bugtraq mailing list - 2005/03

Messages by day:

March 1 (31 messages)

• Firefox Software Update (Kai Howells <kai@...ketcat.info>)
• Badblue HTTP Server Exploit (Miguel Tarascó Acuña <tarako@...il.com>)
• OpenServer 5.0.6 OpenServer 5.0.7 : A vulnerability in TCP (please_reply_to_security@....com)
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files (John Simpson <jms1@...1.net>)
• Kernelpanik Labs Digest 2005-2 ("Kernelpanik Labs - Security Lists" <seclists@...nelpanik.org>)
• Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error (dveditz@...zio.com)
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ] (JoCaNoR SeCuRiTy TeaM <jocanor@...il.com>)
• Re: BizMail 2.1 Spam Exploit (Jason Frisvold <xenophage0@...il.com>)
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files (Han Boetes <hanOUTOFOFFICETRAP@...ncomputer.nl>)
• [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities (<chewkeong@...urity.org.sg>)
• IObjectSafety and Internet Explorer (Shane Hird <shanehird@...oo.com>)
• phpBB <= 2.0.12 UID Exploit (federico gonzales <elrengo94@...mail.com>)
• Re: Firefox Software Update (Michael Hampton <error10@...il.com>)
• 427BB profile.php XSS vulnerability. (Raven <raven@...-security.com>)
• [KDE Security Advisory] kppp Privileged fd Leak Vulnerability (Dirk Mueller <dirk@....org>)
• Re: Firefox Software Update (Matt Venzke <mvenzke@...il.com>)
• Re: Firefox Software Update (Beau Henderson <silentbob@...il.com>)
• Software PBLang 4.63 delpm.php authentication vulnerability (Raven <raven@...-security.com>)
• Re: Firefox Software Update (Adam Kane <kane@...kitsoftware.com>)
• Re: Firefox Software Update ("Kurt Seifried" <bt@...fried.org>)
• 427BB profile.php XSS vulnerability. (Raven <raven@...-security.com>)
• Software PBLang 4.63 sendpm.php reply file read vulnerability (Raven <raven@...-security.com>)
• Forumwa search.php xss vulnerability (Raven <raven@...-security.com>)
• Re: [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ] (Maksymilian Arciemowicz <max@...tsuper.pl>)
• iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability ("Michael Sutton" <msutton@...fense.com>)
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ] (Jose Pedro Andres <jpandres@...c.es>)
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files (devnull@...ents.Montreal.QC.CA)
• PHP News <= 1.2.4 - Remote File Inclusion (VXSfx) (Filip Groszynski <groszynskif@...il.com>)
• Re: Firefox Software Update (Rainer Duffner <rainer@...ra-secure.de>)
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files (exon <exon@...e.se>)
• Re: Firefox Software Update (Stan Bubrouski <stan@....neu.edu>)

• Re: Firefox Software Update (Kai Howells <kai@...ketcat.info>)
• [FLSA-2005:2314] Updated XFree86 packages fix security flaws (Dominic Hargreaves <dom@...th.li>)
• [FLSA-2005:2127] Updated CUPS packages fix security vulnerabilities (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• RealOne Player / Real .WAV Heap Overflow File Format Vulnerability ("Mark Litchfield" <mark@...software.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• License Patches Are Now Available To Address Buffer Overflows ("Williams, James K" <James.Williams@...com>)
• [CLA-2005:926] Conectiva Security Announcement - mod_python (Conectiva Updates <secure@...ectiva.com.br>)
• RealOne Player / Real .WAV Heap Overflow File Format Vulnerability ("Mark Litchfield" <mark@...software.com>)
• Foxmail server "USER" command Multiple remote buffer overflow (Xin Ouyang <xouyang@...tinet.com>)
• Vulnerabilities in Aura CMS (echo staff <y3dips@...o.or.id>)
• Re: Firefox Software Update (Gilles DEMARTY <gilles.demarty@...il.com>)
• Golden Ftp server 1.29 Username remote Buffer Overflow (Carlos Ulver <carlos.ulver@...il.com>)
• Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities (Kristof Philipsen <kristof.philipsen@...zen.com>)
• Re: phpBB <= 2.0.12 UID Exploit (Nicob <nicob@...ob.net>)
• iDEFENSE Labs Releases IDA Sync ("iDEFENSE Labs" <labs-no-reply@...fense.com>)

• EEYE: Computer Associates License Manager Remote Vulnerabilities ("Karl Lynn" <klynn@...e.com>)
• [SECURITY BULLETIN] SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access ("Boren, Rich (SSRT)" <rich.boren@...com>)
• OpenSSL <=3D 0.9.6m vulnerability (<cyber_tal0n@...hmail.com>)
• [USN-90-1] Imagemagick vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php (Paisterist <paisterist.nst@...il.com>)
• Re: SHA-1 broken (Pavel Machek <pavel@....cz>)
• Microsoft AntiSpyware Beta and Windows Scripting Host ("Joe Stocker" <joe@...tsecurityconsulting.com>)
• [XSS] paBox 1.6 (Rift <Sean@...e-web.com>)
• [CLA-2005:928] Conectiva Security Announcement - clamav (Conectiva Updates <secure@...ectiva.com.br>)
• TYPO3 SQL Injection vunerabilitie (Fabian Becker <neonomicus@....de>)
• Microsoft Antispyware Beta window docking issue (Jeroen van Rijn <xananda@...il.com>)
• My-forum.org cookies vulnerability - data bug (Black Angel <theblackdemon@...il.com>)
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php ("vzmule" <vzmule@...ever-hack.net>)
• Re: TYPO3 SQL Injection vunerabilitie (Dennis Shewmaker <dshewmaker@...mission.net>)
• Re: Microsoft Antispyware Beta window docking issue ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)

• PHP News <= 1.2.4 - Remote File Inclusion Exploit (mozako <mozako@...ox.it>)
• Re: TYPO3 SQL Injection vunerabilitie (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• RE: TYPO3 SQL Injection vunerabilitie ("GulfTech Security Research" <security@...ftech.org>)
• GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability (Hongzhen Zhou <felix__zhou@...mail.com>)
• Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx) (Filip Groszynski <groszynskif@...il.com>)
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability ("Frank Denis (Jedi/Sector One)" <j@....org>)
• Re: TYPO3 SQL Injection vunerabilitie (Michael Stucki <michael@...o3.org>)
• RE: Microsoft AntiSpyware Beta and Windows Scripting Host ("alex cottle" <eddie5659@...mail.com>)
• Re: TYPO3 3rd party extension (cmw_linklist) SQL Injection vunerability (Michael Shigorin <mike@...n.org.ua>)
• Re: TYPO3 SQL Injection vunerabilitie (Michael Shigorin <mike@...n.org.ua>)
• PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx) (Filip Groszynski <groszynskif@...il.com>)
• Re: TYPO3 SQL Injection vunerabilitie (Karsten Dambekalns <karsten@...o3.org>)
• -==phpBB 2.0.13 Full path disclosure==- (HaCkZaTaN <hck_zatan@...mail.com>)
• Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (Andrey Bayora <andrey@...denbit.org>)

