bugtraq mailing list - 2011/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 13	³ 22	⁴ 6	⁵ 14	⁶ 6	⁷	⁸
⁹ 13	¹⁰ 7	¹¹ 23	¹² 7	¹³	¹⁴	¹⁵
¹⁶ 22	¹⁷ 5	¹⁸ 4	¹⁹ 6	²⁰ 3	²¹	²²
²³	²⁴ 18	²⁵ 14	²⁶ 4	²⁷ 3	²⁸	²⁹
³⁰ 8	³¹ 5

Messages by day:

May 2 (13 messages)

[USN-1112-1] Firefox and Xulrunner vulnerabilities (Micah Gersten <micah@...onical.com>)
[USN-1123-1] xulrunner-1.9.1 vulnerabilities (Micah Gersten <micah@...onical.com>)
[USN-1121-1] firefox vulnerabilities (Micah Gersten <micah@...onical.com>)
OSI Security: LANSA aXes Web Terminal (TN5250) Cross-Site Scripting Vulnerability (Patrick Webster <patrick@...security.com.au>)
[ MDVSA-2011:079 ] firefox (security@...driva.com)
[SECURITY] [DSA 2227-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ISecAuditors Security Advisories] XSS in Oracle AS Portal 10g (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[ MDVSA-2011:081 ] kdenetwork4 (security@...driva.com)
[SECURITY] [DSA 2228-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2229-1] spip security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2230-1] qemu-kvm security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple Vendors libc/glob(3) GLOB_BRACE|GLOB_LIMIT memory exhaustion (cxib@...urityreason.com)
[ MDVSA-2011:080 ] mozilla-thunderbird (security@...driva.com)

May 3 (22 messages)

XSS in CLASSIFIED ADS (bolok.boloke80@...il.com)
XSS in GOT.MY CLASSMATES (bolok.boloke80@...il.com)
SQL injection in 4images (bolok.boloke80@...il.com)
[security bulletin] HPSBMA02661 SSRT100408 rev.2 - HP Proliant Support Pack (PSP) Running on Linux and Windows, Remote Cross Site Scriptin… (security-alert@...com)
[USN-1127-1] usb-creator vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
XSS in DEAL INFORMER (bolok.boloke80@...il.com)
HTB22967: Multiple SQL Injection in Shutter (advisory@...ridge.ch)
Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv (Damien Miller <djm@....openbsd.org>)
HTB22966: XSS in (e)2 interactive Photo Gallery (advisory@...ridge.ch)
TeamSHATTER Security Advisory: XSS in locale parameter on IASTOP_CS_FARM_PAGE.html (Shatter <shatter@...secinc.com>)
HTB22964: XSS in SelectaPix Image Gallery (advisory@...ridge.ch)
HTB22963: CSRF (Cross-Site Request Forgery) in SelectaPix Image Gallery (advisory@...ridge.ch)
[ MDVSA-2011:082 ] python-feedparser (security@...driva.com)
HTB22962: Multiple XSS in YaPiG (advisory@...ridge.ch)
[USN-1129-1] Perl vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Path disclousure in MEGA PORTAL (bolok.boloke80@...il.com)
TeamSHATTER Security Advisory: Oracle Malformed Network Package Spins CPU (Shatter <shatter@...secinc.com>)
NATO CCD COE's 3rd International Conference on Cyber Conflict . 7-10 June, Tallinn, Estonia. (iccc@...coe.org)
Proofpoint Protection Server Cross-Site Scripting Vulnerability - SOS-11-005 ("Lists" <lists@...seofsecurity.com>)
[USN-1128-1] Vino vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
TeamSHATTER Security Advisory: Multiple SQL Injection in Oracle Enterprise Manager Service Level component (Shatter <shatter@...secinc.com>)
CSRF (Cross-Site Request Forgery) in FREELANCER (bolok.boloke80@...il.com)

May 4 (6 messages)

