Spyware, viruses, & security forum: VULNERABILITIES / FIXES - December 05, 2012

Release Date: 2012-12-05

Criticality level : Less critical
Impact : DoS
Privilege escalation
Where : Local system
Solution Status : Vendor Patch

Operating System : Citrix XenServer 5.0
Citrix XenServer 5.5
Citrix XenServer 5.6
Citrix XenServer 6.0
Citrix XenServer 6.1

Description:
Citrix has acknowledged multiple vulnerabilities in XenServer, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and potentially gain escalated privileges.

The vulnerabilities are reported in versions 6.1 and prior.

Solution:
Apply hotfixes (please see the vendor's advisory for details).

Original Advisory:
http://support.citrix.com/article/CTX135777

http://secunia.com/advisories/51486/

Mesa "validate_uniform_parameters()" Buffer Overflow Vulnerability

Release Date : 2012-12-05

Criticality level : Less critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: Mesa 8.x

Description:
A vulnerability has been reported in Mesa, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the "validate_uniform_parameters()" function (main/uniform_query.cpp) when handling certain uniform values and can be exploited to cause a heap-based buffer overflow.

The vulnerability is reported in versions 8.0.5 and prior.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Originally reported by miaubiz in Google Chrome.

Original Advisory:
http://www.mail-archive.com/mesa-dev@lists.freedesktop.org/msg29015.html

http://secunia.com/advisories/51489/

Red Hat Network Proxy / Network Satellite Server jabberd XMPP Dialback Protection Bypass

Release Date : 2012-12-05

Criticality level : Moderately critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Software: Red Hat Network Proxy 5.x
Red Hat Network Satellite Server 5.x

Description:
Red Hat has acknowledged a vulnerability in Red Hat Network Proxy and Red Hat Network Satellite Server, which can be exploited by malicious people to bypass certain security restrictions.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1538-1:
https://rhn.redhat.com/errata/RHSA-2012-1538.html

RHSA-2012:1539-1:
https://rhn.redhat.com/errata/RHSA-2012-1539.html

http://secunia.com/advisories/51475/

Release Date : 2012-12-05

Criticality level : Moderately critical
Impact : Security Bypass
Cross Site Scripting
Manipulation of data
Exposure of sensitive information
Privilege escalation
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Software: Red Hat CloudForms

Description:
Multiple vulnerabilities have been reported in Red Hat CloudForms, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, and perform certain actions with escalated privileges, by malicious users to disclose and manipulate certain data and cause a DoS (Denial of Service), and by malicious people to conduct cross-site scripting and SQL injection attacks, bypass certain security restrictions, manipulate certain data, cause a DoS, and compromise a vulnerable system.

1) An error due to Katello not properly checking user permissions can be exploited to download consumer certificates or change settings of other users' system.

Successful exploitation of this vulnerability requires knowledge of the UUID of the target system.

2) An error exists due to Pulp logging administrative passwords to a world readable log file.

3) An error due to Pulp's configuration file (pulp.conf) being installed as world readable can be exploited to disclose e.g. the administrative password.

4) An error due to grinder having insecure permissions for the cache folder (/var/lib/pulp/cache/grinder) can be exploited to access and modify cache files.

5) Errors exists due to the application bundles a vulnerable version of Ruby.

6) Errors exists due to the application bundles a vulnerable version of Puppet.

Solution:
Updated packages are available via Red Hat Network.

Provided and/or discovered by:
1) Lukas Zapletal, Red Hat
2) James Laska, Red Hat
3) Kurt Seifried, Red Hat
4) James Labocki, Red Hat

Original Advisory:
RHSA-2012-1542-1:
https://rhn.redhat.com/errata/RHSA-2012-1542.html

RHSA-2012-1543-1:
https://rhn.redhat.com/errata/RHSA-2012-1543.html

http://secunia.com/advisories/51472/

Release Date: 2012-12-05

Criticality level : Less critical
Impact : DoS
Privilege escalation
Where : Local system
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Server 5

Description:
Red Hat has issued an update for the kernel. This fixes multiple vulnerabilities, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and potentially gain escalated privileges and by malicious people to cause a DoS (Denial of Service).

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2012:1540-1:
https://rhn.redhat.com/errata/RHSA-2012-1540.html

http://secunia.com/advisories/51473/