bugtraq mailing list - 2007/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2007/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 11	² 11	³ 7	⁴
⁵ 32	⁶ 18	⁷ 18	⁸ 9	⁹ 19	¹⁰ 5	¹¹
¹² 44	¹³ 48	¹⁴ 30	¹⁵ 38	¹⁶ 37	¹⁷ 13	¹⁸ 1
¹⁹ 4	²⁰ 33	²¹ 22	²² 36	²³ 29	²⁴ 7	²⁵
²⁶ 31	²⁷ 16	²⁸ 9

Messages by day:

February 1 (11 messages)

Technika - Attack Scripting Environment ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Defeating CAPTCHAs via Averaging (Lou Katz <lou@...ron.com>)
Re: Defeating CAPTCHAs via Averaging (Andreas Beck <becka-list-bugtraq@...atec.de>)
Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities ("Michal Bucko" <michal.bucko@...k.pl>)
Comodo Multiple insufficient argument validation of hooked SSDT function Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
[USN-415-1] GTK vulnerability (Kees Cook <kees@...ntu.com>)
strange behavior on Cisco 2801 ("Marcin" <sec@...lag.pl>)
php web portail [remote file include & local file include] (saps.audit@...il.com)
Omegaboard v1.0b4 (phpbb_root_path) Remote File Include Exploit (xorontr@...il.com)
Cerulean Portal System (phpbb_root_path) Remote File Include Exploit (xorontr@...il.com)
Phishing Evolution Report Released (Carl Jongsma <info@...ifwrald.com>)

February 2 (11 messages)

Re: strange behavior on Cisco 2801 (Neil Anderson <cleidh_mor@...penworld.com>)
Re: SMF "index.php?action=pm" Cross Site-Scripting (grudge@...plemachines.org)
Sourceforge compromized? ("Michael Scheidell" <scheidell@...nap.net>)
Chicken of the VNC 2.0 remote DoS (poplix@...uasia.org)
Re: Sourceforge compromized? ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Sourceforge compromized? ("Serguei A. Mokhov" <mokhov@...concordia.ca>)
Re: Sourceforge compromized? (Tim <tim-security@...tinelchicken.org>)
Re: strange behavior on Cisco 2801 (Eloy Paris <elparis@...co.com>)
Re: Sourceforge compromized? (Karl Schlitt <karl@...ota-st.com>)
Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities ("Steven M. Christey" <coley@...re.org>)
Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities (3APA3A <3APA3A@...URITY.NNOV.RU>)

February 3 (7 messages)

[ MDKSA-2007:031 ] - Updated kdelibs packages fix KHTML vulnerability (security@...driva.com)
Re: Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities (michal.bucko@...k.pl)
[ MDKSA-2007:032 ] - Updated mpg123 packages fix DoS vulnerability. (security@...driva.com)
Security Advisory for Bugzilla 2.20.3, 2.22.1, and 2.23.3 (mkanat@...zilla.org)
[ MDKSA-2007:033 ] - Updated wireshark packages fix multiple vulnerabilities (security@...driva.com)
Ublog Reload Admin Panel Multiple HTML Injections (DoZ@...kersCenter.com)
Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Michal Zalewski <lcamtuf@...ne.ids.pl>)

February 5 (32 messages)

Vmare workstation guest isolation weaknesses (clipboard transfer) ("EitanCaspi@...oo.com" <eitancaspi@...oo.com>)
MysearchEngine XSS (sn0oPy.team@...il.com)
Adrenalin's ASP Chat XSS (sn0oPy.team@...il.com)
Sql injection bugs in Xoops 2.0.16 + Weblinks module ("Omid" <omid@...kers.ir>)
dvddb-0.6 media sql-inj. vuln. (gokhankaya@...mail.com)
flashChat 4.7.8 Cross Site Scripting Vulnerability (binaryloc@...il.com)
Wap Portal Serve 1.* <= Remote File Inclusion (stormhacker@...mail.com)
Jetty Session ID Prediction (NGSSoftware Insight Security Research <nisr@...software.com>)
TSLSA-2007-0005 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: [Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
[SAMBA-SECURITY] CVE-2007-0452: Potential DoS against smbd in Samba 3.0.6 - 3.0.23d ("Gerald (Jerry) Carter" <jerry@...ba.org>)
[SAMBA-SECURITY] CVE-2007-0453: Buffer overrun in nss_winbind.so.1 on Solaris ("Gerald (Jerry) Carter" <jerry@...ba.org>)
dvddb-0.6 media remote file include vuln. (gokhankaya@...mail.com)
Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include ("Steven M. Christey" <coley@...re.org>)
Re: Jetty Session ID Prediction (Amit Klein <aksecurity@...il.com>)
Re: [Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Cold Fusion Web Server XSS 0 day (digi7al64@...il.com)
[SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin ("Gerald (Jerry) Carter" <jerry@...ba.org>)
Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Amit Klein <aksecurity@...il.com>)
Sql injection bugs in PHP-Nuke ("Omid" <omid@...kers.ir>)
[SECURITY] [DSA 1257-1] New samba packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Les News v2.2 [Admin news without password] (sn0oPy.team@...il.com)
Re: dvddb-0.6 media sql-inj. vuln. (str0ke <str0ke@...w0rm.com>)
rPSA-2007-0023-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
Mina Ajans Script Remote File Inclusion Vuln. (canberx@...mail.com)
[ MDKSA-2007:034 ] - Updated samba packages address multiple vulnerabilities (security@...driva.com)
Uphotogallery Multiple Cross-Site Scripting Vulnerability (DoZ@...kersCenter.com)
[USN-417-1] PostgreSQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
iDefense Security Advisory 02.02.07: Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Firefox + popup blocker + XMLHttpRequest + srand() = oops (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Sql injection bugs in Virtuemart and Letterman ("Omid" <omid@...kers.ir>)
Re: Jetty Session ID Prediction (Michal Zalewski <lcamtuf@...ne.ids.pl>)

