full-disclosure mailing list - 2013/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 3	² 2	³ 5	⁴ 14	⁵ 21	⁶ 12	⁷ 2
⁸ 31	⁹ 21	¹⁰ 39	¹¹ 45	¹² 3	¹³ 2	¹⁴ 4
¹⁵ 12	¹⁶ 8	¹⁷ 15	¹⁸ 4	¹⁹ 7	²⁰ 23	²¹ 7
²² 16	²³ 19	²⁴ 11	²⁵ 4	²⁶ 4	²⁷ 2	²⁸
²⁹ 7	³⁰ 8

Messages by day:

April 1 (3 messages)

Remote command execution in Ruby Gem ldoce 0.0.2 ("Larry W. Cashdollar" <larry0@...com>)
Network Weathermap 0.97a - Persistent XSS (Daniel Ricardo dos Santos <danielrs@...plus.com.br>)
Aspen 0.8 - Directory Traversal (Daniel Ricardo dos Santos <danielrs@...plus.com.br>)

April 2 (2 messages)

Advisory: PonyOS Security Issues (John Cartwright <johnc@...k.org.uk>)
Re: Advisory: PonyOS Security Issues (coderman <coderman@...il.com>)

April 3 (5 messages)

SEC Consult SA-20130403-0 :: Multiple vulnerabilities in Sophos Web Protection Appliance (SEC Consult Vulnerability Lab <research@...-consult.com>)
Google AD Sync Tool - Exposure of Sensitive Information Vulnerability ("Lists" <lists@...seofsecurity.com>)
[Security-news] SA-CONTRIB-2013-040 - Commerce Skrill (Formerly Moneybookers) - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-041 - Chaos tool suite (ctools) - Access bypass (security-news@...pal.org)
DoS vulnerability in Adobe Flash Player (BSOD) ("MustLive" <mustlive@...security.com.ua>)

April 4 (14 messages)

[SECURITY] [DSA 2654-1] libxslt security update (Salvatore Bonaccorso <carnil@...ian.org>)
Hackersh 0.1 Release Announcement (Itzik Kotler <xorninja@...il.com>)
Re: DoS vulnerability in Adobe Flash Player (BSOD) (Jann Horn <jann@...jh.net>)
GreHack 2013 - Call For Papers - November 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
SEC Consult 20130404-0 :: Multiple Vulnerabilities in Censornet Professional v4 (2.1.7) (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:015-1 ] apache (security@...driva.com)
[ MDVSA-2013:015-1 ] apache (security@...driva.com)
[ MDVSA-2013:016 ] apache-mod_security (security@...driva.com)
[ MDVSA-2013:017 ] arpwatch (security@...driva.com)
[ MDVSA-2013:018 ] automake (security@...driva.com)
[SECURITY] [DSA 2657-1] postgresql-8.4 security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2658-1] postgresql-9.1 security update (Giuseppe Iuculano <iuculano@...ian.org>)
[ MDVSA-2013:019 ] bash (security@...driva.com)
[ MDVSA-2013:027-1 ] clamav (security@...driva.com)

April 5 (21 messages)

[ MDVSA-2013:029 ] apache-mod_security (security@...driva.com)
[ MDVSA-2013:030 ] arpwatch (security@...driva.com)
[ MDVSA-2013:031 ] automake (security@...driva.com)
[ MDVSA-2013:032 ] bash (security@...driva.com)
[ MDVSA-2013:023-1 ] coreutils (security@...driva.com)
[ MDVSA-2013:033 ] cronie (security@...driva.com)
[ MDVSA-2013:034 ] cups (security@...driva.com)
[ MDVSA-2013:035 ] libexif (security@...driva.com)
[ MDVSA-2013:036 ] exif (security@...driva.com)
[ MDVSA-2013:037 ] fetchmail (security@...driva.com)
[ MDVSA-2013:038 ] freeradius (security@...driva.com)
[ MDVSA-2013:039 ] freetype2 (security@...driva.com)
[ MDVSA-2013:001-1 ] gnupg (security@...driva.com)
[ MDVSA-2013:040 ] gnutls (security@...driva.com)
[ MDVSA-2013:041 ] html2ps (security@...driva.com)
[ MDVSA-2013:042 ] krb5 (security@...driva.com)
[ MDVSA-2013:043 ] libgssglue (security@...driva.com)
[ MDVSA-2013:044 ] libjpeg (security@...driva.com)
[ MDVSA-2013:045 ] libssh (security@...driva.com)
[ MDVSA-2013:046 ] libtiff (security@...driva.com)
c0c0n 2013 - Call For Papers and Call For Workshops (c0c0n International Information Security Conference <c0c0n@...ra.org>)

