SecurityFocus Linux Newsletter #369

SecurityFocus Linux Newsletter #369
----------------------------------------

This issue is Sponsored by: Insight24

Improve Security Through Proactive Network Assessment & Risk Analysis

In this Forrester Research webcast, Dr. Chenxi Wang, Principal Analyst=20
for Security and Risk Management, discusses how proactive network=20
assessment and risk analysis can decrease the number and intensity of=20
security threats. She will also outline key metrics you can use to=20
measure the effectiveness of your vulnerability management programs.=20

Click on the link below to view this on-demand webcast today!

http://showcase.insight24.com/?ForresterSecurityFocus



SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1.Real Flaws in Virtual Worlds
       2.Copyrights and Wrongs
II.  LINUX VULNERABILITY SUMMARY
       1. ClamAV 'libclamav/pe.c' MEW Packed PE File Integer Overflow Vul=
nerability
       2. Retired: Adobe Flash Player Multiple Security Vulnerabilities
       3. Adobe Flash Player DNS Rebinding Vulnerability
       4. libexif Image Tag Remote Integer Overflow Vulnerability
       5. Linux Kernel IPv6 Hop-By-Hop Header Remote Denial of Service Vu=
lnerability
       6. ClamAV 'mspack.c' Off-By-One Buffer Overflow Vulnerability
       7. Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerabil=
ity
       8. Adobe Flash Player JPG Header Remote Heap Based Buffer Overflow=
 Vulnerability
       9. Adobe Flash Player ActiveX Control 'navigateToURL' API Cross Do=
main Scripting Vulnerability
       10. Adobe Flash Player Unspecified Privilege-Escalation Vulnerabil=
ity
       11. Adobe Flash Player Policy File Cross Domain Security Bypass Vu=
lnerability
       12. Adobe Flash Player HTTP Response Splitting Vulnerability
       13. libexif Image Tag Remote Denial Of Service Vulnerability
       14. Bitflu StorageFarabDb Module '.torrent' File Handling Security=
 Bypass Vulnerability
III. LINUX FOCUS LIST SUMMARY
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1.Real Flaws in Virtual Worlds
By Federico Biancuzzi
Massively multiplayer online role playing games (MMORPGs), such as World =
of Warcraft, have millions of subscribers interacting online, which makes=
 security tricky business.=20
http://www.securityfocus.com/columnists/461

2.Copyrights and Wrongs
By Mark Rasch
On October 1, 2007, Jammie Thomas -- a single mother living in Brainerd, =
Minnesota -- was sued in civil court for copyright infringement by the Re=
cording Industry Association of America. Three days later, the jury retur=
ned the verdict; Ms. Thomas was liable for willfully infringing the copyr=
ights on 24 songs. The fine: $222,000.=20
http://www.securityfocus.com/columnists/460


II.  LINUX VULNERABILITY SUMMARY
------------------------------------
1. ClamAV 'libclamav/pe.c' MEW Packed PE File Integer Overflow Vulnerabil=
ity
BugTraq ID: 26927
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26927
Summary:
ClamAV is prone to an integer-overflow vulnerability because it fails to =
properly verify user-supplied data.=20

Successful exploits of this vulnerability can allow remote attackers to e=
xecute arbitrary machine code in the context of applications using the 'l=
ibclamav' library. Failed exploits may crash the application.

ClamAV 0.91.2 is vulnerable to this issue; other versions may also be aff=
ected.

2. Retired: Adobe Flash Player Multiple Security Vulnerabilities
BugTraq ID: 26929
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26929
Summary:
Adobe Flash Player is prone to multiple security vulnerabilities.

The following individual records have been created to document these vuln=
erabilities:=20

26960 Adobe Flash Player ActiveX Control 'navigateToURL' API Cross Domain=
 Scripting Vulnerability
26951 Adobe Flash Player JPG Header Remote Heap Based Buffer Overflow Vul=
nerability
26949 Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
26965 Adobe Flash Player Unspecified Privilege-Escalation Vulnerability
26969 Adobe Flash Player HTTP Response Splitting Vulnerability
26966 Adobe Flash Player Policy File Cross Domain Security Bypass Vulnera=
bility=20
=20
These issues affect Adobe Flash Player 9.0.48.0, 8.0.35.0, 7.0.70.0 and p=
rior versions.

