bugtraq mailing list - 2005/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2005/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 18	² 21	³ 18	⁴ 6
⁵ 11	⁶ 12	⁷ 16	⁸ 5	⁹ 23	¹⁰ 7	¹¹ 3
¹² 15	¹³ 22	¹⁴ 20	¹⁵ 26	¹⁶ 20	¹⁷ 6	¹⁸ 12
¹⁹ 9	²⁰ 28	²¹ 25	²² 13	²³ 16	²⁴	²⁵ 2
²⁶	²⁷ 17	²⁸ 13	²⁹ 10	³⁰ 12	³¹ 3

Messages by day:

December 1 (18 messages)

MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities (Mandriva Security Team <security@...driva.com>)
XSS & Header Injection in Drupal and vBulletin (Paul Laudanski <zx@...tlecops.com>)
Re: [VulnWatch] XSS & Header Injection in Drupal and vBulletin ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Re: [VulnWatch] XSS & Header Injection in Drupal and vBulletin (Paul Laudanski <zx@...tlecops.com>)
[USN-220-1] w3c-libwww vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-221-1] racoon vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: DNS query spam (fugi@...org)
Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (Florian Weimer <fw@...eb.enyo.de>)
Re: What is wrong with these people? (Steve Shockley <steve.shockley@...ckley.net>)
PhpX <= 3.5.9 SQL Injection -> login bypass -> remote command/code execution (retrogod@...ceposta.it)
[DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2005-009] Drupal 4.6.4 / 4.5.6 fixes minor access control issue (Uwe Hermann <uwe@...mann-uwe.de>)
Re: WebCalendar Multiple Vulnerabilities (craig@....us)
Sunbelt set to acquire Kerio Personal Firewall (Paul Laudanski <zx@...tlecops.com>)
Re: DNS query spam ("Piotr Kamisiski" <rotunda@....krakow.pl>)
Re: Opera 8.50 DoS with simple java applet ("Yngve N. Pettersen (Developer Opera Software ASA)" <yngve@...ra.com>)
[security bulletin] SSRT4787 Revised - HP Systems Insight Manager (SIM) for HP-UX Remote Denial of Service (DoS) (security-alert@...com)

December 2 (21 messages)

WebCalendar Multiple Vulnerabilities. (lwang@...ng.org)
Microsoft Windows CreateRemoteThread Exploit (q7x@...iyane.com)
[SECURITY] [DSA 914-1] New horde2 packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
Edgewall Trac SQL Injection Vulnerability (David Maciejak <david.maciejak@...ar.fr>)
[xfocus-SD-051202]openMotif libUil Multiple vulnerability ("alert7@...cus.org" <alert7@...cus.org>)
WinEggDropShell Multiple Remote Stack Overflow (Sowhat <smaillist@...il.com>)
Perl format string integer wrap vulnerability (robert@...dsecurity.com)
[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Format String Vulnerabilities in Perl Programs ("Steven M. Christey" <coley@...re.org>)
Re: [DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
[USN-222-1] Perl vulnerability (Martin Pitt <martin.pitt@...onical.com>)
SEC Consult SA-20051202-1 :: GMX Webmail XSS (Sec Consult Research <research@...-consult.com>)
SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs (Sec Consult Research <research@...-consult.com>)
SEC Consult SA-XXXXXXXXXXX (Bernhard Mueller <research@...-consult.com>)
22nd CCC conference in Berlin (Harry Behrens <harry@...rens.com>)
Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 915-1] New helix-player packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
phpMyChat Multiple XSS vulnerabilities. (secresearch@...tinet.com)
Re: Sunbelt set to acquire Kerio Personal Firewall (Nick Boyce <nick.boyce@...il.com>)
Re: Microsoft Windows CreateRemoteThread Exploit (Anton <bolkin@...il.com>)
RE: Microsoft Windows CreateRemoteThread Exploit ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)

December 3 (18 messages)

