Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 27, 2012

Release Date : 2012-03-27

Criticality level : Highly critical
Impact : Cross Site Scripting
Security Bypass
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 11.4
openSUSE 12.1

Description:
SUSE has issued an update for MozillaFirefox and MozillaThunderbird. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, disclose certain sensitive information, and compromise a user's system.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:0417-1:
https://hermes.opensuse.org/messages/14081825

http://secunia.com/advisories/48553/

Release Date : 2012-03-27

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 11.4
openSUSE 12.1

Description:
SUSE has issued an update for gnash. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:0415-1:
https://hermes.opensuse.org/messages/14081796

http://secunia.com/advisories/48540/

vBulletin vBShop Module Multiple Script Insertion Vulnerabilities

Release Date : 2012-03-27

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: vBShop 2.x (module for vBulletin)

Description:
Multiple vulnerabilities have been reported in the vBShop module for vBulletin, which can be exploited by malicious users to conduct script insertion attacks.

1) Input passed via the message when sending a gift is not properly sanitised in dbtech/vbshop_pro/actions/inventory.php before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

2) Input passed via the donate message when donating is not properly sanitised in dbtech/vbshop_pro/actions/donate.php before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

3) Certain input is not properly sanitised in dbtech/vbshop_pro/actions/shopmanagement.php and dbtech/vbshop_pro/actions/itemmanagement.php before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

The vulnerabilities are reported in versions prior to 2.2.3.

Solution:
Update to version 2.2.3.

Provided and/or discovered by:
1) ToiL via bugabuse.net.
2-3) Reported by the vendor.

Original Advisory:
Bugabuse.net:
https://www.bugabuse.net/120-website-hacking/32496-vbshop-0day-bugabuse-net.html

DragonByte:
http://www.dragonbyte-tech.com/f4/vbshop-v2-2-3-security-release-6868/

http://secunia.com/advisories/48560/

Release Date : 2012-03-27

Criticality level : Highly critical
Impact : System access
DoS
Where : From remote
Solution Status : Unpatched

Software: Zip/Ruby gem for Ruby 0.x

Description:
Two vulnerabilities have been reported in the Zip/Ruby gem for Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.

The vulnerabilities exist in the bundled version of libzip.

The vulnerabilities are reported in version 0.3.6 and prior.

Solution:
Do not process untrusted ZIP archives.

Provided and/or discovered by:
Thomas Klausner and Timo Warns, PRESENSE Technologies GmbH

Original Advisory:
PRE-CERT:
http://www.pre-cert.de/advisories/PRE-SA-2012-02.txt

http://secunia.com/advisories/48534/

Event Calendar PHP "cal_year" Cross-Site Scripting Vulnerability

Release Date : 2012-03-27

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Event Calendar PHP

Description:
A vulnerability has been reported in Event Calendar PHP, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "cal_year" parameter to certain scripts is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in versions downloaded prior to 2012-03-27.

Solution:
Update to a version downloaded after 2012-03-27.

Provided and/or discovered by:
3spi0n

Original Advisory
http://packetstormsecurity.org/files/111161/Event-Calendar-PHP-Cross-Site-Scripting.html

http://secunia.com/advisories/48539/

Release Date : 2012-03-27

Criticality level : Not critical
Impact : DoS
Where : Local system
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 10.04

Description:
Ubuntu has issued an update for linux-ec2. This fixes a vulnerability, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

Solution:
Apply updated packages.

Original Advisory:
USN-1410-1:
http://www.ubuntu.com/usn/usn-1410-1

http://secunia.com/advisories/48545/

Release Date : 2012-03-27

Criticality level : Not critical
Impact : Privilege escalation
DoS
Where : Local system
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 11.10

Description:
Ubuntu has issued an update for the kernel. This fixes multiple vulnerabilities, which can be exploited by malicious, local users and malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and gain escalated privileges and by malicious people to cause a DoS (Denial of Service).

1) The vulnerability is caused due to an error within the "mem_cgroup_usage_unregister_event()" function when several events are attached to an eventfd and can be exploited to cause a kernel oops.

Solution:
Apply updated packages.

Original Advisory:
USN-1405-1:
http://www.ubuntu.com/usn/usn-1405-1

http://secunia.com/advisories/48544/

Release Date : 2012-03-27

Criticality level : Less critical
Impact : DoS
Where : From local network
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 10.04

Description:
Ubuntu has issued an update for linux-lts-backport-oneiric. This fixes two vulnerabilities, which can be exploited by malicious, local users and malicious people to cause a DoS (Denial of Service).

Solution:
Apply updated packages.

Original Advisory:
USN-1409-1:
http://www.ubuntu.com/usn/usn-1409-1

http://secunia.com/advisories/48536/