Spyware, viruses, & security forum: VULNERABILITIES / FIXES - October 04, 2012

HP Network Node Manager i Unspecified Information Disclosure Weakness

Release Date 2012-10-04

Criticality level : Not critical
Impact : Exposure of sensitive information
Where : From local network
Solution Status : Vendor Patch

Software: HP Network Node Manager i (NNMi) 9.x

Description:
A weakness has been reported in HP Network Node Manager i, which can be exploited by malicious people to disclose certain sensitive information.

The weakness is caused due to an unspecified error. No further information is currently available.

The weakness is reported in version 9.20.

Solution:
Apply hotfix Hotfix-NNMI-9.2XP1-UI-20120917.zip or later.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
HPSBMU02817 SSRT100950:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03507708

http://secunia.com/advisories/50861/

McAfee Firewall Enterprise BIND Resource Record Denial of Service Vulnerability

Release Date : 2012-10-04

Criticality level : Moderately critical
Impact: DoS
Where: From remote
Solution Status : Vendor Patch

Operating System : McAfee Firewall Enterprise (formely Sidewinder Firewall) 7.x
McAfee Firewall Enterprise 8.x

Description:
McAfee has acknowledged a vulnerability in McAfee Firewall Enterprise, which can be exploited by malicious people to cause a DoS (Denial of Service).

Please see the vendor's advisory for the list of affected versions.

Solution:
Apply patches (please see the vendor's advisory for more information).

Original Advisory:
https://kc.mcafee.com/corporate/index?page=content&id=KB76379

http://secunia.com/advisories/50852/

Template CMS Cross-Site Scripting and Request Forgery Vulnerabilities

Release Date : 2012-10-04

Criticality level : Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status : Unpatched

Software: Template CMS 2.x

Description:
High-Tech Bridge has discovered two vulnerabilities in Template CMS, which can be exploited by malicious people to conduct cross-site scripting and request forgery attacks.

1) Input passed to the "themes_editor" parameter in admin/index.php (when "action" is set to "add_template" and "id" is set to "themes") is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. create an arbitrary user with administrative privileges if a logged-in administrative user visits a malicious web site.

The vulnerabilities are confirmed in version 2.1.1. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
High-Tech Bridge

Original Advisory:
High-Tech Bridge:
https://www.htbridge.com/advisory/HTB23115

http://secunia.com/advisories/50803/

Release Date : 2012-10-04

Criticality level : Moderately critical
Impact: Prvilege escalation
DoS
Where: From remote
Solution Status : Vendor Patch

Operating System : Ubuntu Linux 10.04

Description:
Ubuntu has issued an update for kernel. This fixes two vulnerabilities, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and potentially gain escalated privileges and by malicious people to cause a DoS (Denial of Service).

Solution:
Apply updated packages.

Original Advisory:
USN-1594-1:
http://www.ubuntu.com/usn/usn-1594-1/

http://secunia.com/advisories/50846/

Release Date : 2012-10-04

Criticality level : Less critical
Impact: DoS
Where: From remote
Solution Status : Vendor Patch

Software: JBoss Operations Network 3.x

Description:
Red Hat has issued an update for JBoss Operations Network. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1331-1:
https://rhn.redhat.com/errata/RHSA-2012-1331.html

http://secunia.com/advisories/50863/

WordPress Spider Calendar Plugin Cross-Site Scripting and SQL Injection Vulnerabilities

Release Date : 2012-10-04

Criticality level : Moderately critical
Impact: Cross Site Scripting
Manipulation of data
Where: From remote
Solution Status : Unpatched

Software: Wordpress Spider Calendar Plugin 1.x

Description:
Two vulnerabilities have been discovered in Spider Calendar plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.

1) Input passed via the "date" parameter to front_end/spidercalendarbig.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Input passed via the "calendar_id" parameter to front_end/spidercalendarbig_seemore.php (when "ev_ids" is set to the id of an available event) is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities are confirmed in versions 1.0.1. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Daniel Barragan aka "D4NB4R".

Original Advisory:
Daniel Barragan aka "D4NB4R":
http://packetstormsecurity.org/files/117078/WordPress-Spider-1.0.1-SQL-Injection-XSS.html

http://secunia.com/advisories/50812/

Release Date : 2012-10-04

Criticality level : Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status : Unpatched

Software: Zenphoto 1.x

Description:
Scott Herbert has discovered a vulnerability in Zenphoto, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "date" parameter to zp-core/zp-extensions/zenpage/admin-news-articles.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in versions 1.4.3.2 and 1.4.3.3. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Scott Herbert.

Original Advisory:
Scott Herbert:
http://scott-herbert.com/blog/2012/10/02/cookie-stealing-and-xss-vulnerable-in-zenphotoversion-1-4-3-2-1130

http://secunia.com/advisories/50799/