, & security forum: VULNERABILITIES \ FIXES - February 22, 2010

Release Date : 2010-02-22

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Fedora 11
Fedora 12

Description
Fedora has issued an update for pdfedit. This fixes some vulnerabilities, which can be exploited by malicious people to potentially compromise a user's system.

Solution
Apply updated packages using the yum utility ("yum update pdfedit").

Original Advisory
FEDORA-2010-1842:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html

FEDORA-2010-1377:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html

http://secunia.com/advisories/38721

Release Date : 2010-02-22

Criticality level : Not critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software : Konversation 1.x

Description
A weakness has been reported in Konversation, which can be exploited by malicious people to cause a DoS (Denial of Service).

The weakness is caused due to an error within the Konversation D-Bus interaction related to certain Unicode characters, which can be exploited to crash the application.

Solution
Update to version 1.2.3.

Original Advisory
KDE Bug #219985:
http://bugs.kde.org/show_bug.cgi?id=219985

http://secunia.com/advisories/38711/

Release Date : 2010-02-22

Criticality level : Moderately critical
Impact :Exposure of system information
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software : QSF Portal 1.x

Description
A vulnerability has been reported in QSF Portal, which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to the usage of vulnerable Quicksilver Forums code.

Solution
Update to version 1.4.5.

Original Advisory
http://www.qsfportal.com/index.php?a=newspost&t=191

http://secunia.com/advisories/38670/

Release Date : 2010-02-22

Criticality level Highly critical
Impact : Cross Site Scripting
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Fedora 11
Fedora 12

Description
Fedora has issued an update for firefox and xulrunner. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks or compromise a user's system.

Solution
Apply updated packages using the yum utility ("yum update firefox xulrunner").

Original Advisory
FEDORA-2010-1936:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035348.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035358.html

FEDORA-2010-1727:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035423.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035422.html

http://secunia.com/advisories/38710/

Release Date : 2010-02-22

Criticality level : Moderately critical
Impact : Unknown
Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Operating System : Debian GNU/Linux 5.0

Description
Debian has issued an update for php5. This fixes two vulnerabilities, where one has unknown impacts and the other can be exploited by malicious people to conduct cross-site scripting attacks.

Solution
Apply updated packages.

Original Advisory
DSA-2001-1:
http://lists.debian.org/debian-security-announce/2010/msg00041.html

http://secunia.com/advisories/38648/

Release Date : 2010-02-22

Criticality level : Highly critical
Impact : Cross Site Scripting
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Fedora 12

Description
Fedora has issued an update for seamonkey. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks or compromise a user's system.

Solution
Apply updated packages using the yum utility ("yum update seamonkey").

Original Advisory
FEDORA-2010-1932:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html

http://secunia.com/advisories/38714/

Release Date : 2010-02-22

Criticality level : Not critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Operating System : Fedora 11
Fedora 12

Description
Fedora has issued an update for pidgin. This fixes some weaknesses, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution
Apply updated packages via the yum utility ("yum update pidgin").
Original Advisory
FEDORA-2010-1383:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html

FEDORA-2010-1279:
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html

http://secunia.com/advisories/38712/

Release Date : 2010-02-22

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software : WampServer 2.x

Description :
Gjoko Krstic has discovered a vulnerability in WampServer, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "lang" parameter in index.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected application.

The vulnerability is confirmed in version 2.0i. Other versions may also be affected

Solution :
Edit the source code to ensure that input is properly sanitised.

Original Advisory
http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4926.php

http://secunia.com/advisories/38706/

Release Date : 2010-02-22

Criticality level : Less critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Software : InDefero 0.x

Description :
A security issue has been reported in InDefero, which can be exploited by malicious users to bypass certain security restrictions.

The security issue is caused due to an error in the git serving component, which can be exploited to gain access to private sources that are marked "read only" for certain users, if the short name of the project is known.

Successful exploitation requires user access to the forge and a valid SSH key.

The security issue is reported in versions prior to 0.8.10.

Solution :
Update to version 0.8.10 or apply the patch.