[Updated] [FLSA-2005:166943] Updated php packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (Mike Caudill <mcaudill@...co.com>)
MDKSA-2005:223 - Updated webmin package fixes format string vulnerability (Mandriva Security Team <security@...driva.com>)
[OpenPKG-SA-2005.026] OpenPKG Security Advisory (lynx) (OpenPKG <openpkg@...npkg.org>)
MDKSA-2005:221 - Updated spamassassin packages fixes vulnerability (Mandriva Security Team <security@...driva.com>)
Re: Re: Microsoft Windows CreateRemoteThread Exploit (warl0ck@...uxmail.org)
eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities (tommie1@...lphia.net)
QNX 4.25 suided dhcp.client binary (lms@...up.pt)
[OpenPKG-SA-2005.025] OpenPKG Security Advisory (perl) (OpenPKG <openpkg@...npkg.org>)
Alisveristr E-Commerce Admin Login SQL İnjection (B3g0k@...kermail.com)
Re: WebCalendar (Louis Wang <bill.louis@...il.com>)
MDKSA-2005:222 - Updated mailman packages fix various vulnerabilities (Mandriva Security Team <security@...driva.com>)
DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability' ("KF (lists)" <kf_lists@...italmunition.com>)
[OpenPKG-SA-2005.027] OpenPKG Security Advisory (php) (OpenPKG <openpkg@...npkg.org>)
PHP-Fusion v6.00.109 SQL Injection and Info. Disclosure (xer0x.west@...il.com)
RE: QNX 4.25 suided dhcp.client binary ("Dan Drinnon" <ddrinnon@...r.net>)
eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities (tommie1@...lphia.net)
Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution: (retrogod@...ceposta.it)

December 4 (6 messages)

more MD5 colliding examples (Gerardo Richarte <gera@...est.com>)
Re: Format String Vulnerabilities in Perl Programs ("Michael J. Pomraning" <mjp@...urepipe.com>)
Re: Re: Format String Vulnerabilities in Perl Programs (Stan Bubrouski <stan.bubrouski@...il.com>)
Re: Format String Vulnerabilities in Perl Programs (Chris Umphress <umphress@...il.com>)
Re: Re: Format String Vulnerabilities in Perl Programs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Format String Vulnerabilities in Perl Programs ("Steven M. Christey" <coley@...us.mitre.org>)

December 5 (11 messages)

Bug with .php extension? (Ron <iago@...hallalegends.com>)
Re: Bug with .php extension? (Chris Umphress <umphress@...il.com>)
[scip_Advisory] e107 v0.6 rate.php manipulation ("Marc Ruef" <maru@...p.ch>)
Re: Bug with .php extension? (Simon Richter <Simon.Richter@...yros.de>)
[USN-223-1] Inkscape vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Bug with .php extension? (Michael Ligh <michael.ligh@...n.org>)
[USN-180-2] MySQL 4.1 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Buffer Overflow in MultiTech VoIP Implementations ("SecurityLab Research" <SLAB_research@...uritylab.net>)
have you ever been BluePIMped? ("KF (lists)" <kf_lists@...italmunition.com>)
[security bulletin] HPSBUX01059 SSRT4704 Revised - HP-UX Running wu-ftpd Local Unauthorized Access (security-alert@...com)
Blog System v1.2 Multiple SQL Injection Vulnerabilities (vipsta@...il.com)

December 6 (12 messages)

Outpost24 Public Security Note: Linux/Elxbot (David Jacoby <security@...post24.com>)
Re: Bug with .php extension? (Ron <iago@...hallalegends.com>)
[USN-224-1] Kerberos vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Horde IMP Webmail Client XSS all versions (Igor <sprog@...ine.ru>)
Re: Horde IMP Webmail Client XSS all versions (Jan Schneider <jan@...de.org>)
[USN-225-1] Apache 2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:067) (Marcus Meissner <meissner@...e.de>)
iDefense Security Advisory 12.05.05: Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Progressive Heap Overflow ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.05.05: Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability ("iDEFENSE Labs" <labs-no-reply@...fense.com>)
IMF 2006- Call for Papers (Oliver Goebel <Goebel@...T.Uni-Stuttgart.DE>)

December 7 (16 messages)

iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
Advisory 24/2005: libcurl URL parsing vulnerability (Stefan Esser <sesser@...dened-php.net>)
Advisory 25/2005: phpMyAdmin Variables Overwrite Vulnerability (Stefan Esser <sesser@...dened-php.net>)
Critical Myspace.com Vulnerabilites (silentproducts@...il.com)
[KAPDA::#15] - ThWboard multiple vulnerabilities (alireza hassani <trueend5@...oo.com>)
SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew (unitedasia@...tedasia.com)
SugarSuite Open Source <= 4.0beta Remote code execution (retrogod@...ceposta.it)
[SECURITY] [DSA 916-1] New Inkscape packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Mobile Antivirus Researchers Assoc. Call for White Papers (contact.removethis@...ovethis.mobileav.org)
DRZES HMS XSS and SQL Injection Vulnerabilities (vipsta@...il.com)
Journal of Computer Virology-Call for Papers (Saeed Abu Nimeh <drellman@...mail.com>)
[ GLSA 200512-01 ] Perl: Format string errors can lead to code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200512-02 ] Webmin, Usermin: Format string vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS) (security-alert@...com)
[KDE Security Advisory] multiple buffer overflows in kpdf/koffice (Dirk Mueller <mueller@....org>)

