bugtraq mailing list - 2005/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2005/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 4	² 8	³ 7	⁴ 2	⁵ 1
⁶ 12	⁷ 12	⁸ 10	⁹ 17	¹⁰ 9	¹¹ 5	¹² 3
¹³ 18	¹⁴ 17	¹⁵ 23	¹⁶ 15	¹⁷ 4	¹⁸ 1	¹⁹ 3
²⁰ 12	²¹ 12	²² 21	²³ 21	²⁴ 16	²⁵ 5	²⁶ 1
²⁷ 16	²⁸ 21	²⁹ 27	³⁰ 35

Messages by day:

June 1 (4 messages)

[ GLSA 200506-01 ] Binutils, elfutils: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005) ("Steven M. Christey" <coley@...re.org>)
[ZH2005-13SA] NEXTWEB (i)Site website management multiple vulnerabilities (Jim Pangalos <dpangalos@...uxmail.org>)
HP Radia Notify Daemon: Multiple Buffer Overflow Vulnerabilities (John Cartwright <johnc@...k.org.uk>)

June 2 (8 messages)

Re: A short warning on the X11 Editres protocol (Frank v Waveren <fvw.bugtraq@....cx>)
[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
PHP Execution Vulnerability in CuteNews (John Cantu <john.cantu@...il.com>)
[ECHO_ADV_14$2005] Multiple Vulnerabilities in Liberum Help Desk (the_day@...o.or.id)
Backdoor in Fortinet´s firewall Fortigate (Johan Andersson <andersson@....se>)
SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x ("Bernhard Müller" <bmu@...-consult.com>)
SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection ("Bernhard Müller" <bmu@...-consult.com>)
CastleCops phpBB bbcode Input Validation Disclosure (Paul Laudanski <zx@...tlecops.com>)

June 3 (7 messages)

[security bulletin] SSRT5962 rev.0 HP OpenView Radia mgmt - Remote access and DoS ("Boren, Rich (SSRT)" <rich.boren@...com>)
RE: Backdoor in Fortinet´s firewall Fortigate ("Matt Gibson" <Mattg@...eedgetech.ca>)
Re: Backdoor in Fortinet´s firewall Fortigate (Michael J McCafferty <mike@...omputersecurity.com>)
[DRUPAL-SA-2005-001] New Drupal release fixes critical security issue (Uwe Hermann <uwe@...mann-uwe.de>)
[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
=?GB2312?Q?XCon=A1=AF2005 CALL FOR PAPER?= ("alert7@...cus.org" <bugs@...tecell.org>)
Re: Backdoor in Fortinet´s firewall Fortigate (Derek Martin <code@...zashack.org>)

June 4 (2 messages)

[FLSA-2005:152532] Updated kernel packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Israeli industrial espionage Trojan horse sample + snort sigs (Gadi Evron <ge@...uxbox.org>)

June 5 (1 message)

Malicious Bundles on Mac OS X (Braden Thomas <braden127@...ealbox.com>)

June 6 (12 messages)

everybuddy <= 0.4.3 insecure temporary file creation (Eric Romang / DATACENTER Luxembourg <eromang@...ux.com>)
GIPTables Firewall <= v1.1 insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
LutelWall <= 0.97 insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
[WEB SECURITY] A new whitepaper by Watchfire - HTTP Request Smuggling ("Ory Segal" <osegal@...chfire.com>)
[ GLSA 200506-02 ] Mailutils: SQL Injection (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-03 ] Dzip: Directory traversal vulnerability (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-04 ] Wordpress: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
A new whitepaper by Watchfire - HTTP Request Smuggling (Ory Segal <orysegal@...vision.net.il>)
Popper webmail remote code execution vulnerability - advisory fix (LSS Security <exposed@....hr>)
Server termination in Raknet 2.33 (before 30 May 2005) (Luigi Auriemma <aluigi@...istici.org>)
`tattle` -- automatic reporting of SSH brute-force attacks ("C.J. Steele, CISSP" <coreyjsteele@...oo.com>)
SQL Injection Exploit for Portail PHP < 1.3 ("Alberto Trivero" <trivero@...py.it>)

June 7 (12 messages)