Original Advisory
http://www.ceondo.com/ecte/2010/02/indefero-security-vulnerability

http://secunia.com/advisories/38664/

PortWise SSL VPN "reloadFrame" Cross-Site Scripting Vulnerability

Release Date : 2010-02-22

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Operating System : PortWise SSL VPN 4.x

Description :
George Christopoulos and Jan Fry have reported a vulnerability in PortWise SSL VPN, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "reloadFrame" parameter in wa/auth is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Solution:
Update to version 4.6.2, 4.7.1, 4.8, and 4.9 or later.

Original Advisory
http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-04

http://secunia.com/advisories/38627/

Release Date : 2010-02-22

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software : Employee Timeclock Software 0.x

Description :
A vulnerability has been discovered in Employee Timeclock Software, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. add administrative users by tricking a logged-in administrative user into visiting a malicious web site.

The vulnerability is confirmed in version 0.99. Other versions may also be affected.

Solution :
Do not browse untrusted websites or follow untrusted links while being logged-in to the application.

http://secunia.com/advisories/38662/

Release Date : 2010-02-22

Criticality level : Not critical
Impact : Exposure of sensitive information
Where : Local system
Solution Status : Partial Fix

Software : Bournal 1.x

Description :
Secunia Research has discovered a security issue in Bournal, which can be exploited by malicious, local users to disclose sensitive information.

The script uses e.g. the insecure "-K" command line parameter to pass the key to the ccrypt utilities, which can be exploited to obtain the key from the list of running processes.

Note: This may not affect recent Linux versions, but is confirmed for FreeBSD 8.0. Other systems may also be affected.

Solution :
Fixed in version 1.4.1 by preventing the use of the script on FreeBSD systems. This may still affect other systems where users have access to the full command line of other user's processes, despite ccrypt disabling "echoing" on the terminal.


Original Advisory :
http://secunia.com/secunia_research/2010-7/

http://secunia.com/advisories/38723/

Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

Bugtraq ID: 38197
Class: Input Validation Error
CVE: CVE-2009-3960
Remote: Yes
Local: No
Published: Feb 11 2010 12:00AM
Updated: Feb 22 2010 05:41PM

Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities

Adobe BlazeDS is prone to an XML-injection vulnerability and an XML External Entity injection vulnerability.

Attackers can exploit these issues to obtain sensitive information and carry out other attacks.

The following applications are affected:

BlazeDS 3.2 and earlier versions
LiveCycle 9.0, 8.2.1, and 8.0.1
LiveCycle Data Services 3.0, 2.6.1, and 2.5.1
Flex Data Services 2.0.1
ColdFusion 9.0, 8.0.1, 8.0, and 7.0.2

Solution:
The vendor has released an advisory and updates
http://www.securityfocus.com/bid/38197/solution

http://www.securityfocus.com/bid/38197/discuss

Bugtraq ID: 37524
Class: Input Validation Error
CVE: CVE-2010-0013
Remote: Yes
Local: No
Published: Dec 29 2009 12:00AM
Updated: Feb 22 2010 08:41PM

Libpurple is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Versions prior to Libpurple 2.6.5 are vulnerable.

Solution:
Updates are available.
http://www.securityfocus.com/bid/37524/solution

http://www.securityfocus.com/bid/37524/discuss

Xerox WorkCentre Multiple Authentication Bypass Vulnerabilities

Bugtraq ID: 37921
Class: Access Validation Error
Remote: Yes
Local: No
Published: Jan 22 2010 12:00AM
Updated: Feb 22 2010 04:21PM

Multiple Xerox WorkCentre devices are prone to multiple authentication-bypass vulnerabilities.

Attackers can exploit these issues to obtain sensitive information that may aid in further attacks.

The following are vulnerable:

WorkCentre 5632
WorkCentre 5638
WorkCentre 5645
WorkCentre 5655
WorkCentre 5665
WorkCentre 5675
WorkCentre 5687

Solution:
Updates are available.
http://www.securityfocus.com/bid/37921/solution

http://www.securityfocus.com/bid/37921/discuss