bugtraq mailing list - 2006/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2006/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 35	² 35	³ 24	⁴ 22	⁵ 1
⁶ 23	⁷ 22	⁸ 28	⁹ 37	¹⁰ 22	¹¹ 8	¹² 3
¹³ 18	¹⁴ 30	¹⁵ 26	¹⁶ 15	¹⁷ 26	¹⁸ 24	¹⁹ 1
²⁰ 28	²¹ 15	²² 19	²³ 22	²⁴ 45	²⁵ 17	²⁶ 2
²⁷ 18	²⁸ 37	²⁹ 20	³⁰ 16	³¹ 19

Messages by day:

March 1 (35 messages)

[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities (security@...driva.com)
PEHEPE Membership Management System Multiple Vulnerabilities (mail@...usemreyilmaz.com)
bttlxeForum 2.* XSS Vulnerability (stormhacker@...mail.com)
Re: Bypass Fortinet anti-virus using FTP ("Mathieu Dessus" <mdessus@...il.com>)
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (Daniel Veditz <dveditz@...zio.com>)
Ebay XSS ("Aaron Horst" <anthrax101@...il.com>)
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (nodialtone <nodialtone@...cast.net>)
Re: Fedex Kinkos Smart Card Authentication Bypass (Lance James <bugtraq@...urescience.net>)
Re: Fedex Kinkos Smart Card Authentication Bypass ("Eric B" <ericboothe@...il.com>)
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (Steve Shockley <steve.shockley@...ckley.net>)
Re: Ebay XSS ("ad@...poverflow.com" <ad@...poverflow.com>)
FreeBSD Security Advisory FreeBSD-SA-06:09.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Limbo CMS code execution ("Alexander Hristov" <joffer@...il.com>)
Re: ArGoSoft FTP server remote heap overflow ("Steven M. Christey" <coley@...re.org>)
FreeBSD Security Advisory FreeBSD-SA-06:10.nfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-06:09.openssh [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Updated Noah Classifieds Component for Joomla!/Mambo (noahsec1@...idmckinnisconsulting.com)
[eVuln] Leif M. Wright's Blog Multiple Vulnerabilities (alex@...ln.com)
Re: WordPress 2.0.1 Multiple Vulnerabilities (Javor Ninov <drfrancky@...urax.org>)
Secunia Research: Lighttpd Script Source Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Knowledgebases Remote Command Exucetion (security curmudgeon <jericho@...rition.org>)
SAP Web Application Server http request url parsing vulnerability (arnold.grossmann@...il.com)
Evolution Emailer DoS (Alan Cox <alan@....linux.org.uk>)
Re: ArGoSoft FTP server remote heap overflow (Jerome Athias <jerome.athias@...e.fr>)
Evil side of Firefox extensions ("azurIt" <azurit@...ox.sk>)
Re: NETGEAR WGT624 ? Wireless DSL router default user name/password vulnerability (abuse@....com)
Re: Evil side of Firefox extensions ("Henri Cook" <henri@...on-hosting.co.uk>)
4images <=1.7.1 remote code execution (rgod@...istici.org)
Re: recursive DNS servers DDoS as a growing DDoS problem (v9@...ehalo.us)
Re: Evil side of Firefox extensions (Ben <ben@...geekzone.com>)
Re: Evil side of Firefox extensions ("Mike Owen" <kyphros@...il.com>)
Re: Evil side of Firefox extensions ("azurIt" <azurit@...ox.sk>)
Secunia Research: NetworkActiv Web Server Script Source Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Evil side of Firefox extensions ("Dave Korn" <davek_throwaway@...mail.com>)
Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities ("Nick Boyce" <nick.boyce@...il.com>)

March 2 (35 messages)

NCP VPN/PKI Client - various Bugs (Ramon 'ports' Kukla <ml2@...tsonline.net>)
Fwd: APPLE-SA-2006-03-01 Security Update 2006-001 (Dave McKinney <dm@...urityfocus.com>)
Re: (PHP) mb_send_mail security bypass (Yasuo Ohgaki <yohgaki@...aki.net>)
[FLSA-2006:178989] Updated perl-DBI package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
SMBlog Remote Command Exucetion (botan@...uxmail.org)
Re: Fedex Kinkos Smart Card Authentication Bypass (Lance James <bugtraq@...urescience.net>)
Woltlab Burning Board 2.x (Datenbank MOD fileid) Multiple Vulnerabilities. (nukedx@...edx.com)
PHP-NUKE Submit_News Cross-Site Scripting Vulnerability ("0o_zeus_o0 security-mx.org" <zeus.olimpusklan@...il.com>)
FusionPHP Multiple Vulnerabilities ("0o_zeus_o0 security-mx.org" <zeus.olimpusklan@...il.com>)
Re: PHP as a secure language? PHP worms? [was: Re: new linux malware] ("L. Adrian Griffis" <agriffis@...systems.com>)
Re: PHP as a secure language? PHP worms? [was: Re: new linux malware] ("Matthew Schiros" <schiros@...il.com>)
Re: PHP as a secure language? PHP worms? [was: Re: new linux malware] ("L. Adrian Griffis" <agriffis@...systems.com>)
Re: PHP as a secure language? PHP worms? [was: Re: new linux malware] ("Matthew Schiros" <schiros@...il.com>)
FW: WordPress 2.0.1 Multiple Vulnerabilities (<Michael.Wade@...guson.com>)
RE: Evil side of Firefox extensions (<salexander@...ntporch.com>)
Re: WordPress 2.0.1 Multiple Vulnerabilities ("Daniele Muscetta" <muscetta@...il.com>)
Re: WordPress 2.0.1 Multiple Vulnerabilities ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: Evil side of Firefox extensions (Michael Ekstrand <lists@...hack.net>)
[USN-259-1] irssi vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: [KAPDA::#27] - Runcms 1.x Cross_Site_Scripting vulnerability (roozbeh_afrasiabi@...oo.com)
[OSX]: /usr/bin/passwd local root exploit. (v9 <v9@...ehalo.us>)
Re: recursive DNS servers DDoS as a growing DDoS problem (v9 <v9@...ehalo.us>)
[KAPDA::#26]vBulletin.3.5.3~3.0.12-XSS (addmimistrator@...il.com)
[SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities (joey@...odrom.org (Martin Schulze))
JOOMLA CMS 1.0.7 DoS & path disclosing (ghc@....ru)
ProtoVer Sample IMAP testsuite release (Evgeny Legerov <research@...g.net>)
[SECURITY] [DSA 984-1] New xpdf packages fix several problems (joey@...odrom.org (Martin Schulze))
Re: FW: WordPress 2.0.1 Multiple Vulnerabilities (Chris Hajer <chrishajer@....net>)
PluggedOut Nexus SQL injection (h e <het_ebadi@...oo.com>)
Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability (Jimmy Latouche <jimmy.lc@...il.com>)
[eVuln] E-Blah Platinum 'Referer' XSS Vulnerability (alex@...ln.com)
[SECURITY] [DSA 981-1] new bmv packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[ MDKSA-2006:052 ] - Updated mozilla-thunderbird packages fix vulnerability (security@...driva.com)
Re: recursive DNS servers DDoS as a growing DDoS problem (Gadi Evron <ge@...uxbox.org>)
iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com…)

