bugtraq mailing list - 2006/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2006/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 23	² 21	³
⁴ 29	⁵ 25	⁶ 21	⁷ 25	⁸ 18	⁹ 14	¹⁰
¹¹ 24	¹² 29	¹³ 11	¹⁴ 23	¹⁵ 18	¹⁶ 15	¹⁷
¹⁸ 19	¹⁹ 15	²⁰ 17	²¹ 31	²² 9	²³ 7	²⁴
²⁵ 11	²⁶ 11	²⁷ 9	²⁸ 11	²⁹ 6	³⁰ 6	³¹

Messages by day:

December 1 (23 messages)

[ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability (infection@...l.kz)
safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow) (Solar Designer <solar@...nwall.com>)
contentserv 4.x (capt.nem0@....de)
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION (blueshisha@...e-mail.net)
LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities (jesper.jurcenoks@...vigilance.com)
Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Invision Gallery 2.0.7 SQL Injection Vulnerability (infection@...l.kz)
Re: Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability (emin@...anov.com)
[SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation (Steve Kemp <skx@...ian.org>)
[ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability (security@...driva.com)
[ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability (security@...driva.com)
rPSA-2006-0221-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
[Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites (Advisory@...a-Security.Net)
deV!L`z Clanportal - Arbitrary File Upload [061124b] (Tim Weber <scy-adv@...tale.de>)
deV!L`z Clanportal - SQL Injection [061124a] (Tim Weber <scy-adv@...tale.de>)
Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability (dh@...ereddefense.com)
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite (Noah Meyerhans <noahm@...ian.org>)
Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability (Matousec - Transparent security Research <research@...ousec.co…)
rPSA-2006-0220-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)

December 2 (21 messages)

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
rPSA-2006-0224-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)
Aspee Ziyareti Defteri (tr) Sql injection Vuln. (ShaFuq31@...MaiL.CoM)
TSLSA-2006-0068 - multi (Trustix Security Advisor <tsl@...stix.org>)
rPSA-2006-0222-1 tar (rPath Update Announcements <announce-noreply@...th.com>)
Re: safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow) (Simon Josefsson <simon@...efsson.org>)
freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability ("-= SHELL =- -= SHELL =-" <she1l@...mail.com>)
[ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability (security@...driva.com)
[Aria-Security Team] DuWare DuNews SQL Injection Vuln (Advisory@...a-Security.Net)
[Aria-Security Team] DuWare DuClassMate SQL Injection Vuln (Advisory@...a-Security.Net)
[Aria-Security Team] DuWare DuPortal SQL Injection Vuln (Advisory@...a-Security.Net)
PHPNews 1.3.0 XSS (emulamex@...mail.com)
KhaledMuratList mdb (blasterim@...mail.com)
[ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability (security@...driva.com)
[Aria-Security Team] DuWare DuDownloads SQL Injection Vuln (Advisory@...a-Security.Net)
CuteNews 1.3.6 XSS (emulamex@...mail.com)
[Aria-Security Team] DuWare DuForum SQL Injection Vuln (Advisory@...a-Security.Net)
[Aria-Security Team] DuWare DuPaypal SQL Injection Vuln (Advisory@...a-Security.Net)

December 4 (29 messages)

[ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS (ISecAuditors Security Advisories <advisories@...cauditors.com>)
listpics v5 (blasterim@...mail.com)
[ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln. (ShaFuq31@...MaiL.CoM)
[ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail (ISecAuditors Security Advisories <advisories@...cauditors.com>)
fl0p - passive L7 flow fingerprinting (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Online BookMarks Multiple SQL Injection/XSS Vulnerabilities (security@...ilon.com)
[SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
SMF upload XSS vulnerability ("Jessica Hope" <jessicasaulhope@...glemail.com>)
2[xss]Vulnerabilities in Script Mobile Ac4p.com (gamr-14@...mail.com)
PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting (ajannhwt@...mail.com)
MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit (ajannhwt@...mail.com)
[SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
Vt-Forum Lite System V.1.3 Xss Vuln. (starext@....com)
Re: UPublisher Exploit - Superfreaker (me@...rhere.cc)
[Aria-Security Team] uGestBook SQL Injection Vuln (Advisory@...a-Security.Net)
Re: Invision Gallery 2.0.7 SQL Injection Vulnerability (emin@...anov.com)
[SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Multiple bugs in TFT-Gallery (nj@...kerz.ir)
F-Prot Antivirus for Unix: heap overflow and Denial of Service (research@...g.net)
Re: aBitWhizzy [local file include] (john.goodman@...erse.net)
[USN-391-1] libgsf vulnerability (Kees Cook <kees@...ntu.com>)
[ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability (security@...driva.com)
Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (ss_team <ssteam.pl@...il.com>)
[USN-392-1] xine-lib vulnerability (Kees Cook <kees@...ntu.com>)
XSS in JAB Guest Book (nj@...kerz.ir)
rPSA-2006-0211-2 doxygen libpng (rPath Update Announcements <announce-noreply@...th.com>)

