SecurityFocus Linux Newsletter #429

SecurityFocus Linux Newsletter #429
----------------------------------------

This issue is sponsored by Qualys

Choosing a solution for Vulnerability Management (VM) is a critical step =
toward protecting your organization's network and data. Without proven, a=
utomated technology for precise detection and remediation, no network can=
 withstand the daily onslaught of new vulnerabilities that threaten secur=
ity.=20

http://dinclinx.com/Redirect.aspx?36;4164;35;189;0;6;259;456696438e431ea1


SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1. Free Market Filtering
       2. Don't Blame the Browser
II.  LINUX VULNERABILITY SUMMARY
       1. Adobe Flash Player Invalid Object Reference Remote Code Executi=
on Vulnerability
       2. Adobe Flash Player Unspecified Information Disclosure Vulnerabi=
lity
       3. Adobe Flash Player Unspecified Remote Denial of Service Vulnera=
bility
       4. Linux Kernel Cloned Process 'CLONE_PARENT' Local Origin Validat=
ion Weakness
       5. OpenSC PKCS#11 Implementation Unauthorized Access Vulnerability
       6. PHP 5.2.8 and Prior Versions Multiple Vulnerabilities
       7. Avahi 'avahi-core/server.c' Multicast DNS Denial Of Service Vul=
nerability
       8. Linux Kernel 'seccomp' System Call Security Bypass Vulnerabilit=
y
       9. Linux Kernel Audit System 'audit_syscall_entry()' System Call S=
ecurity Bypass Vulnerability
       10. NovaStor NovaNET 'DtbClsLogin()' Remote Stack Buffer Overflow =
Vulnerability
       11. cURL/libcURL HTTP 'Location:' Redirect Security Bypass Vulnera=
bility
       12. ZABBIX 'locales.php' Local File Include and Remote Code Execut=
ion Vulnerability
       13. Ubuntu network-manager-applet Permission Enforcement Multiple =
Local Vulnrabilities
       14. Arno's IPTables Firewall Script Restart Security Bypass Vulner=
ability
       15. Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009 -07 -08 -09 an=
d -11 Multiple Remote Vulnerabilities
III. LINUX FOCUS LIST SUMMARY
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1.Free Market Filtering
By Mark Rasch
The Australian government is considering requiring that Internet service =
providers in that country install filters which would prevent citizens fr=
om accessing tens of thousands of sites that contain "objectionable" mate=
rial.=20
http://www.securityfocus.com/columnists/493

2.Don't Blame the Browser
Melih Abdulhayoglu
There was a time when most diseases were fatal for humans. Intense study =
and research helped doctors manage diseases better, and subsequently even=
 prevent them altogether.=20
http://www.securityfocus.com/columnists/492


II.  LINUX VULNERABILITY SUMMARY
------------------------------------
1. Adobe Flash Player Invalid Object Reference Remote Code Execution Vuln=
erability
BugTraq ID: 33880
Remote: Yes
Date Published: 2009-02-24
Relevant URL: http://www.securityfocus.com/bid/33880
Summary:
Adobe Flash Player is prone to a remote code-execution vulnerability.

 An attacker can exploit this issue to execute arbitrary code with the pr=
ivileges of the user running the application.  Failed exploit attempts wi=
ll likely crash the application, denying service to legitimate users.

Versions prior to Flash Player 10.0.12.36 are vulnerable.

2. Adobe Flash Player Unspecified Information Disclosure Vulnerability
BugTraq ID: 33889
Remote: Yes
Date Published: 2009-02-24
Relevant URL: http://www.securityfocus.com/bid/33889
Summary:
Adobe Flash Player is prone to an information-disclosure vulnerability.

Successful exploits will allow an attacker to obtain potentially sensitiv=
e information that may be used to elevate privileges.

This issue affects Flash Player on Linux-based operating systems only.

3. Adobe Flash Player Unspecified Remote Denial of Service Vulnerability
BugTraq ID: 33890
Remote: Yes
Date Published: 2009-02-24
Relevant URL: http://www.securityfocus.com/bid/33890
Summary:
Adobe Flash Player is prone to a remote denial-of-service vulnerability b=
ecause it fails to properly validate user-supplied input.

Exploiting this issue allows remote attackers to crash the application an=
d possibly to execute code, but this has not been confirmed.

Versions prior to Flash Player 10.0.22.87 are vulnerable.

4. Linux Kernel Cloned Process 'CLONE_PARENT' Local Origin Validation Wea=
kness
BugTraq ID: 33906
Remote: No
Date Published: 2009-02-25
Relevant URL: http://www.securityfocus.com/bid/33906
Summary:
The Linux kernel is prone to an origin-validation weakness when dealing w=
ith signal handling.

This weakness occurs when a privileged process calls attacker-supplied pr=
ocesses as children. Attackers may exploit this to send arbitrary signals=
 to the privileged parent process.

 A local attacker may exploit this issue to kill vulnerable processes, re=
sulting in a denial-of-service condition. In some cases, other attacks ma=
y also be possible.

Linux kernel 2.6.28 is vulnerable; other versions may also be affected.

5. OpenSC PKCS#11 Implementation Unauthorized Access Vulnerability
BugTraq ID: 33922
Remote: No
Date Published: 2009-02-26
Relevant URL: http://www.securityfocus.com/bid/33922
Summary:
OpenSC is prone to an unauthorized-access vulnerability.

Attackers can exploit this issue to gain unauthorized access to private d=
ata, which may lead to other attacks.=20

Versions prior to OpenSC 0.11.7 are vulnerable.

