Community News: DreamStats "rootpath" File Inclusion Vulnerability Identified
90003
As the International PHP Maagzine reports today there's been a file inclusion vulnerability found (from Secunia) in the DreamStats package:   Secunia's latest advisory points out a vulnerability in DreamStats, which could be exploited by remote attackers to execute arbitrary commands. This issue is due to an input validation error in the "index.php" script that does not validate the "rootpath" parameter, which could be exploited by remote attackers to include malicious PHP scripts and execute arbitrary commands with the privileges of the web server.   Those at risk are systems running versions 4.2 and prior and should update immediately. DreamStats is a package for displaying the statistics for Call of Duty related games on a website.
475201
Latest PEAR Releases:Structures_Graph 1.0.3Console_ProgressBar 0.5.0betapearweb 1.2.0RC1Text_Wiki_Creole 0.4.1Text_Wiki_Creole 0.4.0Structures_DataGrid_DataSource_MDB2 0.1.7Structures_DataGrid_DataSource_DBQuery 0.1.7Text_Wiki_Creole 0.4.2pearweb 1.2.1pearweb 1.2.0Auth 1.5.0RC2HTML_Progress2 2.3.0a3XML_XUL 0.8.3pearweb 1.2.2pearweb 1.2.3XML_Query2XML 1.1.0Text_CAPTCHA_Numeral 1.1.0Text_Figlet 1.0.0Log 1.9.10
265009
We are proud to announce the release of version 0.9 or LeafRSS! This version includes full smarty template integration, as well as options to embed the articles in another web page, or even to allow the output of the filter as an RSS feed.   A patch file has been included to upgrade from version 0.8 to avoid any loss of data. Please see the PATCH file for details.  This will be the final major release before we release our first stable version.  If you have any questions or discover any bugs in this version, please post them either in the Help section of our sourceforge forums or in our sourceforge bug tracker. We would appreciate any input you could give us to help us test this release in preparation for moving this project to stable status.  More detail is available at: https://sourceforge.net/projects/leafrss
153432
rPath linux has issued an update to their packages for PHP, PHP-MySQL and PHP-PGSql to correct issues that could make it possible for a remote user to gain unauthorized access.   his fixes some vulnerabilities, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions or by malicious people to potentially compromise a vulnerable system.   References and links to the update information can be found in their original advisory.
659896
peeon writes &quot;Right before Christmas, four new Windows NT/2k/XP vulnerabilities were posted to the Bugtraq list. This story discusses two of the vulnerabilities in the LoadImage function (buffer overflow) and
222395
As reported here on Secunia (as discovered by shinnai), there's a code execution vulnerability in PHP's glob function:    The vulnerability is caused due to an error in the handling of an uninitialized structure inside the "glob()" function. This can be exploited to execute arbitrary code, which may lead to security restrictions (e.g. the "disable_functions" directive) being bypassed.   The vulnerability is confirmed in the 5.2.3 win32 installer. Other versions may also be affected.    The issue is marked as "less critical" and can be avoided easily by only allowing trusted users the correct permissions to execute PHP code on the server.
9540
The Hardened-PHP Project has released a new vulnerability for the PHProjekt groupware software.    While searching for applications that are vulnerable to a new class of vulnerabilities inside PHP applications we took a quick look into the current PHProjekt source code and discovered that a (remote) include vulnerability had been (re)introduced.   By overwriting a variable with user input it is possible to inject and execute arbitrary PHP code. Overwriting this variable is possible regardless of the register_globals setting.    They give a few more details further down the posting and note that users should download and install the latest version (at the time of this post, 5.1.2).
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump
378414
Latest PEAR Releases:HTTP_WebDAV_Client 1.0.0Console_Table 1.0.8Console_CommandLine 0.2.1File_Bittorrent2 1.1.0MDB_QueryTool 1.2.1DB_QueryTool 1.1.1MDB_QueryTool 1.2.2DB_QueryTool 1.1.2Net_FTP 1.3.5Crypt_GPG 0.3.10Net_LDAP 1.1.0a1
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
481408
Latest PEAR Releases:Net_Wifi 1.0.0PEAR_PackageFileManager_Cli 0.2.1Structures_DataGrid_Renderer_Flexy 0.1.3Mail_Mime 1.5.1Net_LDAP 1.0.0RC1Testing_FIT 0.2.0pearweb_index 1.16.6pearweb_index 1.16.5UDDI 0.2.4Mail_Mime 1.5.2pearweb_index 1.16.7Image_Canvas 0.3.1Benchmark 1.2.7PEAR 1.6.1Tree 0.3.1pearweb 1.16.1
313520
In a follow-up to a previous blog post, Alexey Zakhlestin shares a few more thoughts on the project and the proper object hierarchy's going for.   actually, I changed it completely 3 times already in my thoughts. I finally "see the light"(tm) and will implement it on a weekend. I think about converting SCGI-part to a simple "driver" and move all http-related stuff to a separate driver-agnostic set of classes. This way, I would be able to implement FastCGI as anther driver without altering applications. If you have any better ideas - let me know.   He also includes a link to another sample application that uses the functionality to create a pie chart (including some benchmarks) with the help of the eZ components framework.
52789
The flaw exploited by the most recent versions of the worm such as Santy.C or Santy.E is more general than the original, and can occur anywhere a site designer has left the door open for the inclusion of arbitrary files into PHP scripts, reports IDG News
347402
In this new post on the PHP Security Blog, Stefan Esser brings up an interesting issue when dealing with web applications - being able to bind a script/application to a different port on the local machine.   Unfortunately the ability to bind yourself to a port and receive connections is a threat to webapplications installed on different virtual hosts on the same IP, even if other security measures in place, like tight filesystem permissions or executing PHP script with the permission of the owner.   He gives an example in PHP of how this can happen and one of the scary side effects of having it in the same domain - the cookie information is passed in. It's a simple concept that could have very bad consequences in the wrong hands.    Additionally, you don't even have to create it in PHP either. As cyberlot mentions, it could be created in any language that has socket functions. Be sure to check out the comments for more thoughts and comments on the post.
641298
Reports of vulnerabilities found by some peer-to-peer file sharers prompt patch.
298089
Latest PEAR Releases:Console_CommandLine 0.1.0Services_Amazon 0.7.1Testing_Selenium 0.4.2HTML_Table 1.8.2Structures_DataGrid_Renderer_Pager 0.1.3Structures_DataGrid_Renderer_HTMLTable 0.1.4Structures_DataGrid_DataSource_MDB2 0.1.11Structures_DataGrid_DataSource_DBQuery 0.1.11Structures_DataGrid_DataSource_XML 0.2.0Structures_DataGrid_DataSource_DBTable 0.1.7Structures_DataGrid_DataSource_CSV 0.1.6Structures_DataGrid_DataSource_Array 0.1.3Structures_DataGrid 0.9.0Structures_DataGrid_Renderer_XUL 0.1.3Structures_DataGrid_Renderer_Smarty 0.1.4Structures_DataGrid_Renderer_HTMLSortForm 0.1.3Structures_DataGrid_DataSource_DataObject 0.2.1OLE 0.6.1PHP_CodeSniffer 1.0.0Console_CommandLine 0.1.1Structures_DataGrid_DataSource_PDO 0.1.0Net_FTP 1.4.0a1