Spyware, viruses, & security forum: VULNERABILITIES / FIXES - May 07, 2012

Apple Mac OS X FileVault Plain Text Password Logging Security Issue

Release Date : 2012-05-07

Criticality level : Not critical
Impact : Security Bypass
Where : Local system
Solution Status : Vendor Workaround

Operating System: Apple Macintosh OS X

Description:
A security issue has been reported in Apple Mac OS X, which can be exploited by malicious people with physical access to bypass certain security restrictions.

The security issue is caused due to the debug switch being enabled within FileVault when using "Legacy FileVault". This may lead to users' password being saved in DEBUGLOG in plain text and can be exploited to read the password via FireWire target disk mode.

Successful exploitation requires that OS X is upgraded from an older version and uses the "Legacy FileVault" feature.

The security issue is reported in version 10.7.3.

Solution:
As a workaround use FileVault 2.

Provided and/or discovered by:
tarwinator in a forum post.

Original Advisory:
https://discussions.apple.com/thread/3715366

http://secunia.com/advisories/49039/

Release Date : 2012-05-07

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Genium CMS

Description:
Vulnerability Lab has reported a vulnerability in Genium CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "itemID" parameter to galerie.php5 is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Solution:
Filter malicious characters and character sequences using a proxy.

Provided and/or discovered by:
Vulnerability Lab.

Original Advisory:
http://www.vulnerability-lab.com/get_content.php?id=517

http://secunia.com/advisories/49067/

IBM Tivoli Access Manager for e-business Java Double Literal Denial of Service Vulnerability

Release Date : 2012-05-07

Criticality level : Less critical
Impact : DoS
Where : From local network
Solution Status : Vendor Patch

Software: IBM Tivoli Access Manager for e-business 6.x

Description:
IBM has acknowledged a vulnerability in Tivoli Access Manager for e-business, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is reported in version 6.1.1.

Solution:
Apply patch 6.1.1-TIV-TAM-FP0005.

Original Advisory:
IBM:
http://www-01.ibm.com/support/docview.wss?uid=swg24032592

http://secunia.com/advisories/49108/

Release Date : 2012-05-07

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Operating System: Symantec Web Gateway 5.x

Description:
A vulnerability has been discovered in Symantec Web Gateway, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "l" parameter to spywall/timer.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 5.0.2.8. Other versions may also be affected.

Solution:
Filter malicious characters and character sequences using a proxy.

Provided and/or discovered by:
B00y@.

http://secunia.com/advisories/49064/

ConnMan "dhcpv6_get_option()" Denial of Service Vulnerability

Release Date : 2012-05-07

Criticality level : Less critical
Impact : DoS
Where : From local network
Solution Status : Vendor Patch

Software: ConnMan 0.x

Description:
A vulnerability has been reported in ConnMan, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the "dhcpv6_get_option()" function (gdhcp/client.c) when parsing certain responses. This can be exploited to trigger an infinite loop and cause a crash by sending specially crafted DHCP packets.

The vulnerability is reported in versions prior to 0.85.

Solution:
Update to version 0.85.

Provided and/or discovered by:
Reported in a SUSE bug report.

Original Advisory:
https://bugzilla.novell.com/show_bug.cgi?id=715172

http://secunia.com/advisories/49033/

Release Date : 2012-05-07

Criticality level : Not critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: Pidgin 2.x

Description:
Two weaknesses have been reported in Pidgin, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error within SOCKS5 proxy handling code (libpurple/proxy.c) can be exploited to dereference an invalid pointer and cause a crash by sending multiple specially crafted file transfer requests.

Successful exploitation of this weakness requires that the victim accepts at least one file transfer request.

2) An error within the "msn_message_parse_payload()" function (libpurple/protocols/msn/msg.c) when handling messages with certain characters or character encodings can be exploited to cause a crash.

The weaknesses are reported in versions prior to 2.10.4.

Solution:
Update to version 2.10.4.

Provided and/or discovered by:
The vendor credits:
1) Jose Valentin Gutierrez
2) Fabian Yamaguchi

Original Advisory:
http://www.pidgin.im/news/security/?id=62
http://www.pidgin.im/news/security/?id=63

http://secunia.com/advisories/49036/