Second-Order Symlink Vulnerabilities (coley@...re.org)
remote command execution in 'tattle' ("b0iler" <b0iler@...thell.org>)
Re: Second-Order Symlink Vulnerabilities ("Graham Reed" <greed@...ox.com>)
AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS (Tom Ferris <tommy@...urity-protocols.com>)
[AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console (Team SHATTER <shatter@...secinc.com>)
SQL Injection Exploit for WordPress <= 1.5.1.1 ("Alberto Trivero" <trivero@...py.it>)
Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14 (Reed Arvin <reedarvin@...il.com>)
Re: SQL Injection Exploit for WordPress <= 1.5.1.1 (Giorgio Mandolfo <giorgio@...dolph.ath.cx>)
Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability (info@...tsphere.com)
Contact Request - Comcast ("Ryan T. Dean" <rtdean@...mail.net>)
Re: AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS ("Manu Benoît" <tseeker@...ternity.net>)
Second-Order Symlink Vulnerabilities ("Steven M. Christey" <coley@...re.org>)

June 8 (10 messages)

IpSwitch IMAP Server LOGON stack overflow (<nolimit@...eiso.org>)
UnixWare 7.1.4 : MySQL updated MySQL (version 4.1.11) fixes security issues (please_reply_to_security@....com)
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : wu-ftp denial of service (please_reply_to_security@....com)
[USN-137-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: IpSwitch IMAP Server LOGON stack overflow (Dave Aitel <dave@...unitysec.com>)
[ GLSA 200506-05 ] SilverCity: Insecure file permissions (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Still segfaults in man -k (Raj Mathur <raju@...ux-delhi.org>)
Re: IpSwitch IMAP Server LOGON stack overflow (Dave Aitel <dave@...unitysec.com>)
MDKSA-2005:096 - Updated openssl packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911) (Matthias Andree <matthias.andree@....de>)

June 9 (17 messages)

2 SQL injection in Loki download manager v2.0 (hack_912@...mail.com)
Re: Re: IpSwitch IMAP Server LOGON stack overflow (<nolimit@...eiso.org>)
Re: IpSwitch IMAP Server LOGON stack overflow (<nolimit@...eiso.org>)
[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability ("[ Suresec Advisories ]" <advisories@...esec.org>)
xmysqladmin insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
[USN-138-1] gedit vulnerability (Martin Pitt <martin.pitt@...onical.com>)
tftp 2000 1.0.0.1 (Josh Zlatin-Amishav <josh@...s.co.il>)
SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:029) (Ludwig Nussel <ludwig.nussel@...e.de>)
Invision Community Blog Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
FreeBSD Security Advisory FreeBSD-SA-05:11.gzip (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-05:12.bind9 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities (Thierry Carrez <koon@...too.org>)
Re: `tattle` -- automatic reporting of SSH brute-force attacks (Anders Henke <anders@...lund.de>)
Invision Gallery Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Re: `tattle` -- automatic reporting of SSH brute-force attacks (Sergio Gelato <Sergio.Gelato@...ro.su.se>)
drone armies C&C report - May/2005 (Gadi Evron <gadi@...ila.gov.il>)
FreeBSD Security Advisory FreeBSD-SA-05:10.tcpdump (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

June 10 (9 messages)

Arbitrary code execution in eping plugin (y0int@...oo.it)
MDKSA-2005:098 - Updated wget packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
"Meanwhile, on the other side of the web server" - a new write-up by Amit Klein ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
[USN-139-1] Gaim vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (Jonathan Weiss <jw@...erewut.de>)
osCommere HTTP Response Splitting (GulfTech Security Research <security@...ftech.org>)
Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces (csirt@...hnetsecurity.com)
Webhints v1.03 Remote Command Execution (blahplok@...oo.com)
Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (Peter Bierman <bierman@...le.com>)

June 11 (5 messages)

[ GLSA 200506-07 ] Ettercap: Format string vulnerability (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-09 ] gedit: Format string vulnerability (Thierry Carrez <koon@...too.org>)
`tattle`, now with goodness ("C.J. Steele, CISSP" <coreyjsteele@...oo.com>)
[ GLSA 200506-10 ] LutelWall: Insecure temporary file creation (Thierry Carrez <koon@...too.org>)

June 12 (3 messages)

