bugtraq mailing list - 2005/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2005/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 22	² 9	³ 5	⁴ 2
⁵ 3	⁶ 14	⁷ 48	⁸ 6	⁹ 16	¹⁰ 5	¹¹ 2
¹² 15	¹³ 22	¹⁴ 16	¹⁵ 32	¹⁶ 30	¹⁷ 12	¹⁸ 2
¹⁹ 26	²⁰ 16	²¹ 13	²² 24	²³ 12	²⁴ 9	²⁵ 5
²⁶ 4	²⁷ 18	²⁸ 9	²⁹ 18	³⁰ 23

Messages by day:

September 1 (22 messages)

Ariba password exposure vulnerability (gerald626@...il.com)
[ GLSA 200509-01 ] MPlayer: Heap overflow in ad_pcm.c (Thierry Carrez <koon@...too.org>)
silc server and toolkit insecure temporary file creation ("Eric Romang / ZATAZ.com" <eromang@...az.com>)
Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x] (secure@...antec.com)
iDEFENSE Security Advisory 09.01.05: Novell NetMail IMAPD Command Continuation Request Heap Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 09.01.05: 3Com Network Supervisor Directory Traversal Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability (Mariano Nuñez Di Croce <mnunez@...sec.com>)
RE: Vulnerability in Symantec Anti Virus Corporate Edition v9.x ("James C Slora Jr" <Jim.Slora@...a.com>)
SimplePHPBlog Arbitrary File Deletion and Sample Exploit ("'ken'@FTU" <ken@...security.com>)
Adobe Version Cue exploits. (v9 <v9@...ehalo.us>)
UMN gopher[v3.0.9+] multiple(2) client buffer overflows. (v9 <v9@...ehalo.us>)
RE: Ariba password exposure vulnerability ("Craig Kennedy" <CKennedy@...ba.com>)
[SecuriWeb.2005.1] - Barracuda SPAM firewall advisory (Francois Harvey <fharvey@...uriweb.net>)
Re: secure client-side platform (<liudieyu@...rella.name>)
File aribitary read access in frox (un4m31@...il.com)
[USN-175-1] ntp server vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x (Colin <colweb@...il.com>)
[SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
re: Ariba Spend Management System (gerald626@...il.com)
[SECURITY] [DSA 779-2] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[security bulletin] SSRT051005 rev.1 - HP ProLiant DL585 Servers Unauthorized Remote Access ("Boren, Rich (HP SSRT)" <rich.boren@...com>)
SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050) (Marcus Meissner <meissner@...e.de>)

September 2 (9 messages)

Re: secure client-side platform (Keith Oxenrider <koxenrider@...-biotech.com>)
RE: Re: secure client-side platform ("Mark Senior" <Mark.Senior@....ab.ca>)
Re: secure client-side platform (devnull@...ents.Montreal.QC.CA)
[SECURITY] [DSA 794-1] New polygen packages fix denial of service (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 800-1] New pcre3 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution (Michael Stone <mstone@...cker.debian.org>)
Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x] ("Steven M. Christey" <coley@...re.org>)
CodePimps e-zine #0x07 was released (codepimps@...team.net)

September 3 (5 messages)

Re: Computer forensics to uncover illegal internet use ("Jason Coombs" <jasonc@...ence.org>)
RE: Computer forensics to uncover illegal internet use ("dave kleiman" <dave@...cureu.com>)
[ GLSA 200509-02 ] Gnumeric: Heap overflow in the included PCRE library (Thierry Carrez <koon@...too.org>)
RE: Computer forensics to uncover illegal internet use ("Craig, Tobin \(OIG\)" <tobin.craig@...gov>)
FileZilla weakly-encrypted password vulnerability: advisory + PoC (m123303@...urityfocus.com, "[#*at*#]"@securityfocus.com, richmond.ac.uk@...urityfocus.com)

September 4 (2 messages)

Re: RE: Computer forensics to uncover illegal internet use (Steve Kudlak <chromazine@...global.net>)
RE: RE: Computer forensics to uncover illegal internet use ("dave kleiman" <dave@...cureu.com>)

September 5 (3 messages)

Revised paper on "ICMP attacks against TCP" (Fernando Gont <fernando@....utn.edu.ar>)
[ GLSA 200509-03 ] OpenTTD: Format string vulnerabilities (Stefan Cornelius <dercorny@...too.org>)
RE: Revised paper on "ICMP attacks against TCP" ("alex" <pigrelax@...dex.ru>)

September 6 (14 messages)

