bugtraq mailing list - 2005/11

Messages by day:

November 1 (12 messages)

• APPLE-SA-2005-10-31 Mac OS X v10.4.3 (<noreply@...urityfocus.com>)
• readdir_r considered harmful (Ben Hutchings <ben@...adentplace.org.uk>)
• Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo() (Stefan Esser <sesser@....net>)
• HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability (h4cky0u <h4cky0u.org@...il.com>)
• Re: readdir_r considered harmful (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Snort Back Orifice Preprocessor Exploit (Win32 targets) (Kira <trir00t@...il.com>)
• Re: readdir_r considered harmful (Ben Hutchings <ben@...adentplace.org.uk>)
• Gateway 7001 A/B/G AP: Selection of improper regulatory domains and channels (Andrew Lockhart <alockhart@...workchemistry.com>)
• [tool] multispoof - parallel spoofing for throughput increase (Pawel Pokrywka <publicpp@...il.com>)
• Re: readdir_r considered harmful (Ben Hutchings <ben@...adentplace.org.uk>)
• VUBB XSS & path disclosure Vulnerabilities (alireza hassani <trueend5@...oo.com>)
• HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability (h4cky0u.org@...il.com)

• Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• On Interpretation Conflict Vulnerabilities ("Steven M. Christey" <coley@...re.org>)
• [ GLSA 200511-01 ] libgda: Format string vulnerabilities (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-02 ] QDBM, ImageMagick, GDAL: RUNPATH issues (Thierry Carrez <koon@...too.org>)
• Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access (Cisco Systems Product Security Incident Response Team <psirt…)
• Simple PHP Blog: Multiple XSS Vulnerabilities (enji@...osys.tuwien.ac.at)
• [SECURITY] [DSA 880-1] New phpmyadmin packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS) (security-alter@...com)
• MDKSA-2005:203 - Updated gda2.0 packages fix string format vulnerability (Mandriva Security Team <security@...driva.com>)
• Advisory 17/2005: phpBB Multiple Vulnerabilities (sesser@...dened-php.net)
• MDKSA-2005:202 - Updated squirrelmail packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
• Buffer-overflow in GO-Global for Windows 3.1.0.3270 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in Scorched 3D 39.1 (Luigi Auriemma <aluigi@...istici.org>)
• [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
• Buffer-overflow in Glider collect'n kill 1.0.0.0 (Luigi Auriemma <aluigi@...istici.org>)
• Limited directory traversal in NeroNET 1.2.0.2 (Luigi Auriemma <aluigi@...istici.org>)
• MDKSA-2005:204 - Updated wget packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
• [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header (Thierry Zoller <Thierry@...ff-em.com>)
• Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0 (Luigi Auriemma <aluigi@...istici.org>)
• Buffer-overflow and crash in FlatFrag 0.3 (Luigi Auriemma <aluigi@...istici.org>)
• Socket termination in Battle Carry .005 (Luigi Auriemma <aluigi@...istici.org>)
• [OpenPKG-SA-2005.023] OpenPKG Security Advisory (openvpn) (OpenPKG <openpkg@...npkg.org>)
• Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• FW: [SR #:1-40483753] RE: Update for the magic byte bug ("Auri Rahimzadeh" <auri@...i.net>)

• [CIRT.DK] Ipswitch Whatsup small Business 2004 - Directory Traversal ("CIRT.DK Advisory" <advisory@...t.dk>)
• Re: Advisory 18/2005: PHP Cross Site Scripting (XSS)XVulnerability in phpinfo() (<phole@...hmail.com>)
• Re: On Interpretation Conflict Vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
• Black Hat Federal and Europe CFP and Registration now open (Jeff Moss <jmoss@...ckhat.com>)
• Stack Overflow Basics (Nish@...urityfocus.com, "[a-t]"@securityfocus.com, security@...urityfocus.com, compass@...urityfocus.com, dot@...urityfocus.com, com@se…)

