bugtraq mailing list - 2010/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2010/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 11	² 6	³ 8	⁴	⁵
⁶	⁷ 17	⁸ 17	⁹ 10	¹⁰ 8	¹¹ 1	¹²
¹³ 22	¹⁴ 18	¹⁵ 14	¹⁶ 3	¹⁷ 6	¹⁸	¹⁹
²⁰ 21	²¹ 8	²² 11	²³ 10	²⁴ 5	²⁵	²⁶
²⁷ 10	²⁸ 1	²⁹ 13	³⁰ 16

Messages by day:

September 1 (11 messages)

[SECURITY] [DSA 2101-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2010:167 ] perl-libwww-perl (security@...driva.com)
VMSA-2010-0013 (VMware Security Team <security@...are.com>)
XSS vulnerability in Rumba CMS tags (advisory@...ridge.ch)
XSS vulnerability in ArtGK CMS forum (advisory@...ridge.ch)
XSS vulnerability in Amiro.CMS FAQ (advisory@...ridge.ch)
VMSA-2010-0013 VMware ESX third party updates for Service Console (VMware Security Team <security@...are.com>)
Tortoise SVN DLL Hijacking Vulnerability (nikhil_uitrgpv@...oo.co.in)
XSS vulnerability in Rumba CMS (advisory@...ridge.ch)
Online Binary Planting Exposure Test ("ACROS Lists" <lists@...os.si>)
XSS vulnerability in ArtGK CMS (advisory@...ridge.ch)

September 2 (6 messages)

[USN-982-1] Wget vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
{PRL} Novell Netware OpenSSH Remote Stack Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
Vulnerabilities in CMS WebManager-Pro ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:169 ] mozilla-thunderbird (security@...driva.com)
[ MDVSA-2010:168 ] openssl (security@...driva.com)
Moovida Media Player version 2.0.0.15 Insecure DLL Hijacking Vulnerability (libc.dll,quserex.dll) (YGN Ethical Hacker Group <lists@...g.net>)

September 3 (8 messages)

[ GLSA 201009-01 ] wxGTK: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
[security bulletin] HPSBMA02572 SSRT100082 rev.1 - HP Operations Agent Running on Windows, Local Elevation of Privileges and Remote Execut… (security-alert@...com)
[ MDVSA-2010:170 ] wget (security@...driva.com)
[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Rooted CON 2011 - Call for Papers (RomÃ¡n RamÃrez <rramirez@...tedcon.es>)
nullcon Goa dwitiya (2.0) Call For Papers (nullcon <nullcon@...lcon.net>)
VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249) ("VUPEN Security Research" <advisories@...en.com>)
Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? (steve.povolny@...com)

September 7 (17 messages)

Microsoft Internet explorer 8 DLL Hijacking (IESHIMS.DLL) (YGN Ethical Hacker Group <lists@...g.net>)
XSS in Horde Application Framework <=3.3.8, icon_browser.php (Moritz Naumann <security@...itz-naumann.com>)
chillyCMS Multiple Vulnerabilities (admin@...report.ir)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
[ GLSA 201009-03 ] sudo: Privilege Escalation (Alex Legler <a3li@...too.org>)
Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities (sattler@...idmedia.de)
[TEHTRI-Security Training + 0days] "Hunting Web Attackers" at HITBSecConf (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
[SECURITY] [DSA-2104-1] New quagga packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability (sattler@...idmedia.de)
nmap <= 5.21 is vulnerable to Windows DLL Hijacking Vulnerability. (nikhil_uitrgpv@...oo.co.in)
Call for Papers H2HC Cancun/Mexico and H2HC Sao Paulo/Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[USN-983-1] Sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
H2HC SÃ£o Paulo - Capture the Captcha ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[SECURITY] [DSA-2103-1] New smbind packages fix sql injection (Giuseppe Iuculano <iuculano@...ian.org>)
The Zed Attack Proxy (ZAP) version 1.0.0 (psiinon <psiinon@...il.com>)
[ MDVSA-2010:171 ] lvm2 (security@...driva.com)
Security problems in Zenphoto version 1.3 (Bogdan Calin <bogdan@...netix.com>)

