SecurityFocus Microsoft Newsletter #360

SecurityFocus Microsoft Newsletter #360
----------------------------------------

This Issue is Sponsored by:Techmentor
_______________________

TechMentor - Las Vegas - October 15 - 19
Join your fellow systems administrators and IT managers at the Rio Hotel =
& Casino in Vegas for a week of in-depth technical training. TechMentor w=
ill give you the tools and techniques to help you get the most out of you=
r network. Register now!
http://techmentorevents.com/


SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1.Windows Anti-Debug Reference
       2.VoIP Hopping: A Method of Testing VoIP security or Voice VLANs
II.  MICROSOFT VULNERABILITY SUMMARY
       1.  Privatefirewall SSDT Hooks Multiple Local Vulnerabilities
       2. Online Armor Personal Firewall SSDT Hooks Multiple Local Vulner=
abilities
       3. Ghost Security Suite SSDT Hooks Multiple Local Vulnerabilities
       4. G DATA Internet Security SSDT Hooks Multiple Local Vulnerabilit=
ies
       5. Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulne=
rability
       6. WinImage Image Files Denial of Service and Directory Traversal =
Vulnerabilities
       7. Media Player Classic Remote Malformed Video File Remote Denial =
of Service Vulnerability
       8. COWON America jetCast Server Remote Denial Of Service Vulnerabi=
lity
       9. WinSCP URL Protocol Handler Arbitrary File Access Vulnerability
       10. Media Player Classic Malformed AVI Header Multiple Remote Vuln=
erabilities
       11. SWsoft Plesk PLESKSESSID Parameter Multiple SQL Injection Vuln=
erabilities
       12. Microsoft Visual Studio PDWizard.ocx ActiveX Control Multiple =
Remote Vulnerabilities
       13. Microsoft Visual Studio VB To VSI Support Library ActiveX Arbi=
trary File Overwrite Vulnerability
       14. CellFactor Revolution Multiple Remote Code Execution Vulnerabi=
lities
       15. Microsoft Windows Services for UNIX Local Privilege Escalation=
 Vulnerability
       16. Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Sta=
ck Buffer Overflow Vulnerability
III. MICROSOFT FOCUS LIST SUMMARY
       1. SecurityFocus Microsoft Newsletter #359
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1.Windows Anti-Debug Reference
By Nicolas Falliere
This paper classifies and presents several anti-debugging techniques used=
 on Windows NT-based operating systems.=20
http://www.securityfocus.com/infocus/1893

2.VoIP Hopping: A Method of Testing VoIP security or Voice VLANs
By Jason Ostrom and John Kindervag
Testing Protection Controls on a VoIP Network - A Case Study and Method
http://www.securityfocus.com/infocus/1892


II.  MICROSOFT VULNERABILITY SUMMARY
------------------------------------
1.  Privatefirewall SSDT Hooks Multiple Local Vulnerabilities
BugTraq ID: 25712
Remote: No
Date Published: 2007-09-18
Relevant URL: http://www.securityfocus.com/bid/25712
Summary:
Privatefirewall is prone to multiple local vulnerabilities.

Exploiting these vulnerabilities allows local attackers to crash affected=
 computers, denying service to legitimate users. Attackers might also be =
able to gain elevated privileges by executing arbitrary machine code in t=
he context of the kernel, but this has not been confirmed.

Privatefirewall 5.0.14.2 is vulnerable; other versions may also be affect=
ed.

2. Online Armor Personal Firewall SSDT Hooks Multiple Local Vulnerabiliti=
es
BugTraq ID: 25711
Remote: No
Date Published: 2007-09-18
Relevant URL: http://www.securityfocus.com/bid/25711
Summary:
Online Armor Personal Firewall is prone to multiple local vulnerabilities=
.

Exploiting these vulnerabilities allows local attackers to crash affected=
 computers, denying service to legitimate users. Attackers might also be =
able to gain elevated privileges by executing arbitrary machine code in t=
he context of the kernel, but this has not been confirmed.

Online Armor Personal Firewall 2.0.1.125 is vulnerable; other versions ma=
y also be affected.

3. Ghost Security Suite SSDT Hooks Multiple Local Vulnerabilities
BugTraq ID: 25709
Remote: No
Date Published: 2007-09-18
Relevant URL: http://www.securityfocus.com/bid/25709
Summary:
Ghost Security Suite is prone to multiple local vulnerabilities.

