bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 5	² 9	³ 3	⁴	⁵
⁶ 8	⁷ 1	⁸ 6	⁹ 6	¹⁰ 5	¹¹	¹²
¹³ 11	¹⁴	¹⁵ 5	¹⁶ 5	¹⁷ 4	¹⁸	¹⁹
²⁰	²¹ 6	²² 6	²³ 5	²⁴ 22	²⁵	²⁶
²⁷ 6	²⁸	²⁹ 12	³⁰ 5	³¹

Messages by day:

May 1 (5 messages)

[ MDVSA-2013:159 ] clamav (security@...driva.com)
Unchecked Buffer in Microchip TCP/IP Stack Could Allow Remote Code Execution (az.bugreport.subscriber@...il.com)
[HITB-Announce] #HITB2013KUL Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
SQL Injection in b2evolution (advisory@...ridge.com)
Multiple Cross-Site Scripting (XSS) vulnerabilities in GetSimple CMS (advisory@...ridge.com)

May 2 (9 messages)

WordPress Plugin: Advanced XML Reader v0.3.4 XXE Vulnerability (admin@...tes0ft.com)
NGS00423 Patch Notification: Oracle Retail Invoice Manager SQL Injection (NCC Group Research <research@...group.com>)
NGS00422 Patch Notification: Oracle Retail Integration Bus Manager Directory Traversal (NCC Group Research <research@...group.com>)
NGS00416 Patch Notification: Oracle 11g TNS listener remote Invalid Pointer Read (pre-auth) (NCC Group Research <research@...group.com>)
NGS00415 Patch Notification: Oracle 11g TNS listener remote Null Pointer Dereference (pre-auth) (NCC Group Research <research@...group.com>)
[SECURITY] [DSA 2664-1] stunnel4 security update (Salvatore Bonaccorso <carnil@...ian.org>)
ESA-2013-034: EMC Avamar Improper Authorization vulnerability (Security Alert <Security_Alert@....com>)
ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability (Security Alert <Security_Alert@....com>)

May 3 (3 messages)

[ MDVSA-2013:160 ] phpmyadmin (security@...driva.com)
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free (MS13-028) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "CDisplayPointer" Use-after-free (MS13-028) (VUPEN Security Research <advisories@...en.com>)

May 6 (8 messages)

Vulnerability in Microsoft Security Essentials <v4.2 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Multiple buffer overflows on Huawei SNMPv3 service (roberto.paleari@...ze.net)
Multiple Vulnerabilities in D-Link DSL-320B (devnull@...ur1ty.de)
[SE-2012-01] New security vulnerabilities and broken fixes in IBM Java (Security Explorations <contact@...urity-explorations.com>)
VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ESA-2013-015: RSA Archer® GRC Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
[ MDVSA-2013:161 ] java-1.7.0-openjdk (security@...driva.com)
Apache VCL improper input validation (Josh Thompson <jfthomps@...che.org>)

May 7 (1 message)

SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 8 (6 messages)

[ MDVSA-2013:162 ] glibc (security@...driva.com)
[ MDVSA-2013:163 ] glibc (security@...driva.com)
Cross-Site Request Forgery (CSRF) in UMI.CMS (advisory@...ridge.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software (Cisco Systems Product Security Incident Response Team <psirt@…)
[2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Re…)
[security bulletin] HPSBUX02876 SSRT101148 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)

May 9 (6 messages)

[security bulletin] HPSBMU02786 SSRT100877 rev.2 - HP System Management Homepage (SMH) Running on Linux, Windows, and VMware ESX, Remote U… (security-alert@...com)
Vulnerability in "Fujitsu Desktop Update" (for Windows) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability (Security Alert <Security_Alert@....com>)
Re: Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued] ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ESA-2013-021: EMC Documentum Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities (ddivulnalert@...frontline.com)

May 10 (5 messages)

CFP: Hacktivity 2013, October 11-12, Budapest, Hungary (cfp@...ktivity.com)
CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited (Mark Thomas <markt@...che.org>)
ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability (Security Alert <Security_Alert@....com>)

May 13 (11 messages)

WASC Announcement: Static Analysis Technologies Evaluation Criteria Published (announcements@...appsec.org)
[SECURITY] [DSA 2666-1] xen security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2667-1] mysql-5.5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:164 ] mesa (security@...driva.com)
[RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution (RedTeam Pentesting GmbH <release@...team-pentesting.d…)
Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Wifi Album v1.47 iOS - Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SimpleTransfer 2.2.1 - Command Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

May 15 (5 messages)

[SECURITY] [DSA 2668-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[security bulletin] HPSBUX02859 SSRT101144 rev.3 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execution of Arbitrary Code (security-alert@...com)
[ MDVSA-2013:165 ] firefox (security@...driva.com)
Multiple Vulnerabilities in Exponent CMS (advisory@...ridge.com)
Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)