3. Adobe Flash Player DNS Rebinding Vulnerability
BugTraq ID: 26930
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26930
Summary:
Adobe Flash Player is prone to a DNS rebinding vulnerability that allows =
remote attackers to establish arbitrary TCP sessions.=20
=20
An attacker can exploit this issue by enticing an unsuspecting victim to =
view a malicious SWF file.=20
=20
Successfully exploiting this issue allows the attacker to bypass the appl=
ication's same-origin policy and set up connections to services on arbitr=
ary computers. This may lead to other attacks.

4. libexif Image Tag Remote Integer Overflow Vulnerability
BugTraq ID: 26942
Remote: Yes
Date Published: 2007-12-19
Relevant URL: http://www.securityfocus.com/bid/26942
Summary:
The libexif library is prone to an integer-overflow vulnerability because=
 the software fails to ensure that integer values are not overrun.

Successful exploits of this vulnerability allow remote attackers to execu=
te arbitrary machine code in the context of an application using the vuln=
erable library. Failed attempts will likely result in denial-of-service c=
onditions.

5. Linux Kernel IPv6 Hop-By-Hop Header Remote Denial of Service Vulnerabi=
lity
BugTraq ID: 26943
Remote: Yes
Date Published: 2007-12-19
Relevant URL: http://www.securityfocus.com/bid/26943
Summary:
The Linux kernel is prone to a remote denial-of-service vulnerability bec=
ause it fails to adequately validate specially crafted IPv6 'Hop-By-Hop' =
headers.

Attackers can exploit this issue to cause a kernel panic, denying service=
 to legitimate users.

6. ClamAV 'mspack.c' Off-By-One Buffer Overflow Vulnerability
BugTraq ID: 26946
Remote: Yes
Date Published: 2007-12-19
Relevant URL: http://www.securityfocus.com/bid/26946
Summary:
ClamAV is prone to a buffer-overflow vulnerability because it fails to pr=
operly bounds-check user-supplied input before copying it to insufficient=
ly sized memory buffers.

Successful exploits of this vulnerability can allow remote attackers to e=
xecute arbitrary machine code in the context of applications using the 'l=
ibclamav' library. Failed exploits may crash the application.

ClamAV 0.91.2 is vulnerable to this issue; other versions may also be aff=
ected.

7. Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
BugTraq ID: 26949
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26949
Summary:
Adobe Flash Player is prone to a cross-site scripting vulnerability becau=
se the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal cookie-based authentication credentials a=
nd launch other attacks.

8. Adobe Flash Player JPG Header Remote Heap Based Buffer Overflow Vulner=
ability
BugTraq ID: 26951
Remote: Yes
Date Published: 2007-12-19
Relevant URL: http://www.securityfocus.com/bid/26951
Summary:
Adobe Flash Player is prone to a remote heap-based buffer-overflow vulner=
ability because the application fails to use consistent signedness when h=
andling user-supplied input.
=20
An attacker can exploit this issue to execute arbitrary code with the pri=
vileges of a user running the application. Failed exploit attempts will l=
ikely cause denial-of-service conditions.

This issue affects Adobe Flash Player 9.0.48.0, 8.0.35.0, 7.0.70.0, and p=
rior versions.

NOTE: This issue was originally covered by BID 26929 (Adobe Flash Player =
Multiple Security Vulnerabilities).

9. Adobe Flash Player ActiveX Control 'navigateToURL' API Cross Domain Sc=
ripting Vulnerability
BugTraq ID: 26960
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26960
Summary:
The Adobe Flash Player ActiveX control is prone to a cross-domain scripti=
ng vulnerability.

An attacker may leverage this issue to execute arbitrary JavaScript in th=
e context of another domain.=20

This issue affects Adobe Flash Player 9.0.48.0, 8.0.35.0, and prior versi=
ons.