Exploiting these vulnerabilities allows local attackers to crash affected=
 computers, denying service to legitimate users. Attackers might also be =
able to gain elevated privileges by executing arbitrary machine code in t=
he context of the kernel, but this has not been confirmed.

Ghost Security Suite beta 1.110 and alpha 1.200 are vulnerable; other ver=
sions may also be affected.

4. G DATA Internet Security SSDT Hooks Multiple Local Vulnerabilities
BugTraq ID: 25705
Remote: No
Date Published: 2007-09-18
Relevant URL: http://www.securityfocus.com/bid/25705
Summary:
G DATA Internet Security is prone to multiple local vulnerabilities.

Exploiting these vulnerabilities allows local attackers to crash affected=
 computers, denying service to legitimate users. Attackers might also be =
able to gain elevated privileges by executing arbitrary machine code in t=
he context of the kernel, but this has not been confirmed.

G DATA Internet Security 2007 is vulnerable; other versions may also be a=
ffected.

5. Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerabilit=
y
BugTraq ID: 25697
Remote: Yes
Date Published: 2007-09-14
Relevant URL: http://www.securityfocus.com/bid/25697
Summary:
The CFileFind::FindFile method in the MFC library for Microsoft Windows i=
s prone to a buffer-overflow vulnerability because the method fails to pe=
rform adequate boundary checks of user-supplied input.

Successfully exploiting this issue may allow attackers to execute arbitra=
ry code in the context of applications that use the vulnerable method.

The MFC library included with Microsoft Windows XP SP2 is affected; other=
 versions may also be affected.

6. WinImage Image Files Denial of Service and Directory Traversal Vulnera=
bilities
BugTraq ID: 25687
Remote: Yes
Date Published: 2007-09-17
Relevant URL: http://www.securityfocus.com/bid/25687
Summary:
WinImage is prone to a denial-of-service vulnerability and a directory-tr=
aversal vulnerability because the application fails to adequately sanitiz=
e user-supplied input.

Attackers can exploit these issues to cause a denial of service or to wri=
te malicious files to arbitrary directories.

WinImage 8.0 and 8.10 are vulnerable; other versions may also be affected=
.

7. Media Player Classic Remote Malformed Video File Remote Denial of Serv=
ice Vulnerability
BugTraq ID: 25686
Remote: Yes
Date Published: 2007-09-17
Relevant URL: http://www.securityfocus.com/bid/25686
Summary:
Media Player Classic is prone to a remote denial-of-service vulnerability=
 because the application fails to handle malformed video files.

Remote attackers can exploit this issue to crash the application. Reports=
 indicate that attackers may also be able to execute code, but this has n=
ot been confirmed.

Media Player Classic 6.4.9.1 and prior versions are vulnerable.

8. COWON America jetCast Server Remote Denial Of Service Vulnerability
BugTraq ID: 25660
Remote: Yes
Date Published: 2007-09-13
Relevant URL: http://www.securityfocus.com/bid/25660
Summary:
jetCast Server is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the server, denying access to l=
egitimate users.

jetCast Server 2 is reported vulnerable; other versions may also be affec=
ted.

9. WinSCP URL Protocol Handler Arbitrary File Access Vulnerability
BugTraq ID: 25655
Remote: Yes
Date Published: 2007-09-13
Relevant URL: http://www.securityfocus.com/bid/25655
Summary:
WinSCP is prone to a vulnerability that lets an attacker upload arbitrary=
 files to a victim's computer or to download arbitrary files from the vic=
tim's computer in the context of the vulnerable application.

This issue affects  versions prior to WinSCP 4.0.4.

10. Media Player Classic Malformed AVI Header Multiple Remote Vulnerabili=
ties
BugTraq ID: 25650
Remote: Yes
Date Published: 2007-09-12
Relevant URL: http://www.securityfocus.com/bid/25650
Summary:
Media Player Classic (MPC) is prone to multiple remote vulnerabilities, i=
ncluding a heap-based buffer-overflow issue and an integer-overflow issue=
, when handling malformed AVI files.=20

An attacker can exploit these issues to execute arbitrary code with the p=
rivileges of the user running the affected application. Failed exploit at=
tempts will result in a denial-of-service condition.

Media Player Classic 6.4.9.0 is vulnerable; other versions may also be af=
fected.

