bugtraq mailing list - 2005/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2005/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 2
² 13	³ 15	⁴ 15	⁵ 24	⁶ 25	⁷ 3	⁸ 4
⁹ 15	¹⁰ 11	¹¹ 18	¹² 29	¹³ 29	¹⁴ 6	¹⁵ 2
¹⁶ 11	¹⁷ 5	¹⁸ 16	¹⁹ 31	²⁰ 17	²¹ 6	²²
²³ 10	²⁴ 14	²⁵ 12	²⁶ 21	²⁷ 18	²⁸	²⁹ 2
³⁰ 11	³¹ 22

Messages by day:

May 1 (2 messages)

Clients format string and server crash in Mtp-Target 1.2.2 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200505-01 ] Horde Framework: Multiple XSS vulnerabilities (Luke Macken <lewk@...too.org>)

May 2 (13 messages)

Multiple Vulnerabilities in Video Cam Server 1.0.0 ("Donato Ferrante" <fdonato@...istici.org>)
DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' ("KF (lists)" <kf_lists@...italmunition.com>)
Insecure pty permissions in OS X < 10.4 (Matt Johnston <matt@....asn.au>)
Re: Apache hacks (./atac, d0s.txt) ("a.list.address@...il.com" <a.list.address@...il.com>)
Golden FTP Server Pro Remote Buffer Overflow Exploit ("mohamed amhemed" <rodhedor@...mail.com>)
JGS-Portal 3.0.1 SQL-Injection (<admin@...znet.com>)
Re: Apache hacks (./atac, d0s.txt) (Chris Umphress <umphress@...il.com>)
Re: Apache hacks (./atac, d0s.txt) (Sagiko <sagiko@...il.com>)
Re: Apache hacks (./atac, d0s.txt) (Daniel Cid <danielcid@...oo.com.br>)
Regions bank phishing scam (Ryan S <r.st@...cast.net>)
Can't trust COMODO ("Gunter Ollmann (NGS)" <gunter@...software.com>)
Re: Apache hacks (./atac, d0s.txt) (Luiz Henrique <luizhwk@....ufsc.br>)
Re: Apache hacks (./atac, d0s.txt) (Skip Carter <skip@...geta.com>)

May 3 (15 messages)

Re: Apache hacks (./atac, d0s.txt) (Robert Zilbauer <zilbauer@...ppy.org>)
Re: Privilege escalation in BulletProof FTP Server v2.4.0.31 [PoC] (Jerome ATHIAS <jerome.athias@...e.fr>)
Re: Apache hacks (./atac, d0s.txt) ("KF (lists)" <kf_lists@...italmunition.com>)
Re: Apache hacks (./atac, d0s.txt) ("Jay D. Dyson" <jdyson@...achery.net>)
Re: Apache hacks (./atac, d0s.txt) (Steve Kemp <steve@...ve.org.uk>)
Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241 ("Lachlan. H" <pseudonym_ok@...oo.com>)
[CLA-2005:952] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
tHorK FrameWork Beta v0.1::: another exploit framework (gilbert nzeka <dark_khaalel@...oo.fr>)
Re: Apache hacks (./atac, d0s.txt) (Nick Bright <nick-tech@...raworld.net>)
[USN-113-1] libnet-ssleay-perl vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-114-1] kimgio vulnerability (Martin Pitt <martin@...are.de>)
ASP.NET __VIEWSTATE crypto validation prone to replay attacks (Michal Zalewski <lcamtuf@...il.com>)
[USN-115-1] Kommander vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Hotmail Advisories ("Luis A. Cortes Zavala" <luis.cortes@...ersec.co.uk>)
Advisories for 4 vulnerabilities addressed by Apple SU 2005-005 (David Remahl <vuln@...ahl.se>)

May 4 (15 messages)

[USN-116-1] gzip vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-117-1] cvs vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Hotmail Advisories ("Luis A. Cortes Zavala" <luis.cortes@...ersec.co.uk>)
Hotmail Advisories ("Luis A. Cortes Zavala" <luis.cortes@...ersec.co.uk>)
Re: [VulnWatch] Hotmail Advisories (Sherwyn Williams <sherwill22@...il.com>)
Re: Re: [VulnWatch] Hotmail Advisories ("Jerome Athias" <jerome.athias@...e.fr>)
Local root vuln in VPN daemon on MacOS X (Pieter de Boer <pieter@....nl>)
Re: [VulnWatch] Hotmail Advisories (Sherwyn Williams <s-williams@....rr.com>)
[USN-118-1] PostgreSQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
leafnode security announcement leafnode-SA-2005-01 (Matthias Andree <matthias.andree@....de>)
RE: Re: [VulnWatch] Hotmail Advisories ("Luis A. Cortes Zavala" <luis.cortes@...ersec.co.uk>)
Gamespy cd-key validation system: "Cd-key in use" DoS versus many games (Luigi Auriemma <aluigi@...istici.org>)
Gamespy cd-key validation system: Cd-key never in use (Luigi Auriemma <aluigi@...istici.org>)
RE: [Full-disclosure] Re: [VulnWatch] Hotmail Advisories ("Luis A. Cortes Zavala" <luis.cortes@...ersec.co.uk>)
directory traversal in SimpleCam 1.2 ("Donato Ferrante" <fdonato@...istici.org>)