February 6 (18 messages)

Sql injection bugs in Joomla and Mambo ("Omid" <omid@...kers.ir>)
Re: Jetty Session ID Prediction (Chris Anley <chris@...software.com>)
Firefox 2.0.0.1 and Opera 9.10 Anty Fraud/Phishing Protection bypass. (Kanedaaa Bohater <kaneda@...ater.net>)
Unofficial SQL-Ledger patch for CVE-2007-0667 (Chris Travers <chris@...atrontech.com>)
Re: [Full-disclosure] PS Information Leak on HP Tru64 Alpha OSF1 v5.1 1885 ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
Re: Jetty Session ID Prediction (Amit Klein <aksecurity@...il.com>)
Re: Jetty Session ID Prediction (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[USN-418-1] Bind vulnerabilities (Kees Cook <kees@...ntu.com>)
PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
rPSA-2007-0025-1 postgresql postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
Re: Jetty Session ID Prediction (Amit Klein <aksecurity@...il.com>)
Re: Jetty Session ID Prediction (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[security bulletin] HPSBUX02181 SSRT061289 rev.2 - HP-UX Running IPFilter, Remote Unauthorized Denial of Service (DoS) (security-alert@...com)
[USN-420-1] KDE library vulnerability (Kees Cook <kees@...ntu.com>)
[USN-419-1] Samba vulnerabilities (Kees Cook <kees@...ntu.com>)
VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability (DoZ@...kersCenter.com)
[USN-417-2] PostgreSQL 8.1 regression (Martin Pitt <martin.pitt@...onical.com>)
MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln. (gokhankaya@...mail.com)

February 7 (18 messages)

Medium level security hole in FreeProxy (Tim Brown <timb@...-dimension.org.uk>)
[ MDKSA-2007:035 ] - Updated gd packages fix DoS vulnerability. (security@...driva.com)
[ MDKSA-2007:036 ] - Updated libwmf packages fix embedded gd DoS vulnerability. (security@...driva.com)
[ MDKSA-2007:037 ] - Updated postgresql packages address multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:038 ] - Updated php packages to address multiple issues (security@...driva.com)
[SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
rPSA-2007-0026-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. (gokhankaya@...mail.com)
Re: VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability (kier@...lletin.com)
Re: Jetty Session ID Prediction (Chris Anley <chris@...software.com>)
iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2007:040 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
iDefense Security Advisory 02.07.07: RARLabs Unrar Password Prompt Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.07.07: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2007:039 ] - Updated gtk+2.0 packages address DoS, LSB issues, several bugs (security@...driva.com)
Ability to inject and execute any code as root in SysCP (flo@...cp.org)
remote file include in whm (all version) (ali@...kerz.ir)
Re: Defeating CAPTCHAs via Averaging (noreply9871234@...-habe-fertig.com)

February 8 (9 messages)

Re: remote file include in whm (all version) (Mailinglists Address <mailinglist@...resshosting.net>)
rPSA-2007-0025-2 postgresql postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
[security bulletin] HPSBGN02187 SSRT061280 rev.1 - Mercury LoadRunner, Performance Center, Monitor over Firewall, Remote Unauthenticated A… (security-alert@...com)
[security bulletin] HPSBMA02190 SSRT071300 rev.1 - HP OpenView Storage Data Protector, Local Execution of Arbitrary Code (security-alert@...com)
Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technical details) (Nicob <nicob@...ob.net>)
TFTP directory traversal in Kiwi CatTools (Nicob <nicob@...ob.net>)
ZDI-07-007: HP Mercury LoadRunner Agent Stack Overflow Vulnerability (zdi-disclosures@...m.com)
rPSA-2007-0028-1 gd (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0029-1 ImageMagick (rPath Update Announcements <announce-noreply@...th.com>)

February 9 (19 messages)

