bugtraq mailing list - 2008/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2008/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 6	²
³ 24	⁴ 11	⁵ 11	⁶ 22	⁷ 27	⁸ 9	⁹
¹⁰ 37	¹¹ 28	¹² 17	¹³ 15	¹⁴ 7	¹⁵ 7	¹⁶
¹⁷ 23	¹⁸ 22	¹⁹ 13	²⁰ 26	²¹ 16	²² 16	²³
²⁴ 27	²⁵ 16	²⁶ 17	²⁷ 15	²⁸ 20	²⁹ 4	³⁰
³¹ 12

Messages by day:

March 1 (6 messages)

Mambo com_Musica "id" Remote SQL Injection (no-reply@...a-security.net)
Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability (sys-project@...mail.com)
h2desk helpdesk path disclosure vulnerability (joseph.giron13@...il.com)
PHP-Nuke Copyright 2005 SQL (turkish-warriorr@...mail.com)
Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS (FTPD)_ (0in.email@...il.com)
The Router Hacking Challenge is Over! ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)

March 3 (24 messages)

Dynamic photo gallery V1.02 SQL Injection (no-reply@...a-security.net)
Recon 2008 - Call For Paper (Recon <cfp2008@...on.cx>)
[ GLSA 200803-02 ] Firebird: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
kcwiki 1.0 multiple remote file inclusion vulnerabilities. ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
[ GLSA 200803-01 ] Adobe Acrobat Reader: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Squid Analysis Report Generator <= 2.2.3.1 buffer overflow (L4teral <l4teral@...il.com>)
[ GLSA 200803-03 ] Audacity: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
Re: Crafty Syntax Xss Vulnerability (erics@...ftysyntax.com)
XSS in XP Book version 3.0 (xx_hack_xx_2004@...mail.com)
[DSECRG-08-017] Flyspray 0.9.9.4 Multiple Security Vulnerabilities (Digital Security Research Group <research@...c.ru>)
CSRF in joomla 1.0.11 stable version (vivek_infosec@...oo.com)
Re: CSRF in joomla 1.0.11 stable version (zinho@...kerscenter.com)
DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability (vulnerabilityresearch@...italdefense.net)
Multiple integer overflows in Borland StarTeam server 10.0.0.57 (Luigi Auriemma <aluigi@...istici.org>)
Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 ("Valery Marchuk" <tecklord@...uritylab.ru>)
LayerOne 2008 Update ("Layer One" <layeronecfp@...il.com>)
DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability (vulnerabilityresearch@...italdefense.net)
[ GLSA 200803-04 ] Mantis: Cross-Site Scripting (Pierre-Yves Rofes <py@...too.org>)
DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability (vulnerabilityresearch@...italdefense.net)
Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities (Seth Fogie <seth@...scanner.com>)
[ GLSA 200803-05 ] SplitVT: Privilege escalation (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200803-06 ] SWORD: Shell command injection (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200803-07 ] Paramiko: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
[SECURITY] [DSA 1511-1] New libicu packages fix multiple problems (Steve Kemp <skx@...ian.org>)

March 4 (11 messages)

DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability (vulnerabilityresearch@...italdefense.net)
DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability (vulnerabilityresearch@...italdefense.net)
[ MDVSA-2008:057 ] - Updated wireshark packages fix denial of service vulnerabilities (security@...driva.com)
VMSA-2008-0004 Low: Updated e2fsprogs service console package (VMware Security team <security@...are.com>)
PHP-Nuke Module eGallery "pid" Remote SQL Injection (no-reply@...a-security.net)
PHP-Nuke Module "seminar" Local FIle Inclusion (no-reply@...a-security.net)
Re: Crafty Syntax Xss Vulnerability (cmzs@...mail.com)
SolpotCrew Advisory #16 - Mitra Informatika Solusindo cart Remote Sql Injection Exploit (nyubicrew@....mildnet.cn)
Minigal 2 critical XSS (jose@...os.org)
[ GLSA 200803-08 ] Win32 binary codecs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200803-09 ] Opera: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

March 5 (11 messages)