Multiple vulnerabilities in Pico Server (pServ) v3.3 (Raphaël Rigo ML <ml@...light-hall.net>)
Re: Arbitrary code execution in eping plugin (oliver@...ersquad.de)
[ GLSA 200506-11 ] Gaim: Denial of Service vulnerabilities (Thierry Carrez <koon@...too.org>)

June 13 (18 messages)

Re: Arbitrary code execution in eping plugin (Oliver Monneke <oliver@...ersquad.de>)
Re: Arbitrary code execution in eping plugin (Sam Michaels <samthecomputerman@...il.com>)
File Upload Manager Sploits (blackshoe@...il.com)
singapore v0.9.11 cross site scripting and path disclosure (thegreatone2176@...oo.com)
[OpenPKG-SA-2005.008] OpenPKG Security Advisory (bzip2) (OpenPKG <openpkg@...npkg.org>)
Security contact of airport Rome, Italy (Michael Schwartzkopff <misch@...tinet.de>)
Re: Arbitrary code execution in eping plugin (exon <exon@...e.se>)
[OpenPKG-SA-2005.007] OpenPKG Security Advisory (cvs) (OpenPKG <openpkg@...npkg.org>)
Re: Sql injection in jPortal version 2.3.1 (module banner) (anonymous@...pl)
[OpenPKG-SA-2005.009] OpenPKG Security Advisory (gzip) (OpenPKG <openpkg@...npkg.org>)
reconsidering physical security: pod slurping (Abe Usher <abe.usher@...rp-ideas.net>)
TSL-2005-0028 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: osCommere HTTP Response Splitting ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
UPDATE: [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-12 ] MediaWiki: Cross-site scripting vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[OpenPKG-SA-2005.010] OpenPKG Security Advisory (openpkg) (OpenPKG <openpkg@...npkg.org>)
Bluetooth SIG Denial of Service vulnerability (hugo@...ohacking.com)
NDSS '06 -- Call for Papers (Karen Seo <kseo@....com>)

June 14 (17 messages)

Re: Arbitrary code execution in eping plugin (Jonathan Angliss <jon@...dork.net>)
Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root ("Steven M. Christey" <coley@...re.org>)
Local privilege escalation using runasp V3.5.1 (lsth75@...mail.com)
URL-Encoding Problem in Finjan SurfinGate (Daniel Schröter <d.schroeter@....de>)
iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com…)
iDEFENSE Security Advisory 06.14.05: Microsoft Windows Interactive Training Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Web Access Cross-Site Scripting Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Anti-Virus Malformed ZIP Archives flaws [UPDATE] (Thierry Zoller <Thierry@...ff-em.com>)
RE: Exploits Selling / Buying (Ivaylo Zashev <zashev@...il.com>)
[NGSEC] AntiPharming v1.00 FREE (lists@...EC <lists@...ec.com>)
Re: Security contact of airport Rome, Italy (Michael Schwartzkopff <misch@...tinet.de>)
Remote Exploit for Web_store.cgi (ActionSpider@...urityfocus.com, "[at]"@securityfocus.com, linuxmail@...urityfocus.com, "[dot]"@securityfocus.com, com@...ur…)
MDKSA-2005:100 - Updated rsh packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
Re: Security contact of airport Rome, Italy (Dave McKay <dave@...akerz.org>)
MDKSA-2005:099 - Updated gaim packages fix more vulnerabilities (Mandriva Security Team <security@...driva.com>)
FusionBB Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)

June 15 (23 messages)

