SecurityFocus Linux Newsletter #408
[email protected] 25 Sep 2008 22:00:45 -0000
| Newsgroups | gmane.comp.security.news.linux |
|---|---|
| Message-ID | <[email protected]> |
SecurityFocus Linux Newsletter #408
----------------------------------------
Download a FREE trial of HP WebInspect
Application attacks are growing more prevalent. New attacks are in the ne=
ws each day. Now it's time for you to assess your applications and start =
detecting and removing vulnerabilities.=20
HP can help, with a full suite of application security solutions. Get st=
arted today with a complimentary trial download that uses an HP test appl=
ication. Thoroughly analyze today's complex web applications in a runtime=
environment with fast scanning capabilities, broad assessment coverage a=
nd accurate web application scanning results.=20
Download WebInspect now: https://h10078.www1.hp.com/cda/hpdc/navigation.d=
o?action=3DdownloadBinStart&zn=3Dbto&cp=3D54_4012_100__&caid=3D14563&jump=
id=3Dex_r11374_us/en/large/tsg/WebInspect_Eval_Security_Focus/3-1QN6MIF_3=
-UTM2ZJ/20080920&origin_id=3D3-1QN6MIF
SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs
------------------------------------------------------------------
I. FRONT AND CENTER
1.The Boston Trio and the MBTA
2.From Physics to Security
II. LINUX VULNERABILITY SUMMARY
1. Radiance Insecure Temporary File Creation Vulnerabilities
2. Python 'move-faqwiz.sh' Insecure Temporary File Creation Vulner=
ability
3. phpMyAdmin 'server_databases.php' Remote Command Execution Vuln=
erability
4. Parallels H-Sphere 'login.php' Multiple Cross Site Scripting Vu=
lnerabilities
5. ProFTPD Long Command Handling Security Vulnerability
6. strongSwan 'mpz_export()' Remote Denial Of Service Vulnerabilit=
y
7. Multiple Vendors IMAP Servers Denial of Service Vulnerability
8. Mozilla Firefox/SeaMonkey/Thunderbird Multiple Remote Vulnerabi=
lities
9. Mozilla Firefox/SeaMonkey UTF-8 Stack-Based Buffer Overflow Vul=
nerability
III. LINUX FOCUS LIST SUMMARY
IV. UNSUBSCRIBE INSTRUCTIONS
V. SPONSOR INFORMATION
I. FRONT AND CENTER
---------------------
1.The Boston Trio and the MBTA
By Mark Rasch
The annual DEFCON conference in Las Vegas in early August got a bit more =
interesting than usual when three graduate students from the Massachusett=
s Institute of Technology were enjoined from giving a presentation by a C=
ourt in Boston.
http://www.securityfocus.com/columnists/480
2.From Physics to Security
By Federico Biancuzzi
Wietse Venema started out as a physicist, but became interested in the se=
curity of the programs he wrote to control his physics experiments. He we=
nt on to create several well-known network and security tools, including =
the Security Administrator's Tool for Analyzing Networks (SATAN) and The =
Coroner's Toolkit with Dan Farmer. He is also the creator of the popular =
MTA Postfix and TCP Wrapper.=20
http://www.securityfocus.com/columnists/479
II. LINUX VULNERABILITY SUMMARY
------------------------------------
1. Radiance Insecure Temporary File Creation Vulnerabilities
BugTraq ID: 30953
Remote: No
Date Published: 2008-09-24
Relevant URL: http://www.securityfocus.com/bid/30953
Summary:
Radiance creates temporary files in an insecure manner.
An attacker with local access could potentially exploit these issues to p=
erform symbolic-link attacks, overwriting arbitrary files in the context =
of the affected application.=20
Successfully mounting a symlink attack may allow the attacker to delete o=
r corrupt sensitive files, which may result in a denial of service. Other=
attacks may also be possible.
Radiance 3R9 is vulnerable; other versions may also be affected.
2. Python 'move-faqwiz.sh' Insecure Temporary File Creation Vulnerability
BugTraq ID: 31184
Remote: No
Date Published: 2008-09-15
Relevant URL: http://www.securityfocus.com/bid/31184
Summary:
Python creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to per=
form symbolic-link attacks, overwriting arbitrary files in the context of=
the affected application.=20
Successfully mounting a symlink attack may allow the attacker to delete o=
r corrupt sensitive files, which may result in a denial of service. Other=
attacks may also be possible.
Python 2.3.4 is vulnerable; other versions may also be affected.
3. phpMyAdmin 'server_databases.php' Remote Command Execution Vulnerabili=
ty
BugTraq ID: 31188
Remote: Yes
Date Published: 2008-09-15
Relevant URL: http://www.securityfocus.com/bid/31188
Summary:
phpMyAdmin is prone to a vulnerability that attackers can leverage to exe=
cute arbitrary commands. This issue occurs because the application fails =
to adequately sanitize user-supplied input.
Successful attacks can compromise the affected application and possibly t=
he underlying computer.
This issue affects versions prior to phpMyAdmin 2.11.9.1.
4. Parallels H-Sphere 'login.php' Multiple Cross Site Scripting Vulnerabi=
lities
BugTraq ID: 31256
Remote: Yes
Date Published: 2008-09-19
Relevant URL: http://www.securityfocus.com/bid/31256
Summary:
H-Sphere is prone to multiple cross-site scripting vulnerabilities becaus=
e it fails to sufficiently sanitize user-supplied data.
