Spyware, viruses, & security forum: VULNERABILITIES / FIXES - February 25, 2013

Hitachi Cosminexus Products Oracle Java Multiple Vulnerabilities

Release Date : 2013-02-25

Criticality level : Highly critical
Impact : Manipulation of data
Exposure of sensitive information
DoS
System access
Where: From remote
Solution Status : Vendor Patch

Software:
Cosminexus 5.x
Cosminexus 6.x
Cosminexus 7.x
Cosminexus 8.x
Cosminexus 9.x
Cosminexus Application Server 5.x
Cosminexus Application Server 6.x
Cosminexus Client 6.x
Cosminexus Developer 5.x
Cosminexus Developer 6.x
Cosminexus Server 4.x
Cosminexus Studio 4.x
Cosminexus Studio 5.x
uCosminexus Application Server
uCosminexus Client
uCosminexus Developer
uCosminexus Operator
uCosminexus Service Architect
uCosminexus Service Platform

Description:
Hitachi has acknowledged multiple vulnerabilities in multiple Cosminexus products, which can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

The vulnerabilities exist in the bundled version of Cosminexus Developer's Kit for Java.

Please see the vendor's advisory for a list of affected products and versions.

Solution:
Apply updates (please see the vendor's advisory for details).

Original Advisory:
HS13-004:
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-004/index.html

http://secunia.com/advisories/52354/

Apache Maven / Apache Maven Wagon SSL Certificate Verification Security Issue

Release Date : 2013-02-25

Criticality level : Less critical
Impact : Spoofing
Where : From remote
Solution Status : Vendor Patch

Software:
Apache Maven 3.x
Apache Maven Wagon 2.x

Description:
A security issue has been reported in Apache Maven and Apache Maven Wagon, which can be exploited by malicious people to conduct spoofing attacks.

The security issue is caused due to the application not properly verifying the SSL certificate while in the default non-secure SSL mode. This can be exploited to e.g. spoof the server via a MitM (Man-in-the-Middle) attack and e.g. disclose potentially sensitive information.

The security issue is reported in Apache Maven version 3.0.4 and Apache Maven Wagon versions 2.1, 2.2, and 2.3.

Solution:
Update to Apache Maven version 3.0.5 and Apache Maven Wagon version 2.4.

Provided and/or discovered by:
The vendor credits Graham Leggett.

Original Advisory:
http://maven.apache.org/docs/3.0.5/release-notes.html
http://maven.apache.org/security.html

http://secunia.com/advisories/52381/

Honeywell Multiple Products ActiveX Control Remote Code Execution Vulnerability

Release Date : 2013-02-25

Criticality level : Highly critical
Impact : System access
Where: From remote
Solution Status : Vendor Patch

Software:
Honeywell ComfortPoint Open Manager (CPO-M)
Honeywell Enterprise Buildings Integrator (EBI)
Honeywell SymmetrE

Description:
A vulnerability has been reported in multiple Honeywell products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error in the HscRemoteDeploy.dll module. No further information is currently available.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the following products:
* Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2
* Honeywell SymmetrE R310, R410.1, and R410.2
* Honeywell ComfortPoint Open Manager (CPO-M) R100

Solution:
Apply Station Security Update package (please contact the vendor for more information).

Provided and/or discovered by:
ICS-CERT credits Juan Vazquez, Rapid7.

Original Advisory:
ICSA-13-053-02:
http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf

http://secunia.com/advisories/52389/

GIT "git-imap-send" SSL Certificate Verification Security Issue

Release Date : 2013-02-25

Criticality level : Less critical
Impact : Spoofing
Where: From remote
Solution Status : Vendor Patch

Software: GIT 1.x

Description:
A security issue has been reported in GIT, which can be exploited by malicious people to conduct spoofing attacks.

The security issue is caused due to the "git-imap-send" not properly verifying IMAP server hostname against the domain name in SSL certificates. This can be exploited to e.g. spoof the server via a MitM (Man-in-the-Middle) attack and e.g. disclose potentially sensitive information.

The security issue is reported in versions prior to 1.8.1.4.

Solution:
Update to version 1.8.1.4.

Original Advisory:
https://bugzilla.novell.com/show_bug.cgi?id=804730
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586

http://secunia.com/advisories/52361/

Release Date : 2013-02-25

Criticality level : Less critical
Impact : Exposure of sensitive information
DoS
Where: From remote
Solution Status : Vendor Patch

Operating System:
openSUSE 11.4
openSUSE 12.2

Description:
SUSE has issued an update for openssl. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information and cause a DoS (Denial of Service) of the application using the library.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0337-1:
http://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html

openSUSE-SU-2013:0339-1:
http://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html

http://secunia.com/advisories/52314/

WordPress Pretty Link Lite Plugin "get-data" Cross-Site Scripting Vulnerability

Release Date: 2013-02-21
Last Update : 2013-02-25

Criticality level : Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status : Vendor Patch

Software: WordPress Pretty Link Lite Plugin 1.x

Description:
A vulnerability has been discovered in the Pretty Link Lite plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "get-data" GET parameter to wp-content/plugins/pretty-link/includes/version-2
-kvasir/open-flash-chart.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's web browser session in the context of an affected site.

The vulnerability is confirmed in version 1.6.2. Prior versions may also be affected.

Solution:
Update to version 1.6.3.

Provided and/or discovered by:
hip

Original Advisory:
Pretty Link Lite:
http://wordpress.org/extend/plugins/pretty-link/changelog/
http://plugins.trac.wordpress.org/changeset/658428/pretty-link/trunk

hip:
http://packetstormsecurity.org/files/120433/WordPress-Pretty-Link-1.6.3-Cross-Site-Scripting.html

http://secunia.com/advisories/52246

Release Date : 2013-02-25

Criticality level : Highly critical
Impact : Security Bypass
Exposure of sensitive information
DoS
System access
Where: From remote
Solution Status : Vendor Patch

Operating System: openSUSE 12.1

Description:
SUSE has issued an update for openssl. This fixes multiple vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, cause a DoS (Denial of Service), and potentially compromise an application using the library.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0336-1:
http://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html

http://secunia.com/advisories/52292/