December 8 (5 messages)

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerabilit… ("labs-no-reply@...fense.com" <labs-no-r…)
[security bulletin] SSRT5954 Revised - HP-UX TCP/IP Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] SSRT051037 HP-UX Running IPSec Remote Unauthorized Access (security-alert@...com)
Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401) (contact.removethis@...ovethis.airscanner.com)
-Exploiting Freelist[0] On Windows XP Service Pack 2- ("Brett Moore" <brett.moore@...urity-assessment.com>)

December 9 (23 messages)

[SECURITY] [DSA 917-1] New courier packages fix unauthorised access (joey@...odrom.org (Martin Schulze))
3com product security hole (jaime.blasco@...ent.com)
Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution (retrogod@...ceposta.it)
= 1.2.6d blind SQL injection / remote commands execution: (retrogod@...ceposta.it)
New Project Started ("NaPa" <napa@...uritynation.com>)
New Project Started ("NaPa" <napa@...uritynation.com>)
[USN-226-1] Courier vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[security bulletin] SSRT051069 - HP Tru64 Unix Secure Web Server (SWS 6.4.1 and earlier) PHP/XMLRPC Remote Unauthorized Execution of Arbit… (security-alert@...com)
[TKPN2005-12-001] Multiple critical vulnerabilities in MyBB (tk@...pkit.de)
Milliscript 1.4 Multiple Vulnerabilities ("NaPa" <napa@...uritynation.com>)
Re: 3com product security hole (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[KAPDA::#16] - SMF SQL Injection (alireza hassani <trueend5@...oo.com>)
Milliscript 1.4 Multiple Vulnerabilities ("NaPa" <napa@...uritynation.com>)
Milliscript 1.4 Multiple Vulnerabilities ("NaPa" <napa@...uritynation.com>)
[KDE Security Advisory] multiple buffer overflows in kpdf/koffice ("Dirk Mueller" <mueller@....org>)
MDKSA-2005:224 - Updated curl package fixes format string vulnerability (Mandriva Security Team <security@...driva.com>)
TSLSA-2005-0070 - multi (Trustix Security Advisor <tsl@...stix.org>)
[SECURITY] [DSA 918-1] New osh packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
MDKSA-2005:225 - Updated perl package fixes format string vulnerability (Mandriva Security Team <security@...driva.com>)
Motorola SB5100E Cable Modem DoS (Алексей Синцов <don_@...sers.ru>)
PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer (H D Moore <sflist@...italoffense.net>)
Re: 3com product security hole (Nicob <nicob@...ob.net>)

December 10 (7 messages)

Apani Network Response to ISAKMP cert-fi:7710 Alert (mkuch@...ni.securityfocus.com)
Re: [KAPDA::#16] - SMF SQL Injection (grudge@...urityfocus.com, simplemachines@...urityfocus.com, org@...urityfocus.com)
Flatnuke 2.5.6 privilege escalation / remote commands execution exploit (retrogod@...ceposta.it)
MDKSA-2005:206-1 - Updated openvpn packages fix multiple vulnerabilities (Mandriva Security Team <security@...driva.com>)
DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks! (Major Malfunction <majormal@...ate-radio.org>)
Torrential 1.2 Directory Traversal (Shell <shell6@...il.com>)
Re: [DCG] DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks! (racerx <racerx@...loitersteam.org>)

December 11 (3 messages)

Re: [KAPDA::#16] - SMF SQL Injection (ascii <ascii@...amail.com>)
SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Tu… (Johannes Greil <j.greil@...-consult.com…)
[ GLSA 200512-03 ] phpMyAdmin: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

December 12 (15 messages)

SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution ("SEC Consult Research" <research@...-consult.com>)
[scip_Advisory] NetGear RP114 Flooding Denial of Service ("Marc Ruef" <maru@...p.ch>)
Re: [scip_Advisory] NetGear RP114 Flooding Denial ofService ("Morning Wood" <se_cur_ity@...mail.com>)
[ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation (Thierry Carrez <koon@...too.org>)
[USN-227-1] xpdf vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-222-2] Perl vulnerability (Martin Pitt <martin.pitt@...onical.com>)
iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.…)
[USN-228-1] curl library vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 919-1] New curl packages fix potential security problem (joey@...odrom.org (Martin Schulze))
BTGrup Admin WebController Script SQL injection (khc@...mail.org)
IMOEL CMS Sql password discovery (silversmith@...iyane.com)
Guestserver guestbook system vulnerabilities (jaakko@...ke.fi)
Re: Re: [KAPDA::#16] - SMF SQL Injection (retrogod@...ceposta.it)
oracle not only offeder - researchers NOT responsible? (Gadi Evron <ge@...uxbox.org>)
Re: Re: [KAPDA::#16] - SMF SQL Injection (polnby@...oo.com)

