bugtraq mailing list - 2007/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2007/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 9	² 19	³ 16	⁴ 12	⁵ 7	⁶
⁷ 24	⁸ 20	⁹ 30	¹⁰ 22	¹¹ 23	¹² 5	¹³
¹⁴ 26	¹⁵ 25	¹⁶ 20	¹⁷ 24	¹⁸ 14	¹⁹ 7	²⁰
²¹	²² 36	²³ 25	²⁴ 15	²⁵ 14	²⁶ 6	²⁷
²⁸ 10	²⁹ 10	³⁰ 7	³¹ 11

Messages by day:

May 1 (9 messages)

iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
[SECURITY] [DSA 1284-1] New qemu packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1285-1] New wordpress packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[ GLSA 200705-02 ] FreeType: User-assisted execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-01 ] Ktorrent: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-03 ] Tomcat: Information disclosure (Raphael Marichez <falco@...too.org>)
Radware Security Advisory - Yate 1.1.0 Denial of Service Vulnerability (no-reply@...ware.com)
ZDI-07-023: Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability (zdi-disclosures@...m.com)

May 2 (19 messages)

rPSA-2007-0084-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[ GLSA 200705-05 ] Quagga: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Wordpress All versions XSS (jcarlos.norte@...il.com)
[ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability (erdc@...o.or.id)
[ GLSA 200705-04 ] Apache mod_perl: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ MDKSA-2007:095 ] - Updated ktorrent packages fix vulnerability (security@...driva.com)
[USN-456-1] net-snmp vulnerability (Kees Cook <kees@...ntu.com>)
Atomix Mp3 Buffer Overflow (preth00nker@...il.com)
Vulnerability in InterVations' MailCopa ("skillTube.com" <lists73@...lltube.com>)
Disable website access for sites running Webspeed (suresync@...il.com)
response Progress: Denial of Service attack against WebSpeed possible (suresync@...il.com)
Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Post Nuke v4bJournal Module Sql Inject (abbasi@...mb.ac.ir)
iDefense Security Advisory 05.02.07: LiveData Protocol Server Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
[ MDKSA-2007:096 ] - Updated quagga packages fix DoS vulnerability (security@...driva.com)
TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption (TSRT@...m.com)
TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities (TSRT@...m.com)

May 3 (16 messages)

12All File Upload Vulnerability (John McGuire <bugtraq@...eneandassoc.com>)
[security bulletin] HPSBPI02185 SSRT071290 rev.2 - HP Jetdirect Running ftp, Remote Denial of Service (DoS) (security-alert@...com)
Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
[security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information (security-alert@...com)
Bradford CampusManager v3.1(6) Sensitive Data Disclosure (john@...tinelli.com)
[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability (security@...driva.com)
Aardvark Topsites PHP Directory Disclosure Vulnerability (DoZ@...kersCenter.com)
[security bulletin] HPSBTU02116 SSRT061135 rev.3 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution… (security-alert@...com)
SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability (ilkerkandemir@...et.com)
[security bulletin] HPSBMI02210 SSRT071396 rev.1 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauthorized Denial of Service (DoS) (security-alert@...com)
rPSA-2007-0085-1 lftp (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0090-1 gimp (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0089-1 net-snmp net-snmp-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0088-1 xscreensaver (rPath Update Announcements <announce-noreply@...th.com>)
Re: Medium security hole affecting DSL-G624T (3APA3A <3APA3A@...URITY.NNOV.RU>)

May 4 (12 messages)

Re[2]: Medium security hole affecting DSL-G624T (3APA3A <3APA3A@...URITY.NNOV.RU>)
Multiple vendors ZOO file decompression infinite loop DoS (Jean-Sébastien Guay-Leroux <jean-sebastien@...y-leroux.com>)
Re: Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
Re: Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
PHPSecurityAdmin Remote File Include Exploit (ilkerkandemir@...et.com)
Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities (Marvin Frick <spiderfrick@....de>)
Remote File Include In Script impex (RaeD@...Mail.Com)
RunCms <= 1.5.2 debug_show.php sql injection (retrog@...ce.it)
Re: sunshop v4 >> RFI (lagged2hell@...il.com)
safari's saved password at risk (poplix@...uasia.org)
Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities (Reversemode <advisories@...ersemode.com>)
NPDS <= 5.10 - Multiple SQL injections (aeroxteam_PLEASEDONTSPAMUS@...il.com)

