Ad: Manage updates with the Download App

CNET Forums

Software forums

Popular Forums

Spyware, viruses, & security forum: VULNERABILITIES / FIXES - June 23, 2010

by: Carol~ June 23, 2010 5:41 AM PDT

Share

0 people like this thread

Staff pick

VULNERABILITIES / FIXES - June 23, 2010

by Carol~ - 6/23/10 5:41 AM

Fedora update for gnutls

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Manipulation of data
Where : From remote
Solution Status : Vendor Patch

Operating System: Fedora 13

Description:
Fedora has issued an update for gnutls. This fixes a vulnerability, which can be exploited by malicious people to manipulate certain data.

Solution:
Apply updated packages via the yum utility ("yum update gnutls").

Original Advisory:
FEDORA-2010-9518:
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043275.html

http://secunia.com/advisories/40331/

Report offensive post

Email to friend

Total posts: 17 (Showing page 1 of 1)

Thread display preference:
Collapsed
Expanded

Back to Spyware, viruses, & security

Tracked Track this thread

Mozilla Firefox Multiple Vulnerabilities

by Carol~ - 6/23/10 5:47 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Duplicate from yesterday, with additional information included:

Release Date : 2010-06-23

Criticality level : Highly critical
Impact : System access
Security Bypass
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: Mozilla Firefox 3.5.x
Mozilla Firefox 3.6.x

Description:
Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to disclose sensitive information, bypass certain security restrictions, or to compromise a user's system.

1) Multiple errors in the browser engine can be exploited to corrupt memory and potentially execute arbitrary code.

2) An error in the handling of multipart/x-mixed-replace resources can be exploited to corrupt memory and potentially execute arbitrary code.

This vulnerability only affects version 3.5.x.

3) Multiple errors in the Javascript engine can be exploited to corrupt memory and potentially execute arbitrary code.

4) Multiple errors in the Javascript engine can be exploited to corrupt memory and potentially execute arbitrary code.

These errors only affect version 3.6.x.

5) A use-after-free error exists in "nsCycleCollector::MarkRoots()", which can result in the use of an invalid pointer and allows execution of arbitrary code.

6) A use-after-free error in the handling of object references among multiple plugin instances can be exploited to trigger the use of an invalid pointer and execute arbitrary code.

7) An integer overflow error exists in "nsGenericDOMDataNode::SetTextInternal" within the handling of text values for certain types of DOM nodes. This can be exploited to cause a heap-based buffer overflow via overly large strings.

8) An integer overflow error in a XSLT node sorting routine can be exploited to cause a buffer overflow and potentially execute arbitrary code via a node containing an overly large text value.

9) A weakness is caused due to "focus()" allowing to direct user input to unintended locations, e.g. an embedded iframe from another domain.

10) The HTTP "Content-Disposition: attachment" header is ignored when "Content-Type: multipart" is also present. This can result in security features being bypassed in sites that allow users to upload arbitrary files and specify a "Content-Type" but rely on "Content-Disposition: attachment" to prevent the content from being displayed inline.

11) A weakness exists due to the pseudo-random number generator being seeded only once per browsing session, which can be exploited to disclose the value used to seed "Math.random()" and potentially identify and track users across different web sites.

Solution:
Update to version 3.5.10 or 3.6.4.

Original Advisory:
Mozilla Foundation:
http://www.mozilla.org/security/announce/2010/mfsa2010-26.html
http://www.mozilla.org/security/announce/2010/mfsa2010-27.html
http://www.mozilla.org/security/announce/2010/mfsa2010-28.html
http://www.mozilla.org/security/announce/2010/mfsa2010-29.html
http://www.mozilla.org/security/announce/2010/mfsa2010-30.html
http://www.mozilla.org/security/announce/2010/mfsa2010-31.html
http://www.mozilla.org/security/announce/2010/mfsa2010-32.html
http://www.mozilla.org/security/announce/2010/mfsa2010-33.html

http://secunia.com/advisories/40309/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Mozilla Thunderbird Multiple Vulnerabilities

by Carol~ - 6/23/10 5:48 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: Mozilla Thunderbird 3.x

Description:
Some vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious people to compromise a user's system.

Solution:
Update to version 3.0.5.