December 13 (22 messages)

Re: Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (JHannah01@...il.com)
Re: Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution (ryan@...sitebaker.org)
Arab Portal v2 Beta2 SQL Injections (stranger-killer@...mail.com)
[PHP-CHECKER] 99 potential SQL injection vulnerabilities (php-checker@...de.stanford.edu)
Status on PGP NTFS File Wipe issue, 11 Dec 2005 (Jon Callas <jon@....com>)
[OpenPKG-SA-2005.028] OpenPKG Security Advisory (curl) (OpenPKG <openpkg@...npkg.org>)
Re: Re: [KAPDA::#16] - SMF SQL Injection ("Steven M. Christey" <coley@...re.org>)
Re: [scip_Advisory] NetGear RP114 Flooding Denial of Service (Thierry Zoller <Thierry@...ler.lu>)
Re: iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability (Owen Dhu <0wnj00@...il.com>)
[USN-229-1] Zope vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability ("Advisories" <Advisories@...e.com>)
Re: [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability (Joshua Russel <joshua.russel@...il.com>)
Re: [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability (Ron <iago@...hallalegends.com>)
Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability ("Dave Korn" <davek_throwaway@...mail.com>)
phpCOIN 1.2.2 multiple vulnerabilities (retrogod@...ceposta.it)
MDKSA-2005:226 - Updated mozilla-thunderbird package fix vulnerability in enigmail (Mandriva Security Team <security@...driva.com>)
Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation (Paul Wouters <paul@...erance.com>)
Re: Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability (Tom Ferris <tommy@...urity-protocols.com>)
RE: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability ("Marc Maiffret" <mmaiffret@...e.com>)
Secunia Research: Internet Explorer Suppressed "Download Dialog" Vulnerability (Secunia Research <vuln@...unia.com>)
[SECURITY] [DSA 920-1] New ethereal packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug (liz0@...mail.com)

December 14 (20 messages)

RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation (VANHULLEBUS Yvan <yvan.vanhullebus@...asq.com>)
Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation (Thierry Carrez <koon@...too.org>)
Business Objects WebIntelligence 6.5x Account Lockout and System DoS (Michael M Kemp <mkemp4@....com>)
[USN-230-1] ffmpeg vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200512-05 ] Xmail: Privilege escalation through sendmail (Thierry Carrez <koon@...too.org>)
[ GLSA 200512-06 ] Ethereal: Buffer overflow in OSPF protocol dissector (Thierry Carrez <koon@...too.org>)
LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution (retrogod@...ceposta.it)
Disclosure timelines from vendors - a promising practice? ("Steven M. Christey" <coley@...re.org>)
iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability ("labs-no-reply@...fense.com" <labs-no-repl…)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure ("labs-no-reply@...fense.com" <labs-no-reply@...fen…)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.c…)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
[PHP-CHECKER] 99 potential SQL injection vulnerabilities (Yichen Xie <yxie@...stanford.edu>)
[OpenPKG-SA-2005.029] OpenPKG Security Advisory (apache) (OpenPKG <openpkg@...npkg.org>)
Re: [PHP-CHECKER] 99 potential SQL injection vulnerabilities (Andy Lindeman <alindeman@...il.com>)
Bypass XSS filter in PHPNUKE 7.9=>x (max@...tsuper.pl)
DIMVA 2006 - 2nd Call for Papers (thomas@...e.de (Thomas Biege))
Re: IMOEL CMS Sql password discovery ("Steven M. Christey" <coley@...re.org>)

December 15 (26 messages)