March 3 (24 messages)

vBulletin3.0.12&3.5.3~is_valid_email()~XSS Attack (addmimistrator@...il.com)
iDefense Security Advisory 03.02.06: Apple Mac OS X passwd Arbitrary Binary File Creation/Modification ("labs-no-reply@...fense.com" <labs-no-reply@...fense.co…)
iDefense Security Advisory 03.02.06: EMC Dantz Retrospect 7 Backup client DoS Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
EXCLUSIVO PARA EMPRESARIOS ("Altamirano" <silviocba@...il.com >)
MyBB 1.0.4 New SQL Injection (o.y.6@...mail.com)
sql in Dawaween V 1.03 (shereba_2007@...mail.com)
RE: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities ("Jay Stapleton" <jay.stapleton@...putershare.com>)
Arin.net XSS (Terminal Entry <Security@...dro.net>)
Re: Arin.net XSS ("Dave Korn" <davek_throwaway@...mail.com>)
MyBB 1.04 Perl Exploit (o.y.6@...mail.com)
Gallery 2 Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities (tzitaroth@...il.com)
RE: Re: Arin.net XSS (Terminal Entry <Security@...dro.net>)
[eVuln] Skate Board Multimple Vulnerabilities (alex@...ln.com)
AZTEK forums 4.0 multiple vulnerabilities (PoC) (billy@...mail.com)
XST-Strikes-Back vulnerability in Netcache (Nite Sprite <nitespritewalla@...oo.com>)
Re: Guestbox XSS/an admin bypass (micuel@...il.com)
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (David Rasch <d.rasch@...adwick.com>)
Re: Re: Arin.net XSS ("Alexander Hristov" <joffer@...il.com>)
Re: Re: Arin.net XSS ("J u a n" <perfectirijillo@...il.com>)
DSplit - Tiny AV signatures Detector ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: Arin.net XSS ("Steven" <steven@...ebug.org>)
Kaspersky Memory/CPU Usage Leak by design (Michael.Lang@...kal-net.at)
Re: Arin.net XSS (Simon Smith <simon@...soft.com>)

March 4 (22 messages)

Re: DSplit - Tiny AV signatures Detector ("Alexander Hristov" <joffer@...il.com>)
Re: DSplit - Tiny AV signatures Detector ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: DSplit - Tiny AV signatures Detector ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: DSplit - Tiny AV signatures Detector ("Alexander Hristov" <joffer@...il.com>)
[ GLSA 200603-01 ] WordPress: SQL injection vulnerability (Thierry Carrez <koon@...too.org>)
Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability. (nukedx@...edx.com)
[ GLSA 200603-02 ] teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code (Thierry Carrez <koon@...too.org>)
[ GLSA 200603-03 ] MPlayer: Multiple integer overflows (Thierry Carrez <koon@...too.org>)
phpArcadeScript XSS Injections (retard@...igs.com)
AVG 7 granting Everyone Full Control to updated files... even its drivers (redxii1234@...mail.com)
Various router DoS (ryanmeyer14@...scape.net)
[eVuln] Easy Forum XSS Vulnerability (alex@...ln.com)
PHP-Stats <= 0.1.9.1 remote commands execution (rgod@...istici.org)
phpBB <= 2.0.19 Multiple DoS vulnerabilities (paisterist.nst@...il.com)
Pixel Post Multiple Vulnerabilities (paisterist.nst@...il.com)
[KAPDA::#30] - CuteNews1.4.1 Cross_Site_Scripting Vulnerability (roozbeh_afrasiabi@...oo.com)
linksys router + irc DoS ("Cade Cairns" <cairnsc@...il.com>)
Wbb 2.3. xss (r57shell@...il.com)
Visual Studio 6.0 Buffer Overflow Vulnerability (kozan@...instructors.com)
Re: Kaspersky Memory/CPU Usage Leak by design ("Teodor Cimpoesu" <teodor.cimpoesu@...il.com>)
Simplog <= 1.0.2 Vulnerabilities (retard@...igs.com)
Critical Risk Vulnerability in L-Soft Listserv ("NGSSoftware Insight Security Research" <nisr@...software.com>)

March 5 (1 message)

HITBSecConf2006 - Malaysia: Call for Papers (Praburaajan <prabu@...kinthebox.org>)

March 6 (23 messages)

Re: Re: Arin.net XSS ("Dave Korn" <davek_throwaway@...mail.com>)
[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[OpenPKG-SA-2006.006] OpenPKG Security Advisory (tar) (OpenPKG <openpkg@...npkg.org>)
Re: Various router DoS (znx <znxster@...il.com>)
Re: Wbb 2.3. xss (Adrian <adrian@...netcoding.net>)
vulnerability in the IE Java applet initialization engine (porkythepig@...pi.pl)
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability (alex@...ln.com)
Game-Panel <= 2.1.6 XSS (retard@...igs.com)
evoBlog Remote Name tag Script injection (sikik@...mail.org)
Re: linksys router + irc DoS (bugtraq@...us.me.uk)
[KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php (roozbeh_afrasiabi@...oo.com)
Announcement: WASC Threat Classification in German (contact@...appsec.org)
FTPoed Blog Engine =>v1.1 HTML Injection Vulnerability (sikik@...mail.org)
htpasswd bufferoverflow and command execution in thttpd-2.25b. ("Larry Cashdollar" <lcashdol@...il.com>)
Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit (kozan@...instructors.com)
Out of memory crash in Freeciv 2.0.7 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Sauerbraten engine 2006_02_28 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Liero Xtreme 0.62b (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Cube engine 2005_08_29 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200603-04 ] IMAP Proxy: Format string vulnerabilities (Thierry Carrez <koon@...too.org>)
[ GLSA 200603-05 ] zoo: Stack-based buffer overflow (Thierry Carrez <koon@...too.org>)
Re: linksys router + irc DoS ("Cade Cairns" <cairnsc@...il.com>)

March 7 (22 messages)

SQL injection & XSS IN vbzoom v1.11 ("???? ????" <mr_snake_my@...mail.com>)
SQL injection in Invision Power Board v2.1.5 ("???? ????" <mr_snake_my@...mail.com>)
[USN-260-1] flex vulnerability (Martin Pitt <martin.pitt@...onical.com>)
histhost v1.0.0 xss and possible rmdir (retard@...igs.com)
RE: linksys router + irc DoS ("Daniel Ramirez Valdez" <daniel.ramirez@...ris.com>)
link bank code execution and xss (retard@...igs.com)
phpBannerExchange 2.0 Directory Traversal Vulnerability (h4cky0u.org@...il.com)
PHP-based CMS mass-exploitation ("Daniel Bonekeeper" <thehazard@...il.com>)
[SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: SQL injection in Invision Power Board v2.1.5 (mattmecham@...il.com)
IM Lock 2006 - Insecure Registry Permission Vulnerability (unsecure@...teme.com)
Multiple vulnerabilities in Alien Arena 2006 GE 5.00 (Luigi Auriemma <aluigi@...istici.org>)
Re: Various router DoS (bugtraq@...killz.com)
Cisco PIX embryonic state machine TTL(n-1) DoS ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
Cisco PIX embryonic state machine 1b data DoS ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
Cpanel Path Disclosure Vulnerability (Silversmith@...iyane.com)
Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (Daniel Veditz <dveditz@...zio.com>)
Purple Paper: Exegesis Of Virtual Hosts Hacking (unknown.pentester@...il.com)
Loudblog 0.41 SQL Injection, Local file read/include (tzitaroth@...il.com)
[eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities (alex@...ln.com)
IE iFrame + Sun JVM + JS bug. Exploitable? (drguile@...mail.com)
capi4hylafax insecure manipulation with tmp files (Javor Ninov <drfrancky@...urax.org>)

