SecurityFocus Linux Newsletter #295

Peter Laborge <[email protected]> Tue, 18 Jul 2006 16:05:00 -0600
Newsgroups gmane.comp.security.news.linux
Message-ID <[email protected]> 
SecurityFocus Linux Newsletter #295
----------------------------------------

This issue is Sponsored by: Qualys

On-Demand Vulnerability Management
Proactively Identify and remediate Network Vulnerabilities, Measure and Manage Risk. Free 14 Day Trial with NO Obligation!

http://newsletter.industrybrains.com/c?fe;1;5e792;5cd;233;1e60;da4

------------------------------------------------------------------
I.   FRONT AND CENTER
        1. Basic journey of a packet
II.  LINUX VULNERABILITY SUMMARY
        1. SIPfoundry SIPXtapi CSeq Processing Remote Buffer-Overflow Vulnerability
        2. Samba Internal Data Structures Denial of Service Vulnerability
        3. Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities
        4. Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability
        5. Debian GNU/Linux Rssh Security Bypass Vulnerability
        6. Rocks Clusters Local Privilege Escalation Vulnerabilities
        7. Asterisk IAX2 Request Flood Remote Denial of Service Vulnerability
        8. Armagetron Advanced Invalid Values Multiple Remote Denial Of Service Vulnerabilities
        9. Zoho Virtual Office Message HTML Injection Vulnerability
        10. MySQL Server Date_Format Denial Of Service Vulnerability
        11. Linux Kernel USB Driver Data Queue Local Denial of Service Vulnerability
III. LINUX FOCUS LIST SUMMARY
        1. smtp proxy that takes in smtp auth?
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1. Basic journey of a packet
By Don Parker
The purpose of this introductory article is to look at basic look at the journey of a packet across the Internet, from packet creation to switches, routers, NAT, and so on. This topic is recommended for those who are new to the networking and security field and may not have a basic understanding of the underlying process.
http://www.securityfocus.com/infocus/1870


II.  LINUX VULNERABILITY SUMMARY
------------------------------------
1. SIPfoundry SIPXtapi CSeq Processing Remote Buffer-Overflow Vulnerability
BugTraq ID: 18906
Remote: Yes
Date Published: 2006-07-10
Relevant URL: http://www.securityfocus.com/bid/18906
Summary:
The sipXtapi product is reported to be prone to a remote buffer-overflow vulnerability. This issue presents itself when the application handles a specially crafted 'CSeq' value.

A successful attack may lead to unauthorized remote access in the context of a user running an affected application that uses the vulnerable library.

Reports indicate that sipXtapi versions that were released prior to March 24, 2006 are vulnerable to this issue. Certain PingTel products and versions of AOL Triton may be affected because they employ the vulnerable library.

2. Samba Internal Data Structures Denial of Service Vulnerability
BugTraq ID: 18927
Remote: Yes
Date Published: 2006-07-10
Relevant URL: http://www.securityfocus.com/bid/18927
Summary:
The smbd daemon is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to consume excessive memory resources, ultimately crashing the affected application.

This issue affects Samba versions 3.0.1 through 3.0.22 inclusive.

3. Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities
BugTraq ID: 18961
Remote: Yes
Date Published: 2006-07-13
Relevant URL: http://www.securityfocus.com/bid/18961
Summary:
The libtunepimp library is affected by multiple remote buffer-overflow vulnerabilities.
These issues arise when the library handles malicious audio files.

A remote attacker may execute arbitrary code to gain unauthorized access.

Versions 0.4.2 and prior are vulnerable to these issues.

4. Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability
BugTraq ID: 18992
Remote: No
Date Published: 2006-07-14
Relevant URL: http://www.securityfocus.com/bid/18992
Summary:
The Linux kernel is susceptible to a local privilege-escalation vulnerability. This issue is due to a race-condition in the 'proc' filesystem.