Dovecot mail_extra_groups setting is often used insecurely (Timo Sirainen <tss@....fi>)
CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK (Core Security Technologies Advisories <advisories@...esecurity.com>)
Arbitrary commands execution in Versant Object Database 7.0.1.3 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 1512-1] New evolution packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Firewire Attack on Windows Vista (Bernhard Mueller <research@...-consult.com>)
Re: Firewire Attack on Windows Vista (Thierry Zoller <Thierry@...ler.lu>)
ERRATA: [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Multiple vulnerabilities in Perforce Server 2007.3/143793 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200803-10 ] lighttpd: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ MDVSA-2008:059 ] - Updated tcl packages fix vulnerability (security@...driva.com)
RE: Firewire Attack on Windows Vista ("Roger A. Grimes" <roger@...neretcs.com>)

March 6 (22 messages)

[ MDVSA-2008:058 ] - Updated openldap packages fix multiple vulnerabilities (security@...driva.com)
[USN-583-1] Evolution vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200803-12 ] Evolution: Format string vulnerability (Pierre-Yves Rofes <py@...too.org>)
[ MDVSA-2008:060 ] - Updated Joomla! packages fix multiple vulnerabilities (security@...driva.com)
[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues (dann frazier <dannf@...ian.org>)
[USN-584-1] OpenLDAP vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ GLSA 200803-11 ] Vobcopy: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
[DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Re: Firewire Attack on Windows Vista (Peter Watkins <peterw@....net>)
Re: Firewire Attack on Windows Vista ("Daniel O'Connor" <doconnor@...ft.com.au>)
Re: Firewire Attack on Windows Vista (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Checkpoint VPN-1 UTM Edge cross-site scripting (Henri Lindberg - Smilehouse Oy <henri.lindberg@...lehouse.com>)
Sun JDK image parsing vulnerabilities ("Chris Evans" <scarybeasts@...il.com>)
Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability (H D Moore <sflist@...italoffense.net>)
PHP-Nuke KutubiSitte "kid" SQL Injection (lovebug@...mail.it)
RE: Firewire Attack on Windows Vista (bzhbfzj3001@...akemail.com)
RE: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Directory traversal in MicroWorld eScan Server 9.0.742.98 (Luigi Auriemma <aluigi@...istici.org>)
[ MDVSA-2008:061 ] - Updated mailman packages fix multiple XSS vulnerabilities (security@...driva.com)
Re: Multiple vulnerabilities in Double-Take 5.0.0.2865 (Steve Shockley <steve.shockley@...ckley.net>)
[SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure (Steve Kemp <skx@...ian.org>)
[USN-582-2] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

March 7 (27 messages)

[ MDVSA-2008:062 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
WordPress Multiple Cross-Site Scripting Vulnerabilities (DoZ@...kersCenter.com)
Horde Webmail file inclusion proof of concept & patch. (ppelanne@...tgator.com)
[ MDVSA-2008:063 ] - Updated Evolution packages fix critical vulnerability (security@...driva.com)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding (r080cy90r@...il.com)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista (<Glenn.Everhart@...se.com>)
RE: Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
Re: Firewire Attack on Windows Vista (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding (r080cy90r@...il.com)
Re: Firewire Attack on Windows Vista (Nathanael Hoyle <nhoyle@...letech.com>)
Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 (Luigi Auriemma <aluigi@...istici.org>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11 (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2008:064 ] - Updated tomboy packages fix improper LD_LIBRARY_PATH handling (security@...driva.com)
XSS in Neptune Web Server (nima_501@...oo.com)
[ GLSA 200803-13 ] VLC: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

March 8 (9 messages)

[ GLSA 200803-14 ] Ghostscript: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
Re: Horde Webmail file inclusion proof of concept & patch. (Ben Klang <bklang@...de.org>)
F5 BIG-IP Web Management Console XSS (nnposter@...closed.not)
Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure (nnposter@...closed.not)
[TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability ("Tobias Klein" <tk@...pkit.de>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability (nbbn@....net)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)

March 10 (37 messages)

