Spyware, viruses, & security forum: VULNERABILITIES / FIXES - June 28, 2012

Cisco WebEx Player ARF Processing Buffer Overflow Vulnerability

Release Date : 2012-06-28

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: WebEx Advanced Recording Format Player

Description:
A vulnerability has been reported in WebEx Advanced Recording Format Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when processing ARF files. No further information is currently available.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the following versions:
* Client builds 28.0.0 (T28 L10N).
* Client builds 27.32.1 (T27 LD SP32 CP1) and prior.
* Client builds 27.25.10 (T27 LC SP25 EP10) and prior.
* Client builds 27.21.10 (T27 LB SP21 EP10) and prior.
* Client builds 27.11.26 (T27 L SP11 EP26) and prior.

Solution:
Update to a fixed client build (please see the vendor's advisory for details).

Provided and/or discovered by:
The vendor credits iDefense and Microsoft Vulnerability Research (MSVR).

Original Advisory:
Cisco:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex

http://secunia.com/advisories/49751/

Release Date : 2012-06-28

Criticality level : Highly critical
Impact : Exposure of sensitive information
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Red Hat Enterprise Linux Server 5
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for php. This fixes two vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, cause a DoS (Denial of Service), and compromise a vulnerable system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1045-1:
https://rhn.redhat.com/errata/RHSA-2012-1045.html

http://secunia.com/advisories/49599/

Release Date : 2012-06-28

Criticality level : Highly critical
Impact : Brute force
Exposure of sensitive information
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Red Hat Enterprise Linux Server 5
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for php53. This fixes a weakn:ss and multiple vulnerabilities in PHP, which can be exploited by malicious people to conduct brute force attacks, disclose potentially sensitive information, cause a DoS (Denial of Service), and compromise a vulnerable system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1047-01:
https://rhn.redhat.com/errata/RHSA-2012-1047.html

http://secunia.com/advisories/49731/

Drupal Hashcash Module Invalid Token Script Insertion Vulnerability

Release Date : 2012-06-28

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Drupal Hashcash Module 6.x
Drupal Hashcash Module 7.x

Description:
A vulnerability has been reported in the Hashcash module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.

Input passed via an invalid token is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

Successful exploitation requires that "Log failed hashcash" is enabled (disabled by default).

The vulnerability is reported in versions 6.x-2.x prior to 6.x-2.6 and 7.x-2.x prior to 7.x-2.2.

Solution:
Update to a patched version.

Provided and/or discovered by:
The vendor credits Heine Deelstra.

Original Advisory:
SA-CONTRIB-2012-105:
http://drupal.org/node/1663306

http://secunia.com/advisories/49683/

Release Date : 2012-06-28

Criticality level : Less critical
Impact : Dos
Where : From local network
Solution Status : Partial Fix

Operating System: HP Photosmart Plus Printer B210
HP Photosmart Printer B110
HP Photosmart Printer C410
HP Photosmart Printer C510
HP Photosmart Printer D110
HP Photosmart Printer K510

Description:
A vulnerability has been reported in multiple HP Photosmart printers, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error. No further information is currently available.

The vulnerability is reported in the following products:
* HP Photosmart Wireless e-All-in-One Printer series - B110
* HP Photosmart e-All-in-One Printer series - D110
* HP Photosmart Plus e-All-in-One Printer series - B210
* HP Photosmart eStation All-in-One Printer series - C510
* HP Photosmart Ink Advantage e-All-in-One Printer series - K510
* HP Photosmart Premium Fax e-All-in-One Printer series - C410

Solution:
Update to the latest firmware if available (please see the vendor's advisory for more information).

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
HPSBPI02794 SSRT100542:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02931414

http://secunia.com/advisories/49739/

web@all Cross-Site Request Forgery and Scripting Vulnerabilities

Release Date : 2012-06-28

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: web@all 2.x

Description:
High-Tech Bridge SA has reported two vulnerabilities in web@all, which can be exploited by malicious people to conduct cross-site request forgery and scripting attacks.

1) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. upload arbitrary files by tricking a logged in administrator into visiting a malicious web site.

2) Input passed via the "_text[title]" parameter to /search.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in version 2.0 released before May 30th, 2012. Prior versions may also be affected.

Solution:
Update to version 2.0 released May 30th, 2012 or later.

Provided and/or discovered by:
High-Tech Bridge SA.

Original Advisory:
HTB23094:
https://www.htbridge.com/advisory/HTB23094

http://secunia.com/advisories/49529/

Release Date : 2012-06-28

Criticality level : Moderately critical
Impact : Cross Site Scripting
Unknown
Where : From remote
Solution Status : Vendor Patch

Software: IBM Integrated Information Core 1.x

Description:
Multiple vulnerabilities have been reported in IBM Integrated Information Core, where some have unknown impacts and others can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerabilities are reported in version 1.5.

Solution:
Apply APAR JR43170.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
IBM (APAR JR43170):
http://www.ibm.com/support/docview.wss?uid=swg24032950

http://secunia.com/advisories/49668/

WordPress Job Manager Plugin Multiple Cross-Site Scripting Vulnerabilities

Release Date : 2012-06-28

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: WordPress Job Manager Plugin 0.x

Description:
Multiple vulnerabilities have been reported in the Job Manager plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised in wp-content/plugins/job-manager/admin-applications.php before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in version 0.7.18. Prior versions may also be affected.

Solution:
Update to version 0.7.19.

Provided and/or discovered by:
The vendor credits devbliss.

Original Advisory:
http://wordpress.org/extend/plugins/job-manager/changelog/

http://secunia.com/advisories/49756/