bugtraq mailing list - 2009/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2009/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 9	³ 11	⁴ 17	⁵ 8	⁶ 10	⁷	⁸
⁹ 16	¹⁰ 15	¹¹ 19	¹² 11	¹³ 24	¹⁴	¹⁵
¹⁶ 11	¹⁷ 7	¹⁸ 7	¹⁹ 5	²⁰ 11	²¹	²²
²³ 13	²⁴ 7	²⁵ 17	²⁶ 18	²⁷ 12	²⁸

Messages by day:

February 2 (9 messages)

[ MDVSA-2009:032 ] kernel (security@...driva.com)
[ MDVSA-2009:031 ] avahi (security@...driva.com)
VMSA-2009-0001 ESX patches address an issue loading corrupt virtual disks and update Service Console packages (VMware Security Team <security@...are.com>)
[SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution (Florian Weimer <fw@...eb.enyo.de>)
BruCON call for papers (Filip Waeytens <filip.waeytens@...il.com>)
Secunia Research: Free Download Manager Remote Control Server Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
[Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation (vulns@...tercore.com)
ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability (zdi-disclosures@...m.com)

February 3 (11 messages)

Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference crash POC (xhakerman2006@...oo.com)
Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2 (mkanat@...zilla.org)
Web Hacking Incidents update for Feb 3rd (Ofer Shezaf <ofer@...zaf.com>)
SMF 1.1.7 Persistent XSS (requires permision to edit censor) (Eduardo Vela <sirdarckcat@...il.com>)
NaviCopa webserver 3.01 Multiple Vulnerabilities (ew1zz@...mail.com)
Nokia Multimedia Player v1.1 .m3u Heap Overflow PoC exploit (0in.email@...il.com)
[security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access (security-alert@...com)
Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter) (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART (Shatter <shatter@...secinc.com>)
Call for papers and trainers - note extended deadline - SeacureIT 2009 (Stefano Zanero <s.zanero@...urenetwork.it>)
CORE-2008-1009 - VNC Multiple Integer Overflows (CORE Security Technologies Advisories <advisories@...esecurity.com>)

February 4 (17 messages)

Euphonics Audio Player v1.0 (.pls) Local BOF POC (darkb0x97@...glemail.com)
[security bulletin] HPSBUX02401 SSRT090005 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scrip… (security-alert@...com)
[ MDVSA-2009:033 ] sudo (security@...driva.com)
QIP 2005 Denial of Service Vulnerability (ss_contacts@...mail.com)
DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal (vulnerabilityresearch@...frontline.com)
Squid Proxy Cache Denial of Service in request handling (Amos Jeffries <amos@...enet.co.nz>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
LCPlayer (.qt file) EOP change PoC (app crash) (darkb0x97@...glemail.com)
[Tool] sqlmap 0.6.4 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
rgboard v4 (07.07.27) Multiple Vulnerability (make0day@...il.com)
phpslash <= 0.8.1.1 Remote Code Execution Exploit (gmdarkfig@...il.com)
flatnux Flatnux-2009-01-27 Remote File Include (blabla-34 <blabla-34@...pl>)
metabbs 0.11 Change admin password vulnerability (make0day@...il.com)
StreamDown v6.4.3 Local Buffer Overflow PoC (todor.donev@...il.com)
Microsoft SDL meets CWE/SANS Top25 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: DMXReady Blog Manager (SQL/XSS) (support@...ready.com)
Cisco IOS XSS/CSRF Vulnerability (azask2@...il.com)

February 5 (8 messages)