December 5 (25 messages)

Re: Multiple bugs in TFT-Gallery (simo64@...x.org)
new xss in modbb forum (h angel <angel_h6@...oo.fr>)
TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities (TSRT@...m.com)
SNORT Covered channels detector patch (fryxar fryxar <fryxar@...oo.com.ar>)
RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation ("Michael Scheidell" <scheidell@...nap.net>)
[KOffice security advisory] KOffice OLEfilter integer overflow (Dirk Mueller <mueller@....org>)
Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: GnuPG 1.4 and 2.0 buffer overflow (Damien Miller <djm@...drot.org>)
Re: Evolve Merchant[ injection sql ] (tony@...xinternet.com)
URL Rdirecction Bug Yahoo (matrix@...kerz.ir)
Re: [Aria-Security Team] uGestBook SQL Injection Vuln (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features (Mariano Nuñez Di Croce <mnunez@...sec.com>)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal (Mariano Nuñez Di Croce <mnunez@...sec.com>)
DistrRTgen 1.0 launched! ("Martin Jørgensen" <martin.westergaard@...il.com>)
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (eugeny gladkih <john@...eb.com>)
[SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Steve Shockley <steve.shockley@...ckley.net>)
EasyPage Portal ( all ver )SQL Injection (matrix@...kerz.ir)
Re: Symantec LiveState Agent for Windows vulnerabi (Damjan <damjan@...esec.com>)
eEye's Zero-Day Tracker Launch ("chinese soup" <noodle.mastah@...il.com>)
Re: Re: [Aria-Security Team] uGestBook SQL Injection Vuln (saps.audit@...il.com)
Re: Symantec LiveState Agent for Windows vulnerabi (eugeny gladkih <john@...eb.com>)
Re: EasyPage Portal ( all ver )SQL Injection (saps.audit@...il.com)
[security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and U… (security-alert@...com)

December 6 (21 messages)

Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS) (security-alert@...com)
EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability ("eEye Advisories" <Advisories@...e.com>)
[ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability (security@...driva.com)
[USN-390-2] evince vulnerability (Kees Cook <kees@...ntu.com>)
Barracuda Convert-UUlib library buffer overflow leads to remote compromise (Jean-Sébastien Guay-Leroux <jean-sebastien@...y-leroux.com>)
Internet Explorer 6. CSS Expression Denial of Service (P.o.C.) (José Carlos Nieto Jarquín <xiam.core@...il.com>)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) (José Carlos Nieto Jarquín <xiam.core@...il.com>)
Uploadscript Vulnerabilities: Text file Hash password (hack2prison@...oo.com)
FreeBSD Security Advisory FreeBSD-SA-06:25.kmem (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-06:26.gtar (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Oracle PL/SQL Fuzzing Tool (Joxean Koret <joxeankoret@...oo.es>)
BTSaveMySql 1.2 (acces to config files) (sn0oPy.team@...il.com)
RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation ("Michael Scheidell" <scheidell@...nap.net>)
Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Hendrik Weimer <hendrik@...o.de>)
SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability (research@...antec.com)
GnuPG: remotely controllable function pointer [CVE-2006-6235] (Werner Koch <wk@...code.com>)
rPSA-2006-0226-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability (security@...driva.com)
rPSA-2006-0227-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)

December 7 (25 messages)

