SecurityFocus Linux Newsletter #350

SecurityFocus Linux Newsletter #350
----------------------------------------

This Issue is Sponsored by: SPI Dynamics

ALERT: Web Hacking - Attack Scenarios and Examples- White Paper
Learn how to defend against Web Application Attacks with real-world examp=
les of recent hacking methods such as SQL Injection, Cross Site Scripting=
 and Parameter Manipulation. Learn step-by-step vulnerability testing met=
hods for your own Web Applications and guidelines for establishing best a=
dministration and coding practices.
Download *FREE* white paper from SPI Dynamics for a complete guide to pro=
tection!

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=3D70160000000D0=
r2


SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1. Delete This!
       2. Security conferences versus practical knowledge
II.  LINUX VULNERABILITY SUMMARY
       1. Asterisk Skinny Channel Driver Remote Denial of Service Vulnera=
bility
       2. Linux Kernel i965 Chipsets Insecure Batchbuffer Local Privilege=
 Escalation Vulnerability
       3. NETGEAR ReadyNAS RAIDiator Remote SSH Backdoor Vulnerability
       4. WengoPhone SIP Soft Phone Malformed Packet Denial of Service Vu=
lnerability
       5. Drupal Content Construction Kit Nodereference Module Multiple H=
TML-injection Vulnerabilities
       6. Zoidcom Malformed Packet Denial of Service Vulnerability
       7. RndLabs Babo Violent 2 Multiple Vulnerabilities
       8. Cisco VPN Client for Windows Multiple Local Privilege Escalatio=
n Vulnerabilities
       9. Rsync F_Name Off-By-One Buffer Overflow Vulnerability
       10. IBM DB2 Universal Database Multiple Unspecified Vulnerabilitie=
s
       11. Tomboy LD_LIBRARY_PATH Environment Variable Local Privilege Es=
calation Vulnerability
III. LINUX FOCUS LIST SUMMARY
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1. Delete This!
By Mark Rasch
A series of legal events means that companies that have no business reaso=
n to retain documents or records may be compelled to create and retain su=
ch records just so they can become available for discovery.
http://www.securityfocus.com/columnists/450

2. Security conferences versus practical knowledge
By Don Parker
While the training industry as a whole has evolved rather well to suit th=
e needs of their clients, the computer conference - specifically the comp=
uter security conference - has declined in relevance to the everyday sys-=
admin and network security practitioners.
http://www.securityfocus.com/columnists/449


II.  LINUX VULNERABILITY SUMMARY
------------------------------------
1. Asterisk Skinny Channel Driver Remote Denial of Service Vulnerability
BugTraq ID: 25228
Remote: Yes
Date Published: 2007-08-07
Relevant URL: http://www.securityfocus.com/bid/25228
Summary:
Asterisk is prone to a remote denial-of-service vulnerability because the=
 application fails to properly handle certain specially crafted packets.

Exploiting this issue allows remote attackers to cause the application to=
 crash, effectively denying service to legitimate users.=20

These versions are vulnerable:

Asterisk Open Source prior to 1.4.10
AsteriskNOW pre-release prior to beta7
Asterisk Appliance Developer Kit prior to 0.7.0
Asterisk s800i (Asterisk Appliance) prior to 1.0.3

2. Linux Kernel i965 Chipsets Insecure Batchbuffer Local Privilege Escala=
tion Vulnerability
BugTraq ID: 25263
Remote: No
Date Published: 2007-08-09
Relevant URL: http://www.securityfocus.com/bid/25263
Summary:
The Linux kernel is prone to a local privilege-escalation vulnerability.

Exploiting this issue may allow local attackers to gain elevated privileg=
es, facilitating the complete compromise of affected computers.

Versions of Linux kernel prior to 2.6.22.2 are vulnerable to this issue.

3. NETGEAR ReadyNAS RAIDiator Remote SSH Backdoor Vulnerability
BugTraq ID: 25290
Remote: Yes
Date Published: 2007-08-13
Relevant URL: http://www.securityfocus.com/bid/25290
Summary:
NETGEAR ReadyNAS RAIDiator is prone to a remote SSH-backdoor vulnerabilit=
y because remote attackers can readily guess the superuser password.

Successfully exploiting this issue allows remote attackers to gain superu=
ser-level access to affected devices.

This issue affects devices with firmware versions 3.01c1-p1 and 3.01c1-p6=
 installed; other versions may also be affected.

4. WengoPhone SIP Soft Phone Malformed Packet Denial of Service Vulnerabi=
lity
BugTraq ID: 25300
Remote: Yes
Date Published: 2007-08-13
Relevant URL: http://www.securityfocus.com/bid/25300
Summary:
WengoPhone is prone to a denial-of-service vulnerability because the appl=
ication fails to properly handle malformed data.