Original Advisory:
Mozilla Foundation:
http://www.mozilla.org/security/announce/2010/mfsa2010-25.html
http://www.mozilla.org/security/announce/2010/mfsa2010-26.html
http://www.mozilla.org/security/announce/2010/mfsa2010-29.html
http://www.mozilla.org/security/announce/2010/mfsa2010-30.html

http://secunia.com/advisories/40323/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Mozilla SeaMonkey Multiple Vulnerabilities

by Carol~ - 6/23/10 5:49 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Highly critical
Impact : System access
Security Bypass
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: Mozilla SeaMonkey 2.x

Description:
Some vulnerabilities have been reported in Mozilla SeaMonkey, which can be exploited by malicious people to disclose sensitive information, bypass certain security restrictions, or to compromise a user's system.

Solution:
Update to version 2.0.5.

Original Advisory:
Mozilla Foundation:
http://www.mozilla.org/security/announce/2010/mfsa2010-25.html
http://www.mozilla.org/security/announce/2010/mfsa2010-26.html
http://www.mozilla.org/security/announce/2010/mfsa2010-27.html
http://www.mozilla.org/security/announce/2010/mfsa2010-28.html
http://www.mozilla.org/security/announce/2010/mfsa2010-29.html
http://www.mozilla.org/security/announce/2010/mfsa2010-30.html
http://www.mozilla.org/security/announce/2010/mfsa2010-31.html
http://www.mozilla.org/security/announce/2010/mfsa2010-32.html
http://www.mozilla.org/security/announce/2010/mfsa2010-33.html

http://secunia.com/advisories/40326/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Red Hat update for firefox

by Carol~ - 6/23/10 5:50 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Highly critical
Impact : System access
Security Bypass
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Operating System: Red Hat Desktop 4.x
Red Hat Enterprise Linux 5 (Server)
Red Hat Enterprise Linux AS 4
Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux ES 4
Red Hat Enterprise Linux WS 4
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for firefox. This fixes some vulnerabilities, which can be exploited by malicious people to disclose sensitive information, bypass certain security restrictions, or to compromise a user's system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
https://rhn.redhat.com/errata/RHSA-2010-0500.html
https://rhn.redhat.com/errata/RHSA-2010-0501.html

http://secunia.com/advisories/40312/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Red Hat update for seamonkey

by Carol~ - 6/23/10 5:51 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Highly critical
Impact : System access
Security Bypass
Where : From remote
Solution Status : Vendor Patch

Operating System: Red Hat Desktop 4.x
Red Hat Enterprise Linux AS 3
Red Hat Enterprise Linux AS 4
Red Hat Enterprise Linux ES 3
Red Hat Enterprise Linux ES 4
Red Hat Enterprise Linux WS 3
Red Hat Enterprise Linux WS 4

Description:
Red Hat has issued an update for seamonkey. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions or compromise a user's system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
http://rhn.redhat.com/errata/RHSA-2010-0499.html

http://secunia.com/advisories/40320/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

F-Secure Policy Manager "Expect" Header Cross-Site Scripting

by Carol~ - 6/23/10 5:53 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: F-Secure Policy Manager 8.x

Description:
A vulnerability has been reported in F-Secure Policy Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "Expect:" header is not properly sanitised before being returned to users. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site.

Successful exploitation requires that the attacker can send arbitrary HTTP headers (e.g. via a browser plugin like Flash).

Solution:
Apply hotfixes.

Original Advisory:
FSC-2010-2:
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html

http://secunia.com/advisories/40256/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Joomla DOCman Component File Disclosure Vulnerability

by Carol~ - 6/23/10 5:54 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Manipulation of data
Where : From remote
Solution Status : Vendor Patch

Software: DOCman 1.x (component for Joomla)

Description:
A vulnerability has been reported in the DOCman component for Joomla, which can be exploited by malicious users to disclose potentially sensitive information.

The vulnerability is caused due to improper handling of the document's metadata. This can be exploited to disclose the contents of arbitrary files by changing certain metadata fields of a document.

Successful exploitation requires the "upload" and "edit" permissions.

The vulnerability is reported in version 1.3.x, 1.4.0, and 1.5.x up to 1.5.7.

Solution:
Update to version 1.4.1 and 1.5.8.

Original Advisory:
http://blog.joomlatools.eu/2010/06/docman-security-announcement.html

http://secunia.com/advisories/40291/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Site2Nite Boat Classifieds "ID" SQL Injection

by Carol~ - 6/23/10 5:56 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Site2Nite Boat Classifieds "ID" SQL Injection Vulnerabilities

Release Date : 2010-06-23

Criticality level : Moderately critical
Impact : Manipulation of data
Where : From remote
Solution Status : Unpatched

Software: Site2Nite Boat Classifieds

Description:
Two vulnerabilities have been reported in Site2Nite Boat Classifieds, which can be exploited by malicious people to conduct SQL injection attacks.

