bugtraq mailing list - 2007/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2007/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 15	² 13	³ 16	⁴
⁵ 17	⁶ 15	⁷ 21	⁸ 15	⁹ 35	¹⁰ 26	¹¹
¹² 16	¹³ 30	¹⁴ 22	¹⁵ 24	¹⁶ 27	¹⁷ 12	¹⁸
¹⁹ 23	²⁰ 23	²¹ 10	²² 19	²³ 5	²⁴ 3	²⁵
²⁶ 19	²⁷ 15	²⁸ 19	²⁹ 21	³⁰ 14	³¹ 11

Messages by day:

March 1 (15 messages)

Full disclosure: Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger and LedgerSMB (Chris Travers <chris@...atrontech.com>)
[ MDKSA-2007:051 ] - Updated snort packages fix DoS vulnerability (security@...driva.com)
[USN-416-2] nvidia-glx-config regression (Martin Pitt <martin.pitt@...onical.com>)
Comodo Bypassing settings protection using magic pipe Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
Angel LMS 7.1 - Remote SQL Injection (Guns@...ox.com)
Serendipity unauthenticated SQL-Injection (SaMuschie <samuschie@...oo.de>)
Re: Angel LMS 7.1 - Remote SQL Injection (str0ke <str0ke@...w0rm.com>)
Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting (the_3dit0r@...oo.com)
Re: Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) (sithlordstorm@...il.com)
aWebNews v 1.1=>RFI (mostafa_ragab@....com)
Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (revenge@...afebabe.it)
WB News Remote File Include in all versions (mostafa_ragab@....com)
LayerOne 2007 - Call for Papers and Pre-Registration ("Layer One" <layeronecfp@...il.com>)
aWebNews V 1.1 (mostafa_ragab@....com)
Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability (jrgong420@...mail.com)

March 2 (13 messages)

[ GLSA 200703-01 ] Snort: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service (Raphael Marichez <falco@...too.org>)
SPAW Editor PHP Edition ("RaeD Hasadya" <raed@...mail.com>)
[USN-428-2] Firefox regression (Kees Cook <kees@...ntu.com>)
[ GLSA 200703-03 ] ClamAV: Denial of Service (Raphael Marichez <falco@...too.org>)
vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln. (meto5757@...mail.com)
ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability (zdi-disclosures@...m.com)
Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day (SaMuschie <samuschie@...oo.de>)
Re: Re: WordPress Search Function SQL-Injection (none@...e.com)
iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day ("MC Iglo" <mc.iglo@...glemail.com>)
Remote File Include In DBImageGallery ("RaeD Hasadya" <raed@...mail.com>)
Limited format string in Netrek 2.12.0 (Luigi Auriemma <aluigi@...istici.org>)

March 3 (16 messages)

[ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
WordPress source code compromised to enable remote code execution (ifsecure@...il.com)
webSPELL <= 4.01.02 Remote PHP Code Execution Exploit (gmdarkfig@...il.com)
[ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
rPSA-2007-0048-1 tcpdump (rPath Update Announcements <announce-noreply@...th.com>)
Tyger Bug Tracking System Multiple Vulnerability (corrado.liotta@...ce.it)
BJ Webring XSS (sn0oPy.team@...il.com)
Re: Evading the Norman SandBox Analyzer (Arne Vidstrom <arne.vidstrom@...ecurity.nu>)
Re: Evading the Norman SandBox Analyzer (John Smith <genericjohnsmith@...il.com>)
rPSA-2007-0040-3 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
[Fwd: Re: Angel LMS 7.1 - Remote SQL Injection] (don bailey <don.bailey@...il.com>)
Re: VMware Workstation multiple denial of service and isolation manipulation vulnerabilities (emptysands@...il.com)
Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability (ron.kleinman@....com)
ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: SPAW Editor PHP Edition (Steve Watt <steve.removethis@...t.COM>)

March 5 (17 messages)

[ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow (Raphael Marichez <falco@...too.org>)
[SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Show Password Admin In Script Uploadscript ("RaeD Hasadya" <raed@...mail.com>)
ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities (Stefan Friedli <stfr@...p.ch>)
Konqueror DoS Via JavaScript Read Of FTP Iframe (mark <mark@...dshell.net>)
Extending JavaScript Portscanning to Include Banner Grabbing (mark <mark@...dshell.net>)
XXS in script Phorum ("RaeD Hasadya" <raed@...mail.com>)
Sava's GuestBook Multiple Vulnerabilities (bugtraq@...sec.com)
LI-Guestbook SQL Injection Vulnerability (bugtraq@...sec.com)
Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6 (Sebastian Wolfgarten <sebastian@...fgarten.com>)
HITBSecConf2007 - Malaysia: Call for Papers now Open (Praburaajan <prabu@...kinthebox.org>)
XSS Remote In vCard 2.6 (c)2002 ("RaeD Hasadya" <raed@...mail.com>)
Wordpress <= v2.1.0 (ciri@...tuax.be)
DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25 (Chris Travers <chris@...atrontech.com>)
CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
RE: Wordpress <= v2.1.0 ("McCarty, Eric C." <emccarty@...ucsd.edu>)

March 6 (15 messages)

Apple QuickTime Player Remote Heap Overflow (Piotr Bania <bania.piotr@...il.com>)
Re: Wordpress <= v2.1.0 ("vvitkov@...ergenia.de" <vvitkov@...ergenia.de>)
Call for Participation Chaos Communication Camp 2007 (fukami <fukami@...lin.ccc.de>)
Apple QuickTime udta ATOM Integer Overflow (Sowhat <smaillist@...il.com>)
Re: XXS in script Phorum (Maurice Makaay <maurice.makaay@...ernl.net>)
[security bulletin] HPSBUX02153 SSRT061181 rev.3 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial … (security-alert@...com)
[security bulletin] HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS) (security-alert@...com)
[Reversemode Advisory] Apple Quicktime Color ID remote heap corruption (Reversemode <advisories@...ersemode.com>)
PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass (retrog@...ce.it)
Re: Tinyportal Shoutbox (ichbin@...yportal.net)
Re: Extending JavaScript Portscanning to Include Banner Grabbing (Vincent Archer <varcher@...yall.com>)
rPSA-2007-0050-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code (Matthias Geerdsen <vorlon@...too.org>)
[USN-429-1] tcpdump vulnerability (Kees Cook <kees@...ntu.com>)
[USN-430-1] mod_python vulnerability (Kees Cook <kees@...ntu.com>)

March 7 (21 messages)

[SECURITY] [DSA 1263-1] New clamav packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-431-1] Thunderbird vulnerabilities (Kees Cook <kees@...ntu.com>)
[ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue (security@...driva.com)
Re: Drake CMS v0.3.2 < = RFi Vulnerabilities (legolas558@...rs.sourceforge.net)
iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilitie… (iDefense Labs <labs-no-reply@...fense.c…)
xss in phpmyadmin >=2.8.0 and < 2.10.0 (alfa@...tuax.be)
Firekeeper - IDS for Firefox available (Jan Wrobel <wrobel@...es.ath.cx>)
Re: Remote File Include In DBImageGallery (tg@...mail.com)
month of PHP bugs, secondary message? (Gadi Evron <ge@...uxbox.org>)
Re: [Full-disclosure] month of PHP bugs, secondary message? (Marcus Meissner <meissner@...e.de>)
RPS 6.2 SQL Injection Exploit (s0cratex@...mail.com)
Re: Re: Wordpress <= v2.1.0 (ciri@...tuax.be)
ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability (zdi-disclosures@...m.com)
[SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
FLSA - foresight linux security announcements (Jonathan Smith <smithj@...esightlinux.org>)
Lazarus Guestbook (admin.php)Remote File Include Expliot (c_r_ck@...mail.com)
Buffer-overflow in Conquest client 8.2a (svn 691) (Luigi Auriemma <aluigi@...istici.org>)
rPSA-2007-0051-1 mod_python (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0052-1 kdelibs (rPath Update Announcements <announce-noreply@...th.com>)

March 8 (15 messages)

dynaliens v2.0/v2.1 bypass admin authentification + XSS (sn0oPy.team@...il.com)
Black Hat USA CFP Now Open! (Jeff Moss <jmoss@...ckhat.com>)
Ann: Backtrack 2.0 released (Thierry Zoller <Thierry@...ler.lu>)
[USN-424-2] PHP regression (Kees Cook <kees@...ntu.com>)
[ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability (security@...driva.com)
PHP 4.4.6 crack_opendict() local buffer overflow poc exploit (retrog@...ce.it)
[ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow (security@...driva.com)
[ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability (security@...driva.com)
Word Press Sensitive Directory exposure (SQL) (r00t2000@...h.com)
[ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript (security@...driva.com)
[USN-432-1] GnuPG vulnerability (Kees Cook <kees@...ntu.com>)
Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot - (Mailinglists Address <mailinglist@...resshosting.net>)
Re: Word Press Sensitive Directory exposure (SQL) (none@...e.com)
Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
PHP import_request_variables() arbitrary variable overwrite (Stefano Di Paola <stefano.dipaola@...ec.it>)