• CuteNews 1.4.1 remote code execution (retrogod@...ceposta.it)
• Norton Unerase - Need Contact ("alex cottle" <eddie5659@...mail.com>)
• Mambo Open Source, Path disclosure (alireza hassani <trueend5@...oo.com>)
• On Interpretation Conflict Vulnerabilities ("Steven M. Christey" <coley@...re.org>)
• H4-CREW-000003 Advirosy: Superclick XSS via popup.php (tHe cReW <h4xorcrew@...il.com>)
• Advisory: Apple QuickTime Player Remote Integer Overflow (2) (Piotr Bania <bania.piotr@...il.com>)
• Advisory: Apple QuickTime Player Remote Integer Overflow (1) (Piotr Bania <bania.piotr@...il.com>)
• Advisory: Apple QuickTime Player Remote Denial Of Service (Piotr Bania <bania.piotr@...il.com>)
• Advisory: Apple QuickTime PICT Remote Memory Overwrite (Piotr Bania <bania.piotr@...il.com>)
• [ GLSA 200511-03 ] giflib: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• Re: Advisory 18/2005: PHP Cross Site Scripting (XSS)XVulnerability in phpinfo() (Robert Waters <robert.waters.nospam@...il.com>)
• Remotely DoSing JBoss 4.0.2 with serialized java objects (Marc Schoenefeld <marc.schoenefeld@....org>)
• [SECURITY] [DSA 881-1] New OpenSSL 0.9.6 packages fix cryptographic weakness (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness (joey@...odrom.org (Martin Schulze))
• Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability (Secunia Research <vuln@...unia.com>)
• ZDI-05-002: Clam Antivirus Remote Code Execution (zdi-disclosures@...m.com)
• Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability (Marc Schoenefeld <marc.schoenefeld@....org>)
• SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064) (Ludwig Nussel <ludwig.nussel@...e.de>)

• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability (<Advisories@...e.com>)
• Re: readdir_r considered harmful (Casper.Dik@....COM)
• DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability' (kfinisterre <kfinisterre@....ohio-state.edu>)
• Sql injection in ibProArcade (bhfh01@...il.com)
• Re: Mambo Open Source, Path disclosure (Vasiliy <security@...ol.ru>)
• Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability (sikikmail@...il.com)
• XSS & SQL injection in phpWebThing (xx_hack_xx_2004@...mail.com)
• I-Saudi.Com First K-S-A WarGamE (S3ude@...mail.com)
• Apache Tomcat 5.5.x remote Denial Of Service (David Maciejak <david.maciejak@...ar.fr>)
• Invision Power Board Privilege Esaclation (2.0.1 + more) (Anti Matter <antimatter@...il.com>)
• Xss - Html injection in XMB (s2b@...mail.com)
• Failles dans Invision Power Board 2.1 [xss] (benjilenoob@...mail.com)
• [waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier (come2waraxe@...oo.com)
• Re: OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (v9 <v9@...ehalo.us>)
• Zoomblog HTML Injection Vulnerability (sikikmail@...il.com)

• Zoomblog HTML Injection Vulnerability (sikikmail@...il.com)
• Gallery_v2.4 SQL Injection (abducter_minds@...oo.com)
• Re: Re: readdir_r considered harmful (Ulrich Drepper <drepper@...il.com>)
• Re: Re: readdir_r considered harmful (Ulrich Drepper <drepper@...il.com>)
• Re: Re: readdir_r considered harmful (Casper.Dik@....COM)
• [ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200511-05 ] GNUMP3d: Directory traversal and XSS vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200511-06 ] fetchmail: Password exposure in fetchmailconf (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-07 ] OpenVPN: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)

• Re: Re: readdir_r considered harmful (Andrew Farmer <andfarm@...il.com>)
• SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites (Bernhard Mueller <research@...-consult.com>)
• SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption (Bernhard Mueller <research@...-consult.com>)
• [USN-214-1] libungif vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• EUSecWest/London Call for Papers and PacSec/Tokyo announcements (Dragos Ruiu <dr@...sec.jp>)
• [TKADV2005-11-001] Multiple vulnerabilities in PHPlist (tk@...pkit.de)
• [ Suresec Advisories ] - Mac OS X (xnu) multiple information leaks. (suresec advisories <advisories@...esec.org>)
• Is Flash Player 5 not vulnerable or not supported?... Macromedia Flash Player ActionDefineFunction Memory Corruption (Ken S <ken.securitylist@...il.com>)
• Re: Is Flash Player 5 not vulnerable or not supported?... Macromedia Flash Player ActionDefineFunction Memory Corrupti… (Juha-Matti Laurio <juha-matti.laurio@ne…)
• [SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness (joey@...odrom.org (Martin Schulze))
• Re: Zoomblog HTML Injection Vulnerability (RBA <rba@...stas.com>)
• [SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 809-3] New squid packages fix regression (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 885-1] New OpenVPN packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow (inge.henriksen@...leansoft.com)
• [USN-215-1] fetchmailconf vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• OSTE v1.0 Remote Command Exucetion (khc@...mail.org)
• Path disclosure in CuteNews <= 1.4.0 (poizon@...urityinfo.ru)

