DXMSoft XM Easy Personal FTP Server DoS updated since 11.11.2009
Published:		25.11.2009
Source:		BUGTRAQ
SecurityVulns ID:		10399
Type:		remote
Level:		5/10
Description:		Crash if LIST command is received before PASV or POST.

Affected:

DXMSOFT : XM Easy Personal FTP Server 5.8

Original document		leinakesi_(at)_gmail.com, XM Easy Personal FTP Server Remote DoS Vulnerability (25.11.2009)
		zhangmc_(at)_mail.ustc.edu.cn, XM Easy Personal FTP Server 'APPE' and 'DELE' Command Remote Denial of Service Vulnerability (14.11.2009)
		zhangmc_(at)_mail.ustc.edu.cn, XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability (11.11.2009)

Discuss:

Read or add your comments to this news (0 comments)

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.11.2009
Source:
SecurityVulns ID:		10418
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		E107 : e107 0.7
		INVISION : Invision Power Board 2.3
		OPENX : OpenX 2.8
		GFORGE : gforge 4.8
		PHPMAIL : php-mail 1.1
CVE:		CVE-2009-3303 (Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter.)

Original document		DEBIAN, [SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising (25.11.2009)
		DEBIAN, [SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting (25.11.2009)
		Security Vulnerability Research Team, [Bkis-13-2009] e107 Multiple Vulnerabilities (25.11.2009)
		MustLive, Vulnerabilities in plugins for WordPress (25.11.2009)
		Moritz Naumann, Executing arbitrary PHP code on OpenX <= 2.8.1 (25.11.2009)
		MustLive, Vulnerabilities in Abton (25.11.2009)
		MustLive, New vulnerabilities in Invision Power Board (25.11.2009)

Discuss:

Read or add your comments to this news (0 comments)

libvorbis library multiple security vulnerabilities
Published:		25.11.2009
Source:		BUGTRAQ
SecurityVulns ID:		10419
Type:		library
Level:		6/10
Description:		Multiple vulnerabilities on ogg files parsing.

CVE:		CVE-2009-3379 (Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. NOTE: this might overlap CVE-2009-2663.)
		CVE-2008-2009

Original document

UBUNTU, [USN-861-1] libvorbis vulnerabilities (25.11.2009)

Discuss:

Read or add your comments to this news (0 comments)