SUSE Security Announcement: php4, php5 (SUSE-SA:2005:069) (Ludwig Nussel <ludwig.nussel@...e.de>)
[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Business Objects WebIntelligence 6.5x Account Lockout and System DoS (mkemp4@....com)
SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:068) (Marcus Meissner <meissner@...e.de>)
CodeCon submission deadline reminder (Len Sassaman <rabbi@...itum.com>)
Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability (Secunia Research <vuln@...unia.com>)
Re: Re: Re: [KAPDA::#16] - SMF SQL Injection (grudge@...urityfocus.com, simplemachines@...urityfocus.com, org@...urityfocus.com)
Re: Countering Trusting Trust through Diverse Double-Compiling (Mike Lisanke <mikelisanke@...il.com>)
[SECURITY] [DSA 922-1] New Linux 2.6.8 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[scip_Advisory 1910] Alkacon OpenCms 6.0.2 login Cross Site Scripting ("Marc Ruef" <maru@...p.ch>)
[ GLSA 200512-07 ] OpenLDAP, Gauche: RUNPATH issues (Thierry Carrez <koon@...too.org>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
MDKSA-2005:227 - Updated ethereal packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
Re: Countering Trusting Trust through Diverse Double-Compiling ("David A. Wheeler" <dwheeler@....org>)
MDKSA-2005:228 - Updated xine-lib packages fix buffer overflow vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:229 - Updated xmovie packages fix buffer overflow vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:231 - Updated ffmpeg packages fix buffer overflow vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:232 - Updated gstreamer-ffmpeg packages fix buffer overflow vulnerability (Mandriva Security Team <security@...driva.com>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
Metasploit Framework v3.0 Alpha Release 1 (H D Moore <sflist@...italoffense.net>)
RE: RLA ("Remote LanD Attack") ("Roger A. Grimes" <roger@...neretcs.com>)
Patches available for IBM AIX flaws ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)

December 16 (20 messages)

Notacon Call for Proposals open ("Paul Schneider" <froggy@...acon.org>)
CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution (Mariano Nuñez Di Croce <mnunez@...sec.com>)
MarmaraWeb E-commerce Remote Command Exucetion (B3g0k@...kermail.com)
MarmaraWeb E-commerce Script Cross Site Scripting (B3g0k@...kermail.com)
[security bulletin] SSRT4728 rev.1 - HP-UX running TCP/IP Remote Denial of Service (DoS) (security-alert@...com)
AIX Heap Overflow paper ("David Litchfield" <davidl@...software.com>)
[ GLSA 200512-08 ] Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Bios Information Leakage ("Jonathan Brossard" <jbrossar@...sel.emse.fr>)
[USN-230-2] ffmpeg/xine-lib vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Countering Trusting Trust through Diverse Double-Compiling ("David A. Wheeler" <dwheeler@....org>)
[ GLSA 200512-09 ] cURL: Off-by-one errors in URL handling (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Patches available for IBM AIX flaws (Shiva Persaud <shivapd@...tin.ibm.com>)
phpCOIN-1.2.2-Full-2005 SQL Injection (stranger-killer@...mail.com)
ZRCSA-200505: libremail - "pop.c" Format String Vulnerability (deepfear@...e-h.fr)
Re: Patches available for IBM AIX flaws ("David Litchfield" <davidl@...software.com>)
iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping' (Kevin Finisterre <kfinisterre@....ohio-state.edu>)
DoS in Cisco Clean Access (alex@....sk)
Advisory: XSS in WebCal (v1.11-v3.04) (Stan Bubrouski <stan.bubrouski@...il.com>)
Re: Bios Information Leakage (Ron van Daal <ronvdaal@....nl>)

December 17 (6 messages)

exploit (html) for Advanced Guestbook 2.2 (irc0d3r@...oo.com)
RE: RLA ("Remote LanD Attack") ("Patrick Galligan" <Patrick.Galligan@...ghtcentre.com.au>)
Update on the PGP NTFS File Wipe Issue, 16 Dec 2005 (Jon Callas <jon@....com>)
Bug in HC (hackeriri@...oo.com)
Microsoft IIS Remote Denial of Service (DoS) .DLL Url exploit (inge.henriksen@...leansoft.com)
Fullpath disclosure in roundcube webmail (king_purba@...oo.co.uk)

December 18 (12 messages)

Re: Bypass XSS filter in PHPNUKE 7.9=>x (Paul Laudanski <zx@...tlecops.com>)
Re: Fullpath disclosure in roundcube webmail ("Steven M. Christey" <coley@...re.org>)
phpMyAdmin server_privileges.php SQL Injection Vulnerabilities. ("Alice Bryson" <abryson@...efocus.com>)
[FLSA-2005:152787] Updated redhat-config-nfs package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:152832] Updated lynx package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:155510] Updated gtk2 packages fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:152892] Updated enscript package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2005:152870] Updated a2ps package fixes security issue (fedora-legacy-announce@...hat.com)
[FLSA-2005:168326] Updated util-linux and mount packages fix security issue (fedora-legacy-announce@...hat.com)
[FLSA-2005:166939] Updated openssl packages fix security issues (fedora-legacy-announce@...hat.com)
[ GLSA 200512-10 ] Opera: Command-line URL shell command injection (Thierry Carrez <koon@...too.org>)
Re: Guidance Software Customer Database Hacked? ("Jason Coombs" <jasonc@...ence.org>)

December 19 (9 messages)

