SecurityFocus Linux Newsletter #300

Peter Laborge <[email protected]> Tue, 22 Aug 2006 17:20:19 -0600
Newsgroups gmane.comp.security.news.linux
Message-ID <[email protected]> 
SecurityFocus Linux Newsletter #300
----------------------------------------

This issue is Sponsored by: SPI Dynamics

ALERT:  "How A Hacker Launches A Feed Injection Attack!" - SPI Dynamics White Paper
Learn the risks associated with Feed Injection of Atom and RSS feeds, including Cross-Site Scripting, Cross-Site Request Forgery, and Keystroke Logging.
Download *FREE* white paper from SPI Dynamics.

https://download.spidynamics.com/1/ad/AJAX.asp?Campaign_ID=70160000000CaO4

------------------------------------------------------------------
I.   FRONT AND CENTER
        1. LinuxWorld, virtually speaking
II.  LINUX VULNERABILITY SUMMARY
        1. Opera Web Browser IRC Chat Client Remote Denial of Service Vulnerability
        2. ImageMagick SGI Image File Remote Heap Buffer Overflow Vulnerability
        3. Linux-HA Heartbeat Remote Denial of Service Vulnerability
        4. PHProjekt Multiple Remote File Include Vulnerabilities
        5. GNU BinUtils GAS Buffer Overflow Vulnerability
        6. Linux Kernel UDF Denial of Service Vulnerability
        7. IBM DB2 Multiple Denial of Service Vulnerabilities
        8. Linux Kernel PPC970 Systems Local Denial of Service Vulnerability
        9. PHProjekt Content Management Module Multiple Remote File Include Vulnerabilities
        10. Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
        11. Linux Kernel s/io.c/IO.C Local Denial of Service Vulnerability
        12. Linux Kernel SCTP_Make_Abort_User Function Buffer Overflow Vulnerability
III. LINUX FOCUS LIST SUMMARY
        1. Linux Audit
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1. LinuxWorld, virtually speaking
By Scott Granneman
With all the free virtual machines out there running security software or acting as virtual security appliances, you'd think VMWare is on everyone's mind. Scott Granneman offers some thoughts at the close of this year's LinuxWorld.
http://www.securityfocus.com/columnists/413


II.  LINUX VULNERABILITY SUMMARY
------------------------------------
1. Opera Web Browser IRC Chat Client Remote Denial of Service Vulnerability
BugTraq ID: 19491
Remote: Yes
Date Published: 2006-08-14
Relevant URL: http://www.securityfocus.com/bid/19491
Summary:
Opera Web Browser IRC chat client is prone to a remote denial-of-service vulnerability.

A successful attack can allow the attacker to trigger a crash in the client and deny service to legitimate users.

This issue affects Opera Web Browser 9. Other versions may be vulnerable as well.

2. ImageMagick SGI Image File Remote Heap Buffer Overflow Vulnerability
BugTraq ID: 19507
Remote: Yes
Date Published: 2006-08-14
Relevant URL: http://www.securityfocus.com/bid/19507
Summary:
ImageMagick is prone to a remote heap buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue allows attackers to execute arbitrary machine code in the context of applications that use the ImageMagick library.

ImageMagick versions in the 6.x series, up to version 6.2.8, are vulnerable to this issue.

3. Linux-HA Heartbeat Remote Denial of Service Vulnerability
BugTraq ID: 19516
Remote: Yes
Date Published: 2006-08-13
Relevant URL: http://www.securityfocus.com/bid/19516
Summary:
Linux-HA Heartbeat is prone to a remote denial-of-service vulnerability.

By successfully exploiting this issue, attackers can crash the master control process. This may result in the failure of services that depend on the application's functionality.

4. PHProjekt Multiple Remote File Include Vulnerabilities
BugTraq ID: 19541
Remote: Yes
Date Published: 2006-08-16
Relevant URL: http://www.securityfocus.com/bid/19541
Summary:
Multiple remote file-include vulnerabilities affect PHProjekt because the application fails to properly sanitize user-supplied input before using it in a PHP 'include()' function call.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process.