• [SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation (joey@...odrom.org (Martin Schulze))
• XSS vulnerability in names.co.uk framed hosting (reuben.31@...kname.net)
• upload phpshell in PHPFM (GeekZ@...urityfocus.com, "[at]"@securityfocus.com, WorldDefacers@...urityfocus.com, "[d0t]"@securityfocus.com, NeT@...urityfocus.com)
• Invision Power Board 2.1 : Multiple XSS Vulnerabilities (Jerome Athias <jerome.athias@...e.fr>)
• TWiki 20030201 VIEW string remote command execution (GeekZ@...urityfocus.com, "[at]"@securityfocus.com, WorldDefacers@...urityfocus.com, "[d0t]"@securityfocus.…)
• Asterisk vmail.cgi vulnerability (advisories+asterisk@...urance.com.au)
• Advanced Guestbook 2.2 ( SQL Injection Exploit ) (bhs_team@...oo.com)
• Re: Re: Mambo Open Source, Path disclosure (trueend5@...oo.com)
• Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability ("Debasis Mohanty" <debasis@...kingspirits.com>)
• Re: [Full-disclosure] Re: readdir_r considered harmful (Casper.Dik@....COM)
• RANKBOX <= XSS vulnerability ("spyburn mexico rlz" <spy-burn@...mail.com>)
• e107 Games System exploit (willey_wonka@...mail.com)
• LayerOne 2006 CFP Released (Layer One <layeronecfp@...il.com>)
• Hidden accounts on sony vaio laptops (yash.kadakia@...urityforge.com)
• Re: Re: readdir_r considered harmful (Andrew Miller <andrew@...l.com>)
• Advisory 21/2005: Multiple vulnerabilities in PHPKIT (Christopher Kunz <christopher.kunz@...dened-php.net>)
• Re: Re: readdir_r considered harmful (Casper.Dik@....COM)
• Oracle October 2005 CPU Problems ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• Oracle DBMS_ASSERT and the October 2005 CPU ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• Call For Papers (first-2006papers@...st.org)
• MDKSA-2005:205 - Updated clamav packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
• [SECURITY] [DSA 889-1] New enigmail packages fix information disclosure (joey@...odrom.org (Martin Schulze))
• Re: Hidden accounts on sony vaio laptops ("Williams, James K" <James.Williams@...com>)
• [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) (<Advisories@...e.com>)
• [EEYEB-20050329] Windows Metafile Multiple Heap Overflows (<Advisories@...e.com>)

• [USN-151-4] rpm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• MDKSA-2005:206 - Updated openvpn packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
• [SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS (Leandro Meiners <lmeiners@...sec.com>)
• CYBSEC - Security Advisory: Phishing Vector in SAP WAS (Leandro Meiners <lmeiners@...sec.com>)
• CYBSEC - Security Advisory: Multiple XSS in SAP WAS (Leandro Meiners <lmeiners@...sec.com>)
• Multiple security issues in TikiWiki 1.9.x (Moritz Naumann <securityfocus.com@...itz-naumann.com>)
• Antville 1.1 Cross Site Scripting (Moritz Naumann <securityfocus.com@...itz-naumann.com>)
• New Bug KESM in GoogleTalk (natalylopez380@...mail.com)
• ASPKnowledgebase vulnerable to SQL-inject (preben@...chcom.no)
• ASPKnowledgebase vulnerable to XSS injection. (preben@...chcom.no)

• [FLSA-2005:166941] Updated httpd and mod_ssl packages fix two security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FS-05-01] Multiple vulnerabilities in phpAdsNew (Toni Koivunen <toni.koivunen@...sec.com>)
• [security bulletin] SSRT051041 Revised - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (security-alert@...com)
• [security bulletin] SSRT051064 Revised - HP-UX ftpd Remote Unauthorized Data Access (security-alert@...com)
• [security bulletin] SSRT051014 - HP-UX Trusted Mode remshd Remote Unauthorized Access (security-alert@...com)
• [security bulletin] SSRT051012 - HP-UX envd Local Execution of Privileged Code (security-alert@...com)
• MDKSA-2005:207 - Updated libungif packages fix various vulnerabilities (Mandriva Security Team <security@...driva.com>)
• MDKSA-2005:208 - Updated emacs packages fix Lisp vulnerability (Mandriva Security Team <security@...driva.com>)
• MDKSA-2005:209 - Updated fetchmail packages fixes fetchmailconf vulnerability (Mandriva Security Team <security@...driva.com>)
• MDKSA-2005:210 - Updated w3c-libwww packages fixes DoS vulnerability. (Mandriva Security Team <security@...driva.com>)
• Re: New Bug KESM in GoogleTalk (crowdat@...il.com)
• [SECURITY] [DSA 892-1] New awstats packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
• Folder Guard exe files protection bypass (ShadowBeast@...erdevelop.com)
• [SECURITY] [DSA 804-2] New kdelibs packages fix backup file information leak (joey@...odrom.org (Martin Schulze))
• Moodle <=1.6dev blind SQL Injection (retrogod@...ceposta.it)
• [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow (<Advisories@...e.com>)
• [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II (<Advisories@...e.com>)