Announcement - DeepSec 2011 - Call for Papers (DeepSec Conference <deepsec@...psec.net>)
[RT-SA-2011-003] Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances (RedTeam Pentesting GmbH <release@...team-pentesting.d…)
Cisco IOS UDP Denial of Service Vulnerability (vuln@...c.org.cn)
[security bulletin] HPSBMA02667 SSRT100464 rev.3 - HP SiteScope, Cross Site Scripting (XSS) and HTML Injection (security-alert@...com)
[RT-SA-2011-004] Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
Cisco IOS SNMP Message Processing Denial Of Service Vulnerability (vuln@...c.org.cn)

May 5 (14 messages)

Re: Cisco IOS SNMP Message Processing Denial Of Service Vulnerability (psirt@...co.com)
Fwd: [USN-1122-1] Thunderbird vulnerabilities (Micah Gersten <micah@...onical.com>)
HTB22971: XSRF (CSRF) in PHPDug (advisory@...ridge.ch)
Cisco Security Response: Cisco IOS Software Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-1126-2] PHP Regressions (Steve Beattie <sbeattie@...ntu.com>)
HTB22970: Multiple XSS vulnerabilities in PHPDug (advisory@...ridge.ch)
t2'11: Call for Papers 2011 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)
Re: Cisco IOS UDP Denial of Service Vulnerability (psirt@...co.com)
HTB22968: XSS in PHP Directory Listing Script (advisory@...ridge.ch)
HTB22973: XSS in AJAX Calendar (advisory@...ridge.ch)
HTB22972: Multiple SQL injection vulnerabilities in PHPDug (advisory@...ridge.ch)
HTB22969: CSRF (Cross-Site Request Forgery) in VCalendar (advisory@...ridge.ch)
[USN-1122-2] Thunderbird vulnerabilities (Micah Gersten <micah@...onical.com>)
PR10-13: Multiple XSS and Authentication flaws within BMC Remedy Knowledge Management (research <research@...checkup.com>)

May 6 (6 messages)

[USN-1111-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities (VMware Security Team <security@...are.com>)
Silently Pwning Protected-Mode IE9 and Innocent Windows Applications ("Mitja Kolsek" <mitja.kolsek@...os.si>)
Security Advisory: DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones (Barry Greene <bgreene@...ki.org>)
[SECURITY] [DSA 2231-1] otrs2 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2232-1] exim4 security update (Florian Weimer <fw@...eb.enyo.de>)

May 9 (13 messages)

TSSA-2011-02 - Opera : SELECT SIZE Arbitrary null write (Advisories Toucan-System <advisories@...can-system.com>)
TSSA-2011-03 - Perl : multiple functions null pointer dereference uppon parameters injection (Advisories Toucan-System <advisories@...can-system.com>)
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) (wietse@...cupine.org (Wietse Venema))
[security bulletin] HPSBOV02634 SSRT100390 rev.1 - HP OpenVMS running Java, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBTU02684 SSRT100390 rev.1 - HP Tru64 UNIX running Java, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBOV02682 SSRT100495 rev.1 - HP OpenVMS running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Cod… (security-alert@...com)
[security bulletin] HPSBOV02670 SSRT100475 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (DoS), Unauthorized Disclosure of Info… (security-alert@...com)
[security bulletin] HPSBOV02683 SSRT090208 rev.1 - HP Secure Web Server (SWS) for OpenVMS running Apache/PHP, Remote Denial of Service (Do… (security-alert@...com)
PR10-17 Various XSS and information disclosure flaws within KeyFax response management system (research <research@...checkup.com>)
ZDI-11-154: Sybase M-Business Anywhere agSoap.exe password Tag Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-155: Sybase M-Business Anywhere Server agd.exe encodeUsername Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-156: Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Swiss Cyber Storm 3 ("Ivan Buetler" <ivan.buetler@...c.ch>)

May 10 (7 messages)