Re: Bluetooth SIG Denial of Service vulnerability (Joshua Davis <crossbox@...alth.kirenet.com>)
Bluetooth dot dot attacks (update) ("KF (lists)" <kf_lists@...italmunition.com>)
Re: Arbitrary code execution in eping plugin (Christoph 'knurd' Jeschke <christoph.jeschke@...il.com>)
Mambo 4.5.2.2 SQL Injection in UPDATE statement (pokley <pokleyzz@...n-associates.net>)
[USN-140-1] Gaim vulnerability (Martin Pitt <martin.pitt@...onical.com>)
High Risk Vulnerability in HTML Help (ITSS Parser) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
Re: File Upload Manager Sploits (<systemcracker@...il.com>)
Re: File Upload Manager Sploits (<systemcracker@...il.com>)
Vulnerability: McGallery v 1.1 files reading on disk (D_BuG <d_bug@...ru>)
Vulnerability: McGallery v 1.1 Mysql DB including (D_BuG <d_bug@...ru>)
Vulnerability: Bitrix Php inclusion (D_BuG <d_bug@...ru>)
Vulnerability: Bitrix Web Server Paths (D_BuG <d_bug@...ru>)
Re: Arbitrary code execution in eping plugin (Anders Henke <anders@...lund.de>)
Microsoft's June Security Bulletin (albatross@....it)
Multiple paFileDB Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
is this new? vuln info @ Adobe (phr1ker@...hmail.com)
Re: Sql injection in jPortal version 2.3.1 (module banner) (exon <exon@...e.se>)
DMA[2005-0614a] - 'Global Hauri ViRobot Server cookie overflow' ("KF (lists)" <kf_lists@...italmunition.com>)
MADSHEEP-05SA (security advisory): WebHints <= v1.03 Remote Command Execution Vulnerability ("Emanuele \"MadSheep\" Gentili" <emanuele@...ietolug.org>)
Re: [NGSEC] AntiPharming v1.00 FREE (Joel Esler <eslerj@...il.com>)
eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow ("Steve Manzuik" <smanzuik@...e.com>)
Re: is this new? vuln info @ Adobe (Jamie Pratt <jpratt@...wich.edu>)
Re: [NGSEC] AntiPharming v1.00 FREE (Lance James <lancej@...urescience.net>)

June 16 (15 messages)

Sophos Antivirus Advisory (patrickhof@....de)
Re: Sophos Antivirus Advisory (class <ad@...ss101.org>)
Re: Sophos Antivirus Advisory (Robert Perriero <ssgsa@...l.montclair.edu>)
Re: Sophos Antivirus Advisory ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Sophos Antivirus Advisory (class <ad@...ss101.org>)
MDKSA-2005:101 - Updated tcpdump packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:102 - Updated gedit packages fix format string vulnerability (Mandriva Security Team <security@...driva.com>)
Re: Local privilege escalation using runasp V3.5.1 (3APA3A <3APA3A@...URITY.NNOV.RU>)
M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD ("Alberto Trivero" <trivero@...py.it>)
[SM-ANNOUNCE] Patch fixes SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769] (Jonathan Angliss <jon@...irrelmail.org>)
SquirrelMail "vendor" notification feeler (Jonathan Angliss <jon@...irrelmail.org>)
Adobe Reader 7: XML External Entity (XXE) Attack ("Sverre H. Huseby" <shh@...thost.com>)
e107 v0.617 several new and old vulnerabilities (Marc Ruef <marc.ruef@...putec.ch>)
RE: Sophos Antivirus Advisory ("Todd Towles" <toddtowles@...okshires.com>)
Passwords Decrypter for UPB <= 1.9.6 ("Alberto Trivero" <trivero@...py.it>)

June 17 (4 messages)

Anti-Fraud Method? (Sumy <sanandres@...il.com>)
Google Exploit Queries Thread (Sumy <sanandres@...il.com>)
Source Code Disclosure in Yaws Webserver <1.56 ("Daniel Fabian" <research@...-consult.com>)
[ GLSA 200506-13 ] webapp-config: Insecure temporary file handling (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

June 18 (1 message)

JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting (Marc Schoenefeld <marc.schoenefeld@....org>)

June 19 (3 messages)

Page Hijack: The 302 Exploit, Redirects and Google (Sumy <sanandres@...il.com>)
[ GLSA 200506-14 ] Sun and Blackdown Java: Applet privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200506-15 ] PeerCast: Format string vulnerability (Thierry Carrez <koon@...too.org>)

June 20 (12 messages)

