Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		07.10.2006
Source:
SecurityVulns ID:		6689
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HAZIRSITE : HazirSite 2.0
		TORRENTXLUX : TorrentFlux 2.1
		ACKERTODO : ackerTodo 4.2
		EMEK : Emek Portal 2.1
		PHPONLINE : phponline 2.1
		FREEFORUM : FreeForum 0.9
		PHPBB : phpBB User Viewed Posts Tracker 1.0
		CAHIERDETEXTES : Cahier de texte 2.0

Original document		sami_(at)_linuxmail.org, Cahier de textes 2.0 Remote SQL injection Exploit (07.10.2006)
		x0r0n_(at)_hotmail.com, phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability (07.10.2006)
		x0r0n_(at)_hotmail.com, FreeForum 0.9.7 (fpath) Remote File Include Vulnerability (07.10.2006)
		aeroxteam_(at)_gmail.com, Vulnerability in Btitracker (07.10.2006)
		xp1o_(at)_msn.com, phponline <= (LangFile) Remote File Inclusion Exploit (07.10.2006)
		Emek Portal v2.1 SQL Injection, Emek Portal v2.1 SQL Injection (07.10.2006)
		HACKERS PAL, FreeWPS File Upload Command Execution (07.10.2006)
		Francesco Laurita, ackerTodo 4.2 SQL Injection Vulnerability (07.10.2006)
		sec_(at)_srasg.stevenroddis.com.au, TorrentFlux User-Agent XSS Vulnerability (07.10.2006)
		Dj_ReMix_20_(at)_hotmail.com, Hazir Site v2.0 Admin SQL Injection (07.10.2006)

Files:		Exploits FreeWPS Command Execution
Discuss:		Read or add your comments to this news (0 comments)

Multiple Computer Associates software products security vulnerabilities updated since 06.10.2006
Published:		07.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6688
Type:		remote
Level:		7/10
Description:		Multiple buffer overflows in different network services (Discovery Service, Massage Engines, Backup Server, RPC-based services).

Affected:		CA : BrightStor ARCserve Backup 9.01
		CA : BrightStor Enterprise Backup 10.5
		CA : Brightstor ARCserve Backup 11.5
		CA : CA Server Protection Suite 2
		CA : CA Business Protection Suite 2

Original document		advisories_(at)_lssec.com, LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (07.10.2006)
		advisories_(at)_lssec.com, LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (07.10.2006)
		advisories_(at)_lssec.com, LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (07.10.2006)
		CA, [Full-disclosure] [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (06.10.2006)
		3COM, [Full-disclosure] TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities (06.10.2006)
		3COM, [Full-disclosure] TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability (06.10.2006)
		ZDI, [Full-disclosure] ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability (06.10.2006)
		ZDI, [Full-disclosure] ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability (06.10.2006)

Discuss:

Read or add your comments to this news (0 comments)

Python repr() code execution
Published:		07.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6690
Type:		library
Level:		5/10

Affected:		PYTHON : python 2.3
		PYTHON : python 2.4

Original document

UBUNTU, [USN-359-1] Python vulnerability (07.10.2006)

Discuss:

Read or add your comments to this news (0 comments)