• PaX privilege elevation security bug (pageexec@...email.hu)
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED- (Wesley aka PPC <ppc@...pected.as>)
• LOOKNMEET HTML INJECT EXPLOIT (Wesley aka PPC <ppc@...pected.as>)
• MDKSA-2005:048 - Updated curl packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:049 - Updated gaim packages fix multiple vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:051 - Updated cyrus-imapd packages fix vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:052 - Updated kdegraphics packages fix vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:050 - Updated gftp packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Windows Server 2003 and XP SP2 LAND attack vulnerability (Dejan Levaja <dejan@...aja.com>)
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php (Some one <someone@...nabismail.com>)
• Re: Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 ("Vincent DUVERNET (Nolmë Informatique)" <vincent.duvernet@...me.com>)

• [HAT-SQUAD] new exploit code ("class 101" <class101@...-squad.com>)
• [ GLSA 200503-11 ] ImageMagick: Filename handling vulnerability (Thierry Carrez <koon@...too.org>)
• RE: [ GLSA 200503-12 ] Hashcash: Format stringvulnerability ("Michael Scheidell" <scheidell@...nap.net>)

• [FLSA-2005:1748] Updated subversion packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FLSA-2005:2344] Updated php packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• Real Realplayer 10 .smil local buffer overflow POC (nolimit bugtraq <nolimit.bugtraq@...il.com>)
• [USN-91-1] EXIF library vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [SECURITY] [DSA 691-1] New abuse packages fix local root exploit (joey@...odrom.org (Martin Schulze))
• Remote Command Execution (Francisco Alisson <dominusvis@...ck21.com.br>)
• [ GLSA 200503-11 ] ImageMagick: Filename handling vulnerability (Thierry Carrez <koon@...too.org>)
• [ GLSA 200503-12 ] Hashcash: Format string vulnerability (Thierry Carrez <koon@...too.org>)
• [Hat-Squad] Computer-Associates, License Manager POC Exploit (Hat-Squad Security Team <bugtraq@...-squad.com>)
• CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow ("CIRT Advisory" <advisory@...t.dk>)
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (Trog <trog@...on.org>)
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit (<thephuket@...mac.com>)
• thoughts and a possible solution on homograph attacks (Michael Roitzsch <amalthea@...enet.de>)
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED- (Matthias <admin@...i.de>)
• Gene6 FTP Server Local Privilege Escalation Vulnerability (Sowhat <isowhat@...il.com>)
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability (Hongzhen Zhou <felix__zhou@...mail.com>)
• Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability (Atom Smasher <atom@...sher.org>)
• Remote Testing SocialMPN Remote File Inclusion by y3dips (echo staff <y3dips@...o.or.id>)
• [USN-92-1] LessTif vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• PHP Form Mail Script <= 2.3 arbitrary file inclusion exploit exploit (mozako <mozako@...ox.it>)
• vBulletin Worm - perl.Santy variant (The Prohacker <prohacker@...hostingtalk.com>)
• phpBB 2.0.13 - user level exploit (Some one <someone@...nabismail.com>)
• [ GLSA 200503-14 ] KDE dcopidlng: Insecure temporary file creation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• PHP-FUSION 5.* XSS VULNERABILITY (FireSt0rm <firest0rm.uh@...il.com>)
• drone armies C&C report - Feb/2005 (Gadi Evron <gadi@...ila.gov.il>)
• Re: phpGiftReq SQL Injection (Ryan Walberg <generalpf@...oo.com>)
• See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow (tal zeltzer <tal@...-security.com>)
• - Argeniss - Oracle Database Server Directory transversal (Cesar <cesarc56@...oo.com>)

• [FLSA-2005:2404] Updated less package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [CLA-2005:930] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
• PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx) (Filip Groszynski <groszynskif@...il.com>)
• phpWebLog <= 0.5.3 arbitrary file inclusion (VXSfx) (Filip Groszynski <groszynskif@...il.com>)
• Re: [ GLSA 200503-12 ] Hashcash: Format string vulnerability (Hubert Chan <hubert@...reg.ca>)
• UnixWare 7.1.4 : Samba multiple security issues (please_reply_to_security@....com)
• Hosting Controller Multiple Unauthenticated information disclose (small mouse <small.mouse@...il.com>)
• Re: thoughts and a possible solution on homograph attacks (Michael Silk <michaelslists@...il.com>)
• Re: thoughts and a possible solution on homograph attacks (Kevin Day <toasty@...gondata.com>)
• Re: thoughts and a possible solution on homograph attacks (James Youngman <james+yahoo@...ession.spiral-arm.org>)
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit (comsatcat <comsatcat@...thlink.net>)
• Re: thoughts and a possible solution on homograph attacks (Thomas Wana <thomas@...a.at>)
• UnixWare 7.1.4 : squid updated package fixes several security issues (please_reply_to_security@....com)
• Re: thoughts and a possible solution on homograph attacks (Benjamin Franz <snowhare@...ongo.org>)
• RE: thoughts and a possible solution on homograph attacks ("Scovetta, Michael V" <Michael.Scovetta@...com>)
• iDEFENSE Labs Releases IDA RPC Enumerator ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• Re: Gene6 FTP Server Local Privilege Escalation Vulnerability (Matthieu <gene6@...e6.com>)
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit (comsatcat <comsatcat@...thlink.net>)
• [USN-93-1] Squid vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Multiple vulnerabilities in paFileDB ("SecurityReason" <sp3x@...urityreason.com>)
• Re: Remote Command Execution (BoI base <postbase@...l.ru>)
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability ("Walton, John Michael (John)" <jmwalton@...ya.com>)
• [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation (pokley <pokleyzz@...n-associates.net>)
• Re: thoughts and a possible solution on homograph attacks ("Dmitry Yu. Bolkhovityanov" <D.Yu.Bolkhovityanov@....nsk.su>)
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability (Atom Smasher <atom@...sher.org>)
• Re: thoughts and a possible solution on homograph attacks ("Dmitry Yu. Bolkhovityanov" <D.Yu.Bolkhovityanov@....nsk.su>)
• Re: Remote Command Execution (BoI base <postbase@...l.ru>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability ("Patrick Chipman" <pchipman@...phis.edu>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability (<paul14075@...lphia.net>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability (Espen "Grndahl" <espen.groendahl@...mens.com>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability ("Miroslav Kubik" <kubik_miroslav@...nam.cz>)
• Re: thoughts and a possible solution on homograph attacks (Denis Jedig <seclists@...eticon.de>)
• Re: thoughts and a possible solution on homograph attacks (Michael Roitzsch <amalthea@...enet.de>)
• Re: thoughts and a possible solution on homograph attacks ("Mike Nice" <niceman@....net>)
• [CLA-2005:931] Conectiva Security Announcement - squid (Conectiva Updates <secure@...ectiva.com.br>)
• Multiple vulnerabilities in paFileDB (<sp3x@...urityreason.com>)
• ArGoSoft FTP Server 1.4.2.8 Buffer Overflow ("CorryL" <corryl@...overde.com>)
• failles dans ProjectBB v0.4.5.1 (benji@....securityfocus.com, [hacktinium]@securityfocus.com@....securityfocus.com <benjilenoob@...mail.com>)
• [SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak (joey@...odrom.org (Martin Schulze))
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability (<caldcv@...dents.fccj.org>)
• Re: houghts and a possible solution on homograph attacks (Sven Putteneers <svennieboy@...ux.be>)
• Multiples Vulnerabilities (Francisco Alisson <dominusvis@...ck21.com.br>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability ("killer_loop@...l.com" <lammat@...ower.ath.cx>)
• Ethereal remote buffer overflow (LSS Security <exposed@....hr>)
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (Andrey Bayora <andrey@...denbit.org>)

• PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.) (Altrus Wollesen <root@...our.ca>)
• linux break in challenge (Joel Jose <joeljose420@...il.com>)
• [USN-94-1] Perl vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• RE: Ethereal remote buffer overflow - addon (LSS Security <exposed@....hr>)
• Re: Ethereal remote buffer overflow (Gerald Combs <gerald@...ereal.com>)
• Re: Ethereal remote buffer overflow (Diego Giagio <dgiagio@...on.com.br>)
• [Security Bulletin] SSRT4891 rev.0 HP Tru64 UNIX message queue local denial of service (DoS) ("Boren, Rich (SSRT)" <rich.boren@...com>)

• Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability ("Marc Maiffret" <mmaiffret@...e.com>)
• [Updated][FLSA-2005:2344] Updated php packages fix security issues (fedora-legacy-announce@...hat.com)
• Multiple Vulnerabilities of PY Software Active Webcam WebServer ("Sowhat ." <smaillist@...il.com>)
• RE: [USN-94-1] Perl vulnerability ("secalert" <secalert@...tt.nyc.gov>)
• Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (Bipin Gautam <visitbipin@...mail.com>)
• XCode 1.5 and distcc 2.x Exploit (Ray Slakinski <ray@...1.net>)
• iDEFENSE Security Advisory 03.10.05: Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)

• Wfsection 1.07 vulnerabilities (kreon <kre0n@...l.ru>)
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability ("Detection Services - IS Security" <secdet@....com>)
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• iDownload/iSearch responds to Spyware Critics (Paul Laudanski <zx@...tlecops.com>)
• Re: houghts and a possible solution on homograph attacks (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability (Atom Smasher <atom@...sher.org>)
• UBB.threads 6 SQL Injection (<kre0n@...l.ru>)
• Security Masters Dojo (Dragos Ruiu <dr@....net>)
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability (Ryan Cummings <ryan.r.cummings@...il.com>)
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability (Atom Smasher <atom@...sher.org>)
• [SECURITYREASON.COM][phpBB 2.0.13 SQL error in session cXIb8O3.8] (Maksymilian Arciemowicz <max@...tsuper.pl>)
• Re: iDownload/iSearch responds to Spyware Critics (bkfsec <bkfsec@....lonestar.org>)
• Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (<secure@...antec.com>)
• [Fwd: Re: Web security breach changes the lives of 119 people] (Jason Coombs <jasonc@...ence.org>)

• [ GLSA 200503-15 ] X.org: libXpm vulnerability (Matthias Geerdsen <vorlon@...too.org>)
• Re: [Private]Multiple AV Vendor IncorrectCRC32BypassVulnerability. (bipin gautam <visitbipin@...oo.com>)
• [SECURITYREASON.COM] SQL injection and XSS in paFileDB (SecurityReason <sp3x@...urityreason.com>)
• [badroot.org] The Includer remote commands execution exploit (Federico Ozak <mozako@...ox.it>)
• PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities (Igor Franchuk <sprog@...ine.ru>)
• [badroot.org] The Includer remote commands execution exploit (mozako <mozako@...ox.it>)
• Mysql CREATE FUNCTION mysql.func table arbitrary library injection (Stefano Di Paola <stefano.dipaola@...ec.it>)
• [ GLSA 200503-17 ] libexif: Buffer overflow vulnerability (Luke Macken <lewk@...too.org>)
• Re: Thoughts and a possible solution on homograph attacks (Paul Smith <paullocal@...s.co.uk>)
• summercon looking for speakers (louis <trumpbour@...il.com>)
• Mysql CREATE FUNCTION libc arbitrary code execution. (Stefano Di Paola <stefano.dipaola@...ec.it>)
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability ("Daniel Cross" <dcross@...sh.co.nz>)
• PlatinumFTP 1.0.18 remote DoS (ports <ml@...tsonline.net>)
• [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB (SecurityReason <sp3x@...urityreason.com>)
• Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access (Virginity Security <advisory05@...fiweb.de>)
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability (Miguel Angel Rodríguez Jódar <rodriguj@....us.es>)
• aeNovo Database Content Disclosure Vulnerability (farhad koosha <farhadkey@...oo.com>)
• KnowledgeBase (Francisco Alisson <dominusvis@...ck21.com.br>)
• Av issues (Bipin Gautam <visitbipin@...mail.com>)
• Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1 (Linux php <wassemgtk@...il.com>)
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability (exon <exon@...e.se>)
• Ethereal remote buffer overflow #2 (LSS Security <exposed@....hr>)

• 3 XSS Vulnerabilities in Phorum <= 5.0.14 (Jon Oberheide <jonojono@...ch.edu>)
• Re: iDownload/iSearch responds to Spyware Critics (King Fuddler <darkiye@...il.com>)