May 5 (24 messages)

[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription (joey@...odrom.org (Martin Schulze))
[HSC Security Group] ASP Inline Corporate Calendar SQL injection (Zinho <zinho@...kerscenter.com>)
Multiple SQL injections and XSS in FishCart 3.1 (dcrab <dcrab@...kerscenter.com>)
Authentication bypass, sql injections and xss in ArticleLive 2005 (dcrab <dcrab@...kerscenter.com>)
Golden Ftp Server Pro - Directory Traversal Vuln ("Lachlan. H" <pseudonym_ok@...oo.com>)
Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 (ShineShadow <ss_contacts@...mail.com>)
iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Gossamer Threads Links SQL login XSS Vulnerability (Nathan House <nhouse@...tionx.net>)
Local file detection bug found through Adobe SVG Viewer ("Hyperdose Security" <robfly@...erdose.com>)
iDEFENSE Security Advisory 05.04.05: Apple Mac OS X vpnd Server_id Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
MRO Maximo v4 & v5 (Felix <felix.shnir@....com>)
MegaBook V2.0 - Cross Site Scripting Exploit (Spy Hat <spyhat@...hat.com>)
Oracle 9i / 10g Fine Grained Auditing Issue (Alexander Kornbrust <ak@...-database-security.com>)
Oracle 10g DBMS_SCHEDULER SESSION_USER issue (Alexander Kornbrust <ak@...-database-security.com>)
dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit (<cybertronic@....net>)
RE: ASP.NET __VIEWSTATE crypto validation prone to replay attacks ("Tim Farley" <tfarley@...dynamics.com>)
Multiple vulnerabilities in myBloggie 2.1.1 ("Alberto Trivero" <trivero@...py.it>)
Multiple Vulnerabilities In SitePanel2 (GulfTech Security Research <security@...ftech.org>)
Multiple Vulnerabilities In osTicket (GulfTech Security Research <security@...ftech.org>)
Re: AWStats <= 6.4 Multiple vulnerabilities (Laurent Destailleur <eldy@...rs.sourceforge.net>)
Port 1025 netvenuechat (Sherwyn Williams <sherwill22@...il.com>)
DMA[2005-0502a] - 'Apple OSX multiple Bluetooth vulnerabilities' (Kevin Finisterre <kf@...italmunition.com>)
Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks (Michal Zalewski <lcamtuf@...il.com>)
[hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart (Exoduks <exoduks@...il.com>)

May 6 (25 messages)

[ GLSA 200505-02 ] Oops!: Remote code execution (Luke Macken <lewk@...too.org>)
Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks (H D Moore <sflist@...italoffense.net>)
Re: directory traversal in SimpleCam 1.2 ("pingywon" <pingywon@...mail.com>)
[USN-119-1] tcpdump vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[SEC-1 LTD] RSA SecurID Web Agent Heap Overflow ("Gary O'leary-Steele" <garyo@...-1.com>)
[USN-120-1] Apache 2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-121-1] OpenOffice.org vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-122-1] Squid vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-123-1] Xine library vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Mac OS 10.4: new-account-wizzard in Mail 2.0 sends clear-text passwords (Markus Wörle <mrks@...s.de>)
Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks (Michal Zalewski <lcamtuf@...il.com>)
Multiple vulnearabilities in e107 cms (<hennoj@...il.com>)
Sql Injection in CJ Ultra Plus v1.0.3-1.0.4 (Kold <maggik@...a.net>)
MDKSA-2005:082 - Updated OpenOffice.org packages fix heap overflow vulnerability (Mandriva Security Team <security@...driva.com>)
Re: MegaBook V2.0 - Cross Site Scripting Exploit (Morning Wood <wood@...loitlabs.com>)
Multiple Vulnerabilities In Invision Power Board (GulfTech Security Research <security@...ftech.org>)
MDKSA-2005:081 - Updated XFree86/XOrg packages fix libXpm vulnerabilities (Mandriva Security Team <security@...driva.com>)
[ GLSA 200505-03 ] Ethereal: Numerous vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
FreeBSD Security Advisory FreeBSD-SA-05:06.iir (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-05:07.ldt (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-05:08.kmem (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
PHP Advanced Transfer Manager v1.21 (tjomi4@...il.com)
Secure Science Corporation Advisory CSA-056 (SSC Advisory Notice <bugtraq@...urescience.net>)
[SECURITY] [DSA 721-1] New squid packages fix ACL bypass (joey@...odrom.org (Martin Schulze))
4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow (Braden Thomas <bjthomas@....edu>)