Advisory 01/2005: Fileupload/download vulnerability in Trac (Stefan Esser <sesser@...dened-php.net>)
[ GLSA 200506-16 ] cpio: Directory traversal vulnerability (Luke Macken <lewk@...too.org>)
Re: Google Exploit Queries Thread (Harry de Grote <harry@...kuleuven.ac.be>)
Re: Adobe Reader 7: XML External Entity (XXE) Attack ("Slawek" <sgp@...satgp.com.pl>)
Sudo version 1.6.8p9 now available, fixes security issue. ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
Another tcpdump BGP infinite loop vulnerability (CAN-2005-1267) ("Simon L. Nielsen" <simon@...eBSD.org>)
Re: M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD (fraser@...pb.com)
[ECHO_ADV_18$2005] Multiple SQL INJECTION in Ublog Reload 1.0.5 (the_day@...o.or.id)
Black Hat Briefings Announcements (Jeff Moss <jmoss@...ckhat.com>)
Cisco VPN Concentrator Groupname Enumeration Vulnerability (Roy Hills <Roy.Hills@...-monitor.com>)
paFaq Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Novell GroupWise Plain Text Password Vulnerability. ("Security Team" <securityteam@...edson.com>)

June 21 (12 messages)

Re: Anti-Virus Malformed ZIP Archives flaws [UPDATE] (Nicholas Knight <nknight@...awaynet.com>)
Novell GroupWise Plain Text Password Vulnerability. ("Security Team" <securityteam@...edson.com>)
Undocumented account vulnerability in Enterasys Vertical Horizon switches (Jacek Lipkowski <sq5bpf@...ra.com.pl>)
[ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[Hat-Squad] i-Gallery directory traversal ("Hat-Squad Security Team" <bugtraq@...-squad.com>)
[USN-141-1] tcpdump vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-142-1] sudo vulnerability (Martin Pitt <martin.pitt@...onical.com>)
RE: osCommere HTTP Response Splitting (Solution) ("Harry Metcalfe" <harry@...ptop.com>)
Security Contact for Lyris (H D Moore <sflist@...italoffense.net>)
MercuryBoard 1.1.4 SQL Injection (4yka@....ru)
[ GLSA 200506-18 ] Tor: Information disclosure (Thierry Carrez <koon@...too.org>)
[ GLSA 200506-19 ] SquirrelMail: Several XSS vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

June 22 (21 messages)

how to exploit SQL INJECTION? (Pablo Escobar <slackware77@...il.com>)
Re: how to exploit SQL INJECTION? (David Eduardo Acosta Rodríguez <david.acosta@...ernet-solutions.com.co>)
RE: how to exploit SQL INJECTION? ("Victor Chapela" <victor@...rt.com>)
Re: how to exploit SQL INJECTION? (Steve Friedl <steve@...xwiz.net>)
Re: how to exploit SQL INJECTION? (Pablo Fernández <newsclient@...mq.info>)
RE: how to exploit SQL INJECTION? ("Leandro Reox" <lmet5on@...ertel.com.ar>)
Re: how to exploit SQL INJECTION? (Pablo Fernández <newsclient@...mq.info>)
Re: how to exploit SQL INJECTION? ("Steve Friedl" <steve@...xwiz.net>)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com…)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Remote File Inclusion Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
[ GLSA 200506-20 ] Cacti: Several vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ECHO_ADV_19$2005] Multiple SQL INJECTION in DUWARE Products (the_day@...o.or.id)
SUSE Security Announcement: SUN Java security problems (SUSE-SA:2005:032) (Marcus Meissner <meissner@...e.de>)
Portcullis Security Advisory 05-013 - VoIP - Asterisk Stack Overflow (Wade Alcorn <wja@...tcullis-security.com>)
Tmobile users site shows other accounts email ("Greg Merideth (Forward Technology)" <gmerideth@...wardtechnology.net>)
Re: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting (scott.stark@...ss.com)
[ GLSA 200506-21 ] Trac: File upload vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
IIS Unicode still a threat? ("James Bower" <hando311@...mail.com>)
MDKSA-2005:103 - Updated sudo packages fix race condition vulnerability (Mandriva Security Team <security@...driva.com>)
iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)

June 23 (21 messages)