Microsoft 0-day word vulnerability - Secunia - Extremely critical ("Ryan Buena" <dreamsbig@...il.com>)
ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
New MySpace worm could be on its way ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Shawn Merdinger" <shawnmer@...il.com>)
[ GLSA 200612-01 ] wv library: Multiple integer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability (info@...italarmaments.com)
Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Andrew Simmons <asimmons@...sagelabs.com>)
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Tomasz Kojm <tkojm@...mav.net>)
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Gadi Evron <ge@...uxbox.org>)
TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability (TSRT@...m.com)
Re: XSS in JAB Guest Book ("Steven M. Christey" <coley@...re.org>)
Some Thoughts about Office Open XML and Malware Detection ("Jan P. Monsch" <jan.monsch@...osion.com>)
[USN-393-1] GnuPG vulnerability (Kees Cook <kees@...ntu.com>)
Re: The Week of Oracle Database Bugs (Tony Jambu <tjambu@...yrinth.net.au>)
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Luke Borg <lborg@...systems.com>)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) ("Andrius Paurys" <andrius.paurys@...il.com>)
phpbb 2.0.x [xss] (saps.audit@...il.com)
[USN-390-3] evince-gtk vulnerability (Kees Cook <kees@...ntu.com>)
Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass ("michele.sandrelli@...amail.com" <michele.sandrelli@...amail.com>)
Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (3APA3A <3APA3A@...URITY.NNOV.RU>)
phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit (crackers_child@...ersavascilar.com)
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Tomasz Kojm <tkojm@...mav.net>)
[USN-393-2] GnuPG2 vulnerabilities (Kees Cook <kees@...ntu.com>)
DUdirectory Admin Panel SQL Injection (Meftun@...tunNet.com)

December 8 (18 messages)

[OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
EEYE: Intel Network Adapter Driver Local Privilege Escalation ("eEye Advisories" <Advisories@...e.com>)
[Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting (Advisory@...a-Security.Net)
[Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting (Advisory@...a-Security.Net)
[Aria-Security Team] cPanel BoxTrapper Cross Site Scripting (Advisory@...a-Security.Net)
TSLSA-2006-0070 - multi (Trustix Security Advisor <tsl@...stix.org>)
[OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
[SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Midicart vulerable (ifx@...u.us)
[CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) ("chinese soup" <noodle.mastah@...il.com>)
LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (advisories@...ec.com)
LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (advisories@...ec.com)
ASX Playlists and Jumping to Conclusions (Sûnnet Beskerming <info@...kerming.com>)
Animated Smiley Generator File Include Vul. (starext@....com)
PHP 5.2.0 session.save_path safe_mode and open_basedir bypass (cxib@...urityreason.com)
[USN-394-1] Ruby vulnerability (Kees Cook <kees@...ntu.com>)

December 9 (14 messages)

PhpBB Toplist 1.3.7 Xss Vuln. (starext@....com)
Enforcing Java Security Manager in Restricted Windows Environments? ("Jan P. Monsch" <jan.monsch@...osion.com>)
iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: XSS in JAB Guest Book (Barnz@...mail.co.uk)
Call For Papers: SecurityOPUS 2007 (Sharkey <pdxsharkey@...il.com>)
[ GLSA 200612-02 ] xine-lib: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
KDPics Multiple Vulnerabities (mr_kaliman@....com)
ProNews V1.5 XSS & SQL Injection (mr_kaliman@....com)
Messageriescripthp V2.0 XSS & SQL Injection (mr_kaliman@....com)
AnnonceScriptHP V2.0 Multiple Vulnerabilities (mr_kaliman@....com)
[SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1232-1] New clamav packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)

December 11 (24 messages)

[SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz (robert@...appsec.org)
[SBDA] - ColdFusion MX7 - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)
Unauthenticated access to IBM Host On-Demand administration pages ("Ferguson, David (Kansas City)" <Dave.Ferguson@...hnetsecurity.com>)
D-LINK DWL-2000AP+ remote DoS (poplix@...uasia.org)
[ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Raphael Marichez <falco@...too.org>)
[ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities (security@...driva.com)
RFIDIOt release - version 0.1i (Adam Laurie <adam.laurie@...bunker.net>)
Firefox 2.0 security bug: Extensions can hide themself ("azurIt" <azurit@...ox.sk>)
ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Multiple vulnerabilities in Winamp Web Interface 7.5.13 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Another, different MS Word 0-day vulnerability reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
looking for security community input (Gadi Evron <ge@...uxbox.org>)
shopsite advisory (DoZ@...kerscenter.com)
Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Another, different MS Word 0-day vulnerability reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup ("Williams, James K" <James.Williams@...com>)
[ GLSA 200612-10 ] Tar: Directory traversal vulnerability (Matthias Geerdsen <vorlon@...too.org>)
The newest Word flaw is due to malformed data structure handling (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup ("Williams, James K" <James.Williams@...com>)
[ GLSA 200612-04 ] ModPlug: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)