May 7 (3 messages)

Re: [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow (Kevin <kkadow@...il.com>)
Ethereal <= 0.10.10 single UDP packet DoS (Nicob <nicob@...ob.net>)
firefox 1.0.3 spoof+auto dl (john smith <edward11@...tmaster.co.uk>)

May 8 (4 messages)

[SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow ("Ejovi Nuwere" <ejovi@...uritylab.net>)
phpbb 2.0.15 released - patches high critical vuln (Paul Laudanski <zx@...tlecops.com>)
32-bit qmail fun (qmail-pop3d) (Lars Olsson <jlo@...d.luth.se>)
Easy Message Board Directory Traversal and Remote Command (SoulBlack Group <soulblacktm@...il.com>)

May 9 (15 messages)

[ GLSA 200505-04 ] GnuTLS: Denial of Service vulnerability (Matthias Geerdsen <vorlon@...too.org>)
PwsPHP v1.2.2 Final - Multiples vulnerabilities (SecuBox fRoGGz <unsecure@...teme.com>)
Re: MegaBook V2.0 - Cross Site Scripting Exploit (Spy Hat <spyhat@...hat.com>)
[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Firefox Remote Compromise Leaked (Paul <paul@...yhats.cjb.net>)
Firefox Remote Compromise Technical Details (Paul <paul@...yhats.cjb.net>)
NISCC Vulnerability Advisory IPSEC - 004033 (<albatross@....it>)
[SECURITY] [DSA 722-1] New smail packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Announcement: The Web Security Mailing List (contact@...appsec.org)
Re: Can't trust COMODO - An Update (Gunter Ollmann <gunter@...software.com>)
Advanced Guestbook 2.3.1 (Spy Hat <spyhat@...hat.com>)
Re: firefox 1.0.3 spoof+auto dl (Paul <paul@...yhats.cjb.net>)
[ GLSA 200505-05 ] gzip: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Viruses can evade Sophos Anti-Virus ("xerces8" <xerces8@...n.net>)

May 10 (11 messages)

remote root security bug in ethereal 0.9.13 >= and <= 0.10.10 (suresec advisories <advisories@...esec.org>)
Esqo advisory: GeoVision Digital Video Surveillance System - Multiple authentication issues (Tirath Rai <tirath@...o.com>)
Crash in Zoidcom 1.0 beta 4 (Luigi Auriemma <aluigi@...istici.org>)
New Macromedia Security Zone Bulletin Posted (securityzone@...romedia.com (Macromedia Security Zone))
TSLSA-2005-0021 - squid (Trustix Security Advisor <tsl@...stix.org>)
[ GLSA 200505-07 ] libTIFF: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200505-08 ] HT Editor: Multiple buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
TCP/IP implementations do not adequately validate ICMP error messages (Alok Menghrajani - Ilion Security SA <alok@...onsecurity.ch>)
Firefox Crash?? (orebla Orebla <info@...bla.it>)
Gamespy cd-key validation system: "Cd-key in use" DoS versus many games (Luigi Auriemma <aluigi@...istici.org>)
CAIF 1.2 released (Oliver Goebel <Goebel@...T.Uni-Stuttgart.DE>)

May 11 (18 messages)

WowBB view_user.php SQL Injection Vulnerability (Megasky <magasky@...mail.com>)
Guesbook Pro XSS & HTML Injection (SoulBlack Group <soulblacktm@...il.com>)
[USN-124-1] Mozilla and Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[Scan Associates Advisory] Neteyes Nexusway multiple vulnerability (pokley <pokleyzz@...n-associates.net>)
BakBone NetVault last warning (class <ad@...ss101.org>)
Re: BakBone NetVault last warning (class <ad@...ss101.org>)
Linux kernel ELF core dump privilege elevation (Paul Starzetz <ihaquer@...c.pl>)
MDKSA-2005:083 - Updated ethereal packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
Metasploit Framework v2.4 (H D Moore <sflist@...italoffense.net>)
Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (please_reply_to_security@....com)
Re: Linux kernel ELF core dump privilege elevation (Greg KH <gregkh@...e.de>)
Re: Linux kernel ELF core dump privilege elevation (Greg KH <gregkh@...e.de>)
Re: Linux kernel ELF core dump privilege elevation (Paul Starzetz <ihaquer@...c.pl>)
Which is the best anti-spyware cleaner? (Paul Laudanski <zx@...tlecops.com>)
[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS (Zinho <zinho@...kerscenter.com>)
Re: Which is the best anti-spyware cleaner? (Paul Laudanski <zx@...tlecops.com>)
Re: TCP/IP implementations do not adequately validate ICMP error messages (Peter Keel <security@...erlink.ch>)

May 12 (29 messages)

Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk (Arne Vidström <arne.vidstrom@....se>)
Re: TCP/IP implementations do not adequately validate ICMP error messages (Maciej Soltysiak <maciej@...tysiak.com>)
Ethereal <= 0.10.10 SIP dissector stack overflow DoS exploit ("Shaun Colley" <shaun@....cx>)
Re: Linux kernel ELF core dump privilege elevation (Bruno Lustosa <bruno.lists@...il.com>)
Re: Authentication bypass, sql injections and xss in ArticleLive 2005 ("Steven M. Christey" <coley@...re.org>)
[DR018] Quartz Composer / QuickTime 7 information leakage (David Remahl <vuln@...ahl.se>)
Re: Firefox Crash?? (Christophe Lucas <clucas@...eda.fr>)
Re: Firefox Crash?? (Joxean Koret <joxeankoret@...oo.es>)
Re: SPAM-HIGH: TCP/IP implementations do not adequately validate ICMP error messages (David Nichols <dnichols@...i.com>)
Re: Firefox Crash?? (Jeremy Kelley <jeremy@...d.org>)
RE: TCP/IP implementations do not adequately validate ICMP error messages ("David Schwartz" <davids@...master.com>)
Yappa-NG Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
[ GLSA 200505-09 ] Gaim: Denial of Service and buffer overflow vulnerabilties (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: [DR018] Quartz Composer / QuickTime 7 information leakage ("adf--at--Code511.com" <adf@...e511.com>)
[USN-124-2] Fixed packages for USN-124-1 (Martin Pitt <martin.pitt@...onical.com>)
[USN-125-1] Gaim vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Firefox 1.0.4 released. Several vulnerabilities fixed (Paul <paul@...yhats.cjb.net>)
Security Advisory for Bugzilla 2.18, 2.19.2, and 2.16.8 (Max Kanat-Alexander <mkanat@...zilla.org>)
Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks (Anton Ivanov <arivanov@...segv.cx>)
Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk (Thor Arne Johansen <thorj@...s.no>)
Directtopics Multiple Vulnerabilities (Security Advisory) (Morinex Eneco <m0r1n3x@...il.com>)
Acrowave AAP-3100AR authetication bypass ("Martin Tornwall" <martin.tornwall@...ia.com>)
MDKSA-2005:087 - Updated tcpdump packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:086 - Updated gaim packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:085 - Updated kdelibs packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:084 - Updated gnutls packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
Re: Linux kernel ELF core dump privilege elevation (kernel module workaround) (Andrew Griffiths <andrewg@...inemenace.org>)
Re: Linux kernel ELF core dump privilege elevation (antoine <antoine@...afix.co.uk>)
htdigest exploit code [bid 13537] ("K sPecial" <kspecial@...uxmail.org>)

May 13 (29 messages)

Re: phpbb 2.0.15 released - patches high critical vuln (Paul Laudanski <zx@...tlecops.com>)
Netvault Remote Heap Overflow (another one) (nolimit bugtraq <nolimit.bugtraq@...il.com>)
[FLSA-2005:155508] Updated cvs package fixes security issues (fedora-legacy-announce@...hat.com)
[FLSA-2005:154988] Updated openoffice.org packages fix security issues (fedora-legacy-announce@...hat.com)
[FLSA-2005:152912] Updated imap packages fix security issues (fedora-legacy-announce@...hat.com)
[FLSA-2005:152871] Updated nfs-utils package fixes security issue (fedora-legacy-announce@...hat.com)
[FLSA-2005:152856] Updated sudo packages fix security issue (fedora-legacy-announce@...hat.com)
[FLSA-2005:152804] Updated openmotif packages fix image vulnerability (fedora-legacy-announce@...hat.com)
[FLSA-2005:152768] Updated ruby package fixes security issues (fedora-legacy-announce@...hat.com)
[FLSA-2005:152763] Updated qt packages fixes security issues (fedora-legacy-announce@...hat.com)
[USN-126-1] GNU TLS library vulnerability (Martin Pitt <martin.pitt@...onical.com>)
OllyDbg "INT3 AT" Format String Vulnerability (Piotr Bania <bania.piotr@...il.com>)
FreeBSD Security Advisory FreeBSD-SA-05:09.htt [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Re: Linux kernel ELF core dump privilege elevation (Pedro Venda <pjvenda@...akis.dhis.org>)
ITU 2005 Call For Papers (Michal Szymanski <ms@...inglab.org>)
32-bit qmail fun (qmail-pop3d) (fwd) (Lars Olsson <jlo@...d.luth.se>)
OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage (please_reply_to_security@....com)
Ultimate PHP Board (UPB) Security Advisory (Morinex Eneco <m0r1n3x@...il.com>)
Willings WebCam - Password Disclosure Issue (SecuBox fRoGGz <unsecure@...teme.com>)
Windows image size crash (RSnake <rsnake@...cking.com>)
cross-domain cookie theft: who's to blame? (Tim Tompkins <timt@...derlinks.org>)
Re: phpbb 2.0.15 released - patches high critical vuln (Paul Laudanski <zx@...tlecops.com>)
Re: Linux kernel ELF core dump privilege elevation (kernel module workaround) (chris <fool@....net>)
OpenBB SQL Injection & Cross-site Scripting Vulnerability (Megasky <magasky@...mail.com>)
Re: Linux kernel ELF core dump privilege elevation (codeQ <newsclient@...mq.info>)
Yahoo! Messenger URL Handler Remote DoS Vulnerability (Torseq Tech. <bindshell@...il.com>)
Re: Windows image size crash (Giuseppe `lan` Marocchio <giuseppe@...web.org>)
Re: Windows image size crash ("Oliver J. Morais" <oliver.morais@...llo.at>)
PHPHeaven PHPMyChat Cross-site Scripting Vulnerablitiy (Megasky <magasky@...mail.com>)