[USN-145-2] wget bug fix (Martin Pitt <martin.pitt@...onical.com>)
Microsoft Windows keybd_event validation vulnerability (Frederic Charpentier <fcharpen@...opartners.com>)
Re: Microsoft Windows keybd_event validation vulnerability (Jerome Athias <jerome.athias@...e.fr>)
Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability (Secunia Research <vuln@...unia.com>)
[ GLSA 200509-04 ] phpLDAPadmin: Authentication bypass (Thierry Carrez <koon@...too.org>)
Re: Microsoft Windows keybd_event validationvulnerability ("Dave Korn" <davek_throwaway@...mail.com>)
[ GLSA 200509-05 ] Net-SNMP: Insecure RPATH (Thierry Carrez <koon@...too.org>)
MAXdev MD-Pro 1.0.73 (possibly prior versions) remote code execution / cross site scripting / path disclosure (retrogod@...ceposta.it)
[NOBYTES.COM: #11] MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro - Multiple Vulnerabilities ("John Cobb" <johnc@...ytes.com>)
I have discovered small xss error in open webmail 2.41 (s3cure@...zta.fm)
IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV (inge.henriksen@...leansoft.com)
[KDE Security Advisory] kcheckpass local root vulnerability (Dirk Mueller <mueller@....org>)
RE: Computer forensics to uncover illegal internet use ("dave kleiman" <dave@...cureu.com>)
[OpenPKG-SA-2005.020] OpenPKG Security Advisory (proftpd) (OpenPKG <openpkg@...npkg.org>)

September 7 (48 messages)

SUSE Security Announcement: php4, php5 remote code execution (SUSE-SA:2005:051) (Marcus Meissner <meissner@...e.de>)
[OpenPKG-SA-2005.017] OpenPKG Security Advisory (modssl) (OpenPKG <openpkg@...npkg.org>)
Re: CMS Made Simple <= 0.10 - PHP injection (garaged <garaged@...il.com>)
Multiple vulnerabilities in FreeBSD 'urban' ("Shaun Colley" <shaun@....cx>)
Land Down Under 'events.php' Cross Site Scripting Vulnerability (conor.e.buckley@...il.com)
Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC (Nick Boyce <nick.boyce@...il.com>)
PHP-Nuke (bhfh@...la.com)
UNB 1.5.3 cross site scripting (retrogod@...ceposta.it)
Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC (Nicholas Knight <nknight@...awaynet.com>)
Re: FileZilla weakly-encrypted password vulnerability (Luigi Auriemma <aluigi@...istici.org>)
[NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability (4Degrees@...nd2.com)
Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC (medhead@...gmandesign.com)
phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting (retrogod@...ceposta.it)
[SECURITY] [DSA 801-1] New ntp packages fix group id confusion (joey@...odrom.org (Martin Schulze))
[OpenPKG-SA-2005.019] OpenPKG Security Advisory (openssh) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2005.018] OpenPKG Security Advisory (pcre) (OpenPKG <openpkg@...npkg.org>)
USB Lock Auto-Protect v1.5 - Local Password Encryption Weakness (unsecure@...teme.com)
[security bulletin] SSRT051023 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access (security-alert@...com)
Update: Realchat user impersonation - BSA 200506110001 (Andreas Beck <becka-list-bugtraq@...atec.de>)
[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability (Michael Stone <mstone@...cker.debian.org>)
(Annex A) ADSL Road Runner Exploit Description & Theory (gp32boy@...mail.com)
Vulnerability in myBloggie 2.1.3-beta and prior (os2a.bto@...il.com)
[USN-176-1] kcheckpass vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-177-1] Apache 2 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
USN-160-2: Apache vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Microsoft Windows keybd_event validation vulnerability ("cy.wang" <wangchunying@...a.com>)
Re: Microsoft Windows keybd_event validation vulnerability (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
[ GLSA 200509-06 ] Squid: Denial of Service vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
FreeBSD Security Advisory FreeBSD-SA-05:20.cvsbug (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Vulnerability In SecureOL VE2 v1.05.1008 (maxim@...ureol.com)
SQL Injection[2] In MyBB PR2 (stranger-killer@...mail.com)
Re: [NOBYTES.COM: #11] MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro - Multiple Vulnerabilities (exoduks@...urityfocus.com, "[at]"@security…)
[SECURITY] [DSA 802-1] New cvs packages fix insecure temporary files (joey@...odrom.org (Martin Schulze))
MDKSA-2005:160 - Updated kdebase packages fix potential local root vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:159 - Updated kdeedu packages fix tempfile vulnerability (Mandriva Security Team <security@...driva.com>)
PBLang 4.65 (possibly prior versions) remote code execution (retrogod@...ceposta.it)
WebArchiveX - Unsafe Methods Vulnerability ("Brett Moore" <brett.moore@...urity-assessment.com>)
[ Suresec Advisories ] - Kcheckpass file creation vulnerability (Suresec Advisories <advisories@...esec.org>)
MDKSA-2005:158 - Updated mplayer packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:157 - Updated smb4k packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
[NewAngels Advisory #5] Stylemotion WEB//NEWS 1.4 Vulnerabilities (r.verton@...il.com)
Rule bypassing in CheckPoint NGX R60 (fitz <fitzimailing@...oo.de>)
MDKSA-2005:156 - Updated ntp packages fix small security-related issue. (Mandriva Security Team <security@...driva.com>)
RE: FileZilla weakly-encrypted password vulnerability: advisory + PoC ("MacIntyre, Lawrence Paul" <macintyrelp@...l.gov>)
Re: Microsoft Windows keybd_event validation vulnerability (galacticjello@...ru.com)
Cisco Security Advisory: Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow (Cisco Systems Product Security Incident Response T…)
RE: FileZilla weakly-encrypted password vulnerability: advisory + PoC ("Mark Senior" <Mark.Senior@....ab.ca>)
anti Windows XP SP2 firewall trick (crusoe@...xandria.cc)