December 12 (29 messages)

[ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
RFID access control tokens widely open to cloning (Adam Laurie <adam.laurie@...bunker.net>)
[ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[ GLSA 200612-05 ] KOffice shared libraries: Heap corruption (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability (security@...driva.com)
[ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Raphael Marichez <falco@...too.org>)
Re: The newest Word flaw is due to malformed data structure handling (Alexander Sotirov <asotirov@...ermina.com>)
[ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability (security@...driva.com)
OpenLDAP kbind authentication buffer overflow (Solar Eclipse <solareclipse@...eedom.org>)
[SBDA] SiteKiosk - FileSystem Access ("Brett Moore" <brett.moore@...urity-assessment.com>)
Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability (rko.thelegendkiller@...il.com)
rPSA-2006-0230-1 evince (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0231-1 squirrelmail (rPath Update Announcements <announce-noreply@...th.com>)
Re: PHP 5.2.0 session.save_path safe_mode and open_basedir bypass (Ismail Donmez <ismail@...dus.org.tr>)
ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
BLOG:CMS Remote file include Vulnerability (security@...or.net)
Re: [fuzzing] OWASP Fuzzing page (Joxean Koret <joxeankoret@...oo.es>)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) ("chinese soup" <noodle.mastah@...il.com>)
Re: The newest Word flaw is due to malformed data structure handling ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Secunia Research: Internet Explorer Script Error Handling Memory Corruption (Secunia Research <remove-vuln@...unia.com>)
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability (zdi-disclosures@...m.com)
[ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability (zdi-disclosures@...m.com)
[ GLSA 200612-13 ] libgsf: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200612-14 ] Trac: Cross-site request forgery (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: shopsite advisory (bugtraq@...nkworks.com)
ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Re: Re: The newest Word flaw is due to malformed data structure handling (test@...t.pl)

December 13 (11 messages)

iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: worksystem => Remote File Include Vulnerability Exploit (Laurent.van_den_reysen@...cali.fr)
[SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks (Steve Kemp <skx@...ian.org>)
ASP Cmd Shell On IIS 5.1 ("Brett Moore" <brett.moore@...urity-assessment.com>)
IBM DB2 Remote DoS during CONNECT processing (Team SHATTER <shatter@...secinc.com>)
ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
CORE-2006-1127: ProFTPD Controls Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability (zdi-disclosures@...m.com)

December 14 (23 messages)

Re: The newest Word flaw is due to malformed data structure handling ("Steven M. Christey" <coley@...re.org>)
The (in)security of Xorg and DRI (Darren Reed <avalon@...igula.anu.edu.au>)
GenesisTrader v1.0 - Multiple Vulnerabilities (mr_kaliman@....com)
Call for papers and presenters - Dec. 15th deadline (Mike Allgeier <mike@...pidlike.us>)
HyperAccess - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Jerome Athias <jerome.athias@...e.fr>)
[ GLSA 200612-16 ] Links: Arbitrary Samba command execution (Raphael Marichez <falco@...too.org>)
[USN-380-2] avahi regression (Martin Pitt <martin.pitt@...onical.com>)
Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (schafer_jeffrey@...mail.com)
rPSA-2006-0232-1 libgsf (rPath Update Announcements <announce-noreply@...th.com>)
[ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability (security@...driva.com)
[ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability (security@...driva.com)
[CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities ("Williams, James K" <James.Williams@...com>)
[ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (security@...driva.com)
NOT a 0day! Re: [fuzzing] [Full-disclosure] OWASP Fuzzing page (Gadi Evron <ge@...uxbox.org>)
iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: The newest Word flaw is due to malformed data structure handling (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (schafer_jeffrey@...mail.com)
[ GLSA 200612-17 ] GNU Radius: Format string vulnerability (Raphael Marichez <falco@...too.org>)
Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Gadi Evron <ge@...uxbox.org>)
Kerio MailServer < 6.3.1 remote Denial of Service (research@...g.net)

December 15 (18 messages)

CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th) (Dragos Ruiu <dr@....net>)
[ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Top 10 Real Computer Crimes for 2007 (Pete Herzog <pete@...com.org>)
[ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability (security@...driva.com)
BitDefender AV Packed PE File Parsing Engine Heap Overflow (<security@...ns.com>)
TSLSA-2006-0072 - clamav (Trustix Security Advisor <tsl@...stix.org>)
Windows Explorer WMV File Denial Of Service Vulnerability (sehato@...dex.ru)
[USN-396-1] gdm vulnerability (Kees Cook <kees@...ntu.com>)
Windows Media MID File Denial Of Service Vulnerability (sehato@...dex.ru)
[security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Una… (security-alert@...com)
Project Server 2003 - Credential Disclosure ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: The (in)security of Xorg and DRI (Nicolas RUFF <nicolas.ruff@...il.com>)
Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (gplit@...lit.com)
Bypassing process identification of several personal firewalls and HIPS (Matousec - Transparent security Research <research@...ousec.com>)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! ("Bruno Lustosa" <bruno.lists@...il.com>)
[ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Josh Bressers <josh@...ss.net>)
[OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)

December 16 (15 messages)

Drone Armies C&C Report - 15 Dec 2006 (c2report@...tf.org)
RE: Windows Explorer WMV File Denial Of Service Vulnerability (Ulises Cuñé <ulises2k@...il.com>)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Dragos Ruiu <dr@...ecwest.com>)
XSS in gmial google (gamr-14@...mail.com)
Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln. (ShaFuq31@...MaiL.CoM)
Odysseus 2.0 / Telemachus 1.0 (Beta) (Dave <dave@...dshell.net>)
Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (gplit@...lit.com)
Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (bastyaelvtars@...il.com)
Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (ox90x86@...mail.com)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (George Yobst <george@...cc.lib.or.us>)
Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (willysr@...il.com)
Contra Haber Sistemi v1.0 SqL Injection Vuln. (ShaFuq31@...MaiL.CoM)
[HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities (DoZ@...kersCenter.com)
Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Hunger <bugtraq@...ger.hu>)
Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs. (Pasi Sjoholm <ptsjohol@...jyu.fi>)

December 18 (19 messages)

[SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
[SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: The (in)security of Xorg and DRI (Darren Reed <avalon@...igula.anu.edu.au>)
Cisco not honoring update promises? ("Michael Scheidell" <scheidell@...nap.net>)
HyperVM Cross-Site Scripting (Advisory@...a-Security.Net)
Re: The (in)security of Xorg and DRI (Darren Reed <avalon@...igula.anu.edu.au>)
RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability (saudi@...mail.fr)
SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response (research@...antec.com)
Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Checkpoint NG3 ICMP Flood (bdmoraes@....com.br)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (p.kerr@...kland.ac.nz)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Kamchybek Jusupov <kjusupov@...il.com>)
Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Marcus Meissner <meissner@...e.de>)
[ GLSA 200612-18 ] ClamAV: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Cisco not honoring update promises? (rsmoak@...co.com)
Re: Checkpoint NG3 ICMP Flood (Michael Schwartzkopff <misch@...tinet.de>)
Re: Checkpoint NG3 ICMP Flood (Hugo van der Kooij <hvdkooij@...derkooij.org>)
[security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS) (security-alert@...com)

December 19 (15 messages)

[ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability (security@...driva.com)
[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability (security@...driva.com)
HITBSecConf2007 - Dubai - Call for Papers now open! (Praburaajan <prabu@...kinthebox.org>)
WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities (7all7@....com)
Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo. (filip.palian@...stk.edu.pl)
New Skype Worm ("Christopher Mosby" <m@...v.com>)
HP Printers FTP Server Denial Of Service (Joxean Koret <joxeankoret@...oo.es>)
Trend Micro's Vista "0day exploit auction" claim ("Ryan Meyer" <lists@...thinkitweprintit.com>)
RE: [BULK] - New Skype Worm ("Hubbard, Dan" <dhubbard@...sense.com>)
xss in Support Cards v1 ( oSTicket ) (l.d.0@...mail.com)
Burak Yilmaz Download Portal Sql Injection Vuln. (ShaFuq31@...MaiL.CoM)
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit (none@...e.com)
Oracle <= 9i / 10g File System Access via utl_file Exploit (none@...e.com)
Multiple Bugs in MINI WEB SHOP (xx_hack_xx_2004@...mail.com)
MkPortal Urlobox Cross Site Request Forgery (info@...nhead.it)

December 20 (17 messages)