March 8 (28 messages)

[FLSA-2006:168264-1] Updated XFree86 packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:168264-2] Updated X.org packages fix security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:168516] Updated pcre packages fix a security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:176751] Updated gpdf package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Dropbear SSH server Denial of Service (Pablo Fernandez <pablo@...tleQ.net>)
announcement: reporting and mitigating malicious websites and phishing (Gadi Evron <ge@...uxbox.org>)
RE: Cisco PIX embryonic state machine 1b data DoS ("Randy Ivener (rivener)" <rivener@...co.com>)
[ MDKSA-2006:053 ] - Updated freeciv packages fix DoS vulnerabilities (security@...driva.com)
CanSecWest/core06 Vancouver April 3-7 (Dragos Ruiu <dr@....net>)
[security bulletin] HPSBTU02100 SSRT050979 rev.1 - HP Tru64 UNIX IPSEC/ISAKMP Remote Denial of Service (DoS) (security-alert@...com)
[eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities (alex@...ln.com)
Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting (no_reply@...mail.com)
Re: AVG 7 granting Everyone Full Control to updated files... even its drivers (Matti Haack <m.haack@...ck-it.de>)
Remote access to NeuSecure/Netcool backend database via web interface credentials leakage (D.Snezhkov <dsnezhkov@...il.com>)
Re: recursive DNS servers DDoS as a growing DDoS problem ("Ventsislav Genchev" <vigour1@...il.com>)
textfileBB <= 1.0 Multiple XSS (retard@...igs.com)
Re: PHP-based CMS mass-exploitation (Paul Laudanski <zx@...tlecops.com>)
Cisco PIX embryonic state machine 1b data DoS ("Konstantin V. Gavrilenko" <k.gavrilenko@...ont.com>)
RE: Re: recursive DNS servers DDoS as a growing DDoSproblem ("Geo." <geoincidents@....net>)
Re: Re: recursive DNS servers DDoS as a growing DDoSproblem (Security Lists <securitylists@...ontown.com>)
Re: Re: recursive DNS servers DDoS as a growing DDoSproblem (gboyce <gboyce@...belly.com>)
[KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities (3nitro@...il.com)
RE: PHP-based CMS mass-exploitation (hchemin@...addy.com)
[SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
a worm for mediaWiki?? ("\"vitamona\"" <vitamona@...il.com>)
H&R Block contact - SOLVED (Fixer <fixer@....net>)
Re: Re: recursive DNS servers DDoS as a growing DDoSproblem ("Mark Senior" <senatorfrog@...il.com>)
Re: a worm for mediaWiki?? (jredmond@...astlouis.org)

March 9 (37 messages)

18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000 ("Reed Arvin" <reedarvin@...il.com>)
[ MDKSA-2006:054 ] - Updated kdegraphics packages fixes overflow vulnerabilities (security@...driva.com)
Noah's Classifieds Multiple Cross-Site Scripting Vulnerabilities ("0o_zeus_o0 security-mx.org" <zeus.olimpusklan@...il.com>)
Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000 (3APA3A <3APA3A@...URITY.NNOV.RU>)
nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys (nCipher Support <technotifications@...ncipher.com>)
nCipher Advisory #13: CBC-MAC IV misleading programming interface (nCipher Support <technotifications@...ncipher.com>)
nCipher Advisory #14: Presence of flaws in firmware security (nCipher Support <technotifications@...ncipher.com>)
[SECURITY] [DSA 989-1] New zoph packages fix SQL injection (Moritz Muehlenhoff <jmm@...til.org>)
Remote access to NeuSecure/Netcool backend database via web interface credentials leakage (D.Snezhkov <dsnezhkov@...il.com>)
Easy File Sharing Web Server Multiple Vulnerablilities (revnic@...il.com)
HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit (h4cky0u.org@...il.com)
INFIGO-2006-03-01: PeerCast streaming server remote buffer overflow ("infocus" <infocus@...igo.hr>)
M-Phorum Cross Site Scripting (codexploder@...mail.com)
ADP Forum 2.0,* script İnjection (liz0@...mail.com)
DCP Portal: Multiple XSS Vulnerabilities (enji@...lab.tuwien.ac.at)
MyBloggie: Multiple XSS Vulnerabilities (enji@...lab.tuwien.ac.at)
txtForum: Multiple XSS Vulnerabilities (enji@...lab.tuwien.ac.at)
GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
txtForum: Script Injection Vulnerability (enji@...lab.tuwien.ac.at)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
Re: a worm for mediaWiki?? (Michael Rice <michael@...eclan.org>)
RevilloC MailServer 1.x "USER" Command Handling Remote Buffer Overflow Exploit (<securma@...x.org>)
Re: Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting (no_reply@...urityfocus.com)
Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000 (reedarvin@...il.com)
Aluria/WhenU Troubled Past and Whitewashing History (Paul Laudanski <zx@...tlecops.com>)
Re: [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8 (omega13a@...global.net)
Re: [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8 (omega13a@...global.net)
Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. (nukedx@...edx.com)
UnrealIRCd3.2.3 Server-Link Denial of Service (admin@...neck.servebeer.com)
DVguestbook 1.0 And 1.2.2 Cross Site Scripting (liz0@...mail.com)
PHP Upload Center Download users password hashes And phpshell Upload (liz0@...mail.com)
PHP Advanced Transfer Manager Download users password hashes (liz0@...mail.com)
n8cms 1.1 & 1.2 version Sql İnjection And XSS (liz0@...mail.com)
Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit (scaturan@...il.com)

March 10 (22 messages)