NOTE: This issue was previously disclosed in BID 26929 (Adobe Flash Playe=
r Multiple Security Vulnerabilities) but has been assigned its own BID be=
cause new technical details are available.

10. Adobe Flash Player Unspecified Privilege-Escalation Vulnerability
BugTraq ID: 26965
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26965
Summary:
Adobe Flash Player is prone to a vulnerability that allows attackers to g=
ain elevated privileges on affected computers.

Very few technical details are currently available. We will update this B=
ID as more information emerges.

NOTE: This issue occurs only when the application is running on a Linux o=
perating system.

Versions prior to Adobe Flash Player 9.0.115.0 are vulnerable.

This issue was previously covered by  BID 26929 (Adobe Flash Player Multi=
ple Security Vulnerabilities).

11. Adobe Flash Player Policy File Cross Domain Security Bypass Vulnerabi=
lity
BugTraq ID: 26966
Remote: Yes
Date Published: 2007-12-18
Relevant URL: http://www.securityfocus.com/bid/26966
Summary:
The Adobe Flash Player is prone to a cross-domain security-bypass vulnera=
bility.

An attacker can exploit this issue to connect to arbitrary hosts on affec=
ted computers. This may allow the application to perform generic TCP requ=
ests to determine what services are running on the affected computer.

This issue affects Adobe Flash Player 9.0.48.0, 8.0.35.0. 7.0.70.0, and p=
rior versions.

NOTE: This issue was previously disclosed in BID 26929 (Adobe Flash Playe=
r Multiple Security Vulnerabilities) but has been assigned to this BID be=
cause of new technical details.

12. Adobe Flash Player HTTP Response Splitting Vulnerability
BugTraq ID: 26969
Remote: Yes
Date Published: 2007-12-20
Relevant URL: http://www.securityfocus.com/bid/26969
Summary:
Adobe Flash Player is prone to an HTTP response-splitting vulnerability b=
ecause it fails to adequately sanitize user-supplied input.

A remote attacker can exploit this vulnerability to influence or misrepre=
sent how web content is served, cached, or interpreted. This could aid in=
 various attacks that try to entice client users into a false sense of tr=
ust.

This issue affects Adobe Flash Player 9.0.48.0, 8.0.35.0, and 7.0.70.0  a=
nd prior versions.

NOTE: This issue was previously disclosed in BID 26929 (Adobe Flash  Play=
er Multiple Security Vulnerabilities).

13. libexif Image Tag Remote Denial Of Service Vulnerability
BugTraq ID: 26976
Remote: Yes
Date Published: 2007-12-19
Relevant URL: http://www.securityfocus.com/bid/26976
Summary:
The libexif library is prone to a denial-of-service vulnerability because=
 of an infinite-recursion error.

Exploiting this issue allows remote attackers to cause denial-of-service =
conditions in the context of an application using the vulnerable library.

14. Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass=
 Vulnerability
BugTraq ID: 27043
Remote: Yes
Date Published: 2007-12-26
Relevant URL: http://www.securityfocus.com/bid/27043
Summary:
Bitflu is prone to a security-bypass vulnerability.

An attacker can exploit this issue to append to or create arbitrary files=
.

This issue affects versions of Bitflu prior to 0.42.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to linux-secnews-unsubscribe@securi=
tyfocus.com from the subscribed address. The contents of the subject or m=
essage body do not matter. You will receive a confirmation request messag=
e to which you will have to answer. Alternatively you can also visit http=
://www.securityfocus.com/newsletters and unsubscribe via the website.=20

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is Sponsored by: Insight24

Improve Security Through Proactive Network Assessment & Risk Analysis

In this Forrester Research webcast, Dr. Chenxi Wang, Principal Analyst=20
for Security and Risk Management, discusses how proactive network=20
assessment and risk analysis can decrease the number and intensity of=20
security threats. She will also outline key metrics you can use to=20
measure the effectiveness of your vulnerability management programs.=20

Click on the link below to view this on-demand webcast today!

http://showcase.insight24.com/?ForresterSecurityFocus