Windows IPSec Vulnerabilty - still exist ("offtopic" <offtopic@...l.ru>)
[ GLSA 200506-22 ] sudo: Arbitrary command execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Local Root exploit (Fedora Core 4) ("Florian Strankowski (fs)" <florian.s@...dunxxluecke.de>)
New release of the Auditor Security Collection available at http://www.remote-exploit.org (Max Moser <max.moser@...il.com>)
Weaknesses in WLAN Session Containment (Joshua Wright <jwright@...borg.com>)
Remote Command Execution Exploit for Cacti <= 0.8.6d ("Alberto Trivero" <trivero@...py.it>)
Remote Unauthenticated Heap Overflow VERITAS Backup Exec Server for Windows ("NGSSoftware Insight Security Research" <mark@...software.com>)
Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC) ("NGSSoftware Insight Security Research" <mark@...software.com>)
Vulnerability Statements ("Mark Litchfield" <mark@...software.com>)
[ECHO_ADV_20$2005] Full path disclosure JAF CMS (the_day@...o.or.id)
long sendmail timeouts let attacker prevent milter quiesce (Damian Menscher <menscher@...c.edu>)
[OpenPKG-SA-2005.012] OpenPKG Security Advisory (sudo) (OpenPKG <openpkg@...npkg.org>)
Re: Local Root exploit (Fedora Core 4) (Joshua Bressers <bressers@...hat.com>)
Windows SMB Client Transaction Response Handling PoC (cybertronic@....net)
eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow ("Steve Manzuik" <smanzuik@...e.com>)
eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow (<Advisories@...e.com>)
[OpenPKG-SA-2005.011] OpenPKG Security Advisory (shtool) (OpenPKG <openpkg@...npkg.org>)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vul… ("iDEFENSE Labs" <labs-no-reply@...fense…)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)

June 24 (16 messages)

iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Solaris 10 /usr/sbin/traceroute vulnerabilities (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Re: how to exploit SQL INJECTION? ("Dave Korn" <davek_throwaway@...mail.com>)
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Re: Security Contact for Lyris (H D Moore <sflist@...italoffense.net>)
Re: Firefox Crash?? (Peter Bartosch <harrison.bergeron@...il.com>)
[ECHO_ADV_21$2005] MUltiple Vulnarable In ActiveBuyAndSell (Dedi@...urityfocus.com, Dwianto@...urityfocus.com (the_day@...o.or.id))
SUSE Security Announcement: sudo (SUSE-SA:2005:036) (Thomas Biege <thomas@...e.de>)
PHP nuke XSS vulnerability (fjlj@....com)
TSLSA-2005-0030 - multi (Trustix Security Advisor <tsl@...stix.org>)
Infopop UBB Threads Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Re: how to exploit SQL INJECTION? (Pablo Escobar <slackware77@...il.com>)
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities ("David T. Moraski II" <moraski2@...nceton.EDU>)
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities ("Fermín J. Serna" <fjserna@...ec.com>)
MDKSA-2005:104 - Updated squid packages fix vulnerability (Mandriva Security Team <security@...driva.com>)

June 25 (5 messages)

MDKSA-2005:105 - Updated dbus packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
Phishing - feature or flaw (Secure Science Corporation Bugtraq <bugtraq@...urescience.net>)
Re: Bluetooth SIG Denial of Service vulnerability (next@...urityfocus.com, at@...urityfocus.com, hysteria@...urityfocus.com, dot@...urityfocus.com, cz@...urit…)
Re: [NGSEC] AntiPharming v1.00 FREE (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
Re: PHP nuke XSS vulnerability (wormz.web@...il.com)

June 26 (1 message)

Call for Participation: Summerschool Applied IT-Security 2005 (Ilja <ilja@...ric.org>)

June 27 (16 messages)

[ GLSA 200506-23 ] Clam AntiVirus: Denial of Service vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[USN-143-1] Linux amd64 kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
SUSE Security Announcement: RealPlayer remote buffer overflow (SUSE-SA:2005:037) (Marcus Meissner <meissner@...e.de>)
[USN-144-1] dbus vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. (Reed Arvin <reedarvin@...il.com>)
Phishing Solutions (was: Phishing - feature or flaw) (Chris Brenton <cbrenton@...isbrenton.org>)
Nokia Symbian 60 "BLUETOOTH NICKNAME" Remote Restart (Qnix@...mail.org)
M4DR007-07SA (security advisory): Multiple vulnerabilities in ASP Nuke 0.80 ("Alberto Trivero" <trivero@...py.it>)
Re: Local Root exploit (Fedora Core 4) (Paul Starzetz <paul@...rzetz.de>)
Blank Administrator password in DELL XP Professional install ("Michael Scheidell" <scheidell@...nap.net>)
Re: Phishing - feature or flaw ("David A. Wheeler" <dwheeler@....org>)
aspnuke is vulnerable to sql injection (oil_karchack@...oo.com)
Re: [ECHO_ADV_20$2005] Full path disclosure JAF CMS ("Steven M. Christey" <coley@...re.org>)
Re: Nokia Symbian 60 "BLUETOOTH NICKNAME" Remote Restart (baelang@...oo.com)
Re: Nokia Symbian 60 "BLUETOOTH NICKNAME" Remote Restart ("Alex Renn Jr." <ray@...et.com>)
High Risk Vulnerability in RealPlayer for Windows ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)