ZDI-11-157: Mozilla Firefox nsTreeRange Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
OSI Security: Civica Spydus Library Management System (LMS) - Cross-Site Scripting Vulnerability (Patrick Webster <patrick@...security.com.au>)
Re: SQL Injection in Pixie (security curmudgeon <jericho@...rition.org>)
HTB22974: Multiple XSS in Calendarix (advisory@...ridge.ch)
HTB22975: SQL injection in Calendarix (advisory@...ridge.ch)
HTB22976: Multiple XSS (Cross Site Scripting) vulnerabilities in poMMo (advisory@...ridge.ch)
HTB22977: XSRF (CSRF) in poMMo (advisory@...ridge.ch)

May 11 (23 messages)

[security bulletin] HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center (IMC), Remote Execution of Arbitrary Code (security-alert@...com)
ZDI-11-159: Mozilla Firefox OBJECT mObserverList Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-160: HP 3COM/H3C Intelligent Management Center img Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
Apache Struts 2 Multiple Reflected XSS in XWork error pages (marian.ventuneac@...il.com)
ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoin…)
[SECURITY] [DSA 2235-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-1131-1] Postfix vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[security bulletin] HPSBMI02632 SSRT100379 rev.1 - HP/Palm webOS, Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized File … (security-alert@...com)
[SECURITY] [DSA 2234-1] zodb security update (Luciano Bello <luciano@...ian.org>)
ZDI-11-158: Mozilla Firefox OBJECT mChannel Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[Announcement] ClubHACK Magazine Issue 16-May 2011 released (abhijeet@...bhack.com)
[SECURITY] [DSA 2233-1] postfix security update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBMA02672 SSRT100485 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Local Read and… (security-alert@...com)
ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CA20110510-01: Security Notice for CA eHealth ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[PRE-SA-2011-04] Heap overflow in EFI partition handling code of the Linux kernel (Timo Warns <warns@...-sense.de>)
ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-167: Microsoft WINS Service Failed Response Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-1130-1] Exim vulnerability (Kees Cook <kees@...ntu.com>)
[security bulletin] HPSBMA02642 SSRT100415 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running Java, R… (security-alert@...com)

May 12 (7 messages)

CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[Bkis] sNews 1.7.1 XSS vulnerability (Bkis <minhbq@...v.com.vn>)
HTB22980: XSRF (CSRF) in Open Classifieds (advisory@...ridge.ch)
[security bulletin] HPSBMA02661 SSRT100408 rev.3 - HP SNMP Agents Running on Linux and HP Insight Management Agents Running on Windows, Re… (security-alert@...com)
HTB22979: Multiple XSS (Cross Site Scripting) vulnerabilities in Argyle Social (advisory@...ridge.ch)
HTB22978: XSRF (CSRF) in Argyle Social (advisory@...ridge.ch)
CORE-2011-0204: Adobe Audition vulnerability processing malformed session file (CORE Security Technologies Advisories <advisories@...esecurity.com>)

May 16 (22 messages)