An attacker may leverage these issues to execute arbitrary script code in=
the browser of an unsuspecting user in the context of the affected site.=
This may allow the attacker to steal cookie-based authentication credent=
ials and to launch other attacks.
H-Sphere 3.0.0 Patch 9 and 3.1 Patch 1 are vulnerable; other versions may=
also be affected.
5. ProFTPD Long Command Handling Security Vulnerability
BugTraq ID: 31289
Remote: Yes
Date Published: 2008-09-20
Relevant URL: http://www.securityfocus.com/bid/31289
Summary:
ProFTPD is prone to a security vulnerability that allows attackers to per=
form cross-site request-forgery attacks.
Successful exploits can run arbitrary FTP commands on the server in the c=
ontext of an unsuspecting user's session. This may lead to further attack=
s.
The issue affects ProFTPD 1.3.1; other versions may also be affected.
6. strongSwan 'mpz_export()' Remote Denial Of Service Vulnerability
BugTraq ID: 31291
Remote: Yes
Date Published: 2008-09-18
Relevant URL: http://www.securityfocus.com/bid/31291
Summary:
strongSwan is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to crash the IKEv2 charon daemon, denyin=
g access to legitimate users.
This issue affects strongSwan 4.2.6 and prior versions.
7. Multiple Vendors IMAP Servers Denial of Service Vulnerability
BugTraq ID: 31318
Remote: Yes
Date Published: 2008-09-22
Relevant URL: http://www.securityfocus.com/bid/31318
Summary:
Multiple vendors' IMAP servers are prone to a remote denial-of-service vu=
lnerability caused by an unspecified error when handling IMAP login reque=
sts.
An attacker can exploit this issue to make the affected applications unre=
sponsive, denying service to legitimate users.=20
This issue affects:
University of Washington imapd=20
Carnegie Mellon University Cyrus IMAP Server=20
GNU Mailutils imapd
NOTE: Reports indicate that this issue arises when the affected serves ar=
e used with the Debian Sarge platform. Therefore these issues may affect =
only Debian-specific instances. We will update this BID as more informati=
on emerges.
8. Mozilla Firefox/SeaMonkey/Thunderbird Multiple Remote Vulnerabilities
BugTraq ID: 31346
Remote: Yes
Date Published: 2008-09-23
Relevant URL: http://www.securityfocus.com/bid/31346
Summary:
The Mozilla Foundation has released multiple security advisories specifyi=
ng various vulnerabilities in Firefox 2.0.0.16 and prior versions, Firefo=
x 3.0.1 and prior versions, Thunderbird 2.0.0.16 and prior versions, and =
SeaMonkey 1.1.11 and prior versions.
Exploiting these issues can allow attackers to:
- traverse directories
- obtain potentially sensitive information
- execute scripts with elevated privileges
- execute arbitrary code
- cause denial-of-service conditions
- carry out cross-site scripting attacks
- steal authentication credentials
- force users to download files
- violate the same-origin policy
Other attacks are also possible.
9. Mozilla Firefox/SeaMonkey UTF-8 Stack-Based Buffer Overflow Vulnerabil=
ity
BugTraq ID: 31397
Remote: Yes
Date Published: 2008-09-25
Relevant URL: http://www.securityfocus.com/bid/31397
Summary:
Mozilla Firefox and SeaMonkey are prone to a stack-based buffer-overflow =
vulnerability.
An attacker can exploit this issue to execute arbitrary code within the c=
ontext of the affected application. Failed exploit attempts will result i=
n a denial-of-service condition.
Versions prior to Firefox 2.0.0.17 and prior to SeaMonkey 1.1.12 are vuln=
erable.
NOTE: This issue was originally documented in BID 31346 (Mozilla Firefox=
/SeaMonkey/Thunderbird Multiple Remote Vulnerabilities). It has been give=
n its own record to better document the details.
III. LINUX FOCUS LIST SUMMARY
---------------------------------
IV. UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to linux-secnews-unsubscribe@securi=
tyfocus.com from the subscribed address. The contents of the subject or m=
essage body do not matter. You will receive a confirmation request messag=
e to which you will have to answer. Alternatively you can also visit http=
://www.securityfocus.com/newsletters and unsubscribe via the website.=20
If your email address has changed email [email protected] and a=
sk to be manually removed.
V. SPONSOR INFORMATION
------------------------
Download a FREE trial of HP WebInspect
Application attacks are growing more prevalent. New attacks are in the ne=
ws each day. Now it's time for you to assess your applications and start =
detecting and removing vulnerabilities.=20
HP can help, with a full suite of application security solutions. Get st=
arted today with a complimentary trial download that uses an HP test appl=
ication. Thoroughly analyze today's complex web applications in a runtime=
environment with fast scanning capabilities, broad assessment coverage a=
nd accurate web application scanning results.=20
Download WebInspect now: https://h10078.www1.hp.com/cda/hpdc/navigation.d=
o?action=3DdownloadBinStart&zn=3Dbto&cp=3D54_4012_100__&caid=3D14563&jump=
id=3Dex_r11374_us/en/large/tsg/WebInspect_Eval_Security_Focus/3-1QN6MIF_3=
-UTM2ZJ/20080920&origin_id=3D3-1QN6MIF