Successful exploits can allow remote attackers to crash the application, =
resulting in denial-of-service conditions.

This issue affects WengoPhone 2.1; other versions may also be affected.

5. Drupal Content Construction Kit Nodereference Module Multiple HTML-inj=
ection Vulnerabilities
BugTraq ID: 25321
Remote: Yes
Date Published: 2007-08-14
Relevant URL: http://www.securityfocus.com/bid/25321
Summary:
Drupal Content Construction Kit is prone to multiple HTML-injection vulne=
rabilities because it fails to sufficiently sanitize user-supplied input =
before displaying it in dynamically generated content.

An attacker could exploit these vulnerabilities to execute arbitrary scri=
pt code in the browser of an unsuspecting victim in the context of the af=
fected site. This may allow the attacker to steal cookie-based authentica=
tion credentials and to launch other attacks.

6. Zoidcom Malformed Packet Denial of Service Vulnerability
BugTraq ID: 25326
Remote: Yes
Date Published: 2007-08-14
Relevant URL: http://www.securityfocus.com/bid/25326
Summary:
The Zoidcom network library is prone to a denial of service vulnerability=
 when handling malformed packets.=20

An attacker could exploit this to crash a network service that is impleme=
nted with the library.

7. RndLabs Babo Violent 2 Multiple Vulnerabilities
BugTraq ID: 25329
Remote: Yes
Date Published: 2007-08-14
Relevant URL: http://www.securityfocus.com/bid/25329
Summary:
Babo Violent 2 is prone to four vulnerabilities. These vulnerabilities in=
clude a format-string and three denial-of-service issues.=20

Successful attacks could result in execution of arbitrary code or could c=
rash game servers.

8. Cisco VPN Client for Windows Multiple Local Privilege Escalation Vulne=
rabilities
BugTraq ID: 25332
Remote: No
Date Published: 2007-08-15
Relevant URL: http://www.securityfocus.com/bid/25332
Summary:
Cisco VPN Client for Windows is prone to multiple local privilege-escalat=
ion vulnerabilities.

Successfully exploiting these issues allows attackers with local, interac=
tive access to affected computers to gain SYSTEM-level privileges. This f=
acilitates the complete compromise of affected computers.

Versions prior to 4.8.02.0010 and 5.0.01.0600 of Cisco VPN Client for the=
 Microsoft Windows platform are vulnerable to these issues.

These issues are tracked as Cisco Bug IDs CSCse89550 and CSCsj00785.

9. Rsync F_Name Off-By-One Buffer Overflow Vulnerability
BugTraq ID: 25336
Remote: Yes
Date Published: 2007-08-15
Relevant URL: http://www.securityfocus.com/bid/25336
Summary:
The rsync utility is prone to an off-by-one buffer-overflow vulnerability=
. This issue is due to a failure of the application to properly bounds-ch=
eck user-supplied input.

Successfully exploiting this issue may allow arbitrary code-execution in =
the context of the affected utility.

Rsync version 2.6.9 is affected by this issue; other versions may also be=
 vulnerable.

10. IBM DB2 Universal Database Multiple Unspecified Vulnerabilities
BugTraq ID: 25339
Remote: Yes
Date Published: 2007-08-16
Relevant URL: http://www.securityfocus.com/bid/25339
Summary:
IBM DB2 is prone to multiple vulnerabilities that may allow an attacker t=
o carry out a variety of attacks.  It is possible that some of these issu=
es may permit an attacker to completely compromise a vulnerable computer.

These issues affect DB2 9.1 and 8 running on all supported platforms.

11. Tomboy LD_LIBRARY_PATH Environment Variable Local Privilege Escalatio=
n Vulnerability
BugTraq ID: 25341
Remote: No
Date Published: 2007-08-16
Relevant URL: http://www.securityfocus.com/bid/25341
Summary:
Tomboy is prone to a local privilege-escalation vulnerability.

Exploiting this issue allows local attacker to execute arbitrary code wit=
h the privileges of the user running the affected application.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to linux-secnews-unsubscribe@securi=
tyfocus.com from the subscribed address. The contents of the subject or m=
essage body do not matter. You will receive a confirmation request messag=
e to which you will have to answer. Alternatively you can also visit http=
://www.securityfocus.com/newsletters and unsubscribe via the website.=20

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This Issue is Sponsored by: SPI Dynamics

ALERT: Web Hacking - Attack Scenarios and Examples- White Paper
Learn how to defend against Web Application Attacks with real-world examp=
les of recent hacking methods such as SQL Injection, Cross Site Scripting=
 and Parameter Manipulation. Learn step-by-step vulnerability testing met=
hods for your own Web Applications and guidelines for establishing best a=
dministration and coding practices.
Download *FREE* white paper from SPI Dynamics for a complete guide to pro=
tection!

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=3D70160000000D0=
r2