May 5 (7 messages)

Re: WebScarab <= 20060621-0003 cross site scripting (Rogan Dawes <discard@...es.za.net>)
XSS in Microsoft SharePoint (ville.solarius@...il.com)
Re: NPDS <= 5.10 - Multiple SQL injections (aeroxteam_PLEASEDONTSPAMUS@...il.com)
ACP3 (v4.0b3) - Multiple Vulnerabilities (john@...tinelli.com)
[MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue (admin@...orsecurity.de)
RE: XSS in Microsoft SharePoint ("Jim Harrison" <Jim@...tools.org>)
Nuked-klaN 1.7.6 Remote Code Execution Exploit (gmdarkfig@...il.com)

May 7 (24 messages)

Taltech Tal Bar Code ActiveX Control Memory Corruption Vulnerability(-ies) ("sapheal-hack.pl" <sapheal@...k.pl>)
Podium CMS - Cookie Manipulation Exploit (john@...tinelli.com)
SunShop (v4) Multiple Vulnerabilities (john@...tinelli.com)
[ GLSA 200705-06 ] X.Org X11 library: Multiple integer overflows (Raphael Marichez <falco@...too.org>)
UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability (john@...tinelli.com)
Drake CMS (v0.4.0) - CRLF Injection Vulnerability (john@...tinelli.com)
Re: nucleus 3.22 >> RFI (security curmudgeon <jericho@...rition.org>)
Mini Web Shop v.2 Vulnerable to XSS (corrado.liotta@...ce.it)
Kayako eSupport v3.00.90 Cross Site Scripting (XSS) (e1c4@...mail.com)
[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[USN-457-1] elinks vulnerability (Kees Cook <kees@...ntu.com>)
[Reversemode Advisory] VMware Products - GPF Denial of Service (Reversemode <advisories@...ersemode.com>)
pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability (ilkerkandemir@...et.com)
fipsCMS v2.1 Remote SQL injection Vulnerability (ilkerkandemir@...et.com)
phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability (ilkerkandemir@...et.com)
american cart 3.* (abs_path) remote file include (kepledehlah@...wini.co.uk)
PHPHtmlLib <= 2.4.0 Remote File Include Exploit (ilkerkandemir@...et.com)
Re: NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections (technocrat@...e-evolution.com)
iDefense Security Advisory 05.07.07: Sun Microsystems Solaris ACE_SETACL Integer Signedness DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
OTRS <= 2.0.x XSS/XSRF (ciri@...tuax.be)
Updated: webMethods Security Advisory: Glue console directory traversal vulnerability ("Jeremy Epstein" <jepstein@...methods.com>)
Re: 12All File Upload Vulnerability (info@...ivecampaign.com)
[ GLSA 200705-07 ] Lighttpd: Two Denials of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-08 ] GIMP: Buffer overflow (Raphael Marichez <falco@...too.org>)

May 8 (20 messages)

VMSA-2007-0004 Multiple Denial-of-Service issues fixed (VMware Security team <security@...are.com>)
ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability (zdi-disclosures@...m.com)
Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities (securityresearch@...vigilance.com)
rPSA-2007-0092-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (rPath Update Announcements <announce-noreply@...th.com>)
FLEA-2007-0016-1: kernel (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability (securityresearch@...vigilance.com)
[ GLSA 200705-09 ] IPsec-Tools: Denial of Service (Raphael Marichez <falco@...too.org>)
AP Newspower software <=4.0.1 allows remote data manipulation (<gobbles_fo_evar@...hmail.com>)
[ GLSA 200705-11 ] MySQL: Two Denial of Service vulnerabilities (Raphael Marichez <falco@...too.org>)
ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability (zdi-disclosures@...m.com)
WASC Announcement: Distributed Open Proxy Honeypot Project Data Released (announcements@...appsec.org)
[ GLSA 200705-10 ] LibXfont, TightVNC: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities (securityresearch@...vigilance.com)
rPSA-2007-0094-1 cpio (rPath Update Announcements <announce-noreply@...th.com>)
[USN-458-1] MoinMoin vulnerabilities (Kees Cook <kees@...ntu.com>)
ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
[security bulletin] HPSBMA02138 SSRT061184 rev.3 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution (security-alert@...com)
[security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege… (security-alert@...com)
[SECURITY] [DSA 1288-1] New pptpd packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)