May 14 (6 messages)

Yahoo! Chat Add Buddy Without Consent Privacy Issue (Torseq Tech. <bindshell@...il.com>)
[ GLSA 200505-10 ] phpBB: Cross-Site Scripting Vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Gaim 1.2.1 -- PoC Stack Overflow (Ron <iago@...hallalegends.com>)
Re: Windows image size crash (Bernhard Mitterer <admin@...tt.com>)
Skull-Splitter's Guestbook Multiple XXS/HTML injection (Morinex Eneco <m0r1n3x@...il.com>)
MDKSA-2005:088 - Updated mozilla packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)

May 15 (2 messages)

[ GLSA 200505-11 ] Mozilla Suite, Mozilla Firefox: Remote compromise (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200505-12 ] PostgreSQL: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

May 16 (11 messages)

Postnuke 0.750 - 0.760rc4 local file inclusion (pokley <pokleyzz@...n-associates.net>)
Re: Postnuke 0.750 - 0.760rc4 local file inclusion (Paul Laudanski <zx@...tlecops.com>)
Multiple Vulnerabilities in MetaCart e-Shop (dedi dwianto <the_day@...o.or.id>)
DotNetNuke (Multiple XSS) ("Mark Woan" <m.woan@...s.qinetiq.com>)
Woltlab Burning Board SQL Injection Vulnerability (GulfTech Security Research <security@...ftech.org>)
Pico Server (pServ) Local Information Disclosure ("Claus R. F. Overbeck" <bugtraq@...usrfoverbeck.de>)
Pico Server (pServ) Information Disclosure Of CGI Sources ("Claus R. F. Overbeck" <bugtraq@...usrfoverbeck.de>)
Pico Server (pServ) Remote Command Injection ("Claus R. F. Overbeck" <bugtraq@...usrfoverbeck.de>)
Mac OS X - Adobe Version Cue local root exploit [c version exploit] (ali reza AcTiOnSpIdEr <actionspider@...il.com>)
[SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) (<deluxe@...urity-project.org>)
cdrdao exploit for mandrake 10.2 ( Mandriva 2005) (newbug Tseng <newbug@...oot.org>)

May 17 (5 messages)

MySQL < 4.0.12 && MySQL <= 5.0.4 : Insecure tmp file handling ("ZATAZ.net" <exploits@...az.net>)
[USN-127-1] bzip2 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[USN-128-1] nasm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
OpenServer 5.0.6 OpenServer 5.0.7 : telnet client multiple issues (please_reply_to_security@....com)

May 18 (16 messages)

Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability ("alert7" <alert7@...cus.org>)
[CLA-2005:953] Conectiva Security Announcement - kde (Conectiva Updates <secure@...ectiva.com.br>)
MDKSA-2005:088-1 - Updated mozilla-firefox packages re-enable extensions (Mandriva Security Team <security@...driva.com>)
Linux kernel pktcdvd ioctl break user space limit vulnerability [corrected] ("bugs" <bugs@...tecell.org>)
[USN-129-1] Squid vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Windows image size crash (<cmthemc@...oo.com>)
Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine (Torseq Tech. <bindshell@...il.com>)
Help Center Live Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
[SECURITY] [DSA 724-1] New phpsysinfo packages fix cross site scripting (joey@...odrom.org (Martin Schulze))
Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack. (Konrad Malewski <koyot@...n.ondraszek.ds.polsl.gliwice.pl>)
Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) ("Steven M. Christey" <coley@...re.org>)
Re: Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine (Torseq Tech. <bindshell@...il.com>)
Re: Mac OS X - Adobe Version Cue local root exploit [c version exploit] (Vade 79 <v9@...ehalo.us>)
UnixWare 7.1.4 : Updated mozilla fixes many security issues (please_reply_to_security@....com)
NOVELL ZENWORKS MULTIPLE REMØTE STACK & HEAP OVERFLOWS (list@...0te.com)
Security issue in Microsoft Outlook (Bakchodiya <bakchodiya@...oo.com>)

May 19 (31 messages)