[USN-261-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[KDE Security Advisory] kpdf of KDE 3.3.x heap based buffer overflow (Dirk Mueller <mueller@....org>)
Re: Dropbear SSH server Denial of Service (Matt Johnston <matt@....asn.au>)
[ MDKSA-2006:035-1 ] - Updated php packages fix vulnerability (security@...driva.com)
Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm ("Zone Labs Product Security" <Product-Security.at.zonelabs.com@...hael.…)
[SECURITY] [DSA 990-1] New bluez-hcidump packages fix denial of service (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 919-2] New curl packages fix potential security problem (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 991-1] New zoo packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[eVuln] FreeForum PHP Code Execution & Multiple XSS Vulnerabilities (alex@...ln.com)
[ GLSA 200603-06 ] GNU tar: Buffer overflow (Thierry Carrez <koon@...too.org>)
GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
Re: Dropbear SSH server Denial of Service (il80r@...eme.xxx)
[KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability (alireza hassani <trueend5@...oo.com>)
RE: Purple Paper: Exegesis Of Virtual Hosts Hacking ("Craig Wright" <cwright@...syd.com.au>)
Re: Thomson SpeedTouch 500 modems vulnerable to XSS (dford@...ur.demon.co.uk)
Re: recursive DNS servers DDoS as a growing DDoS problem ("Ventsislav Genchev" <vigour1@...il.com>)
Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit (scaturan@...imaki.com)
Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit (Don Voita <don@...ucsb.edu>)
[ GLSA 200603-07 ] flex: Potential insecure code generation (Thierry Carrez <koon@...too.org>)
[ GLSA 200603-08 ] GnuPG: Incorrect signature verification (Thierry Carrez <koon@...too.org>)
[SECURITY] [DSA 993-1] New GnuPG packages fix broken signature check (joey@...odrom.org (Martin Schulze))

March 11 (8 messages)

CoreNews 2.0.1 Remote Command Exucetion (botan@...uxmail.org)
Re: Dropbear SSH server Denial of Service (Damien Miller <djm@...drot.org>)
XSS in vCard (xx_hack_xx_2004@...mail.com)
SGI IRIX 6.*usr/sysadm/bin/runpriv local root exploit ("rod hedor" <rodhedor@...mail.com>)
Jupiter CMS <= 1.1.5 multiple XSS attack vectors. (zerogue@...il.com)
Coppermine exploit used by a Chase Phish? (Paul Laudanski <zx@...tlecops.com>)
Copy protection scheme SafeDisc allows privilege escalation (yourname@...rdomain.com)
AntiVir PersonalEdition Classic: Local Privilige Escalation (Ramon 'ports' Kukla <ml2@...tsonline.net>)

March 12 (3 messages)

[ GLSA 200603-09 ] SquirrelMail: Cross-site scripting and IMAP command injection (Stefan Cornelius <dercorny@...too.org>)
Multiple vulnerabilities in ENet library (Jul 2005) (Luigi Auriemma <aluigi@...istici.org>)
Buffer Overflow and Installation Script Error in Firebird 1.5.3 (Joxean Koret <joxeankoret@...oo.es>)

March 13 (18 messages)

[ GLSA 200603-10 ] Cube: Multiple vulnerabilities (Stefan Cornelius <dercorny@...too.org>)
[USN-262-1] Ubuntu 5.10 installer password disclosure (Martin Pitt <martin.pitt@...onical.com>)
[USN-263-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-264-1] gnupg vulnerability (Martin Pitt <martin.pitt@...onical.com>)
directory traversal Fixed in DirectContact 0.3c (lionel@...ero.info)
[SECURITY] [DSA 994-1] New freeciv packages fix denial of service (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 995-1] New metamail packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[eVuln] Vegas Forum SQL Injection Vulnerability (alex@...ln.com)
Kerio MailServer bugfun (Evgeny Legerov <research@...g.net>)
[SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 993-2] New GnuPG packages fix broken signature check (joey@...odrom.org (Martin Schulze))
Secunia Research: unalz Filename Handling Directory Traversal Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting (Secunia Research <remove-vuln@...unia.com>)
WMNews Cross Site Scripting (exalibur33@...il.com)
ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability (zdi-disclosures@...m.com)
[INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability ("dong-hun you" <xploit@...kermail.com>)
Re: Coppermine exploit used by a Chase Phish? (Nexus <nexus.logik@...il.com>)
[SECURITY] [DSA 997-1] New bomberclone packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))

March 14 (30 messages)

[ MDKSA-2006:055 ] - Updated gnupg packages fix signature file verification vulnerability (security@...driva.com)
GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue (Uwe Hermann <uwe@...mann-uwe.de>)
GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
[Announce] GnuPG does not detect injection of unsigned data (Werner Koch <wk@...pg.org>)
RE: Re: recursive DNS servers DDoS as a growing DDoSproblem ("Keith T. Morgan" <keith.morgan@...radon.com>)
Re: Re: recursive DNS servers DDoS as a growing DDoSproblem (Måns Nilsson <mansaxel@...et.se>)
RE: Re: recursive DNS servers DDoS as a growingDDoSproblem (Keith Morgan <keith.morgan@...radon.com>)
[SECURITY] [DSA 999-1] New lurker packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 998-1] New libextractor packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow' ("KF (lists)" <kf_lists@...italmunition.com>)
[SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1001-1] New crossfire packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...til.org>)
Linux zero IP ID vulnerability? (Marco Ivaldi <raptor@...eadbeef.info>)
[eVuln] CyBoards PHP Lite SQL Injection Vulnerability (alex@...ln.com)
ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability (zdi-disclosures@...m.com)
High Risk Vulnerability in Microsoft Excel ("NGSSoftware Insight Security Research" <nisr@...software.com>)
Re: histhost v1.0.0 xss and possible rmdir ("Steven M. Christey" <coley@...re.org>)
Fortinet Security Advisory: FSA-2006-09 (Fortinet Research <vulnmoniter@...tinet.com>)
Fortinet Security Advisory: FSA-2006-08 (Fortinet Research <vulnmoniter@...tinet.com>)

March 15 (26 messages)

WLSI - Windows Local Shellcode Injection - Paper (Cesar <cesarc56@...oo.com>)
[HV-HIGH] Microsoft Excel Named Range Arbitrary Code Execution (vuln@...view.com)
SYMSA-2006-001: Buffer overflow in Microsoft Office 2000, Office XP (2002), and Office 2003 Routing Slip Metadata (CS_Advisories Mailbox <CS_Advisories_Mailbo…)
[xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (XFOCUS Security Team <security@...cus.org>)
Re: histhost v1.0.0 xss and possible rmdir ("Chris Kuethe" <chris.kuethe@...il.com>)
CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net ("CodeScan Labs" <advisories@...escan.com>)
[SECURITY] [DSA 1002-1] New webcalendar packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
CodeScan Advisory: Unauthenticated Arbitrary File Read in Horde v3.09 and prior ("CodeScan Labs" <advisories@...escan.com>)
[eVuln] discussion - xhawk.net BBCode 'img' XSS & SQL Injection Vulnerabilities (alex@...ln.com)
Secunia Research: Adobe Document/Graphics Server File URI Resource Access (Secunia Research <remove-vuln@...unia.com>)
FW: call for speakers and thoughts on VoIP Security - there's a long way to go! ("Ken Kousky" <KKousky@...inc.com>)
Sasser variant that effects 2k3 SP1 completely updated? ("Andrew Weaver" <aweaver@...net>)
[[KAPDA::#35] MyBB 1.0.3~member.php~XSS Attack in contact details (addmimistrator@...il.com)
[KAPDA::#35] - MyBB1.0.4~member.php~XSS after login (addmimistrator@...il.com)
[KAPDA::#34] - MyBB1.0.4~redirectfunction()~HeaderInjection (addmimistrator@...il.com)
Re: Purple Paper: Exegesis Of Virtual Hosts Hacking (Anders Henke <anders@...lund.de>)
GnuPG weak as one guy with a spare laptop. ("Forrest J. Cavalier III" <mibsoft@...software.com>)
Invision Power Board v2.1.4 - session hijacking (Hans Wolters <hans.wolters@...all.nl>)
Re: Linux zero IP ID vulnerability? (Marco Ivaldi <raptor@...eadbeef.info>)
WebVulnCrawl searching excluded directories for hackable web servers ("Michael Scheidell" <scheidell@...nap.net>)
Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit (anonymous@...vate.private)
Latest MS patches kill wireless networking? (James Garrison <jhg@...ensgroup.com>)
Re: Latest MS patches kill wireless networking? (James Garrison <jhg@...ensgroup.com>)
Re: Sasser variant that effects 2k3 SP1 completely updated? ("Robert J. Stull" <Stull_Robert_J@....com>)
Vulnerability in e-gold (shurik.f@...il.com)
Vulnerability fixed in E-gold (3APA3A <3APA3A@...urity.nnov.ru>)