[ MDKSA-2007:037-1 ] - Updated postgresql packages address multiple vulnerabilities (security@...driva.com)
eXtreme File Hosting remote file upload vulnerability (hamed.bazargani@...il.com)
[Reversemode Advisory] TrendMicro Products - multiple privilege escalation vulnerabilities. (Reversemode <advisories@...ersemode.com>)
PAKCON III: Call for Papers [cfp] ("Ayaz Ahmed Khan" <ayaz@...con.org>)
Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 (clappymonkey@...il.com)
Ovidentia Exploit Codeds (hotturk@...et.com)
Capital Request Forms Db Username and Password Vulnerabilities (gokhankaya@...mail.com)
Re: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
Call for Papers: IT-Incident Management and IT-Forensics 2007 (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
local bug :[xxs] in whm (ali@...kerz.ir)
RE: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 ("McCarty, Eric C." <emccarty@...ucsd.edu>)
Every MS Exploit (layne@...enot.com)
XSS in Rainbow with Rainbow.Zen (bl4ck@...mail.org)
Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 (Andrea Purificato - bunker <bunker@...twebnet.it>)
FreeBSD Security Advisory FreeBSD-SA-07:02.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 (Ivan Jager <aij+nospam@...rew.cmu.edu>)
[ MDKSA-2007:041 ] - Updated ImageMagick packages fix buffer overflow vulnerability (security@...driva.com)
rPSA-2006-0233-1 dbus dbus-glib dbus-qt dbus-x11 (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0031-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)

February 10 (5 messages)

[USN-421-1] MoinMoin vulnerability (Kees Cook <kees@...ntu.com>)
mcRefer SQL injection (sn0oPy.team@...il.com)
Allons_voter Version 1.0 xss and admin votes (sn0oPy.team@...il.com)
nabopoll 1.1.2 sensitive file (admin without password) (sn0oPy.team@...il.com)
[XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel (Andrea Purificato - bunker <bunker@...twebnet.it>)

February 12 (44 messages)

Re: [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel (Andrea Purificato - bunker <bunker@...twebnet.it>)
phpPolls 1.0.3 (acces to sensitive file) (sn0oPy.team@...il.com)
MediaWiki Full Path Disclosure Vulnerability (raphael.huck@...e.fr)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: mcRefer SQL injection (gmdarkfig@...il.com)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Multiple vulnerabilities in phpMyVisites (Nicob <nicob@...ob.net>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
KvGuestbook Remote Add Admin Exploit (crazy_king@...7.org)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb) (Sebastian Wolfgarten <sebastian@...fgarten.com>)
Arbitrary file disclosure vulnerability in IP3 NetAccess < 4.1.9.6 (Sebastian Wolfgarten <sebastian@...fgarten.com>)
[OpenPKG-SA-2007.009] OpenPKG Security Advisory (twiki) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Oreon1.2.x Series Exploit Coded (hotturk@...et.com)
Web Server Botnets and Server Farms as Attack Platforms (Gadi Evron <ge@...uxbox.org>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <news@...ksch.org>)
Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network? ("Huzeyfe Onal" <huzeyfe.onal@...il.com>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
DotClear Full Path Disclosure Vulnerability (raphael.huck@...e.fr)
Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network? (Vincent Archer <varcher@...yall.com>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <news@...ksch.org>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Claus Färber <GMANE@...rber.muc.de>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Paul Szabo <psz@...hs.usyd.edu.au>)
Firefox/MSIE focus stealing vulnerability - clarification (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Jportal 2.3.1 CSRF vulnerability (dzitu@...zta.fm)
Miniwebsvr 0.0.6 - Directory traversal (Daniel Nyström <daniel.nystrom@...ed.net>)
Re: Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities (ismaelalfaro@...estop.com)
Radical Technologies - Portal Search- multiple XSS issue (claxus@...il.com)
[USN-417-3] PostgreSQL regression (Martin Pitt <martin.pitt@...onical.com>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Windows logoff bug solution possibly. (Rage Coder <RageCoder@....com>)
Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network? (armin walland <a.walland@...usmr.com>)
Port randomization paper ("Fernando Gont" <fernando.gont@...il.com>)
Virtual Calendar <= (pwd.txt) Remote Password Disclosur Vulnerability ("me you" <r.5.7@...mail.com>)
Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
XSS in JBoss Portal (bl4ck@...mail.org)
Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
XSS in communityserver ! (bl4ck@...mail.org)
XSS in lighttpd (bl4ck@...mail.org)
SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). (3APA3A <3APA3A@...urity.nnov.ru>)
XSS in eWay (bl4ck@...mail.org)

February 13 (48 messages)

