SecurityFocus Microsoft Newsletter #366

SecurityFocus Microsoft Newsletter #366
----------------------------------------

This issue is Sponsored by: CSI

CSI 2007, November 3-9 in Washington, DC, is the only conference that del=
ivers a business-focused overview of enterprise security.=20
It will convene 2,000+ delegates, 80 exhibitors and features 100+ session=
s/seminars providing a roadmap for integrating policies and procedures wi=
th new tools and techniques. =20
Register now for savings on conference fees and/or free exhibits admissio=
n. =20
www.csiannual.com


SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1.Rebinding attacks unbound
       2.Aspect-Oriented Programming and Security
II.  MICROSOFT VULNERABILITY SUMMARY
       1. Mono System.Math BigInteger Buffer Overflow Vulnerability
       2. Symantec Altiris Deployment Solution Directory Traversal Vulner=
ability
       3. Symantec Altiris Deployment Solution Aclient Local Privilege Es=
calation Vulnerability
       4. Ipswitch IMail SMTP Server IMail Client Remote Buffer Overflow =
Vulnerability
       5. Sony CONNECT SonicStage Player M3U Playlist Processing Buffer O=
verflow Vulnerability
       6. BitDefender Unspecified Arbitrary Code Execution Vulnerability
       7. Trend Micro AntiVirus Engine Tmxpflt.SYS Local Buffer Overflow =
Vulnerability
       8. eIQnetworks Enterprise Security Analyzer SEARCHREPORT Command R=
emote Buffer Overflow Vulnerability
       9. IBM Lotus Notes Attachment Viewer Multiple Buffer Overflow Vuln=
erabilities
       10. Mono System.Web StaticFileHandler.CS Source Code Information D=
isclosure Vulnerability
III. MICROSOFT FOCUS LIST SUMMARY
       1. SecurityFocus Microsoft Newsletter #365
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1.Rebinding attacks unbound
By Federico Biancuzzi
DNS rebinding was discovered in 1996 and affected the Java Virtual Machin=
e (VM). Recently a group of researchers at Stanford found out that this v=
ulnerability is still present in browsers and that the common solution, k=
nown as DNS pinning, is not effective anymore.
http://www.securityfocus.com/columnists/455

2.Aspect-Oriented Programming
By Rohit Sethi
Aspect-oriented programming (AOP) is a paradigm that is quickly gaining t=
raction in the development world. At least partially spurred by the popul=
arity of the Java Spring framework [1], people are beginning to understan=
d the substantial benefits that AOP brings to development.
http://www.securityfocus.com/infocus/1895


II.  MICROSOFT VULNERABILITY SUMMARY
------------------------------------
1. Mono System.Math BigInteger Buffer Overflow Vulnerability
BugTraq ID: 26279
Remote: Yes
Date Published: 2007-10-31
Relevant URL: http://www.securityfocus.com/bid/26279
Summary:
Mono is prone to a buffer-overflow vulnerability because the application =
fails to adequately perform boundary checks on user-supplied data.

Successfully exploiting this issue could allow attackers to execute arbit=
rary code in the context of the user running an affected application. Fai=
led exploit attempts will likely result in a denial-of-service condition.

2. Symantec Altiris Deployment Solution Directory Traversal Vulnerability
BugTraq ID: 26266
Remote: No
Date Published: 2007-10-30
Relevant URL: http://www.securityfocus.com/bid/26266
Summary:
Symantec Altiris Deployment Solution is prone to a directory traversal vu=
lnerability.

Attackers can exploit this issue to gain access to potentially sensitive =
information. Information obtained may aid in further attacks.

3. Symantec Altiris Deployment Solution Aclient Local Privilege Escalatio=
n Vulnerability
BugTraq ID: 26265
Remote: No
Date Published: 2007-10-30
Relevant URL: http://www.securityfocus.com/bid/26265
Summary:
Symantec Altiris Deployment Solution is prone to a local privilege-escala=
tion vulnerability.

Attackers can exploit this issue to execute arbitrary files with 'System'=
 privileges. Successful exploits will completely compromise affected comp=
uters.

4. Ipswitch IMail SMTP Server IMail Client Remote Buffer Overflow Vulnera=
bility
BugTraq ID: 26252
Remote: Yes
Date Published: 2007-10-30
Relevant URL: http://www.securityfocus.com/bid/26252
Summary:
IMail Client, which is included in Ipswitch IMail Server, is prone to a b=
uffer-overflow vulnerability because the software fails to properly bound=
s-check user-supplied input before copying it into an insufficiently size=
d memory buffer.

Attackers may exploit this issue to execute arbitrary code in the context=
 of the affected application. Failed exploit attempts will likely result =
in denial-of-service conditions.

This issue affects IMail Client 9.22, which is included with IMail Server=
 2006.22; other versions may also be affected.

