SecurityFocus Microsoft Newsletter #394

SecurityFocus Microsoft Newsletter #394
----------------------------------------

This issue is sponsored by Industry Brains

FREE SECURITY AUDIT RESOURCES
Take a Risk Assessment, get White Papers on the Latest Threats, listen to=
 Malware Expert Webcasts.
http://newsletter.industrybrains.com/c?fe;1;766c3;210a3;4cc;0;da4


SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I.   FRONT AND CENTER
       1. Click Crime
       2. Just Who's Being Exploited?
II.  MICROSOFT VULNERABILITY SUMMARY
       1. Jenkins Software RakNet Autopatcher Multiple Unspecified SQL In=
jection Vulnerabilities
       2. Microsoft Windows Intelligent Input/Output (I2O) Multiple Local=
 Privilege Escalation Vulnerabilities
       3. Microsoft Publisher Memory Object Handler Data Remote Code Exec=
ution Vulnerability
       4. Microsoft Windows CE JPEG And GIF Processing Multiple Arbitrary=
 Code Execution Vulnerabilities
       5. Zarafa Multiple Remote Vulnerabilities
       6. Microsoft Outlook Web Access 'no-store' HTTP Directive Informat=
ion Disclosure Weakness
       7. Microsoft Internet Explorer 'DisableCachingOfSSLPages' Security=
 Weakness
       8. Apache HTTP Server 403 Error Cross-Site Scripting Vulnerability
       9. Microsoft May 2008 Advance Notification Multiple Vulnerabilitie=
s
       10. Microsoft Word CSS Handling Memory Corruption Remote Code Exec=
ution Vulnerability
       11. Microsoft Word RTF Malformed String Handling Memory Corruption=
 Remote Code Execution Vulnerability
       12. Microsoft Malware Protection Engine Disk Space Exhaustion Remo=
te Denial Of Service Vulnerability
       13. Microsoft Malware Protection Engine File Processing Remote Den=
ial Of Service Vulnerability
III. MICROSOFT FOCUS LIST SUMMARY
       1. XP Hardening
       2. SecurityFocus Microsoft Newsletter #393
       3. Binding Windows Services to Specific Addresses Only
IV.  UNSUBSCRIBE INSTRUCTIONS
V.   SPONSOR INFORMATION

I.   FRONT AND CENTER
---------------------
1. Click Crime
By Mark Rasch
It has long been a crime not only to commit an illegal act, but also to a=
ttempt -- or conspire with others -- to commit one.=20
http://www.securityfocus.com/columnists/471

2.Just Who's Being Exploited?
By Jamie Reid
Last month's revelation that Tipping Point paid out a prize of $10,000 an=
d a new laptop (MSRP: about $2000) at the CanSecWest conference, for the =
privilege of being the exclusive licensor of a heretofore unpublished vul=
nerability in Apple's Safari web browser to researcher, Charles Miller of=
 Independent Security Evaluators, may lend some credence to this adage.
http://www.securityfocus.com/columnists/470


II.  MICROSOFT VULNERABILITY SUMMARY
------------------------------------
1. Jenkins Software RakNet Autopatcher Multiple Unspecified SQL Injection=
 Vulnerabilities
BugTraq ID: 29178
Remote: Yes
Date Published: 2008-05-12
Relevant URL: http://www.securityfocus.com/bid/29178
Summary:
RakNet Autopatcher is prone to multiple SQL-injection vulnerabilities bec=
ause it fails to sufficiently sanitize user-supplied data before using it=
 in SQL queries.

Exploiting these issues could allow an attacker to compromise the applica=
tion, access or modify data, or exploit latent vulnerabilities in the und=
erlying database.

Versions prior to RakNet 3.23 are vulnerable.

2. Microsoft Windows Intelligent Input/Output (I2O) Multiple Local Privil=
ege Escalation Vulnerabilities
BugTraq ID: 29171
Remote: No
Date Published: 2008-05-12
Relevant URL: http://www.securityfocus.com/bid/29171
Summary:
Microsoft Windows is prone to multiple local privilege-escalation vulnera=
bilities. =20

An attacker can exploit these issues to execute arbitrary code with kerne=
l-level privileges. Successfully exploiting these issues will completely =
compromise affected computers.

These issues affect Windows XP prior to SP3.

3. Microsoft Publisher Memory Object Handler Data Remote Code Execution V=
ulnerability
BugTraq ID: 29158
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29158
Summary:
Microsoft Publisher is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malic=
ious Publisher file.=20

Successfully exploiting this issue would allow the attacker to execute ar=
bitrary code in the context of the currently logged-in user.

4. Microsoft Windows CE JPEG And GIF Processing Multiple Arbitrary Code E=
xecution Vulnerabilities
BugTraq ID: 29147
Remote: Yes
Date Published: 2008-05-09
Relevant URL: http://www.securityfocus.com/bid/29147
Summary:
Microsoft Windows CE is prone to multiple vulnerabilities that allow atta=
ckers to execute arbitrary code. The issues stem from unspecified errors.

An attacker can exploit these issues to execute arbitrary code within the=
 context of the affected components. Failed exploit attempts will likely =
result in denial-of-service conditions.

5. Zarafa Multiple Remote Vulnerabilities
BugTraq ID: 29122
Remote: Yes
Date Published: 2008-05-09
Relevant URL: http://www.securityfocus.com/bid/29122
Summary:
Zarafa is prone to multiple remote HTML-injection vulnerabilities and den=
ial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application, e=
xecute arbitrary HTML and script code within the context of the affected =
website, potentially steal cookie-based authentication credentials, or co=
ntrol how the site is rendered to the user; other attacks are also possib=
le.

