XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.

The version of Novell NetIQ Sentinel server installed on the remote host is prior to 7.4.1. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in Apache ActiveMQ in the     processControlCommand() function within the file     broker/TransportConnection.java. An unauthenticated,     remote attacker can exploit this, via a specially     crafted packet, to cause a denial of service condition.
    (CVE-2014-3576)

  - A flaw exists in the XMLTooling library due to a failure     to properly handle integer conversion exceptions. An     unauthenticated, remote attacker can exploit this, via a     crafted SAML message, to cause a denial of service     condition. (CVE-2015-0851)

  - A remote code execution vulnerability exists due to     unsafe deserialize calls of unauthenticated Java objects     to the Apache Commons Collections (ACC) library. An     unauthenticated, remote attacker can exploit this, by     sending a specially crafted serialized Java object via     the RMI interface, to execute arbitrary code with the     privileges of the application.

It was discovered that opensaml2, a Security Assertion Markup Language library, needed to be rebuilt against a fixed version of the xmltooling package due to its use of macros vulnerable to CVE-2015-0851 as fixed in the DSA 3321-1 update.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The InCommon Shibboleth Training team discovered that XMLTooling, a C++ XML parsing library, did not properly handle an exception when parsing well-formed but schema-invalid XML. This could allow remote attackers to cause a denial of service (crash) via crafted XML data.

ID	Name	Product	Family	Severity
90713	NetIQ Sentinel < 7.4.1 Multiple Vulnerabilities	Nessus	Misc.	medium
85280	Debian DLA-290-2 : opensaml2 security update	Nessus	Debian Local Security Checks	medium
85130	Debian DSA-3321-1 : xmltooling - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-0851

high

Tenable Plugins

medium

medium

medium