• Re: Re: iDownload/iSearch responds to Spyware Critics (Valdis.Kletnieks@...edu)
• Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and … ("Dr. Peter Bieringer" <pbieringer@...as…)
• [SECURITY] [DSA 662-2] New squirrelmail package fixes regression (joey@...odrom.org (Martin Schulze))
• [CLA-2005:933] Conectiva Security Announcement - gaim (Conectiva Updates <secure@...ectiva.com.br>)
• SUSE Security Announcement: openslp (SUSE-SA:2005:015) (krahmer@...e.de (Sebastian Krahmer))
• [HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit ("class 101" <class101@...-squad.com>)
• [SECURITY] [DSA 693-1] New luxman packages fix local root exploit (joey@...odrom.org (Martin Schulze))
• LimeWire Gnutella client two vulnerabilities (Kevin Walsh <kwalsh@...cornell.edu>)
• New Version of WinBlox is Available (Liu Die Yu <liudieyu@...rella.name>)
• [ZH2005-02SA] Insecure tmp file creation in Wine (Giovanni Delvecchio <badpenguin79@...mail.com>)
• Master RPC program number data base (/etc/rpc) (Eilon Gishri <eilon@...sto.tau.ac.il>)
• SimpGB SQL Injection Vulnerability (Alexander Müller <visus@...tsonline.net>)
• [XSS] paBox 2.0 (Rift <Sean@...e-web.com>)
• ...::: hotforum.nl XSS exploit :::... (Rebyte Security <rebyte@...la.com>)
• Re: Re: iDownload/iSearch responds to Spyware Critics (bkfsec <bkfsec@....lonestar.org>)
• Ethereal 0.10.9 and below remote root exploit (Diego Giagio <dgiagio@...on.com.br>)
• Not SQL injection and XSS in paFileDB? (saudi linux <ksa2ksa@...oo.com>)
• [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 (Maksymilian Arciemowicz <max@...tsuper.pl>)
• YaBB2 rc1 XSS (alireza hassani <trueend5@...oo.com>)
• "Drop to STARTUP Folder II" published on 2005/02/08 (Liu Die Yu <liudieyu@...rella.name>)
• DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow' (Kevin Finisterre <kf@...italmunition.com>)
• iDEFENSE Security Advisory 03.14.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• RE: Av issues ("David Webster" <dwebster@...tig.com>)
• html code include in phpnuke news crash IE 6 (WoRmZ Web <wormz.web@...il.com>)
• PlantinumFTP server <= 1.0.18 Remote DOS exploit (Exoduks <exoduks@...il.com>)

• phpbb cookie admin access (pureone <pureone36@...il.com>)
• phpbb <= 2.0.12 uid vuln + admin_styles.php php code injection exploit (bad boy <slythers@...il.com>)
• Re: html code include in phpnuke news crash IE 6 ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
• Re: Av issues (Thierry Zoller <Thierry@...ff-em.com>)
• [USN-95-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [ GLSA 200503-18 ] Ringtone Tools: Buffer overflow vulnerability (Luke Macken <lewk@...too.org>)
• UPDATE: [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities (Thierry Carrez <koon@...too.org>)
• SAV9 Functionality Hole - misses virus files (<me3@...ralfibre.com>)
• Re: PlantinumFTP server <= 1.0.18 Remote DOS exploit ("Gary H. Jones II" <gary@...ntblanksecurity.com>)
• Few remote bugs in zPanel (Mik- <misha@....no>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (bipin gautam <visitbipin@...oo.com>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (bipin gautam <visitbipin@...oo.com>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… ("Dr. Peter Bieringer" <pbieringer@...as…)
• RE: Unfiltered escape sequences in filenamescontained in ZIP archives wouldn't be escaped on displaying orlogging, and… ("Debasis Mohanty" <mail@...kingspirits.…)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (Rodrigo Barbosa <rodrigob@...spammers.o…)
• Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access (Virginity Security <advisory05@...fiweb.de>)
• [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability ("Francisco Amato" <famato@...obyte.com.ar>)
• [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability ("Francisco Amato" <famato@...obyte.com.ar>)
• [ISR] Insecure communication and Reproduce the Session authentication ("Francisco Amato" <famato@...obyte.com.ar>)
• Re: SAV9 Functionality Hole - misses virus files (Harry Hoffman <hhoffman@...solutions.net>)
• GoodTech Telnet Server Buffer Overflow Vulnerability (Komrade <unsecure@...ervista.org>)
• Denial of Service Vulnerability in MySQL Server for Windows (Luca Ercoli <io@...aercoli.it>)
• Re: Av issues (Yves Belle-Isle <BelY@...i.com>)
• [ISR] - Novell iChain Mini FTP Server Bruteforce Problem ("Francisco Amato" <famato@...obyte.com.ar>)
• RE: SAV9 Functionality Hole - misses virus files ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
• Re: SAV9 Functionality Hole - misses virus files (Ben Blakely <blakely@...llinst.org>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, … ("Dr. Peter Bieringer" <pbieringer@...as…)
• Re: Thoughts and a possible solution on homograph attacks (Riccardo Murri <murri@...m.uniroma1.it>)
• Re: Av issues (Thierry Zoller <Thierry@...ff-em.com>)
• RE: SAV9 Functionality Hole - misses virus files (Dewyngaert Brian Contr ANG/C4 <Brian.Dewyngaert@....af.mil>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and … (Thierry Zoller <Thierry@...ff-em.com>)

• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can … (Nigel Horne <njh@...dsman.co.uk>)
• Re: Thoughts and a possible solution on homograph attacks (Valdis.Kletnieks@...edu)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… ("Michael J. Pomraning" <mjp-bugtraq@sec…)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (Rodrigo Barbosa <rodrigob@...spammers.o…)
• [USN-96-1] mySQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, … ("Dr. Peter Bieringer" <pbieringer@...as…)
• [USN-97-1] libxpm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Re: Av issues (bipin gautam <visitbipin@...oo.com>)
• ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability (Piotr Bania <bania.piotr@...il.com>)
• RE: Re: Av issues ("Sean Crawford" <sean01@...net.com.au>)
• [ GLSA 200503-19 ] MySQL: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200503-20 ] curl: NTLM response buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• MDKSA-2005:053 - Updated ethereal packages fix multiple vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:054 - Updated cyrus-sasl packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MDKSA-2005:055 - Updated openslp packages fix multiple vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Multiple KDE Security Advisories (2005-03-16) (Waldo Bastian <bastian@....org>)
• PlatinumFTPserver format string vulnerability ( IHSTeam ) (c0d3r@...team.com)
• MDKSA-2005:056 - Updated koffice packages fix vulnerabilities on 64 bit platforms (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Re: Thoughts and a possible solution on homograph attacks (Riccardo Murri <riccardo.murri@...p.it>)
• MDKSA-2005:057 - Updated gnupg packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• SUSE Security Announcement: multiple Mozilla Firefox vulnerabilities (SUSE-SA:2005:016) (Marcus Meissner <meissner@...e.de>)
• Re: Thoughts and a possible solution on homograph attacks (khockenb <khockenb@...vens.edu>)
• [CLA-2005:934] Conectiva Security Announcement - kdenetwork (Conectiva Updates <secure@...ectiva.com.br>)
• SAV9 Functionality Hole - misses virus files (<secure@...antec.com>)
• ASPjar Tell-a-Friend (farhad koosha <farhadkey@...oo.com>)
• Servers Alive: Local Privilege Escalation (Michael Starks <secure@...haelstarks.com>)
• RE: SAV9 Functionality Hole - misses virus files (<batchelornpe@...tschool.org.uk>)
• RE: Denial of Service Vulnerability in MySQL Server for Windows ("BugTrap" <bugtrap@...erCept.Net>)