Nokia N95-8 browser denial of service (jplopezy@...il.com)
[SECURITY] [DSA 1717-1] New devil packages fix buffer overflow (Devin Carraway <devin@...ian.org>)
[SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability ("SVRT-Bkis" <svrt@...v.com.vn>)
Re: SMF 1.1.7 Persistent XSS (requires permision to edit censor) (metallica48423@...il.com)
C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vulnerabilities ("Eyal Udassin" <eyal.udassin@...security.com>)
Re: Nokia N95-8 browser denial of service (Thierry Zoller <Thierry@...ler.lu>)
dBpowerAMP Audio Player local buffer overflow exploit (maroc-anti-connexion@...mail.com)
Speaking line up confirmed! uCon Security Conference 2009 - Recife, Brazil (uCon Security Conference <cfp@...n-conference.org>)

February 6 (10 messages)

RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities ("noreply-secresearch@...tinet.com" <noreply-secresearch@...tinet.com>)
SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) ("Daniel Kachakil" <dani@...hakil.com>)
[security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remot… (security-alert@...com)
[security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBUX02408 SSRT080182 rev.1 - HP-UX Running NFS, Local Denial of Service (DoS) (security-alert@...com)
Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) (Razi Shaban <razishaban@...il.com>)
Vulnerable: Ilch CMS (Gizmore <gizmore@...hall.net>)
iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Command Injection Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
CamFrog Password Disclosure Vulnerability (zigmatn@...il.com)
iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Information Disclosure Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)

February 9 (16 messages)

[ GLSA 200902-01 ] sudo: Privilege escalation (Tobias Heinlein <keytoaster@...too.org>)
[oCERT-2009-002] OpenCORE insufficient bounds checking during MP3 decoding (Will Drewry <redpig@...rt.org>)
Nokia N95-8 JPG crash (jplopezy@...il.com)
rooting your own phone: android security (Pavel Machek <pavel@....cz>)
PHP filesystem attack vectors (ascii <ascii@...amail.com>)
Re: [Full-disclosure] PHP filesystem attack vectors (Stefan Esser <stefan.esser@...tioneins.de>)
Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) (Roman Medina-Heigl Hernandez <roman@...labs.com>)
[BMSA-2009-02] XML injection in PyBlosxom (Nam Nguyen <namn@...emoon.com.vn>)
Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) (Razi Shaban <razishaban@...il.com>)
LFI in Drupal CMS (rasool.nasr@...il.com)
Trend micro - IWSVA/IWSS - Authorization module password leak (david.vorel@...eynet.cz)
3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass (luca.caretton@...isoft.com)
ZeroShell <= 1.0beta11 Remote Code Execution (Luca Carettoni <luca.carettoni@...isoft.com>)
[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass (Moritz Muehlenhoff <jmm@...ian.org>)
Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) (Amit Klein <aksecurity@...il.com>)
London DEFCON DC4420 - February 2009 Meet - Thursday 12th (Major Malfunction <majormal@...ate-radio.org>)

February 10 (15 messages)

[ECHO_ADV_102$2009] BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability (adv@...dc.org)
Re: Nokia N95-8 JPG crash ("Dmitry Yu. Bolkhovityanov" <D.Yu.Bolkhovityanov@....nsk.su>)
Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well) (tez@...lsby.net)
[SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2009:034 ] squid (security@...driva.com)
Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (gat3way@...3way.eu)
Craft Silicon Banking@...e SQL Injection (Francesco Bianchino <f.bianchino@...il.com>)
Web Hacking Incidents update for Feb 10th (Ofer Shezaf <ofer@...zaf.com>)
[Suspected Spam][Fwd: Re: Novell-QuickFinder Server Xss & Java remote execution Code] (ivan.sanchez@...lcode.com.ar)
Nokia Phoenix Service Software 2008.04.007.32837 overflow POC (murderskill@...il.com)
Re: PHP filesystem attack vectors (cxib@...urityreason.com)
[SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities (Nico Golde <nion@...ian.org>)
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Daniel Mayer <mayer@...ga.net>)
ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

February 11 (19 messages)