March 16 (15 messages)

Re: [VulnWatch] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
Milkeyway Multiple Vulnerabilities (ascii <ascii@...amail.com>)
Re: Re: [VulnWatch] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (eyas <eyas@...cus.org>)
Re: Re: [VulnWatch] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability ("ad@...poverflow.com" <ad@...poverflow.com>)
[ GLSA 200603-11 ] Freeciv: Denial of Service (Stefan Cornelius <dercorny@...too.org>)
[ GLSA 200603-12 ] zoo: Buffer overflow (Stefan Cornelius <dercorny@...too.org>)
[SECURITY] [DSA 1003-1] New xpvm packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Invision Power Board v2.1.4 - session hijacking (Peter Conrad <conrad@...ano.de>)
Re: Invision Power Board v2.1.4 - session hijacking (matt@...isionpower.com)
Re: Linux zero IP ID vulnerability? (Andrea Purificato - bunker <bunker@...twebnet.it>)
Re: Invision Power Board v2.1.4 - session hijacking (Hans Wolters <hans.wolters@...all.nl>)
Remote overflow in MSIE script action handlers (mshtml.dll) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Daniel Bonekeeper" <thehazard@...il.com>)

March 17 (26 messages)

[FLSA-2006:157459-1] Updated kernel packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:157459-2] Updated kernel packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:157459-3] Updated kernel packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:157459-4] Updated kernel packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:173274] Updated gdk-pixbuf packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:175404] Updated xpdf package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:174479] Updated libungif packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:178606] Updated kdelibs packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Fedora Legacy Server Outage (fedora-legacy-announce@...hat.com)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
XCon2006 Call For Paper (XFOCUS Security Team <security@...cus.org>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Daniel Bonekeeper" <thehazard@...il.com>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Tomasz Onyszko <t.onyszko@....pl>)
RE: Remote overflow in MSIE script action handlers (mshtml.dll) ("David Schenz" <schenz.9@....ohio-state.edu>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Hariharan" <harij22@...il.com>)
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: GnuPG weak as one guy with a spare laptop. (<obnoxious@...h.com>)
[ GLSA 200603-13 ] PEAR-Auth: Potential authentication bypass (Stefan Cornelius <dercorny@...too.org>)
[ GLSA 200603-14 ] Heimdal: rshd privilege escalation (Stefan Cornelius <dercorny@...too.org>)
[ GLSA 200603-15 ] Crypt::CBC: Insecure initialization vector (Stefan Cornelius <dercorny@...too.org>)
[ GLSA 200603-16 ] Metamail: Buffer overflow (Stefan Cornelius <dercorny@...too.org>)
Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem (Robert Story <rstory-l@...6.revelstone.com>)
Re: GnuPG weak as one guy with a spare laptop. ("Forrest J. Cavalier III" <mibsoft@...software.com>)
XSS IN Invision Power Board ("???? ????" <mr_snake_my@...mail.com>)
Symantec Security Advisory SYM06-004 (secure@...antec.com)
Generically Determining the Prescence of Virtual Machines (valsmith@...asploit.com)

March 18 (24 messages)

Re: Remote overflow in MSIE script action handlers (mshtml.dll) (<c0redump@...ers.org.uk>)
Re: Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Nazca@...e-h.fr)
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
DNS Amplification Attacks (Gadi Evron <ge@...uxbox.org>)
Re: recursive DNS servers DDoS as a growing DDoS problem (Robert Story <rstory-l@...6.revelstone.com>)
[SECURITY] [DSA 1008-1] New kpdf packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Master Phoxpherus" <phoxpherus@...mail.co.uk>)
[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Jamie Riden" <jamie.riden@...il.com>)
Oxynews Sql İnjection (r00t3rr0r@...il.com)
[eVuln] NMDeluxe XSS & SQL Injection Vulnerabilities (alex@...ln.com)
Re: Linux zero IP ID vulnerability? (Marco Ivaldi <raptor@...eadbeef.info>)
Microsoft Commerce Server 2002: Logon as known user with a false password ("Dimitri" <d.vd.giessen@...all.nl>)
MyBB 1.10 Full Path Disclosure (o.y.6@...mail.com)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Konstantine <listclient@...il.com>)
IMF 2006 - 2nd Call for Papers (Oliver Goebel <Goebel@...T.Uni-Stuttgart.DE>)
Contrexx CMS Xss Vuln (Soothackers@...il.com)
Xss in Wbb 2.3.4 (r57shell@...il.com)
Advisory: BetaParticle Blog <= 6.0 Multiple Remote SQL Injection Vulnerabilities (nukedx@...edx.com)
Advisory: BetaParticle Blog <= 6.0 Multiple Remote SQL Injection Vulnerabilities (nukedx@...edx.com)
Re: Latest MS patches kill wireless networking? ("Matt Ostiguy" <ostiguy@...il.com>)
Re: WebVulnCrawl searching excluded directories for hackable web servers (Peter Conrad <conrad@...ano.de>)
Re: Latest MS patches kill wireless networking? ("Phil Frederick" <flosofl@...il.com>)

March 19 (1 message)

Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Manuel Moreno Leiva" <morenoleiva@...il.com>)

March 20 (28 messages)