• Re: GoodTech Telnet Server Buffer Overflow Vulnerability [EXPLOIT] (<cybertronic@....net>)
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (Tomasz Papszun <tomek-bug@...z.tpsa.pl>)
• LLSSRV Clarifications <Immunity> (Dave Aitel <dave@...unitysec.com>)
• MDKSA-2005:059 - Updated evolution packages fix crasher (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• [ GLSA 200503-21 ] Grip: CDDB response overflow (Luke Macken <lewk@...too.org>)
• [USN-98-1] OpenSLP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• See-security Advisory: Format string vulnerability in MailEnable 1.8 (a a <tal@...-security.com>)
• [CLA-2005:937] Conectiva Security Announcement - cyrus-imapd (Conectiva Updates <secure@...ectiva.com.br>)
• Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability (Hongzhen Zhou <felix__zhou@...mail.com>)
• XSS in ACS blog (farhad koosha <farhadkey@...oo.com>)
• PHP mcNews arbitrary file inclusion (Jonathan Whiteley <jon.whiteley@...il.com>)
• MDKSA-2005:058 - Updated kdelibs packages fix multiple vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Re: PlatinumFTPserver format string vulnerability ( IHSTeam ) ("Gary H. Jones II" <gary@...ntblanksecurity.com>)
• Another includer.cgi problem? (<cout@...erspace.org>)
• LLSSRV Redux (Dave Aitel <dave@...unitysec.com>)
• Kevin Walsh: LimeWire Gnutella client two vulnerabilities (Ill will <xillwillx@...il.com>)

• Linux ISO9660 handling flaws (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Social Engineering: You Have Been A Victim (Paul Laudanski <zx@...tlecops.com>)
• Re: Windows Security Checklists - 10 Parts (Paul Laudanski <zx@...tlecops.com>)
• Re: Social Engineering: You Have Been A Victim (Ron DuFresne <dufresne@...ternet.com>)
• Cain & Abel PSK Sniffer Heap overflow ("Gary O'leary-Steele" <garyo@...-1.com>)
• Security Contact at RSA? ("Gary O'leary-Steele" <garyo@...-1.com>)
• [USN-99-1] PHP4 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability (PersianHacker Team <pi3ch@...oo.com>)
• myPHP Forum v1, 2 & 3 (Terencentanio Enache <terencentanio@...t32.com>)
• possible SQL injection in Subdreamer (GHC team <foster@....ru>)
• Re: Linux ISO9660 handling flaws (Dan Yefimov <dan@...htwave.net.ru>)
• Re: SAV9 Functionality Hole - misses virus files (<patrickwm71@...oo.com>)
• Re: Social Engineering: You Have Been A Victim (Paul Laudanski <zx@...tlecops.com>)
• Re: Social Engineering: You Have Been A Victim (Paul Laudanski <zx@...tlecops.com>)
• Truth, Justice and the Ordinary Person (Paul Laudanski <zx@...tlecops.com>)
• Re: Social Engineering: You Have Been A Victim ("Jay D. Dyson" <jdyson@...achery.net>)
• Re: Social Engineering: You Have Been A Victim (Tomas Piling <piling@...t.tuke.sk>)
• runcms installation path ("Majid NT" <NT@...team.com>)
• runcms highlight.php hole ("Majid NT" <NT@...team.com>)
• PHP-Post Exploit (Terencentanio Enache <terencentanio@...t32.com>)
• Java Web Start argument injection vulnerability (Jouko Pynnonen <jouko@....fi>)
• Re: Truth, Justice and the Ordinary Person (Valdis.Kletnieks@...edu)
• [phpbb <= 2.0.13 full path disclosure & directory listing] (JoCaNoR SeCuRiTy TeaM <jocanor@...il.com>)
• Re: Truth, Justice and the Ordinary Person (Paul Laudanski <zx@...tlecops.com>)
• Re: SAV9 Functionality Hole - misses virus files (<secure@...antec.com>)
• Re: Social Engineering: You Have Been A Victim (bkfsec <bkfsec@....lonestar.org>)
• IceCast up to v2.20 multiple vulnerabilities (Patrick <patrickthomassen@...il.com>)

• RE: [phpbb <= 2.0.13 full path disclosure & directory listing] ("Paul S. Owen" <paul0x01@...rstreak.net>)
• [ GLSA 200503-22 ] KDE: Local Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Ciamos Installation path(IHS) ("Majid NT" <NT@...team.com>)
• Ciamos Highlight.php Security Hole(IHS) ("Majid NT" <NT@...team.com>)
• [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability (PersianHacker Team <pi3ch@...oo.com>)
• OllyDbg long process Module debug Vulnerability (ATmaCA ATmaCA <atmaca@...acasoft.com>)

• RE: Re: Social Engineering: You Have Been A Victim ("Allan" <fulldisclosure@...eraxe.demon.nl>)
• [ GLSA 200503-23 ] rxvt-unicode: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200503-24 ] LTris: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows (Thierry Carrez <koon@...too.org>)