PHP 5.2.1 crash bug (squeeky.mouse@...geit.com)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Inertia News Remote File İnclude (crazy_king@...7.org)
Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? (Thierry Zoller <Thierry@...ler.lu>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account (<security@...ns.com>)
Re: Web Server Botnets and Server Farms as Attack Platforms ("Steven M. Christey" <coley@...re.org>)
Aruba Mobility Controller Management Buffer Overflow (<security@...ns.com>)
[ MDKSA-2007:042 ] - Updated smb4k packages fix numerous vulnerabilities (security@...driva.com)
RE: Solaris telnet vulnberability - how many on your network? ("Oliver Friedrichs" <oliver_friedrichs@...antec.com>)
Re: TFTP directory traversal in Kiwi CatTools (support@...isyslog.com)
NDSS: Network and Distributed Systems Security (Crispin Cowan <crispin@...ell.com>)
TSLSA-2007-0007 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <ben.bucksch@...nex.com>)
Re: DotClear Full Path Disclosure Vulnerability (Raphaël HUCK <raphael.huck@...e.fr>)
Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
RE: XSS in lighttpd ("Bart Seresia" <bart@....be>)
Re: DotClear Full Path Disclosure Vulnerability (Cedric Blancher <blancher@...tel-securite.fr>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Andreas Beck <becka-list-bugtraq@...atec.de>)
RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
Re: DotClear Full Path Disclosure Vulnerability (Raphaël HUCK <raphael.huck@...e.fr>)
RE: Solaris telnet vulnberability - how many on your network? ("Oliver Friedrichs" <oliver_friedrichs@...antec.com>)
RE: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
RE: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
Cisco Security Advisory: Multiple IOS IPS Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: DotClear Full Path Disclosure Vulnerability (Cedric Blancher <blancher@...tel-securite.fr>)
UPDATE: [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation (Raphael Marichez <falco@...too.org>)
Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
Re: DotClear Full Path Disclosure Vulnerability (Cedric Blancher <blancher@...tel-securite.fr>)
Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
RE: Solaris telnet vulnberability - how many on your network? (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Fullaspsite Shop (tr) Xss & SqL İnj. VulnZ. (ShaFuq31@...MaiL.CoM)
Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? (Casper.Dik@....COM)
[ GLSA 200702-01 ] Samba: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 (Nicolas RUFF <nicolas.ruff@...il.com>)
Re: DotClear Full Path Disclosure Vulnerability (Gmail account <god.ate.my.homework@...il.com>)
Re: Solaris telnet vulnberability - how many on your network? (georg.oppenberg@....mci.com)
iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability (iDefense Labs NO-REPLY <labs-no-reply@id…)
Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
[ GLSA 200702-02 ] ProFTPD: Local privilege escalation (Raphael Marichez <falco@...too.org>)
Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
[ GLSA 200702-03 ] Snort: Denial of Service (Raphael Marichez <falco@...too.org>)
Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
RE: [Full-disclosure] Solaris telnet vulnberability - how many onyour network? ("Peter Ferrie" <pferrie@...antec.com>)

February 14 (30 messages)

MS Interactive Training .cbo Overflow ("Brett Moore" <brett.moore@...urity-assessment.com>)
[ GLSA 200702-04 ] RAR, UnRAR: Buffer overflow (Raphael Marichez <falco@...too.org>)
SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass (research@...antec.com)
iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability (iDefense Labs NO-REPLY <labs-no-reply@...fense.com>)
Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation (security-alert@...com)
[security bulletin] HPSBUX02192 SSRT061233 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS) (security-alert@...com)
Jupiter CMS 1.1.5 Multiple Vulnerabilities (gmdarkfig@...il.com)
WebTester 5.0.2 sql injection and XSS vulnerabilities ("Moran Zavdi" <moranz@...zatech.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Solaris telnet vuln solutions digest and network risks (Gadi Evron <ge@...uxbox.org>)
Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
Re: Solaris telnet vulnberability - how many on your network? (Joe Shamblin <wjs@...duke.edu>)
Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
Argument injection issues ("Steven M. Christey" <coley@...re.org>)
Re: DotClear Full Path Disclosure Vulnerability (Raphaël HUCK <raphael.huck@...e.fr>)
Apache Multiple Injection Vulnerabilities (hugo@...ohacking.com)
Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities (gmdarkfig@...il.com)
Re: DotClear Full Path Disclosure Vulnerability (Cedric Blancher <blancher@...tel-securite.fr>)
RE: [Full-disclosure] Solaris telnet vulnberability - how many onyour network? ("David Taylor" <ltr@....upenn.edu>)
Re[2]: Solaris telnet vulnberability - how many on your network? (Thierry Zoller <Thierry@...ler.lu>)
Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: Solaris telnet vulnberability - how many on your network? (Leandro Gelasi <leandro.gelasi@...cali.it>)
[SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
RE: Re[2]: Solaris telnet vulnberability - how many on your network? ("Roger A. Grimes" <roger@...neretcs.com>)
[SECURITY] [DSA 1260-1] New imagemagick package fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Solaris telnet vulnberability - how many on your network? (Damien Miller <djm@...drot.org>)
RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? (Gadi Evron <ge@...uxbox.org>)
Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
defacements for the installation of malcode (Gadi Evron <ge@...uxbox.org>)

February 15 (38 messages)

Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Ben Bucksch <news@...ksch.org>)
Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? (Joep Vesseur <Joep.Vesseur@....COM>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Peter Besenbruch <prb@...a.net>)
RE: defacements for the installation of malcode (Jeremy Epstein <jepstein@...methods.com>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Daniel Veditz <dveditz@...zio.com>)
Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability ("Stan Bubrouski" <stan.bubrouski@...il.com>)
RE: Re[2]: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
RE: defacements for the installation of malcode (Gadi Evron <ge@...uxbox.org>)
Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? (Gadi Evron <ge@...uxbox.org>)
Re: Stanford university SCARF user editing (spam@...lisageek.com)
Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)
XSS in [Calendar Express 2 ] (bl4ck@...mail.org)
Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - (Darren Reed <avalon@...igula.anu.edu.au>)
RE: Apache Multiple Injection Vulnerabilities ("Rogier Mulhuijzen" <rogier.mulhuijzen@...ice.casema.nl>)
Re: local bug :[xxs] in whm (anon.e.mouse@...il.com)
XSS in [deskpro.com v1.1.0 ] (bl4ck@...mail.org)
Re: Re[2]: Solaris telnet vulnberability - how many on your network? (Darren Reed <avalon@...igula.anu.edu.au>)
Re: Apache Multiple Injection Vulnerabilities (Amit Klein <aksecurity@...il.com>)
Re: Solaris telnet vulnberability - how many on your network? (Darren Reed <avalon@...igula.anu.edu.au>)
Comodo DLL injection via weak hash function exploitation Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[security bulletin] HBSBGN02189 SSRT071297 rev.1 ServiceGuard for Linux, Remote Unauthorized Access (security-alert@...com)
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Solaris telnet vulnberability - how many on your network? (thefinn12345@...il.com)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Re: Solaris telnet vulnberability - how many on your network? (thefinn12345@...il.com)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
RE: Re[2]: Solaris telnet vulnberability - how many on your network? ("Evans, Thomas" <ttevans@...kcorp.net>)
MSN redirect Bug (h4x0r_ir@...oo.com)
Re: iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability (ohtgend@...ie.me.uk (Alan J. Wylie))
Re: Apache Multiple Injection Vulnerabilities (Hugo Vázquez Caramés <hugo@...ohacking.com>)
Drive-by Pharming Threat ("Zulfikar Ramzan" <Zulfikar_Ramzan@...antec.com>)
[USN-422-1] ImageMagick vulnerabilities (Kees Cook <kees@...ntu.com>)
RE: Re: Solaris telnet vulnberability - how many on your network? ("Roger A. Grimes" <roger@...neretcs.com>)

February 16 (37 messages)

EasyMail Objects v6.5 Connect Method Stack Overflow ("Paul Craig" <paul.craig@...urity-assessment.com>)
Re: Re: Solaris telnet vulnberability - how many on your network? (jf <jf@...glingpointers.net>)
CedStat v1.31 XSS (sn0oPy.team@...il.com)
Dem_trac acces to log file wihtout authentification (sn0oPy.team@...il.com)
[ GLSA 200702-05 ] Fail2ban: Denial of Service (Raphael Marichez <falco@...too.org>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Base64 <base640@...il.com>)
[SECURITY] [DSA 1261-1] New PostgreSQL packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass (kissme@...ke7.net)
[funsec] Quebec Health Officials Fighting Computer Virus (fwd) (Gadi Evron <ge@...uxbox.org>)
Meganoide's news v1.1.1 < = RFi Vulnerabilities (k4rtal@...il.com)
Downgrading the Oracle native authentication (sec.list@...pwc.com)
Re: Re: Solaris telnet vulnberability - how many on your network? (Hugo van der Kooij <hvdkooij@...derkooij.org>)
PBLang 4.60 <= (index.php) Remote File Include Vulnerability ("me you" <r.5.7@...mail.com>)
Re: Web Server Botnets and Server Farms as Attack Platforms (Tom <dshield@...c.com>)
Reflections on Trusting Trust [was: Re: Solaris telnet ...] (Gadi Evron <ge@...uxbox.org>)
RE: Re: Re: Solaris telnet vulnberability - how many on your network? (jf <jf@...glingpointers.net>)
Ezboo webstats acces to sensitive files (sn0oPy.team@...il.com)
Re: Apache Multiple Injection Vulnerabilities (security@...s.com)
Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass (dkirker@...nmobl.com)
Meganoide's news v1.1.1 < = RFi Vulnerabilities (k4rtal@...il.com)
Drake CMS v0.3.2 < = RFi Vulnerabilities (k4rtal@...il.com)
Plume CMS 1.2.2 < = RFi Vulnerabilities (k4rtal@...il.com)
phpbb_wordsearch < = RFi Vulnerabilities (k4rtal@...il.com)
utorrent issue? (Gadi Evron <ge@...uxbox.org>)
Re: RE: Re: Solaris telnet vulnberability - how many on your network? (thefinn12345@...il.com)
false: Plume CMS 1.2.2 < = RFi Vulnerabilities (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
Re: Re: Re: Solaris telnet vulnberability - how many on your network? (thefinn12345@...il.com)
Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass (agonline.dummy@...il.com)
Re: Drive-by Pharming Threat ("Mark Senior" <senatorfrog@...il.com>)
RE:Drive-by Pharming Threat (psirt@...co.com)
Re: Re: Re: Solaris telnet vulnberability - how many on your network? (jf <jf@...glingpointers.net>)
Re: Solaris telnet vulnberability - how many on your network? ("Anthony R. Nemmer" <intertwingled@...st.net>)
Re: RE: Re: Re: Solaris telnet vulnberability - how many on your network? (thefinn12345@...il.com)
Re: Drive-by Pharming Threat (Dennis <dennislv@...il.com>)
Re: Solaris telnet vulnberability - how many on your network? (greimer@...c.edu)
Firefox: about:blank is phisher's best friend (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Solaris telnet vulnberability - how many on your network? (Darren Reed <avalon@...igula.anu.edu.au>)