April 6 (12 messages)

[ MDVSA-2013:055 ] wireshark (security@...driva.com)
[ MDVSA-2013:048 ] ncpfs (security@...driva.com)
[ MDVSA-2013:052 ] openssl (security@...driva.com)
[ MDVSA-2013:049 ] net-snmp (security@...driva.com)
[ MDVSA-2013:047 ] libxslt (security@...driva.com)
[ MDVSA-2013:050 ] nss (security@...driva.com)
[ MDVSA-2013:054 ] sudo (security@...driva.com)
[ MDVSA-2013:053 ] proftpd (security@...driva.com)
[ MDVSA-2013:051 ] openssh (security@...driva.com)
[Slightly OT] "Summerschool at the NSA" - a screenplay where the NSA gets pwned by two Hollywood actresses (100% non-viol… (Shlomi Fish <shlomif@...omifish.org>)
[ISecAuditors Security Advisories] Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery <= v1.8.9 (ISecAuditors Security Advisories <advisories@...c…)
Last Mile: SECURWARE 2013 || August 25 - 31, 2013 - Barcelona, Spain (Cristina Pascual<cris.pascual.gonzalez@...il.com>)

April 7 (2 messages)

Vanilla Forums 2.0.18 / SQL-Injection / Insert arbitrary user & dump usertable ("Ing. Michael F. Schratt, MSc" <mschratt@...-enterprise.com>)
Hackito Ergo Sum 2013 – Call For Paper – HES2013 CFP (choukoumoun <choukoumoun@...il.com>)

April 8 (31 messages)

[ MDVSA-2013:056 ] libxml2 (security@...driva.com)
SEC Consult 20130408-0 :: Nitro Pro 8 - Insecure Library Loading Allows Remote Code Execution (DLL Hijacking) (SEC Consult Vulnerability Lab <research@...-cons…)
[ MDVSA-2013:057 ] xinetd (security@...driva.com)
APT1: technical backstage (rootbsd@...ted.com)
[ MDVSA-2013:058 ] bind (security@...driva.com)
[ MDVSA-2013:059 ] dhcp (security@...driva.com)
[ MDVSA-2013:060 ] accountsservice (security@...driva.com)
[ MDVSA-2013:061 ] awstats (security@...driva.com)
[ MDVSA-2013:062 ] backuppc (security@...driva.com)
[ MDVSA-2013:063 ] bip (security@...driva.com)
[ MDVSA-2013:064 ] bogofilter (security@...driva.com)
[ MDVSA-2013:065 ] boost (security@...driva.com)
[ MDVSA-2013:066 ] bugzilla (security@...driva.com)
[ MDVSA-2013:067 ] couchdb (security@...driva.com)
[ MDVSA-2013:068 ] courier-authlib (security@...driva.com)
[ MDVSA-2013:069 ] cups-pk-helper (security@...driva.com)
[ MDVSA-2013:070 ] dbus (security@...driva.com)
[ MDVSA-2013:071 ] dbus-glib (security@...driva.com)
[ MDVSA-2013:072 ] dnsmasq (security@...driva.com)
Poshing the Hashes (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
GitHub Login Cookie Failure (Chris Roussel <lab12@...abit.com>)
[ MDVSA-2013:073 ] dokuwiki (security@...driva.com)
[ MDVSA-2013:074 ] drupal (security@...driva.com)
[ MDVSA-2013:075 ] elinks (security@...driva.com)
Re: GitHub Login Cookie Failure (Gregory Boddin <gregory@...hine.net>)
Re: GitHub Login Cookie Failure (Jeffrey Walton <noloader@...il.com>)
Re: GitHub Login Cookie Failure (Jann Horn <jann@...jh.net>)
Re: GitHub Login Cookie Failure (Jann Horn <jann@...jh.net>)
XSS vulnerabilities in ZeroClipboard in multiple plugins for WordPress ("MustLive" <mustlive@...security.com.ua>)
XSS and FPD vulnerabilities in ZeroClipboard in multiple themes for WordPress ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2013:076 ] emacs (security@...driva.com)

