Spyware, viruses, & security forum: VULNERABILITIES / FIXES - December 07, 2012

IBM Tivoli Monitoring HTTP Service Console Cross-Site Scripting Vulnerability

Release Date : 2012-12-07

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: IBM Tivoli Monitoring 6.x

Description:
A vulnerability has been reported in IBM Tivoli Monitoring, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the HTTP service console is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in versions 6.2.2 and 6.2.3.

Solution:
Apply Fix Pack 6.2.3-TIV-ITM-FP0001 or 6.2.2-TIV-ITM-FP0009.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
IBM:
https://www.ibm.com/support/docview.wss?uid=swg21618972

http://secunia.com/advisories/51509/

bogofilter Base64 Character Set Conversion Denial of Service Vulnerability

Release Date : 2012-12-07

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Software: bogofilter 1.x

Description:
A vulnerability has been reported in bogofilter, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the "convert()" function (src/iconvert.c) when converting the character set and can be exploited to cause a heap-based buffer overflow via specially crafted base64 string.

The vulnerability is reported in versions 1.2.2 and prior.

Solution:
Update to version 1.2.3 (r6973).

Provided and/or discovered by:
Julius Plenz

Original Advisory:
bogofilter-SA-2012-01:
http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01

http://secunia.com/advisories/51334/

Release Date : 2012-12-07

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Operating System : m0n0wall 3.x

Description:
A vulnerability has been reported in m0n0wall, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. execute arbitrary commands if a logged-in administrator visits a malicious web site.

The vulnerability is reported in version 1.33. Prior versions may also be affected.

Solution:
Update to version 1.34.

Provided and/or discovered by:
Yann CAM, Synetis

Original Advisory:
m0n0wall:
http://m0n0.ch/wall/downloads.php

Yann CAM:
http://packetstormsecurity.org/files/118652/m0n0wall-1.33-Cross-Site-Request-Forgery.html

http://secunia.com/advisories/51238/

Release Date : 2012-12-07

Criticality level : Moderately critical
Impact : DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System : openSUSE 12.1
openSUSE 12.2

Description:
SUSE has issued an update for libssh. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise an application using the library.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:1620-1:
http://lists.opensuse.org/opensuse-updates/2012-12/msg00014.html

openSUSE-SU-2012:1622-1:
http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html

http://secunia.com/advisories/51492/

Release Date : 2012-12-07

Criticality level : Less critical
Impact : DoS
Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: Red Hat Certificate System 8.x

Description:
Red Hat has issued an update for pki. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks and by malicious users to cause a DoS (Denial of Service).

1) Certain input is not properly sanitised within the web interface before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Some errors within the token processing functionality can be exploited to crash the Apache web server child process, which may prevent the processing of other users' requests.

Solution:
Updated packages are available via Red Hat Network.

Provided and/or discovered by:
1) Reported by the vendor.
2) The vendor credits Patrick Raspante and Ryan Millay, GDC4S.

Original Advisory:
RHSA-2012:1550-1:
https://rhn.redhat.com/errata/RHSA-2012-1550.html

http://secunia.com/advisories/51482/

Release Date : 2012-12-07

Criticality level : Moderately critical
Impact : DoS
Where : From remote
Solution Status : Vendor Patch

Operating System : openSUSE 12.2

Description:
SUSE has issued an update for tor. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:1624-1:
http://lists.opensuse.org/opensuse-updates/2012-12/msg00018.html

http://secunia.com/advisories/51471/

Release Date : 2012-12-07

Criticality level : Moderately critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : openSUSE 12.1
openSUSE 12.2

Description:
SUSE has issued an update for gegl. This fixes a vulnerability, which can be exploited by malicious people to compromise an application using the library.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2012:1627-1:
http://lists.opensuse.org/opensuse-updates/2012-12/msg00021.html

http://secunia.com/advisories/51461/

TVMOBiLi HTTP Request Processing Two Buffer Overflow Vulnerabilities

Release Date : 2012-12-07

Criticality level : Moderately critical
Impact : System access
DoS
Where : From local network
Solution Status : Vendor Patch

Software: TVMOBiLi 2.x

Description:
Two vulnerabilities have been discovered in TVMOBiLi, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) A boundary error in the "CHTTPServerTransaction::LoadResource()" method (HttpUtils.dll) when processing a web request can be exploited to cause a limited stack-based buffer overflow resulting in a crash only via a specially crafted URL.

2) A boundary error in the "CHTTPServerTransaction::LoadFile()" method (HttpUtils.dll) when processing a web request can be exploited to cause a heap-based buffer overflow via a specially crafted URL.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

The vulnerabilities are confirmed in version 2.1.3557. Prior versions may also be affected.

Solution:
Update to version 2.1.3974.

Provided and/or discovered by:
1) High-Tech Bridge
2) Additional information provided by Secunia Research.

Original Advisory:
TVMOBiLi:
http://dev.tvmobili.com/changelog.php
http://forum.tvmobili.com/viewtopic.php?f=7&t=55117

HTB23120:
https://www.htbridge.com/advisory/HTB23120

http://secunia.com/advisories/51465/