February 17 (13 messages)

Re: Re: Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
RE: Drive-by Pharming Threat ("Memisyazici, Aras" <arasm@...edu>)
Re: Solaris telnet vulnberability - how many on your network? (Nate Eldredge <nge@...hmc.edu>)
DotClear v1.2.5 (k4rtal@...il.com)
mAlbum v0.3 admin by default user/pass (sn0oPy.team@...il.com)
Re: Firefox: about:blank is phisher's best friend (zonafirefox@...il.com)
Re: Firefox: about:blank is phisher's best friend (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Drive-by Pharming Threat (Marcello Barnaba <bofh@...tmedia.info>)
[ GLSA 200702-06 ] BIND: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200702-07 ] Sun JDK/JRE: Execution of arbitrary code (Raphael Marichez <falco@...too.org>)
Re: Solaris telnet vulnberability - how many on your network? ("Cromar Scott" <SCromar@...ton.com>)
Re: Drive-by Pharming Threat (Cedric Blancher <blancher@...tel-securite.fr>)
[ GLSA 200702-08 ] AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

February 18 (1 message)

Re: Solaris telnet vulnberability - how many on your network? (Brandon Butterworth <brandon@...bbc.co.uk>)

February 19 (4 messages)

Remote DoS in libevent DNS parsing <= 1.2a (Jon Oberheide <jon@...rheide.org>)
Re: [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure (Matthias Andree <ma+bt@...e-technik.uni-dortmund.de>)
Powerschool 404 Admin Exposure (gheetotank@...mail.com)
iTunes remote memory corruption vulnerability (poplix@...uasia.org)

February 20 (33 messages)

ESupport Multiple HTML Injection Vulnerabilities (DoZ@...kersCenter.com)
Jboss vulnerability (dexie@....cc)
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability (Guns@...0.com.ar)
MyCalendar multiple XSS (sn0oPy.team@...il.com)
NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit (gmdarkfig@...il.com)
[ MDKSA-2007:043 ] - Updated clamav packages address multiple issues. (security@...driva.com)
Re: DotClear v1.2.5 (contact@...clear.net)
Re: Solaris telnet vulnberability - how many on your network? (Marco Ivaldi <raptor@...eadbeef.info>)
Re: Jboss vulnerability (James Davis <jamesd@...t.ja.net>)
RE: Firefox: about:blank is phisher's best friend ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
RE: Solaris telnet vulnberability - how many on your network? ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
Re: Jboss vulnerability (Harry Hoffman <hhoffman@...solutions.net>)
Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability (str0ke <str0ke@...w0rm.com>)
Rootkit Profiler LX ("Tobias Klein" <tk@...pkit.de>)
phpXmms 1.0 (tcmdp) Remote File Include Vulnerabilities (ilkerkandemir@...et.com)
Metaye Released - ZmbScap (Contact <contact@...aeye.org>)
AdMentor Script Remote SQL injection Exploit (crazy_king@...7.org)
Re: Web Server Botnets and Server Farms as Attack Platforms (Anders Henke <anders.henke@...d1.com>)
Re: Drive-by Pharming Threat (<auto400208@...hmail.com>)
ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Guns@...0.com.ar)
Re: [Full-disclosure] Drive-by Pharming Threat ("Martin Johns" <martin.johns@...il.com>)
NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit (gmdarkfig@...il.com)
Re: [Full-disclosure] Drive-by Pharming Threat (Andrew Farmer <andfarm@...il.com>)
Re: [Full-disclosure] Drive-by Pharming Threat (<auto400208@...hmail.com>)
Re: [Full-disclosure] Drive-by Pharming Threat (<auto400208@...hmail.com>)
Re: Drive-by Pharming Threat (Jeremy Saintot <jeremy.saintot@...e.fr>)
RE: Solaris telnet vulnberability - how many on your network? (Nate Eldredge <nge@...hmc.edu>)
Re: Apache Multiple Injection Vulnerabilities (Amit Klein <aksecurity@...il.com>)
[USN-423-1] MoinMoin vulnerabilities (Kees Cook <kees@...ntu.com>)
TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities (TSRT@...m.com)
VMware Workstation multiple denial of service and isolation manipulation vulnerabilities ("EitanCaspi@...oo.com" <eitancaspi@...oo.com>)
TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities (TSRT@...m.com)
Re: Jboss vulnerability ("Javier Antunez" <javier.antunez@...il.com>)

February 21 (22 messages)