September 8 (6 messages)

Secunia Research: ALZip ACE Archive Handling Buffer Overflow (Secunia Research <vuln@...unia.com>)
Secunia Research: NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow (Secunia Research <vuln@...unia.com>)
[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 804-1] New kdelibs packages fix backup file information leak (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
MDKSA-2005:161 - Updated apache2 packages to address multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)

September 9 (16 messages)

[USN-178-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-179-1] openssl weak default configuration (Martin Pitt <martin.pitt@...onical.com>)
(TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (Piotr Bania <bania.piotr@...il.com>)
3 minor vulnerabilities in IPSwitch products ("CIRT.DK Advisory" <advisory@...t.dk>)
iDEFENSE Security Advisory 09.09.05: GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
[SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files (joey@...odrom.org (Martin Schulze))
TSLSA-2005-0047 - multi (Trustix Security Advisor <tsl@...stix.org>)
KillProcess 2.20 and priors "FileDescription" Local Buffer Overflow Issue (fRoGGz@...urityfocus.com)
Re: (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (Alejandro Barrera <abarrera@...n-gate.net>)
Cj Desing Three Aplications One Bug (psymera@...mail.com)
Zebedee DoS Vulnerability ("Shiraishi.M" <shiraishi@...i.co.jp>)
KillProcess 2.20 and priors "FileDescription" Local Buffer Overflow Issue (fRoGGz@...urityfocus.com)
class-1 Forum Software v 0.24.4 Remote code execution (retrogod@...ceposta.it)
Re: (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (Piotr Bania <bania.piotr@...il.com>)
Re[2]: (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (Alejandro Barrera <abarrera@...n-gate.net>)
FreeBSD Security Advisory FreeBSD-SA-05:20.cvsbug [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

September 10 (5 messages)

RE: Revised paper on "ICMP attacks against TCP" (Fernando Gont <fernando@....utn.edu.ar>)
Mozilla Firefox "Host:" Buffer Overflow Exploit (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Revised paper on "ICMP attacks against TCP" (Florian Weimer <fw@...eb.enyo.de>)
Re: Mozilla Firefox "Host:" Buffer Overflow Exploit (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Re: Revised paper on "ICMP attacks against TCP" (Łukasz Bromirski <lbromirski@...vka.eu.org>)

September 11 (2 messages)

Re: Mozilla Firefox "Host:" Buffer Overflow Exploit ("Paul" <pvnick@...il.com>)
Re: Mozilla Firefox "Host:" Buffer Overflow Exploit (Georgi Guninski <guninski@...inski.com>)

September 12 (15 messages)

FireFox "Host:" Buffer Overflow is not just exploitable on FireFox (Berend-Jan Wever <berendjanwever@...il.com>)
[USN-180-1] MySQL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-181-1] Mozilla products vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-182-1] X server vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-83-2] LessTif 1 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200509-07 ] X.Org: Heap overflow in pixmap allocation (Thierry Carrez <koon@...too.org>)
[SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass (joey@...odrom.org (Martin Schulze))
Sawmill XSS vuln (Mark Terry <Mark.Terry@...-monitor.com>)
Security Flaw in pam_per_user Module ("Mark D. Roth" <roth+pam_per_user@...p.net>)
SUSE Security Announcement: apache2 (SUSE-SA:2005:051) (Thomas Biege <thomas@...e.de>)
PHP Nuke <= 7.8 Multiple SQL Injections (r.verton@...il.com)
[SECURITY] [DSA 808-1] New tdiary packages fix Cross Site Request Forgery (joey@...odrom.org (Martin Schulze))
[ GLSA 200509-08 ] Python: Heap overflow in the included PCRE library (Thierry Carrez <koon@...too.org>)
[OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid) (OpenPKG <openpkg@...npkg.org>)
util-linux: unintentional grant of privileges by umount (David Watson <baikie@...hat.freeserve.co.uk>)

