Spyware, viruses, & security forum: VULNERABILITIES / FIXES - October 03, 2012

Release Date : 2012-10-03

Criticality level : Highly critical
Impact: DoS
System access
Where: From remote
Solution Status : Vendor Patch

Software: Wireshark 1.x

Description:
Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) An error in the HSRP dissector when processing certain packets can be exploited to cause an infinite loop and consume CPU resources.

2) An error in the PPP dissector when processing certain packets can be exploited to cause a crash.

3) An error in the DRDA dissector when processing certain packets can be exploited to cause an infinite loop and consume CPU resources.

4) An error in the LDP dissector when processing certain packets can be exploited to cause a buffer overflow.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 1.8.3.

Solution:
Update to version 1.8.3.

Provided and/or discovered by:
1, 2) Reported by the vendor.
3) The vendor credits Martin Wilck.
4) The vendor credits Laurent Butti.

Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2012-26.html
http://www.wireshark.org/security/wnpa-sec-2012-27.html
http://www.wireshark.org/security/wnpa-sec-2012-28.html
http://www.wireshark.org/security/wnpa-sec-2012-29.html

http://secunia.com/advisories/50843/

Release Date : 2012-10-03

Criticality level : Highly critical
Impact: System access
Where: From remote
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Server 5
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6
RHEL Desktop Workstation 5

Description:
Red Hat has issued an update for freeradius2. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1326-1:
https://rhn.redhat.com/errata/RHSA-2012-1326.html

RHSA-2012:1327-1:
https://rhn.redhat.com/errata/RHSA-2012-1327.html

http://secunia.com/advisories/50813/

Release Date : 2012-10-03

Criticality level : Moderately critical
Impact: Cross Site Scripting
Exposure of sensitive information
DoS
Where: From remote
Solution Status : Vendor Patch

Operating System : Ubuntu Linux 11.04
Ubuntu Linux 11.10

Description:
Ubuntu has issued an update for python. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to disclose potentially sensitive information and by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, and cause a DoS (Denial of Service).

Solution:
Apply updated packages.

Original Advisory:
USN-1592-1:
http://www.ubuntu.com/usn/usn-1592-1/

http://secunia.com/advisories/50850/

Release Date : 2012-10-03

Criticality level : Less critical
Impact: Privilege escalation
Where: Local system
Solution Status : Vendor Patch

Operating System : Ubuntu Linux 12.04

Description:
Ubuntu has issued an update for xdiagnose. This fixes a security issue, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The security issue is caused due to the application using a temporary file in an insecure manner, which can be exploited to e.g. overwrite arbitrary files via symlink attacks.

Solution:
Apply updated packages.

Provided and/or discovered by:
The vendor credits Alec Warner.

Original Advisory:
USN-1591-1:
http://www.ubuntu.com/usn/usn-1591-1/

https://launchpad.net/bugs/1036211

http://secunia.com/advisories/50854/

PowerTCP WebServer for ActiveX Request Processing Denial of Service Vulnerability

Release Date : 2012-10-03

Criticality level : Moderately critical
Impact: DoS
Where: From remote
Solution Status : Unpatched

Software: PowerTCP WebServer for ActiveX 1.8.x

Description:
catatonicprime has discovered a vulnerability in PowerTCP WebServer for ActiveX, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing web requests and can be exploited to exhaust usable stack space and crash the application via an overly long request.

The vulnerability is confirmed in version 1.9.2. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
catatonicprime

Original Advisory:
http://archives.neohapsis.com/archives/bugtraq/2012-10/0001.html

http://secunia.com/advisories/50839/

TurboFTP Server PORT Command Processing Buffer Overflow Vulnerability

Release Date : 2012-10-03

Criticality level : Moderately critical
Impact: System access
Where: From remote
Solution Status : Unpatched

Software: TurboFTP Server 1.x

Description:
Zhao Liang has discovered a vulnerability in TurboFTP Server, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when processing the FTP "PORT" command. This can be exploited to cause a stack-based buffer overflow via an overly long IP octet string.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 1.30.823. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Zhao Liang, Beijing Leadsec Technology via Secunia.

http://secunia.com/advisories/50595/