Advisories MDVSA-2009:322: mono

[paul]

Multiple vulnerabilities has been found and corrected in mono:

 

IOActive Inc. found a buffer overflow in Mono.Math.BigInteger class

in Mono 1.2.5.1 and previous versions, which allows arbitrary code

execution by context-dependent attackers (CVE-2007-5197).

 

Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net

class libraries in Mono 2.0 and earlier allow remote attackers to

inject arbitrary web script or HTML via crafted attributes related to

(1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs

(RenderAttributes), (3) HtmlInputButton (RenderAttributes),

(4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect

(RenderChildren) (CVE-2008-3422).

 

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows

remote attackers to inject arbitrary HTTP headers and conduct HTTP

response splitting attacks via CRLF sequences in the query string

(CVE-2008-3906).

 

The XML HMAC signature system did not correctly check certain

lengths. If an attacker sent a truncated HMAC, it could bypass

authentication, leading to potential privilege escalation

(CVE-2009-0217).

 

Packages for 2008.0 are being provided due to extended support for

Corporate products.

 

The updated packages have been patched to fix these issues.