bugtraq mailing list - 2013/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 5	² 3	³ 16	⁴ 1	⁵	⁶
⁷ 4	⁸ 2	⁹ 9	¹⁰	¹¹ 11	¹²	¹³
¹⁴ 5	¹⁵ 16	¹⁶ 6	¹⁷ 8	¹⁸ 11	¹⁹	²⁰
²¹ 9	²² 4	²³ 8	²⁴ 4	²⁵ 5	²⁶	²⁷
²⁸ 17	²⁹ 11	³⁰ 3	³¹ 6

Messages by day:

October 1 (5 messages)

CFP: WorldCIST'14 - World Conference on IST, at Madeira Island ("Maria Lemos" <marialemos72@...il.com>)
iOS: List of available trusted root certificates (Jeffrey Walton <noloader@...il.com>)
Re: iOS: List of available trusted root certificates (Jason Hellenthal <jhellenthal@...aix.net>)
CORE-2013-0904 - PinApp Mail-SeCure Access Control Failure (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)

October 2 (3 messages)

Defense in depth -- the Microsoft way (part 11): privilege escalation for dummies ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Remote Code Execution in GLPI (High-Tech Bridge Security Research <advisory@...ridge.com>)
Multiple Vulnerabilities in Gnew (High-Tech Bridge Security Research <advisory@...ridge.com>)

October 3 (16 messages)

All in One SEO Pack Plugin for WordPress 1.3.6.4 - 2.0.3 XSS (Charlie Briggs <charlie@...ha.co.uk>)
Cisco Security Advisory: Cisco IOS XR Software Memory Exhaustion Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
RootedCON 2014 - Call For Papers (Javier Olascoaga <deese@...zialk.net>)
Paypal Inc Bug Bounty #99 - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Security Guard CMS QT 4.7.3 - Local Stack Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Hide Photo+Video Safe v1.6 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SilverStripe Framework CMS 3.0.5 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
elproLOG MONITOR WebAccess 2.1 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
WebAssist PowerCMS PHP - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Apple iOS 7 iPad2 Face-Time 1.0.2 - Privacy Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
SEC Consult SA-20131003-0 :: Denial of service vulnerability in Citrix NetScaler (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:245 ] proftpd (security@...driva.com)
[SOJOBO-ADV-13-01] - Zenphoto 1.4.5.2 multiple vulnerabilities (advisories@...omio.com)
ESA-2013-062: EMC Atmos Unauthenticated Database Access Vulnerability (Security Alert <Security_Alert@....com>)
[security bulletin] HPSBPI02892 rev.1 - Certain HP FutureSmart MFP, Weak PDF Encryption, Local Disclosure of Information (security-alert@...com)
APPLE-SA-2013-10-03-1 OS X v10.8.5 Supplemental Update (Apple Product Security <product-security-noreply@...ts.apple.com>)

October 4 (1 message)

SEC Consult SA-20131004-0 :: SQL injection vulnerability in Zabbix (SEC Consult Vulnerability Lab <research@...-consult.com>)

October 7 (4 messages)

[SECURITY] [DSA 2768-1] icedtea-web security update (Salvatore Bonaccorso <carnil@...ian.org>)
[KIS-2013-09] Vanilla Forums <= 2.0.18.5 (class.utilitycontroller.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
Apple Motion Integer Overflow Vulnerability (pereira@...biz.de)
[ MDVSA-2013:246 ] openjpa (security@...driva.com)

October 8 (2 messages)

NotSoSecure CTF (in partnership with Appsec USA) ("sid" <sid@...sosecure.com>)
[SECURITY] [DSA-2769-1] kfreebsd-9 security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 9 (9 messages)