Re: Re: Guidance Software Customer Database Hacked? ("J.A. Terranson" <measl@....org>)
Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
RE: RLA ("Remote LanD Attack") (alessandroa@...ctelecom.net.br)
[SECURITY] [DSA 923-1] New dropbear packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Unauthenticated EIGRP DoS ("Andrew A. Vladimirov" <mlists@...ont.com>)
Authenticated EIGRP DoS / Information leak ("Andrew A. Vladimirov" <mlists@...ont.com>)
Making unidirectional VLAN and PVLAN jumping bidirectional ("Andrew A. Vladimirov" <mlists@...ont.com>)
Re: Making unidirectional VLAN and PVLAN jumping bidirectional (Clayton Kossmeyer <ckossmey@...co.com>)
Re: phpMyAdmin server_privileges.php SQL Injection Vulnerabilities. (michal@...ar.com)

December 20 (28 messages)

about phpMyAdmin's server_privileges.php announced vulnerability (Marc Delisle <Marc.Delisle@...epsherbrooke.qc.ca>)
[security bulletin] SSRT051026 rev. 1 - HP-UX running WBEM Services Denial of Service (DoS) (security-alert@...com)
MDKSA-2005:233 - Updated apache2 packages fix vulnerability in worker MPM (Mandriva Security Team <security@...driva.com>)
Re: Unauthenticated EIGRP DoS ("Paul Oxman \(poxman\)" <poxman@...co.com>)
RE: Authenticated EIGRP DoS / Information leak ("Paul Oxman \(poxman\)" <poxman@...co.com>)
Vulnerability in Metadot portal server allows users to gain administrative privileges (Gerry Chng <gerry.chng@...il.com>)
[ACSSEC-2005-11-27-0x2] Remote Overflows in Mailenable Enterprise 1.1 / Professional 1.7 (Security Advisories <Security-Advisories@...-inc.com>)
[ACSSEC-2005-11-27-0x1] Eudora Qualcomm WorldMail 3.0 IMAP4 Servi ce 6.1.19.0 (Security Advisories <Security-Advisories@...-inc.com>)
[ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability (Security Advisories <Security-Advisories@...-inc.com>)
[ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow (Security Advisories <Security-Advisories@...-inc.com>)
[ACSSEC-2005-11-25-0x4] FTGate 4.4 [Build 4.4.000 Oct 26 2005] St ack Buffer Overflow (Security Advisories <Security-Advisories@...-inc.com>)
[ACSSEC-2005-11-25-0x6] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow (Security Advisories <Security-Advisories@...-inc.com>)
[ GLSA 200512-11 ] CenterICQ: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
Symantec Antivirus Library Remote Heap Overflows (list@...0te.com)
Re: Re: RLA ("Remote LanD Attack") (Synister Syntax <synistersyntaxlist@...il.com>)
iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite ("labs-no-reply@...fense.com" <labs-no-reply@...fense.c…)
iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-re…)
Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass (darkz.gsa@...il.com)
[security bulletin] SSRT5983 rev.1 - HP-UX Running Software Distributor (SD) Remote Unauthorized Access (security-alert@...com)
Digital Armaments Security Advisory 12.20.2005: WEBsweeper/MIMEsweeper Executable File Content Check bypass Vulnerability (info@...italarmaments.com)
Acidcat ASP CMS Multiple Vulnerabilities (h e <het_ebadi@...oo.com>)
PHPGedView <= 3.3.7 remote code execution (retrogod@...ceposta.it)
[Overflow.pl] Blender BlenLoader Integer Overflow (Damian Put <pucik@...rflow.pl>)
Secunia Research: Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities (Secunia Research <vuln@...unia.com>)
IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent ("Advisories" <advisories@...plc.com>)
IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation ("Advisories" <advisories@...plc.com>)
IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack ("Advisories" <advisories@...plc.com>)
MDKSA-2005:234 - Updated sudo packages fix vulnerability (Mandriva Security Team <security@...driva.com>)

December 21 (25 messages)