• iDEFENSE Security Advisory 11.10.05: Stack Overflow in Veritas Netbackup Enterprise Server ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
• iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
• phpBB 2.0.18 SQL Query problem (Maksymilian Arciemowicz <max@...tsuper.pl>)

• High Risk Flaw in RealPlayer ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)

• Advisory 22/2005: Multiple vulnerabilities in phpSysInfo (Christopher Kunz <christopher.kunz@...dened-php.net>)
• [ GLSA 200511-08 ] PHP: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-09 ] Lynx: Arbitrary command execution (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-10 ] RAR: Format string and buffer overflow vulnerabilities (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-11 ] linux-ftpd-ssl: Remote buffer overflow (Thierry Carrez <koon@...too.org>)

• [FLSA-2005:152848] Updated glibc packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• Walla TeleSite Multiple Vulnerabilities ("sinneR" <rafiware@...eqint.net>)
• SQL injection in phpWebThing 1.4.4 (A.1.M@...mail.com)
• MDKSA-2005:211 - Updated lynx packages fix critical vulnerability (Mandriva Security Team <security@...driva.com>)
• Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) (syini666@...il.com)
• ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities (Siegfried <siegfri3d@...il.com>)
• PHPCalendar (and some more codegrrl.com products) arbitrary code execution (r.verton@...il.com)
• PollVote Remote File Inclusion (stormhacker@...mail.com)
• XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection (retrogod@...ceposta.it)
• DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow' (Kevin Finisterre <kf@...italmunition.com>)
• [SECURITY] [DSA 893-1] New acidlab packages fix SQL injection (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 895-1] New uim packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
• fipsCMS light - vulnerable to script injection. (preben@...chcom.no)
• [ADVISORY] CISCO ASA Failover DoS Vulnerability ("Amin Tora" <atora@...US.com>)
• [KAPDA::#12] - ekinboard XSS and HTML Injection (alireza hassani <trueend5@...oo.com>)
• [security bulletin] HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized Access (security-alert@...com)
• Beta product testing ("Bill Stout" <bill.stout@...enborder.com>)
• MD4 and MD5 collision generators (sflist@...italoffense.net)
• List of Security-oriented Fairs/Events/Conferences? (Rainer Duffner <rainer@...ra-secure.de>)
• GAO report on e-voting (Atom Smasher <atom@...sher.org>)
• phpBB 2.0.18 SQL Query problem (max@...tsuper.pl)

• Re: New Bug KESM in GoogleTalk (Cory Altheide <cory@...gle.com>)
• Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Malware Removal and Prevention Procedure (Paul Laudanski <zx@...tlecops.com>)
• Midicart sql injection (crazy frog crazy frog <i.m.crazy.frog@...il.com>)
• 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin (bhs_team@...oo.com)
• Cyphor (Release: 0.19) Sql injection (s2b@...mail.com)
• Multible Sql injections in Wizz Forum (s2b@...mail.com)
• [FLSA-2005:152794] Updated rp-pppoe package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FLSA-2005:123013] Updated xchat package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• [FLSA-2005:158801] Updated bzip2 packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• RE: [ADVISORY] CISCO ASA Failover DoS Vulnerability ("Randy Ivener (rivener)" <rivener@...co.com>)
• [SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability ("alert7@...cus.org" <alert7@...cus.org>)
• [PHPADSNEW-SA-2005-002] phpAdsNew and phpPgAds 2.0.7 fix multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
• [FS-05-02] Multiple vulnerabilities in phpMyAdmin (Toni Koivunen <toni.koivunen@...sec.com>)
• [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
• Three years and ten months without a patch ("David Litchfield" <davidl@...software.com>)
• [ GLSA 200511-13 ] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer (Thierry Carrez <koon@...too.org>)
• Re: List of Security-oriented Fairs/Events/Conferences? (Saeed Abu Nimeh <drellman@...mail.com>)
• RE: List of Security-oriented Fairs/Events/Conferences? (Jeremy Epstein <jeremy.epstein@...methods.com>)
• PHPWCMS - Directory traversal vulnerability,CSS attack (Stefan Lochbihler <steve01@...llo.at>)
• Re: DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow' (Dana Hudes <dhudes@...-ip.info>)
• [SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: phpBB 2.0.18 SQL Query problem (Ron van Daal <ronvdaal@....nl>)
• Re: [FLSA-2005:152794] Updated rp-pppoe package fixes security issue ("David F. Skoll" <devnull@...ringpenguin.com>)
• [SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Three years and ten months without a patch ("David Litchfield" <davidl@...software.com>)
• Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability (Thierry Zoller <Thierry@...ler.lu>)
• Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS (r.verton@...il.com)
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fen…)