[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability (Pierre-Yves Rofes <py@...too.org>)
[security bulletin] HPSBUX02306 SSRT071463 rev.2 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS) (security-alert@...com)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit (gmdarkfig@...il.com)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Jacob Appelbaum <jacob@...elbaum.net>)
[ MDVSA-2008:065 ] - Updated pulseaudio packages fix denial of service vulnerabilities (security@...driva.com)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
PHP-Nuke SQL injection Module "Hadith" [cat] (lovebug@...mail.it)
Firebird remote BOF POC (underwater@...efence.ru)
Re: [Full-disclosure] Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Summer Camp 2008 - La Garrotxa (Gerardo García Peña <gerardo@...g-foo.dhs.org>)
Re: Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: [Full-disclosure] Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
RE: [Full-disclosure] Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
[ GLSA 200803-16 ] MPlayer: Multiple buffer overflows (Pierre-Yves Rofes <py@...too.org>)
Invalid memory access in Acronis True Image Group Server 1.5.19.191 (Luigi Auriemma <aluigi@...istici.org>)
Denial of Service in PacketTrap TFTP server 2.0.3901.0 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200803-17 ] PDFlib: Multiple buffer overflows (Pierre-Yves Rofes <py@...too.org>)
NULL pointer in Remotely Anywhere 8.0.668 (Luigi Auriemma <aluigi@...istici.org>)
Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Vulnerabilities in Timbuktu Pro 8.6.5 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in ASG-Sentry 7.0.0 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
NULL pointer in Acronis True Image Windows Agent 1.0.0.54 (Luigi Auriemma <aluigi@...istici.org>)
Directory traversal in Argon Client Management Services 1.31 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200803-18 ] Cacti: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
NULL pointer in Remotely Anywhere 8.0.668 (Luigi Auriemma <aluigi@...istici.org>)
Vulnerabilities in Timbuktu Pro 8.6.5 (Luigi Auriemma <aluigi@...istici.org>)

March 11 (28 messages)

iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Denial of Service in PacketTrap TFTP server 2.0.3901.0 (Luigi Auriemma <aluigi@...istici.org>)
Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[security bulletin] HPSBUX02313 SSRT080015 rev.2 - HP-UX Running Apache, Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBUX02316 SSRT071495 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code (security-alert@...com)
Re: [Full-disclosure] Firewire Attack on Windows Vista (Jacob Appelbaum <jacob@...elbaum.net>)
Advisory: SQL-Injections in Mapbender (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5 (<titon@...tardlabs.com>)
Mambo Components ensenanzas "id" Remote SQL Injection (no-reply@...a-security.net)
Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5 (Luigi Auriemma <aluigi@...istici.org>)
Re: Firewire Attack on Windows Vista (Steve Shockley <steve.shockley@...ckley.net>)
PHP-Nuke Module NukeC30 sql injection (houssamix@...mail.fr)
[USN-585-1] Python vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Remotely Anywhere 'Accept-Charset' Parameter NULL Pointer (patrick@...hack.com)
ACROS Security: Session Fixation Vulnerability in WebLogic Administration Console (#2008-03-11-2) ("ACROS Security" <lists@...os.si>)
ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1) ("ACROS Security" <lists@...os.si>)
ACROS Security: Session Fixation Vulnerability in WebLogic Administration Console (#2008-03-11-2) ("ACROS Security" <lists@...os.si>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (FD <fd@....ac>)
Re: [Full-disclosure] Firewire Attack on Windows Vista (FD <fd@....ac>)
Advisory Adobe LiveCycle Workflow XSS Vulnerability ("Liquidmatrix Security Digest" <disclosure@...uidmatrix.org>)
CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection (Core Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability (zdi-disclosures@...m.com)
[ GLSA 200803-19 ] Apache: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
PHP-Nuke Module ZClassifieds [cat] SQL Injection (lovebug@...mail.it)
[ GLSA 200803-20 ] International Components for Unicode: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability (DVLabs <dvlabs@...pingpoint.com>)