September 8 (17 messages)

Call for Participation - GameSec 2010 - Berlin, Germany (Albert Levi <levi@...anciuniv.edu>)
Recent developments in FireWire Attacks (Freddie Witherden <freddie@...herden.org>)
[SECURITY] [DSA-2105-1] New freetype packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
[ GLSA 201009-04 ] SARG: User-assisted execution of arbitrary code (Stefan Behte <craig@...too.org>)
[SECURITY] [DSA 2098-2] New typo3-src packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Re: etax 2010 failure to validate remote ssl certificate properly (dave b <db.pub.mail@...il.com>)
[USN-984-1] LFTP vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[security bulletin] HPSBMA02574 SSRT100038 rev.1 - HP ProLiant G6 Lights-Out 100, Remote Management, Denial of Service (DoS) (security-alert@...com)
etax 2010 failure to validate remote ssl certificate properly (dave b <db.pub.mail@...il.com>)
Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability (sattler@...idmedia.de)
[ GLSA 201009-06 ] Clam AntiVirus: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 201009-05 ] Adobe Reader: Multiple vulnerabilities (Stefan Behte <craig@...too.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
ESA-2010-014: RSA, The Security Division of EMC, releases security hot fixes for potential vulnerability in RSA® Access Manager Server … (Security_Alert@....com)
ESA-2010-016: RSA, The Security Division of EMC, releases security hot fix for a potential vulnerability in RSA® Access Manager Agent w… (Security_Alert@....com)
ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing. (Security_Alert@....com)
[USN-985-1] mountall vulnerability (Kees Cook <kees@...ntu.com>)

September 9 (10 messages)

Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability. (Fyodor <fyodor@...ecure.org>)
[security bulletin] HPSBMA02516 SSRT090232 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Lo… (security-alert@...com)
[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
ACROS Security: Remote Binary Planting in Apple Safari for Windows (ASPR #2010-09-08-1) ("ACROS Security Lists" <lists@...os.si>)
Binary Planting Goes "EXE" ("ACROS Security Lists" <lists@...os.si>)
SQL Injection and XSS vulnerabilities in CubeCart version 4.3.3 (Bogdan Calin <bogdan@...netix.com>)
[security bulletin] HPSBMA02576 SSRT090231 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Lo… (security-alert@...com)
[USN-978-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-975-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: etax 2010 failure to validate remote ssl certificate properly (dave b <db.pub.mail@...il.com>)

September 10 (8 messages)

[ MDVSA-2010:172 ] kernel (security@...driva.com)
[SECURITY] [DSA 2106-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Medium security flaw in Apache Traffic Server (Tim Brown <timb@...-dimension.org.uk>)
Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: Binary Planting Goes "EXE" ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Binary Planting Goes "EXE" (Christian Sciberras <uuf6429@...il.com>)
PGP Desktop version 9.10.x-10.0.0 Insecure DLL Hijacking Vulnerability (tsp.dll, tvttsp.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Internet Download Accelerator 5.8 Remote Buffer Overflow (g1xsystem@...dowslive.com)

September 11 (1 message)

[DCA-00015] YOPS Web Server Remote Command Execution (Rodrigo Escobar <ipax@...abs.com.br>)

September 13 (22 messages)