March 9 (35 messages)

[ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection (security@...driva.com)
Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005) (Daniel Roethlisberger <daniel.roethlisberger@...c.ch>)
[USN-434-1] Ekiga vulnerability (Kees Cook <kees@...ntu.com>)
TSLSA-2007-0009 - multi (Trustix Security Advisor <tsl@...stix.org>)
MS07-016 FTP Response DOS PoC (Mathew Rowley <mathew.rowley@...il.com>)
XSS In Script deviantART ("RaeD Hasadya" <raed@...mail.com>)
Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability (hugo@...ohacking.com)
Php Nuke POST XSS on steroids (ascii <ascii@...amail.com>)
SyScan'07 - Call for Paper - NEW UPDATES ("organiser@...can.org" <organiser@...can.org>)
RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues (Tim <tim-security@...tinelchicken.org>)
Sql injection in WordPress 2.1.2 ("Omid" <omid@...kers.ir>)
Remote File Include In Script copyright (c) James Coyle; JCcorp ("RaeD Hasadya" <raed@...mail.com>)
[CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability ("Williams, James K" <James.Williams@...com>)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues (KJKHyperion <hackbunny@...ctos.com>)
Remote File Include In Script Coppermine Photo Gallery ("RaeD Hasadya" <raed@...mail.com>)
RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
SecurityFocus is turning seven. What's next? - OFFTOPIC - Please excuse the X-Post (Alfred Huger <alfred_huger@...antec.com>)
RE: Microsoft Windows Vista/2003/XP/2000 file management security issues ("M. Burnett" <mb@...o.net>)
RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues ("Laundrup, Jens" <Jens.Laundrup@...ROKC.GOV>)
Re: Word Press Sensitive Directory exposure (SQL) (Francesco Laurita <francesco@...ncesco-laurita.info>)
RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues ("M. Burnett" <mb@...o.net>)
SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service (research@...-consult.com)
Re: Firekeeper - IDS for Firefox available (Jex <hewhohuntscats@...il.com>)
HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection (UniquE@...quE-Key.Org)
[ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities. (security@...driva.com)
RE: Re[4]: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Sql injection in WordPress 2.1.2 (steven@...ebug.org)
[ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
Re: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Thor (Hammer of God)" <thor@...merofgod.com>)
WordPress XSS under function wp_title() (g30rg3_x <g30rg3x@...il.com>)
Security bypass vulnerability in LedgerSMB and SQL-Ledger (fixes released today) (Chris Travers <chris@...atrontech.com>)
[ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

March 10 (26 messages)

wwwpaintboar(newsfile) Remote File Inclusion Vulnerability (saw_xyz@...oo.com)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues (Tim <tim-security@...tinelchicken.org>)
RE: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
[ECHO_ADV_67$2007] WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[USN-433-1] Xine vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[Argeniss] Practical 10 minutes security audit: Oracle Case (Paper) (Cesar <cesarc56@...oo.com>)
PHP-Nuke <= 8.0 Cookie Manipulation (lang) (programmer@...biansite.com)
Remote File Include In Script Premod SubDog 2 ("RaeD Hasadya" <raed@...mail.com>)
Remote File Include In Script SoftNews Media Group ("RaeD Hasadya" <raed@...mail.com>)
Fıstıq Duyuru Scripti Remote Sql İnjection Exploit (crazy_king@...7.org)
WWWboard password disclosure (r00t2000@...h.com)
Grayscale <= 0.8.0 Multiple Vulnerabilities (omnipresent@...il.it)
Pre-open files attack agains locked file (3APA3A <3APA3A@...URITY.NNOV.RU>)
[ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit (gmdarkfig@...il.com)
Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (Stefan Esser <sesser@...dened-php.net>)
Re: PHP Classifieds 7.1 - Remote File Include Vulnerability (support@...tascripts.com)
Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (Stefano Di Paola <stefano.dipaola@...ec.it>)
Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (ascii <ascii@...amail.com>)
[ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability (Raphael Marichez <falco@...too.org>)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues ("Thor (Hammer of God)" <thor@...merofgod.com>)
RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
Re: Firekeeper - IDS for Firefox available (Bob Beck <beck@...h.cns.ualberta.ca>)
Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (Stefan Esser <sesser@...dened-php.net>)
[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))