March 12 (17 messages)

iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
uberghey cms 0.3.1 multiple local file inclusion vulnerabilities ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
[SECURITY] [DSA 1515-1] New libnet-dns-perl packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
travelsized cms 0.4.1 multiple local file inclusion vulnerabilities ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Cisco Security Advisory: Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities (Cisco Systems Product Security Incident Respon…)
iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection (iDefense Labs <labs-no-reply@...fense.com>)
Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit (Maximiliano Müller <mmuller@...ioshispanos.com>)
hacking a pacemaker (Gadi Evron <ge@...uxbox.org>)
Cisco ACS UCP Remote Pre-Authentication Buffer Overflows ("Felix 'FX' Lindner" <fx@...urity-labs.com>)
rPSA-2008-0106-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
ZDI-08-010: Java Web Start encoding Stack Buffer Overflow (zdi-disclosures@...m.com)
ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow (zdi-disclosures@...m.com)
Powered by phpBB 2001, 2006 (SQL) (turkish-warriorr@...mail.com)
[ GLSA 200803-21 ] Sarg: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0) (Luigi Auriemma <aluigi@...istici.org>)
rPSA-2008-0108-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)

March 13 (15 messages)

Re: Directory traversal and DoS in WinIPDS G52-33-021 (ph@...ermate.com)
Re: PHP-Nuke Module NukeC30 sql injection (my_msn_my_msn_my@....com)
XSS in PHP-Nuke (eWeather module) (nima_501@...oo.com)
Directory traversal in EdiorCMS V3.0 (wsn1983@...il.com)
Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit (app@...il.com)
Rise of the spammers (vulns@...tercore.com)
Re: Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability (kralor@...omputer.net)
Zabbix (zabbix_agentd) denial of service (Milen Rangelov <mrangelov@...bul.bg>)
Update+Errata: Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulne… (Amit Klein <amit.klein@...steer.com>)
Re: Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit (sad_wabi_user@...here.com)
PR08-02: Plone CMS Security Research - the Art of Plowning (ProCheckUp Research <research@...checkup.com>)
Office XP Remote SQL Injection (no-reply@...a-security.net)
[ MDVSA-2008:066 ] - Updated gcc packages fix directory traversal vulnerability in fastjar (security@...driva.com)
Office XP Remote SQL Injection (no-reply@...a-security.net)

March 14 (7 messages)

ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability (zdi-disclosures@...m.com)
Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Te…)
[ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Airspan WiMAX ProST Authentication Bypass Vulnerability (admin@...act.net)
Re: Office XP Remote SQL Injection (Steve Shockley <steve.shockley@...ckley.net>)
EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities (sys-project@...mail.com)

March 15 (7 messages)

Black Hat Announcements: New CFP system and Japan '08 confirmed ("jmoss" <jmoss@...ckhat.com>)
Local persistent DoS in Windows XP SP2 Taskmgr (SkyOut <skyout@....net>)
[SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)
[USN-586-1] mailman vulnerability (Kees Cook <kees@...ntu.com>)
Troopers08 Security Conference, April 23/24 (Munich/Germany) (Enno Rey <erey@...w.de>)
Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow (opexoc@...il.com)
XNview 1.92.1 Long Filename Overflow (Sylvain <sylvain.thual@...ck-internet.fr>)

March 17 (23 messages)

[SECURITY] [DSA 1517-1] New ldapscripts packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1518-1] New backup-manager packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
Joomla components com_guide "category" Remote SQL Injection [Aria-Security] (no-reply@...a-security.net)
Re: Local persistent DoS in Windows XP SP2 Taskmgr (paraw <paraw@...oo.it>)
[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0) (neodwija@...il.com)
[ GLSA 200803-23 ] Website META Language: Insecure temporary file usage (Pierre-Yves Rofes <py@...too.org>)
RE: Local persistent DoS in Windows XP SP2 Taskmgr ("Thor (Hammer of God)" <thor@...merofgod.com>)
vuln in snewscms Rus v 2.3 (www.yo.by@...il.com)
EasyCalendar <= 4.0tr - Multiple Remote Vulnerabilities (sys-project@...mail.com)
[SECURITY] [DSA 1521-1] New lighttpd packages fix arbitrary file disclosure (Steve Kemp <skx@...ian.org>)
raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition) ("Collin R. Mulliner" <collin@...aversion.net>)
Security Advisory on RSA Web ID (XSS) (quentin.berdugo@...sis.fr)
[SECURITY] [DSA 1493-2] New sdl-image1.2 packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow (david130490@...mail.com)
Mutiple Timesheets <= 5.0 - Multiple Remote Vulnerabilities (sys-project@...mail.com)
Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0) (greentea-lemon@...eyonder.co.uk)
VLC highlander bug (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Net Inspector 6.5.0.828 (Luigi Auriemma <aluigi@...istici.org>)
Buffer-overflow in BootManage TFTPD 1.99 (Luigi Auriemma <aluigi@...istici.org>)
Home FTP Server DoS (0in.email@...il.com)
Agile Hacking ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)

