From 3de0a6c228438da47fdcc3d3092b4a8a7e9972e6 Mon Sep 17 00:00:00 2001 From: glarkin Date: Tue, 16 Oct 2012 14:37:50 +0000 Subject: - Updated ZF advisory to include similar XEE vulnerability Feature safe: yes --- security/vuxml/vuln.xml | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 2193bdb85c92..f00c35c5879f 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,17 +52,17 @@ Note: Please add new entries to the beginning of this file. --> - Zend Framework -- Local file disclosure via XXE injection + Zend Framework -- Multiple vulnerabilities via XXE injection ZendFramework - 1.11.12 + 1.11.13 -

K. Gudinavicius reports:

+
The Zend Framework team reports:
+

The XmlRpc package of Zend Framework is vulnerable to XML eXternal Entity Injection attacks (both server and client). The SimpleXMLElement class (SimpleXML PHP extension) is used @@ -70,6 +70,13 @@ Note: Please add new entries to the beginning of this file. specified by adding a specific DOCTYPE element to XML-RPC requests. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.
+
Additionally, the Zend_Dom, Zend_Feed, Zend_Soap, and + Zend_XmlRpc components are vulnerable to XML Entity Expansion + (XEE) vectors, leading to Denial of Service vectors. XEE attacks + occur when the XML DOCTYPE declaration includes XML entity + definitions that contain either recursive or circular references; + this leads to CPU and memory consumption, making Denial of + Service exploits trivial to implement.

@@ -77,6 +84,7 @@ Note: Please add new entries to the beginning of this file. CVE-2012-3363 https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt http://framework.zend.com/security/advisory/ZF2012-01 + http://framework.zend.com/security/advisory/ZF2012-02 http://www.openwall.com/lists/oss-security/2012/06/26/2 https://secunia.com/advisories/49665/ -- cgit