This issue allows local attackers to gain superuser privileges, facilitating the complete compromise of affected computers.

The 2.6 series of the Linux kernel is vulnerable to this issue.

5. Debian GNU/Linux Rssh Security Bypass Vulnerability
BugTraq ID: 18999
Remote: No
Date Published: 2006-07-17
Relevant URL: http://www.securityfocus.com/bid/18999
Summary:
A programming error in the 'util.c' file of the rssh package in Debian GNU/Linux allows rdist and rsync to bypass security.

This vulnerability may facilitate privilege escalation, because the error allows rssh's check for CVS to always succeed. An attacker could use this vulnerability to their advantage and bypass existing security limitations and access controls.

6. Rocks Clusters Local Privilege Escalation Vulnerabilities
BugTraq ID: 19003
Remote: No
Date Published: 2006-07-17
Relevant URL: http://www.securityfocus.com/bid/19003
Summary:
Rocks Clusters is prone to multiple local privilege-escalation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input..

These issues allow local attackers to gain superuser privileges, facilitating the complete compromise of affected computers.

Rocks Clusters versions 4.1 and prior are vulnerable to these issues.

7. Asterisk IAX2 Request Flood Remote Denial of Service Vulnerability
BugTraq ID: 19009
Remote: Yes
Date Published: 2006-07-17
Relevant URL: http://www.securityfocus.com/bid/19009
Summary:
Asterisk is prone to a remote denial-of-service vulnerability because it fails to efficiently handle numerous remote requests.

This issue allows remote attackers to consume excessive CPU resources, denying service to legitimate users. The software will become unresponsive to further calls.

Asterisk versions prior to 1.2.10 are vulnerable to this issue.

8. Armagetron Advanced Invalid Values Multiple Remote Denial Of Service Vulnerabilities
BugTraq ID: 19015
Remote: Yes
Date Published: 2006-07-17
Relevant URL: http://www.securityfocus.com/bid/19015
Summary:
Multiple denial of service vulnerabilities affect Armagetron Advanced.  These issues are due to a failure of the application to handle malformed network data.

An attacker may leverage these issues to cause a remote denial-of-service condition in affected applications.

9. Zoho Virtual Office Message HTML Injection Vulnerability
BugTraq ID: 19016
Remote: Yes
Date Published: 2006-07-17
Relevant URL: http://www.securityfocus.com/bid/19016
Summary:
Zoho Virtual Office is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

This issue affects version 3.2 Build 3210; other versions may also be vulnerable.

10. MySQL Server Date_Format Denial Of Service Vulnerability
BugTraq ID: 19032
Remote: Yes
Date Published: 2006-07-18
Relevant URL: http://www.securityfocus.com/bid/19032
Summary:
MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input.

This issue allows remote attackers to crash affected database servers, denying service to legitimate users. Attackers must be able to execute arbitrary SQL statements on affected servers, which requires valid credentials to connect to affected servers.

Attackers may exploit this issue in conjunction with latent SQL-injection vulnerabilities in other applications.

Versions of MySQL prior to 4.1.18, 5.0.19, and 5.1.6 are vulnerable to this issue.

11. Linux Kernel USB Driver Data Queue Local Denial of Service Vulnerability
BugTraq ID: 19033
Remote: No
Date Published: 2006-07-18
Relevant URL: http://www.securityfocus.com/bid/19033
Summary:
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the USB FTDI SIO driver.

This vulnerability allows local users to consume all available memory resources, denying further service to legitimate users.

This issue affects Linux kernel versions prior to 2.6.16.27.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
1. smtp proxy that takes in smtp auth?
http://www.securityfocus.com/archive/91/439444

IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is Sponsored by: Qualys

On-Demand Vulnerability Management
Proactively Identify and remediate Network Vulnerabilities, Measure and Manage Risk. Free 14 Day Trial with NO Obligation!

http://newsletter.industrybrains.com/c?fe;1;5e792;5cd;233;1e60;da4