• [ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow (Luke Macken <lewk@...too.org>)
• [ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off (Eitan Caspi <eitancaspi@...oo.com>)
• Re: Few remote bugs in zPanel (Kris Anderson <kanderson@...-way.com>)
• -==CoolForum Path Disclosure & Possible SQL Injection==- (HaCkZaTaN <hck_zatan@...mail.com>)
• [CLA-2005:940] Conectiva Security Announcement - curl (Conectiva Updates <secure@...ectiva.com.br>)
• 2 vulnerabilities in BetaParticle (farhad koosha <farhadkey@...oo.com>)
• TSL-2005-0009 - multi (Trustix Security Advisor <tsl@...stix.org>)
• [SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability ("Sheldon King" <sheldon@...eblitz.com>)
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability ("Sheldon King" <sheldon@...eblitz.com>)
• -==PVDasm Long Name Debug Vulnerability==- (HaCkZaTaN <hck_zatan@...mail.com>)
• Re: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability (Sheldon King <sheldon@...eblitz.com>)
• phpMyFamily 1.4.0 SQL vulnerabilities (kreon <kre0n@...l.ru>)
• Re: Thoughts and a possible solution on homograph attacks (Duncan Simpson <dps@...pson.demon.co.uk>)
• Details of Sybase ASE bugs withheld ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• phpMyFamily 1.4.0 SQL vulnerabilities (<kre0n@...l.ru>)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld ("Halvar Flake" <HalVar@....de>)
• New Whitepaper: Anti Brute Force Resource Metering ("Gunter Ollmann (NGS)" <gunter@...software.com>)
• iDEFENSE Security Advisory 03.21.05: Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability ("iDefense Customer Service" <customerservice@...fense.com>)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld ("David Litchfield" <davidl@...software.com>)
• Re: [ISN] How To Save The Internet (Jason Coombs <jasonc@...ence.org>)

• Re: [VulnWatch] Details of Sybase ASE bugs withheld (sean <infamous41md@...pop.com>)
• SecurityForest Exploitation Framework Beta has been released! (Alon Swartz <loni@...urityforest.com>)
• Re: [ISN] How To Save The Internet (Keith Oxenrider <koxenrider@...-biotech.com>)
• Re: [ISN] How To Save The Internet (Scott Berinato <sberinato@....com>)
• Re: [ISN] How To Save The Internet (Scott Berinato <sberinato@....com>)
• Re: [ISN] How To Save The Internet (Scott Berinato <sberinato@....com>)
• CISSP Test (Vladamir <wireless.insecurity@...il.com>)
• RE: CISSP Test ("Forbes, Robert R" <Robert_Forbes@...rey.com>)
• RE: CISSP Test ("Wade Woolwine" <wade@...odd.com>)
• Re: CISSP Test (Vladamir <wireless.insecurity@...il.com>)
• Re: CISSP Test (David Chastain <dlcmacosx@....com>)
• Re: Thoughts and a possible solution on homograph attacks (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• RE: [ISN] How To Save The Internet ("David Gillett" <gillettdavid@...a.edu>)
• MDKSA-2005:060 - Updated MySQL packages fix multiple vulnerabilities (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Kayako eSupport Cross Site Scripting ("GulfTech Security Research" <security@...ftech.org>)
• Mac OSX[CF_CHARSET_PATH]: local root exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
• RE: CISSP Test ("Forbes, Robert R" <Robert_Forbes@...rey.com>)
• RUXCON 2005 Call for Papers (cfp@...con.org.au (RUXCON Call for Papers))
• Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off (BoneMachine <bonemach@....lonestar.org>)
• [SECURITY] [DSA 696-1] New perl packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
• Re: CISSP Test (robert@...dsecurity.com)
• Nortel VPN Client Issue: Clear-text password stored in memory (Roy Hills <Roy.Hills@...-monitor.com>)
• Possible windows+python bug (<liquid@...erspace.org>)
• RE: CISSP Test (David Chastain <dlcmacosx@....com>)
• [ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability (Alexander Anisimov <anisimov@...ecurity.com>)
• Re: Re: CISSP Test (Andre Ludwig <andre.ludwig@...il.com>)
• Re: New Whitepaper: Anti Brute Force Resource Metering ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
• Black Hat Briefings & Trainings: Registration now open! (Jeff Moss <jmoss@...ckhat.com>)
• RE: Re: CISSP Test ("Forbes, Robert R" <Robert_Forbes@...rey.com>)
• osCommerce File Manager Directory Traversal Vulnerability (Megasky <magasky@...mail.com>)
• RE: [VulnWatch] Details of Sybase ASE bugs withheld ("Marchand, Tom" <Tom.Marchand@...sfl.com>)
• RE: [ISN] How To Save The Internet ("Marchand, Tom" <Tom.Marchand@...sfl.com>)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld (sean <infamous41md@...pop.com>)
• RE: [VulnWatch] Details of Sybase ASE bugs withheld (Chris Wysopal <weld@...nwatch.org>)
• Re: Possible windows+python bug (Neil Schemenauer <nas-bugtraq@...trix.com>)
• RE: [VulnWatch] Details of Sybase ASE bugs withheld ("Marchand, Tom" <Tom.Marchand@...sfl.com>)
• Re: [ISN] How To Save The Internet ("Jason Coombs" <jasonc@...ence.org>)
• root-equivalent groups (psz@...hs.usyd.edu.au)
• Re: Possible windows+python bug (azurIt <azurit@...ox.sk>)

• Re: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off (Eitan Caspi <eitancaspi@...oo.com>)
• Security Development Lifecycle Whitepaper Available ("Michael Howard" <mikehow@...rosoft.com>)
• Re: Details of Sybase ASE bugs withheld (Simple Nomad <thegnome@...c.org>)
• Re: New Whitepaper: Anti Brute Force Resource Metering ("Peter J. Holzer" <hjp@....ac.at>)
• RE: [VulnWatch] Details of Sybase ASE bugs withheld ("http-equiv@...ite.com " <1@...ware.com>)
• Re: Possible windows+python bug (<liquid@...erspace.org>)
• RE: [ISN] How To Save The Internet (Arndt.WA@...ces.gc.ca)
• Notacon: Apr. 8-10, 2005 in Cleveland, OH ("Froggy" <froggy@...acon.org>)
• Re: New Whitepaper: Anti Brute Force Resource Metering (Gunter Ollmann <gunter@...software.com>)
• Re: Details of Sybase ASE bugs withheld (Jay Libove <libove@...ines.org>)
• Re: [ISN] How To Save The Internet ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Interspire ArticleLive 2005 (php version) is vulnerable to XSS (mircia mircia <mircia@...urity.talte.net>)
• Re: osCommerce File Manager Directory Traversal Vulnerability (Aikanáro Calaelen <aikanaro.calaelen@...il.com>)
• Vortex Portal (Francisco Alisson <dominusvis@...ck21.com.br>)
• RE: Possible windows+python bug ("Peter Oswald" <peteoswald@...cast.net>)
• [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities (<chewkeong@...urity.org.sg>)
• RE: Java Web Start argument injection vulnerability ("James C Slora Jr" <Jim.Slora@...a.com>)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld ("Peter J. Holzer" <hjp@....ac.at>)
• [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11 (Maksymilian Arciemowicz <max@...tsuper.pl>)
• Re: [ISN] How To Save The Internet (Ben Vaisvil <benv@...igntoscano.com>)
• Backdoors in AS/400 emulations allow the server to attack connected PC workstations ("Shalom Carmel" <shalom@...era.com>)
• RE: RE: [ISN] How To Save The Internet (<Glenn_Everhart@...kone.com>)
• SUSE Security Announcement: ImageMagick problems (SUSE-SA:2005:017) (Marcus Meissner <meissner@...e.de>)
• Re: Possible windows+python bug (Kinnell <kinnell.t@...il.com>)
• RE: [ISN] How To Save The Internet (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
• Re: [ISN] How To Save The Internet ("Jason Coombs" <jasonc@...ence.org>)
• RE: Details of Sybase ASE bugs withheld ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• Re: [ISN] How To Save The Internet (Derek Martin <code@...zashack.org>)
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off ("Scrimsher, John P" <john.scrimsher@...com>)

