Spyware, viruses, & security forum: VULNERABILITIES / FIXES - July 30, 2010

Release Date : 2010-07-30

Criticality level : Highly critical
Impact : System access
DoS
Exposure of sensitive information
Manipulation of data
Security Bypass
Unknown
Where : From remote
Solution Status : Vendor Patch

Software: Red Hat Enterprise Linux Extras v. 3
Red Hat Enterprise Linux Extras v. 4
RHEL Desktop Supplementary (v. 5 client)
RHEL Supplementary (v. 5 server)

Description:
Red Hat has issued an update for java-1.4.2-ibm. This fixes multiple vulnerabilities, where some have an unknown impact and others can be exploited by malicious people to bypass certain security restrictions, manipulate certain data, disclose potentially sensitive information, cause a DoS (Denial of Service), or compromise a vulnerable system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2010:0574-1:
https://rhn.redhat.com/errata/RHSA-2010-0574.html

http://secunia.com/advisories/40788/

Release Date : 2010-07-30

Criticality level : Moderately critical
Impact : Manipulation of data
Exposure of sensitive information
Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: EasyManage CMS

Description:
James Burton has reported two vulnerabilities in EasyManage CMS, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed via the "id" parameter to cms_show_image.php and cms_show_download.php is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

NOTE: This can further be exploited to conduct cross-site scripting attacks via SQL error messages.

Solution:
Reportedly a patch has been released. Contact the vendor for further information.

Original Advisory:
http://www.insomniasec.com/advisories/ISVA-100730.1.htm

http://secunia.com/advisories/40774/

Release Date : 2010-07-30

Criticality level : Highly critical
Impact : Manipulation of data
System access
Where : From remote
Solution Status : Vendor Patch

Software: Novell iPrint Client 5.x

Description:
Some vulnerabilities have been reported in Novell iPrint Client, which can be exploited by malicious people to manipulate certain data or compromise a user's system.

1) An unspecified error exists in the browser plugin when parsing parameter names.

2) An unspecified error exists in the browser plugin. No more information is currently available.

3) A boundary error in the ActiveX control (ienipp.ocx) when constructing a debug string based on input supplied to the "ExecuteRequest()" method can be exploited to cause a stack-based buffer overflow via an overly long string.

4) An unspecified error in the browser plugin can be exploited to delete files on a user's system.

Successful exploitation of vulnerabilities #1 through #3 may allow execution of arbitrary code.

The vulnerabilities are reported in version 5.40. Other versions may also be affected.

Solution:
Update to version 5.42.

Original Advisory:
Novell:
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5078392.html

http://secunia.com/advisories/40782/

Release Date : 2010-07-30

Criticality level : Less critical
Impact : DoS
Where : From local network
Solution Status : Vendor Patch

Software: Hitachi HiRDB 7.x
Hitachi HiRDB 8.x

Description:
A vulnerability has been reported in Hitachi HiRDB, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the processing of unexpected data, which can be exploited to disrupt the HiRDB process and the HiRDB unit.

Please see the vendor's advisory for a list of affected products and versions.

Solution:
Please see the vendor's advisory for fix information.

Original Advisory:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS10-014/index.html

http://secunia.com/advisories/40768/

SUSE update for MozillaFirefox, MozillaThunderbird, and seamonkey

Release Date : 2010-07-30

Criticality level : Highly critical
Impact : Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 11.1
openSUSE 11.2
SUSE Linux Enterprise Server (SLES) 11
SUSE Linux Enterprise Server 10

Description:
SUSE has issued an update for MozillaFirefox, MozillaThunderbird, and seamonkey. This fixes some vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, potentially conduct cross-site scripting attacks, bypass certain security restrictions, conduct spoofing attacks, and compromise a user's system.

Solution:
Apply updated packages.

Original Advisory:
SUSE-SA:2010:032:
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html

http://secunia.com/advisories/40795/

FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities

Bugtraq ID: 41663
Class: Unknown
CVE: CVE-2010-2497
CVE-2010-2498
CVE-2010-2499
CVE-2010-2500
CVE-2010-2519
CVE-2010-2520
Remote: Yes
Local: No
Published: Jul 14 2010 12:00AM
Updated: Jul 30 2010 06:25PM

FreeType is prone to multiple remote vulnerabilities, including:

Multiple buffer-overflow vulnerabilities
A remote code-execution vulnerability
Multiple integer-overflow vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim to open a specially crafted font file.

Successful exploits may allow attackers to execute arbitrary code in the context of applications that use the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

Versions prior to FreeType 2.4.0 are vulnerable.

Solution:
Updates are available.
http://www.securityfocus.com/bid/41663/solution

http://www.securityfocus.com/bid/41663/discuss

Release Date : 2010-07-30

Criticality level : Less critical
Impact : Hijacking
Where : From remote
Solution Status : Vendor Patch

Operating System: Fedora 12
Fedora 13

Description:
Fedora has issued an update for kvirc. This fixes a vulnerability, which can be exploited by malicious people to hijack IRC connections.

Solution:
Apply updated packages using the yum utility ("yum update kvirc").

Original Advisory:
FEDORA-2010-11524:
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044643.html

FEDORA-2010-11506:
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044625.html

http://secunia.com/advisories/40796/