Spyware, viruses, & security forum: VULNERABILITIES / FIXES - August 09, 2012

Release Date : 2012-08-09

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: AXIGEN Mail Server 8.x

Description:
A vulnerability has been discovered in AXIGEN Mail Server, which can be exploited by malicious people to conduct script insertion attacks.

Input passed within e-mail messages is not properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when a malicious e-mail message is opened in the web mail interface.

Successful exploitation requires that the recipient uses Internet Explorer.

The vulnerability is confirmed in version 8.0.3. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
loneferret, Offensive Security

Original Advisory:
http://www.exploit-db.com/exploits/20348/

http://secunia.com/advisories/50062/

Release Date : 2012-08-09

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Drupal Shorten URLs Module 6.x
Drupal Shorten URLs Module 7.x

Description:
A vulnerability has been reported in the Shorten URLs module for Drupal, which can be exploited by malicious users to conduct script insertion attacks.

Certain input when creating shortened URLs is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

Successful exploitation requires the "use Shorten URLs page" permission, the "Record Shortened URLs" submodule to be installed, and the "Views" module not to be installed.

The vulnerability is reported in 6.x-1.x versions prior to 6.x-1.13 and 7.x-1.x versions prior to 7.x-1.2.

Solution:
Update to version 6.x-1.13 or 7.x-1.2.

Provided and/or discovered by:
The vendor credits Zach Alexander and Justin Klein Keane.

Original Advisory:
SA-CONTRIB-2012-121:
http://drupal.org/node/1719392

http://secunia.com/advisories/50182/

Release Date : 2012-08-09

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: JBoss Enterprise SOA Platform 5.x

Description:
Red Hat has issued an update for JBoss Enterprise SOA Platform. This fixes a vulnerability, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. perform certain operations on MBeans and potentially execute arbitrary code when a logged-in JMX Console user visits a specially crafted web page.

Solution:
Updated packages are available via Red Hat Network.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
RHSA-2012:1152-1:
https://rhn.redhat.com/errata/RHSA-2012-1152.html

http://secunia.com/advisories/50230/

Joomla! En Masse Component Remote File Inclusion Vulnerability

Release Date : 2012-08-09

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: En Masse 3.x (component for Joomla!)

Description:
A vulnerability has been reported in the En Masse component for Joomla!, which can be exploited by malicious people to compromise a vulnerable system.

Certain unspecified input is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources.

The vulnerability is reported in versions prior to 3.1.3.

Solution:
Update to version 3.1.3.

Provided and/or discovered by:
The vendor credits Joomla! Extension Dictionary (JED)

Original Advisory:
http://www.matamko.com/news-update/14-en-masse-releases/142-announcement-for-security-release-enmasse-313.html

http://secunia.com/advisories/50220/

Release Date : 2012-08-09

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress Postie Plugin 1.x

Description:
loneferret has reported a vulnerability in the Postie plugin for WordPress, which can be exploited by malicious people to conduct script insertion attacks.

Input passed via an email is not properly sanitised before being used when checking for mail. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site if malicious data is viewed.

The vulnerability is reported in version 1.4.3. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
loneferret, Offensive Security.

Original Advisory:
Offensive Security:
http://www.exploit-db.com/exploits/20360/

http://secunia.com/advisories/50207/

Release Date : 2012-08-09

Criticality level : Less critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Operating System: EMC Lifeline 2.x
EMC Lifeline 3.x

Description:
A security issue has been reported in EMC Lifeline, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to the appliance not properly validating access rights and can be exploited to gain access to otherwise restricted shares.

Successful exploitation requires that remote access including port-forwarding is enabled.

Please see the vendor's advisory for a list of affected versions.

Solution:
Update to a fixed version (please see the vendor's advisory for details).

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
ESA-2012-031
http://archives.neohapsis.com/archives/bugtraq/2012-08/att-0056/ESA-2012-031.txt

http://secunia.com/advisories/50232/

Release Date : 2012-08-09

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: SurgeMail 6.x

Description:
A vulnerability has been discovered in SurgeMail, which can be exploited by malicious people to conduct script insertion attacks.

Input passed within HTML e-mail messages is not properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when a malicious e-mail message is opened in the web mail interface.

The vulnerability is confirmed in version 6.1c-1. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
loneferret, Offensive Security

Original Advisory:
http://www.exploit-db.com/exploits/20363/

http://secunia.com/advisories/50210/

Release Date : 2012-08-09

Criticality level : Moderately critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: SmarterMail 10.x

Description:
A vulnerability has been discovered in SmarterMail, which can be exploited by malicious people to conduct script insertion attacks.

Input passed within HTML e-mail messages is not properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when a malicious e-mail message is opened in the web mail interface.

Successful exploitation requires that the victim user is running a browser which executes certain JavaScript statements from CSS (e.g. Internet Explorer).

The vulnerability is confirmed in version 10.1. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
loneferret, Offensive Security

Original Advisory:
http://www.exploit-db.com/exploits/20362/

http://secunia.com/advisories/50209/

Release Date : 2012-08-09

Criticality level : Moderately critical
Impact : Cross Site Scripting
Manipulation of data
System access
Where : From remote
Solution Status : Vendor Patch

Software: powermail (extension for TYPO3) 1.x

Description:
Some vulnerabilities have been reported in the powermail extension for TYPO3, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct cross-site scripting and SQL injection attacks.

1) Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Certain unspecified input is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

3) Certain unspecified input related to a TYPO3 backend editor is not properly verified before being used. This can be exploited to execute arbitrary PHP code.

Successful exploitation of this vulnerability requires access permissions to a TYPO3 backend editor.

The vulnerabilities are reported in version 1.6.8 and prior.

Solution:
Update to version 1.6.9.

Provided and/or discovered by:
Reported by the vendor and the vendor additionally credits Helmut Hummel, TYPO3 Security Team.

Original Advisory:
TYPO3-EXT-SA-2012-011:
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-011/

http://secunia.com/advisories/50227/