• Re: [ISN] How To Save The Internet (Devdas Bhagat <devdas@....homelinux.org>)
• [USN-99-2] Fixed php4 packages for USN-99-1 (Martin Pitt <martin.pitt@...onical.com>)
• [USN-100-1] cdrecord vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB ("Alberto Trivero" <trivero@...py.it>)
• Black Hat Briefings & Trainings: Registration now open! (Jeff Moss <jmoss@...ckhat.com>)
• Oracle Reports Server 10g Vulnerable to XSS (Paolo Paolo <paolo.paolo@...l.ee>)
• Hashcash in mail (was: New Whitepaper: Anti Brute Force Resource Metering) ("Peter J. Holzer" <hjp@....ac.at>)
• Firescrolling 2 [Firefox 1.0.1] ("mikx" <mikx@...x.de>)
• o2 Germany promotes SMS-Phishing (pentest@...ail.informatik.rwth-aachen.de)
• SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:018) (Marcus Meissner <meissner@...e.de>)
• SUSE Security Announcement: MySQL vulnerabilities (SUSE-SA:2005:019) (Marcus Meissner <meissner@...e.de>)
• Which anti-spyware cleaner is the best? (Paul Laudanski <zx@...tlecops.com>)
• [ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability (Thierry Carrez <koon@...too.org>)
• [ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack (Thierry Carrez <koon@...too.org>)
• Re: New Whitepaper: Anti Brute Force Resource Metering (Jason W <bugtraq@...mhighalumni.com>)

• [FLSA-2005:2155] Updated sharutils package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FLSA-2005:2129] Updated mysql packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FLSA-2005:2268] Updated spamassassin package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• Re: Firescrolling 2 [Firefox 1.0.1] (John Madden <maddenj@...net.ie>)
• Secure Science issues preview of their upcoming block cipher (BugTraq <bugtraq@...urescience.net>)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld (shadown <shadown@...il.com>)
• LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1 (Matt Hargett <matt.hargett@...iclibrary.com>)
• Re: [lists] Which anti-spyware cleaner is the best? (Paul Laudanski <zx@...tlecops.com>)
• Re: [lists] Which anti-spyware cleaner is the best? (Elliott Bäck <ecb29@...nell.edu>)
• Re: o2 Germany promotes SMS-Phishing ("Ádám Szilveszter dr." <adam@....hu>)
• [ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• [ GLSA 200503-31 ] Mozilla Firefox: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• [ GLSA 200503-32 ] Mozilla Thunderbird: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• Re: Secure Science issues preview of their upcoming block cipher (Adam Shostack <adam@...eport.org>)
• Re: Secure Science issues preview of their upcoming block cipher (Lance James <lancej@...urescience.net>)
• Security Flaw with Digital signatures in Microsoft Outlook (Roberto Franceschetti <roberto@...sat.com>)
• Re: New Whitepaper: Anti Brute Force Resource Metering (Joachim Schipper <j.schipper@...h.uu.nl>)
• RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit (rexolab <research@...otec.com>)
• phpMyDirectory 10.1.3-rel Cross site scripting (mircia mircia <mircia@...urity.talte.net>)
• Re: Secure Science issues preview of their upcoming block cipher (Jerrold Leichter <jerrold.leichter@...rts.com>)
• Re: New Whitepaper: Anti Brute Force Resource Metering ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
• smail remote and local root holes (sean <infamous41md@...pop.com>)
• Netcomm 1300NB DSL Modem Denial of Service (Chris Rock <chris@...todian.com>)
• Re: Secure Science issues preview of their upcoming block cipher (David Covin <dcovin@....mgh.harvard.edu>)
• RE: Security Flaw with Digital signatures in Microsoft Outlook ("Adrian Floarea" <adrian.floarea@....ro>)
• Re: Security Flaw with Digital signatures in Microsoft Outlook (Erwann ABALEA <erwann.abalea@...tplus.com>)
• Re: Secure Science issues preview of their upcoming block cipher (Ralf-Philipp Weinmann <weinmann@....informatik.tu-darmstadt.de>)
• Re: Secure Science issues preview of their upcoming block cipher ("Jerrold Leichter" <jerrold.leichter@...rts.com>)
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues (Ventsislav Genchev <vigour@...antis.bg>)
• [ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service (Matthias Geerdsen <vorlon@...too.org>)
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues (Ventsislav Genchev <vigour@...antis.bg>)
• TCP timestamp & advanced fingerprinting (Erwan Arzur <erwan@....epita.fr>)
• phpbb 2.0.13 Exploit (bug) ("tOnk3r" <m@...wire.net>)

• ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 (Gerardo Astharot Di Giacomo <astharot@...e-h.org>)
• Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 (Paul Laudanski <zx@...tlecops.com>)
• AS/400 LDAP user accounts disclosure ("Shalom Carmel" <shalom@...era.com>)
• QuickTime malformed JPEG buffer overflow (<liquid@...erspace.org>)
• RE: Security Flaw with Digital signatures in Microsoft Outlook ("Lyal Collins" <lyal.collins@...2it.com.au>)
• Re: New Whitepaper: Anti Brute Force Resource Metering (Luca Berra <bluca@...edia.it>)
• File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition (<dcrab@...kerscenter.com>)
• Re: Security Flaw with Digital signatures in Microsoft Outlook ("Anthony G. Atkielski" <anthony@...ielski.com>)
• Re: Secure Science issues preview of their upcoming block cipher (devnull@...ents.Montreal.QC.CA)
• Re: smail remote and local root holes (no, not really ;-) ("Greg A. Woods" <woods-smail@...nix.com>)
• RE: TCP timestamp & advanced fingerprinting ("Bruce Klein" <bruce.klein@...ation.com>)
• Brute-Force scanning the entire 32-bit IP space using Javascript. (<cyber_flash@...mail.com>)
• Re: smail remote and local root holes (no, really ;-) (sean <infamous41md@...pop.com>)

• local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 (advisories <advisories@...esec.org>)

