Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 22, 2012

Blue Coat PacketShaper and PolicyCenter OpenSSL Ciphersuite Downgrade Vulnerability

Release Date : 2012-03-22

Crriticality level : Less critical
Ipact : Security Bypass
Where : From local network
Solution Status : Vendor Patch

Software: Blue Coat PolicyCenter 8.x

Description:
Blue Coat has acknowledged a vulnerability in Blue Coat PacketShaper and PolicyCenter, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is reported in all Blue Coat PacketShaper and PolicyCenter versions prior to 8.7.1.

Solution:
Update to version 8.7.1.

Original Advisory:
https://kb.bluecoat.com/index?page=content&id=SA53

http://secunia.com/advisories/48517/

Public Knowledge Project Open Journal Systems "authors[][url]" Script Insertion Vulnerability

Release Date : 2012-03-22

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Public Knowledge Project Open Journal Systems 2.x

Description:
High-Tech Bridge SA has discovered a vulnerability in Public Knowledge Project Open Journal Systems, which can be exploited by malicious users to conduct script insertion attacks.

Input passed via the "authors[][url]" POST parameter to index.php when handling the step 3 of submissions is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site if malicious data is viewed.

Successful exploitation requires "Author" role permissions.

The vulnerability is confirmed in version 2.3.7. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by:
High-Tech Bridge SA

Original Advisory:
HTB23079:
https://www.htbridge.com/advisory/HTB23079

http://secunia.com/advisories/48449/

Public Knowledge Project Open Conference Systems Multiple Vulnerabilities

Release Date : 2012-03-22

Criticality level : Moderately critical
Impact : Cross Site Scripting
Manipulation of data
Where : From remote
Solution Status : Vendor Patch

Software: Public Knowledge Project Open Conference Systems 2.x

Description:
Some vulnerabilities have been discovered in Public Knowledge Project Open Conference Systems, which can be exploited by by malicious people to conduct cross-site scripting attacks and manipulate certain data.

1) Input passed via the "editor" and "callback" parameters is not properly sanitised before being returned to the user.

2) Input passed via the "param" parameter is not properly verified before being used to rename or delete files.

The vulnerabilities are confirmed in version 2.3.4. Prior versions may also be affected.

Solution:
Update to version 2.3.5.

Provided and/or discovered by:
Originally reported by High-Tech Bridge SA in Public Knowledge Project Open Journal Systems.

Original Advisory:
Public Knowledge Project Open Conference Systems:
http://pkp.sfu.ca/ocs/RELEASE-2.3.4

http://secunia.com/advisories/48467/

WordPress Carousel Slideshow Plugin Unspecified Vulnerabilities

Release Date : 2012-03-22

Criticality level : Moderately critical
Impact : Unknown
Where : From remote
Solution Status : Vendor Patch

Software: WordPress Carousel Slideshow Plugin 3.x

Description:
Some vulnerabilities with an unknown impact have been reported in the Carousel Slideshow plugin for WordPress.

The vulnerabilities are caused due to unspecified errors. Currently there is no further information available.

The vulnerabilities are reported in versions prior to 3.7.

Solution:
Update to version 3.7.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://wordpress.org/extend/plugins/wp-carouselslideshow/changelog/

http://secunia.com/advisories/48470/

Drupal Wishlist Module "wl_reveal" Cross-Site Scripting Vulnerability

Release Date : 2012-03-22

Criticality level : Less critical
Impact : Cross Site Scripting
Where: From remote
Solution Status : Vendor Patch

Software: Drupal Wishlist Module 6.x
Drupal Wishlist Module 7.x

Description:
A vulnerability has been reported in the Wishlist module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "wl_reveal" parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in versions 6.x-2.x prior to 6.x-2.6 and 7.x-2.x prior to 7.x-2.6.

Solution:
Update to version 6.x-2.6 or 7.x-2.6

Provided and/or discovered by:
The vendor credits Justin Klein Keane

Original Advisory:
SA-CONTRIB-2012-042:
http://drupal.org/node/1492624

http://secunia.com/advisories/48486/

Release Date : 2012-03-22

Criticality level : Highly critical
Impact : Security Bypass
Cross Site Scripting
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 11.10

Description:
Ubuntu has issued an update for thunderbird. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, disclose certain sensitive information, and compromise a user's system.

Solution:
Apply updated packages.

Original Advisory:
USN-1400-3:
http://www.ubuntu.com/usn/usn-1400-3

http://secunia.com/advisories/48513/

OpenOffice.org ODF Document XML External Entity Processing Information Disclosure Vulnerability

Release Date : 2012-03-22

Criticality level : Less critical
Impact : Exposure of sensitive information
Where: From remote
Solution Status : Vendor Patch

Software: OpenOffice.org 3.x

Description:
A vulnerability has been reported in OpenOffice.org, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error when processing XML external entities in certain XML components within an ODF document. This can be exploited to disclose the contents of arbitrary files within an ODF document by specially crafted XML entities.

The vulnerability is reported in version 3.3 running on Windows and Mac OS X. Other versions may also be affected.

Solution:
Apply patch.

Provided and/or discovered by:
The vendor credits Timothy D. Morgan of Virtual Security Research, LLC.

Original Advisory:
http://www.openoffice.org/security/cves/CVE-2012-0037.html

http://secunia.com/advisories/48494/

WordPress ALO EasyMail Newsletter Plugin Multiple Unspecified Cross-Site Scripting Vulnerabilities

Release Date : 2012-03-22

Criticality level : Less critical
Impact : Cross Site Scripting
Where: From remote
Solution Status : Vendor Patch

Software: WordPress ALO EasyMail Newsletter Plugin 2.x

Description:
Mutliple vulnerabilities have been reported in the ALO EasyMail Newsletter plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in versions prior to 2.4.5.

Solution:
Update to version 2.4.5.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://wordpress.org/extend/plugins/alo-easymail/changelog/

http://secunia.com/advisories/48482/