March 12 (16 messages)

Remote File Include In Script PHP Photo Album ("RaeD Hasadya" <raed@...mail.com>)
Re: Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues ("Thor (Hammer of God)" <thor@...merofgod.com>)
[security bulletin] HPSBUX02129 SSRT061149 rev.2 - HP-UX running SLP, Remote Unauthorized Access (security-alert@...com)
Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
Remote File Include In Script moodle-1.7.1 ("RaeD Hasadya" <raed@...mail.com>)
Remote File Include In ClipShare.v1.5.3 ("RaeD Hasadya" <raed@...mail.com>)
Wiki Remote Authentication Bypass Vulnerability (DoZ@...kersCenter.com)
Re: Php Nuke POST XSS on steroids (ascii <ascii@...amail.com>)
Re: Php Nuke POST XSS on steroids (Paul Laudanski <paul@...tlecops.com>)
AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability ("BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>)
Re: Wiki Remote Authentication Bypass Vulnerability ("Matt D. Harris" <mdh@...itox.net>)
Fantastico In all Version Cpanel 10.x <= local File Include ("z3r0 z3r0.2.z3r0" <z3r0.2.z3r0@...il.com>)
GuppY v4.0 remote del files/index (sn0oPy.team@...il.com)
RIM BlackBerry Pearl 8100 Browser DoS (clappymonkey@...il.com)
Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang) (Paul Laudanski <paul@...tlecops.com>)
[security bulletin] HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code (security-alert@...com)

March 13 (30 messages)

Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite ("Steven M. Christey" <coley@...re.org>)
Re: RIM BlackBerry Pearl 8100 Browser DoS (anon@....com)
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Steven M. Christey" <coley@...re.org>)
[USN-435-1] Xine vulnerability (Kees Cook <kees@...ntu.com>)
Re: Firekeeper - IDS for Firefox available (Jan Wrobel <wrobel@...es.ath.cx>)
[USN-436-1] KTorrent vulnerabilities (Kees Cook <kees@...ntu.com>)
RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability ("Dr Joe" <sir_scriptsalot@...pond.com>)
[ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability (erdc@...o.or.id)
Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Thierry Zoller <Thierry@...ler.lu>)
Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 ("Paul Böhm" <paul@...hm.org>)
Re: Re: Firekeeper - IDS for Firefox available (irondell@...tmail.fm)
Re: Remote File Include In Script moodle-1.7.1 (martin@...dle.com)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln ("BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>)
[ECHO_ADV_73$2007] MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability (erdc@...o.or.id)
Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Gadi Evron <ge@...uxbox.org>)
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Richard Huxton <dev@...honet.com>)
Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Reversemode <advisories@...ersemode.com>)
Re: Firekeeper - IDS for Firefox available (Jan Wrobel <wrobel@...es.ath.cx>)
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Daniel Hazelton <dhazelton@...er.net>)
[USN-432-2] GnuPG2, GPGME vulnerability (Kees Cook <kees@...ntu.com>)
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit (UniquE@...quE-Key.Org)
Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln (Mailinglists Address <mailinglist@...resshosting.net>)
Re: Re: RIM BlackBerry Pearl 8100 Browser DoS (clappymonkey@...il.com)
Re: Firekeeper - IDS for Firefox available (Bob Beck <beck@...h.cns.ualberta.ca>)
[ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability (security@...driva.com)
[ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability (security@...driva.com)
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Paweł Goleń <p_golen@...onet.pl>)
Re: Php Nuke POST XSS on steroids (Paul Laudanski <paul@...tlecops.com>)
CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)

March 14 (22 messages)

[ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation (<security@...ns.com>)
n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery (<security@...ns.com>)
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery (Moritz Muehlenhoff <jmm@...til.org>)
n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion (<security@...ns.com>)
n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection (<security@...ns.com>)
[ GLSA 200703-12 ] SILC Server: Denial of Service (Matthias Geerdsen <vorlon@...too.org>)
SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal (David Matscheko <research@...-consult.com>)
SymEvent Driver Local Access System Denial of Service (Matousec - Transparent security Research <research@...ousec.com>)
New report on Windows Vista network attack surface (Jim Hoagland <jim_hoagland@...antec.com>)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability ("starcadi starcadi" <starcadi@...il.com>)
Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (retrog@...ce.it)
iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability (erdc@...o.or.id)
Re: Remote File Include In Script PHP Photo Album ("Steven M. Christey" <coley@...re.org>)
WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit (UniquE@...quE-Key.Org)
Phishing using IE7 local resource vulnerability ("avivra" <avivra@...il.com>)
[ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation (Raphael Marichez <falco@...too.org>)
Woltab Burning Board SQL Injection usergroups.php (x666@...e-mail.net)

