Autodesk DWF Viewer ActiveX multiple security vulnerabilities
Published:		02.10.2008
Source:		BUGTRAQ
SecurityVulns ID:		9325
Type:		client
Level:		6/10
Description:		Insecure methods allow to save and execute files.

Affected:		AUTODESK : Revit Architecture 2009
		AUTODESK : Autodesk Design Review 2009

Original document

ipsdix_(at)_gmail.com, Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit (02.10.2008)

Discuss:

Read or add your comments to this news (0 comments)

Asterisk multiple DoS conditions
Published:		02.10.2008
Source:		BLAKECORNELL
SecurityVulns ID:		9326
Type:		remote
Level:		5/10
Description:		Application crashes on malformed IAX requests flood.

Original document

Blake Cornell, Additional Asterisk Resource Exhaustion DoS Vulnerabilities (02.10.2008)

Files:		Exploits Asterisk 1.4,1.6 et. al. Resource Exhaustion
		Exploits Asterisk 1.4,1.6 et. al. Resource Exhaustion (2)
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		02.10.2008
Source:
SecurityVulns ID:		9324
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MONO : mono 1.2
		PHPMYID : phpMyID 0.9
		RPORTAL : RPortal 1.1
		EFRONT : eFront 3.5
		MOZILO : moziloWiki 1.0
		PRINTLOG : Printlog 0.4
CVE:		CVE-2008-3906 (CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.)

Original document		RPATH, rPSA-2008-0286-1 mono (02.10.2008)
		Pepelux, Printlog <= 0.4: Remote File Edition Vulnerability (02.10.2008)
		Aesthetico, [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues (02.10.2008)
		Pepelux, Remote File Inclusion Vulnerability (02.10.2008)
		kadfrox_(at)_gmail.com, Remote and Local File Inclusion Vulnerability <= 1.1 Rportal (02.10.2008)
		Raphael Geissert, phpMyID can act as a redirector and as headers injector (02.10.2008)

Discuss:

Read or add your comments to this news (0 comments)