September 13 (22 messages)

Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (h4cky0u <h4cky0u.org@...il.com>)
[USN-183-1] Squid vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (Updated) (h4cky0u <h4cky0u.org@...il.com>)
Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
btscanner 2.0 released (bluetooth@...test.co.uk)
[SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
AzDGDatingLite V 2.1.3 remote code execution (retrogod@...ceposta.it)
Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (h4cky0u@...il.com)
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
MDKSA-2005:162 - Updated squid packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:163 - Updated MySQL packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
Re: anti Windows XP SP2 firewall trick (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
Serious Security issue with broken - Microsoft's .Net XML Serialization API (Rohit <rohits79@...il.com>)
Re: Serious Security issue with broken - Microsoft's .Net XML Serialization API (Rohit <rohits79@...il.com>)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration Fixed Encryption Key Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.c…)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerabilit… ("iDEFENSE Labs" <labs-no-reply@...fense…)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerabili… ("iDEFENSE Labs" <labs-no-reply@...fense…)
Re: FireFox Host: Buffer Overflow is not just exploitable on FireFox (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Snort DoS Fallacies (Martin Roesch <roesch@...rcefire.com>)
security at netscape.org says Error 550 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

September 14 (16 messages)

RE: [Snort-users] Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
Re: Snort DoS Fallacies ("Martin Roesch" <roesch@...rcefire.com>)
Re: Snort DoS Fallacies ("Martin Roesch" <roesch@...rcefire.com>)
Re: Snort DoS Fallacies ("Martin Roesch" <roesch@...rcefire.com>)
Re: [Snort-users] Snort DoS Fallacies (purplebag <purplebag@...il.com>)
Re: [Snort-users] Snort DoS Fallacies (Martin Roesch <roesch@...rcefire.com>)
RE: FireFox Host: Buffer Overflow is not justexploitable on FireFox ("Peter Kruse" <kruse@...sesecurity.dk>)
Mozilla / Mozilla Firefox authentication weakness (3APA3A <3APA3A@...URITY.NNOV.RU>)
Secunia Research: AVIRA Antivirus ACE Archive Handling Buffer Overflow (Secunia Research <vuln@...unia.com>)
RE: [Snort-devel] Re: Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
FW: [Snort-devel] Re: Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
ATutor 1.5.1 SQL Injection / Admin credentials disclosure / remote code execution (retrogod@...ceposta.it)
Re: Re: [Snort-users] Snort DoS Fallacies (Martin Roesch <roesch@...rcefire.com>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Steven Sturges" <steve.sturges@...rcefire.com>)
Re: Mozilla / Mozilla Firefox authentication weakness (Daniel Veditz <dveditz@...zio.com>)

September 15 (32 messages)

Re: Mozilla / Mozilla Firefox authentication weakness (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[FLSA-2005:163274] Updated CUPS packages fix security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:163047] Updated squirrelmail package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:162680] Updated Zlib packagea fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:160202] Updated mozilla packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
gtkdiskfree insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities (Secunia Research <vuln@...unia.com>)
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution (retrogod@...ceposta.it)
[SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow (joey@...odrom.org (Martin Schulze))
Airscanner Mobile Security Advisory #05081203: vxTftpSrv 1.7.0 Remote Code Execution Buffer Overflow Vulnerability (contact@...scanner.com)
Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 Denial of Service Vulnerability (contact@...scanner.com)
DriverStudio Remote Control Authentication Bypass Vulnerability (cocoruder@....com)
Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability (contact@...scanner.com)
TWiki Remote Command Execution Vulnerability ("Sap ." <0xsapx0@...il.com>)
SQL injection & XSS in phpoutsourcing Noah's classifieds (alireza hassani <trueend5@...oo.com>)
Avocent CCM: Port Access Control Bypass Vulnerability (spam@...etter.org)
Character Manipulation in Online Systems. (hackology@...il.com)
Is netcraft publishing URL of your intranet sites? (Saqib Ali <docbook.xml@...il.com>)
Remote File Inclusion in MyGuestbook ("rod hedor" <rodhedor@...mail.com>)
404 error XSS (Josh Zlatin-Amishav <josh@...s.co.il>)
CastleCops ramps up fight against CoolWebSearch/HomeSearch (Paul Laudanski <zx@...tlecops.com>)
Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability (alexsrb@...site.com)
Oracle Reports: Generic SQL Injection Vulnerability via Lexical References (ak@...-database-security.com)
Re: AWstats Path Disclosure Vulnerability (Fournaux <fournaux@...erdev.com>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (evaders99@...il.com)
RE: Re: [Snort-users] Snort DoS Fallacies ("Steven Sturges" <steve.sturges@...rcefire.com>)
Anti Arp Poisoning Daemon (OpenAAPD) PS: Link corrected (Andrea Di Pasquale <whyx@...nbeer.it>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Steven Sturges" <steve.sturges@...rcefire.com>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
Re: Re: Serious Security issue with broken - Microsoft's .Net XML Serialization API (darkangel.stt@...il.com)