International Hacking Conference "POC2001" Call for Paper (pocadm@...il.com)
MVSA-10-006 / CVE-2010-0153 - IBM Proventia Network Mail Security System - Cross-Site Request Forgery vulnerabilities (marian.ventuneac@...il.com)
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2010:174 ] quagga (security@...driva.com)
MVSA-10-009 / CVE-2010-0155 - IBM Proventia Network Mail Security System - CRLF Injection vulnerability (marian.ventuneac@...il.com)
MVSA-10-008 / CVE-2010-0154 - IBM Proventia Mail Security System - Insecure Direct Object Reference vulnerability (marian.ventuneac@...il.com)
[ MDVSA-2010:175 ] sudo (security@...driva.com)
[ MDVSA-2010:179 ] libglpng (security@...driva.com)
[ MDVSA-2010:180 ] rpm (security@...driva.com)
Wireshark 1.4.0 Malformed SNMP V1 Packet Denial of Service (yangdn@...c.org.cn)
Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
H2HC 2010 Sao Paulo - Capture the Flag ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[ MDVSA-2010:176 ] tomcat5 (security@...driva.com)
Adobe LiveCycle ES DLL Hijacking Exploit (.dll) (admin@...report.ir)
[ MDVSA-2010:177 ] tomcat5 (security@...driva.com)
[ MDVSA-2010:178 ] ocsinventory (security@...driva.com)
MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities (marian.ventuneac@...il.com)
ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-171: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-169: Novell Netware SSHD.NLM Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-173: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

September 14 (18 messages)

Web challenges from RootedCON'2010 CTF - Contest (Roman Medina-Heigl Hernandez <roman@...labs.com>)
[DCA-00016 - Nokia E72 Keyboard Password bypass] (Ewerson GuimarÃ£es (Crash) - Dclabs <crash@...abs.com.br>)
ZDI-10-174: Hewlett-Packard Data Protector DtbClsLogin Utf8cpy Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CVE-2010-3200 : Microsoft Word 2003 MSO Null Pointer Dereference Vulnerability (Aditya K Sood <adi_ks@...niche.org>)
rPSA-2010-0056-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 2108-1] New cvsnt package fixes arbitrary code execution (SÃ©bastien Delafond <seb@...ian.org>)
ZDI-10-176: Mozilla Firefox normalizeDocument Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:181 ] ntop (security@...driva.com)
[security bulletin] HPSBMA02566 SSRT100045 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Disclosure of Sensitive Informati… (security-alert@...com)
[USN-987-1] Samba vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[FLOCK-SA-2010-01] Flock Browser: A malformed favourite can bypass cross origin protection (XSS) (Lyndon Nerenberg <lyndon@...ck.com>)
[FLOCK-SA-2010-02] Flock Browser: A malicious RSS feed can bypass cross origin protection (XSS) (Lyndon Nerenberg <lyndon@...ck.com>)
[FLOCK-SA-2010-03] Flock Browser: javascript: url with a leading NULL byte can bypass cross origin protection (XSS) (Lyndon Nerenberg <lyndon@...ck.com>)
Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
New writeup by Amit Klein (Trusteer): "Cross-domain information leakage in Firefox 3.6.4-3.6.8, Firefox 3.5.10-3.5.11 and … (Amit Klein <amit.klein@...steer.com>)
[FLOCK-SA-2010-04] Flock Browser: window.open() Method Javascript Same-Origin Policy Violation (XSS) (Lyndon Nerenberg <lyndon@...ck.com>)
ZDI-10-177: IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:182 ] kdegraphics (security@...driva.com)

September 15 (14 messages)

[Suspected Spam]Directory Traversal in Axigen v7.4.1 running on Windows (Bogdan Calin <bogdan@...netix.com>)
XSS vulnerability in Atutor edit content folder (advisory@...ridge.ch)
XSS vulnerability in AContent (advisory@...ridge.ch)
XSS vulnerability in AContent (advisory@...ridge.ch)
XSS vulnerability in ATutor (advisory@...ridge.ch)
XSS vulnerability in AChecker (advisory@...ridge.ch)
XSS (cross site scripting) vulnerability in Serendipity (advisory@...ridge.ch)
XSS vulnerability in SantaFox search module (advisory@...ridge.ch)
XSRF (CSRF) in SantaFox (advisory@...ridge.ch)
XSS vulnerability in AContent search (advisory@...ridge.ch)
ZDI-10-178: Novell PlateSpin Orchestrate Graph Rendering Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:183 ] socat (security@...driva.com)
MVSA-10-001 - Google Message Security SaaS - SQL Injection vulnerabilities (marian.ventuneac@...il.com)
MVSA-10-002 - Google Message Security SaaS - Multiple XSS vulnerabilities (marian.ventuneac@...il.com)

