Spyware, viruses, & security forum: VULNERABILITIES / FIXES - June 26, 2012

Release Date : 2012-06-26

Criticality level : Moderately critical
Impact : Manipulation of data
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Gentoo Linux

Description:
Gentoo has issued an update for postfix. This fixes two vulnerabilities, which can be exploited by malicious people to manipulate certain data, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

Solution:
Update to "mail-mta/postfix-2.7.4" or later.

Original Advisory:
GLSA 201206-33:
http://www.gentoo.org/security/en/glsa/glsa-201206-33.xml

http://secunia.com/advisories/49706/

Release Date : 2012-06-26

Criticality level : Moderately critical
Impact : DoS
System access
Where : From local network
Solution Status : Vendor Patch

Operating System: Gentoo Linux

Description:
Gentoo has issued an update for nbd. This fixes two vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

Solution:
Update to "sys-block/nbd-2.9.22" or later.

Original Advisory:
GLSA 201206-35:
http://www.gentoo.org/security/en/glsa/glsa-201206-35.xml

http://secunia.com/advisories/49700/

Zend Framework "Zend_XmlRpc" XML Entity References Information Disclosure Vulnerability

Release Date : 2012-06-26

Criticality level : Less critical
Impact : Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: Zend Framework 1.x

Description:
SEC Consult has reported a vulnerability in Zend Framework, which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to an error within the "Zend_XmlRpc" class when processing XML data, which can be exploited to e.g. disclose contents of certain local files by sending specially crafted XML data including external entity references.

The vulnerability is reported in versions prior to 1.11.12 and 1.12.0.

Solution:
Update to version 1.11.12 or 1.12.0.

Provided and/or discovered by:
K. Gudinavicius, SEC Consult.

Original Advisory:
Zend:
http://framework.zend.com/security/advisory/ZF2012-01

SEC Consult:
https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt

http://secunia.com/advisories/49665/

Release Date : 2012-06-26

Criticality level : Highly critical
Impact : DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Slackware Linux 11.0

Description:
Slackware has issued an update for freetype. This fixes multiple vulnerabilities, which can be exploited by malicious people to potentially compromise an application using the library.

Solution:
Apply updated packages

Original Advisory:
SSA:2012-176-01:
http://slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.499108

http://secunia.com/advisories/49721/

Release Date: 2012-06-26

Criticality level : Not critical
Impact : Brute Force
Where : From remote
Solution Status : Vendor Patch

Operating System: Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Server 5
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for postgresql and postgresql84. This fixes a weakness, which can be exploited by malicious people to conduct brute force attacks.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1037-01:
https://rhn.redhat.com/errata/RHSA-2012-1037.html

http://secunia.com/advisories/49717/

Release Date : 2012-06-26

Criticality level : Not critical
Impact : Privilege escalation
DoS
Exposure of sensitive information
Where : Local system
Solution Status : Vendor Patch

Operating System: Gentoo Linux

Description:
Gentoo has issued an update for mount-cifs. This fixes a weakness and a security issue, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, and potentially gain escalated privileges.

Solution:
Update to "net-fs/mount-cifs-3.4.6" or later.

Original Advisory:
GLSA 201206-29:
http://www.gentoo.org/security/en/glsa/glsa-201206-29.xml

http://secunia.com/advisories/49713/

Release Date : 2012-06-26

Criticality level : Not critical
Impact : Privilege escalation
DoS
Exposure of sensitive information
Where : Local system
Solution Status : Vendor Patch

Operating System: Gentoo Linux

Description:
Gentoo has issued an update for logrotate. This fixes some security issues, which can be exploited by malicious, local users to disclose potentially sensitive information, cause a DoS (Denial of Service), and potentially gain escalated privileges.

Solution:
Update to "app-admin/logrotate-3.8.0" or later.

Original Advisory:
GLSA 201206-36:
http://www.gentoo.org/security/en/glsa/glsa-201206-36.xml

http://secunia.com/advisories/49697/

FCKeditor "print_textinputs_var()" Cross-Site Scripting Vulnerabilities

Release Date : 2012-06-26

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: FCKeditor 2.x

Description:
Emilio Pinna has discovered two vulnerabilities in FCKeditor, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the keys and values of POST parameters to editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php is not properly sanitised in the "print_textinputs_var()" function before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 2.6.7. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Emilio Pinna.

Original Advisory:
http://disse.cting.org/blog/2012/06/22/fckeditor-reflected-xss-vulnerability/

http://secunia.com/advisories/49606/

Squiz Matrix Cross-Site Scripting and Information Disclosure Vulnerabilities

Release Date : 2012-06-26

Criticality level : Moderately critical
Impact : Cross Site Scripting
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: Squiz Matrix 4.x

Description:
Sense of Security has reported multiple vulnerabilities in Squiz Matrix, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose potentially sensitive information.

1) An error when processing certain XML data passed to _admin/ (when "SQ_ACTION" is set to "asset_map_request") can be exploited to e.g. disclose local files by sending specially crafted XML data including external entity references.

2) Input passed via the "am_section", "assetid", "sq_asset_path", "sq_backend_log_type", "sq_link_path", "asset_ei_screen", "current_assetid", and "tool_reindex_reindexing_root_assetid" parameters to _admin/ is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in version 4.6.3. Other versions may also be affected.

Solution:
Reportedly fixed in versions 4.6.5 and 4.8.1.

Provided and/or discovered by:
Nadeem Salim, Sense of Security.

Original Advisory:
http://www.senseofsecurity.com.au/advisories/SOS-12-007

http://secunia.com/advisories/49617/

Release Date : 2012-06-26

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: IMP Webmail Client 5.x

Description:
A vulnerability has been reported in IMP Webmail Client, which can be exploited by malicious people to conduct script insertion attacks.

Input passed via SVG attachments is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

The vulnerability is reported in versions prior to 5.0.22.

Solution:
pdate to version 5.0.22.

Provided and/or discovered by:
he vendor credits Mike Cardwell.

Original Advisory:
http://lists.horde.org/archives/announce/2012/000775.html
https://github.com/horde/horde/blob/4764bca74481622b39dd1d9b81d62882128255b3/imp/docs/CHANGES
https://github.com/horde/horde/commit/005bf859ca78a495a0756b7c681e7bbd26c65895

http://secunia.com/advisories/49643/

Release Date : 2012-06-26

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Apache Roller 3.x
Apache Roller 4.x

Description:
A vulnerability has been reported in Apache Roller, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The vulnerability is reported in versions 3.1, 4.0, and 4.0.1. Other versions may also be affected.

Solution:
Upgrade to version 5.0.1.

http://secunia.com/advisories/49049/