June 28 (21 messages)

Solaris 9/10 ld.so fun (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Re: Solaris 9/10 ld.so fun (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Multiple buffer overflows exist in Infradig Systems Inframail Advantage Server Edition 6.0 (Reed Arvin <reedarvin@...il.com>)
[USN-145-1] wget vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Cross-Site Scripting (CSS) in Hosting Controller All Version and hot fix it hehe ;) (ActionSpider@...urityfocus.com, "[at]"@securityfocus.com, linuxmail@...u…)
[Fwd: phpBB 2.0.16 released] ("Christian Boenning" <security@...loren-im.net>)
Re: Solaris 9/10 ld.so fun (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Weboot Window Washer Version 6.02.410 Will erase files from your PC (tmolamusa@...online.net)
XSS IN Community forum (abducter_minds@...oo.com)
Whitepaper release: Risks of Passive Network Discovery Systems (<bugtraq@...-security.com>)
Re: Solaris 9/10 ld.so fun (Piotr KUCHARSKI <chopin@....waw.pl>)
RE: Blank Administrator password in DELL XP Professional install ("James Bender" <jbender@...llins.com>)
RE: Blank Administrator password in DELL XP Professional install ("Michael Scheidell" <scheidell@...nap.net>)
Access right escalation / severe permission problems on Raritan Console Servers (spam@...etter.org)
Re: Weboot Window Washer Version 6.02.410 Will erase files from your PC (simon@...Towers.co.uk)
RE: [Fwd: phpBB 2.0.16 released] ("Richard Stanway" <bugtraq@...ur1ty.net>)
SQL Injection Exploit for ASPNuke <= 0.80 ("Alberto Trivero" <trivero@...py.it>)
MDKSA-2005:106 - Updated spamassassin packages fix DoS vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:107 - Updated ImageMagick packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
RE: [VulnWatch] Blank Administrator password in DELL XP Professional install ("Michael Hasse" <MichaelH@...om.com>)
Re: [VulnWatch] Blank Administrator password in DELL XP Professional install (Susan Bradley <sbradcpa@...bell.net>)

June 29 (27 messages)

RE: [Fwd: phpBB 2.0.16 released] (ronvdaal <ronvdaal@...athustra.linux666.com>)
Security Advisory - phpBB 2.0.15 PHP-code injection bug (ronvdaal <ronvdaal@...athustra.linux666.com>)
RE: Solaris 9/10 ld.so fun ("Charles Heselton" <charles.heselton@...il.com>)
SEC-CONSULT SA-20050629-0 (Bernhard Mueller <research@...-consult.com>)
[USN-146-1] Ruby vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200506-24 ] Heimdal: Buffer overflow vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Solaris 9/10 ld.so fun (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Cisco Security Advisory: RADIUS Authentication Bypass (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
XOOPS 2.0.11 && Earlier Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Advisory 02/2005: Remote code execution in Serendipity (Christopher Kunz <christopher.kunz@...dened-php.net>)
Auditing Privilged Oracle Passwords - hashattack (Joshua Wright <jwright@...borg.com>)
[badroot security] Community link pro web editor: Remote command Execution (mozako <mozako@...ox.it>)
Original imTRBBS(ver1.02) and prior remote command execution (blahplok@...oo.com)
Windows 2000 SP4 Rollup (geoff.seymour@...it.nsw.gov.au)
WordPress 1.5.1.2 && Earlier Multiple Vulnerabilities (GulfTech Security Research <security@...ftech.org>)
Re: Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 (senghooi@...pop.com)
In-game /ignore crash in Soldier of Fortune II 1.03 (Luigi Auriemma <aluigi@...istici.org>)
Oracle Question Slightly OT ("Ginski, Richard J." <rginski@...pinellas.fl.us>)
Re: Weboot Window Washer Version 6.02.410 Will erase files from your PC (info@...ureit-tech.com)
RE: Cisco VPN Concentrator Groupname Enumeration Vulnerability ("Dario Ciccarone (dciccaro)" <dciccaro@...co.com>)
Re: Oracle Question Slightly OT (Susan Bradley <sbradcpa@...bell.net>)
Mozilla Multiple Product JavaScript Issue (Kurczaba Associates Advisories <advisories@...czaba.com>)
[DRUPAL-SA-2005-002] Drupal 4.6.2 / 4.5.4 fixes input validation issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue (Uwe Hermann <uwe@...mann-uwe.de>)
Re: Oracle Question Slightly OT (David Cravshaw <david.cravshaw@...il.com>)