March 18 (22 messages)

[SECURITY] [DSA 1485-2] New icedove packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125 (Hanno Böck <hanno@...eck.de>)
Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow (opexoc@...il.com)
Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow (opexoc@...il.com)
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting (Florian Weimer <fw@...eb.enyo.de>)
eForum 0.4 XSS (omnipresent@...il.it)
VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical… (VMware Security team <security@...are.c…)
[ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Internet Explorer 7.0 crash (jplopezy@...il.com)
[security bulletin] HPSBST02320 SSRT080028 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-014 to MS08-017 (security-alert@...com)
cPanel 11.x => List Directories and Folders (xx_hack_xx_2004@...mail.com)
Digital Armaments March-April Hacking Challenge: 5,000$ Prize - Client Vulnerabilities and Exploit (info@...italarmaments.com)
MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc (raeburn@....EDU)
[ GLSA 200803-26 ] Adobe Acrobat Reader: Insecure temporary file creation (Robert Buchholz <rbu@...too.org>)
[ GLSA 200803-24 ] PCRE: Buffer overflow (Tobias Heinlein <keytoaster@...too.org>)
MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc (raeburn@....EDU)
MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject) (raeburn@....EDU)
CORE-2008-0123: Leopard Server Remote Path Traversal (Core Security Technologies Advisories <advisories@...esecurity.com>)
[SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[ MDVSA-2008:067 ] - Updated nagios packages fix multiple vulnerabilities (security@...driva.com)
iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

March 19 (13 messages)

phpBB 2.0.23 Session Hijacking Vulnerability ("nbbn@....net" <nbbn@....net>)
[ GLSA 200803-27 ] MoinMoin: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
AST-2008-005: HTTP Manager ID is predictable (Asterisk Security Team <security@...erisk.org>)
Mambo/joomla com_intellect "page" LFI [Aria-Security] (no-reply@...a-security.net)
AST-2008-003: Unauthenticated calls allowed from SIP channel driver (Asterisk Security Team <security@...erisk.org>)
[ MDVSA-2008:068 ] - Updated unzip packages vulnerability (security@...driva.com)
AST-2008-002: Two buffer overflows in RTP Codec Payload Handling (Asterisk Security Team <security@...erisk.org>)
[USN-587-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
AST-2008-004: Format String Vulnerability in Logger and Manager (Asterisk Security Team <security@...erisk.org>)
HPSBST02321 SSRT080029 rev.1 - HP StorageWorks Library and Tape Tools (LTT) Running on HP-UX, Local Unauthorized Access (security-alert@...com)
Question on CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats? ("James Connery" <james.j.connery@...il.com>)
CS-Cart XSS (swhite@...urestate.com)
IBM Rational ClearQuest Web Multiple XSS Vulnerabilities (swhite@...urestate.com)

March 20 (26 messages)

[ GLSA 200803-28 ] OpenLDAP: Denial of Service vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ MDVSA-2008:069 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
[ MDVSA-2008:070 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (rPath Update Announcements <announce-noreply@...th.com>)
[ GLSA 200803-30 ] ssl-cert eclass: Certificate disclosure (Robert Buchholz <rbu@...too.org>)
[SECURITY] [DSA 1506-2] New iceape packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
Pizco vulnerable to buffer overflow in activex (david130490@...mail.com)
Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability (info@...dowturk.org)
[SECURITY] [DSA 1525-1] New asterisk packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-588-1] MySQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
KAPhotoservice (album.asp) Remote SQL Injection Exploit (sys-project@...mail.com)
[SECURITY] [DSA 1522-1] New xwine packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
[ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
Note about recently publicized CA BrightStor ActiveX exploit code ("Williams, James K" <James.Williams@...com>)
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200803-30 ] ssl-cert eclass: Certificate disclosure (Robert Buchholz <rbu@...too.org>)
Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability (info@...dowturk.org)
Pizco vulnerable to buffer overflow in activex (david130490@...mail.com)
[SECURITY] [DSA 1506-2] New iceape packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1525-1] New asterisk packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-588-1] MySQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability (security@...driva.com)