[FLSA-2005:152883] Updated mozilla packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:152771] Updated pam packages fix security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Re: Security issue in Microsoft Outlook (Nick FitzGerald <nick@...us-l.demon.co.uk>)
[FLSA-2005:152815] Updated libtiff packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
RE: Security issue in Microsoft Outlook ("Domingos Bruges" <djsb@...nisp.com>)
AW: Security issue in Microsoft Outlook ("Stein, Wilhelm Michael" <Wilhelm.Stein@...econ.com>)
RE: Security issue in Microsoft Outlook ("Scovetta, Michael V" <Michael.Scovetta@...com>)
Re: Security issue in Microsoft Outlook (Jesse Morgan <jesse@...terpm.net>)
Re: Security issue in Microsoft Outlook (Tom Gallagher <tom@...urityBugHunter.com>)
RE: Security issue in Microsoft Outlook ("Simon Dever" <simon_dever@...mail.com>)
Re: Security issue in Microsoft Outlook (Harshad <harshad@...oo.com>)
RE: [Active Spam - GGL Filter] AW: Security issue in Microsoft Outlook (irfan.syed@...co.com)
Re: Security issue in Microsoft Outlook (Jens Becker <bugtraq.geek@...il.com>)
RE: Security issue in Microsoft Outlook ("Steve Bostedor" <Steveb@...ore.com>)
Re: Security issue in Microsoft Outlook ("M. Moreno" <euclidnine@...oo.com>)
Re: Security issue in Microsoft Outlook (Kevin Martin <kevintm@...ritech.net>)
Re: Re: Security issue in Microsoft Outlook (Joachim Schipper <j.schipper@...h.uu.nl>)
[USN-130-1] TIFF library vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200505-14 ] Cheetah: Untrusted module search path (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
MDKSA-2005:089 - Updated cdrdao packages fix local root vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:090 - Updated nasm packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:091 - Updated bzip2 packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:092 - Updated gzip packages fix several vulnerabilities (Mandriva Security Team <security@...driva.com>)
D-Link DSL routers authentication bypass (Francesco Orro <francesco.orro@...ela.com>)
Re: NOVELL ZENWORKS MULTIPLE REMXXTE STACK & HEAP OVERFLOWS (<bart2k@...hmail.com>)
[SECURITY] [DSA 725-1] New ppxp packages fix local root exploit (joey@...odrom.org (Martin Schulze))
Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) (<deluxe@...urity-project.org>)
JavaMail Information Disclosure (msgno) (Ricky Latt <ygnboyz@...il.com>)
UNICODE BUFFER OVERFLOW IN MS-WORD (Bahaa Naamneh <b_naamneh@...mail.com>)
Possible proxy scan for proactive countermeasures? (the rxmr <the.rxmr@...il.com>)
phpATM arbitrary PHP code inclusion (Ingvar Gilbert <bugtraq@...wie.de>)

May 20 (17 messages)

RE: Security issue in Microsoft Outlook (Patch Now <patchitorloseit@...oo.com>)
AW: Security issue in Microsoft Outlook ("Aufmuth Andreas" <Andreas_Aufmuth@...el-medien.de>)
UPDATE: [ GLSA 200504-23 ] Kommander: Insecure remote script execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200505-15 ] gdb: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability (joey@...odrom.org (Martin Schulze))
RE: Security issue in Microsoft Outlook ("David Corn" <david@...etrix.com>)
pst.advisory: gedit fun. opensource is god .lol windows (yan feng <jsk@...nt0m.net>)
[SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
picasm error handling stack overflow vulnerability (Shaun Colley <scolleyuk@...il.com>)
worm "postcard" e-mail issue ("M. Perri" <icc-mysql@...rp.net>)
episodex guestbook security bypass & html injection (farhad koosha <farhadkey@...oo.com>)
Re: Security issue in Microsoft Outlook (Dan Margolis <bugtraq.lists.dmargoli@....net>)
Security contact for Trillian (Suramya Tomar <security@...amya.com>)
[BuHa Security] Wordpress SQL-Injection (Thomas Waldegger <bugtraq@...ph3us.org>)
RE: Security issue in Microsoft Outlook ("David Corn" <david@...etrix.com>)
[UPDATE] UNICODE BUFFER OVERFLOW IN MS-WORD (Bahaa Naamneh <b_naamneh@...mail.com>)

May 21 (6 messages)

[ GLSA 200505-16 ] ImageMagick, GraphicsMagick: Denial of Service vulnerability (Thierry Carrez <koon@...too.org>)
[SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3} (Maksymilian Arciemowicz <max@...tsuper.pl>)
[SECURITYREASON.COM] PostNuke XSS and Full path disclosure 0.760RC3=>x (Maksymilian Arciemowicz <max@...tsuper.pl>)
[SECURITYREASON.COM] PostNuke Non Critical SQL Injection and Include 0.760-RC3=>x (Maksymilian Arciemowicz <max@...tsuper.pl>)
pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows (yan feng <jsk@...nt0m.net>)
[SECURITYREASON.COM] PostNuke SQL Injection 0.750=>x (Maksymilian Arciemowicz <max@...tsuper.pl>)