June 30 (35 messages)

FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-05:14.bzip2 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-05:15.tcp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Advisory 02/2005: Remote code execution in Serendipity (Christopher Kunz <christopher.kunz@...dened-php.net>)
Re: Oracle Question Slightly OT (Joshua Wright <jwright@...borg.com>)
Re: [Full-disclosure] Solaris 9/10 ld.so fun (Casper.Dik@....COM)
Publishing exploit code - what is it good for (Aviram Jenik <aviram@...ondsecurity.com>)
Re: Publishing exploit code - what is it good for (bruen@...drain.net)
Re: Publishing exploit code - what is it good for (Joachim Schipper <j.schipper@...h.uu.nl>)
Re: Publishing exploit code - what is it good for (Anders B Jansson <hdw@...listi.se>)
RE: Publishing exploit code - what is it good for (<Glenn.Everhart@...se.com>)
Re: Publishing exploit code - what is it good for (bugtraq@...security.net)
Re: Advisory 02/2005: Remote code execution in Serendipity (GulfTech Security Research <security@...ftech.org>)
[SECURITY] [DSA 733-1] New crip packages fix insecure temporary files (joey@...odrom.org (Martin Schulze))
Re: Publishing exploit code - what is it good for (Ill will <xillwillx@...il.com>)
Microsoft Windows NTFS Information Disclosure (Matthew Murphy <mattmurphy@...rr.com>)
Re: Publishing exploit code - what is it good for (Joxean Koret <joxeankoret@...il.com>)
Re: Publishing exploit code - what is it good for ("Gary E. Miller" <gem@...lim.com>)
RE: Publishing exploit code - what is it good for (Matt Huston <matthewhuston@...il.com>)
Re: SEC-CONSULT SA-20050629-0 (Moritz Naumann <info@...itz-naumann.com>)
Re: Publishing exploit code - what is it good for (Steve Milner <smilner@...nityz.com>)
Re: Publishing exploit code - what is it good for (Erik Fichtner <emf@...uscation.org>)
Re: Publishing exploit code - what is it good for (Erick Mechler <emechler@...hometer.net>)
Re: Publishing exploit code - what is it good for ("John Horn" <John.Horn@...sonaz.gov>)
Re: Publishing exploit code - what is it good for (Matt.Carpenter@...icor.com)
RE: Publishing exploit code - what is it good for ("Todd Towles" <toddtowles@...okshires.com>)
Anyone else having serious repercussions from applying W2k sp4 se curity rollup patch? (gerald <geraldf@...ternsaw.com>)
RE: Publishing exploit code - what is it good for ("James C Slora Jr" <Jim.Slora@...a.com>)
Re: Publishing exploit code - what is it good for (Thomas Reinke <reinke@...urityspace.com>)
Re: Publishing exploit code - what is it good for (John Madden <maddenj@...net.ie>)
Re: Publishing exploit code - what is it good for (Skip Carter <skip@...geta.com>)
Re: Publishing exploit code - what is it good for (devnull@...ents.Montreal.QC.CA)
RE: Published exploit codes foo foo foo ("J. Oquendo" <sil@...iltrated.net>)
RE: Publishing exploit code - what is it good for (Marvin Simkin <Marvin.Simkin@....edu>)
Re: Publishing exploit code - what is it good for (Damian Menscher <menscher@...c.edu>)

358 messages

Powered by blists - more mailing lists