April 9 (21 messages)

[ MDVSA-2013:077 ] ettercap (security@...driva.com)
[ MDVSA-2013:078 ] fail2ban (security@...driva.com)
[ MDVSA-2013:079 ] ffmpeg (security@...driva.com)
[ MDVSA-2013:080 ] ganglia (security@...driva.com)
[ MDVSA-2013:081 ] gegl (security@...driva.com)
[ MDVSA-2013:082 ] gimp (security@...driva.com)
[ MDVSA-2013:083 ] glib2.0 (security@...driva.com)
[ MDVSA-2013:084 ] gnome-keyring (security@...driva.com)
SVN extractor for Web Application Pentesters (Anant Shrivastava <anant@...ntshri.info>)
Re: GitHub Login Cookie Failure (Chris Roussel <lab12@...abit.com>)
[waraxe-2013-SA#102] - Reflected XSS in phpMyAdmin 3.5.7 (Janek Vind <come2waraxe@...oo.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[ MDVSA-2013:085 ] groff (security@...driva.com)
[ MDVSA-2013:086 ] groff (security@...driva.com)
Remote Command Injection Ruby Gem Karteek Docsplit 0.5.4 ("Larry W. Cashdollar" <larry0@...com>)
[ MDVSA-2013:087 ] firefox (security@...driva.com)
[ MDVSA-2013:088 ] hplip (security@...driva.com)
[ MDVSA-2013:089 ] icclib (security@...driva.com)
[ MDVSA-2013:090 ] argyllcms (security@...driva.com)
[ MDVSA-2013:091 ] icecast (security@...driva.com)
[ MDVSA-2013:092 ] imagemagick (security@...driva.com)

April 10 (39 messages)

[ MDVSA-2013:093 ] ircd-hybrid (security@...driva.com)
[ MDVSA-2013:094 ] jakarta-poi (security@...driva.com)
[ MDVSA-2013:095 ] java-1.7.0-openjdk (security@...driva.com)
[ MDVSA-2013:096 ] keepalived (security@...driva.com)
[ MDVSA-2013:097 ] libotr (security@...driva.com)
[ MDVSA-2013:098 ] libupnp (security@...driva.com)
[ MDVSA-2013:099 ] libytnef (security@...driva.com)
[ MDVSA-2013:100 ] lighttpd (security@...driva.com)
[ MDVSA-2013:101 ] lynx (security@...driva.com)
[ MDVSA-2013:102 ] mariadb (security@...driva.com)
[ MDVSA-2013:103 ] mesa (security@...driva.com)
[ MDVSA-2013:104 ] mosh (security@...driva.com)
[ MDVSA-2013:105 ] munin (security@...driva.com)
[ MDVSA-2013:106 ] nss-pam-ldapd (security@...driva.com)
[ MDVSA-2013:107 ] ocaml-xml-light (security@...driva.com)
[ MDVSA-2013:108 ] openconnect (security@...driva.com)
[ MDVSA-2013:109 ] open-iscsi (security@...driva.com)
[ MDVSA-2013:110 ] openjpeg (security@...driva.com)
[ MDVSA-2013:111 ] openslp (security@...driva.com)
[ MDVSA-2013:112 ] otrs (security@...driva.com)
DoS vulnerability in Internet Explorer (access violation) ("MustLive" <mustlive@...security.com.ua>)
DeepSec 2013 - Call for Papers (DeepSec Conference <deepsec@...psec.net>)
Re: [ MDVSA-2013:101 ] lynx (Peter W-S <peterwintrsmith@...il.com>)
Re: [ MDVSA-2013:101 ] lynx (Erik Falor <ewfalor@...il.com>)
Re: [ MDVSA-2013:101 ] lynx (Fabian Wenk <fabian@...ks.ch>)
Re: [ MDVSA-2013:101 ] lynx (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: [ MDVSA-2013:101 ] lynx (security curmudgeon <jericho@...rition.org>)
Re: [ MDVSA-2013:101 ] lynx (Alex <fd@...oo.de>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Router… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Prime Network Control Systems Database Default Credentials Vulnerability (Cisco Systems Product Security Incident Response Team …)
[SECURITY] [DSA 2659-1] libapache-mod-security security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [ MDVSA-2013:101 ] lynx (Lex van Roon <r3boot@...log.nl>)
Re: [ MDVSA-2013:101 ] lynx (Borja Ruiz Castro <borja@...35.com>)
Re: [ MDVSA-2013:101 ] lynx (Peter Thoeny <peter09@...eny.org>)
Re: [ MDVSA-2013:101 ] lynx (Jeffrey Walton <noloader@...il.com>)
[Security-news] SA-CONTRIB-2013-042 - RESTful Web Services (RESTWS) - Denial of Service (security-news@...pal.org)

