CA ARCserve Backup Discovery Service DoS
Published:		19.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9099
Type:		remote
Level:		5/10
Description:		Malformed request causes service to crash.

CVE:

CVE-2008-1979 (The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet to TCP port 41523, which triggers a buffer over-read.)

Original document

CA, CA ARCserve Backup Discovery Service Denial of Service Vulnerability (19.06.2008)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		19.06.2008
Source:
SecurityVulns ID:		9098
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		VBULLETIN : vBulletin 3.6
		VBULLETIN : vBulletin 3.7
		ASPWEBCALENDAR : AspWebCalendar 2008
		TORRENTTRADER : TorrentTrader 1.08
		ELINESTUDIO : eLineStudio Site Composer 2.6
		YEKTAWEB : Academic Web Tools CMS 1.4

Original document		Jessica Hope, vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index (19.06.2008)
		admin_(at)_bugreport.ir, Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities (19.06.2008)
		admin_(at)_bugreport.ir, eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities (19.06.2008)
		Alemin_Krali Krali, Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities (19.06.2008)
		Alemin_Krali Krali, AspWebCalendar 2008 Remote File Upload Vulnerability (19.06.2008)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Intrusion Prevention System DoS
Published:		19.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9100
Type:		remote
Level:		6/10
Description:		Problem on jumbo-frames parsing.

Affected:		CISCO : Cisco Intrusion Prevention System 5.1
		CISCO : Cisco Intrusion Prevention System 6.0
CVE:		CVE-2008-2060

Original document

CISCO, Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service (19.06.2008)

Discuss:

Read or add your comments to this news (0 comments)