• Re: Midicart sql injection (exoduks@...urityfocus.com, "[at]"@securityfocus.com, gmail.com@...urityfocus.com)
• Template Seller Pro 3.25 (r.verton@...il.com)
• RE: List of Security-oriented Fairs/Events/Conferences? ("dave kleiman" <dave@...cureu.com>)
• [securityzone@...romedia.com: Macromedia Security Bulletins] (<noreply@...urityfocus.com>)
• Authentication vulnerability in Belkin wireless devices (Andrei Mikhailovsky <mlists@...ont.com>)
• Re: phpBB 2.0.18 SQL Query problem (max@...tsuper.pl)
• Critical SQL Injection PHPNuke <= 7.8 (sp3x@...urityreason.com)
• APPLE-SA-2005-11-15 iTunes 6 for Windows (<noreply@...urityfocus.com>)
• RE: Re: [xfocus-AD-051115]Multiple antivirus failedto scan malicous filename bypass vulnerability ("Aditya Deshmukh" <aditya.deshmukh@...ine.gateway.strangled.…)
• Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability (Marco Monicelli <marco.monicelli@...cegaglia.com>)
• freeftpd USER bufferoverflow (barabas mutsonline <barbsie@...il.com>)
• [USN-216-1] GDK vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Database servers on XP and the curious flaw ("David Litchfield" <davidl@...software.com>)
• [ GLSA 200511-14 ] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities (Thierry Carrez <koon@...too.org>)
• Re: Database servers on XP and the curious flaw (Eliah Kagan <degeneracypressure@...il.com>)
• Re: Database servers on XP and the curious flaw ("David Litchfield" <davidl@...software.com>)
• Re: Database servers on XP and the curious flaw (Eliah Kagan <degeneracypressure@...il.com>)
• Re: Database servers on XP and the curious flaw (Eliah Kagan <degeneracypressure@...il.com>)
• RE: List of Security-oriented Fairs/Events/Conferences? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• RE: Database servers on XP and the curious flaw ("James Tucker" <jftucker@...il.com>)
• Re: Database servers on XP and the curious flaw (Eliah Kagan <degeneracypressure@...il.com>)
• Schneier's PasswordSafe password validation flaw (info@...omsoft.com)
• SUSE Security Announcement: gdk-pixbuf, gtk2 (SUSE-SA:2005:065) (Thomas Biege <thomas@...e.de>)
• Database servers on XP and the curious flaw ("David Litchfield" <davidl@...software.com>)
• Buffer Overrun in FTGate4 Groupware Mail server (io@...aercoli.it)
• Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone (Cisco Systems Product Security Incident Response Team <psirt@…)
• In response to ISAKMP 'vulnerabilities' (<sigint@...h.com>)
• Re: Authentication vulnerability in Belkin wireless devices (Andrei Mikhailovsky <mlists@...ont.com>)
• [security bulletin] SSRT051251 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Servi… (security-alert@...com)
• Re: List of Security-oriented Fairs/Events/Conferences? (Luca Sambucci <bugtraq@...a.su>)
• [security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS) (Security Alert <secure@...hs.cup.hp.com>)
• Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone (Cisco Systems Product Security Incident Response Team <psirt…)

• MDKSA-2005:212 - Updated egroupware packages to address phpldapadmin, phpsysinfo vulnerabilities (Mandriva Security Team <security@...driva.com>)
• Buffer OverFlow For Php 4.3.10 and other ?? Local (papipsycho@...mail.com)
• [security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS) (security-alert@...com)
• iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com…)
• ShmooCon 2006 - Washington DC (B Potter <gdead@...oo.com>)
• MDKSA-2005:213 - Updated php packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
• [KAPDA::#13] - XMB HTML Injection & Path Disclosure. (alireza hassani <trueend5@...oo.com>)
• [SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: freeftpd MKD buffer overflow etc... [exploit] ("Expanders" <expanders@...ero.it>)