April 11 (45 messages)

[ MDVSA-2013:123 ] rpmdevtools (security@...driva.com)
[ MDVSA-2013:121 ] qemu (security@...driva.com)
[ MDVSA-2013:135 ] vte (security@...driva.com)
[ MDVSA-2013:126 ] snack (security@...driva.com)
[ MDVSA-2013:132 ] tor (security@...driva.com)
[ MDVSA-2013:118 ] python-feedparser (security@...driva.com)
[ MDVSA-2013:122 ] quagga (security@...driva.com)
[ MDVSA-2013:138 ] x11-driver-video-qxl (security@...driva.com)
[ MDVSA-2013:137 ] wordpress (security@...driva.com)
[ MDVSA-2013:120 ] python-pycrypto (security@...driva.com)
[ MDVSA-2013:117 ] python (security@...driva.com)
[ MDVSA-2013:133 ] usbmuxd (security@...driva.com)
[ MDVSA-2013:131 ] taglib (security@...driva.com)
[ MDVSA-2013:128 ] squashfs-tools (security@...driva.com)
[ MDVSA-2013:130 ] stunnel (security@...driva.com)
[ MDVSA-2013:119 ] python-httplib2 (security@...driva.com)
[ MDVSA-2013:139 ] x11-server (security@...driva.com)
[ MDVSA-2013:129 ] squid (security@...driva.com)
[ MDVSA-2013:140 ] asterisk (security@...driva.com)
[ MDVSA-2013:113 ] perl (security@...driva.com)
[MDVSA-2013:11X ] ENTIRE OS (Stefan Jon Silverman <sjs@...inc.com>)
MacOSX 10.8.3 ftpd Remote Resource Exhaustion ("[CXSEC]" <submit@...ec.org>)
Re: [ MDVSA-2013:101 ] lynx (Noel Butler <noel.butler@...ics.net>)
Re: [ MDVSA-2013:101 ] lynx (Daniel Preußker <daniel@...ussker.net>)
Re: [ MDVSA-2013:101 ] lynx (Andre Helwig <a.helwig@...eleven.de>)
Exploiting sibling domains cookie isolation policy to DoS CDN users (Jan Wrobel <wrr@...edbit.org>)
Allegro.pl XSS [0-day] (Kacper Szczesniak <kacper@....pl>)
Re: Exploiting sibling domains cookie isolation policy to DoS CDN users (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Allegro.pl XSS [0-day] (Henri Salo <henri@...v.fi>)
Re: Exploiting sibling domains cookie isolation policy to DoS CDN users (Jan Wrobel <wrr@...edbit.org>)
Re: [ MDVSA-2013:101 ] lynx (Erik Falor <ewfalor@...il.com>)
Re: Exploiting sibling domains cookie isolation policy to DoS CDN users (Jann Horn <jann@...jh.net>)
Re: Exploiting sibling domains cookie isolation policy to DoS CDN users (Jan Wrobel <wrr@...edbit.org>)
Remote command injection in Ruby Gem kelredd-pruview 0.3.8 ("Larry W. Cashdollar" <larry0@...com>)
Re: Allegro.pl XSS [0-day] (Swair Mehta <swairmehta@...il.com>)
[ MDVSA-2013:125 ] sleuthkit (security@...driva.com)
[ MDVSA-2013:134 ] viewvc (security@...driva.com)
[ MDVSA-2013:114 ] php (security@...driva.com)
[ MDVSA-2013:127 ] socat (security@...driva.com)
[ MDVSA-2013:124 ] ruby (security@...driva.com)
[ MDVSA-2013:116 ] pixman (security@...driva.com)
[ MDVSA-2013:141 ] libxslt (security@...driva.com)
[ MDVSA-2013:115 ] php-ZendFramework (security@...driva.com)
[ MDVSA-2013:136 ] weechat (security@...driva.com)
[ MDVSA-2013:142 ] postgresql (security@...driva.com)