September 16 (30 messages)

RE: Re: [Snort-users] Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox ("Peter Kruse" <kruse@...sesecurity.dk>)
[SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection (joey@...odrom.org (Martin Schulze))
MDKSA-2005:164 - Updated XFree86/x.org packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Paul Laudanski <zx@...tlecops.com>)
[FLSA-2005:152919] Updated grip package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
XSS Vulnerability in MIVA Merchant 5 - Includes Fix (admin@...erconx.com)
Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure (contact@...scanner.com)
Re: AWstats Path Disclosure Vulnerability (cwh01@...78.dixiesys.com)
PTL Advisory 050825 - HP LaserJet Network Username and Information Enumeration (Pinion Lab <lab@...ion.se>)
Re: AWstats Path Disclosure Vulnerability (Martin Pitt <martin.pitt@...onical.com>)
(TOOL) TAPiON ver 0.1c (Piotr Bania <bania.piotr@...il.com>)
gwcc insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
ncompress insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
Message for D1g1t4lLeech ZATAZ Audit has discovered this bug the 2005-09-05 D1g1t4lLeech you are a true Leecher ;) (ZATAZ Audits <exploits@...az.net>)
arc insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
Re: FireFox Host: Buffer Overflow is not just exploitable on FireFox ("milw0rm Inc." <milw0rm@...il.com>)
FF IDN buffer overflow workaround works in Netscape too (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
worring about YaST in SuSE 9.3 and maybe lower (innate@....de)
Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch (Paul Laudanski <zx@...tlecops.com>)
Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch (Times Enemy <times@....org>)
SUSE Security Announcement: squid (SUSE-SA:2005:053) (Thomas Biege <thomas@...e.de>)
SUSE Security Announcement: evolution (SUSE-SA:2005:054) (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: FireFox Host: Buffer Overflow is not just exploitable on FireFox (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
PHP SESSION MODIFICATION (unknow@...team.org)
[SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability (joey@...odrom.org (Martin Schulze))
Greyhats Security back online ("Paul" <pvnick@...il.com>)
RE: Re: [Snort-users] Snort DoS Fallacies ("Steven Sturges" <steve.sturges@...rcefire.com>)
TSLSA-2005-0049 - multi (Trustix Security Advisor <tsl@...stix.org>)

September 17 (12 messages)

Re: PHP SESSION MODIFICATION (David N Murray <dmurray@...systems.com>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Matthias Jim Knopf <jim@...rs.de>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Paul Laudanski <zx@...tlecops.com>)
RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
CDMA1X Security (pen-test@...urityfocus.com)
Greyhats Security back online (pvnick@...il.com)
Re: worring about YaST in SuSE 9.3 and maybe lower (Marcus Meissner <meissner@...e.de>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Paul Laudanski <zx@...tlecops.com>)
Web Application Security Analyzer for PHP-Nuke/phpBB CMS (Paul Laudanski <zx@...tlecops.com>)
[ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code (Thierry Carrez <koon@...too.org>)
[ GLSA 200509-10 ] Mailutils: Format string vulnerability in imap4d (Thierry Carrez <koon@...too.org>)
ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass (Thierry Carrez <koon@...too.org>)

September 18 (2 messages)

Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (h4cky0u <h4cky0u.org@...il.com>)
[ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Buffer overflow (Thierry Carrez <koon@...too.org>)

September 19 (26 messages)

Cisco IOS hacked? ("ciscoioshehehe" <ciscoioshehehe@...dex.ru>)
[ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
[ GLSA 200509-13 ] Clam AntiVirus: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
[USN-184-1] umount vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Whitepaper - Writing small shellcode ("Dafydd Stuttard" <daf@...software.com>)
killbits? should have named them kibbles and bits (Ill will <xillwillx@...il.com>)
CuteNews 1.4.0 remote code execution (retrogod@...ceposta.it)
CuteNews 1.4.0 remote code execution (retrogod@...ceposta.it)
Antigen 8.0 for Exchange/SMTP Rule Vulnerability ("Alan Monaghan" <AlanM@...dnerweb.com>)
router worms and International Infrastructure [was: Re: IOS exploit] (Gadi Evron <ge@...uxbox.org>)
Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (h4cky0u@...il.com)
Re: Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure (3APA3A <3APA3A@...URITY.NNOV.RU>)
Dumb Question ("Sean Warnock" <swarnock.removeme@...nocksolutions.com>)
[ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities (koon@...too.org)
ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass (koon@...too.org)
[BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.8/9 (bugtraq@...ph3us.org)
Possible memory corruption problems in Apple Safari (Jonathan Rockway <jon@...ck.us>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Daniel Bonekeeper <thehazard@...il.com>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (Paul Laudanski <zx@...tlecops.com>)
Re: PHP Nuke <= 7.8 Multiple SQL Injections (hans <hans@...ki.xs4all.nl>)
Re: [Snort-users] Snort DoS Fallacies (3 forged mails "from" marty?) (Richard Harman <snort@...hardharman.com>)
@System Security Conference (Giorgio Zoppi <zoppi@....di.unipi.it>)
Re: Cisco IOS hacked? (Andrei Mikhailovsky <mlists@...ont.com>)
Whitepaper - Writing small shellcode ("Dafydd Stuttard" <daf@...software.com>)
Re: Cisco IOS hacked? ("ciscoioshehehe" <ciscoioshehehe@...dex.ru>)
Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (h4cky0u@...il.com)