[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 (Daniel Stone <daniel@...ishbar.org>)
ExtCalendar v1.0 Multiple Xss Vuln (Soothackers@...il.com)
[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1009-1] New crossfire packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[security bulletin] SSRT051078 rev.1 - HP-UX usermod(1M) Local UnaUthorized Access (security-alert@...com)
[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities (joey@...odrom.org (Martin Schulze))
[security bulletin] SSRT051128 rev.1 - HP-UX VirtualVault running Apache 1.3.X Remote Unauthorized Access (security-alert@...com)
[security bulletin] SSRT051251 rev.2 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of… (security-alert@...com)
phpWebsite <= SQL Injection (friend.php) & (article.php) (dabdoub_mosikar@...islam.com)
Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities (raphael.huck@...e.fr)
Re: Re: Remote overflow in MSIE script action handlers (mshtml.dll) ("Phil Frederick" <flosofl@...il.com>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Steve Shockley <steve.shockley@...ckley.net>)
Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem ("Bram Matthys (Syzop)" <syzop@...nscan.org>)
Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000 (justint@...ail.net)
Re: CodeScan Advisory: Unauthenticated Arbitrary File Read in Horde v3.09 and prior (Jan Schneider <jan@...de.org>)
Re: Remote overflow in MSIE script action handlers (mshtml.dll) (<c0redump@...ers.org.uk>)
Re: Generically Determining the Prescence of Virtual Machines (Jeff Epler <jepler@...ythonic.net>)
Re: Latest MS patches kill wireless networking? ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
Re: recursive DNS servers DDoS as a growing DDoS problem (Michael Sierchio <kudzu@...ebras.com>)
RE: Generically Determining the Prescence of Virtual Machines ("Burton Strauss" <Security@...llNetSolutions.com>)
Re: Re: Invision Power Board v2.1.4 - session hijacking (matt@...isionpower.com)
Re: Invision Power Board v2.1.4 - session hijacking (exon <exon@...e.se>)
Re: Invision Power Board v2.1.4 - session hijacking (exon <exon@...e.se>)
Symantec Security Advisory, SYM06-005 (secure@...antec.com)
Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 (H D Moore <sflist@...italoffense.net>)
RE: Generically Determining the Prescence of Virtual Machines ("Thomas Guyot-Sionnest" <Thomas@...go.com>)
Re: Invision Power Board v2.1.4 - session hijacking (Bill Nash <billn@...ssey.billn.net>)
[ MDKSA-2006:056 ] - Updated xorg-x11 packages to address local root vuln (security@...driva.com)

March 21 (15 messages)

Perverting Unix Processes (Pluf <pluf@...9ezine.org>)
Re: Invision Power Board v2.1.4 - session hijacking (Hans Wolters <hans.wolters@...all.nl>)
[ MDKSA-2006:057 ] - Updated cairo packages to address Evolution DoS vulnerability (security@...driva.com)
CORE-2006-0124: Cross-Site Scripting in Verisign’s haydn.exe CGI script (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[ GLSA 200603-17 ] PeerCast: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200603-18 ] Pngcrush: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
XSS in Firepass 4100 SSL VPN v.5.4.2 (and probably others) (alfy@...ers.ch)
Cisco Aironet 1300 DoS condition ("Alex" <netshark@...ajoy.com>)
Recon 2006: Guest speakers announcement. Call for paper and early registration ending in less than 2 weeks. (Hugo Fortier <hfortier@...on.cx>)
[ GLSA 200603-19 ] cURL/libcurl: Buffer overflow in the handling of TFTP URLs (Matthias Geerdsen <vorlon@...too.org>)
ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities (nukedx@...edx.com)
[ GLSA 200603-20 ] Macromedia Flash Player: Arbitrary code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Free Articles Directory Remote Command Exucetion (botan@...uxmail.org)

March 22 (19 messages)

Mini-Nuke<=1.8.2 SQL injection (6) (dabdoub_mosikar@...islam.com)
IE crash (Stelian Ene <stelian.ene@...adtech.com>)
FreeBSD Security Advisory FreeBSD-SA-06:13.sendmail (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-06:12.opie (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME… ("Suport Account" <support@...portal.net…)
FreeBSD Security Advisory FreeBSD-SA-06:11.ipsec (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[eVuln] PHP SimpleNEWS, PHP SimpleNEWS MySQL - Authentication Bypass Vulnerability (alex@...ln.com)
DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack' ("KF (lists)" <kf_lists@...italmunition.com>)
WinHKI 1.6x Archive Extraction Directory traversal (h e <het_ebadi@...oo.com>)
cutenews 1.4.1 Arbitrary File Access (h e <het_ebadi@...oo.com>)
[SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
FW: IE crash (Terminal Entry <Security@...dro.net>)
Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 ("Alan Coopersmith" <alanc@...m.calberkeley.org>)
PHP Live! XSS status_image.php (kspecial <kspecial@...iroz.net>)
Re; FreeBSD Security Advisory FreeBSD-SA-06:13.sendmail (Jose Nazario <jose@...key.org>)
[ GLSA 200603-21 ] Sendmail: Race condition in the handling of asynchronous signals (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
SUSE Security Announcement: sendmail remote code execution (SUSE-SA:2006:017) (Thomas Biege <thomas@...e.de>)
[HV-PAPER] Security Product Evaluation Tips (vuln@...view.com)
[OpenPKG-SA-2006.007] OpenPKG Security Advisory (sendmail) (OpenPKG <openpkg@...npkg.org>)

March 23 (22 messages)

[ GLSA 200603-22 ] PHP: Format string and XSS vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow (Stefan Esser <sesser@...dened-php.net>)
SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
trusting SMTP [was: SendGate: Sendmail Multiple Vulnerabilities] (Gadi Evron <ge@...uxbox.org>)
[USN-265-1] cairo/Evolution library vulnerability (Martin Pitt <martin.pitt@...onical.com>)
sendmail vuln advisories (CVE-2006-0058) (Marc Bejarano <bugtraq@...j.org>)
[SECURITY] [DSA 1014-1] New firebird2 packages fix denial of service (joey@...odrom.org (Martin Schulze))
[ MDKSA-2006:058 ] - Updated sendmail packages fix remote vulnerability (security@...driva.com)
[ MDKSA-2006:059 ] - Updated kernel packages fix multiple vulnerabilities (security@...driva.com)
[SECURITY] [DSA 1015-1] New sendmail packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Microsoft MSN Hotmail : Cross-Site Scripting Vulnerability (Renaud Lifchitz <r.lifchitz@...dream.com>)
Re: sendmail vuln advisories (CVE-2006-0058) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[KAPDA::#37] - CoMoblog XSS (farhadkey@...da.ir)
PasswordSafe 3.0 weak random number generator allows key recovery attack (info@...omsoft.com)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Dragos Ruiu <dr@....net>)
Vulnerability Alert Services - Independent List ("Andy Cuff" <AndyCuff@...uritywizardry.com>)
[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[SECURITY] [DSA 1017-1] New Linux kernel 2.6.8 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution (advisories@...puterterrorism.com)
iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability (labs-no-reply <labs-no-reply@...fense.com>)
iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnera… (labs-no-reply <labs-no-reply@...fense.c…)

March 24 (45 messages)

