Spyware, viruses, & security forum: VULNERABILITIES / FIXES - September 14, 2012

Release Date : 2012-09-14

Criticality level : Highly critical
Impact : Exposure of system information
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Server 5
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for libxslt. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose system information, cause a DoS (Denial of Service), and compromise an application using the library.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1265-2:
https://rhn.redhat.com/errata/RHSA-2012-1265.html

http://secunia.com/advisories/50634/

Eucalyptus Denial of Service and Security Bypass Vulnerabilities

Release Date : 2012-09-14

Criticality level : Less critical
Impact : Security Bypass
DoS
Where : From remote
Solution Status : Vendor Patch

Software: Eucalyptus 3.x

Description:
Some vulnerabilities have been reported in Eucalyptus, which can be exploited by malicious users to bypass certain security restrictions and cause a DoS (Denial of Service).

1) An error within the configuration of the bundled Apache Santuario (XML Security) library when handling XML Signature transforms can be exploited to cause a DoS.

2) An error within the Cloud Controller and Walrus SOAP web services components does not properly validated credentials when submitting messages in the internal format and can be exploited to gain admin permissions.

3) An error within the Cloud Controller and Walrus SOAP web services components authorization mechanism does not properly validated credentials when accessing certain services and can be exploited to e.g. manipulate volumes and snapshots of other users.

The vulnerabilities are reported in versions prior to 3.1.1.

Solution:
Update to version 3.1.1.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-05
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-06
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-07

http://secunia.com/advisories/50644/

Release Date : 2012-09-14

Criticality level : Less critical
Impact : Exposure of sensitive information
Where : From local network
Solution Status : Unpatched

Software: Vino 3.x

Description:
A security issue has been reported in Vino, which can be exploited by malicious people to disclose certain sensitive information.

The security issue is caused due to the contents of the clipboard being transmitted to TCP port 5900, which can lead to sensitive data being disclosed.

The security issue is reported in version 3.4.2. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
nandhp in a bug report.

Original Advisory:
https://bugzilla.gnome.org/show_bug.cgi?id=678434
https://bugzilla.redhat.com/show_bug.cgi?id=857250

http://secunia.com/advisories/50527/

Release Date : 2012-09-14

Criticality level : Moderately critical
Impact : Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Server 5
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for postgresql and postgresql84. This fixes two vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1263-1:
https://rhn.redhat.com/errata/RHSA-2012-1263.html

http://secunia.com/advisories/50635/

Release Date : 2012-09-14

Criticality level : Less critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: Tor 0.2.2.x

Description:
Two vulnerabilities have been reported in Tor, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An assertion failure within the "tor_timegm()" function when handling time information within a directory object can be exploited to cause a crash.

2) An assertion failure within the "compare_tor_addr_to_addr_policy()" function when handling certain port values can be exploited to crash directory authorities.

The vulnerabilities are reported in versions prior to 0.2.2.39.

Solution:
Update to version 0.2.2.39.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes

http://secunia.com/advisories/50578/

Release Date : 2012-09-14

Criticality level : Less critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Operating System : Debian GNU/Linux 6.0

Description:
Debian has issued an update for tor. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution:
Apply updated packages via the apt-get package manager.

Original Advisory:
DSA-2548-1:
http://www.debian.org/security/2012/dsa-2548

http://secunia.com/advisories/50583/

Release Date : 2012-09-14

Criticality level : Less critical
Impact : Privilege escalation
Where : Local system
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6

Description:
Red Hat has issued an update for dbus. This fixes a vulnerability, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to the library not properly sanitizing certain environment settings when running binaries linked to it, which can be exploited to run setuid or setgid applications.

Solution:
Updated packages are available via Red Hat Network.

Provided and/or discovered by:
Sebastian Krahmer, SUSE Security Team.

Original Advisory:
RHSA-2012:1261-1:
https://rhn.redhat.com/errata/RHSA-2012-1261.html

http://secunia.com/advisories/50544/

Novell GroupWise Internet Agent "Content-Length" Integer Overflow Vulnerability

Release Date : 2012-09-14

Criticality level : Moderately critical
Impact : System access
Where From local network
Solution Status : Partial Fix

Software: GroupWise 2012.x
Novell GroupWise Server 8.x

Description:
Francis Provencher has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious people to potentially compromise a vulnerable system.

The vulnerability is caused due to an integer overflow error in GroupWise Internet Agent (gwia.exe) when copying request data and can be exploited to cause a heap-based buffer overflow by e.g. sending a specially crafted request with the "Content-Length" header value set to "-1" to the web-based administration interface (TCP port 9850).

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in version 8.0.2 HP3 and reported in version 2012. Other versions may also be affected.

Solution:
Apply fixes if available.

Provided and/or discovered by:
Francis Provencher, Protek Research Labs via Secunia.

http://secunia.com/advisories/50622/