[security bulletin] HPSBGN02929 rev.1 - HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Modul… (security-alert@...com)
[security bulletin] HPSBGN02930 rev.1 - HP Intelligent Management Center(iMC) and HP IMC Service Operation Management Software Module, Rem… (security-alert@...com)
Cross-Site Scripting (XSS) in Feng Office (High-Tech Bridge Security Research <advisory@...ridge.com>)
[ISecAuditors Security Advisories] Multiple Vulnerabilities in Uebimiau <= 2.7.11 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[SECURITY] [DSA 2770-1] torque security update (Salvatore Bonaccorso <carnil@...ian.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software (Cisco Systems Product Security Incident Response Team <psirt@...co…)
[SECURITY] [DSA 2771-1] nas security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 11 (11 messages)

[SECURITY] [DSA 2775-1] ejabberd security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2013:248 ] xinetd (security@...driva.com)
[SECURITY] [DSA 2772-1] typo3-src security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:247 ] gnupg (security@...driva.com)
[ MDVSA-2013:249 ] libraw (security@...driva.com)
[SECURITY] [DSA 2774-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[security bulletin] HPSBMU02901 rev.1 - HP Business Process Monitor running on Windows, Remote Execution of Arbitrary Code and Disclosure … (security-alert@...com)
[SECURITY] [DSA 2773-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2776-1] drupal6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2777-1] systemd security update (Moritz Muehlenhoff <jmm@...ian.org>)
Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities (jsibley1@...il.com)

October 14 (5 messages)

[SECURITY] [DSA 2778-1] libapache2-mod-fcgid security update (Salvatore Bonaccorso <carnil@...ian.org>)
Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities (jsibley1@...il.com)
[CISTI'2014]: Call for Workshops ("Maria Lemos" <marialemos72@...il.com>)
CFP: Passwords^13 Bergen (Norway), December 2-3 2013 (Per Thorsheim <per@...rsheim.net>)
[SECURITY] [DSA 2779-1] libxml2 security update (Michael Gilbert <mgilbert@...ian.org>)

October 15 (16 messages)

[slackware-security] libgpg-error (SSA:2013-287-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] gnutls (SSA:2013-287-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] gnupg (SSA:2013-287-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] xorg-server (SSA:2013-287-05) (Slackware Security Team <security@...ckware.com>)
[slackware-security] gnupg2 (SSA:2013-287-02) (Slackware Security Team <security@...ckware.com>)
Critical vulnerabilities discovered in Gazelle and TBDEV.net (Bogdan Calin <bogdan@...netix.com>)
Training : Advanced Android & iOS Hands-on Exploitation at Toorcon San Diego [16th-17th Oct,2013] (xys3c team <security@...ec.com>)
OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
SEC Consult SA-20131015-0 :: Multiple vulnerabilities in SpamTitan (SEC Consult Vulnerability Lab <research@...-consult.com>)
My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #105 MOS - Multiple Persistent Print Layout Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
DornCMS Application v1.4 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Training : Advanced Android & iOS Hands-on Exploitation at Toorcon San Diego [16th-17th Oct,2013] (xys3c team <security@...ec.com>)
[security bulletin] HPSBMU02931 rev.1 - HP Service Manager, Injection of Arbitrary Code, Remote Privilege Elevation, Remote Disclosure of … (security-alert@...com)
ZAPms v1.42 CMS - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

October 16 (6 messages)

APPLE-SA-2013-10-15-1 Java for OS X 2013-005 and Mac OS X v10.6 Update 17 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[ISecAuditors Security Advisories] PL/SQL Injection in Oracle Portal Demo Organization Chart (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Remote Code Execution in Microweber (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SE-2012-01] Issue 69 details and IBM Java vulnerabilities (Security Explorations <contact@...urity-explorations.com>)
PayPal Inc Bug Bounty #61 - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBPV02918 rev.2 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Cod… (security-alert@...com)

October 17 (8 messages)

[ MDVSA-2013:250 ] mysql (security@...driva.com)
Security Advisory for Bugzilla 4.4.1, 4.2.7 and 4.0.11 (LpSolit@...il.com)
Zikula CMS v1.3.5 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #61 - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ISecAuditors Security Advisories] CSRF vulnerability in LinkedIn (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ANN] Struts 2.3.15.3 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)

