Spyware, viruses, & security forum: VULNERABILITIES / FIXES - April 13, 2012

Release Date : 2012-04-13

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From local network
Solution Status : Vendor Patch

Software: Cumin

Description:
Multiple vulnerabilities have been reported in Cumin, which can be exploited by malicious users to conduct script insertion attacks.

Certain unspecified input is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

Solution:
Fixed in the SVN repository.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
Red Hat Bug #805712:
https://bugzilla.redhat.com/show_bug.cgi?id=805712

Cumin:
https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html

http://secunia.com/advisories/48810/

nginx ngx_http_mp4_module Module Buffer Overflow Vulnerability

Release Date : 2012-04-13

Criticality level : Moderately critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: nginx 1.0.x
nginx 1.1.x

Description:
A vulnerability has been reported in nginx, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error within the ngx_http_mp4_module module when parsing certain atoms and can be exploited to cause a buffer overflow via a specially crafted MP4 file placed on the server.

Successful exploitation may allow execution of arbitrary code but requires that ngx_http_mp4_module module is enabled and the "mp4" directive is configured.

The vulnerability is reported in versions 1.1.3 through 1.1.18 and 1.0.7 through 1.0.14.

Solution:
Update to version 1.1.19 or 1.0.15.

Provided and/or discovered by:
The vendor credits Matthew Daley.

Original Advisory:
http://nginx.org/en/security_advisories.html

http://secunia.com/advisories/48827/

Dokodemo Rikunabi 2013 Unspecified Cross-Site Scripting Vulnerability

Release Date : 2012-04-13

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Dokodemo Rikunabi 2013 1.x (extension for Google Chrome)

Description:
A vulnerability has been reported in the Dokodemo Rikunabi 2013 extension for Google Chrome, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in version 1.0.0. Prior versions may also be affected.

Solution:
Update to version 1.0.1.

Provided and/or discovered by:
JVN credits Kazuhiko Kusano.

Original Advisory:
Dokodemo Rikunabi 2013:
https://chrome.google.com/webstore/detail/cfmkbngdlheahmooldblflapbpngmmbg

JVN:
http://jvn.jp/en/jp/JVN90055996/index.html

http://secunia.com/advisories/48813/

Release Date : 2012-04-13

Criticality level : Moderately critical
Impact : System access
Where : From local network
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 10.04
Ubuntu Linux 11.04
Ubuntu Linux 11.10
Ubuntu Linux 8.04

Description:
Ubuntu has issued an update for samba. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.

Solution:
Apply updated packages.

Original Advisory:
USN-1423-1:
http://www.ubuntu.com/usn/usn-1423-1

Release Date : 2012-04-13

Criticality level : Not critical
Impact : DoS
Where : Local system
Solution Status : Vendor Patch

Operating System: Ubuntu Linux 11.04

Description:
Ubuntu has issued an update for the kernel. This fixes two vulnerabilities, which can be exploited by malicious, local users and malicious, local users in a guest virtual machine to cause a DoS (Denial of Service).

Solution:
Apply updated packages.

Original Advisory:
USN-1422-1:
http://www.ubuntu.com/usn/usn-1422-1

http://secunia.com/advisories/48820/

Release Date : 2012-04-13

Criticality level : Less critical
Impact : Privilege escalation
Exposure of sensitive information
DoS
Where : From local network
Solution Status : Vendor Patch

Operating System: Debian GNU/Linux 6.0

Description:
Debian has issued an update for puppet. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to disclose potentially sensitive information and perform certain actions with escalated privileges and by malicious users to cause a DoS (Denial of Service).

Solution:
Apply updated packages via the apt-get package manager.

Original Advisory:
DSA-2451-1:
http://lists.debian.org/debian-security-announce/2012/msg00081.html

http://secunia.com/advisories/48789/

Seditio SF - Quick Ban Plugin Cross-Site Request Forgery Vulnerability

Release Date : 2012-04-13

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: SF - Quick Ban 1.x (plugin for Seditio)

Description:
A vulnerability has been discovered in the SF - Quick Ban plugin for Seditio, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. ban an IP address when a logged-in administrative user visits a specially crafted web page.

Successful exploitation requires knowledge of the user ID ("uid") of the respective user (e.g. "1" for the super administrator by default).

The vulnerability is confirmed in version 1.0. Other versions may also be affected.

Solution:
Do not browse untrusted sites or follow untrusted links while being logged-in to the application.

Provided and/or discovered by:
AkaStep

Original Advisory:
http://packetstormsecurity.org/files/111815/Seditio-SF-Quick-Ban-1.0-Cross-Site-Request-Forgery.html

http://secunia.com/advisories/48777/

Release Date : 2012-04-13

Criticality level : Highly critical
Impact : Cross Site Scripting
System access
Where : From remote
Solution Status : Vendor Patch

Software: Pale Moon 3.6.x

Description:
Multiple vulnerabilities have been reported in Pale Moon, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system.

Solution:
Update to version 3.6.31

http://secunia.com/advisories/48823/

NVIDIA Graphics Drivers for Linux GPU Device Node Access Privilege Escalation Vulnerability

Release Date : 2012-04-12

Criticality level : Less critical
Impact : Privilege escalation
Where : Local system
Solution Status : Vendor Patch

Software: NVIDIA Graphics Drivers for Linux

Description:
A vulnerability has been reported in NVIDIA Graphics Drivers for Linux, which can be exploited by malicious, local users to potentially gain escalated privileges.

The vulnerability is caused due to an error when handling read and write access to GPU (Graphics Processing Unit) device nodes, which can be exploited to reconfigure a GPU to read from or write to arbitrary system memory.

Successful exploitation requires read and write access to GPU device nodes (default configuration).

The vulnerability is reported in versions prior to 295.40.

Solution:
Update to version 295.40 or apply patch.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://nvidia.custhelp.com/app/answers/detail/a_id/3109

http://secunia.com/advisories/48650/

IP.Board and IP.Gallery Module Multiple Unspecified Vulnerabilities

Release Date : 2012-04-13

Criticality level : Moderately critical
Impact : Unknown
Where : From remote
Solution Status : Vendor Patch

Software: IP.Board (Invision Power Board) 3.x
IP.Gallery (module for IP.Board) 4.x

Description:
Multiple vulnerabilities with unknown impacts have been reported in IP.Board and the IP.Gallery module for IP.Board.

The vulnerabilities are caused due to unspecified errors. No further information is currently available.

The vulnerabilities are reported in IP.Board versions 3.2.0, 3.2.1, 3.2.2, 3.2.3, and 3.3.0 and IP.Gallery versions 4.2.0 and 4.2.1.

Solution:
Apply update.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://community.invisionpower.com/topic/360518-ipboard-331-ipblog-252-ipseo-152-and-updates-for-ipboard-32x-ipgallery-42x-released/

http://secunia.com/advisories/48808/

Release Date : 2012-04-12

Criticality level : Highly critical
Impact : DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 11.4
openSUSE 12.1
SUSE Linux Enterprise Server (SLES) 11

Description:
SUSE has issued an update for freetype2. This fixes multiple vulnerabilities, which can be exploited by malicious people to potentially compromise an application using the library.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
SUSE-SU-2012:0484-1:
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html

openSUSE-SU-2012:0489-1:
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html

http://secunia.com/advisories/48805/