March 21 (16 messages)

[ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability (security@...driva.com)
[ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability (security@...driva.com)
Multiple heap overflows in xine-lib 1.1.11 (Luigi Auriemma <aluigi@...istici.org>)
[USN-589-1] unzip vulnerability (Kees Cook <kees@...ntu.com>)
[ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability (security@...driva.com)
[ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability (security@...driva.com)
[ MDVSA-2008:074 ] - Updated audacity package fixes insecure temporary directory creation (security@...driva.com)
[MSA02240108] IE7 allows overwriting of several headers leading to Http request Splitting and smuggling. (Minded Security Research Labs <research@...dedsecurit…)
CanSecWest 2008 PWN2OWN - Mar 26-28 (Dragos Ruiu <dr@....net>)
[INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow ("infocus" <infocus@...igo.hr>)
MS08-014 (Anonymous@...nymous.com)
Re: Horde Webmail file inclusion proof of concept & patch. (David Morton <mortonda@...mm.net>)
[MSA01240108] IE7 Transfer-Encoding: chunked allows Request Splitting/Smuggling. (Minded Security Research Labs <research@...dedsecurity.com>)
DotNetNuke Default Machine Key Exposure (labs@...security.com)
webutil.pl is still vulnerable against Remote Command Execution. (zero-x@...uxmail.org)
{securityreason.com}PHP 5 *printf() - Integer Overflow (cxib@...urityreason.com)

March 22 (16 messages)

XSS in cPanel 11.x (xx_hack_xx_2004@...mail.com)
Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS (vermsky@...omoddinguk.info)
Safari 3.1 for windows download bug (jplopezy@...il.com)
Buffer-overflow in ASUS Remote Console 2.0.0.24 (Luigi Auriemma <aluigi@...istici.org>)
rPSA-2008-0116-1 unzip (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0118-1 bzip2 (rPath Update Announcements <announce-noreply@...th.com>)
Fedora, Ubuntu publish wrong advisories for CVE-2007-6318 (Abel Cheung <abelcheung@...il.com>)
hacking the mitsubishi GB-50A (Chris Withers <chris@...plistix.co.uk>)
phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities (Guns@...0.com.ar)
Google SoC 2008: Security Projects (jkouns <jkouns@...nsecurityfoundation.org>)
Safari browser 3.1 (525.13) spoofing (jplopezy@...il.com)
rPSA-2008-0116-1 unzip (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0118-1 bzip2 (rPath Update Announcements <announce-noreply@...th.com>)
hacking the mitsubishi GB-50A (Chris Withers <chris@...plistix.co.uk>)
Safari browser 3.1 (525.13) spoofing (jplopezy@...il.com)
rPSA-2008-0116-1 unzip (rPath Update Announcements <announce-noreply@...th.com>)

March 24 (27 messages)