September 16 (3 messages)

[security bulletin] HPSBMA02568 SSRT100219 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting … (security-alert@...com)
[security bulletin] HPSBGN02577 SSRT100224 rev.2 - 3Com OfficeConnect Gigabit VPN Firewall (3CREVF100-73), Remote Cross Site Scripting (XS… (security-alert@...com)
[SECURITY] [DSA-2109-1] New samba packages fix buffer overflow (Stefan Fritsch <sf@...ian.org>)

September 17 (6 messages)

[security bulletin] HPSBUX02546 SSRT100159 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS), Unauthorized Disclosure of Informat… (security-alert@...com)
[USN-975-2] Firefox and Xulrunner regression (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
[oCERT-2010-003] Free Simple CMS path sanitization errors (Andrea Barisani <lcars@...rt.org>)
[ MDVSA-2010:184 ] samba (security@...driva.com)
[USN-978-2] Thunderbird regression (Jamie Strandboge <jamie@...onical.com>)

September 20 (21 messages)

[security bulletin] HPSBMA02568 SSRT100219 rev.2 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting … (security-alert@...com)
Searching for DropBox security contact (Rebecca Menessec <rebecca.menessec@...il.com>)
SQL injection vulnerability in e107 (advisory@...ridge.ch)
[USN-986-1] bzip2 vulnerability (Jamie Strandboge <jamie@...onical.com>)
SQL injection vulnerability in e107 (advisory@...ridge.ch)
[SECURITY] [DSA 2113-1] New drupal6 packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[USN-986-2] ClamAV vulnerability (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA 2111-1] New squid3 packages fix denial of service (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA-2106-2] New xulrunner packages fix regression (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow (Stefan Fritsch <sf@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-10:08.bzip2 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Vulnerabilities in IB Promotion Advanced Business Web Suite ("MustLive" <mustlive@...security.com.ua>)
n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760 (<security@...ns.com>)
n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server (<security@...ns.com>)
n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760 (<security@...ns.com>)
[USN-986-3] dpkg vulnerability (Jamie Strandboge <jamie@...onical.com>)
Battle.net Mobile Authenticator MITM Vulnerability (yawninglol@...il.com)
[ MDVSA-2010:185 ] bzip2 (security@...driva.com)
Vulnerable 3rd-party DLLs used in TrendMicro's malware scanner HouseCall ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Binary Planting Attack Vectors - There's more than one way to skin a cat... or plant a binary, for that matter ("ACROS Security Lists" <lists@...os.si>)
[USN-989-1] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

September 21 (8 messages)

Security Contact Allianz IT-Infrastructure - Germany (Stefan Bauer <stefan.bauer@...ewerk.de>)
[ MDVSA-2010:186 ] phpmyadmin (security@...driva.com)
Exploit Next GenerationÂ® Methodology ("Nelson Brito" <nbrito@...ure.org>)
[USN-990-1] OpenSSL vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-990-2] Apache vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
CollabNet Subversion Edge Log Parser XSS/Code Injection Vulnerability (sk <sk10_0@...oo.com>)
[ISecAuditors Security Advisories] Insecure Direct Object Reference in tuenti.com allow to read of any message user (ISecAuditors Security Advisories <advisori…)
[ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail < v6.2.0 (ISecAuditors Security Advisories <advisories@...cauditors.com>)

September 22 (11 messages)

[ GLSA 201009-07 ] libxml2: Denial of Service (Stefan Behte <craig@...too.org>)
[ GLSA 201009-08 ] python-updater: Untrusted search path (Stefan Behte <craig@...too.org>)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team…)
Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response…)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilit… (Cisco Systems Product Security Incident…)
TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[ECHO_ADV_113$2010] BSI Hotel Booking System Admin Login Bypass Vulnerability (adv@...dc.org)
CONFidence 2.0 2010 - Call for Papers - 29-30.11.2010 Prague (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
ESA-2010-017: RSA, The Security Division of EMC, announces a security update for RSA Authentication Agent 7.0 for Web, which addresses … (<Security_Alert@....com>)

