Monthly Archives: April 2015

Security

WordPress InBoundio Marketing 2.0 Shell Upload

This Metasploit module exploits an arbitrary file upload in the WordPress InBoundio Marketing plugin version 2.0. It allows you to upload arbitrary php files and get remote code execution. This Metasploit module has been tested successfully on WordPress InBoundio Marketing 2.0.3 with WordPress 4.1.3 on Ubuntu 14.04 Server.

Security

Ubuntu Security Notice USN-2571-1

Ubuntu Security Notice 2571-1 – Robert Kaiser discovered a use-after-free during plugin initialization in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox.

Ubuntu

USN-2571-1: Firefox vulnerability

Ubuntu Security Notice USN-2571-1

24th April, 2015

firefox vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu (vivid)
  • Ubuntu 14.10
  • Ubuntu 14.04 LTS
  • Ubuntu 12.04 LTS

Summary

Firefox could be made to crash or run programs as your login if it
opened a malicious website.

Software description

  • firefox
    – Mozilla Open Source web browser

Details

Robert Kaiser discovered a use-after-free during plugin initialization in
some circumstances. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to cause a
denial of service via application crash or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2015-2706)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu (vivid):
firefox

37.0.2+build1-0ubuntu0.15.04.1
Ubuntu 14.10:
firefox

37.0.2+build1-0ubuntu0.14.10.1
Ubuntu 14.04 LTS:
firefox

37.0.2+build1-0ubuntu0.14.04.1
Ubuntu 12.04 LTS:
firefox

37.0.2+build1-0ubuntu0.12.04.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

CVE-2015-2706

NVD

CVE-2015-3414 (sqlite)

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE”””””””” at the end of a SELECT statement.

NVD

CVE-2015-3415 (sqlite)

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.