----------------------------------------------------------------------

We have updated our website, enjoy!
http://secunia.com/

----------------------------------------------------------------------

TITLE:
Fedora update for adminutil

SECUNIA ADVISORY ID:
SA31777

VERIFY ADVISORY:
http://secunia.com/advisories/31777/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting, DoS, System access

WHERE:
>From local network

OPERATING SYSTEM:
Fedora 8
http://secunia.com/advisories/product/16769/
Fedora 9
http://secunia.com/advisories/product/18642/

DESCRIPTION:
Fedora has issued an update for adminutil. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct cross-site scripting attacks, cause a DoS (Denial of
Service), and potentially compromise a vulnerable system.

1) A boundary error within multiple Red Hat Directory Server CGI
applications when processing "Accept-Language" HTTP headers can be
exploited to cause a buffer overflow and potentially execute
arbitrary code with "root" privileges by sending a specially crafted
request to a vulnerable system.

2) Input containing the "%" character passed to the Directory Server
Administration Express and Directory Server Gateway (DSGW) is not
properly sanitised before being returned to the administrator. This
can be exploited to execute arbitrary HTML and script code in an
administrator's browser session in context of an affected site.

3) An error exists within the handling of input encoded with the "%"
character. This can be exploited to cause a heap-based buffer
overflow by sending specially crafted requests to certain CGI
scripts.

SOLUTION:
Apply updated packages via the yum utility ("yum update adminutil").

ORIGINAL ADVISORY:
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------