Section: .. / 0702-advisories /
| /// File Name: |
USN-423-1.txt |
Description:
|
Ubuntu Security Notice 423-1 - A flaw was discovered in MoinMoin's debug reporting sanitizer which could lead to a cross-site scripting attack. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication information for the domain where MoinMoin was hosted. Only Ubuntu Breezy was vulnerable. An information leak was discovered in MoinMoin's debug reporting, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 5311 | | Related CVE(s): | CVE-2007-0901, CVE-2007-0902 | | Last Modified: | Feb 23 18:53:28 2007 |
| MD5 Checksum: | 07b66a34ef51b949f22c2112f560164c |
|
| /// File Name: |
USN-424-1.txt |
Description:
|
Ubuntu Security Notice 424-1 - Multiple buffer overflows have been discovered in various PHP modules. If a PHP application processes untrusted data with functions of the session or zip module, or various string functions, a remote attacker could exploit this to execute arbitrary code with the privileges of the web server. The sapi_header_op() function had a buffer underflow that could be exploited to crash the PHP interpreter. The wddx unserialization handler did not correctly check for some buffer boundaries and had an uninitialized variable. By unserializing untrusted data, this could be exploited to expose memory regions that were not meant to be accessible. Depending on the PHP application this could lead to disclosure of potentially sensitive information. On 64 bit systems (the amd64 and sparc platforms), various print functions and the odbc_result_all() were susceptible to a format string vulnerability. A remote attacker could exploit this to execute arbitrary code with the privileges of the web server. Under certain circumstances it was possible to overwrite superglobal variables (like the HTTP GET/POST arrays) with crafted session data. When unserializing untrusted data on 64-bit platforms the zend_hash_init() function could be forced to enter an infinite loop, consuming CPU resources, for a limited length of time, until the script timeout alarm aborts the script.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 40014 | | Related CVE(s): | CVE-2007-0906, CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 | | Last Modified: | Feb 23 19:13:23 2007 |
| MD5 Checksum: | c167c44b2f1ce8a0e863337ae113fd61 |
|
| /// File Name: |
USN-425-1.txt |
Description:
|
Ubuntu Security Notice 425-1 - A flaw was discovered in the permission checking code of slocate. When reporting matching files, locate would not correctly respect the parent directory's "read" bits. This could result in filenames being displayed when the file owner had expected them to remain hidden from other system users.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 3679 | | Related CVE(s): | CVE-2007-0227 | | Last Modified: | Feb 23 21:22:18 2007 |
| MD5 Checksum: | 613e2881513ca3a66777f911db0bcf02 |
|
| /// File Name: |
USN-426-1.txt |
Description:
|
Ubuntu Security Notice 426-1 - Mu Security discovered a format string vulnerability in Ekiga. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 5018 | | Related CVE(s): | CVE-2007-1006, CVE-2007-1007 | | Last Modified: | Feb 23 21:27:05 2007 |
| MD5 Checksum: | e0b73f01af64972a1d64b16035362623 |
|
| /// File Name: |
USN-427-1.txt |
Description:
|
Ubuntu Security Notice 427-1 - Mikhail Markin reported that enigmail incorrectly handled memory allocations for certain large encrypted attachments. This caused Thunderbird to crash and thus caused the entire message to be inaccessible.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 5236 | | Related CVE(s): | CVE-2006-5877 | | Last Modified: | Feb 23 21:57:23 2007 |
| MD5 Checksum: | d49b121fc29cd6b664ff39b7cf5c2142 |
|
| /// File Name: |
USN-428-1.txt |
Description:
|
Ubuntu Security Notice 428-1 - Firefox has been patched to fix a slew of miscellaneous vulnerabilities including cross site scripting and SSL flaws.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 21770 | | Related CVE(s): | CVE-2006-6077, CVE-2007-0008, CVE-2007-0009, CVE-2007-0775, CVE-2007-0776, CVE-2007-0777, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0981, CVE-2007-0995, CVE-2007-0996, CVE-2007-1092 | | Last Modified: | Mar 5 23:30:15 2007 |
| MD5 Checksum: | 3300c941a12a3ac1f996e8b22c1dc121 |
|
| /// File Name: |
vbulletin364-xss.txt |
Description:
|
vBulletin version 3.6.4 is susceptible to cross site scripting flaws in multiple functions in index.php.