RE: Cisco not honoring update promises? ("Michael Scheidell" <scheidell@...nap.net>)
ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability (zdi-disclosures@...m.com)
SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability ("SEC Consult Research" <research@...-consult.com>)
Oracle Portal 10g HTTP Response Splitting ("putosoft softputo" <hasecorp@...mail.com>)
NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
Mono XSP ASP.NET Server sourcecode disclosure vulnerability (jose.palanco@...el.es)
Re: Oracle <= 9i / 10g File System Access via utl_file Exploit (sumit kumar soni <sumit_uit@...oo.com>)
Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting ("Brian Eaton" <eaton.lists@...il.com>)
[security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege (security-alert@...com)
[security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06… (security-alert@...com)
[ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability (Raphael Marichez <falco@...too.org>)
[ GLSA 200612-20 ] imlib2: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200612-21 ] Ruby: Denial of Service vulnerability (Raphael Marichez <falco@...too.org>)
RE: Trend Micro's Vista "0day exploit auction" claim ("Roger A. Grimes" <roger@...neretcs.com>)
critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (quincy@...il.com)
RE: Trend Micro's Vista "0day exploit auction" claim (Simple Nomad <thegnome@...c.org>)
[USN-397-1] mono vulnerability (Kees Cook <kees@...ntu.com>)

December 21 (31 messages)

[CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability ("Williams, James K" <James.Williams@...com>)
[OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
Re: Oracle <= 9i / 10g File System Access via utl_file Exploit (Marco Ivaldi <raptor@...eadbeef.info>)
Fun with event logs (semi-offtopic) (3APA3A <3APA3A@...URITY.NNOV.RU>)
Microsoft Windows XP/2003/Vista memory corruption 0day (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic) (3APA3A <3APA3A@...URITY.NNOV.RU>)
[SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution (Steve Kemp <skx@...ian.org>)
Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (3APA3A <3APA3A@...URITY.NNOV.RU>)
[ MDKSA-2006:234 ] - Updated mono packages fix vulnerability (security@...driva.com)
RE: [Full-disclosure] Fun with event logs (semi-offtopic) ("Michele Cicciotti" <mc@...msa.net>)
Re: [Full-disclosure] Fun with event logs (semi-offtopic) (endrazine <endrazine@...il.com>)
Ixprim CMS 1.2 Remote Blind SQL Injection Exploit (gmdarkfig@...il.com)
RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic) ("Michele Cicciotti" <mc@...msa.net>)
Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Alexander Sotirov <asotirov@...ermina.com>)
Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (3APA3A <3APA3A@...URITY.NNOV.RU>)
SQID v0.1 - SQL Inhection Digger. (contact@...aeye.org)
Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images (matthieu.paineauSTOPSPAM@...adoo.fr)
[TOOL] untidy - XML Fuzzer ("Andres Riancho" <andres.riancho@...il.com>)
Re: RE: Trend Micro's Vista "0day exploit auction" claim (agoodhez1@...oo.co.uk)
Re: Trend Micro's Vista "0day exploit auction" claim (Simple Nomad <thegnome@...c.org>)
Re: MkPortal Urlobox Cross Site Request Forgery (securityfocus@...iblesoul.com)
Re: MkPortal Urlobox Cross Site Request Forgery (securityfocus@...iblesoul.net)
[OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
OpenSER 1.1.0 parse_config buffer overflow vulnerability (sapheal@...k.pl)
Re: Enforcing Java Security Manager in Restricted Windows Environments? (jim@...ico.net)
PWDumpX updated (includes CacheDump functionality) ("Reed Arvin" <reedarvin@...il.com>)
Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day ("Pukhraj Singh" <pukhraj.singh@...il.com>)
Re: Oracle Portal 10g HTTP Response Splitting (majororacle@...il.com)
RE: Enforcing Java Security Manager in Restricted Windows Environments? ("Jan P. Monsch" <jan.monsch@...osion.com>)
Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

December 22 (9 messages)

RE: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day ("Michele Cicciotti" <mc@...msa.net>)
Xt-News 0.1 : SQL Injection Vulnerability & XSS (mr_kaliman@....com)
rPSA-2006-0234-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
Oracle Applications/Portal 9i/10g Cross Site Scripting ("putosoft softputo" <hasecorp@...mail.com>)
Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Thierry Zoller <Thierry@...ler.lu>)
TSLSA-2006-0074 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting ("putosoft softputo" <hasecorp@...mail.com>)
Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Mike@...erosoftware.com)
SQID v0.2 - SQL Injection Digger. (contact@...aeye.org)

