Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 12, 2013

WordPress MobileView Plugin ZeroClipboard Cross-Site Scripting Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress MobileView Plugin 1.x

Description:
Henri Salo has discovered a vulnerability in the MobileView plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/mobileview/admin/js/ZeroClipboard.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 1.0.7. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52463/

WordPress GeSHi Source Colorer Plugin ZeroClipboard Cross-Site Scripting Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress GeSHi Source Colorer Plugin 0.x

Description:
Henri Salo has discovered a vulnerability in the GeSHi Source Colorer plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/geshi-source-colorer/external/zeroclipboard/ZeroClipboard.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 0.13. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52478/

WordPress Buckets Plugin ZeroClipboard Cross-Site Scripting Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress Buckets Plugin 0.x

Description:
Henri Salo has discovered a vulnerability in the Buckets plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/buckets/js/ZeroClipboard.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 0.1.9.3. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52525/

WordPress PayPal Digital Goods Plugin ZeroClipboard Cross-Site Scripting Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress PayPal Digital Goods Plugin 2.x

Description:
Henri Salo has discovered a vulnerability in the PayPal Digital Goods plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/paypal-digital-goods-monetization-powered-by-cleeng/js/ZeroClipboard.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 2.2.13. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52417/

WordPress WP Clone by WP Academy Plugin ZeroClipboard Cross-Site Scripting Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: WordPress WP Clone by WP Academy Plugin 2.x

Description:
Henri Salo has discovered a vulnerability in the WP Clone by WP Academy plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/wp-clone-by-wp-academy/lib/js/ZeroClipboard.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 2.1.1. Prior versions may also be affected.

Solution:
Update to version 2.1.2.

Original Advisory:
WP Clone by WP Academy:
http://wordpress.org/extend/plugins/wp-clone-by-wp-academy/changelog/

Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52461/

Release Date : 2013-03-12

Criticality level : Highly critical
Impact: Manipulation of data
Exposure of sensitive information
DoS
System access
Where : From remote
Solution Status : Vendor Patch

Software:
Red Hat Enterprise Linux Desktop Supplementary (v. 6)
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
Red Hat Enterprise Linux Server Supplementary (v. 6)
Red Hat Enterprise Linux Workstation Supplementary (v. 6)
RHEL Desktop Supplementary (v. 5 client)
RHEL Supplementary (v. 5 server)

Description:
Red Hat has issued an update for java-1.7.0-ibm. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2013:0626-1:
http://rhn.redhat.com/errata/RHSA-2013-0626.html

http://secunia.com/advisories/52575/

Release Date : 2013-03-12

Criticality level : Moderately critical
Impact: Security Bypass
DoS
Where : From remote
Solution Status : Vendor Patch

Operating System :
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6

Description:
Red Hat has issued an update for tomcat6. This fixes a weakness and two vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2013:0623-1:
http://rhn.redhat.com/errata/RHSA-2013-0623.html

http://secunia.com/advisories/52572/

WordPress SlideDeck 2 Lite Responsive Content Slider Plugin ZeroClipboard Two Cross-Site Scripting Vulnerabilities

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress SlideDeck 2 Lite Responsive Content Slider Plugin 2.x

Description:
Henri Salo has discovered two vulnerabilities in the SlideDeck 2 Lite Responsive Content Slider plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/slidedeck2/js/zeroclipboard/ZeroClipboard.swf and wp-content/plugins/slidedeck2/js/zeroclipboard/ZeroClipboard10.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are confirmed in version 2.1.20130306. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52462/

WordPress Click to Copy Grab Box Plugin ZeroClipboard Two Cross-Site Scripting Vulnerabilities

Release Date : 2013-03-12

Criticality level : Less critical
Impact: Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: WordPress Click to Copy Grab Box Plugin 0.x

Description:
Henri Salo has discovered two vulnerabilities in the Click to Copy Grab Box plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the "id" parameter to wp-content/plugins/click-to-copy-grab-box/lib/ZeroClipboard.swf and wp-content/plugins/click-to-copy-grab-box/lib/ZeroClipboard10.swf is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are confirmed in version 0.1.1. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Henri Salo