• Google Base (Petko Petkov <ppetkov@...citizen.org>)
• Snagging Security Tokens to Elevate Privileges ("David Litchfield" <davidl@...software.com>)
• RE: Google Base ("Christopher Carpenter" <ccarpenter@...a.net>)
• [ GLSA 200511-15 ] Smb4k: Local unauthorized file access (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: Google Base (Petko Petkov <ppetkov@...citizen.org>)
• RE: Google Base ("Krpata, Tyler" <tkrpata@....com>)
• [SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak (joey@...odrom.org (Martin Schulze))
• Snagging Security Tokens to Elevate Privileges ("David Litchfield" <davidl@...software.com>)
• PHP-Fusion <= 6.00.206 Multiple Vulnerabilities (r.verton@...il.com)
• Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities (Secunia Research <vuln@...unia.com>)
• Secunia Research: Winmail Server Multiple Vulnerabilities (Secunia Research <vuln@...unia.com>)

• Re: New Bug KESM in GoogleTalk (kahrny@...il.com)
• Re: Google Base (DRE <dre2004@...il.com>)
• Re: PHP-Fusion <= 6.00.206 Multiple Vulnerabilities (sheldon@...-fusion.co.uk)
• Mambo 0day Exploit out in the wild - mambo/skype hacked (rebarz99@...il.com)
• MDKSA-2005:214 - Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
• [SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [security - exponentcms] (Hans Wolters <hans.wolters@...all.nl>)
• [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ (tk@...pkit.de)

• Re: Google Base (Alexander Klimov <alserkli@...ox.ru>)

• Re: Re: Google Base (Petko Petkov <ppetkov@...citizen.org>)
• [USN-190-2] ucs-snmp vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [USN-217-1] Inkscape vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [ GLSA 200511-16 ] GNUMP3d: Directory traversal and insecure temporary file creation (Thierry Carrez <koon@...too.org>)
• cracking safes with thermal imaging (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Security Advisory: Struts Error Message Cross Site Scripting ("Irene Abezgauz" <irene@...ktics.com>)
• [USN-218-1] netpbm vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• APBoard v [all] ---> [SQL injection] (ksa_ksa82@...mail.com)
• [SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow (inge.henriksen@...leansoft.com)
• [SECURITY] [DSA 811-2] New common-lisp-controller packages fix arbitrary code injection (joey@...odrom.org (Martin Schulze))
• Metro Olografix Crypto Meeting 2006 CFP (Angelo Dell'Aera <buffer@...grafix.org>)
• Google Search Appliance proxystylesheet Flaws (H D Moore <sflist@...italoffense.net>)
• Re: Cisco Clean Access Agent (Perfigo) bypass (fakemeail@...oo.com)
• [SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 903-1] New unzip packages fix unauthorised permissions modification (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))

• Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability (securityadvisory@...puterterrorism.com)
• Gadu-Gadu several vulnerabilities (version <= 7.20) (Jaroslaw Sajko <sloik@....poznan.pl>)
• IE BUG, Mozilla DOS? (admin@...ech.org)
• Cisco PIX TCP Connection Prevention ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
• Re: Your One-Stop Site For Sony Lawsuit Info ("Anthony R. Nemmer" <intertwingled@...st.net>)
• [USN-219-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount (Thierry Carrez <koon@...too.org>)
• [SECURITY] [DSA 905-1] New mantis packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Jason Coombs <jasonc@...ence.org>)
• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Paul Schmehl <pauls@...allas.edu>)
• [SECURITY] [DSA 906-1] New sylpheed packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Jason Coombs <jasonc@...ence.org>)
• RE: Re: Your One-Stop Site For Sony Lawsuit Info ("Christopher Carpenter" <ccarpenter@...a.net>)
• RE: Re: Your One-Stop Site For Sony Lawsuit Info (Paul Schmehl <pauls@...allas.edu>)
• Re: Google Base (Petko Petkov <ppetkov@...citizen.org>)
• PmWiki 2.0.12 Cross Site Scripting (Moritz Naumann <securityfocus.com@...itz-naumann.com>)
• [KAPDA::#14] - PHPPost XSS and HTML Injection (alireza hassani <trueend5@...oo.com>)
• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Anonymous Squirrel <anonymous.squirrel@...il.com>)
• [ GLSA 200511-18 ] phpSysInfo: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• VHCS 2.x HTTP Error Cross Site Scripting (Moritz Naumann <securityfocus.com@...itz-naumann.com>)
• [ GLSA 200511-19 ] eix: Insecure temporary file creation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Eliah Kagan <degeneracypressure@...il.com>)
• Horde MIME Viewer vulnerability (daniel.schreckling@...urityfocus.com, at@...urityfocus.com, informatik.uni-hamburg.de@...urityfocus.com)
• [ GLSA 200511-20 ] Horde Application Framework: XSS vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Exploiting the Stack (Part I-IV) (Nish@...urityfocus.com, "[at]"@securityfocus.com, securitycompass@...urityfocus.com, "[dot]"@securityfocus.com, com@...urity…)