September 20 (16 messages)

Re: Cisco IOS hacked? (Kirill Bolshakov <raven@...tjoys.com>)
[USN-185-1] CUPS vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion (Secunia Research <vuln@...unia.com>)
bacula insecure temporary file creation ("Eric Romang / ZATAZ.com" <eromang@...az.com>)
[ GLSA 200509-14 ] Zebedee: Denial of Service vulnerability (Thierry Carrez <koon@...too.org>)
[ GLSA 200509-15 ] util-linux: umount command validation error (Thierry Carrez <koon@...too.org>)
Re: arc insecure temporary file creation (Joey Schulze <joey@...odrom.org>)
[security bulletin] SSRT5999 rev.0 HP OpenVMS Secure Web Browser Mozilla Application Node Spoofing (security-alert@...com)
[security bulletin] SSRT5971 rev.0 - HP Tru64 Unix FTP Daemon (ftpd) Remote Denial of Service (DoS) (security-alert@...com)
Debian Security Host Bandwidth Saturation (Martin Schulze <joey@...odrom.org>)
MDKSA-2005:165 - Updated cups packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
phpBB 2.0.17 remote avatar size bug (SmOk3 <smok3f00@...il.com>)
Hesk Session ID Validation Vulnerability (os2a.bto@...il.com)
MDKSA-2005:138-1 - Updated cups packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
mercury imap4 remote BOF exploit ( IHSTeam ) (c0d3r@...team.com)
RE: phpBB 2.0.17 remote avatar size bug ("Sean Sullivan" <admin@...italwebhost.net>)

September 21 (13 messages)

UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (please_reply_to_security@....com)
Re: UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (xyberpix <xyberpix@...erpix.com>)
Google Secure Access or "How to have people download a trojan." (Berend-Jan Wever <berendjanwever@...il.com>)
Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk ("Kenneth F. Belva" <ken@...security.com>)
Re: Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (please_use_support_form@...website.com)
Re: phpBB 2.0.17 remote avatar size bug (Peter Kieser <pfak@...us.net>)
MDKSA-2005:168 - Updated masqmail packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:166 - Updated clamv packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:167 - Updated util-linux packages fix umount vulnerability (Mandriva Security Team <security@...driva.com>)
[BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.7 (bugtraq@...ph3us.org)
[SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability (snsadv@....co.jp (snsadv))
PocketPC exploitation ("Jose Morales" <mrjoemango2@...mail.com>)
Upcoming Black Hat events announcement (Jeff Moss <jmoss@...ckhat.com>)

September 22 (24 messages)

Re: Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk (hodejo1@....com)
[security bulletin] SSRT5988 rev.1 - HP Tru64 Unix libXpm Remote Denial of Service (DoS) or Execute Privileged Code (security-alert@...com)
Internet Exploiter meets FireFox (Berend-Jan Wever <berendjanwever@...il.com>)
Av, spyware, ddl trojan assesment (Sherwyn Williams <sherwill22@...il.com>)
Microsoft IE 5.2.3 for Mac OSX crash ("Marco Mella" <marco.mella@...ecomitalia.it>)
Re: Microsoft IE 5.2.3 for Mac OSX crash ("Marco Mella" <marco.mella@...ecomitalia.it>)
Microsoft IE 5.2.3 Mac OSX crash ("Mella Marco" <marco.mella@...ecomitalia.it>)
R: Microsoft IE 5.2.3 Mac OSX crash ("Mella Marco" <marco.mella@...ecomitalia.it>)
Apple OSX - TextEdit bug ("Mella Marco" <marco.mella@...ecomitalia.it>)
Protty v.01A (beta) - shellcode execution protection library for Windows NT based systems (Piotr Bania <bania.piotr@...il.com>)
FireFox exploit updated (Berend-Jan Wever <berendjanwever@...il.com>)
OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities (please_reply_to_security@....com)
[SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files (joey@...odrom.org (Martin Schulze))
RE: router worms and International Infrastructure [was: Re: IOS exploit] (martin@...ala.net)
Platinum Secure smartcard security bypass (acidemon@...il.com)
HTTP Request Smuggling - ERRATA (the IIS 48K buffer phenomenon) ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Call to Arms: Rita Scams (Gadi Evron <ge@...uxbox.org>)
[SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (Marc Ruef <maru@...p.ch>)
My Little Forum 1.5 / 1.6beta SQL Injection (retrogod@...ceposta.it)
Hack Dot AE v2 (SpyHat@...Hat.com)
[security bulletin] SSRT5998 Rev.2 HP System Management Homepage (v2.0.x) Denial of Service (DoS) and XSS (security-alert@...com)
Rita Scams Call to Arms - Update (Gadi Evron <ge@...uxbox.org>)
Re: [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (Brion Vibber <brion@...ox.com>)

