Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 04, 2013

Release Date : 2013-03-04

Criticality level : Less critical
Impact : Security Bypass
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 12.2

Description:
SUSE has issued an update for rubygem-devise. This fixes a vulnerability, which can be exploited by malicious people to bypass certain security restrictions.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0374-1:
http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html

http://secunia.com/advisories/52453/

Release Date : 2013-03-04

Criticality level : Highly critical
Impact : Manipulation of data
DoS
System access
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Operating System: openSUSE 12.2

Description:
SUSE has issued an update for java-1_7_0-openjdk. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0377-1:
http://lists.opensuse.org/opensuse-updates/2013-03/msg00003.html

http://secunia.com/advisories/52448/

Release Date : 2013-03-04

Criticality level : Highly critical
Impact : Unknown
Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
Privilege escalation
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Software: Xerox FreeFlow Print Server 8.x

Description:
Xerox has acknowledged multiple vulnerabilities in Xerox FreeFlow Print Server, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and gain escalated privileges and by malicious people to conduct cross-site scripting and phishing attacks, disclose potentially sensitive information, manipulate certain data, bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a vulnerable system.

The vulnerabilities are reported in versions 73.C0.41 and 73.B3.61.

Solution:
Apply updates. Please see the vendor's advisory for more details.

Original Advisory:
XRX13-003:
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

http://secunia.com/advisories/52429/

Release Date : 2013-03-04

Criticality level : Less critical
Impact: Spoofing
Where : From remote
Solution Status : Vendor Patch

Operating System :
openSUSE 11.4
openSUSE 12.1
openSUSE 12.2

Description:
SUSE has issued an update for git. This fixes a security issue, which can be exploited by malicious people to conduct spoofing attacks.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0380-1:
http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html

openSUSE-SU-2013:0382-1:
http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html

http://secunia.com/advisories/52443/

Stunnel OpenSSL and CONNECT Protocol Negotiation NTLM Authentication Vulnerabilities

Release Date : 2013-03-04

Criticality level : Less critical
Impact: DoS
Exposure of sensitive information
System access
Where : From remote
Solution Status : Vendor Patch

Software: Stunnel 4.x

Description:
Some vulnerabilities have been reported in Stunnel, which can be exploited by malicious people to disclose potentially sensitive information, cause a DoS (Denial of Service), and compromise a user's system.

1) The application bundles a vulnerable version of OpenSSL.

2) An error when handling integer conversions within the NTLM authentication mechanism of the CONNECT protocol negotiation can be exploited to cause a buffer overflow.

Successful exploitation of this vulnerability may allow execution of arbitrary code but requires tricking a user into connecting to a malicious proxy server.

NOTE: This vulnerability only affects versions compiled as a 64-bit executable. 32-bit builds are not vulnerable.

This vulnerability is reported in versions 4.21 through 4.54.

Solution:
Update to version 4.55.

Provided and/or discovered by:
The vendor credits Mateusz Kocielski, LogicalTrust

Original Advisory:
Stunnel:
https://www.stunnel.org/CVE-2013-1762.html
https://www.stunnel.org/sdf_ChangeLog.html

http://secunia.com/advisories/52460/

IBM Rational Developer for System z Unspecified Command Execution Vulnerability

Release Date : 2013-03-04

Criticality level : Moderately critical
Impact : System access
Where : From local network
Solution Status : Vendor Patch

Software: IBM Rational Developer for System z 8.x

Description:
A vulnerability has been reported in IBM Rational Developer for System z, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error and can be exploited to execute arbitrary commands. No further information is currently available.

The vulnerability is reported in version 8.5.1.

Solution:
Apply PTF UK91676 (APAR PM81945).

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
IBM (UK91676, PM81945):
http://www.ibm.com/support/docview.wss?uid=swg24034401

http://secunia.com/advisories/52500/

Release Date : 2013-03-04

Criticality level : Moderately critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: ftpd gem for Ruby 2.x

Description:
A vulnerability has been reported in the ftpd gem for Ruby, which can be exploited by malicious users to compromise a vulnerable system.

Input passed via a file name is not properly sanitised in the "ls()" function (lib/ftpd/disk_file_system.rb) before being used as a command line argument. This can be exploited to inject and execute arbitrary shell commands.

The vulnerability is reported in version 0.2.1. Prior versions may also be affected.

Solution:
Update to version 0.2.2.

Provided and/or discovered by:
Larry W. Cashdollar

Original Advisory:
http://seclists.org/fulldisclosure/2013/Mar/26

http://secunia.com/advisories/52407/

Release Date : 2013-03-04

Criticality level : Moderately critical
Impact : Dos
Where : From remote
Solution Status : Vendor Patch

Software: ruby-openid gem for Ruby 1.x

Description:
A vulnerability has been reported in the ruby-openid gem for Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when parsing XML entities, which can be exploited to consume large amounts of memory and cause a crash or hang via a specially crafted XML containing malicious attributes.