[USN-717-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Local vulnerability in suexec + FastCGI + PHP configurations (security.432@...l.com)
ProFTPd with mod_mysql Authentication Bypass Exploit (alphanix00@...il.com)
Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (gat3way@...3way.eu)
[security bulletin] HPSBMA02331 SSRT080000 rev.3 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileg… (security-alert@...com)
[ MDVSA-2009:035 ] gstreamer0.10-plugins-good (security@...driva.com)
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Shino <shino@...ux.homelinux.org>)
Full Path Disclosure In Photolibrary 1.009 (XiaShing@...il.com)
[USN-717-3] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-717-2] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Web Hacking Incidents update for Feb 10th (Links corrected) (Ofer Shezaf <ofer@...zaf.com>)
Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver) (dejan.levaja@...sec.rs)
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Sergio Aguayo <sergioag@...ilhosting.net>)
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Edward Bjarte Fjellskål <edward.fjellskal@...pill-linpro.com>)
[SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
pam-krb5 security advisory (3.12 and earlier) (Russ Allbery <rra@...nford.edu>)
Re: pam-krb5 security advisory (3.12 and earlier) (Tim Skirvin <tskirvin@...nford.edu>)
BackTrack 4 Beta Released (Mati Aharoni <muts@...ensive-security.com>)

February 12 (11 messages)

SEP(Symantec) Bug ("Sandeep Cheema" <51l3n7@...e.in>)
Re: LFI in Drupal CMS (security@...pal.org)
Full Path Disclosure In Photolibrary 1.009(Update) (XiaShing@...il.com)
Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (XiaShing@...il.com)
RE: SEP(Symantec) Bug ("James C. Slora Jr." <james.slora@...a.com>)
[ MDVSA-2009:036 ] python (security@...driva.com)
[USN-719-1] pam-krb5 vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-720-1] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (Rolphin <rolphin@...e.fr>)
[ GLSA 200902-02 ] OpenSSL: Certificate validation error (Robert Buchholz <rbu@...too.org>)
[ GLSA 200902-03 ] Valgrind: Untrusted search path (Robert Buchholz <rbu@...too.org>)

February 13 (24 messages)

Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (XiaShing@...il.com)
[ GLSA 200902-04 ] xterm: User-assisted arbitrary commands execution (Pierre-Yves Rofes <py@...too.org>)
[security bulletin] HPSBUX02401 SSRT090005 rev.2 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scrip… (security-alert@...com)
Re: RE: SEP(Symantec) Bug (steve.fowler@...gonstate.edu)
Nokia N95 browser "setAttributeNode" method crash (jplopezy@...il.com)
Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (XiaShing@...il.com)
Enomaly ECP/Enomalism: Silent update remote command execution vulnerability (Sam Johnston <samj@...j.net>)
Security Assessment of the Transmission Control Protocol (TCP) (Fernando Gont <fernando.gont@...il.com>)
Re: SEP(Symantec) Bug ("Sandeep Cheema" <51l3n7@...e.in>)
Cross-site scripting in Samizdat 0.6.1 (Dmitry Borodaenko <angdraug@...il.com>)
SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
RE: SEP(Symantec) Bug ("Jon Kloske" <jon@...edu.au>)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability (sc0ttbeardsley@...il.com)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
RE: SEPKILL /im SMC.EXE /f (David Calabro <dcalabro@...nsitionalwork.org>)
ACM CCS '09: Call for Workshop Proposals (Christopher Kruegel <chris@...ucsb.edu>)
Re: Local vulnerability in suexec + FastCGI + PHP configurations (Martijn Vernooij <tinus@....tue.nl>)
RainbowCrack 1.3 is released, the new generation of time-memory tradeoff hash cracker (shuanglei@...e.com)
cryptsetup can't destroy last key of a LUKS partition under Ubuntu/Debian (Pierre Dinh-van <pierre@...f.org>)
Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (Mike Duncan <Mike.Duncan@...a.gov>)
[SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))

February 16 (11 messages)

Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability (lars@...maly.com)
Re: SEP(Symantec) Bug (secure@...antec.com)
[security bulletin] HPSBPI02398 SSRT080166 rev.2 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remot… (security-alert@...com)
[ MDVSA-2009:037 ] bind (security@...driva.com)
[waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0 (come2waraxe@...oo.com)
RFI Bug (Dr.linux@....net)
[UPRSN] Ubuntu Privacy Remix 8.04r3 fixes security issues (Ubuntu Privacy Remix Team <security_notice@...vacy-cd.org>)
[SECURITY] [DSA 1725-1] New websvn packages fix information leak (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2009:038 ] blender (security@...driva.com)
Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux) (Sam Johnston <samj@...j.net>)
[ MDVSA-2009:039 ] gedit (security@...driva.com)

February 17 (7 messages)

Re: RFI Bug (Francesco Laurita <francesco@...ncesco-laurita.info>)
[ MDVSA-2009:040 ] dia (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[security bulletin] HPSBMA02406 SSRT080100 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthor… (security-alert@...com)
[ MDVSA-2009:041 ] jhead (security@...driva.com)
[USN-721-1] fglrx-installer vulnerability (Kees Cook <kees@...ntu.com>)
[USN-722-1] sudo vulnerability (Kees Cook <kees@...ntu.com>)

February 18 (7 messages)

Re: SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei ("organiser@...can.org" <organiser@...can.org>)
Re: LFI in Drupal CMS (security@...pal.org)
DDIVRT-2009-20 NetMRI Login Application Cross-site Scripting Vulnerability (ddvulnalert@...fronline.com)
RE: hello bug in windows live messenger (rasod korad <r00tback@...oo.com>)
[ MDVSA-2009:042 ] samba (security@...driva.com)
[USN-723-1] Git vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: [Full-disclosure] Joomla Component com_joomradio SQL Injection (Packet Storm <packet@...ketstormsecurity.org>)

February 19 (5 messages)

Weekly Web Hacking Incidents update for Feb 19th (Ofer Shezaf <ofer@...zaf.com>)
Apache directory traversal on shared hosting environment. (davec@...tgator.com)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
Re: Apache directory traversal on shared hosting environment. (dave@...tuity.biz)
Re: Apache directory traversal on shared hosting environment. ("Ben M. Thomas" <ben@...nel.net>)

February 20 (11 messages)

[ MDVA-2009:027 ] kernel (security@...driva.com)
Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART (security curmudgeon <jericho@...rition.org>)
[ MDVSA-2009:043 ] gnumeric (security@...driva.com)
[ MDVSA-2009:044 ] firefox (security@...driva.com)
PHCDownload 1.1.0 Vulnerabilities (contact@...rain.net)
Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 (node@...os.eu)
[ MDVSA-2009:046 ] dia (security@...driva.com)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
Re: SEPKILL /im SMC.EXE /f ("Sandeep Cheema" <51l3n7@...e.in>)
[ MDVSA-2009:045 ] php (security@...driva.com)
[ MDVSA-2009:047 ] vim (security@...driva.com)

February 23 (13 messages)

[ MDVSA-2009:048 ] epiphany (security@...driva.com)
[ MDVSA-2009:049 ] pycrypto (security@...driva.com)
[ MDVSA-2009:050 ] python-pycrypto (security@...driva.com)
gigCalendar Joomla Component 1.0 SQL Injection ("Salvatore \"drosophila\" Fresta" <drosophilaxxx@...il.com>)
gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection ("Salvatore \"drosophila\" Fresta" <drosophilaxxx@...il.com>)
gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection ("Salvatore \"drosophila\" Fresta" <drosophilaxxx@...il.com>)
XSS Attack using SMS to Optus/Huawei E960 HSDPA Router (rizki.wicaksono@...il.com)
HP Quality Center vulnerability (info@...osit.co.uk)
[ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability (adv@...dc.org)
[ MDVSA-2009:050-1 ] python-pycrypto (security@...driva.com)
[ MDVSA-2009:051 ] libpng (security@...driva.com)
[ GLSA 200902-06 ] GNU Emacs, XEmacs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200902-05 ] KTorrent: Multiple vulnerabilitites (Pierre-Yves Rofes <py@...too.org>)