October 18 (11 messages)

Elite Graphix ElitCMS 1.01 & PRO - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
NEW VMSA-2013-0012 VMware vSphere updates address multiple vulnerabilities ("\"VMware Security Response Center\"" <security@...are.com>)
[ MDVSA-2013:253 ] libtar (security@...driva.com)
[ MDVSA-2013:251 ] aircrack-ng (security@...driva.com)
[ MDVSA-2013:252 ] torque (security@...driva.com)
[ MDVSA-2013:254 ] quagga (security@...driva.com)
[ MDVSA-2013:255 ] clutter (security@...driva.com)
[ MDVSA-2013:256 ] apache-mod_fcgid (security@...driva.com)
[SECURITY] [DSA 2780-1] mysql-5.1 security update (Moritz Muehlenhoff <jmm@...ian.org>)
OWASP Vulnerable Web Applications Directory Project (psiinon <psiinon@...il.com>)
[SECURITY] [DSA 2781-1] python-crypto security update (Yves-Alexis Perez <corsac@...ian.org>)

October 21 (9 messages)

[slackware-security] libtiff (SSA:2013-290-01) (Slackware Security Team <security@...ckware.com>)
Wordpress videowall Plugin Xss vulnerabilities (iedb.team@...il.com)
[slackware-security] hplip (SSA:2013-291-01) (Slackware Security Team <security@...ckware.com>)
Defense in depth -- the Microsoft way (part 12): NOOP security fixes ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[Article] Linux Kernel Patches For Linux Kernel Security (geinblues@...il.com)
glibc 2.5 <= reloc types to crash bug (geinblues@...il.com)
[SECURITY] [DSA 2782-1] polarssl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2783-1] librack-ruby security update (Thijs Kinkhorst <thijs@...ian.org>)
[CVE-2013-5702] Watchguard Server Center v11.7.4 Multiple Non-Persistent Cross-Site Scripting Vulnerabilities (Julien Ahrens <info@...security.com>)

October 22 (4 messages)

[CVE-2013-4295] Apache Shindig information disclosure vulnerability (Ryan Baxter <rbaxter85@...che.org>)
[CVE-2013-2751, CVE-2013-2752] NETGEAR ReadyNAS Remote Root (Craig Young <vuln-report@...ur3.us>)
[SOJOBO-ADV-13-02] - MODx 2.2.10 Reflected Cross Site Scripting (advisories@...omio.com)
[SECURITY] [DSA 2784-1] xorg-server security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 23 (8 messages)

AusCERT2014: Call for Presentations NOW OPEN (auto-bulletins@...cert.org.au)
[Article] The Audit DSOs of the rtld (geinblues@...il.com)
[ MDVSA-2013:257 ] nss (security@...driva.com)
Cross-Site Scripting (XSS) in GuppY (High-Tech Bridge Security Research <advisory@...ridge.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Identity Services Engine (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Cisco Security Advisory: Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products (Cisco Systems Product Security Incident Response Team <psi…)
ESA-2013-067: RSA® Authentication Agent for Web for Internet Information Services (IIS) Security Controls Bypass Vulner… (Security Alert <Security_Alert@....com>)

October 24 (4 messages)

RPS/APS vulnerability in snom/yealink and others ("Cal Leeming \[Simplicity Media Ltd\]" <cal.leeming@...plicitymedialtd.co.uk>)
[ISecAuditors Security Advisories] HTTP Response Splitting Vulnerability in WebCollab <= v3.30 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[WorldCIST'14]: World Conference on IST; Proceedings by Springer ("Maria Lemos" <marialemos72@...il.com>)
Re: RPS/APS vulnerability in snom/yealink and others (god@...ven.org)

October 25 (5 messages)