September 23 (10 messages)

[ MDVSA-2010:187 ] squid (security@...driva.com)
[ MDVSA-2010:188 ] kernel (security@...driva.com)
Opera Web Browser v10.62 (CSS) Cross Domain Vulnerability (info@...uritylab.ir)
[ISecAuditors Security Advisories] SQL Injection and XSS in Motorito < v2.0 Ni 483 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[security bulletin] HPSBMA02584 SSRT100230 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote URL Redirection (security-alert@...com)
[security bulletin] HPSBMA02585 SSRT100256 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBMA02578 SSRT100069 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Information Disclosur… (security-alert@...com)
[security bulletin] HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote URL Redirection (security-alert@...com)
Netscape Web Browser (CSS) Cross Domain Vulnerability (info@...uritylab.ir)
Re: Opera Web Browser v10.62 (CSS) Cross Domain Vulnerability (phara0h <secws.phara0h@...glemail.com>)

September 24 (5 messages)

Re: Netscape Web Browser (CSS) Cross Domain Vulnerability (Michal Zalewski <lcamtuf@...edump.cx>)
VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues (VMware Security team <security@...are.com>)
Re: Opera Web Browser v10.62 (CSS) Cross Domain Vulnerability (security@...ra.com)
TWSL2010-005: FreePBX recordings interface allows remote code execution (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
[ MDVSA-2010:189 ] pcsc-lite (security@...driva.com)

September 27 (10 messages)

[ MDVSA-2010:189-1 ] pcsc-lite (security@...driva.com)
Vulnerabilities in CMS MYsite ("MustLive" <mustlive@...security.com.ua>)
Exploit Next Generation(R) Example Codes (Nelson Brito <nbrito@...ure.org>)
Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453 (Rodrigo Branco <rbranco@...ckpoint.com>)
[SECURITY] [DSA-2114-1] New git-core packages fix regression (Stefan Fritsch <sf@...ian.org>)
SQL injection vulnerability in e107 (advisory@...ridge.ch)
XSS vulnerability in Entrans (advisory@...ridge.ch)
SQL injection vulnerability in Entrans (advisory@...ridge.ch)
SQL injection vulnerability in Entrans (advisory@...ridge.ch)
XSS in Horde IMP <=4.3.7, fetchmailprefs.php (Moritz Naumann <security@...itz-naumann.com>)

September 28 (1 message)

[oCERT-2010-004] FFmpeg/libavcodec arbitrary offset dereference (Andrea Barisani <lcars@...rt.org>)

September 29 (13 messages)

Fwd: 2.6.6 <= phpMyFAQ <= 2.6.8 XSS (Yam Mesicka <yammesicka@...il.com>)
Re: XSS vulnerability in CompuCMS (security curmudgeon <jericho@...rition.org>)
Re: XSS vulnerability in Auto CMS (security curmudgeon <jericho@...rition.org>)
XSRF (CSRF) in Zimplit (advisory@...ridge.ch)
[USN-995-1] libMikMod vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-996-1] Mako vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
XSS vulnerability in GetSimple CMS (advisory@...ridge.ch)
[USN-994-1] libHX vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-993-1] libgdiplus vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
XSS vulnerability in Pluck (advisory@...ridge.ch)
[Onapsis Security Advisory 2010-007] SAP Management Console Multiple Denial of Service (Onapsis Research Labs <research@...psis.com>)
[security bulletin] HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Info… (security-alert@...com)
[USN-992-1] Avahi vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

September 30 (16 messages)

ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[ GLSA 201009-09 ] fence: Multiple symlink vulnerabilites (Stefan Behte <craig@...too.org>)
[SECURITY] [DSA-2115-1] New moodle packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBMA02558 SSRT100158 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-179: IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-185: IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
VMSA-2010-0015 VMware ESX third party updates for Service Console (VMware Security team <security@...are.com>)
ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:190 ] libtiff (security@...driva.com)
Re: XSS vulnerability in Pluck (security curmudgeon <jericho@...rition.org>)

236 messages

Powered by blists - more mailing lists