Re: Guidance ("Jason Coombs" <jasonc@...ence.org>)
Re: Re: Guidance ("J.A. Terranson" <measl@....org>)
[ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others (Security Advisories <Security-Advisories@...-inc.com>)
Re: Re: Guidance ("Jason Coombs" <jasonc@...ence.org>)
Re: Re: Guidance ("J.A. Terranson" <measl@....org>)
[ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others (Security Advisories <Security-Advisories@...-inc.com>)
[Hat-Squad] Remote Heap Corruption Vulnerability in Interaction SIP Proxy (service@...-squad.com)
Call for Paper - VI National Computer and Information Security Conference - COLOMBIA (Jeimy José Cano Martínez <jcano@...andes.edu.co>)
[ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2 (the_day@...o.or.id)
Workshop "Dependability Aspects in DWH and Mining applications"Deadline:15-01-06 (Manh Tho <manhthovn@...il.com>)
Tolva PHP website system Remote File Include (beford <xbefordx@...il.com>)
[KAPDA::#17] - beehiveforum Script Injection (alireza hassani <trueend5@...oo.com>)
security patch for Linux Kernel 2.6 (breno@...angolinux.org)
Re: Symantec Antivirus Library Remote Heap Overflows (ltr@....upenn.edu)
[ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2 (Dedi@...urityfocus.com, Dwianto@...urityfocus.com (the_day@...o.or.id))
[Security-Advisories@...-inc.com: [Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX… ("Andrew Griffiths" <andrewg@...inemenac…)
mIRC buffer overflow (Crowdat Kurobudetsu <crowdat@...il.com>)
Re: XSS bypass in PHPNuke - FIX ? (Paul Laudanski <zx@...tlecops.com>)
[SECURITY] [DSA 924-1] New nbd packages fix potential arbitrary code execution (joey@...odrom.org (Martin Schulze))
Cisco Security Response: DoS in Cisco Clean Access (Clayton Kossmeyer <ckossmey@...co.com>)
iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fen…)
WinRAR - Processing Filename Incorrectly Vulnerability (agoanywhere@...mail.com)
XSS vulnerabilities in Google.com ("Watchfire Research" <security-research@...chfire.com>)
VMware vulnerability in NAT networking (vmware-security-alert@...are.com)
Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability (ovt@...center.ru)

December 22 (13 messages)

[USN-231-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
Privilege escalation in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) (Reed Arvin <reedarvin@...il.com>)
MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities (Mandriva Security Team <security@...driva.com>)
fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348) (ma+bt@...e-technik.uni-dortmund.de)
[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
CYBSEC - Security Advisory: httprint Multiple Vulnerabilities (Mariano Nuñez Di Croce <mnunez@...sec.com>)
Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Privilege escalation in McAfee VirusScanEnterprise 8.0i (patch 11) and CMA 3.5 (patch 5) (Steven Rakick <stevenrakick@...oo.com>)
Privilege escalation in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) (Reed Arvin <reedarvin@...il.com>)
Webwasher CSM Appliance Script Security Restriction Bypass (d0t v0rt3x <d0tv0rt3x@...il.com>)
XSS&Sql injection attack in PHP-Fusion 6.00.3 Released (krasza@...il.com)
[ GLSA 200512-12 ] Mantis: Multiple vulnerabilities (Stefan Cornelius <dercorny@...too.org>)

December 23 (16 messages)

Re: Privilege escalation in McAfee VirusScanEnterprise 8.0i (patch 11) and CMA 3.5 (patch 5) (Steven Rakick <stevenrakick@...oo.com>)
dtSearch DUNZIP32.dll Buffer Overflow Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
SEC Consult SA-20051223-0 :: Multiple Cross Site Scripting Vulnerabilities in OracleAS Discussion Forum Portlet (Johannes Greil <j.greil@...-consult.com>)
SEC Consult SA-20051223-1 :: File Disclosure using df_next_page parameter in OracleAS Discussion Forum Portlet (Johannes Greil <j.greil@...-consult.com>)
[ GLSA 200512-13 ] Dropbear: Privilege escalation (Stefan Cornelius <dercorny@...too.org>)
[USN-232-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
New site location (shadown <shadown@...il.com>)
Blind MySQL injection database stressing tool.. for hackers! ("kanutron (lists)" <mailinglists@...utron.net>)
html in simpbook (zeus olimpusklan <zeus.olimpusklan@...il.com>)
New site location (shadown <shadown@...il.com>)
RE: Webwasher CSM Appliance Script Security Restriction Bypass ("Frank Berzau" <frank@...erguard.com>)
[ GLSA 200512-14 ] NBD Tools: Buffer overflow in NBD server (Thierry Carrez <koon@...too.org>)
[TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB (tk@...pkit.de)
[SECURITY] [DSA 926-2] New ketm packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
Multiple Network-related Vulnerabilities in Electric Sheep (MichaelAiello@...haelAiello.com)
Electric Sheep window-id stack overflow (MichaelAiello@...haelAiello.com)

December 25 (2 messages)

Multiple Translation websites Cross Site Scripting vulnerability: Google, Altavista, IBM, freetranslation, worldlingo, etc (simo@...x.org)
Yahoo mail Cross Site Scripting vulnerability (simo@...x.org)

December 27 (17 messages)

