May 02, 2007 - Current Activity

Cisco Releases Security Advisory to Address Multiple Vulnerabilities in ASA and PIX Appliances

Cisco has released Security Advisory cisco-sa-20070502-asa to address multiple vulnerabilities in Cisco ASA and PIX appliances.  These vulnerabilities include two authentication bypass vulnerabilities affecting the Lightweight Directory Access Protocol (LDAP) authentication system and two denial-of-service (DoS) vulnerabilities affecting Virtual Private Networks (VPNs).

More information about these vulnerabilities can be found in the Vulnerability Notes Database.

US-CERT recommends administrators apply the workarounds and patches as described in Cisco Security Advisory cisco-sa-20070502-asa.

Vulnerability Involving Apple QuickTime and Java

Apple has released QuickTime 7.1.6 to address a vulnerability in Apple QuickTime for Java.

US-CERT recommends users upgrade to QuickTime 7.1.6 and follow the Securing Your Web Browser document to disable Java.

OPeNDAP Releases Update to Address Vulnerability in Network Data Access Protocol Software

OPeNDAP has released an update to address a vulnerability in Version 3 of the OPeNDAP Network Data Access Protocol software.

US-CERT encourages administrators to apply the fixes and workarounds described in Vulnerability Note VU#857153 and in the OPeNDAP Server 3 update.

Cisco Releases Security Advisory to Address Vulnerability in NetFlow Collection Engine

Cisco has released Security Advisory cisco-sa-20070425-nfc to address a vulnerability in Cisco NetFlow Collection Engine. Upon installation, default user credentials are created on the system. A remote attacker with knowledge of these hard-coded credentials may be able to gain access to an affected system.

US-CERT encourages administrators to apply the fixes and workarounds described in Vulnerability Note VU#127545 and Security Advisory cisco-sa-20070425-nfc. 

Adobe Photoshop Bitmap File Handling Vulnerability

US-CERT is aware of a possible vulnerability in Adobe Photoshop that may allow an attacker to cause a stack-based buffer overflow. By persuading a user to open a crafted bitmap file (e.g., .BMP, .DIB, .RLE), an attacker may be able to execute arbitrary code on the user's system.

US-CERT recommends that users not open untrusted bitmap files, and will continue to investigate and provide additional information as it becomes available.

Vulnerability in HP-UX Running Sendmail

US-CERT is aware of a vulnerability in HP-UX running sendmail that may allow a remote user to cause a denial-of-service condition.

US-CERT recommends users apply the patches as described in HP Technical Knowledge Base Document c00841370.  Please note that logon credentials may be needed to access this document.

More information regarding this vulnerability is available in Vulnerability Note VU#349305.

New Attack Technique for ARM Architecture

US-CERT is aware of a new attack technique presented at CansecWest and Black Hat Amsterdam. This technique affects devices that use the ARM (including Xscale) architecture, such as routers, wireless access points and mobile phones. The technique demonstrates that a vulnerability that results in a NULL pointer dereference can be used to execute arbitrary code.

US-CERT has been working with vendors to inform them of this attack technique and provide mitigation strategies.

US-CERT will continue to investigate and provide additional information as it becomes available.