6. PHP 5.2.8 and Prior Versions Multiple Vulnerabilities
BugTraq ID: 33927
Remote: Yes
Date Published: 2009-02-26
Relevant URL: http://www.securityfocus.com/bid/33927
Summary:
PHP is prone to multiple security vulnerabilities. Successful exploits co=
uld allow an attacker to cause a denial-of-service condition. An unspecif=
ied issue with an unknown impact was also reported.

These issues affect PHP 5.2.8 and prior versions.

7. Avahi 'avahi-core/server.c' Multicast DNS Denial Of Service Vulnerabil=
ity
BugTraq ID: 33946
Remote: Yes
Date Published: 2009-03-02
Relevant URL: http://www.securityfocus.com/bid/33946
Summary:
Avahi is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to crash the affected applicatio=
n, denying further service to legitimate users.

Avahi 0.6.23 is vulnerable; other versions may also be affected.

8. Linux Kernel 'seccomp' System Call Security Bypass Vulnerability
BugTraq ID: 33948
Remote: No
Date Published: 2009-03-02
Relevant URL: http://www.securityfocus.com/bid/33948
Summary:
The Linux kernel is prone to a local security-bypass vulnerability.

A local attacker may be able to exploit this issue to bypass access contr=
ol and make restricted system calls, which may result in an elevation of =
privileges.

9. Linux Kernel Audit System 'audit_syscall_entry()' System Call Security=
 Bypass Vulnerability
BugTraq ID: 33951
Remote: No
Date Published: 2009-03-02
Relevant URL: http://www.securityfocus.com/bid/33951
Summary:
The Linux kernel is prone to a local security-bypass vulnerability.

A local attacker may be able to exploit this issue to bypass audit mechan=
isms imposed on system calls. This may allow malicious behavior to escape=
 notice.

10. NovaStor NovaNET 'DtbClsLogin()' Remote Stack Buffer Overflow Vulnera=
bility
BugTraq ID: 33954
Remote: Yes
Date Published: 2009-03-02
Relevant URL: http://www.securityfocus.com/bid/33954
Summary:
NovaStor NovaNET is prone to a stack-based buffer-overflow vulnerability =
because it fails to adequately bounds-check user-supplied data before cop=
ying it to an insufficiently sized buffer.

Attackers can exploit this issue to execute arbitrary code within the con=
text of the affected application or cause a denial-of-service condition.

NovaNET 12 is vulnerable; other versions may also be affected.

11. cURL/libcURL HTTP 'Location:' Redirect Security Bypass Vulnerability
BugTraq ID: 33962
Remote: Yes
Date Published: 2009-03-03
Relevant URL: http://www.securityfocus.com/bid/33962
Summary:
cURL/libcURL is prone to a security-bypass vulnerability.=20

Remote attackers can exploit this issue to bypass certain security restri=
ctions and carry out various attacks.

This issue affects cURL/libcURL 5.11 through 7.19.3. Other versions may a=
lso be vulnerable.

12. ZABBIX 'locales.php' Local File Include and Remote Code Execution Vul=
nerability
BugTraq ID: 33965
Remote: Yes
Date Published: 2009-03-03
Relevant URL: http://www.securityfocus.com/bid/33965
Summary:
ZABBIX is prone to a local-file include vulnerability and a remote code-e=
xecution vulnerability that occurs in the front end web interface.

Attackers can exploit these issues to execute arbitrary code within the c=
ontext of the webserver or gain access to sensitive information. Other at=
tacks are also possible.=20

ZABBIX 1.6.2 is vulnerable; prior versions may also be affected.

13. Ubuntu network-manager-applet Permission Enforcement Multiple Local V=
ulnrabilities
BugTraq ID: 33966
Remote: No
Date Published: 2009-03-03
Relevant URL: http://www.securityfocus.com/bid/33966
Summary:
The 'network-manager-applet' package is prone to multiple local vulnerabi=
lities because the software fails to properly enforce permissions.=20

Local attackers can exploit these issue to perform dbus queries to view n=
etwork connection passwords and pre-shared keys and to modify or delete n=
etwork connections. Other attacks may also be possible.

14. Arno's IPTables Firewall Script Restart Security Bypass Vulnerability
BugTraq ID: 33981
Remote: Yes
Date Published: 2009-03-04
Relevant URL: http://www.securityfocus.com/bid/33981
Summary:
Arno's IPTables Firewall Script is prone to a security-bypass vulnerabili=
ty because it fails to properly restrict network traffic following a rest=
art of the application.

An attacker can exploit this issue to bypass intended security restrictio=
ns and send network packets to an affected computer.

Versions prior to Arno's IPTables Firewall Script 1.9.0b are vulnerable.

15. Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009 -07 -08 -09 and -11 M=
ultiple Remote Vulnerabilities
BugTraq ID: 33990
Remote: Yes
Date Published: 2009-03-04
Relevant URL: http://www.securityfocus.com/bid/33990
Summary:
The Mozilla Foundation has released multiple security advisories specifyi=
ng various vulnerabilities in Firefox, Thunderbird, and SeaMonkey.

Attackers can exploit these issues to bypass same-origin restrictions, ob=
tain potentially sensitive information, and execute arbitrary script code=
 with elevated privileges; other attacks are also possible.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to linux-secnews-unsubscribe@securi=
tyfocus.com from the subscribed address. The contents of the subject or m=
essage body do not matter. You will receive a confirmation request messag=
e to which you will have to answer. Alternatively you can also visit http=
://www.securityfocus.com/newsletters and unsubscribe via the website.=20

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is sponsored by Qualys

Choosing a solution for Vulnerability Management (VM) is a critical step =
toward protecting your organization's network and data. Without proven, a=
utomated technology for precise detection and remediation, no network can=
 withstand the daily onslaught of new vulnerabilities that threaten secur=
ity.=20

http://dinclinx.com/Redirect.aspx?36;4164;35;189;0;6;259;456696438e431ea1