Secunia Research: Microsoft Internet Explorer "createTextRange()" Code Execution (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Linux zero IP ID vulnerability? (Marco Ivaldi <raptor@...eadbeef.info>)
ArabPortal 2.0 Stable [ Full Patch Disclosure ] (o.y.6@...mail.com)
Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0 ("Kyle Sallee" <kyle.sallee@...il.com>)
Re: PasswordSafe 3.0 weak random number generator allows key recovery attack ("Dave Korn" <davek_throwaway@...mail.com>)
Popup Blocker Bypass Script ("James C. Slora, Jr." <james.slora@...a.com>)
Sudo tricks (John Richard Moser <nigelenki@...cast.net>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Theo de Raadt <deraadt@....openbsd.org>)
[FLSA-2006:186277] Updated sendmail packages fix security issues (Jesse Keating <jkeating@...olutions.net>)
Re: Linux zero IP ID vulnerability? (GomoR <bugtraq@...or.org>)
Re: PHP-Stats <= 0.1.9.1 remote commands execution (freesitealessandro@...gilio.it)
Re: Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (purplebag <purplebag@...il.com>)
Digital Armaments April-2006 Hacking Challenge: Oracle Database (info@...italarmaments.com)
Vulnerabilitiy found in comodo hacker guardian free scan. (sk8boardkid@...il.com)
Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem (Tim <tim-security@...tinelchicken.org>)
Re: recursive DNS servers DDoS as a growing DDoS problem (Chris Thompson <cet1@....cam.ac.uk>)
w3wp remote DoS ("Debasis Mohanty" <debasis@...kingspirits.com>)
Re: trusting SMTP [was: SendGate: Sendmail Multiple Vulnerabilities] (Valdis.Kletnieks@...edu)
[ MDKSA-2006:060 ] - Updated FreeRADIUS packages fix EAP-MSCHAPv2 module vulnerability (security@...driva.com)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Claus Assmann <ca+bugtraq@...doc.endmail.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Eric Allman <eric+bugtraq@...philic.com>)
[SECURITY] [DSA 1019-1] New kpdf packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[eVuln] @1 File Store Multiple XSS and SQL Injection Vulnerabilities (alex@...ln.com)
[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
On product vulnerability history and vulnerability complexity ("Steven M. Christey" <coley@...re.org>)
[eVuln] DSPoll Multiple SQL Injection Vulnerabilities (alex@...ln.com)
[eVuln] DSNewsletter SQL Injection Vulnerability (alex@...ln.com)
[security bulletin] HPSBUX02105 SSRT061134 rev.1 - HP-UX Running swagentd Remote Denial of Service (DoS) (security-alert@...com)
[DDSi-SA] XSS in Raindance Communications Web Conferencing Pro (D.Snezhkov <dsnezhkov@...il.com>)
Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation (neeko@...lingsinister.net)
Secunia Research: Quick 'n Easy/Baby Web Server ASP Code Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
RE: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) ("Andrew Florjancic" <aflorjancic@...asvanlines.ca>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Re: trusting SMTP [was: SendGate: Sendmail Multiple Vulnerabilities] (Gadi Evron <ge@...uxbox.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
HeffnerCMS Remote Command Exucetion And Cross Scripting Attack (botan@...uxmail.org)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Martin Schulze <joey@...odrom.org>)
VihorDesing Script Remote Command Exucetion And Cross Scripting Attack (botan@...uxmail.org)
Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation (Chris Gianelloni <wolf31o2@...rter.net>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Theo de Raadt <deraadt@....openbsd.org>)
Re: Vulnerability Alert Services - Independent List (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Theo de Raadt <deraadt@....openbsd.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Theo de Raadt <deraadt@....openbsd.org>)

March 25 (17 messages)

Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation (Tavis Ormandy <taviso@...too.org>)
RE: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) ("Michael A Fusaro II" <maf@...ii.com>)
Re: Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Todd Burroughs <fd@...sec.net>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Casper.Dik@....COM)
Re: Sudo tricks ("Dave Korn" <davek_throwaway@...mail.com>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) ("D.F.Russell" <DFRussell@...mcop.net>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Systrace 1.6: Phoenix Release ("Niels Provos" <provos@...i.umich.edu>)
[eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability (alex@...ln.com)
[eVuln] DSDownload Multiple SQL Injection Vulnerabilities (alex@...ln.com)
Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll) (dgtlscrm@...il.com)
Re: Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities) (bifta04@....com)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Eric Allman <eric+bugtraq@...philic.com>)
Re: recursive DNS servers DDoS as a growing DDoS problem (MaddHatter <maddhatt+bugtraq@....pdx.edu>)
Re: recursive DNS servers DDoS as a growing DDoS problem (Gadi Evron <ge@...uxbox.org>)

March 26 (2 messages)

UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection (dabdoub_mosikar@...islam.com)
[ GLSA 200603-24 ] RealPlayer: Buffer overflow vulnerability (Matthias Geerdsen <vorlon@...too.org>)

March 27 (18 messages)

[PHPADSNEW-SA-2006-001] phpAdsNew and phpPgAds 2.0.8 fix multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
SQL Injection in SaphpLesson2.0 (xx_hack_xx_2004@...mail.com)
HPSBUX02108 SSRT061133 rev.1 - HP-UX Sendmail, Remote Execution (secure@...hs.cup.hp.com (Security Alert))
AkoComment SQL injection vulnerability ("Stefan Keller" <skeller@...ox.com>)
SQL injection in VGM Forbin. (mfoxhacker@...il.com)
nuked-klan<=1.7.5 SQL Injection (dabdoub_mosikar@...islam.com)
CanfTool v1.1 Cross Site Scripting Attack (botan@...uxmail.org)
HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities (h4cky0u.org@...il.com)
HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS (h4cky0u.org@...il.com)
[eVuln] DSLogin Authentication Bypass Vulnerability (alex@...ln.com)
[eVuln] Maian Weblog Multiple SQL Injection Vulnerabilities (alex@...ln.com)
[ GLSA 200603-25 ] OpenOffice.org: Heap overflow in included libcurl (Stefan Cornelius <dercorny@...too.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Coleman Kane <cokane@...ane.org>)
TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow (zdi-disclosures@...m.com)
ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow (zdi-disclosures@...m.com)
Blog Pixel Motion<=1.xx Authentication Bypass Vulnerability & SQL injection (dabdoub_mosikar@...islam.com)
Re: PasswordSafe 3.0 weak random number generator allows key recovery attack (ronys@...rs.sf.net)

March 28 (37 messages)