1) Input passed via the "ID" parameter to printdetail.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) Input passed via the "ID" parameter to detail.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Solution:
Edit the source code to ensure that input is properly sanitised.

http://secunia.com/advisories/40263/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Fedora update for squirrelmail

by Carol~ - 6/23/10 5:57 AM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Not critical
Impact : Exposure of system information
Where : From remote
Solution Status : Vendor Patch

Operating System: Fedora 11
Fedora 12
Fedora 13

Description:
Fedora has issued an update for squirrelmail. This fixes a weakness, which can be exploited by malicious users to disclose certain system information.

Solution:
Apply updated packages via the yum utility ("yum update squirrelmail").

Original Advisory:
FEDORA-2010-10264:
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html

FEDORA-2010-10244:
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html

FEDORA-2010-10259:
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html

http://secunia.com/advisories/40332/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

HP-UX update for Tomcat Servlet Engine

by Carol~ - 6/23/10 2:02 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Manipulation of data
Where : From remote
Solution Status : Vendor Patch

Operating System: HP-UX 11.x

Description:
HP has issued an update for Tomcat Servlet Engine in HP-UX. This fixes multiple weaknesses, which can be exploited by malicious people to manipulate certain data.

The weaknesses are reported in version B.11.11, B.11.23 and B.11.31 running Tomcat-based Servlet Engine 5.5.27.03 or earlier.

Solution:
Install Tomcat-based Servlet Engine version 5.5.29.01 or subsequent from the Apache Web Server Suite.

Original Advisory:
HPSBUX02541 SSRT100145:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113

http://secunia.com/advisories/40330/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Weborf Header Processing Denial of Service Vulnerability

by Carol~ - 6/23/10 2:02 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: Weborf 0.x

Description:
A vulnerability has been reported in Weborf, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling certain HTTP headers. This can be exploited to terminate an affected server via e.g. specially crafted HTTP headers containing wide characters.

The vulnerability is reported in version 0.12.1. Prior versions may also be affected.

Solution:
Update to version 0.12.2.

Original Advisory:
http://freshmeat.net/projects/weborf/releases/318531
http://code.google.com/p/weborf/source/browse/branches/0.12.2/CHANGELOG?spec=svn437&r=437

http://secunia.com/advisories/40322/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Jamroom "post_id" Cross-Site Scripting Vulnerability

by Carol~ - 6/23/10 2:02 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Jamroom 4.x

Description:
A vulnerability has been reported in Jamroom, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "post_id" parameter in forum.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in an administrative user's browser session in context of an affected site.

The vulnerability is reported in versions prior to 4.1.9.

Solution:
Update to version 4.1.9.

Original Advisory:
Jamroom:
http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1756

HTB22427:
http://www.htbridge.ch/advisory/xss_vulnerability_in_jamroom.html

http://secunia.com/advisories/40259/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

phpBazarPicLib "cat" Information Disclosure Vulnerability

by Carol~ - 6/23/10 2:02 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Exposure of system information
Exposure of sensitive information
Where : From remote
Solution Status : Unpatched

Software: phpBazarPicLib 2.x (plugin for phpBazar)

Description:
A vulnerability has been discovered in the phpBazarPicLib plugin for phpBazar, which can be exploited by malicious people to disclose potentially sensitive information.

Input passed to the "cat" parameter in picturelib.php is not properly verified before being used to display image galleries within picturelib_pics.show.php and picturelib_cats_show.php. This can be exploited to disclose the contents of arbitrary directories via directory traversal attacks.

The vulnerability is confirmed in version 2.1.0. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly verified.

http://secunia.com/advisories/40273/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Trend Micro InterScan Web Security Virtual Appliance Multipl

by Carol~ - 6/23/10 5:18 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Trend Micro InterScan Web Security Virtual Appliance Multiple Vulnerabilities

Release Date : 2010-06-23

Criticality level : Less critical
Impact : Cross Site Scripting
Exposure of system information
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Software: Trend Micro InterScan Web Security Virtual Appliance 5.x

Description:
Some vulnerabilities have been reported in Trend Micro InterScan Web Security Virtual Appliance, which can be exploited by malicious users to disclose potentially sensitive information or compromise a vulnerable system, and by malicious people to conduct cross-site request forgery attacks.

