Home » 2010 » March » 06
ncpfs, Multiple Vulnerabilities
============================================
 ncpfs, Multiple Vulnerabilities
 March 5, 2010
 CVE-2010-0788, CVE-2010-0790, CVE-2010-0791
============================================

==Description==

The ncpmount, ncpumount, and ncplogin utilities, installed as part of the ncpfs
package, contain several vulnerabilities.

1. ncpmount, ncpumount, and ncplogin are vulnerable to race conditions that
allow a local attacker to unmount arbitrary mountpoints, causing
denial-of-service, or mount Netware shares to arbitrary directories,
potentially leading to root compromise.  This issue was formerly assigned
CVE-2009-3297, but has since been re-assigned CVE-2010-0788 to avoid overlap
with related bugs in other packages.

2. ncpumount is vulnerable to an information disclosure vulnerability that
allows a local attacker to verify the existence of arbitrary files, ... Read more »
Views: 52732 | Added by: b1zz4rd | Date: 06 March 2010 | Comments (31)

SQL injection vulnerability in Natychmiast CMS
# Title: [SQL injection vulnerability in Natychmiast CMS]
# Date: [03.03.2010]
# Author: [Ariko-Security]
# Software Link: [http://www.natychmiast-cms.pl/]
# Version: [ALL]


============ { Ariko-Security - Advisory #2/3/2010 } =============

      SQL injection and XSS vulnerability in NATYCHMIAST CMS



Vendor's Description of Software:
# http://www.natychmiast-cms.pl/Natychmiast+CMS.html [Polish]

Dork:
# N/A

Application Info:
# Name: NATYCHMIAST CMS
Vulnerability Info:
# Type: SQL injection and XSS Vulnerability
# Risk: medium

Fix:
# N/A

Time Table:
# 03/03/2010 - Vendor notified.

Input passed via the "id_str" parameter to index.php and a_index.php is not properly sanitised before being used ... Read more »
Views: 25212 | Added by: b1zz4rd | Date: 06 March 2010 | Comments (1)

Juniper SA Series Cross Site Scripting Issue
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

o PROBLEM DETAILS

The Juniper Secure Access (SA) web interface allows users to manage the
bookmarks on their landing page. This bookmark management functionality
does not filter user input properly and can allow cross site scripting
attacks.

Upon modification or creation of a bookmark, the editbk.cgi script is
requested with a parameter named "row".  This parameter identifies the
bookmark in question and its value is used in the server response.  It is a
flaw in the input handling of this "row" parameter that makes the appliance
vulnerable to a cross site scripting attack.

Successful exploitation could allow a remote attacker to hijack an
authenticated session between a victim and the Juniper SA web interface.

Usage of the Single Sign-On (SSO) feature will severely increase the impact
as SSO automatically grants the hijacked session access to ot ... Read more »
Views: 18627 | Added by: b1zz4rd | Date: 06 March 2010 | Comments (0)

close