May 16 (5 messages)

[SECURITY] [DSA 2669-1] linux security update (dann frazier <dannf@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2013-135-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2013-135-02) (Slackware Security Team <security@...ckware.com>)
ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

May 17 (4 messages)

APPLE-SA-2013-05-16-1 iTunes 11.0.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[slackware-security] mozilla-thunderbird x86_64 packages (SSA:2013-136-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] ruby (SSA:2013-136-02) (Slackware Security Team <security@...ckware.com>)
CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops! (Sławomir Jabs <slawomir.jabs@...il.com>)

May 21 (6 messages)

Static analysis tool exposition (SATE) V Call for participation (aure@...t.gov)
Defense in depth -- the Microsoft way ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt) (Fernando Gont <fgont@...networks.com>)
CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall) (chudakovma@...il.com)
Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[slackware-security] kernel (SSA:2013-140-01) (Slackware Security Team <security@...ckware.com>)

May 22 (6 messages)

[ MDVSA-2013:166 ] krb5 (security@...driva.com)
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 VML Remote Integer Overflow (MS13-037 / Pwn2Own) (VUPEN Security Research <advisories@...en.co…)
VUPEN Security Research - Microsoft Internet Explorer 10-9 Object Confusion Sandbox Bypass (MS13-037 / Pwn2Own) (VUPEN Security Research <advisories@...en.com>)
Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin (come2waraxe@...oo.com)
[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin (come2waraxe@...oo.com)

May 23 (5 messages)

[SECURITY] [DSA 2672-1] kfreebsd-9 security update (Florian Weimer <fw@...eb.enyo.de>)
APPLE-SA-2013-05-22-1 QuickTime 7.7.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[ANN] Struts 2.3.14.1 GA (fast track | security) (Lukasz Lenart <lukaszlenart@...che.org>)
SEC Consult SA-20130523-0 :: JavaScript Execution in IBM WebSphere DataPower Services (SEC Consult Vulnerability Lab <research@...-consult.com>)
CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (James Joshi <jjoshi@...t.edu>)

May 24 (22 messages)

[SECURITY] [DSA 2677-1] libxrender security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2678-1] mesa security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2680-1] libxt security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2681-1] libxcursor security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2682-1] libxext security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2683-1] libxi security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2684-1] libxrandr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2685-1] libxp security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2686-1] libxcb security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2687-1] libfs security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2688-1] libxres security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2689-1] libxtst security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2676-1] libxfixes security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2675-1] libxvmc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2674-1] libxv security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2673-1] libdmx security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2690-1] libxxf86dga security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2691-1] libxinerama security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2692-1] libxxf86vm security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBUX02881 SSRT101189 rev.1 - HP-UX Directory Server, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2675-2] libxvmc regression update (Thijs Kinkhorst <thijs@...ian.org>)

May 27 (6 messages)

[SECURITY] [DSA 2693-1] libx11 security update (Raphael Geissert <geissert@...ian.org>)
DC4420 - London DEFCON - May meet - Tuesday 28th May 2013 (Tony Naggs <tonynaggs@...il.com>)
GreHack 2013 - 2nd Call For Papers - November 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
[ MDVSA-2013:167 ] openvpn (security@...driva.com)
[ MDVSA-2013:168 ] python-httplib2 (security@...driva.com)
Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 29 (12 messages)

KDE Paste Applet (Michael Samuel <mik@...net.net>)
ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
Monkey HTTPD 1.1.1 - Denial of Service Vulnerability (dougtko@...il.com)
CA20130528-01: Security Notice for CA Process Automation (CA PAM) ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[ MDVSA-2013:169 ] socat (security@...driva.com)
[ MDVSA-2013:170 ] socat (security@...driva.com)
RUCKUS ADVISORY ID 031813-1: Unauthenticated TCP tunneling on Ruckus devices via SSH server process (Ruckus Product Security Team <security@...kuswireless.com>)
RUCKUS ADVISORY ID 031813-2: User authentication bypass vulnerability in ZoneDirector administrative web interface (Ruckus Product Security Team <security@...k…)
CORE-2013-0302 - Zavio IP Cameras multiple vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2013-0318 - TP-Link IP Cameras Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[SECURITY][CVE-2013-2765][ModSecurity] Remote Null Pointer Dereference (yjaaidi@...okalabs.com)

May 30 (5 messages)

[SECURITY] [DSA 2695-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 2696-1] otrs2 security update (Giuseppe Iuculano <iuculano@...ian.org>)
Re: [oss-security] KDE Paste Applet (Kurt Seifried <kseifried@...hat.com>)
[SECURITY] [DSA 2697-1] gnutls26 security update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBPI02869 SSRT100936 rev.2 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers,… (security-alert@...com)

130 messages