VULNERABILITIES \ FIXES - November 2, 2008

2 Nov. 2008

Summary
Adobe PageMaker is "document layout application, and is commonly used for desktop publishing". Remote exploitation of a stack buffer overflow vulnerability in Adobe Systems Inc.'s PageMaker could allow an attacker to execute arbitrary code with the privileges of the current user.

Credit:
The information has been provided by iDefense.
The original article can be found at: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=749


http://www.securiteam.com/windowsntfocus/6N0030KN5K.html

IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability

2 Nov. 2008

Summary
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express for Microsoft SQL. Authentication is not required to exploit this vulnerability.

Credit:
The information has been provided by The Zero Day Initiative (ZDI).
The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-08-071

http://www.securiteam.com/windowsntfocus/6S0080KN5E.html

2 Nov. 2008

Summary
"Adobe PageMaker 7.0 software is the ideal page layout program for business, education, and small- and home-office professionals who want to create high-quality publications such as brochures and newsletters. Get started quickly with templates, graphics, and intuitive design tools; work productively across Adobe applications; and easily leverage existing content to create customized communications." Secunia Research has discovered two vulnerabilities in Adobe PageMaker, which can be exploited by malicious people to compromise a user's system.

Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2007-80/


http://www.securiteam.com/windowsntfocus/6L0000KN6I.html

2 Nov. 2008

Summary
Altiris Deployment Server agent is installed as part of the Altiris packages to allow the Deployment Server to manage software
for machines. It is usually installed to C:\Program Files\Altiris\AClient and the main running agent is called AClient.exe. By default the Altiris agent runs under the Local System account and is vulnerable to numerous Shatter Attack vulnerabilities leading to an attacker running code under the Local System privilege.

Credit:
The information has been provided by Brett Moore.
The original article can be found at: http://www.insomniasec.com/advisories/ISVA-081020.1.htm


http://www.securiteam.com/windowsntfocus/6O0030KN6O.html

2 Nov. 2008

Summary
"GNU Enscript is a free replacement for the Adobe's enscript program. Enscript converts ASCII files to PostScript and spools generated PostScript output to the specified printer or leaves it to file. Enscript can be easily extended to handle different output media and it has many options that can be used to customize printouts." Secunia Research has discovered a vulnerability in GNU Enscript, which can be exploited by malicious people to compromise a vulnerable system.

Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2008-41/


http://www.securiteam.com/unixfocus/6M0010KN6G.html

2 Nov. 2008

Summary
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the library is responsible for loading itself by implementing a minimal Portable Executable (PE) loader.

Credit:
The information has been provided by Stephen Fewer.
The original article can be found at: http://www.harmonysecurity.com/files/HS-P005_ReflectiveDllInjection.pdf


http://www.securiteam.com/securityreviews/6P0050KN5U.html

2 Nov. 2008

Summary
"Interact is a platform for the delivery and support of online learning. It differs from many other elearning platforms in that its aim is to concentrate on the social/interactive aspects of teaching and learning rather than the delivery of content to students." Secunia Research has discovered two vulnerabilities in Interact, which can be exploited by malicious people to conduct cross-site request forgery and SQL injection attacks.

Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2008-44/


http://www.securiteam.com/securitynews/6L0010KN5W.html

2 Nov. 2008

Summary
OpenOffice is "an open-source office application that supports reading and writing a wide variety of file formats". Remote exploitation of multiple integer overflow vulnerabilities in OpenOffice versions 2.4.1 and earlier could allow an attacker to execute arbitrary code with the privileges of the current user.

Credit:
The information has been provided by iDefense.
The original article can be found at: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750


http://www.securiteam.com/securitynews/6M0020KN5S.html

2 Nov. 2008

Summary
A vulnerability allows remote attackers to execute a script injection attack on arbitrary sites through vulnerable installations of SonicWALL. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious web link.

Credit:
The information has been provided by The Zero Day Initiative (ZDI).
The original article can be found at: SonicWALL Pro 2040



http://www.securiteam.com/securitynews/6O0040KN5C.html

2 Nov. 2008

Summary
The WebLogic Apache Connector is "module for the Apache httpd server. It is used to proxy requests from Apache to a backend WebLogic server". Remote exploitation of a stack based buffer overflow vulnerability in Oracle Corp.'s WebLogic Server Apache Connector could allow an attacker to execute arbitrary code with the privileges of the affected service.

Credit:
The information has been provided by iDefense.
The original article can be found at: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751


http://www.securiteam.com/securitynews/6R0070KN5W.html

2 Nov. 2008

Summary
Novell eDirectory is "cross platform directory server. NetWare Core Protocol, commonly referred to as NCP, is used by eDirectory to synchronize data between servers in the directory tree. NCP supports various request types, one of which is the 'Get NCP Extension Information By Name Request'." Remote exploitation of a memory corruption vulnerability in Novell Inc.'s eDirectory could allow an attacker to execute arbitrary code with the privileges of the affected service.

Credit:
The information has been provided by iDefense.
The original article can be found at: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748


http://www.securiteam.com/securitynews/6T0090KN5M.html

2 Nov. 2008

Summary
The VLC media player contains a stack overflow vulnerability while parsing malformed TiVo ty media files. The vulnerability can be trivially exploited by a (remote) attacker to execute arbitrary code in the context of VLC media player.

Credit:
The information has been provided by Tobias Klein.
The original article can be found at: http://www.trapkit.de/advisories/TKADV2008-010.txt


http://www.securiteam.com/securitynews/6P0040KN6A.html