TrustKeeper Scan Engine Update - August 2, 2013

It's high summer in the Windy City and we're bringing you another TrustKeeper Scan Engine update on a warm, gentle breeze. This update has coverage for 19 new vulnerabilities, detection for 4 new service applicaitons as well as the usual bug fixes and general improvements.

The new detection for the service applications include Openswan, FreeS/WAN, strongSwan - all of which are IPSec implementations - and Jenkins, a Java-based Continuous integration server.

New Vulnerability Test Highlights

Some of the more interesting vulnerability tests we added recently are as follows:

Apache
* Apache HTTP Server mod_dav_svn Denial of Service Vulnerability via Invalid Source (CVE-2013-1896)
* Apache HTTP Server mod_rewrite Terminal Escape Sequence Vulnerability (CVE-2013-1862)

Joomla
* Cross-site scripting vulnerability in Joomla! Language Switch module. (CVE-2012-4532)
* Joomla! Unspecified XSS Vulnerability (CVE-2012-4531)
* Joomla! XSS Vulnerability in Highlighter Plugin (CVE-2013-3267)
* Joomla! XSS Vulnerability in Voting Plugin (CVE-2013-3059)

Openswan
* Openswan and Freeswan Aggressive Mode PSK Denial of Service (CVE-2005-3671)
* Openswan and Strongswan ASN.1 parser Denial of Service (CVE-2009-2185)
* Openswan and Strongswan Dead Peer Detection Denial of Service (CVE-2009-0790)
* Openswan Buffer Overflow in atodn function (CVE-2013-2053)
* Openswan IKE Invalid Key Length Vulnerability (CVE-2011-3380)
* Openswan IPSEC livetest tool Permissions Vulnerability (CVE-2008-4190)
* Openswan PID File Permissions Vulnerability (CVE-2011-2147)
* Openswan Stack-based Buffer Overflow in get_internal_addresses function (CVE-2005-0162)
* Openswan Use-after-free Vulnerability in Cryptographic Helper Handler (CVE-2011-4073)
* Openswan Cisco Banner Option Handling Command Execution and DoS Vulnerability (CVE-2010-3308)
* Openswan Cisco Banner Option Handling Command Execution Vulnerability (CVE-2010-3753)
* Openswan Cisco DNS Option Handling Vulnerability (CVE-2010-3752, CVE-2010-3302)

Oracle
* Oracle Enterprise Manager January 2013 CPU Advisory (CVE-2013-0352, CVE-2013-0374, CVE-2013-0355, CVE-2013-0373, CVE-2013-0353, CVE-2013-0358, CVE-2013-0354, CVE-2012-5062, CVE-2012-3219)

How to Update?

All Trustwave customers using the TrustKeeper Scan Engine receive the updates automatically as soon as an update is available. No action is required.

Trustwave reserves the right to review all comments in the discussion below. Please note that for security and other reasons, we may not approve comments containing links.