April 12 (3 messages)

Re: Allegro.pl XSS [0-day] (Maksymilian Arciemowicz <max@...map.org>)
Re: Allegro.pl XSS [0-day] (Jeffrey Walton <noloader@...il.com>)
Re: [ MDVSA-2013:101 ] lynx (Noel Butler <noel.butler@...ics.net>)

April 13 (2 messages)

Re: Allegro.pl XSS [0-day] (Georgi Guninski <guninski@...inski.com>)
XSS and CS vulnerabilities in Dotclear ("MustLive" <mustlive@...security.com.ua>)

April 14 (4 messages)

Re: Allegro.pl XSS [0-day] (Maksymilian Arciemowicz <max@...map.org>)
Re: Allegro.pl XSS [0-day] (Michal Zalewski <lcamtuf@...edump.cx>)
Re: [ MDVSA-2013:101 ] lynx (Alex <fd@...oo.de>)
Vulnerabilities in AI-Bolit ("MustLive" <mustlive@...security.com.ua>)

April 15 (12 messages)

RAT list (Antonio Leiva <insecurechile@...il.com>)
Re: RAT list (Alex <fd@...oo.de>)
[ MDVSA-2013:143 ] poppler (security@...driva.com)
Re: [MDVSA-2013:11X ] ENTIRE OS (Alexander Georgiev <alexander.georgiev@...oo.de>)
Re: [MDVSA-2013:11X ] ENTIRE OS (Laurelai <laurelai@...echan.org>)
Remote command injection md2pdf ruby gem ("Larry W. Cashdollar" <larry0@...com>)
Re: [MDVSA-2013:11X ] ENTIRE OS (Daniel Preußker <daniel@...ussker.net>)
Re: [MDVSA-2013:11X ] ENTIRE OS (Christophe Garault <letoff@...il.com>)
Re: [MDVSA-2013:11X ] ENTIRE OS (Taylor Burke <jburke@...uidweb.com>)
DDIVRT-2013-52 Dell EqualLogic PS6110X Directory Traversal (ddivulnalert <ddivulnalert@...frontline.com>)
Re: RAT list (Bryan Bickford <bryan@...wildhats.com>)
Re: RAT list (Swair Mehta <swairmehta@...il.com>)

April 16 (8 messages)

[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution (ESNC Security <secure@...c.de>)
[ESNC-2013-002] Privilege Escalation in SAP Production Planning and Control (ESNC Security <secure@...c.de>)
[ESNC-2013-003] Remote OS Command Execution in SAP BASIS Communication Services (ESNC Security <secure@...c.de>)
Re: RAT list (Antonio Leiva <insecurechile@...il.com>)
Oppida/NoSuchCon challenge has been released (NoSuchCon <nosuchcon@...il.com>)
[ MDVSA-2013:144 ] phpmyadmin (security@...driva.com)
Re: [ MDVSA-2013:144 ] phpmyadmin (yersinia <yersinia.spiros@...il.com>)
[SE-2012-01] Details of issues fixed by Java SE 7 Update 21 (Security Explorations <contact@...urity-explorations.com>)

April 17 (15 messages)

RAT List ("Nick Giannoulis" <nick@...-idea.com>)
Re: [ MDVSA-2013:144 ] phpmyadmin (Taylor Burke <jburke@...uidweb.com>)
ZPanel arbitrary code execution + root escalation vulnerability (Sven Slootweg <admin@...to.net>)
SI6 Networks' IPv6 Toolkit v1.3.4 released! (Fernando Gont <fgont@...networks.com>)
Re: [SE-2012-01] Details of issues fixed by Java SE 7 Update 21 (Security Explorations <contact@...urity-explorations.com>)
Re: ZPanel arbitrary code execution + root escalation vulnerability ("Dex" <0x41@...h.ai>)
SEC Consult 20130417-0 :: Multiple vulnerabilities in Sosci Survey (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130417-2 :: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server (SEC Consult Vulnerability Lab <research@...-cons…)
Cisco Security Advisory: Cisco Network Admission Control Manager SQL Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Cisco TelePresence Infrastructure Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
[Security-news] SA-CONTRIB-2013-043 - MP3 Player - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-044 - elFinder file manager - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-045 - Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) - Access bypass (security-news@...pal.org)
[SECURITY] [DSA 2661-1] xorg-server security update (Yves-Alexis Perez <corsac@...ian.org>)

