Spyware, viruses, & security forum: VULNERABILITIES / FIXES - September 13, 2012

Release Date : 2012-09-13

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: ISC BIND 9.6.x
ISC BIND 9.7.x
ISC BIND 9.8.x
ISC BIND 9.9.x

Description:
A vulnerability has been reported in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an assertion error when processing resource records having RDATA greater than 65535 bytes. This can be exploited to e.g. crash a recursive server via a query that requests a record from an authoritative server.

Please see the vendor's advisory for a list of affected versions.

Solution:
Apply patches or update to a fixed release (please see the vendor's advisory for details).

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
https://kb.isc.org/article/AA-00778/74

http://secunia.com/advisories/50610/

Drupal Mass Contact Module Email Permissions Security Bypass Vulnerability

Release Date : 2012-09-13

Criticality level : Less critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Software: Drupal Mass Contact Module 6.x

Description:
A vulnerability has been reported in the Mass Contact module for Drupal, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to the module not checking certain permissions before sending emails and can be exploited to e.g. change the sender email or allow HTML in emails.

The vulnerability is reported in versions prior to 6.x-1.2.

Solution:
Update to version 6.x-1.2.

Provided and/or discovered by:
The vendor credits Michael Orlitzky

Original Advisory:
SA-CONTRIB-2012-141:
http://drupal.org/node/1782832

http://secunia.com/advisories/50546/

Cisco Unified Presence / Jabber XCP Stream Header Handling Denial of Service Vulnerability

Release Date : 2012-09-13

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: Cisco Jabber Extensible Communications Platform (Jabber XCP) 5.x
Cisco Unified Presence 8.x

Description:
A vulnerability has been reported in Cisco Unified Presence and Cisco Jabber XCP, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the Extensible Messaging and Presence Protocol (XMPP) server when handling incoming stream headers. This can be exploited to cause the Connection Manager process to terminate via a specially crafted header.

The vulnerability is reported in the following products:
* Cisco Unified Presence versions prior to 8.6(3).
* Jabber XCP versions prior to 5.3.

Solution:
Update to a fixed version.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp

http://secunia.com/advisories/50562/

Drupal PDFThumb Module Command Injection Vulnerability

Release Date : 2012-09-13

Criticality level : Moderately critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: Drupal PDFThumb Module 7.x

Description:
A vulnerability has been reported in the PDFThumb module for Drupal, which can be exploited by malicious users to compromise a vulnerable system.

Certain unspecified input is not properly verified before being used. This can be exploited to inject and execute shell commands.

Successful exploitation requires the "administer PDFThumb" permission.

The vulnerability is reported in versions prior to 7.x-1.1.

Solution:
Update to version 7.x-1.1.

Provided and/or discovered by:
Reported by the vendor.

The vendor also credits Matt Kleve, Drupal Security Team.

Original Advisory:
SA-CONTRIB-2012-139:
http://drupal.org/node/1782580

http://secunia.com/advisories/50534/

Release Date : 2012-09-13

Criticality level : Less critical
Impact : Cross Site Scripting
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: Google Chrome for Android 18.x

Description:
Multiple vulnerabilities have been reported in Google Chrome for Android, which can be exploited by malicious people to disclose certain sensitive information and conduct cross-site scripting attacks.

1) An error within the "file://" URI handler can be exploited to disclose certain information and credentials.

2) An unspecified error can be exploited to conduct cross-site scripting attacks.

3) An unspecified error can be exploited to conduct cross-site scripting attacks via intent extra data.

4) Another error within the "file://" URI handler can be exploited to disclose certain information and credentials.

The vulnerabilities are reported in versions prior to 18.0.1025308.

Solution:
Update to version 18.0.1025308 via Google Play.

Provided and/or discovered by:
The vendor credits:
1, 2) Artem Chaykin
3, 4) Takeshi Terada

Original Advisory:
googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html

http://secunia.com/advisories/50613/

Release Date : 2012-09-13

Criticality level : Less critical
Impact : Security Bypass
Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: mod_pagespeed 0.x

Description:
Two vulnerabilities have been reported in Apache mod_pagespeed module, which can be exploited by malicious people to conduct cross-site scripting attacks and bypass certain security restrictions.

1) The module does not properly verify its own hostname, which can be exploited bypass certain policies and e.g. fetch resources from other host names.

2) Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in versions prior to 0.10.22.6.

Solution:
Update to version version 0.10.22.6.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6

http://secunia.com/advisories/50591/

Release Date : 2012-09-13

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Operating System : Debian GNU/Linux 6.0

Description:
Debian has issued an update for bind9. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution:
Apply updated packages via the apt-get package manager.

Original Advisory:
DSA-2547-1:
http://www.debian.org/security/2012/dsa-2547

http://secunia.com/advisories/50560/

Release Date : 2012-09-13

Criticality level : Less critical
Impact : Privilege Escalation
Where : Local system
Solution Status : Vendor Patch

Operating System : openSUSE 11.4
openSUSE 12.1

Description:
SUSE has issued an update for kvm. This fixes a vulnerability, which can be exploited by malicious, local users in a guest virtual machine to potentially gain escalated privileges.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:1153-1:
http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html

http://secunia.com/advisories/50621/

Release Date : 2012-09-13

Criticality level : Highly critical
Impact : Cross Site Scripting
Spoofing
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : SUSE Linux Enterprise Server (SLES) 11

Description:
SUSE has issued an update for MozillaFirefox. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting and phishing attacks, and compromise a user's system.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
SUSE-SU-2012:1157-1:
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html

http://secunia.com/advisories/50616/

Release Date : 2012-09-13

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Server 5
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for quagga. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1258-1:
https://rhn.redhat.com/errata/RHSA-2012-1258.html

http://secunia.com/advisories/50609/