Debian Linux Security Advisory 3299-1 – Johan Olofsson discovered an authentication bypass vulnerability in Stunnel, a program designed to work as an universal SSL tunnel for network daemons. When Stunnel in server mode is used with the redirect option and certificate-based authentication is enabled with “verify = 2” or higher, then only the initial connection is redirected to the hosts specified with “redirect”. This allows a remote attacker to bypass authentication.
Monthly Archives: July 2015
Ubuntu Security Notice USN-2658-1
Ubuntu Security Notice 2658-1 – Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL bytes in file paths. A remote attacker could possibly use this issue to bypass intended restrictions and create or obtain access to sensitive files. Emmanuel Law discovered that the PHP phar extension incorrectly handled filenames starting with a NULL byte. A remote attacker could use this issue with a crafted tar archive to cause a denial of service. Various other issues were also addressed.
Vuln: Oracle Java SE CVE-2015-0470 Remote Security Vulnerability
Oracle Java SE CVE-2015-0470 Remote Security Vulnerability
DSA-3303 cups-filters – security update
It was discovered that the texttopdf utility, part of cups-filters, was
susceptible to multiple heap-based buffer overflows due to improper
handling of print jobs with a specially crafted line size. This could
allow remote attackers to crash texttopdf or possibly execute arbitrary
code.
DSA-3304 bind9 – security update
Breno Silveira Soares of Servico Federal de Processamento de Dados
(SERPRO) discovered that the BIND DNS server is prone to a denial of
service vulnerability. A remote attacker who can cause a validating
resolver to query a zone containing specifically constructed contents
can cause the resolver to terminate with an assertion failure, resulting
in a denial of service to clients relying on the resolver.