May 9 (30 messages)

[ MDKSA-2007:098 ] - Updated clamav packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:099 ] - Updated python packages fix vulnerabilities (security@...driva.com)
RDP TLS downgrade (software@...ks.gov)
SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express (Johannes Greil <research@...-consult.com>)
Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039) ("Alexander Sotirov" <asotirov@...ermina.com>)
Re: UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability (info@...ellion.com)
iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the IOS FTP Server (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
RE: RDP TLS downgrade ("M. Burnett" <mb@...o.net>)
Re: Podium CMS - Cookie Manipulation Exploit ("Steven M. Christey" <coley@...re.org>)
Digital Armaments May-June-2007 Hacking Challenge: VMware (info@...italarmaments.com)
Re: [Dailydave] Vulnerabilities Hashes DB needed (shadown <shadown@...il.com>)
Multiple vulnerabilities ("Michal Bucko (hackpl)" <sapheal@...k.pl>)
Re: [Full-disclosure] Vulnerabilities Hashes DB needed ("Morning Wood" <se_cur_ity@...mail.com>)
Defeating Citibank Virtual Keyboard protection using screenshot method (yashks@...il.com)
Re: [security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary C… (Daniele Calore <orkaan@...aan.org>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Reversemode <advisories@...ersemode.com>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Gadi Evron <ge@...uxbox.org>)
Training Classes in SyScan'07 ("organiser@...can.org" <organiser@...can.org>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Jim Harrison" <Jim@...tools.org>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Jim Harrison" <Jim@...tools.org>)
[ MDKSA-2007:100 ] - Updated bind packages fix vulnerability (security@...driva.com)
iDefense Security Advisory 05.09.07: Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Gadi Evron <ge@...uxbox.org>)
2nd OWASP Israel mini conference at the Interdisciplinary Center Herzliya (IDC), Monday, May 21st, 13:30 ("Ofer Shezaf" <OferS@...ach.com>)
Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method (yashks@...il.com)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Jim Harrison" <Jim@...tools.org>)

May 10 (22 messages)

RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Gadi Evron <ge@...uxbox.org>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Nick FitzGerald <nick@...us-l.demon.co.uk>)
[ MDKSA-2007:101 ] - Updated bind packages fix vulnerability (security@...driva.com)
RE: RDP TLS downgrade ("Roger A. Grimes" <roger@...neretcs.com>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Debasis Mohanty" <d3basis.m0hanty@...il.com>)
Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: RE: Defeating Citibank Virtual Keyboard protection using screenshot method (balazs.zolika@...il.com)
Re: [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability (Stefano <notsafe@...amail.com>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Rogier Mulhuijzen" <rogier.mulhuijzen@...ice.casema.nl>)
squirrelmail CSRF vulnerability (p3rlhax@...il.com)
iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Eli Dart <dart@...net>)
iDefense Security Advisory 05.10.07: Sun Microsystems Solaris SRS Proxy Core srsexec Arbitrary File Read Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("David Gillett" <gillettdavid@...a.edu>)
[ GLSA 200705-12 ] PostgreSQL: Privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200705-13 ] ImageMagick: Multiple buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: squirrelmail CSRF vulnerability (Josh Zlatin-Amishav <josh@...at.cc>)
iDefense Security Advisory 05.10.07: Novell NetMail NMDMC Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
phpMUR Cross Site Scripting (the_3dit0r@...oo.com)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Florian Weimer <fw@...eb.enyo.de>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)

