Cenzic SmartAttack Updates for Web Vulnerabilities | Cenzic Security Blog

Cenzic Detects a PHP Validation Restriction-Bypass Vulnerability

Fri, 05 Mar 2010 12:21:58 -0500

Weekly product update – Cenzic detects a PHP Validation Restriction-Bypass Vulnerability

As of March 5, 2010 Cenzic now detects a PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability (BugtraqID 38431). Successful exploits allow attackers to access files in unauthorized locations or create files in any writable directory. This vulnerability is an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code; the 'safe_mode' restrictions are assumed to isolate users from each other. PHP 5.2.12 and prior versions are affected.

Background on Cenzic’s SmartAttacks
Every week, Cenzic’s suite of products is updated with the latest vulnerabilities (custom, commercial, and open-source) to better detect "holes" in Web applications. These Web application vulnerabilities include (but not limited to) cross site scripting, buffer overflow, path or directory traversal, SQL injection, HTTP response splitting, and other workflow types.

by
Erin Swanson
Eswanson@cenzic.com

Cenzic Detects a Sun Java System App Server HTTP TRACE Information Disclosure Vulnerability

Fri, 26 Feb 2010 12:55:14 -0500

Weekly product update – Cenzic detects a Sun Java System App Server HTTP TRACE Information Disclosure Vulnerability

As of February 26, 2010 Cenzic now detects a Sun Java System App Server HTTP TRACE Information Disclosure Vulnerability (BugtraqID 37995). The Sun Java System Application Server is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that can aid in further attacks.

by
Erin Swanson
Eswanson@cenzic.com

Cenzic Detects a Sun Java System Web Server Denial Of Service Vulnerability

Fri, 19 Feb 2010 21:13:41 -0500

Weekly product update – Cenzic detects a Sun Java System Web Server Denial Of Service Vulnerability

As of February 19, 2010 Cenzic now detects a Sun Java System Web Server 'admin' Server Denial of Service Vulnerability (BugtraqID 37909). An attacker can exploit this issue to crash the effected application, denying service to legitimate users. Sun Java System Web Server 7.0 Update 6 is affected; other versions may also be vulnerable.

by
Erin Swanson
Eswanson@cenzic.com

Cenzic Detects an IBM WAS Security Bypass Vulnerability

Fri, 12 Feb 2010 18:24:36 -0500

Weekly product update – Cenzic detects an IBM WAS Security Bypass Vulnerability

As of February 12, 2010 Cenzic now detects an IBM WebSphere Application Server 'Requires SSL' Option Security Bypass Vulnerability (BugtraqID 38122). IBM WebSphere Application Server (WAS) is prone to a security-bypass vulnerability. Successful exploits allow attackers to bypass certain security restrictions, which may lead to other attacks. This issue affects WAS 7.0 through 7.0.0.8.

Have a great 3-day weekend everyone!

by
Erin Swanson
Eswanson@cenzic.com

Cenzic Detects an Apache Integer Overflow Vulnerability

Fri, 05 Feb 2010 15:49:36 -0500

Weekly product update – Cenzic detects an Apache Integer Overflow Vulnerability

As of February 5, 2010 Cenzic now detects an Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability (BugtraqID 37966). An attacker can exploit the Apache remote integer overflow vulnerability and execute arbitrary code. Successful exploits will compromise affected computers. Failed exploit attempts will result in a denial-of-service condition. Note that this issue affects platforms on which 'sizeof(int)' is less than 'sizeof(long)'. In particular, this occurs on some 64-bit architectures. Versions prior to Apache 1.3.42 are vulnerable.

Background on Cenzic’s SmartAttacks
Every week, Cenzic’s suite of products is updated with the latest vulnerabilities (custom, commercial, and open-source) to better detect "holes" in Web applications. These Web application vulnerabilities include (but not limited to) cross site scripting, buffer overflow, path or directory traversal, SQL injection, HTTP response splitting, and other workflow types.

by
Erin Swanson
Eswanson@cenzic.com

Cenzic SmartAttack Updates for Web Vulnerabilities | Cenzic Security Blog

Cenzic Detects a PHP Validation Restriction-Bypass Vulnerability

See Also

Cenzic Detects a Sun Java System App Server HTTP TRACE Information Disclosure Vulnerability

See Also

Cenzic Detects a Sun Java System Web Server Denial Of Service Vulnerability

See Also

Cenzic Detects an IBM WAS Security Bypass Vulnerability

See Also

Cenzic Detects an Apache Integer Overflow Vulnerability

See Also