X.Org Flaw Exposes Unix-Like OSes to Attacks

Several Unix-like operating systems are affected by a potentially serious X.Org vulnerability that can be exploited for privilege escalation and arbitrary code execution.

X.Org is a popular open source implementation of the X Windows System (also known as X11, X or X-Windows), the graphical windowing system used by BSD and Linux operating systems.

http://feedproxy.google.com/~r/Securityweek/~3/lccFufwqXXE/xorg-flaw-exposes-unix-oses-attacks

Logical Bug in Microsoft Word’s ‘Online Video’ Allows Code Execution

Microsoft Office is impacted by a logical bug that allows an attacker to abuse the “online video” feature in Word to execute malicious code, Cymulate security researchers warn.

http://feedproxy.google.com/~r/Securityweek/~3/YZpTstm3gXQ/logical-bug-microsoft-words-online-video-allows-code-execution

Easy-to-exploit privilege escalation bug bites OpenBSD and other big name OSes

Several big-name Linux and BSD operating systems are vulnerable to an exploit that gives untrusted users powerful root privileges. The critical flaw in the X.org server—the open-source implementation of the X11 system that helps manage graphics displays—affects OpenBSD, widely considered to be among the most secure OSes. It also impacts some versions of the Red Hat, Ubuntu, Debian, and CentOS distributions of Linux.

An advisory X.org developers published Thursday disclosed the 23-month-old bug that, depending on how OS developers configure it, lets hackers or untrusted users elevate very limited system rights to unfettered root. The vulnerability, which is active when OSes run X.org in privileged (setuid) mode, allows files to be overwritten using the -logfile and -modulepath parameters. It also makes it trivial for low-privilege users to escalate system rights. A variety of nuances are leading to widely divergent assessments of the bug’s severity.

“Depending on whom you talk to, the reported severity will vary greatly,” Louis Dion-Marcil, a security researcher at GoSecure, told Ars. “I think most people will tell you it is very severe, and I would agree with them. The bug allows you to write arbitrary data to arbitrary files, which might seem trivial and not that dangerous, but it effectively allows regular, unprivileged users to elevate their privileges to the one of complete administrator of the system.”

Read 6 remaining paragraphs | Comments

https://arstechnica.com/?p=1400891

Multiple Vulnerabilities Patched in ASRock Drivers

SecureAuth Labs security researchers have discovered multiple vulnerabilities in low-level drivers installed by ASRock utilities.

http://feedproxy.google.com/~r/Securityweek/~3/fkSUrcd2uX4/multiple-vulnerabilities-patched-asrock-drivers

Researchers Find Command Injection Flaw in Cisco WebEx

Cisco’s WebEx software is affected by a serious vulnerability that can be exploited to execute arbitrary commands with elevated privileges.

http://feedproxy.google.com/~r/Securityweek/~3/0m2ujJLIVWM/researchers-find-command-injection-flaw-cisco-webex

Exploit for New Windows Zero-Day Published on Twitter

A new zero-day vulnerability in Windows was made public on Twitter by the same researcher who published an exploit for a bug in the Windows Task Scheduler at the end of August.

http://feedproxy.google.com/~r/Securityweek/~3/jO1fpbSo6BA/exploit-new-windows-zero-day-published-twitter

Magecart Hackers Now Targeting Vulnerable Magento Extensions

After compromising large websites or third-party services they use in order to steal credit card information, the Magecart hackers have now turned to vulnerable Magento extensions.

http://feedproxy.google.com/~r/Securityweek/~3/O2U9MNrDLGc/magecart-hackers-now-targeting-vulnerable-magento-extensions

Pentagon Launches Continuous Bug Bounty Program

The Department of Defense announced on Wednesday that its “Hack the Pentagon” bug bounty program will run all year long and will target the organization’s high-value assets.

http://feedproxy.google.com/~r/Securityweek/~3/vBf_-KHJjT0/pentagon-launches-continuous-bug-bounty-program

Plaintext Passwords Often Put Industrial Systems at Risk: Report

ATLANTA — SECURITYWEEK 2018 ICS CYBER SECURITY CONFERENCE — Plaintext passwords crossing the network, outdated operating systems, direct connections to the Internet, and the lack of automated updates for security solutions often put industrial systems at risk of attacks, according to a new report published on Tuesday by industrial cybersecurity firm CyberX.

http://feedproxy.google.com/~r/Securityweek/~3/S-3dI6rZLsY/plaintext-passwords-often-put-industrial-systems-risk-report

Cisco, F5 Networks Investigate libssh Vulnerability Impact

Cisco and F5 Networks are investigating the possible impact of the recently patched libssh vulnerability on their products, while other vendors have concluded similar investigations.

http://feedproxy.google.com/~r/Securityweek/~3/f2E8ny_s_Nk/cisco-f5-networks-investigate-libssh-vulnerability-impact