MDKSA-2005:236 - Updated fetchmail packages fix vulnerability (Mandriva Security Team <security@...driva.com>)
MDKSA-2005:237 - Updated cpio packages fix buffer overflow on x86_64 (Mandriva Security Team <security@...driva.com>)
[ GLSA 200512-15 ] rssh: Privilege escalation (Stefan Cornelius <dercorny@...too.org>)
Dev web management system <= 1.5 SQL injection / cross site scripting (retrogod@...ceposta.it)
CFP - IT Underground 2006, Prague, Czech Republic (Piotr Sobolewski <piotr.sobolewski@...eta.pl>)
Found new bug (hackeriri@...oo.com)
Airscanner Mobile Security Advisory #0508310 Spb Kiosk Engine Administrator Password & Information Disclosure (contact.removethis@...ovethis.airscanner.com)
[SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #1 (bugtraq@...ph3us.org)
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #2 (bugtraq@...ph3us.org)
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #3 (bugtraq@...ph3us.org)
Obsidis n1 released! (angelo@...iello.org)
Cerberus Helpdesk multiple vulnerabilities. ("A. Ramos" <aramosf@...ec.net>)
Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities (Secunia Research <vuln@...unia.com>)
[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
Malware sample site (mvalsmith@...il.com)
bug in oscomerce (zeus olimpusklan <zeus.olimpusklan@...il.com>)

December 28 (13 messages)

Juniper NSM remote Denial Of Service (David Maciejak <david.maciejak@...ar.fr>)
Is this a new exploit? (noemailpls@...mail.ziper)
RE: Someone wasted a nice bug on spyware... ("Paul" <pvnick@...il.com>)
[ GLSA 200512-16 ] OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library (Thierry Carrez <koon@...too.org>)
MDKSA-2005:238 - Updated php/php-mbstring packages fix mail injection vulnerability (Mandriva Security Team <security@...driva.com>)
Exploitation of Windows WMF on the web (Daniel Bonekeeper <thehazard@...il.com>)
Re: Is this a new exploit? (H D Moore <sflist@...italoffense.net>)
[BUGZILLA] Security advisory for Bugzilla < 2.16.11 (David Miller <justdave@...zilla.org>)
Re: Is this a new exploit? (redxii1234@...mail.com)
Re: Is this a new exploit? (Andreas Marx <gega-it@....de>)
RE: Is this a new exploit? ("Portz, Jon" <jportz@...rce.com>)
Re: Someone wasted a nice bug on spyware... (Tomasz Kokowski <Tomasz.Kokowski@....poznan.pl>)
WMF Exploit (davidribyrne@...oo.com)

December 29 (10 messages)

WMF Exploit (davidribyrne@...oo.com)
[ GLSA 200512-17 ] scponly: Multiple privilege escalation issues (Thierry Carrez <koon@...too.org>)
PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion (retrogod@...ceposta.it)
[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
RE: WMF Exploit ("Hayes, Bill" <Bill.Hayes@....com>)
RE: [Full-disclosure] Someone wasted a nice bug on spyware... ("Jim Serino" <jim.serino@...dspring.com>)
WMF exploit (ninjapicook@...il.com)
Airscanner Mobile Security Advisory #05083102 Spb Kiosk Engine Program Bypass (contact.removethis@...ovethis.airscanner.com)
Advisory 26/2005: TinyMCE Compressor Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
Black Hat Federal and Europe Call for Papers (Jeff Moss <jmoss@...ckhat.com>)

December 30 (12 messages)

[ GLSA 200512-18 ] XnView: Privilege escalation (Thierry Carrez <koon@...too.org>)
rssh: root privilege escalation flaw (Derek Martin <code@...zashack.org>)
phpbb2.0.19 fixes security issues (Paul Laudanski <zx@...tlecops.com>)
Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability (Secunia Research <vuln@...unia.com>)
Re: Exploitation of Windows WMF on the web (psgw@...ernode.on.net)
WTF?? (veil_of_darkness@...oo.com)
RE: WMF Exploit ("Derick Anderson" <danderson@...us.com>)
Yahoo mail Cross Site Scripting vulnerability (simo@...x.org)
WMF browser-ish exploit vectors ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
RE: WMF Exploit (Bill Busby <williambusby2001@...oo.com>)
[KAPDA::#18] - WebWiz Products SQL Injection (advisory@...da.ir)
Re: WMF Exploit (Paul Laudanski <zx@...tlecops.com>)

December 31 (3 messages)

PHPDocumentor Cross-Site Scripting (zeus olimpusklan <zeus.olimpusklan@...il.com>)
MyBB XSS cross-site scripting (addmimistrator@...il.com)
MyBB 1.0 SQL injection in uploading file (addmimistrator@...il.com)

409 messages

Powered by blists - more mailing lists