Alkacon OpenCms users_list.jsp searchfilter XSS (nnposter@...closed.not)
EfesTech E-Kontr (id) Remote SQL INJECTION (dj_remix_20@...mail.com)
Re: Potential SQL injection vulnerability in Apache::AuthCAS (dcastro@...wash.org)
[ MDVSA-2008:075 ] - Updated bzip2 packages fix denial of service vulnerability (security@...driva.com)
F5 BIG-IP Web Management Audit Log XSS (nnposter@...closed.not)
Linksys phone adapter denial of service (sipherr@...il.com)
ircu/snircd remote crash vulnerability (Chris Porter <cdp34@....ac.uk>)
RE: hacking the mitsubishi GB-50A ("Desai, Ashish" <Ashish.Desai@....com>)
Re: Linksys phone adapter denial of service ("J. Oquendo" <sil@...iltrated.net>)
Re: XSS in cPanel 11.x (morin.josh@...il.com)
[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation (thijs@...ian.org (Thijs Kinkhorst))
[DSECRG-08-019] LFI in PowerBook 1.21 (Digital Security Research Group <research@...c.ru>)
[DSECRG-08-020] RFI-LFI in PowerClan 1.14a (Digital Security Research Group <research@...c.ru>)
[DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b (Digital Security Research Group <research@...c.ru>)
Hamachi Password Disclosure Vulnerability (evilcry@...il.com)
Re: Re: Linksys phone adapter denial of service (sipherr@...il.com)
Re: Linksys phone adapter denial of service (orsino <bugtraq.account@...glemail.com>)
Re: Linksys phone adapter denial of service ("J. Oquendo" <sil@...iltrated.net>)
RE: hacking the mitsubishi GB-50A ("James C. Slora Jr." <james.slora@...a.com>)
HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de) (zero-x@...uxmail.org)
[SECURITY] [DSA 1528-1] New serendipity packages fix cross site scripting (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1528-1] New serendipity packages fix cross site scripting (thijs@...ian.org (Thijs Kinkhorst))
HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de) (zero-x@...uxmail.org)
[USN-591-1] libicu vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ GLSA 200803-31 ] MIT Kerberos 5: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[USN-590-1] bzip2 vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200803-32 ] Wireshark: Denial of Service (Pierre-Yves Rofes <py@...too.org>)

March 25 (16 messages)

Re: Linksys phone adapter denial of service (Michael VERGOZ <mv@...arysec.com>)
aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection (arsalan1991@...il.com)
Re: hacking the mitsubishi GB-50A (Vincent Archer <archer@....frmug.org>)
Re: hacking the mitsubishi GB-50A (Chris Withers <chris@...plistix.co.uk>)
Re: RE: hacking the mitsubishi GB-50A (Joe <joe@...anta.com>)
Re: RE: hacking the mitsubishi GB-50A (Joe <joe@...anta.com>)
[SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
e107 My_Gallery Plugin Arbitrary File Download Vulnerability (Jerome Athias <jerome.athias@...e.fr>)
e107 My_Gallery Plugin Arbitrary File Download Vulnerability (Jerome Athias <jerome.athias@...e.fr>)
[SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
Cuteflow Bin v1.5.0 Local File Inclusion Vuln (r57blg@...il.com)
rPSA-2008-0123-1 ruby (rPath Update Announcements <announce-noreply@...th.com>)
[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1 (Digital Security Research Group <research@...c.ru>)
CORE-2007-1212: SILC pkcs_decode buffer overflow (Core Security Technologies Advisories <advisories@...esecurity.com>)
phpBB PJIRC mod LFI (0in.email@...il.com)

March 26 (17 messages)

Blackboard Academic Suite Multiple XSS Vulnerabilities (knight4vn@...oo.com)
php-addressbook v2.0 SQL Injection Vulnerbility (hadihadi_zedehal_2006@...oo.com)
[security bulletin] HPSBTU02322 SSRT080011 rev.1 - HP Tru64 UNIX running SSH/SFTP Server, Remote Execution of Arbitrary Code or Denial of … (security-alert@...com)
Aztech ADSL2/2+ 4 Port remote root (sipherr@...il.com)
Re: hacking the mitsubishi GB-50A ("Steven M. Christey" <coley@...re.org>)
Re: Logaholic Web Analytics Software (andre@...aholic.com)
Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-592-1] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Swi… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers (Cisco Systems Product Security Incident Response Team…)
Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
Invision Power Board <=2.3.x iFrame Vuln (shaheemirza@...il.com)
ZDI-08-013: Novell eDirectory for Linux Stack Overflow (zdi-disclosures@...m.com)
Re: hacking the mitsubishi GB-50A (Chris Withers <chris@...plistix.co.uk>)
Multiple vulnerabilities in solidDB 06.00.1018 (Luigi Auriemma <aluigi@...istici.org>)
[ MDVSA-2008:076 ] - Updated wml packages fix symlink vulnerabilities (security@...driva.com)