Re: recursive DNS servers DDoS as a growing DDoS problem (Anton Ivanov <arivanov@...segv.cx>)
Microsoft Windows XP SP2 Firewall issue (edubp2002@...mail.com)
XSS & SQL Injection in Music Box v2.3 (xx_hack_xx_2004@...mail.com)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Pim van Riezen <pi@...science.nl>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) ("Kurt Seifried" <bt@...fried.org>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Florian Weimer <fw@...eb.enyo.de>)
Re: Sudo tricks (Kyle Wheeler <kyle-bugtraq@...oryhole.net>)
Re: recursive DNS servers DDoS as a growing DDoS problem ("Geo." <geoincidents@....net>)
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation (Moritz Muehlenhoff <jmm@...ian.org>)
SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons (secure@...antec.com)
PHPLiveHelper 1.8 remote command execution (include) Xploit (perl) (stormhacker@...mail.com)
Critical PHP bug - act ASAP if you are running web with sensitive data (Tõnu Samuel <tonu@....ee>)
EEYE: Temporary workaround for IE createTextRange vulnerability ("Marc Maiffret" <mmaiffret@...e.com>)
VWar <= 1.5.0 R11 Remote Code Execution Exploit (uid0@...loitercode.com)
Re: On classifying attacks (Gadi Evron <ge@...uxbox.org>)
[eVuln] Maian Events SQL Injection Vulnerability (alex@...ln.com)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) ("Geo." <geoincidents@....net>)
XSS in AL-Caricatier (xx_hack_xx_2004@...mail.com)
[eVuln] Maian Support Authentication Bypass (alex@...ln.com)
[SECURITY] [DSA 1021-1] New netpbm-free packages fix arbitrary command execution (Moritz Muehlenhoff <jmm@...ian.org>)
Genius VideoCAM NB Local Privilege Escalation (beford <xbefordx@...il.com>)
Secunia Research: Blazix Web Server JSP Source Code Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Tõnu Samuel <tonu@....ee>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Casper.Dik@....COM)
Re: SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons (secure@...antec.com)
Re: Microsoft Windows XP SP2 Firewall issue ("Thor (Hammer of God)" <thor@...merofgod.com>)
ArabPortal 2.0 Stable CrossSiteScripting (o.y.6@...mail.com)
Re: Critical PHP bug - act ASAP if you are runningweb with sensitive data ("FuntKlakow" <davek_throwaway@...mail.com>)
Re: Sudo tricks ("Thomas M. Payerle" <payerle@...sics.umd.edu>)
Announcement: The Web Hacking Incidents Database (contact@...appsec.org)
Re: [SECURITY] [DSA 1020-1] New flex packages fix insecure code generation ("Matthew R. Dempsky" <mrd@...emio.org>)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Stefan Esser <sesser@....net>)
Resource to Report and Stop Phishing Scams (Paul Laudanski <zx@...tlecops.com>)
Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution) ("Determina Secure" <secure@...ermina.com>)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Tõnu Samuel <tonu@....ee>)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) (Gadi Evron <ge@...uxbox.org>)
Cantv/Movilnet's Web SMS vulnerability. ("Bugtraq @ SNSecurity" <bugtraq@...ecurity.com>)

March 29 (20 messages)

Re: PHP-Stats <= 0.1.9.1 remote commands execution (nomail@...l.com)
Re: Sudo tricks ("Steven M. Christey" <coley@...re.org>)
Re: Secunia Research: Microsoft Internet Explorer "createTextRange()"Code Execution (edubp2002@...mail.com)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Jasper Bryant-Greene <jasper@...um.co.nz>)
[xfocus-SD-060329]MPlayer: Multiple integer overflows (XFOCUS Security Team <security@...cus.org>)
[HV-INFO] Enova hardware encryption: false sense of security (vuln@...view.com)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Tõnu Samuel <tonu@....ee>)
Re: [xfocus-SD-060329]MPlayer: Multiple integer overflows (Attila Kinali <attila@...ali.ch>)
Re: [Full-disclosure] Critical PHP bug - act ASAP if you are runningweb with sensitive data (Tõnu Samuel <tonu@....ee>)
XSS in PHPKIT Version 1.6.03 (badnet_xoopiter@...oo.com)
Re: [SECURITY] [DSA 1020-1] New flex packages fix insecure code generation (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Critical PHP bug - act ASAP if you are running web with sensitive data (Jeff Rosowski <rosowskij@...ymp.gov>)
[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability (alex@...ln.com)
[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection (alex@...ln.com)
Re: Sudo tricks (Krzysztof Halasa <khc@...waw.pl>)
Re: Re: phpBB 2.06 search.php SQL injection (fritz-li@...il.hinet.net)
PhxContacts <= 0.93.1 beta Multiple SQL injection & xss (dabdoub-mosikar@...occan-security.com)
Re: Cantv/Movilnet's Web SMS vulnerability. (raven <locrideweb@...ero.it>)
Full path disclosure in Webcalendar 1.1.0-CVS (crasher@...oak.or.id)
[ GLSA 200603-26 ] bsd-games: Local privilege escalation in tetris-bsd (Stefan Cornelius <dercorny@...too.org>)

March 30 (16 messages)

strip_tags() but not only vulnerability (Tõnu Samuel <tonu@....ee>)
EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. ("Mustafa Can Bjorn IPEKCI" <nukedx@...edx.com>)
[ MDKSA-2006:061 ] - Updated mailman packages fix DoS from badly formed mime multipart messages. (security@...driva.com)
X-Changer <=v0.2 Demo SQL injection (dabdoub-mosikar@...occan-security.com)
Buffer overflows in Dia XFig import (lars@...der.dk)
McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: On classifying attacks (David M Chess <chess@...ibm.com>)
Smurfable Linux Kernel (Tomasz Chomiuk <t.chomiuk@...pl>)
[SECURITY] Samba 3.0.21-3.0.21c: Exposure of machine account credentials in winbindd log files ("Gerald (Jerry) Carter" <jerry@...ba.org>)
[security bulletin] HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd(1) Local Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02102 SSRT051078 rev.2 - HP-UX usermod(1M) Local Unauthorized Access. (security-alert@...com)
Re: recursive DNS servers DDoS as a growing DDoS problem ("mike davis" <phar@...nedcoder.org>)
Re: recursive DNS servers DDoS as a growing DDoS problem (gboyce <gboyce@...belly.com>)
Re: recursive DNS servers DDoS as a growing DDoS problem (Stephen Samuel <samuel@...reen.com>)
Re: recursive DNS servers DDoS as a growing DDoS problem ("Geo." <geoincidents@....net>)
MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability (simo64@...il.com)

March 31 (19 messages)

[HV-PAPER] Anti-Phishing Tips You Should Not Follow (vuln@...view.com)
Re: [HV-PAPER] Anti-Phishing Tips You Should Not Follow (michaelslists@...il.com)
Re: [HV-PAPER] Anti-Phishing Tips You Should Not Follow (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Oxygen<=1.x.x SQL injection (dabdoub-mosikar@...occan-security.com)
MonAlbum 0.8.7 SQL Injection (undefined1@...il.com)
Black Hat Call for Papers and Registration now open (Jeff Moss <jmoss@...ckhat.com>)
[security bulletin] HPSBUX02108 SSRT061133 rev.2 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (security-alert@...com)
RE: WebVulnCrawl searching excluded directories for hackable web servers ("Michael Scheidell" <scheidell@...nap.net>)
OSSTMM Security Analyst Training Live Stream on the Web (Pete Herzog <pete@...com.org>)
Re: Sudo tricks (Javor Ninov <drfrancky@...urax.org>)
Re: [HV-PAPER] Anti-Phishing Tips You Should Not Follow (vuln@...view.com)
Re: On classifying attacks (Gadi Evron <ge@...uxbox.org>)
EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. ("Mustafa Can Bjorn IPEKCI" <nukedx@...edx.com>)
RE: recursive DNS servers DDoS as a growing DDoS problem ("Geo." <geoincidents@....net>)
RE: Sudo tricks ("Burton Strauss" <Security@...llNetSolutions.com>)
Re: Re: Cantv/Movilnet's Web SMS vulnerability. (rrecabarren@...ecurity.com)
Buffer-overflow and in-game crash in Zdaemon 1.08.01 (Luigi Auriemma <aluigi@...istici.org>)
DbbS<=2.0-alpha SQL injection (dabdoub-mosikar@...occan-security.com)
Warcraft III Replay Parser Script Remote Command Exucetion Vulnerability And Cross-Site Scripting Attacking (botan@...uxmail.org)

658 messages

Powered by blists - more mailing lists