These issues affect versions prior to Zarafa Script 6.02.

6. Microsoft Outlook Web Access 'no-store' HTTP Directive Information Dis=
closure Weakness
BugTraq ID: 29121
Remote: No
Date Published: 2008-05-09
Relevant URL: http://www.securityfocus.com/bid/29121
Summary:
Microsoft Outlook Web Access is prone to a weakness that may allow sensit=
ive information to be unintentionally stored on the local computer.

To exploit this issue, an attacker would need to exploit another vulnerab=
ility. Specifically, the attacker would need to be able to read the victi=
m's cache.

7. Microsoft Internet Explorer 'DisableCachingOfSSLPages' Security Weakne=
ss
BugTraq ID: 29120
Remote: No
Date Published: 2008-05-09
Relevant URL: http://www.securityfocus.com/bid/29120
Summary:
Microsoft Internet Explorer is prone to a weakness that may allow attacke=
rs to extract potentially sensitive information.

Attackers with local access to a computer may exploit this issue to obtai=
n potentially sensitive information from cached SSL-enabled web pages. In=
formation obtained may aid in further attacks.

This issue affects Internet Explorer 7.

8. Apache HTTP Server 403 Error Cross-Site Scripting Vulnerability
BugTraq ID: 29112
Remote: Yes
Date Published: 2008-05-08
Relevant URL: http://www.securityfocus.com/bid/29112
Summary:
Apache HTTP server is prone to a cross-site scripting vulnerability becau=
se the application fails to sufficiently sanitize user-supplied input.=20

 An attacker may leverage this issue to execute arbitrary script code in =
the browser of an unsuspecting user in the context of the affected site. =
This may let the attacker steal cookie-based authentication credentials a=
nd launch other attacks.

UPDATE: Additional reports indicate that the default error page has the C=
ontent-Type set, rendering it not vulnerable.=20

NOTE: Reportedly, Microsoft Internet Explorer fails to properly follow RF=
C-2616 and uses content-sniffing to interpret UTF-7 data received in HTTP=
 responses. After further analysis, we may rewrite this BID to be Interne=
t Explorer-specific.

9. Microsoft May 2008 Advance Notification Multiple Vulnerabilities
BugTraq ID: 29108
Remote: Yes
Date Published: 2008-05-08
Relevant URL: http://www.securityfocus.com/bid/29108
Summary:
Microsoft has released advance notification that the vendor will be relea=
sing four security bulletins on May 13, 2008. The highest severity rating=
 for these issues is 'Critical'.

Successfully exploiting these issues may allow remote or local attackers =
to compromise affected computers.

Individual records will be created to document these vulnerabilities when=
 the bulletins are released.

10. Microsoft Word CSS Handling Memory Corruption Remote Code Execution V=
ulnerability
BugTraq ID: 29105
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29105
Summary:
Microsoft Word is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malic=
ious Word file.=20

Successfully exploiting this issue would allow the attacker to execute ar=
bitrary code in the context of the currently logged-in user.

11. Microsoft Word RTF Malformed String Handling Memory Corruption Remote=
 Code Execution Vulnerability
BugTraq ID: 29104
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29104
Summary:
Microsoft Word is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malic=
ious RTF file.=20

Successfully exploiting this issue would allow the attacker to execute ar=
bitrary code in the context of the currently logged-in user.

12. Microsoft Malware Protection Engine Disk Space Exhaustion Remote Deni=
al Of Service Vulnerability
BugTraq ID: 29073
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29073
Summary:
Microsoft Malware Protection Engine is prone to a remote denial-of-servic=
e vulnerability because it fails to properly validate certain data struct=
ures when parsing specially crafted files.

Attackers can exploit this issue to cause an affected computer to stop re=
sponding or to restart. Successful attacks will deny service to legitimat=
e users.

13. Microsoft Malware Protection Engine File Processing Remote Denial Of =
Service Vulnerability
BugTraq ID: 29060
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29060
Summary:
Microsoft Malware Protection Engine is prone to a remote denial-of-servic=
e vulnerability because it fails to properly validate user-supplied input=
 when parsing specially crafted files.

Attackers can exploit this issue to cause an affected computer to stop re=
sponding or to restart. Successful attacks will deny service to legitimat=
e users.

III. MICROSOFT FOCUS LIST SUMMARY
---------------------------------
1. XP Hardening
http://www.securityfocus.com/archive/88/492001

2. SecurityFocus Microsoft Newsletter #393
http://www.securityfocus.com/archive/88/491763

3. Binding Windows Services to Specific Addresses Only
http://www.securityfocus.com/archive/88/491595

IV.  UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to ms-secnews-unsubscribe@securityf=
ocus.com from the subscribed address. The contents of the subject or mess=
age body do not matter. You will receive a confirmation request message t=
o which you will have to answer. Alternatively you can also visit http://=
www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and a=
sk to be manually removed.

V.   SPONSOR INFORMATION
------------------------
This issue is sponsored by Industry Brains

FREE SECURITY AUDIT RESOURCES
Take a Risk Assessment, get White Papers on the Latest Threats, listen to=
 Malware Expert Webcasts.
http://newsletter.industrybrains.com/c?fe;1;766c3;210a3;4cc;0;da4