Original Advisory:
Henri Salo:
http://www.openwall.com/lists/oss-security/2013/03/10/2

http://secunia.com/advisories/52482/

Release Date : 2013-03-12

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Red Hat Enterprise Linux Desktop 5
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Workstation 6

Software: RHEL Optional Productivity Applications (v. 5 server)

Description:
Red Hat has issued an update for thunderbird. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2013:0627-1:
http://rhn.redhat.com/errata/RHSA-2013-0627.html

http://secunia.com/advisories/52571/

Release Date : 2013-03-12

Criticality level : Less critical
Impact : Manipulation of data
Privilege escalation
DoS
Where: Local system
Solution Status : Vendor Patch

Software: Red Hat Enterprise MRG v2 for Red Hat Enterprise Linux (version 6)

Description:
Red Hat has issued an update for kernel-rt. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users in a guest virtual machine to manipulate certain data and by malicious, local users to gain escalated privileges and to cause a DoS (Denial of Service).

Solution:
Updated packages are available via Red Hat Network.

Original Advisory:
RHSA-2013:0622-1:
http://rhn.redhat.com/errata/RHSA-2013-0622.html

http://secunia.com/advisories/52576/

SUSE update for MozillaFirefox, MozillaThunderbird, and seamonkey

Release Date : 2013-03-12

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : openSUSE 11.4

Description:
SUSE has issued an update for MozillaFirefox, MozillaThunderbird, and seamonkey. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.

Solution:
Apply updated packages via the zypper package manager.

Original Advisory:
openSUSE-SU-2013:0431-1:
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html

http://secunia.com/advisories/52537/

389 Directory Server LDAP Control Data Handling Denial of Service Vulnerability

Release Date : 2013-03-12

Criticality level : Less critical
Impact : DoS
Where : From local network
Solution Status : Vendor Patch

Software: 389 Directory Server (formerly known as Fedora Directory Server) 1.x

Description:
A vulnerability has been reported in 389 Directory Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling LDAP control data, which can be exploited to crash the server by sending a specially crafted LDAP control sequence.

The vulnerability is reported in versions prior to 1.3.0.4.

Solution:
Update to version 1.3.0.4.

Provided and/or discovered by:
The vendor credits Thierry Bordaz, Red Hat.

Original Advisory:
https://fedorahosted.org/389/ticket/571
https://bugzilla.redhat.com/show_bug.cgi?id=912964

http://secunia.com/advisories/52279/

WordPress CMS Tree Page View Plugin Cross-Site Request Forgery Vulnerability

Release Date: 2013-03-12

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Vendor Patch

Software: WordPress CMS Tree Page View Plugin 1.x

Description:
A vulnerability has been discovered in the CMS Tree Page View plugin for WordPress, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. create arbitrary pages when a logged-in user visits a specially crafted web page.

The vulnerability is confirmed in version 1.2.4. Prior versions may also be affected.

Solution:
Update to version 1.2.5.

Provided and/or discovered by:
The vendor credits Julio Potier.

Original Advisory:
CMS Tree Page View:
http://wordpress.org/extend/plugins/cms-tree-page-view/changelog/
http://plugins.trac.wordpress.org/changeset/679833/cms-tree-page-view

http://secunia.com/advisories/52581/

Release Date: 2013-03-12

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: Dotclear 2.x

Description:
Two vulnerabilities have been discovered in Dotclear, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerabilities are caused due to a bundled vulnerable version of swfupload.

The vulnerabilities are confirmed in version 2.4.4. Other versions may also be affected.

Solution:
No official solution is currently available.

Original Advisory:
MustLive:
http://websecurity.com.ua/6365/
http://packetstormsecurity.com/files/120746/SWFUpload-Content-Spoofing-Cross-Site-Scripting.html

http://secunia.com/advisories/52540/