MediaWiki Cross-site Scripting (eyal@...Sec.com)
qwik-smtpd format string (hotturk@...et.com)
Re: Jboss vulnerability (ben.dexter@....gov.au)
Re: Re: Apache Multiple Injection Vulnerabilities (hugo@...ohacking.com)
[ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues. (security@...driva.com)
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability (Guns@...0.com.ar)
[USN-424-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Overtaking Google Desktop ("Yair Amit" <yairam_ng@...chfire.com>)
Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
/bin/ls with gid=0 in Debian linux-ftpd (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (str0ke <str0ke@...w0rm.com>)
Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Mark Wadham <mark.wadham@...ti.net>)
Cisco Security Advisory: Multiple Vulnerabilities in 802.1X Supplicant (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Players disconnection in Simbin racing games (Luigi Auriemma <aluigi@...istici.org>)
[ MDKSA-2007:045 ] - Updated gnomemeeting packages fix string vulnerabilities (security@...driva.com)
Nabopoll Blind SQL Injection vulnerabilies (s0cratex@...mail.com)
Re: Solaris telnet vulnberability - how many on your network? (Edsel Adap <edsel@...p.org>)
[ MDKSA-2007:044 ] - Updated ekiga packages fix string vulnerabilities. (security@...driva.com)
Call Center Software - Remote Xss Post Exploit - (corrado.liotta@...ce.it)
Re: Jboss vulnerability (AUSCERT#2007d2feb) (AusCERT <auscert@...cert.org.au>)
[ MDKSA-2007:047 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

February 22 (36 messages)

Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
[USN-425-1] slocate vulnerability (Kees Cook <kees@...ntu.com>)
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[USN-426-1] Ekiga vulnerabilities (Kees Cook <kees@...ntu.com>)
Re[2]: Solaris telnet vulnberability - how many on your network? (Thierry Zoller <Thierry@...ler.lu>)
Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak (3APA3A <3APA3A@...urity.nnov.ru>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Drive-by Pharming Threat (hlockhar@....com)
OWASP JBroFuzz 0.5 Fuzzer Released! (subere@...on.org)
Pics Navigator Directory Traversal Vulnerability (sn0oPy.team@...il.com)
Magic News Plus File Inclusion And Xss Vulnerabilitis (security@...or.net)
Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass (chgsupra1@....com)
Re: Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass (chgsupra1@....com)
SYMSA-2007-002-1: Palm OS Treo Find Feature System Password Bypass (research@...antec.com)
Plantilla PHP Simple (none@...e.com)
LoveCMS 1.4 multiple vulnerabilities (none@...e.com)
Re: Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability (e4c5@...anisearch.com)
pheap [edit LFI] vulnerability (none@...e.com)
SaphpLesson v3.0 SQL Injection Exploit (gamr-14@...mail.com)
RE: Re[2]: Solaris telnet vulnberability - how many on your network? ("Roger A. Grimes" <roger@...neretcs.com>)
RE: Overtaking Google Desktop ("Yair Amit" <yairam_ng@...chfire.com>)
Hasadya Raed ("RaeD Hasadya" <raed@...mail.com>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
JBoss jmx-console CSRF (buben.razuma@...il.com)
JBrowser acces to admin/config files (sn0oPy.team@...il.com)
WebSpell > 4.0 Authentication Bypass and arbitrary code execution (r.verton@...il.com)
Re[2]: [Full-disclosure] Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Firefox: about:blank is phisher's best friend (Florian Weimer <fw@...eb.enyo.de>)
Re: Firefox: about:blank is phisher's best friend (Michal Zalewski <lcamtuf@...ne.ids.pl>)
FlashGameScript v1.5.4 Remote File Inclusion Vulnerability (malic89@...il.com)
RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass ("Roger A. Grimes" <roger@...neretcs.com>)
Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit (gmdarkfig@...il.com)
iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re[2]: Solaris telnet vulnberability - how many on your network? ("Steven M. Christey" <coley@...re.org>)

February 23 (29 messages)

Re: [Full-disclosure] iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability (aCaB <aaacab@...il.com>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
[ECHO_ADV_66$2007] SendStudio <= 2004.14 Remote File Inclusion Vulnerability (erdc@...o.or.id)
Firefox: onUnload tailgating (MSIE7 entrapment bug variant) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux (Ben Bucksch <news@...ksch.org>)
iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: JBoss jmx-console CSRF (pagvac <unknown.pentester@...il.com>)
Re: [ECHO_ADV_66$2007] SendStudio <= 2004.14 Remote File Inclusion Vulnerability (Chris Smith <chris@...erspire.com>)
[OpenPKG-SA-2007.010] OpenPKG Security Advisory (php) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability (Daniel Veditz <dveditz@...zio.com>)
Firefox Cache Hack - Firefox History Hack redux ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
MSIE7 browser entrapment vulnerability (probably Firefox, too) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[ MDKSA-2007:048 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
Secunia Research: Internet Explorer 7 "onunload" Event Spoofing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[USN-427-1] enigmail vulnerability (Martin Pitt <martin.pitt@...onical.com>)
rPSA-2007-0036-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0038-1 spamassassin (rPath Update Announcements <announce-noreply@...th.com>)
Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Su… (secure@...antec.com)
iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability ("Steven M. Christey" <coley@...re.org>)
shopkitplus local file include (none@...e.com)
xtcommerce local file include (none@...e.com)
Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability (Stefan Esser <sesser@...dened-php.net>)
Simple one-file gallery (none@...e.com)
[ MDKSA-2007:049 ] - Updated spamassassin packages fix DoS vulnerability (security@...driva.com)