May 23 (10 messages)

[USN-131-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-132-1] ImageMagick vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Computer Associates Vet Antivirus Library Remote Heap Overflow (list@...0te.com)
Format string and crash in Warrior Kings 1.3 and Battles 1.23 (Luigi Auriemma <aluigi@...istici.org>)
SQL injections in PortailPHP (CENSORED <censored@...l.ru>)
Cookie Cart Default Installation Multiple Vulnerabilities (SoulBlack Group <soulblacktm@...il.com>)
Meteor FTP Server v1.5 Buffer Overflow (Auston J <Anix44@...il.com>)
RE: Security issue in Microsoft Outlook ("Keenan Smith" <kc_smith@...rk.net>)
[ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200505-18 ] Net-SNMP: fixproc insecure temporary file creation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

May 24 (14 messages)

Endless loop in Halo 1.06 (Luigi Auriemma <aluigi@...istici.org>)
CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability ("Williams, James K" <James.Williams@...com>)
Blue Coat Reporter multiple remote vulnerabilities ("Oliver Karow" <Oliver.Karow@....de>)
Gforge - viewFile.php security flaw (Filippo Spike Morelli <spike@...-ft.org>)
ACROS Security: HTML Injection in BEA WebLogic Server Console (2) ("ACROS Security" <lists@...os.si>)
ACROS Security: HTML Injection in BEA WebLogic Server Console (1) ("ACROS Security" <lists@...os.si>)
Re: Endless loop in Halo 1.06 (Joel Esler <eslerj@...il.com>)
Re: Endless loop in Halo 1.06 (Joel Esler <eslerj@...il.com>)
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Javamail Multiple Information Disclosure Vulnerabilities (Ricky Latt <ygnboyz@...il.com>)

May 25 (12 messages)

Zone Labs ZoneAlarm Vet anti-virus engine OLE processing vulnerability ("Zone Labs Product Security" <Product-Security@...elabs.com>)
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting (joey@...odrom.org (Martin Schulze))
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com…)
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d FETCH Command Resource Consumption DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.co…)
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d Format String Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
exim 4.40 exploit ("plugger" <plug@...ernode.on.net>)
shtool insecure temporary file creation ("ZATAZ.net" <exploits@...az.net>)
PHP Injection in PHP Poll Creator (rash ilusion <torash@...il.com>)
OpenServer 5.0.6 OpenServer 5.0.7 : nwprint privilege escalation (please_reply_to_security@....com)
High Risk Vulnerability in L-Soft's LISTSERV Server ("NGSSoftware Insight Security Research" <nisr@...software.com>)
davfs2 does not honour Unix permissions (martin f krafft <madduck@...duck.net>)

May 26 (21 messages)

[ GLSA 200505-19 ] gxine: Format string vulnerability (Thierry Carrez <koon@...too.org>)
[USN-133-1] Apache utility vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability (jamesbug@....net)
[USN-134-1] Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Buffer-overflow and crash in Terminator 3: War of the Machines 1.16 (Luigi Auriemma <aluigi@...istici.org>)
Buffer-overflow in C'Nedra 0.4.0 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 729-1] New PHP4 packages fix denial of service (joey@...odrom.org (Martin Schulze))
Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability (Piotr Bania <bania.piotr@...il.com>)
Re: PHP Injection in PHP Poll Creator (Michael Cordover <michael.cordover@...il.com>)
Invision Power Board 1.* and 2.* Exploit (BID 13529) (Petey Beege <peteybeege@...linator.com>)
Re: PowerLink WAN Aggregator - Vunerability (<preasoner@...rocorp.com>)
[security bulletin] SSRT4884 rev.0 - HP-UX TCP/IP Remote Denial of Service (DoS) ("Boren, Rich (SSRT)" <rich.boren@...com>)
[security bulletin] SSRT5954 rev.1 - HP-UX TCP/IP Remote Denial of Service (DoS) ("Boren, Rich (SSRT)" <rich.boren@...com>)
Re: Multiple Sql injection and XSS vulnerabilities in phpBB Plus v.1.52 and below and some of its modules. (security curmudgeon <jericho@...rition.org>)
Meteor FTP Server: PoC Exploit (Dim K0r0l <dim@...lytez.com>)
Re: [Full-disclosure] iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability (jamesbug@....net)
Re: ACROS Security: HTML Injection in BEA WebLogic Server Console (2) (Will Schroeder <wschroed@...roedernet.net>)
[security bulletin] SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access ("Boren, Rich (SSRT)" <rich.boren@...com>)
Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk (Arne Vidström <arne.vidstrom@....se>)
Mozilla 1.7.8 filehandle-error/win32 ("the.soylent" <the.soylent@...il.com>)

May 27 (18 messages)

