Spyware, viruses, & security forum: VULNERABILITIES / FIXES - May 14, 2012

Release Date : 2012-05-14

Criticality level : Moderately critical
Ipact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Sockso 1.x

Description:
Ciaran McNally has discovered a vulnerability in Sockso, which can be exploited by malicious people to conduct script insertion attacks.

Input passed via the "name" parameter to /user/register is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

The vulnerability is confirmed in version 1.5.3. Other versions may also be affected.

Solution:
Filter malicious characters and character sequences using a proxy.

Provided and/or discovered by:
Ciaran McNally.

Original Advisory:
http://smwyg.com/blog/#sockso-persistant-xss-attack

http://secunia.com/advisories/49148/

Release Date : 2012-05-14

Criticality level : Less critical
Ipact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Proman Xpress 5.x

Description:
A vulnerability has been reported in Proman Xpress, which can be exploited by malicious users to conduct script insertion attacks.

Input passed via the "cl_comments" parameter to client_details.php when creating a comment for a project is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

The vulnerability is reported in version 5.0.1. Other versions may also be affected.

Solution:
Filter malicious characters and character sequences using a proxy.

Provided and/or discovered by:
the storm via Vulnerability Research Laboratory.

Original Advisory:
http://www.vulnerability-lab.com/get_content.php?id=512

http://secunia.com/advisories/49127/

Release Date : 2012-05-14

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Kronolith 3.x (Horde module)

Description:
Multiple vulnerabilities have been reported in Kronolith, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the tasks view and search view is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in versions prior to 3.0.17.

Solution:
Update to version 3.0.17.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
Kronolith:
http://lists.horde.org/archives/announce/2012/000766.html
https://github.com/horde/horde/commit/1228a6825a8dab3333d0a8c8986fc10d1f3d11b2

http://secunia.com/advisories/49147/

NetBill Script Insertion and Cross-Site Request Forgery Vulnerabilities

Release Date : 2012-05-14

Criticality level : Less critical
Impact : Cross Site Scripting
Manipulation of data
Where : From remote
Solution Status : Unpatched

Software: NetBill 1.x

Description:
Two vulnerabilities have been reported in NetBill, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site request forgery attacks.

1) Input passed via the "comment" parameter to accounts/index2.php when posting a support request is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. add a new account by tricking a logged in administrator into visiting a malicious web site.

The vulnerabilities are reported in version 1.2. Other versions may also be affected.

Solution:
Filter malicious characters and character sequences using a proxy. Do not browse untrusted sites or follow untrusted links while being logged-in to the application.

Provided and/or discovered by:
the_storm via Vulnerability Laboratory Research

Original Advisory:
http://www.vulnerability-lab.com/get_content.php?id=560

http://secunia.com/advisories/49109/

Release Date : 2012-05-14

Criticality level : Moderately critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Software: Sympa 6.x

Description:
Multiple vulnerabilities have been reported in Sympa, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerabilities are caused due to the application allowing access to archive functions without checking credentials. This can be exploited to create, download, and delete an archive.

The vulnerabilities are reported in versions prior to 6.1.11.

Solution:
Update to version 6.1.11.

Original Advisory:
http://www.sympa.org/distribution/latest-stable/NEWS
http://www.openwall.com/lists/oss-security/2012/05/11/8

http://secunia.com/advisories/49045/

Hitachi COBOL GUI Run Time System Code Execution Vulnerability

Release Date : 2012-05-14

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: Hitachi COBOL GUI Run Time System 6.x
Hitachi COBOL GUI Run Time System 7.x
Hitachi COBOL GUI Run Time System 8.x
Hitachi COBOL GUI Server Run Time System 6.x
Hitachi COBOL GUI Server Run Time System 7.x
Hitachi COBOL GUI Server Run Time System 8.x

Description:
A vulnerability has been reported in Hitachi COBOL GUI Run Time System and Hitachi COBOL Server GUI Run Time System, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error. No further information is currently available.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 06-00, 06-01 through 06-01-/A, 07-00, 07-01 through 07-01-/A, and 08-00 through 08-00-/A.

Solution:
Update or upgrade to version 07-01-/B or 08-00-/B.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
HS12-013:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-013/index.html

http://secunia.com/advisories/49158/

IBM WebSphere Application Server for z/OS Unspecified Vulnerability

Release Date : 2012-05-14

Criticality level : Moderately critical
Impact : Unknown
Where : From remote
Solution Status : Vendor Patch

Software: IBM WebSphere Application Server 7.0.x

Description:
A vulnerability with unknown impact has been reported in IBM WebSphere Application Server for z/OS.

The vulnerability is reported in versions prior to 7.0.0.23.

Solution:
Update to version 7.0.0.23 (Fix Pack 23).

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
IBM (PM45181):
http://www.ibm.com/support/docview.wss?uid=swg1PM53810

http://secunia.com/advisories/49078/

Hitachi IT Operations Director Cross-Site Scripting and Denial of Service Vulnerabilities

Release Date : 2012-05-14

Criticality level : Less critical
Impact : Cross Site Scripting
DoS
Where : From remote
Solution Status : Vendor Patch

Software: Hitachi IT Operations Director

Description:
Two vulnerabilities have been reported in Hitachi IT Operations Director, which can be exploited by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service).

1) Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) An unspecified error can be exploited to cause a crash. No further information is currently available.

The vulnerabilities are reported in versions 02-50-01 through 02-50-07 and 03-00 through 03-00-07.

Solution:
Update or upgrade to version 03-00-08.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
HS12-014:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html

http://secunia.com/advisories/49144/