The vulnerability is reported in version 2.2.1. Prior versions may also be affected.

Solution:
Update to version 2.2.2 or later.

Provided and/or discovered by:
Reginaldo Silva (ubercomp)

Original Advisory:
https://github.com/openid/ruby-openid/pull/43

http://secunia.com/advisories/52434/

Release Date : 2013-03-04

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: crack gem for Ruby 2.x

Description:
A vulnerability has been reported in the crack gem for Ruby, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error when parsing XML parameters, which allows symbol and yaml types to be a part of the request and can be exploited to execute arbitrary commands.

The vulnerability is reported in version 0.3.1. Prior versions may also be affected.

Solution:
Update to version 0.3.2.

Original Advisory:
https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately

http://secunia.com/advisories/52455/

Release Date : 2013-03-04

Criticality level : Highly critical
Impact : DoS
System access
Where : From remote
Solution Status : Vendor Patch

Software: FFmpeg 1.x

Description:
Multiple vulnerabilities have been reported in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.

1) An error within the "ff_h264_decode_seq_parameter_set()" function (libavcodec/h264_ps.c) when decoding certain parameter set can be exploited to cause an out of array access violation.

2) An error within the "attribute_align_arg avcodec_decode_audio4()" function (libavcodec/utils.c) can be exploited to cause an out of array access violation.

3) An error within the "swr_init()" function (libswresample/swresample.c) can be exploited to cause an out of array access violation.

4) An error within the "read_header()" function (libavcodec/shorten.c) can be exploited to free invalid addresses.

5) An error within the "doubles2str()" and "shorts2str()" functions (libavcodec/tiff.c) can be exploited to cause an out of array access violation.

6) An error within the "ff_add_png_paeth_prediction()" function (libavcodec/pngdec.c) can be exploited to cause an out of array access violation.

7) An integer overflow error within the "old_codec37()" function (libavcodec/sanm.c) can be exploited to corrupt memory.

8) An error within the "old_codec37()" function (libavcodec/sanm.c) can be exploited to cause an out of array access violation.

9) An error within the "advance_line()" function (libavcodec/targa.c) can be exploited to cause an out of array access violation.

The vulnerabilities are reported in versions prior to 1.1.3.

Solution:
Update to version 1.1.3.

Provided and/or discovered by:
The vendor credits Mateusz "j00ru" Jurczyk and Gynvael Coldwind.

Original Advisory:
http://ffmpeg.org/security.html

http://secunia.com/advisories/52459/

Release Date : 2013-03-04

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Question2Answer 1.x

Description:
MustLive has discovered a vulnerability in Question2Answer, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. modify user's email address when a logged-in user visits a specially crafted web page.

The vulnerability is confirmed in version 1.5.4. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
MustLive

Original Advisory:
MustLive:
http://packetstormsecurity.com/files/120610/Question2Answer-1.5.3-CSRF-Brute-Force.html
http://websecurity.com.ua/6192/

http://secunia.com/advisories/52400/

Xerox Multiple Devices Multiple Protocols Unauthorised Access Security Issues

Release Date : 2013-03-04

Criticality level : Less critical
Impact: Security Bypass
Where: From local network
Solution Status : Vendor Patch

Operating System :
Xerox ColorQube 9200 Series
Xerox ColorQube 9300 Series
Xerox WorkCentre
Xerox WorkCentre Pro

Description:
Some security issues have been reported in multiple Xerox devices, which can be exploited by malicious people to bypass certain security restrictions.

The security issues are caused due to device improperly restricting access via certain protocols, which can be exploited to gain unauthorised access to a device.

Please see the vendor's advisory for a list of affected devices and versions.

Solution:
Apply patch.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.xerox.com/download/security/security-bulletin/1b480-4c596f3916140/cert_XRX12-005_v1.031.pdf

http://secunia.com/advisories/52496/

Xerox Phaser 7800 Multiple Protocols Unauthorised Access Security Issues

Release Date : 2013-03-04

Criticality level : Less critical
Impact: Security Bypass
Where: From local network
Solution Status : Vendor Patch

Operating System : Xerox Phaser 7800

Description:
Some security issues have been reported in Xerox Phaser 7800, which can be exploited by malicious people to bypass certain security restrictions.

The security issues are caused due to the device improperly restricting access via certain protocols, which can be exploited to gain unauthorised access to a device.

Solution:
Apply update.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.xerox.com/download/security/security-bulletin/11ec6-4cb930fb517c0/cert_XRX12-012_v1.01.pdf

http://secunia.com/advisories/52330/