[USN-114-2] Fixed packages for USN-114-1 (Martin Pitt <martin.pitt@...onical.com>)
[USN-135-1] gdb vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200505-20 ] Mailutils: Multiple vulnerabilities in imap4d and mail (Thierry Carrez <koon@...too.org>)
[USN-136-1] binutils vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-136-2] Fixed packages for USN-136-1 (Martin Pitt <martin.pitt@...onical.com>)
PHP Stat Administrative User Authentication Bypass (SoulBlack Group <soulblacktm@...il.com>)
PostNuke Critical SQL Injection and XSS 0.750=>x (sp3x <sp3x@...urityreason.com>)
User32.dll Icon Size Crash ("- k -" <klistas@...il.com>)
[AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability (Team SHATTER <shatter@...secinc.com>)
[AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability (Team SHATTER <shatter@...secinc.com>)
RE: CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability ("Williams, James K" <James.Williams@...com>)
DSL-504T (and maybe many other) remote access without password bug (alessandro <alessandro@...eralis.net>)
Citrix security contact ("Eyal Udassin" <eyal@...ftcoders.com>)
Re: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service (John GALLET <john.gallet@...adoo.fr>)
RE: ACROS Security: HTML Injection in BEA WebLogic Server Console (2) ("ACROS Security" <lists@...os.si>)
[SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification (joey@...odrom.org (Martin Schulze))
Re: User32.dll Icon Size Crash (Daniel Souza <thehazard@...il.com>)
SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 ("Alberto Trivero" <trivero@...py.it>)

May 29 (2 messages)

Cygwin Bash Buffer Overflow ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)
Compuware Softice (DbgMsg driver) Local Denial Of Service (Piotr Bania <bania.piotr@...il.com>)

May 30 (11 messages)

Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005) ("Benjamin Tobias Franz" <0-1-2-3@....de>)
Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) ("Benjamin Tobias Franz" <0-1-2-3@....de>)
Microsoft Internet Explorer - Crash on processing embedded files with endless loop (05/28/2005) ("Benjamin Tobias Franz" <0-1-2-3@....de>)
Microsoft Internet Explorer - Crash on to many stack overflows (05/28/2005) ("Benjamin Tobias Franz" <0-1-2-3@....de>)
PicoWebServer Remote Unicode Stack Overflow (Dennis Elser <dennis@...ktrace.de>)
Format String Vulnerability In Peercast 0.1211 And Earlier (GulfTech Security Research <security@...ftech.org>)
Crash in Stronghold 2 1.2 (Luigi Auriemma <aluigi@...istici.org>)
CYBSEC - PHPMailer Infinite Loop Denial of Service (Mariano Nuñez Di Croce <mnunez@...sec.com>)
MyBB 1.0 RC4 XSS Bug (August Christopher <syini666@...il.com>)
Multiple vulnerabilities in x-cart Gold (CENSORED <censored@...l.ru>)
MDKSA-2005:095 - Updated gdb packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)

May 31 (22 messages)

[Argeniss] MS05-012 Exploit (Cesar <cesarc56@...oo.com>)
SyScAN'05 ("organiser@...can.org" <organiser@...can.org>)
Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) ("- k -" <klistas@...il.com>)
TSL-2005-0026 - multi (Trustix Security Advisor <tsl@...stix.org>)
Spam exploiting MS05-016 (Nick FitzGerald <nick@...us-l.demon.co.uk>)
TSL-2005-0025 - binutils (Trustix Security Advisor <tsl@...stix.org>)
RE: Microsoft Internet Explorer - Crash on adding sites to restri cted zone (05/28/2005) ("Hohn, Joerg" <Joerg.Hohn@...ystems.com>)
Nortel VPN Router Malformed Packet DoS Vulnerability (Roy Hills <Roy.Hills@...-monitor.com>)
Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) (Benton Lam <calyth@...il.com>)
Re: [security@...e.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 (Marcus Meissner <meissner@...e.de>)
[XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 (Xnuxer Security <xnusec@...il.com>)
PowerDownload Remote File Inclusion (SoulBlack Group <soulblacktm@...il.com>)
Wide-scale industrial espionage using Trojan horses in Israel (Gadi Evron <ge@...uxbox.org>)
Re: [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 (Ow Mun Heng <Ow.Mun.Heng@....com>)
multiple vulnerability Calendarix Advanced (DarkBicho <darkbicho@...il.com>)
Multiple vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 ("Alberto Trivero" <trivero@...py.it>)
504T and now also 604T remote access. (alessandro <alessandro@...eralis.net>)
Re: [security@...e.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 ("Todd C. Miller" <Todd.Miller@...rtesan.c…)
Re: [security@...e.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 (Justin <justinvinn@...il.com>)
Re: Citrix security contact (security curmudgeon <jericho@...rition.org>)
Reminder: XGrabKeyboard is not a security interface (Florian Weimer <fw@...eb.enyo.de>)
A short warning on the X11 Editres protocol (Florian Weimer <fw@...eb.enyo.de>)

407 messages

Powered by blists - more mailing lists