March 27 (15 messages)

[USN-593-1] Dovecot vulnerabilities (Kees Cook <kees@...ntu.com>)
Multiple XSS in DigiDomain (xx_hack_xx_2004@...mail.com)
[ MDVSA-2008:077 ] - Updated perl-Tk packages fix GIF processing vulnerability (security@...driva.com)
[SECURITY] [DSA 1529-1] New Firebird packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-594-1] libnet-dns-perl vulnerability (Kees Cook <kees@...ntu.com>)
[ MDVSA-2008:078 ] - Updated openssh packages fix X connection hijacking (security@...driva.com)
[USN-596-1] Ruby vulnerabilities (Kees Cook <kees@...ntu.com>)
TopperMod 2.0 Remote SQL Injection Vulnerability (r57blg@...il.com)
[securityreason] *BSD libc (strfmon) Multiple vulnerabilities (cxib@...urityreason.com)
[USN-595-1] SDL_image vulnerabilities (Kees Cook <kees@...ntu.com>)
JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities (r57blg@...il.com)
[SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files (thijs@...ian.org (Thijs Kinkhorst))
Re: JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities (str0ke <str0ke@...w0rm.com>)
Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities (christos@...las.com (Christos Zoulas))
rPSA-2008-0128-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)

March 28 (20 messages)

[SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities (security@...driva.com)
[SECURITY] [DSA 1533-1] New exiftags packages fix several vulnerabilities (Devin Carraway <devin@...ian.org>)
Smf 1.1.4 Remote File Inclusion Vulnerabilities (sibertrwolf@...e.com)
[security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access (security-alert@...com)
Re: Heap overflow in Sybase MobiLink 10.0.1.3629 (jsavill@...ase.com)
[security bulletin] HPSBOV02278 SSRT071479 rev.1 - HP OpenVMS SSH Using TCP/IP Services for OpenVMS, Remote Unauthorized Access (security-alert@...com)
CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
XChat 2.8.4-1 - Multiple Vulnerabilities (evilcry@...il.com)
Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities (fake@...eply.org)
[SECURITY] [DSA 1534-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities (Jindrich Kubec <kubecj@....cz>)
Smf 1.1.4 Remote File Inclusion Vulnerabilities (sibertrwolf@...e.com)
[security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access (security-alert@...com)
Immunity Debugger 1.5 (Nicolas Waisman <nicolas@...unityinc.com>)
Re: XChat 2.8.4-1 - Multiple Vulnerabilities (fabio <ctrlaltca@...ero.it>)
Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities (Mike Duncan <Mike.Duncan@...a.gov>)
Internet explorer 7.0 spoofing (jplopezy@...il.com)

March 29 (4 messages)

[ MDVSA-2008:080 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
VMSA-2008-0006 Updated libxml2 service console package (VMware Security team <security@...are.com>)
Re: Internet explorer 7.0 spoofing (w0lfd33m@...mail.com)
CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities (hadihadi_zedehal_2006@...oo.com)

March 31 (12 messages)

Re: Internet explorer 7.0 spoofing (mouss <mouss@...oyen.net>)
Efestech Video v5,0 (id) Remote Sql Injection (dj_remix_20@...mail.com)
Proviso SiteKiosk File Download Vulnerability (nebelfrost23@....de)
Re: Re: XChat 2.8.4-1 - Multiple Vulnerabilities (omnipresent@...il.it)
[SECURITY] [DSA 1531-2] New policyd-weight packages fix insecure temporary files (thijs@...ian.org (Thijs Kinkhorst))
PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit (r57blg@...il.com)
London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008 (Major Malfunction <majormal@...ate-radio.org>)
[TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption ("Tobias Klein" <tk@...pkit.de>)
rPSA-2008-0132-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
Directory traversal in 2X ThinClientServer v5.0_sp1-r3497 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 1535-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Paper by Amit Klein (Trusteer): "PowerDNS Recursor DNS Cache Poisoning [pharming]" (Amit Klein <amit.klein@...steer.com>)

448 messages

Powered by blists - more mailing lists