| | Author: | Doz | | Homepage: | http://www.hackerscenter.com/ | | File Size: | 1038 | | Last Modified: | Feb 7 23:50:03 2007 |
| MD5 Checksum: | 42460c9ee20fdccc009e9f0d01752bf0 |
|
| /// File Name: |
vmware-weak.txt |
Description:
|
VMware Workstation version 5.5.3 build 34685 suffers from isolation failure and information leakage conditions.
| | Author: | Eitan Caspi | | File Size: | 8753 | | Last Modified: | Feb 6 00:03:59 2007 |
| MD5 Checksum: | 8a34145628a89038d96e44fb844d2ad9 |
|
| /// File Name: |
webtester-sqlxss.txt |
Description:
|
WebTester versions 5.0.20060927 and below suffer from SQL injection and cross site scripting flaws.
| | Author: | Moran Zavdi | | Homepage: | http://www.vigilon.com/ | | File Size: | 1880 | | Last Modified: | Feb 14 17:14:48 2007 |
| MD5 Checksum: | d0b5f67ac553dd18db44913d585a9af3 |
|
| /// File Name: |
xbox-pwn.txt |
Description:
|
A vulnerability has been discovered in the Xbox 360 hypervisor that allows privilege escalation into hypervisor mode. Together with a method to inject data into non-privileged memory areas, this vulnerability allows an attacker with physical access to an Xbox 360 to run arbitrary code such as alternative operating systems with full privileges and full hardware access.
| | Author: | Anonymous Hacker | | File Size: | 6956 | | Last Modified: | Mar 5 23:24:06 2007 |
| MD5 Checksum: | 04d35c943641f1ddf43aadb85b76cf24 |
|
| /// File Name: |
XD100099.txt |
Description:
|
A vulnerability has been identified in Microsoft Internet Explorer, in Windows XP SP2 which could be exploited by malicious users to obtain a victim's local files.
| | Author: | Rajesh Sethumadhavan | | File Size: | 14429 | | Last Modified: | Feb 23 17:53:14 2007 |
| MD5 Checksum: | eb9bbae2d092c210693c0e46dfdad241 |
|
| /// File Name: |
xmlhttprequest.txt |
Description:
|
A newline-and-tab technology along with the Msxml2.XMLHTTP ActiveX object in Microsoft Internet Explorer allows an attacker to bypass restrictions thus allowing XMLHttpRequest to interact with other sites.
| | Author: | Michal Zalewski | | Homepage: | http://lcamtuf.coredump.cx/ | | File Size: | 3458 | | Last Modified: | Feb 6 00:02:03 2007 |
| MD5 Checksum: | b29e0a763eb91c6def25f80552a014bd |
|
| /// File Name: |
year3000.txt |
Description:
|
Microsoft Visual C++ version 8.0 suffers from a denial of service condition.
| | Author: | 3APA3A | | Homepage: | http://SecurityVulns.com/ | | File Size: | 5218 | | Related CVE(s): | CVE-2007-0842 | | Last Modified: | Feb 13 04:01:08 2007 |
| MD5 Checksum: | e7cd012fa91b331495001e288706d9b7 |
|
| /// File Name: |
ZDI-07-007.txt |
Description:
|
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Mercury LoadRunner Agent, Mercury Performance Center Agent and Mercury Monitor over Firewall. Authentication is not required to exploit this vulnerability.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2797 | | Related CVE(s): | CVE-2007-0446 | | Last Modified: | Feb 13 00:56:19 2007 |
| MD5 Checksum: | 4f0f6192b34b6ba3d3a90813bcad528b |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