April 18 (4 messages)

DC4420 - London DEFCON - April meet - Tuesday 23rd April 2013 (Major Malfunction <majormal@...ate-radio.org>)
Fwd: CVE-2013-2504 : Matrix42 Service Desk XSS (43z sec <43zsec@...il.com>)
[SECURITY] [DSA 2662-1] xen security update (Florian Weimer <fw@...eb.enyo.de>)
TWSL2013-004: Group Name Enumeration Vulnerability in Cisco IKE Implementation (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)

April 19 (7 messages)

Re: SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:145 ] java-1.6.0-openjdk (security@...driva.com)
[ MDVSA-2013:146 ] icedtea-web (security@...driva.com)
[ MDVSA-2013:147 ] libarchive (security@...driva.com)
Re: [ MDVSA-2013:147 ] libarchive (l3thal <l3thal@...shthestack.org>)
Re: [ MDVSA-2013:147 ] libarchive (Valdis.Kletnieks@...edu)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (paul.szabo@...ney.edu.au)

April 20 (23 messages)

Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bob The CCIE MSCE Kim <evdo.hsdpa@...il.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Joxean Koret <joxeankoret@...oo.es>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Mario Vilas <mvilas@...il.com>)
Re: [ MDVSA-2013:147 ] libarchive (Geir Skjotskift <geir@...erworld.no>)
Re: [ MDVSA-2013:147 ] libarchive (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Sergio Alvarez <shadown@...il.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Lee <ler762@...il.com>)
[SECURITY] [DSA 2660-1] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)
Multiple vulnerabilities in Colormix theme for WordPress ("MustLive" <mustlive@...security.com.ua>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bryan <bryan@...wildhats.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bryan <bryan@...wildhats.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bryan <bryan@...wildhats.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bryan <bryan@...wildhats.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Joxean Koret <joxeankoret@...oo.es>)

April 21 (7 messages)

Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Bryan <bryan@...wildhats.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Valdis.Kletnieks@...edu)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (phocean <0x90@...cean.net>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) ("Gregor S." <rc46fi@...glemail.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) ("Gregor S." <rc46fi@...glemail.com>)
reasonable return on investment; better investments in security [was Re: VUPEN Security Research - Adobe Flash Player RTMP Data … (coderman <coderman@...il.com>)
Vulnerabilities in jPlayer ("MustLive" <mustlive@...security.com.ua>)

April 22 (16 messages)

Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Jeffrey Walton <noloader@...il.com>)
[SE-2012-01] Yet another Reflection API flaw affecting Oracle's Java SE (Security Explorations <contact@...urity-explorations.com>)
Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (Benji <me@...ji.com>)
44Café Tuesday 23rd April, Earls Court London - What to expect (Steve <steve@...on.com>)
Coliseum101 - Security Conferences Calendar (Nahuel Grisolia <nahuel.grisolia@...il.com>)
NoSuchCon 2013, Paris (France), May 15th-17 th (NoSuchCon <nosuchcon@...il.com>)
How do I contact Vodafone Security? (Jann Horn <jann@...jh.net>)
0day Vulnerability in VLC (this is my first release of the vuln anywhere) (jay van <jay4sdata@...il.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Henri Salo <henri@...v.fi>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
[ MDVSA-2013:148 ] roundcubemail (security@...driva.com)
[ MDVSA-2013:149 ] roundcubemail (security@...driva.com)
[ MDVSA-2013:150 ] mysql (security@...driva.com)
Re: How do I contact Vodafone Security? (Jeffrey Walton <noloader@...il.com>)
Vulnerabilities in multiple plugins for WordPress with jPlayer ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2663-1] tinc security update (Yves-Alexis Perez <corsac@...ian.org>)