May 11 (23 messages)

iDefense Security Advisory 05.10.07: Apple Darwin Streaming Proxy Multiple Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability (binagres@...il.com)
[Full-disclosure] [ GLSA 200705-13 ] ImageMagick: Multiple buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("James C. Slora Jr." <james.slora@...a.com>)
[ MDKSA-2007:103 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
[Full-disclosure] [ GLSA 200705-12 ] PostgreSQL: Privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Reversemode <advisories@...ersemode.com>)
eFileCabinet Authentication Bypass (VulnerabilityResearch@...italdefense.net)
[ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
fotolog xss (absamu@...il.com)
TFTPdWin 0.4.2 Server Directory Traversal Vulnerability (VulnerabilityResearch@...italdefense.net)
TPTI-07-07: Apple QuickTime STSD Parsing Heap Overflow Vulnerability (TSRT@...m.com)
Re: squirrelmail CSRF vulnerability (Tim Newsham <newsham@...a.net>)
rPSA-2007-0096-1 shadow (rPath Update Announcements <announce-noreply@...th.com>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Nick FitzGerald <nick@...us-l.demon.co.uk>)
ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
[CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilitie… ("Williams, James K" <James.Williams@ca.…)
Multiple Denial of Service attacks possible for Webspeed OpenEdge (suresync@...il.com)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Jan Heisterkamp <janheisterkamp@....de>)
W1L3D4 Philboard v0.2 sql injection ("ALEMIN KRALI" <by_gsy@...mail.com>)
Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5 ("Michael Domberg" <domi@....tm>)
Design Flaw in Deutsche Telekom Speedport w700v broadband router ("Michael Domberg" <mdomberg@....de>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Omar A. Herrera" <omar.herrera@...sg.org>)

May 12 (5 messages)

[vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability (vulnpost-remove@...n.sg)
Webspeed OpenEdge Dos exploit (bendeniz_avci@...mail.com)
Broadband routers and botnets - being proactive (Gadi Evron <ge@...uxbox.org>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Hugo van der Kooij <hvdkooij@...derkooij.org>)
Re: squirrelmail CSRF vulnerability (Josh Zlatin-Amishav <josh@...at.cc>)

May 14 (26 messages)

notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit. (v9 <v9@...ehalo.us>)
Exim 4.66 in conjunction with spamd Overflow issues (calcite@...ec.org)
[SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
SonicBB version 1.0 XSS Attack Vulnerabilities (securityresearch@...vigilance.com)
[SECURITY] [DSA 1290-1] New squirrelmail packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
Uninformed Journal Release Announcement: Volume 7 (sflist@...italoffense.net)
[security bulletin] HPSBMI02210 SSRT071396 rev.2 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS) (security-alert@...com)
Re: XSS in Microsoft SharePoint (Solarius <ville.solarius@...il.com>)
SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities (securityresearch@...vigilance.com)
Re: squirrelmail CSRF vulnerability (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
SonicBB version 1.0 Multiple SQL Injection Vulnerabilities (securityresearch@...vigilance.com)
ifdate 2.* unauthorized administrative access bug (expw0rm@...il.com)
[SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution ("Gerald (Jerry) Carter" <jerry@...ba.org>)
[ GLSA 200705-14 ] XScreenSaver: Privilege escalation (Raphael Marichez <falco@...too.org>)
[SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation ("Gerald (Jerry) Carter" <jerry@...ba.org>)
MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities (securityresearch@...vigilance.com)
BTCrack 1.1 Heisec Release (Thierry Zoller <Thierry@...ler.lu>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Paul Foote <pfoote@...il.com>)
[SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability ("Gerald (Jerry) Carter" <jerry@...ba.org>)
Windows Vista: Non-privileged code can redirect shortcuts to intercept privilege elevation requests (robpaveza@...il.com)
[security bulletin] HPSBGN02189 SSRT071297 rev.3 - ServiceGuard for Linux, Remote Unauthorized Access (security-alert@...com)
iDefense Security Advisory 05.14.07: Samba SAMR Change Password Remote Command Injection Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
IMF 2007 - Deadline Extension (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Apple Safari on MacOSX may reveal user's saved passwords (poplix@...usia.org)
RE: Apple Safari on MacOSX may reveal user's saved passwords ("Lucas, Mark J." <mjlucas@...tech.edu>)
RE: Apple Safari on MacOSX may reveal user's saved passwords ("mailbox@...tinelli.com" <john@...tinelli.com>)