[SECURITY] [DSA 2236-1] exim4 security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2011:083 ] wireshark (security@...driva.com)
[security bulletin] HPSBMA02681 SSRT100493 rev.1 - HP Business Availability Center (BAC) Running on Windows and Solaris, Remote Cross Site… (security-alert@...com)
Multiple Vendors libc/fnmatch(3) DoS (incl apache poc) (cxib@...urityreason.com)
[Annoucement] ClubHack Magazine - Call for Articles (abhijeet@...bhack.com)
[ MDVSA-2011:084 ] apr (security@...driva.com)
ESA-2011-016: EMC SourceOne ASP.NET application tracing information disclosure vulnerability (<Security_Alert@....com>)
[ MDVSA-2011:085 ] libmodplug (security@...driva.com)
[SECURITY] [DSA 2237-1] apr security update (Stefan Fritsch <sf@...ian.org>)
[ MDVSA-2011:086 ] polkit (security@...driva.com)
NSENSE-2011-002: Novell eDirectory/Netware LDAP-SSL daemon (Henri Lindberg <henri+lists@...nse.fi>)
DC4420 - London DEFCON - May meet - Tuesday 24th May 2011 (Major Malfunction <majormal@...ate-radio.org>)
Linux Kernel 2.6.38 Remote NULL Pointer Dereference (roberto.paleari@...ze.net)
[ MDVSA-2011:087 ] vino (security@...driva.com)
WebTech Conference 2011 Call for Papers ("Carsten Eilers" <ceilers-lists@....de>)
MalBox Release! A Program Behavior Analysis System! (Xiaobo <xbma@....xjtu.edu.cn>)
[ MDVSA-2011:088 ] mplayer (security@...driva.com)
PR10-15: Multiple XSS flaws within Mitel's AWC (Mitel Audio and Web Conferencing) (research <research@...checkup.com>)
[ MDVSA-2011:089 ] mplayer (security@...driva.com)
Vulnerable and completely outdated 3rd party ZIP code in FastStone image viewer ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ZDI-11-168: Multiple Vendor librpc.dll Remote Information Disclosure Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-1132-1] apturl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)

May 17 (5 messages)

[ MDVSA-2011:090 ] postfix (security@...driva.com)
[SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass (Mark Thomas <markt@...che.org>)
HTB22981: Multiple XSS (Cross Site Scripting) vulnerabilities in PHP Calendar Basic (advisory@...ridge.ch)
Ruxcon 2011 Call For Papers (cfp@...con.org.au)
CVE-2010-0217 - Zeacom Chat Server JSESSIONID weak SessionID Vulnerability (Daniel Clemens <daniel.clemens@...ketninjas.net>)

May 18 (4 messages)

XSS vulnerability in TWiki < 5.0.2 (Netsparker Advisories <advisories@...itunasecurity.com>)
[ MDVSA-2011:092 ] perl-IO-Socket-SSL (security@...driva.com)
DOMinator - The DOMXss Analyzer Tool - is finally public (Stefano Di Paola <stefano.dipaola@...ec.it>)
[ MDVSA-2011:093 ] gnome-screensaver (security@...driva.com)

May 19 (6 messages)

Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006 ("Lists" <lists@...seofsecurity.com>)
RE: CA20110420-02: Security Notice for CA Output Management Web Viewer ("Williams, James K" <James.Williams@...com>)
Apache Struts 2, XWork, OpenSymphony WebWork Java Class Path Information Disclosure (marian.ventuneac@...il.com)
Ubuntu Security Notice publication update (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2011:094 ] pure-ftpd (security@...driva.com)
[SECURITY] [DSA 2238-1] vino security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 20 (3 messages)

[ MDVSA-2011:095 ] apr (security@...driva.com)
PHPCaptcha / Securimage 2.0.2 - Authentication Bypass - SOS-11-007 ("Lists" <lists@...seofsecurity.com>)
Session hacking via authentication cookie on Oracle CRM on Demand (jeffto@...effto.com)

May 24 (18 messages)