CA20131024-01: Security Notice for CA SiteMinder ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Re: RPS/APS vulnerability in snom/yealink and others ("Cal Leeming \[Simplicity Media Ltd\]" <cal.leeming@...plicitymedialtd.co.uk>)
[SECURITY] [DSA 2783-2] librack-ruby regression update (Salvatore Bonaccorso <carnil@...ian.org>)
DC4420 - London DEFCON - October meet - Tuesday 29th October 2013 (Major Malfunction <majormal@...ate-radio.org>)
Symantec Workspace Streaming 7.5.0.493 SWS Streamlet Engine Invoker Servlets Remote Code Execution (nospam@...il.it)

October 28 (17 messages)

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Feeder.co RSS Feeder 5.2 Chrome - Persistent Software Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #104 - Persistent Exception Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2785-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 2787-1] roundcube security update (Salvatore Bonaccorso <carnil@...ian.org>)
Call for Papers, 2014 Symposium on Cryptography and Authentication (SCA2014) , Suzhou, China ("2014 Symposium on Cryptography and Authentication \(SCA2014\) "…)
[CVE-2012-6297] DD-WRT v24-sp2 Command Injection (Craig Young <vuln-report@...ur3.us>)
Call for Papers, 2014 Symposium on Protocols and Rules for Security (SPRS2014) ("2014 Symposium on Protocols and Rules for Security \(SPRS2014\)" <cis@...rpinf…)
[SECURITY] [DSA 2786-1] icu security update (Michael Gilbert <mgilbert@...ian.org>)
Multiple CSRF Horde Groupware Web mail Edition 5.1.2 (m.benetrix@...ecure.com.au)
vBulletin remote admin injection exploit (simo@...xploit.com)
[ISecAuditors Security Advisories] XSS vulnerability in LinkedIn (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[scip_Advisory 10847] MobileIron 4.5.4 Device Registration regpin Cross Site Scripting (Marc Ruef <maru@...p.ch>)
[PT-2013-46] Local File Include in Nagios Looking Glass (noreply@...ecurity.ru)
Re: Call for Papers, 2014 Symposium on Protocols and Rules for Security (SPRS2014) (Brandon Butterworth <brandon@...bbc.co.uk>)
ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CVE-2013-5695 Multilple Cross Site Scripting (XSS) Attacks in Ops View ("J. Oquendo" <sil@...ensive.net>)

October 29 (11 messages)

[ MDVSA-2013:258 ] icu (security@...driva.com)
[ MDVSA-2013:259 ] x11-server (security@...driva.com)
[ MDVSA-2013:260 ] x11-server (security@...driva.com)
[ MDVSA-2013:261 ] dropbear (security@...driva.com)
[ MDVSA-2013:262 ] python-pycrypto (security@...driva.com)
Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236) (Mark Stanislav <mstanislav@...security.com>)
[PSA-2013-1022-1] Microsoft Silverlight Invalid Typecast / Memory Disclosure (bugtraq@...ketstormsecurity.org)
CVE-2013-5694 Blind SQL Injection in Ops View ("J. Oquendo" <sil@...ensive.net>)
ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
GTX CMS 2013 Optima - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

October 30 (3 messages)

[ MDVSA-2013:263 ] roundcubemail (security@...driva.com)
Apache PHP Remote Exploit - apache-magika.c (king cope <isowarez.isowarez.isowarez@...glemail.com>)
ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

October 31 (6 messages)

Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change) (jsibley1@...il.com)
[CVE-2013-4484] DoS vulnerability in Varnish HTTP cache (Poul-Henning Kamp <phk@...tter.freebsd.dk>)
nullcon Goa V First Speaker list and CFP closes soon (nullcon <nullcon@...lcon.net>)
[SECURITY] [DSA 2788-1] iceweasel security update (Raphael Geissert <geissert@...ian.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (Cisco Systems Product Security Incident…)
[ MDVSA-2013:264 ] firefox (security@...driva.com)

164 messages

Powered by blists - more mailing lists