• [ GLSA 200503-34 ] mpg321: Format string vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [USN-101-1] telnet vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• FreeBSD Security Advisory FreeBSD-SA-05:01.telnet (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Re: Secure Science issues preview of their upcoming block cipher ("Ralf-Philipp Weinmann" <weinmann@....informatik.tu-darmstadt.de>)
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• [VulnWatch] Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6[Scanned] ("Paul Laudanski" <zx@...tlecops.com>)
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• [CLA-2005:942] Conectiva Security Announcement - ethereal (Conectiva Updates <secure@...ectiva.com.br>)
• Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others) (Luigi Auriemma <aluigi@...istici.org>)
• Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0 (<dcrab@...kerscenter.com>)
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. (<dcrab@...kerscenter.com>)
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS) (<dcrab@...kerscenter.com>)
• Re: smail remote and local root holes (really, it is exploitable) (sean <infamous41md@...pop.com>)

• Multiple XSS vulnerabilities in ACS Blog (Dan Crowley <dan.crowley@...il.com>)
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software (<dcrab@...kerscenter.com>)
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability (Solar Designer <solar@...nwall.com>)
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off (Eitan Caspi <eitancaspi@...oo.com>)
• Multiple XSS issues in Sun AnswerBook2 (B00B00 <ptt@...nternet.com>)
• phishing sites report - March/2005 (Gadi Evron <gadi@...ila.gov.il>)
• [USN-102-1] shar vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability (Tavis Ormandy <taviso@...too.org>)
• DoS of LAN via D-Link switches ("Frank Bures" <lisfrank@...m.toronto.edu>)
• Re: phishing sites report - March/2005 (Gadi Evron <gadi@...ila.gov.il>)
• [SECURITY] [DSA 698-1] New mc packages fix buffer overflow (joey@...odrom.org (Martin Schulze))
• Re: phishing sites report - March/2005 (Paul Laudanski <zx@...tlecops.com>)
• THai's Shoutbox XSS (Spoofing URL) BUG ("CorryL" <corryl@...overde.com>)
• [SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Multiple sql injection, and xss vulnerabilities in AspApp (<dcrab@...kerscenter.com>)
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS) (<dcrab@...kerscenter.com>)
• MITKRB5-SA-2005-001: buffer overflows in telnet client (Tom Yu <tlyu@....EDU>)
• RE: DoS of LAN via D-Link switches ("David Gillett" <gillettdavid@...a.edu>)
• Re: TCP timestamp & advanced fingerprinting (Erwan Arzur <erwan@....epita.fr>)
• directory traversal in FastStone 4in1 Browser 1.2 ("Donato Ferrante" <fdonato@...istici.org>)
• Invision Power Board v2.0.3 XSS vulnerabilities (hoang yen <vnwebmasters@...oo.com>)
• Multiple sql injection, and xss vulnerabilities in PortalApp (<dcrab@...kerscenter.com>)
• Code insertion in Blogger comments (Antone Roundy <antone@...kotribe.com>)

• [SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability (=?ISO-8859-1?Q? "Ga=EBl?= Delalleau" <gael.delal…)
• Re: Security Flaw with Digital signatures in Microsoft Outlook (<dori@...can.co.il>)
• [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities (PersianHacker Team <pi3ch@...oo.com>)
• Hacked: Who Else Is Using Your Computer? (Paul Laudanski <zx@...tlecops.com>)
• RE: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. ("GulfTech Security Research" <security@...ftech.or…)
• Code insertion in Blogger comments (Antone Roundy <antone@...kotribe.com>)
• abuse & security issues > Israel (Gadi Evron <gadi@...ila.gov.il>)
• Multiple XSS vulnerabilities in ACS Blog (Dan Crowley <dan.crowley@...il.com>)
• Re: DoS of LAN via D-Link switches ("Tarmo Mamers" <tarmo@...ox.com>)
• Multiple phpCoin Vulnerabilities ("GulfTech Security Research" <security@...ftech.org>)
• [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior Multiple Vulnerbilities (PersianHacker Team <pi3ch@...oo.com>)
• Portcullis Security Advisory 05-011 ACPI 1.6 BIOS ("Paul J Docherty" <PJD@...tcullis-security.com>)
• [ GLSA 200503-35 ] Smarty: Template vulnerability (Thierry Carrez <koon@...too.org>)
• [gentoo-announce] [ GLSA 200503-35 ] Smarty: Template vulnerability ("Thierry Carrez" <koon@...too.org>)
• MDKSA-2005:061 - Updated krb5 packages fix telnet client vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS ("Paul J Docherty" <PJD@...tcullis-security.com>)
• Re: DoS of LAN via D-Link switches (Neil Watson <bugtraq@...son-wilson.ca>)
• Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. (<dcrab@...kerscenter.com>)
• [SECURITY] [DSA 700-1] New mailreader packages fix cross-site scripting vulnerability (joey@...odrom.org (Martin Schulze))
• Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS ("Kurt Seifried" <bt@...fried.org>)
• Multiple sql injection, and xss vulnerabilities in Pay pal Storefront ("Diabolic Crab" <dcrab@...kerscenter.com>)
• PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability (<dcrab@...kerscenter.com>)

• [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow (Thierry Carrez <koon@...too.org>)
• [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information (Thierry Carrez <koon@...too.org>)
• [gentoo-announce] [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow ("Thierry Carrez" <koon@...too.org>)
• [gentoo-announce] [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information ("Thierry Carrez" <koon@...too.org>)
• [CLA-2005:945] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
• [SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• bzip2 TOCTOU file-permissions vulnerability (Imran Ghory <imranghory@...il.com>)
• Re: DoS of LAN via D-Link switches (Joel Maslak <jmaslak@...elope.net>)
• cPanel/WHM demo account problems ("Richard Stanway" <bugtraq@...ur1ty.net>)
• Vendor Response to Portculis Advisory 05-002: Spectrum Cash Receipting System ("Paul J Docherty" <PJD@...tcullis-security.com>)
• Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS (Chris Paget <ivegotta@...bom.co.uk>)
• RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS ("Paul J Docherty" <PJD@...tcullis-security.com>)
• MDKSA-2005:064 - Updated libexif packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities (dcrab <dcrab@...kerscenter.com>)
• MDKSA-2005:062 - Updated ipsec-tools packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)
• Bay Technical Associates telnet server logon bypass (nolimit bugtraq <nolimit.bugtraq@...il.com>)
• [HV-HIGH] Microsoft Jet DB engine vulnerabilities (vuln@...view.com)
• MDKSA-2005:063 - Updated htdig packages fix vulnerability (Mandrakelinux Security Team <security@...ux-mandrake.com>)

586 messages

Powered by blists - more mailing lists