February 24 (7 messages)

[ MDVSA-2009:049-1 ] pycrypto (security@...driva.com)
VMSA-2009-0002 VirtualCenter Update 4 updates Tomcat to 5.5.27 (VMware Security team <security@...are.com>)
[ MDVSA-2009:048-1 ] epiphany (security@...driva.com)
[ MDVSA-2009:047-1 ] vim (security@...driva.com)
[ MDVSA-2009:047-1 ] vim (security@...driva.com)
iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDVSA-2009:052 ] php-smarty (security@...driva.com)

February 25 (17 messages)

[security bulletin] HPSBMA02384 SSRT071465 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access, Denial of Servic… (security-alert@...com)
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Benjamin Milde <bmilde@...v.de>)
pPIM Multiple Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)
[ MDVSA-2009:054 ] nagios (security@...driva.com)
Re: HP Quality Center vulnerability (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
[ MDVSA-2009:053 ] squirrelmail (security@...driva.com)
Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1 (Nam Nguyen <namn@...emoon.com.vn>)
Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability (Trancer <mtrancer@...il.com>)
[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability (Digital Security Research Group <research@...c.ru>)
Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerab… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 1726-1] New python-crypto packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 … (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability (Cisco Systems Product Security Incident Response Team …)
[ MDVSA-2009:055 ] audacity (security@...driva.com)

February 26 (18 messages)

[SECURITY] CVE-2008-4308: Tomcat information disclosure vulnerability (Mark Thomas <markt@...che.org>)
Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability (security.assurance@....com.au)
Sopcast SopCore Control (sopocx.ocx 3.0.3.501) SetExternalPlayer() user assisted remote code execution poc (nospam@...il.it)
[ MDVSA-2009:057 ] valgrind (security@...driva.com)
[DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability (Digital Security Research Group <research@...c.ru>)
[ MDVSA-2009:048-2 ] epiphany (security@...driva.com)
Golabi CMS Remote File Inclusion Vulnerability (rezazahfaran@...il.com)
[ MDVSA-2009:056 ] net-snmp (security@...driva.com)
[SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites (Steffen Joeris <steffen.joeris@...lelinux.de>)
[USN-724-1] Squid vulnerability (Jamie Strandboge <jamie@...onical.com>)
[security bulletin] HPSBGN02410 SSRT080135 rev.1 - HP Virtual Rooms Client Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)
[ MDVSA-2009:026-1 ] phpMyAdmin (security@...driva.com)
Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
BitDefender Internet Security XSS (jplopezy@...il.com)
[ MDVSA-2009:056 ] net-snmp (security@...driva.com)
ANNOUNCE: RFIDIOt-0.1x release - February 2009 (Adam Laurie <adam@...roup.co.uk>)
Re: New site about security conferences : www.security-briefings.com (John@...TrainingCo.com)
Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability (Ansgar Wiechers <bugtraq@...netcobalt.net>)

February 27 (12 messages)

djbdns misformats some long response packets; patch and example attack (Matthew Dempsky <matthew@...psky.org>)
[ MDVSA-2009:058 ] wireshark (security@...driva.com)
Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed (VMware Security team <security@...are.com>)
Re: BitDefender Internet Security XSS (rbedy@...defender.com)
Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Drupal Local File Inclusion Vulnerability (Windows) (Bogdan Calin <bogdan@...netix.com>)
Hex Workshop <= v6 (.hex) File Local Code (xhakerman2008@...mail.com)
HTC Touch vCard over IP Denial of Service PoC Code (Mobile Security Lab <mseclab@...is.it>)
[SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
On the implementation of TCP urgent data (IETF Internet Draft) (Fernando Gont <fernando.gont@...il.com>)
POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Vulnerability (Krakow Labs <krakowlabs@...il.com>)

248 messages

Powered by blists - more mailing lists