September 23 (12 messages)

Re: Av, spyware, ddl trojan assesment (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (tim tompkins <timt@...derlinks.org>)
Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow (Secunia Research <vuln@...unia.com>)
Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow (Secunia Research <vuln@...unia.com>)
[USN-186-1] Mozilla and Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Sql injection in jPortal version 2.3.1 (module download) (krasza@...il.com)
TSLSA-2005-0051 - clamav (Trustix Security Advisor <tsl@...stix.org>)
[SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Remote File Inclusion in MyGuestbook (security curmudgeon <jericho@...rition.org>)
PhpMyFAQ 1.5.1 multiple vulnerabilities (retrogod@...ceposta.it)
Re: Rita Scams Call to Arms - Update (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
help us determine what's a Rita phish (Gadi Evron <ge@...uxbox.org>)

September 24 (9 messages)

[ GLSA 200509-16 ] Mantis: XSS and SQL injection vulnerabilities (Thierry Carrez <koon@...too.org>)
[ GLSA 200509-17 ] Webmin, Usermin: Remote code execution through PAM authentication (Thierry Carrez <koon@...too.org>)
AlstraSoft E-Friends Remote Command Exucetion (khc@...mail.org)
MailGust 1.9 SQL Injection (retrogod@...ceposta.it)
My Little Forum 1.5 / 1.6beta SQL Injection (retrogod@...ceposta.it)
"Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Hijacking Bluetooth Headsets for Fun and Profit? ("KF (lists)" <kf_lists@...italmunition.com>)
[SECURITY] [DSA 820-1] New courier packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution (joey@...odrom.org)

September 25 (5 messages)

Re: PocketPC exploitation (Ratter <ratter@...as.cz>)
Re: PocketPC exploitation ("Jose Morales" <mrjoemango2@...mail.com>)
[USN-186-2] Ubuntu 4.10 packages for USN-186-1 Firefox security update (Martin Pitt <martin.pitt@...onical.com>)
[USN-187-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Server crash and motd deletion in MultiTheftAuto 0.5 patch 1 (Luigi Auriemma <aluigi@...istici.org>)

September 26 (4 messages)

Re: [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (brion@...ox.com)
[ GLSA 200509-18 ] Qt: Buffer overflow in the included zlib library (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
FL Studio 5 (.flp file processing) Heap Overflow (varunuppal@...uxmail.org)
SUSE Security Announcement: XFree86-server,xorg-x11-server (SUSE-SA:2005:056) (Thomas Biege <thomas@...e.de>)

September 27 (18 messages)

Announce: RSBAC v1.2.5 released (Amon Ott <ao@...ac.org>)
[ISR] - Novell GroupWise Client Integer Overflow (Francisco Amato <famato@...obyte.com.ar>)
Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein (anonymous@...nymous.com)
[ISR] - Novell GroupWise Client Integer Overflow (famato@...obyte.com.ar)
MDKSA-2005:170 - Updated mozilla packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein (Yutaka OIWA <y.oiwa@...t.go.jp>)
[ISR] - Novell GroupWise Client Integer Overflow (famato@...obyte.com.ar)
lucidCMS 1.0.11 is susceptible to a cross site scripting attack (x1ngbox@...urityfocus.com, gmail@...urityfocus.com, com@...urityfocus.com)
ElseNot project (<layne@...enot.com>)
SEO borad: SQL injection (ghc@....ru)
Nokia 7610, 3210 denial of service in OBEX. ("A. Ramos" <aramosf@...ec.net>)
Re: [ISR] - Novell GroupWise Client Integer Overflow ("Crist J. Clark" <cristjc@...cast.net>)
FreeBSD GNU Mailutils 0.6 imap4d exploit (angelo@...iello.org)
[ GLSA 200509-19 ] PHP: Vulnerabilities in included PCRE and XML-RPC libraries (Thierry Carrez <koon@...too.org>)
CMS Made Simple 0.10 is susceptible to a cross site scripting attack. (X1ngBox@...urityfocus.com, Gmail@...urityfocus.com, COM@...urityfocus.com)
RealPlayer && HelixPlayer Remote Format String Exploit (c0ntexb@...il.com)
PacSec 05 (Dragos Ruiu <dr@....net>)
MDKSA-2005:169 - Updated mozilla-firefox packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)