March 15 (24 messages)

Horde 3.1.4 (RC1) fixes XSS issue (Moritz Naumann <security@...itz-naumann.com>)
[ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability (erdc@...o.or.id)
IBM Rational ClearQuest Web - Cross Site Scripting (james@...rkee.co.uk)
[ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability (erdc@...o.or.id)
Orion-Blog v2.0 Version Remote Privilege Escalation Exploit (UniquE@...quE-Key.Org)
Norton Insufficient validation of 'SymTDI' driver input buffer (Matousec - Transparent security Research <research@...ousec.com>)
Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Nicolas RUFF <nicolas.ruff@...il.com>)
XSS vulnerability in the online help system of several Cisco products (cassio@...l.com)
Remote File Inclusion in ViperWeb (asamad@...atech.com)
Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues (Moritz Naumann <security@...itz-naumann.com>)
iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
PHP <= 4.4.6 ibase_connect() local buffer overflow (retrog@...ce.it)
Re: Phishing using IE7 local resource vulnerability (robert@...rythingeverything.co.uk)
Re: XSS vulnerability in the online help system of several Cisco products (Eloy Paris <elparis@...co.com>)
RE: Phishing using IE7 local resource vulnerability ("avivra" <avivra@...il.com>)
QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow ("starcadi starcadi" <starcadi@...il.com>)
- Call for chapters - Handbook of Research on Digital Anti-forensics and In-security Governance (Jeimy Cano <jjcano@...oo.com>)
LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow ("starcadi starcadi" <starcadi@...il.com>)
Re: Firekeeper - IDS for Firefox available (Gadi Evron <ge@...uxbox.org>)
vbulletin admincp sql injection (disfigure <disfigure@...il.com>)
WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include (drackanz@...il.com)
PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln ("BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>)
Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit (UniquE@...quE-Key.Org)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)

March 16 (27 messages)

Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php (Bastian Ahrens <mail@...ks.com>)
DirectAdmin Cross Site Scripting XSS (Mandr4ke.root@...il.com)
[SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion (Moritz Muehlenhoff <jmm@...ian.org>)
MS07-012 Not Fixed ("Greg Sinclair" <gssincla@...software.com>)
[CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities ("Williams, James K" <James.Williams@...com>)
Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability ("BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>)
Oracle Portal PORTAL.wwv_main.render_warning_screen XSS ("Sea Shark" <sead3nx@...il.com>)
RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability ("Topolski, Leo" <LTopolski@....com>)
Re: fx-APP Version 0.0.8.1 (osdesk@...il.com)
Call For Papers - IT Underground Dublin ("Marcin Tkaczyk" <marcin.tkaczyk@...nderground.org>)
April, 2007 is the "Month of Myspace Bugs" (mondo_armando@...holic.org)
iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Your Opinion ("Mark Litchfield" <Mark@...software.com>)
Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit (UniquE@...quE-Key.Org)
rPSA-2007-0056-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0057-1 libwpd (rPath Update Announcements <announce-noreply@...th.com>)
Re: Your Opinion (bugtraq@...security.net)
Re: Your Opinion ("Jonathan Glass (GM)" <jonathan.glass@...il.com>)
RE: Your Opinion (Mario Contestabile <marioc@...puter.org>)
Re: Your Opinion (Crispin Cowan <crispin@...ell.com>)
[ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities (security@...driva.com)
[ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities (security@...driva.com)
Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot ("Steven M. Christey" <coley@...re.org>)
[NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEV… (Netragard Security Advisories <advisori…)
Re: Your Opinion (Neil Dickey <neil@...l.niu.edu>)
Re: Your Opinion ("William A. Rowe, Jr." <wrowe@...e-clan.net>)
RE: Your Opinion ("Scott Blake" <blake@...eport.org>)

March 17 (12 messages)