1) The web-based user interface allows user to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. add a web site to the URL blocking list or add new users when a logged-in administrative user visits a specially crafted web site.

2) Input passed via the "exportname" parameter to /servlet/com.trend.iwss.gui.servlet.exportreport is not properly sanitised before being used. This can be exploited to download arbitrary files from the system via directory traversal attacks.

3) Input passed via the "pkg_name" parameter to /servlet/com.trend.iwss.gui.servlet.ConfigBackup is not properly sanitised before being used to download files, which can be exploited to download arbitrary files from the system.

Successful exploitation of vulnerabilities #2 and #3 requires authentication and administrative or reporter privileges.

4) Input passed via the "filename" parameter to /servlet/com.trend.iwss.gui.servlet.XMLRPCcert is not properly sanitised before being used. This can be exploited to upload arbitrary files to arbitrary locations via directory traversal attacks.

Successful exploitation of this vulnerability requires authentication.

Solution:
Apply Critical Patch Build 1386.

Original Advisory
Trend Micro:
http://www.trendmicro.com/ftp/documentation/readme/iwsva_50_ar64_en_cp1386_readme.txt

Eric Beaulieu:
http://zebux.free.fr/pub/Advisory/Advisory_IWSVA_CSRF_Vulnerability_201006.txt

http://secunia.com/advisories/40328/

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Apple iPhone/iPod touch Prior to iOS 4 Safari Security

by Carol~ - 6/23/10 5:18 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Apple iPhone/iPod touch Prior to iOS 4 Safari Security Bypass Vulnerability

Bugtraq ID: 41065
Class: Design Error
CVE: CVE-2010-1755
Remote: Yes
Local: No
Published: Jun 21 2010 12:00AM
Updated: Jun 23 2010 04:58PM

Apple Safari for iOS is prone to a security-bypass vulnerability that allows unauthorized access to cookies.

This issue may allow websites to bypass certain security restrictions and gain access to potentially sensitive information.

NOTE: This BID was previously covered in BID 41016 (Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities) but has been given its own record to better document it.

Versions prior to iOS 4 are vulnerable.

Solution:
The vendor has released an advisory and fixes.
http://www.securityfocus.com/bid/41065/references

http://www.securityfocus.com/bid/41065/discuss

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Moodle Multiple Vulnerabilities

by Carol~ - 6/23/10 5:22 PM

In Reply to: VULNERABILITIES / FIXES - June 23, 2010 by Carol~

Moodle Multiple Vulnerabilities

Bugtraq ID: 40944
Class: Unknown
CVE: CVE-2010-2228
CVE-2010-2229
CVE-2010-2230
CVE-2010-2231
Remote: Yes
Local: No
Published: Jun 17 2010 12:00AM
Updated: Jun 23 2010 06:58PM

Moodle is prone to multiple vulnerabilities, including:

- a cross-site scripting issue
- a security-bypass issue
- an HTML-injection issue

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

These issues affect versions prior to Moodle 1.9.9 and 1.8.13.

Solution:
Updates are available.
http://www.securityfocus.com/bid/40944/references

http://www.securityfocus.com/bid/40944/discuss

Was this reply helpful? (0) (0)

Staff pick

Report offensive post

Email to friend

Thread display preference:
Collapsed
Expanded

Back to Spyware, viruses, & security

Tracked Track this thread

Total posts: 17 (Showing page 1 of 1)

More Discussions

Forum Icon Legend

Unread
Read
Locked thread

Moderator
CNET Staff
Samsung Staff
Norton Authorized Support Team
AVG Staff
avast! Staff
Webroot Support Team
Acer Customer Experience Team
Windows Outreach Team
DISH staff

Dell Staff
Intel Staff
Question
Resolved question
General discussion
Tip
Alert or warning
Praise
Rant

You are e-mailing the following post: Post Subject

Thank you. Sent email to

Close

Thank you. Sent email to

Close

You are reporting the following post: Post Subject

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

You are posting a reply to: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

Subject title (required, 60 characters max): Message body:

You are currently tracking this discussion. Click here to manage your tracked discussions.

Track this thread and email me when there are updates. Please read before posting

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Duplicate posts are not allowed in the forums. Please edit your post and submit again.

Submit Reply Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close