April 23 (19 messages)

Re: How do I contact Vodafone Security? (Alexander Georgiev <fd@...oo.de>)
Re: How do I contact Vodafone Security? (Jann Horn <jann@...jh.net>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Georgi Guninski <guninski@...inski.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Henri Salo <henri@...v.fi>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Gregory Boddin <gregory@...hine.net>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Georgi Guninski <guninski@...inski.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Gregory Boddin <gregory@...hine.net>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Benji <me@...ji.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Tavis Ormandy <taviso@...xchg8b.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Valdis.Kletnieks@...edu)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Gary Baribault <gary@...ibault.net>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Tavis Ormandy <taviso@...xchg8b.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Valdis.Kletnieks@...edu)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Taylor Burke <jburke@...uidweb.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (dawg <mlyodawg@...il.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) ("Mark Felder" <feld@...d.me>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Gary Baribault <gary@...ibault.net>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Valdis.Kletnieks@...edu)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Tavis Ormandy <taviso@...xchg8b.com>)

April 24 (11 messages)

Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Georgi Guninski <guninski@...inski.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Georgi Guninski <guninski@...inski.com>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Gregory Boddin <gregory@...hine.net>)
[ESNC-2013-004] Remote ABAP Code Injection in OpenText/IXOS ECM for SAP NetWeaver (ESNC Security <secure@...c.de>)
hornbill supportworks SQL injection ("research" <research@...ctionis.co.uk>)
hornbill supportworks sql injection ("research" <research@...ctionis.co.uk>)
Re: 0day Vulnerability in VLC (this is my first release of the vuln anywhere) (Georgi Guninski <guninski@...inski.com>)
Cisco Security Advisory: Cisco Device Manager Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Computing System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Product (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Vulnerabilities in multiple themes for WordPress with jPlayer ("MustLive" <mustlive@...security.com.ua>)

April 25 (4 messages)

Apache CloudStack Security Advisory: Multiple vulnerabilities in Apache CloudStack (John Kinsella <jlk@...ashyour.com>)
[waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin (Janek Vind <come2waraxe@...oo.com>)
BSidesCLT Call for Presenters (Bsides Charlotte <bsidesclt@...il.com>)
Fwd: Module import security issue (Jen Savage <savagejen@...il.com>)

April 26 (4 messages)

Hacking IPv6 networks training (slideware, upcoming trainings, etc.) (Fernando Gont <fgont@...networks.com>)
[ MDVSA-2013:151 ] curl (security@...driva.com)
[ MDVSA-2013:152 ] subversion (security@...driva.com)
[ MDVSA-2013:153 ] subversion (security@...driva.com)

April 27 (2 messages)

WPS Office Wpsio.dll Stack Buffer Overflow Vulnerability (zhangjiantao <zhangjiantao@...echnology.net>)
BF and IA vulnerabilities in IBM Lotus Domino ("MustLive" <mustlive@...security.com.ua>)

April 29 (7 messages)

[ MDVSA-2013:154 ] util-linux (security@...driva.com)
[ MDVSA-2013:155 ] fuse (security@...driva.com)
[ MDVSA-2013:156 ] apache-mod_security (security@...driva.com)
CORE-2013-0301 - Vivotek IP Cameras Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
PayPal Bug Bounty #45 BillSafe - Remote Auth Bypass Session Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Updated - CA20130213-01: Security Notice for CA ControlMinder ("Kotas, Kevin J" <Kevin.Kotas@...com>)

April 30 (8 messages)

WowzaMediaServer StorageDir escape (regression) ("Michal J." <wejn@....cz>)
WowzaMediaServer SecureToken bypass (and worse) ("Michal J." <wejn@....cz>)
[ MDVSA-2013:157 ] krb5 (security@...driva.com)
[ MDVSA-2013:158 ] krb5 (security@...driva.com)
[ MDVSA-2013:159 ] clamav (security@...driva.com)
[SECURITY] [DSA 2665-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)
n.runs-SA-2013.005 - IBM Lotus Notes - arbitrary code execution (<security@...ns.com>)
Breakpoint 2013 Call For Papers (cfp@...con.org.au)

351 messages

Powered by blists - more mailing lists