[ GLSA 200703-14 ] Asterisk: SIP Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
Bypassing Mcafee Entreprise Password Protection (thesinoda@...mail.com)
CLBOX <= (signup.php header) Remote File Include Vulnerability ("BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>)
Re: Your Opinion (The Fungi <fungi@...goth.org>)
Your Opinion + ("Mark Litchfield" <Mark@...software.com>)
Re: Your Opinion (Casper.Dik@....COM)
RE: Your Opinion ("Jim Harrison" <Jim@...tools.org>)
Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability (starcadi <starcadi@...il.com>)
Re: Bypassing Mcafee Entreprise Password Protection (3APA3A <3APA3A@...URITY.NNOV.RU>)
[SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))

March 19 (23 messages)

Full Disclosure: Arbitrary execution vulnerability in SQL-Ledger and LedgerSMB (Chris Travers <chris@...atrontech.com>)
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution 0day (gmdarkfig@...il.com)
[SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
MetaForum <= 0.513 Beta - Remote file upload Vulnerability (aeroxteam------nospam-----@...il.com)
[ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-20 ] LSAT: Insecure temporary file creation (Raphael Marichez <falco@...too.org>)
RE: Bypassing Mcafee Entreprise Password Protection ("Rogheden Anders" <Anders.Rogheden@....com>)
Unclassified NewsBoard 1.6.3 multiples logs disclosure (none@...e.com)
Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability (dh@...ereddefense.com)
CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability (snakeapollon@...oo.com)
phpx 3.5.15 multiples vulnerabilities (none@...e.com)
Re: Your Opinion ("Forrest J. Cavalier III" <mibsoft@...software.com>)
RE: Your Opinion ("Alex Eckelberry" <AlexE@...belt-software.com>)
Re: Your Opinion + (Alex Belits <abelits@...bos.illtel.denver.co.us>)
Conflict of Interest - My summary ("Mark Litchfield" <Mark@...software.com>)
[Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation (Reversemode <advisories@...ersemode.com>)
w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities (jesper.jurcenoks@...vigilance.com)
w-agora version 4.2.1 Information Disclosure Vulnerability (jesper.jurcenoks@...vigilance.com)
Re: CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability (str0ke <str0ke@...w0rm.com>)
[USN-437-1] libwpd vulnerability (Kees Cook <kees@...ntu.com>)
ZynOS v3.40 One packet killer (Joxean Koret <joxeankoret@...oo.es>)

March 20 (23 messages)

Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy ("Sea Shark" <sead3nx@...il.com>)
Web Wiz Forums 8.05 (MySQL version) SQL Injection ("Ivan Fratric" <ifsecure@...il.com>)
Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include (craig@....us)
Advisory - Redirection Vulnerability in wp-login.php. (Metaeye SG <contact@...aeye.org>)
w-agora [multiples file upload,xss,full path disclosure,error sql] (none@...e.com)
Call For Papers - IT Underground Dublin (marcin.tkaczyk@...nderground.org)
Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: Your Opinion (Andrew Kramer <blackops@...wincentral.org>)
Re: Conflict of Interest - My summary ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
RE: Your Opinion ("Jim Harrison" <Jim@...tools.org>)
RE: Your Opinion ("Jim Harrison" <Jim@...tools.org>)
RE: Your Opinion (<jay.tomas@...osecguru.com>)
Re: Your Opinion (Paul Stepowski <p.stepowski@....edu.au>)
Re: Your Opinion (Jack Lloyd <lloyd@...dombit.net>)
Helix Server heap overflow (research@...g.net)
[SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug (Noah Meyerhans <noahm@...ian.org>)
Linksys WAG200G - Information disclosure (dniggebrugge@...mail.com)
Re: Your Opinion + ("Thor (Hammer of God)" <thor@...merofgod.com>)
[SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200703-23 ] WordPress: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: Linksys WAG200G - Information disclosure ("Shawn Merdinger" <shawnmer@...il.com>)
[ GLSA 200703-21 ] PHP: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

March 21 (10 messages)

[ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability (security@...driva.com)
[USN-438-1] Inkscape vulnerability (Kees Cook <kees@...ntu.com>)
Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Evolution Shared Memo Categories Format String Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBUX02156 SSRT061236 rev.2 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Den… (security-alert@...com)
HPSBGN02189 SSRT071297 rev.2 - ServiceGuard for Linux, Remote Unauthorized Access (security-alert@...com)
RE: Your Opinion (Neale Green <neale.green@...le.org>)
Two new DoS Vulnerabilities in Asterisk Fixed ("Matt Riddell (NZ)" <matt.riddell@...eapps.com>)

March 22 (19 messages)