• Re: Re: Your One-Stop Site For Sony Lawsuit Info (Kurt Buff <kurt.buff@...il.com>)
• [SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak (joey@...odrom.org (Martin Schulze))
• Secunia Research: Opera Command Line URL Shell Command Injection (Secunia Research <vuln@...unia.com>)
• Re: Google Base (Stefan.Laudat@...ianztiriac.ro)
• OTRS 1.x/2.x Multiple Security Issues (Moritz Naumann <securityfocus.com@...itz-naumann.com>)
• [security bulletin] SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access (security-alert@...com)
• [SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
• GeSWall Intrusion Prevention System 2.1 Released (Freeware) (GentleSecurity Team <gsw@...tlesecurity.com>)
• [SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: IE BUG, Mozilla DOS? (Kyle Wheeler <kyle-bugtraq@...oryhole.net>)
• [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
• Google Talk Denial of Service - BenjiBug (James Evans <iamjamesevans@...il.com>)
• XSS on Yahoo Mail (Richard Fuchshuber <richardfuch@...oo.com.br>)
• MDKSA-2005:215 - Updated binutils packages fix vulnerabilities (Mandriva Security Team <security@...driva.com>)

• MailEnable IMAP DOS (Josh Zlatin <jzlatin@...at.cc>)
• Advisory 23/2005: vTiger multiple vulnerabilities (Christopher Kunz <christopher.kunz@...dened-php.net>)
• Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow (Secunia Research <vuln@...unia.com>)
• [SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion (joey@...odrom.org (Martin Schulze))
• RE: XSS on Yahoo Mail (Will Wesley <willwesleyccna@...oo.de>)
• freeFTPd 1.0.10 (Dos,Exploit) (Stefan Lochbihler <steve01@...llo.at>)
• 2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security (Manh Tho <manhthovn@...il.com>)
• Re: VHCS 2.x HTTP Error Cross Site Scripting (Moritz Naumann <securityfocus.com@...itz-naumann.com>)

• SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM ("SEC Consult Research" <research@...-consult.com>)
• [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution (Thierry Carrez <koon@...too.org>)
• MDKSA-2005:216 - Updated fuse packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
• eFiction <= 2.0 multiple vulnerabilities (retrogod@...ceposta.it)
• Mandriva Security (newbug@...urityfocus.com, "[at]"@securityfocus.com, chroot.org@...urityfocus.com)
• Re: Advisory 23/2005: vTiger multiple vulnerabilities (Christopher Kunz <christopher.kunz@...dened-php.net>)
• Advisory 23/2005: vTiger multiple vulnerabilities (Christopher Kunz <christopher.kunz@...dened-php.net>)

• XSS in PBLang 4.65 Profile.php/UCP.php (r0xes@....org)
• Re: XSS on Yahoo Mail (Steven Champeon <schampeo@...keth.com>)
• Re: XSS on Yahoo Mail (Will Wesley <willwesleyccna@...oo.de>)
• Re: XSS on Yahoo Mail ("Jim Ley" <jim@...bering.com>)
• Re: XSS on Yahoo Mail (Personal Account <jetflash@...pop.com>)
• Re: XSS on Yahoo Mail (little.hacker@...il.com)
• RE: Advisory 23/2005: vTiger multiple vulnerabilities ("Bug Traq Lists" <bug.traq.mail@...il.com>)
• Re: Mandriva Security (Vincent Danen <vdanen@...driva.com>)
• RE: XSS on Yahoo Mail (Richard Fuchshuber <richardfuch@...oo.com.br>)
• Webistanbul Control Panel Sql Injection (khc@...mial.org)
• Re: XSS on Yahoo Mail (alireza hassani <trueend5@...oo.com>)
• Re: XSS on Yahoo Mail (Matan Peled <chaosite@...il.com>)
• Remote file include in Athena (gb.network@...il.com)
• Remote file include in Q-News (gb.network@...il.com)
• Remote file include in phpgreetz (gb.network@...il.com)

