SecuritySpace - CVE-2015-4315

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-4315

Description: The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.

Test IDs: 1.3.6.1.4.1.25623.1.0.105333

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-4315
BugTraq ID: 76352
http://www.securityfocus.com/bid/76352
Cisco Security Advisory: 20150813 Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page Denial of Service Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=40446
http://www.securitytracker.com/id/1033283

CVE ID:	CVE-2015-4315
Description:	The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.
Test IDs:	1.3.6.1.4.1.25623.1.0.105333
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4315 BugTraq ID: 76352 http://www.securityfocus.com/bid/76352 Cisco Security Advisory: 20150813 Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40446 http://www.securitytracker.com/id/1033283