September 28 (9 messages)

Mantis Bugtracker - Remote Database Scanner and XSS Vulnerabilities (Joxean Guay del Paraguay <joxeankoret@...oo.es>)
[MailServer Resend] Announce: RSBAC v1.2.5 released ("SystemMailbox{9B090266-39CC-48ED-8385-82B1132420DD}" <SystemMailbox{9B090266-39CC-48ED-8385-82B1132420DD…)
Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Is the Bottom Line Impacted by Security Breaches? ("Kenneth F. Belva" <ken@...security.com>)
[SECURITY] [DSA 821-1] New python2.3 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
OpenServer 5.0.7 OpenServer 6.0.0 : UnZip File Permissions Change Vulnerability (please_reply_to_security@....com)
Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC ("Debasis Mohanty" <mail@...kingspirits.com>)
PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure (retrogod@...ceposta.it)
Re: PocketPC exploitation ("Jose Morales" <mrjoemango2@...mail.com>)

September 29 (18 messages)

SquirrelMail Address Add Plugin XSS (Moritz Naumann <info@...itz-naumann.com>)
[NRVA05-08] - Arbitrary file download by NateOn Messagener's ActiveX and DoS ("saintlinu" <saintlinu@...oo.co.kr>)
[USN-188-1] AbiWord vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-189-1] cpio vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[NRVA05-08] - Arbitrary file download by NateOn Messagener's ActiveX and DoS ("saintlinu" <saintlinu@...oo.co.kr>)
[SECURITY] [DSA 824-1] New ClamAV packages fix denial of service (joey@...odrom.org (Martin Schulze))
[USN-190-1] SNMP vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-191-1] unzip vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error (Michael Stone <mstone@...cker.debian.org>)
Serendipity: Account Hijacking / CSRF Vulnerability (enji@...osys.tuwien.ac.at)
Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (warl0ck@...uxmail.org)
Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure (Petko Petkov <ppetkov@...citizen.org>)
[SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
AV == parasites? (was: PocketPC exploitation) (Michael Shigorin <mike@...n.org.ua>)
Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (Paul Laudanski <zx@...tlecops.com>)
Lucid CMS 1.0.11 SQL Injection / Login Bypass / remote code execution (retrogod@...ceposta.it)

September 30 (23 messages)

Zone Labs response to "Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC" ("Zone Labs Security Team" <security@...elabs.com>)
[ GLSA 200509-20 ] AbiWord: RTF import stack-based buffer overflow (Thierry Carrez <koon@...too.org>)
RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein ("Sergey V. Gordeychik" <gordey@...ecurity.ru>)
apachetop insecure temporary file creation (ZATAZ Audits <exploits@...az.net>)
[ GLSA 200509-21 ] Hylafax: Insecure temporary file creation in xferfaxstats script (Thierry Carrez <koon@...too.org>)
[USN-192-1] Squid vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows (joey@...odrom.org (Martin Schulze))
Re: PocketPC exploitation (Denis Jedig <seclists@...eticon.de>)
[SECURITY] [DSA 830-1] New ntlmaps packages fix information leak (joey@...odrom.org (Martin Schulze))
Re: Serendipity: Account Hijacking / CSRF Vulnerability (kreon <kre0n@...l.ru>)
iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (ss_contacts@...mail.com)
Re: PocketPC exploitation (Joel Maslak <jmaslak@...elope.net>)
RE: Re: Bypassing Personal Firewall (Zone Alarm Pro)Using DDE-IPC ("Debasis Mohanty" <mail@...kingspirits.com>)
Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities (Michael Stone <mstone@...cker.debian.org>)
Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure (security curmudgeon <jericho@...rition.org>)
Citrix Metaframe Presentation Server bypassing policies (gustavog@...poitpro.com.ar)
TSLSA-2005-0053 - unzip (Trustix Security Advisor <tsl@...stix.org>)
[SECURITY] [DSA 831-1] New mysql-dfsg packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
UPDATE: [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
Announce: Bluetooth mailing list - Bluetraq (Adam Laurie <adam.laurie@...bunker.net>)
RE: Re: Bypassing Personal Firewall (Zone Alarm Pro)Using DDE-IPC (Paul Laudanski <zx@...tlecops.com>)

438 messages

Powered by blists - more mailing lists