**SubHub v2.3.0** (anon@...n.com)
[ECHO_ADV_77$2007] Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability (erdc@...o.or.id)
CFP for RAID 2007: Extended due date for papers: April 8th (jeffh@....edu.au)
[USN-439-1] file vulnerability (Kees Cook <kees@...ntu.com>)
[USN-440-1] MySQL vulnerability (Kees Cook <kees@...ntu.com>)
FLEA-2007-0001-1: firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
rPSA-2007-0059-1 file (rPath Update Announcements <announce-noreply@...th.com>)
ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user (yearsilent@...oo.com)
Remote File Include In copyright © James Coyle; JCcorp ("RaeD Hasadya" <raed@...mail.com>)
Remote File Include In Coppermine Photo Gallery ("RaeD Hasadya" <raed@...mail.com>)
[ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability (security@...driva.com)
[NB07-22] Multiple vulnerabilities in NETxEIB OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server ("Lluis Mora" <llmora@...tralbit.com>)
[ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability (security@...driva.com)

March 23 (5 messages)

CRLF injection in PHP ftp function (fangxiaodun@...cuz.com)
[ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability (security@...driva.com)
iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vu… (iDefense Labs <labs-no-reply@...fense.c…)
Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi ("Cold - Zero" <c.o.1.d.0@...mail.com>)

March 24 (3 messages)

File Upload System V1.0 (AD_BODY_TEMP) multiple file include (ngevedBangetAsli@...hyesah.org)
FLEA-2007-0002-1: inkscape (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Remote File Include In phpBB-2.0.19 ("RaeD Hasadya" <raed@...mail.com>)

March 26 (19 messages)

BOGUS: Remote File Include In phpBB-2.0.19 (Cornelius Riemenschneider <c.r1@....de>)
Re: Remote File Include In phpBB-2.0.19 (neothermic@...bb.com)
CcCounter 2.0 cross-site scripting vulnerability (localexploit@...mail.com)
Path Disclosure - Wordpress 2.1.2 (lj@...jectzero.net)
Horde Webmail Multiple HTML Injection vulnerability (DoZ@...kersCenter.com)
Mephisto blog is vulnerable to XSS (Sergey Tikhonov <st@...u.net>)
Fizzle : Firefox Extension Vulnerability (CrYpTiC MauleR <crypticmauler@...oo.com>)
Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion (stormhacker@...mail.com)
Re: Linksys WAG200G - Information disclosure (Bartłomiej Ochman <fback@...ck.net>)
Re: [Full-disclosure] XSS at Aon.at, Austrian ISP ("Nikolay Kichukov" <hijacker@...um.net>)
Multiple XSS in IronMail (Javier Olascoaga <deese@...zialk.net>)
PHP 5.2.1 with PECL phpDOC local buffer overflow (retrog@...ce.it)
Re: **SubHub v2.3.0** (webmaster@...hub.com)
FLEA-2007-0003-1: cups (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Playstation 3 "Remote Play" Remote DoS Exploit (mak0b@...ox.com)
Libero.it (italian ISP) XSS vulnerability (rosario.valotta@...il.com)
[USN-441-1] Squid vulnerability (Kees Cook <kees@...ntu.com>)
[USN-442-1] Evolution vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200703-24 ] mgv: Stack overflow in included gv code (Raphael Marichez <falco@...too.org>)

March 27 (15 messages)

Re: Horde Webmail Multiple HTML Injection vulnerability (Jan Schneider <jan@...de.org>)
Re: Path Disclosure - Wordpress 2.1.2 (jm <jm@....com.au>)
Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC (UniquE@...quE-Key.Org)
Metasploit Framework 3.0 RELEASED! (H D Moore <sflist@...italoffense.net>)
[KAPDA::#64] - Flexbb Sql Injection (alireza hassani <trueend5@...oo.com>)
[ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[KDE Security Advisory] KDE ioslave PASV port scanning vulnerability (Dirk Mueller <mueller@....org>)
Yahoo! Messenger Auth Bypass Vulnerability (kishor.tech@...il.com)
[ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability (security@...driva.com)
Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 ("skillTube.com" <lists73@...lltube.com>)
[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
Linux Kernel DCCP Memory Disclosure Vulnerability (Robert Święcki <jagger@...ecki.net>)
[USN-443-1] Firefox vulnerability (Kees Cook <kees@...ntu.com>)
Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability (Robert Święcki <jagger@...ecki.net>)
Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability (5150sd@...il.com)

March 28 (19 messages)

Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC (andy@...ium.net)
[USN-444-1] OpenOffice.org vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-445-1] XMMS vulnerabilities (Kees Cook <kees@...ntu.com>)
Bypass phishing protection in Firefox / Opera (zonafirefox@...il.com)
[USN-446-1] NAS vulnerabilities (Kees Cook <kees@...ntu.com>)
Corel Wordperfect Office X3 Stack Overflow (jonny@...-art.net)
[Full-Disclosure] Another XSS vulnerability in italian Libero.it ("Matteo G.P. Flora" <mf@...teoflora.com>)
iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerabilit… (iDefense Labs <labs-no-reply@...fense.c…)
ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Re: Multiple Vulnerabilities In osTicket (eticket@...k.org)
Re: [SECURITY ALERT] osTicket bugs (eticket@...k.org)
Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Respo…)
Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). ("William A. Rowe, Jr." <wrowe@...e-clan.…)
Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue ("C. Michael Pilato" <cmpilato@...lab.net>)
Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) ("Tim Rees" <timrees1@...il.com>)
Update: ViewCVS and ViewVC 'checkout view' content type fixation issue (Moritz Naumann <security@...itz-naumann.com>)
[SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Arbitrary Command Execution in DataDomain Administrator Interface (Elliot Kendall <ekendall@...ndeis.edu>)

March 29 (21 messages)

rPSA-2007-0061-1 inkscape (rPath Update Announcements <announce-noreply@...th.com>)
Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Bypass phishing protection in Firefox / Opera (Anonymous@...e.com)
Xoops Module Friendfinder <= 3.3 (view.php id) BLIND SQL Injection Exploit (ajannhwt@...mail.com)
Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user (support@...nalyzer.com)
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability (bithedz@...il.com)
Widespread vulnerabilities in Libero.it/Infostrada.it web portals (rosario.valotta@...il.com)
[Full-disclosure] [USN-447-1] KDE library vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability (acme@...stprotocols.net)
[USN-447-1] KDE library vulnerabilities (Kees Cook <kees@...ntu.com>)
Windows Live Spaces logged user NetworkSetup.aspx cross site scripting (paolo.difebbo@...il.com)
Re: Re: Bypass phishing protection in Firefox / Opera (bob@....com)
AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability ("Justin Seitz" <jms@...hunter.ca>)
[ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities (security@...driva.com)
iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
FLEA-2007-0004-1: openoffice.org (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror (security@...driva.com)
[ GLSA 200703-25 ] Ekiga: Format string vulnerability (Raphael Marichez <falco@...too.org>)
[ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities (security@...driva.com)
FLEA-2007-0005-1: slocate (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: Re: Bypass phishing protection in Firefox / Opera (zonafirefox@...il.com)

March 30 (14 messages)

Mybb Change Password Vulnerability (security@...or.net)
0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability ("M. Shirk" <shirkdog_list@...mail.com>)
VMSA-2007-0002 VMware ESX security updates (VMware Security team <security@...are.com>)
DrakeCMS multiple vulerabilities (security@...or.net)
AIX 4.3 lsmcode local root command execution (pr1nce_empire@...oo.com)
Re: Bypass phishing protection in Firefox / Opera ("Łukasz Pilorz" <lukasz@...orz.net>)
The Week Of Vista Bugs [TWOVB] (TWOVB Team <twovb@...urinfos.info>)
[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability (erdc@...o.or.id)
Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user (support@...nalyzer.com)
ANI Zeroday, Third Party Patch ("Marc Maiffret" <mmaiffret@...e.com>)
[ GLSA 200703-26 ] file: Integer underflow (Raphael Marichez <falco@...too.org>)
Busting The Bluetooth Myth ("Max Moser" <max.moser@...il.com>)
TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability (TSRT@...m.com)

March 31 (11 messages)

Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Jan Wrobel <wrobel@...es.ath.cx>)
Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) ("Eric Sites" <erics@...belt-software.com>)
CA BrightStor ARCserve Backup Mediasvr.exe vulnerability ("Williams, James K" <James.Williams@...com>)
On-going Internet Emergency and Domain Names (Gadi Evron <ge@...uxbox.org>)
Windows .ANI Stack Overflow Exploit (devcode29@...mail.com)
Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC (UniquE@...quE-Key.Org)
Remot File Include In SLAED_CMS_2 ("RaeD Hasadya" <raed@...mail.com>)
Remot File Include In Shop-SCRIPT FREE ("RaeD Hasadya" <raed@...mail.com>)
Remot File Include In Aardvark Topsites PHP 5 ("RaeD Hasadya" <raed@...mail.com>)

486 messages

Powered by blists - more mailing lists