5. Sony CONNECT SonicStage Player M3U Playlist Processing Buffer Overflow=
 Vulnerability
BugTraq ID: 26241
Remote: Yes
Date Published: 2007-10-29
Relevant URL: http://www.securityfocus.com/bid/26241
Summary:
Sony CONNECT SonicStage player is prone to a buffer-overflow vulnerabilit=
y because it fails to properly bounds-check user-supplied input before co=
pying it to an insufficiently sized memory buffer.

Remote attackers may crash the application or execute arbitrary machine c=
ode in the context of the user running the affected application.

This issue affects SonicStage 4.3; other versions may also be vulnerable.

6. BitDefender Unspecified Arbitrary Code Execution Vulnerability
BugTraq ID: 26210
Remote: Yes
Date Published: 2007-10-25
Relevant URL: http://www.securityfocus.com/bid/26210
Summary:
BitDefender is prone to an unspecified vulnerability that lets attackers =
execute arbitrary code on affected computers.

7. Trend Micro AntiVirus Engine Tmxpflt.SYS Local Buffer Overflow Vulnera=
bility
BugTraq ID: 26209
Remote: No
Date Published: 2007-10-25
Relevant URL: http://www.securityfocus.com/bid/26209
Summary:
Trend Micro AntiVirus engine is prone to a local buffer-overflow vulnerab=
ility because it fails to properly bounds-check user-supplied data before=
 copying it into an insufficiently sized memory buffer.

Successful exploits may allow an attacker to execute arbitrary machine co=
de with SYSTEM-level privileges and completely compromise affected comput=
ers.  Failed exploit attempts could crash the computer, denying service t=
o legitimate users.

Applications that incorporate 'Tmxpflt.sys' 8.320.1004 and 8.500.0.1002 f=
rom the AntiVirus engine are vulnerable, including Trend Micro PC-cillin =
Internet Security 2007, ServerProtect, and OfficeScan.

8. eIQnetworks Enterprise Security Analyzer SEARCHREPORT Command Remote B=
uffer Overflow Vulnerability
BugTraq ID: 26189
Remote: Yes
Date Published: 2007-10-24
Relevant URL: http://www.securityfocus.com/bid/26189
Summary:
The application is prone to a remote buffer-overflow vulnerability becaus=
e it fails to properly bounds-check user-supplied data before copying it =
into an insufficiently sized memory buffer.

Exploiting this issue allows remote attackers to execute arbitrary code i=
n the context of the affected application. Failed exploit attempts will l=
ikely result in denial-of-service conditions.

This issue affects Enterprise Security Analyzer 2.5; other versions may a=
lso be vulnerable.

9. IBM Lotus Notes Attachment Viewer Multiple Buffer Overflow Vulnerabili=
ties
BugTraq ID: 26175
Remote: Yes
Date Published: 2007-10-23
Relevant URL: http://www.securityfocus.com/bid/26175
Summary:
IBM Lotus Notes is prone to multiple buffer-overflow vulnerabilities.=20

Successfully exploiting these issues could allow an attacker to execute a=
rbitrary code in the context of the user running the application. =20

Lotus Notes 7.0.2 is prone to these issues; other versions may also be vu=
lnerable.

NOTE: Reports suggest that Symantec Mail Security for Domino, SMTP, and E=
xchange are also vulnerable to these issues; Symantec has not confirmed t=
his. We will update this BID pending further investigation.

10. Mono System.Web StaticFileHandler.CS Source Code Information Disclosu=
re Vulnerability
BugTraq ID: 26166
Remote: Yes
Date Published: 2007-10-22
Relevant URL: http://www.securityfocus.com/bid/26166
Summary:
Mono is prone to a vulnerability that lets attackers access source code b=
ecause it fails to properly sanitize user-supplied input.=20

An attacker can exploit this vulnerability to retrieve arbitrary files fr=
om the vulnerable system in the context of the webserver process. Informa=
tion obtained may aid in further attacks.

This issue affects versions prior to Mono 1.2.5.2 running on Windows plat=
forms.

III. MICROSOFT FOCUS LIST SUMMARY
---------------------------------
1. SecurityFocus Microsoft Newsletter #365
http://www.securityfocus.com/archive/88/482796

IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to ms-secnews-unsubscribe@securityf=
ocus.com from the subscribed address. The contents of the subject or mess=
age body do not matter. You will receive a confirmation request message t=
o which you will have to answer. Alternatively you can also visit http://=
www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is Sponsored by: CSI

CSI 2007, November 3-9 in Washington, DC, is the only conference that del=
ivers a business-focused overview of enterprise security.=20
It will convene 2,000+ delegates, 80 exhibitors and features 100+ session=
s/seminars providing a roadmap for integrating policies and procedures wi=
th new tools and techniques. =20
Register now for savings on conference fees and/or free exhibits admissio=
n. =20
www.csiannual.com