Version 5.1 of PHProjekt is vulnerable to this issue; previous versions may be affected as well.

5. GNU BinUtils GAS Buffer Overflow Vulnerability
BugTraq ID: 19555
Remote: Yes
Date Published: 2006-08-17
Relevant URL: http://www.securityfocus.com/bid/19555
Summary:
GNU binutils GAS (GNU assembler) is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Remote attackers may crash the application or execute arbitrary machine code in the context of the application.

6. Linux Kernel UDF Denial of Service Vulnerability
BugTraq ID: 19562
Remote: No
Date Published: 2006-08-17
Relevant URL: http://www.securityfocus.com/bid/19562
Summary:
The Linux kernel UDF file module is prone to a denial-of-service.

An attacker can exploit this issue to crash the kernel, denying further service to legitimate users.

7. IBM DB2 Multiple Denial of Service Vulnerabilities
BugTraq ID: 19586
Remote: Yes
Date Published: 2006-08-18
Relevant URL: http://www.securityfocus.com/bid/19586
Summary:
DB2 Universal Database is affected by multiple denial-of-service vulnerabilities.

An attacker can exploit these vulnerabilities to cause a denial-of-service in applications using the affected library.

8. Linux Kernel PPC970 Systems Local Denial of Service Vulnerability
BugTraq ID: 19615
Remote: No
Date Published: 2006-08-21
Relevant URL: http://www.securityfocus.com/bid/19615
Summary:
The Linux kernel is prone to a local denial-of-service.

An attacker can exploit this issue to crash the kernel, denying further service to legitimate users.

9. PHProjekt Content Management Module Multiple Remote File Include Vulnerabilities
BugTraq ID: 19628
Remote: Yes
Date Published: 2006-08-21
Relevant URL: http://www.securityfocus.com/bid/19628
Summary:
Multiple remote file-include vulnerabilities affect the Content Management module for PHProjekt because the application fails to properly sanitize user-supplied input before using it in a PHP 'include()' function call.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process.

These issues affect version 0.6.1; earlier versions may also be vulnerable.

10. Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
BugTraq ID: 19664
Remote: No
Date Published: 2006-08-22
Relevant URL: http://www.securityfocus.com/bid/19664
Summary:
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the code which handles support for 'non-hugemem' kernels.

This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.

11. Linux Kernel s/io.c/IO.C Local Denial of Service Vulnerability
BugTraq ID: 19665
Remote: No
Date Published: 2006-08-22
Relevant URL: http://www.securityfocus.com/bid/19665
Summary:
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the direct IO driver.

This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.

This issue affects the Linux kernel 2.6 series prior to 2.6.10.

12. Linux Kernel SCTP_Make_Abort_User Function Buffer Overflow Vulnerability
BugTraq ID: 19666
Remote: Yes
Date Published: 2006-08-22
Relevant URL: http://www.securityfocus.com/bid/19666
Summary:
The Linux kernel is prone to a buffer-overflow vulnerability. This issue is due to the kernel's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

  An attacker can exploit this issue to execute arbitrary codel. Successfully exploiting this issue would cause the complete compromise of the affected computer.

Versions prior to 2.6.17.10 of the 2.6 series and versions prior to 2.4.33.2 of the 2.4 series are vulnerable to this issue.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
1. Linux Audit
http://www.securityfocus.com/archive/91/443621

IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is Sponsored by: SPI Dynamics

ALERT:  "How A Hacker Launches A Feed Injection Attack!" - SPI Dynamics White Paper
Learn the risks associated with Feed Injection of Atom and RSS feeds, including Cross-Site Scripting, Cross-Site Request Forgery, and Keystroke Logging.
Download *FREE* white paper from SPI Dynamics.

https://download.spidynamics.com/1/ad/AJAX.asp?Campaign_ID=70160000000CaO4