[SECURITY] [DSA 2237-2] apr security update (Stefan Fritsch <sf@...ian.org>)
[ MDVSA-2011:096 ] python (security@...driva.com)
NGS00054 Patch Notification: Lumension Device Control (formerly Sanctuary) remote memory corruption ("Research@...Secure" <research@...secure.com>)
Bypassing Cisco's ICMPv6 Router Advertisement Guard feature (Marc Heuse <mh@...sec.de>)
PR10-11: Multiple XSS injection vulnerabilities and a offsite redirection flaw within HP System Management Homepage (Insight… (research <research@...checkup.com>)
HTB22995: XSS in Ajax Chat (advisory@...ridge.ch)
[ MDVSA-2011:098 ] ruby (security@...driva.com)
[ MDVSA-2011:099 ] libzip (security@...driva.com)
NNT Change Tracker - Hard-Coded Encryption Key (Dennis Brunnen <dennis.brunnen@...il.com>)
[ MDVSA-2011:100 ] cyrus-imapd (security@...driva.com)
HTB22987: Multiple XSS in phpScheduleIt (advisory@...ridge.ch)
[ MDVSA-2011:097 ] ruby (security@...driva.com)
Gadu-Gadu 0-Day Remote Code Execution (Kacper Szczesniak <kacper3.14@...il.com>)
HTB22986: SQL injection in ExtCalendar 2 (advisory@...ridge.ch)
[ MDVSA-2011:095-1 ] apr (security@...driva.com)
VUPEN Security Research - 7T Interactive Graphical SCADA System (IGSS) Remote Memory Corruption ("VUPEN Security Research" <advisories@...en.com>)
[SECURITY] [DSA 2239-1] libmojolicious-perl security update (Moritz Muehlenhoff <jmm@...ian.org>)
E-mail address spoofing with RLO (Wouter Coekaerts <wouter@...kaerts.be>)

May 25 (14 messages)

The Anatomy of COM Server-Based Binary Planting Exploits ("ACROS Security Lists" <lists@...os.si>)
CORE-2010-0908: Lotus Notes XLS viewer malformed BIFF record heap overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[SECURITY] [DSA 2241-1] qemu-kvm security update (Moritz Muehlenhoff <jmm@...ian.org>)
Remote Password Disclosure Vulnerability in RXS-3211 IP Camera + others (supernothing@...reclockcycles.org)
[SECURITY] [DSA 2240-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability (Cisco Systems Product Security Incident Response Team <ps…)
iDefense Security Advisory 05.24.11: IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (labs-no-reply <labs-no-reply@...p.vrsn.com>)
Cisco Security Advisory: Cisco IOS XR Software SSHv1 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
iDefense Security Advisory 05.24.11: IBM Lotus Notes RTF Attachment Viewer Stack Buffer Overflow (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 05.24.11: IBM Lotus Notes Applix Attachment Viewer Stack Buffer Overflow (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 05.24.11: IBM Lotus Notes Office Document Attachment Viewer Stack Buffer Overflow (labs-no-reply <labs-no-reply@...p.vrsn.com>)

May 26 (4 messages)

[SECURITY] [DSA 2242-1] cyrus-imapd-2.2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2011:101 ] dovecot (security@...driva.com)
[CVE-REQUEST] Plone XSS and permission errors (matthew@...thewwilkes.name)
Talsoft S.R.L. Security Advisory - WordPress User IDs and User Names Disclosure (Veronica <vero.valeros@...il.com>)

May 27 (3 messages)

[SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability (Deng Ching <oching@...che.org>)
[SECURITY] CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability (Deng Ching <oching@...che.org>)
Viewpoint: Security implications of IPv6 (Fernando Gont <fernando.gont@...il.com>)

May 30 (8 messages)

[SECURITY] [DSA 2243-1] unbound security update (Florian Weimer <fw@...eb.enyo.de>)
CFP for ekoparty 2011 is now OPEN! [Buenos Aires, Argentina] (eko security conference <organizacion@...party.org>)
[ MDVSA-2011:102 ] rdesktop (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-11:02.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ MDVSA-2011:103 ] gimp (security@...driva.com)
[SECURITY] [DSA 2244-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2246-1] mahara security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2245-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)

May 31 (5 messages)

[CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities ("Walikar Riyaz Ahemed Dawalmalik" <WalikarRiyazAD@...roland.com>)
[CVE-2011-1026] Apache Archiva Multiple CSRF vulnerabilities ("Walikar Riyaz Ahemed Dawalmalik" <WalikarRiyazAD@...roland.com>)
Paranoia 2011: Call for papers (paranoia@...chcom.no)
Cross-Site Scripting vulnerability in Serendipity Plugin "serendipity_event_freetag" (sschurtz@...nline.de)
[SECURITY] [DSA 2247-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)

203 messages

Powered by blists - more mailing lists