February 24 (7 messages)

pickle download local file (none@...e.com)
Re: Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Pro… (John Smith <genericjohnsmith@...il.com>)
Blind sql injection attack in INSERT syntax on PHP-nuke <=8.0 Final (krasza@...il.com)
ActiveCalendar 1.2.0, Multiple vulnerabilities (simon.itsecurity@...il.com)
Photostand_1.2.0 Multiple Cross Site Scripting (simon.itsecurity@...il.com)
Coppermine Photo Gallery 1.3.x Blind SQL Injection Exploit (s0cratex@...mail.com)
Phpwebgallery-1.4.1, Multiple Cross Site Scripting (simon.itsecurity@...il.com)

February 26 (31 messages)

[ GLSA 200702-09 ] Nexuiz: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
JBrowser Acces to Admin Panel Exploit (crazy_king@...7.org)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Daniel Veditz <dveditz@...zio.com>)
[ GLSA 200702-10 ] UFO2000: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences ("David Litchfield" <davidl@...software.com>)
Call for Paper - SyScan'07 ("Thomas Lim" <thomas@...einc.com>)
sitex multiple vulnerabilities (none@...e.com)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) ("Stan Bubrouski" <stan.bubrouski@...il.com>)
Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) ("Jeffrey Katz" <jdkatz23@...il.com>)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Ismail Dönmez <ismail@...dus.org.tr>)
SQLiteManager v1.2.0 Multiple Vulnerabilities (simon.itsecurity@...il.com)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: ActiveCalendar 1.2.0, Multiple vulnerabilities (simon.itsecurity@...il.com)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux ("Michael Silk" <michaelslists@...il.com>)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Know your Enemy: Web Application Threats (Gadi Evron <ge@...uxbox.org>)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux (Ismail Dönmez <ismail@...dus.org.tr>)
rPSA-2007-0040-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke (research@...-consult.com)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux (arman <afmuse@...mail.com>)
[security bulletin] HPSBST02194 SSRT071306 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-005 Through MS07… (security-alert@...com)
RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass ("McCarty, Eric C." <emccarty@...ucsd.edu>)
Secunia Software Inspector OS Security Assessment problem ("David ROBERT" <david@...repixel.com>)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
WordPress AdminPanel CSRF/XSS - 0day (SaMuschie <samuschie@...oo.de>)
XXS in script Phorum (c_r_ck@...mail.com)
Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux (Ismail Dönmez <ismail@...dus.org.tr>)
Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
MTCMS multiple upload vulnerabilities (none@...e.com)
ViewCVS 0.9.4 issues (Moritz Naumann <security@...itz-naumann.com>)
Re: XXS in script Phorum (brian@...rum.org)

February 27 (16 messages)

Few unreported vulnerabilities by SehaTo (3APA3A <3APA3A@...urity.nnov.ru>)
Re: [Full-disclosure] ViewCVS 0.9.4 issues (Moritz Naumann <security@...itz-naumann.com>)
Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities (Stefan Friedli <stfr@...p.ch>)
[ GLSA 200702-11 ] MPlayer: Buffer overflow (Raphael Marichez <falco@...too.org>)
[ GLSA 200702-12 ] CHMlib: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass ("Roger A. Grimes" <roger@...neretcs.com>)
rPSA-2007-0043-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
WordPress Search Function SQL-Injection (SaMuschie <samuschie@...oo.de>)
Nullsoft ShoutcastServer Persistant XSS - 0day (SaMuschie <samuschie@...oo.de>)
iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: WordPress Search Function SQL-Injection (Justin Frydman - Thinkweb Media <justin@...nkwebmedia.com>)
[NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass] (Netragard Security Advisories <advisories@...raga…)
Xbox 360 Hypervisor Privilege Escalation Vulnerability ("Anonymous Hacker" <anohacker@...glemail.com>)
Re: WordPress Search Function SQL-Injection (kelson@...ox.com)
Re: WordPress Search Function SQL-Injection (ascii <ascii@...amail.com>)

February 28 (9 messages)

Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerabil… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
RE: MSIE7 browser entrapment vulnerability (probably Firefox, too) (perpetualmotionuk <mailcentre2@...il.com>)
Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability (gera@...est.com)
Evading the Norman SandBox Analyzer (Arne Vidstrom <arne.vidstrom@...ecurity.nu>)
[USN-428-1] Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[CAID 35112]: CA eTrust Intrusion Detection Denial of Service Vulnerability ("Williams, James K" <James.Williams@...com>)
Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability (anohacker@...glemail.com)
[ MDKSA-2007:050 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)

528 messages

Powered by blists - more mailing lists