• [ GLSA 200511-22 ] Inkscape: Buffer overflow (Thierry Carrez <koon@...too.org>)
• [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow (Thierry Carrez <koon@...too.org>)
• Free Web Stat Multiple XSS Vulnerabilities (ascii <ascii@...amail.com>)
• Php Web Statistik Multiple Vulnerabilities (ascii <ascii@...amail.com>)
• WebCalendar Multiple Vulnerabilities (ascii <ascii@...amail.com>)
• [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow (koon@...too.org)
• ANN: Free endpoint security software released (Core FORCE 070.105) (Core FORCE team <force@...ce.coresecurity.com>)
• Guppy <= 4.5.9 Remote code execution (retrogod@...ceposta.it)
• APC Security Advisory - PowerChute Network Shutdown's Web Interface Only Supports HTTP (Security.advisory@...c.com)
• Re: XSS on Yahoo Mail (Lance James <lancej@...urescience.net>)
• ZRCSA-200503 - ktools Buffer Overflow Vulnerability (siegfried@...e-h.org)
• Re: phpBB Code EXEC (v2.0.10) (deane10@...global.net)
• DNS query spam ("Piotr Kamisiski" <rotunda@....krakow.pl>)
• Re: Multiple security issues in TikiWiki 1.9.x (mose@...iwiki.org)
• Randshop all versiyon Sql &#304;njection (liz0@...mail.com)
• - Cisco IOS HTTP Server code injection/execution vulnerability- (picardos@...ra.es)
• Kadu remote DoS (michal@....bz)
• Google Talk cleartext credentials in process memory (unknown.pentester@...il.com)
• What is wrong with these people? (Paul Schmehl <pauls@...allas.edu>)
• Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (Florian Weimer <fw@...eb.enyo.de>)
• Flaw in Syn Attack Protection on non-updated Microsoft OSes can lead to DoS ("Luigi Mori" <lm@...bolic.it>)
• Re: phpBB Code EXEC (v2.0.10) (Ron van Daal <ronvdaal@....nl>)

• Core FORCE and OpenBSD PF's (Ivan Arce <ivan.arce@...esecurity.com>)
• [FLSA-2005:166943] Updated php packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• Panda Remote Heap Overflow (list@...0te.com)
• Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• [SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))

• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (limfung@...il.com)
• Xaraya <= 1.0.0 RC4 D.O.S / file corruption (retrogod@...ceposta.it)
• ASP-Rider Default.asp SQL Injection (info@...er.com)
• Webmin miniserv.pl format string vulnerability (advisory@...dsecurity.com)
• APPLE-SA-2005-11-29 Security Update 2005-009 (<noreply@...urityfocus.com>)
• Re: DNS query spam (Alexander Lourier <aml@...ezz.ru>)
• Re: DNS query spam ("Josep Ma Castells" <jcb@...tells.com>)
• Re: DNS query spam (Antone Roundy <antone@...kotribe.com>)
• N-13 News Remote SQL/PHP Shell injection (contropotere@...urityfocus.com, *AT*@...urityfocus.com, gmail@...urityfocus.com, *DOT*@...urityfocus.com, com@...uri…)
• possible privilege escalation on QNX Neutrino 6.3.0 (pasquale minervini <minervini@...ralnoise.com>)
• Re: DNS query spam ("Piotr Kamisiski" <rotunda@....krakow.pl>)
• RE: - Cisco IOS HTTP Server code injection/execution vulnerability- ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (picardos@...ra.es)
• Re: DNS query spam (Florian Weimer <fw@...eb.enyo.de>)
• Re: WebCalendar Multiple Vulnerabilities (Paul Laudanski <zx@...tlecops.com>)
• Re: WebCalendar Multiple Vulnerabilities (ascii <ascii@...amail.com>)
• Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption (Paul Laudanski <zx@...tlecops.com>)
• Re: DNS query spam (Florian Weimer <fw@...eb.enyo.de>)
• Re: DNS query spam (Jim Pingle <jim@...isp.com>)
• [SECURITY] [DSA 912-1] New centericq packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Re: DNS query spam (Stephen Stuart <stuart@...h.org>)
• Gallery 2.x Security Advisory (Bharat Mediratta <bharat@...alto.com>)
• Re: DNS query spam (Joe <joe@...tpc.com>)
• Opera 8.50 DoS with simple java applet (Marc Schoenefeld <marc.schoenefeld@....org>)
• MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities (Mandriva Security Team <security@...driva.com>)
• MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities (Mandriva Security Team <security@...driva.com>)
• Re: Opera 8.50 DoS with simple java applet (Edward D Wiget <ewiget@...studios.com>)
• MDKSA-2005:217 - Updated netpbm packages fix pnmtopng vulnerabilities (Mandriva Security Team <security@...driva.com>)
• Re: Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption (retrogod@...urityfocus.com, at@...urityfocus.com, aliceposta@...urityfocus.com, it@...urityfocus.com)

425 messages

Powered by blists - more mailing lists