December 23 (7 messages)

Re: Multiple Remote Vulnerabilities in KISGB (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Multiple Remote Vulnerabilities in KISGB (str0ke <str0ke@...w0rm.com>)
ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Efkan Forum v1.0 SqL Inj. Vuln. (ShaFuq31@...MaiL.CoM)
Multiple Bugs in Future Internet ( XSS & SQL Injection ) (xx_hack_xx_2004@...mail.com)

December 25 (11 messages)

iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Okul Merkezi Portal v1.0 Remote File IncLude Vuln. (ShaFuq31@...MaiL.CoM)
Chatwm V1.0 SqL Injection Vuln. (ShaFuq31@...MaiL.CoM)
Fishyshoop Security Vulnerability ("James Gray" <james6.0@...il.com>)
TimberWolf 1.2.2 vulnerable to XSS (corrado.liotta@...ce.it)
Forum AnyBoard - Sql Inyection By Firewall (Firewall1954@...mail.com)
ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") (Amit Klein <aksecurity@...il.com>)
XSS with Vbulletin (new idea !) (ashraf1984@...mail.com)
[SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities (DoZ@...kersCenter.com)

December 26 (11 messages)

Cahier de texte V2.2 Bypass general access protection exploit (gmdarkfig@...il.com)
phpcms <=- 1.1.7 Remote File Inclusion (Zarloule04@...il.com)
PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability (xorontr@...il.com)
HLStats Remote SQL Injection Exploit (nospam@...gle.com)
LuckyBot v3 Remote File Include (i-k-t@...mail.com)
XSS - CMS Made Simple v1.0.2 ("Curtis Zimmerman" <curtis.zimmerman@...il.com>)
logahead UNU edition 1.0 Remote File Upload & code execution (corrado.liotta@...ce.it)
[OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
[OpenPKG-SA-2006.043] OpenPKG Security Advisory (links) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") ("Martin Johns" <martin.johns@...il.com>)
Re: phpcms <=- 1.1.7 Remote File Inclusion (Stuart Moore <smoore.bugtraq@...urityglobal.net>)

December 27 (9 messages)

Re: phpcms <=- 1.1.7 Remote File Inclusion (Hugo van der Kooij <hvdkooij@...derkooij.org>)
Re: LuckyBot v3 Remote File Include (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
Re: The (in)security of Xorg and DRI (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: XSS with Vbulletin (new idea !) (bas@...lletin.com)
Host directory full disclosure and input error (hack2prison@...oo.com)
Secure Login Manager Multiple Input Validation Vulnerabilities (DoZ@...kersCenter.com)
Re: Cross site scripting & fullpath disclosure (james.brown@...esign.com)
NtRaiseHardError Csrss.exe memory Disclosure exploit (Reversemode <advisories@...ersemode.com>)
ShmooCon Announcement (B Potter <gdead@...oo.com>)

December 28 (11 messages)

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities (xorontr@...il.com)
[SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
OpenSER OSP Module remote code execution (sapheal@...k.pl)
Re: XSS with Vbulletin (new idea !) (l.d.0@...mail.com)
SMS handling OpenSER remote code executing (sapheal@...k.pl)
Re: XSS - CMS Made Simple v1.0.2 (nanoymaster@...il.com)
[OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: XSS with Vbulletin (new idea !) (micmast@...il.com)
[SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

December 29 (6 messages)

XSS in script Mobilelib GOLD v2 (gamr-14@...mail.com)
XSS with default page parameter in Oracle Portal 10g (duchaikhtn@...il.com)
QuickCam linux device driver allows arbitrary code execution (sapheal@...k.pl)
LDU <= 8.x (journal.php) SQL Injection Vulnerability (starext@....com)
DoceboLMS Xss Vuln. (starext@....com)
Re: XSS in script Mobilelib GOLD v2 (gamr-14@...mail.com)

December 30 (6 messages)

csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit (Reversemode <advisories@...ersemode.com>)
MythControl (MythTV remote control) arbitrary code execution (sapheal@...k.pl)
SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit (inge_eivind.henriksen@...llo.no)
[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability (vulnpost-remove@...n.sg)
Enigma Coppermine Bridge (boarddir) Remote File Include (xorontr@...il.com)
Enigma WordPress Bridge (boarddir) Remote File Include (xorontr@...il.com)

448 messages

Powered by blists - more mailing lists