11. SWsoft Plesk PLESKSESSID Parameter Multiple SQL Injection Vulnerabili=
ties
BugTraq ID: 25646
Remote: Yes
Date Published: 2007-09-12
Relevant URL: http://www.securityfocus.com/bid/25646
Summary:
Plesk is prone to multiple SQL-injection vulnerabilities because it fails=
 to sufficiently sanitize user-supplied data before using it in SQL queri=
es.

Exploiting these issues could allow an attacker to compromise the applica=
tion, access or modify data, or exploit latent vulnerabilities in the und=
erlying database.

Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Microsoft Windows are vulnerable=
; other versions running on different platforms may also be affected.

12. Microsoft Visual Studio PDWizard.ocx ActiveX Control Multiple Remote =
Vulnerabilities
BugTraq ID: 25638
Remote: Yes
Date Published: 2007-09-11
Relevant URL: http://www.securityfocus.com/bid/25638
Summary:
Microsoft Visual Studio is prone to multiple remote vulnerabilities, incl=
uding two remote command-execution issues and four unspecified vulnerabil=
ities.=20

An attacker can exploit the remote command-execution vulnerabilities to e=
xecute arbitrary commands with the privileges of the currently logged-in =
user.=20

Very little information is known about the four unspecified issues. We wi=
ll update this BID as more information emerges.

These issues affect Microsoft Visual Studio 6.0.0; other versions may als=
o be affected.

13. Microsoft Visual Studio VB To VSI Support Library ActiveX Arbitrary F=
ile Overwrite Vulnerability
BugTraq ID: 25635
Remote: Yes
Date Published: 2007-09-11
Relevant URL: http://www.securityfocus.com/bid/25635
Summary:
Microsoft Visual Studio VB To VSI Support Library ActiveX Control is pron=
e to a vulnerability that lets attackers overwrite arbitrary files.

An attacker can exploit this issue to overwrite arbitrary files with loca=
l data. This will likely result in denial-of-service conditions; other at=
tacks may also be possible.

14. CellFactor Revolution Multiple Remote Code Execution Vulnerabilities
BugTraq ID: 25625
Remote: Yes
Date Published: 2007-09-10
Relevant URL: http://www.securityfocus.com/bid/25625
Summary:
CellFactor: Revolution is prone to multiple remote code-execution vulnera=
bilities, including a buffer-overflow issue and a format-string issue.=20

Successfully exploiting these issues will allow an attacker to execute ar=
bitrary code within the context of the affected application or to crash t=
he application.

CellFactor: Revolution 1.03 is vulnerable; other versions may also be aff=
ected.

15. Microsoft Windows Services for UNIX Local Privilege Escalation Vulner=
ability
BugTraq ID: 25620
Remote: No
Date Published: 2007-09-11
Relevant URL: http://www.securityfocus.com/bid/25620
Summary:
Microsoft Windows Services for UNIX is prone to a local privilege-escalat=
ion vulnerability.

Attackers may exploit this issue to gain elevated privileges on affected =
computers. This facilitates the complete compromise of vulnerable compute=
rs.

Microsoft Windows Services for UNIX 3.0 and 3.5 and Microsoft Subsystem f=
or UNIX-based Applications are vulnerable to this issue.

16. Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buff=
er Overflow Vulnerability
BugTraq ID: 25566
Remote: Yes
Date Published: 2007-09-11
Relevant URL: http://www.securityfocus.com/bid/25566
Summary:
Microsoft Agent (agentsvr.exe) is prone to a stack-based buffer-overflow =
vulnerability because the application fails to adequately bounds-check us=
er-supplied data.

Successfully exploiting this issue allows remote attackers to execute arb=
itrary code in the context of the currently logged-in user. Failed exploi=
t attempts will likely result in denial-of-service conditions.

III. MICROSOFT FOCUS LIST SUMMARY
---------------------------------
1. SecurityFocus Microsoft Newsletter #359
http://www.securityfocus.com/archive/88/479220

IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to ms-secnews-unsubscribe@securityf=
ocus.com from the subscribed address. The contents of the subject or mess=
age body do not matter. You will receive a confirmation request message t=
o which you will have to answer. Alternatively you can also visit http://=
www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This Issue is Sponsored by:Techmentor
_______________________

TechMentor - Las Vegas - October 15 - 19
Join your fellow systems administrators and IT managers at the Rio Hotel =
& Casino in Vegas for a week of in-depth technical training. TechMentor w=
ill give you the tools and techniques to help you get the most out of you=
r network. Register now!
http://techmentorevents.com/