May 15 (25 messages)

ImI image file inclusion in script upload (spriteversus@...mail.com)
Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability ("Michal Bucko (hackpl)" <sapheal@...k.pl>)
[USN-459-1] pptpd vulnerability (Kees Cook <kees@...ntu.com>)
[ MDKSA-2007:104 ] - Updated samba packages fix multiple vulnerabilities (security@...driva.com)
rPSA-2007-0098-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability (Fatih Ozavci <securitylists@...asec.net>)
[ GLSA 200705-15 ] Samba: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (Seth <sethb@...ix.com>)
Re: Exim 4.66 in conjunction with spamd Overflow issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method (Glynn Clements <glynn@...ements.plus.com>)
Re: Broadband routers and botnets - being proactive (Gadi Evron <ge@...uxbox.org>)
Bypassing PFW/HIPS open process control with uncommon identifier (Matousec - Transparent security Research <research@...ousec.com>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (imipak <imipak@...il.com>)
Re: RE: Apple Safari on MacOSX may reveal user's saved passwords (poplix@...uasia.org)
RE: Apple Safari on MacOSX may reveal user's saved passwords (samelinux@...il.com)
Jetbox CMS version 2.1 E-Mail Injection Vulnerability (securityresearch@...vigilance.com)
Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (Davide Del Vecchio <dante@...ghieri.org>)
[SECURITY] [DSA 1291-1] New samba packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
FLEA-2007-0017-1: samba (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability (zdi-disclosures@...m.com)
Re: Jetbox CMS version 2.1 E-Mail Injection Vulnerability (laurent.gaffie@...ecurityfocus.com, m@...urityfocus.com, a@...urityfocus.com, i@...urityfocus.com, l…)
ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability (zdi-disclosures@...m.com)

May 16 (20 messages)

[USN-460-1] Samba vulnerabilities (Kees Cook <kees@...ntu.com>)
I, Bot. Taking advantage of robots power (Article) (crossbower@...amail.com)
[SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability (Noah Meyerhans <noahm@...ian.org>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
Re: Apple Safari on MacOSX may reveal user's saved passwords ("stephen joseph butler" <stephen.butler@...il.com>)
Re: Apple Safari on MacOSX may reveal user's saved passwords (David Cantrell <d.cantrell@...cometechnologies.com>)
vbulletin < 3.6.6 [permanent xss] (laurent.gaffie@...e.com)
RE: Defeating Citibank Virtual Keyboard protection using screenshot method ("Rogier Mulhuijzen" <rogier.mulhuijzen@...ice.casema.nl>)
RE: Apple Safari on MacOSX may reveal user's saved passwords (poplix@...uasia.org)
RE: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (Zhihao <zhihao@...t.sg>)
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability ("Michal Bucko (hackpl)" <sapheal@...k.pl>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Apple Safari on MacOSX may reveal user's saved passwords (graham.coles@...-logic-group.com)
ANNOUNCE: RFIDIOt version 0.1m released (May 16th 2007) (Adam Laurie <adam.laurie@...bunker.net>)
Re[2]: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) ("Matthew Leeds" <mleeds@...leeds.net>)
Re: Apple Safari on MacOSX may reveal user's saved passwords (Ian Ward Comfort <icomfort@...comp.stanford.edu>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (Davide Del Vecchio <dante@...ghieri.org>)
Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability (secure@...antec.com)
CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities ("Williams, James K" <James.Williams@...com>)

May 17 (24 messages)

rPSA-2007-0102-1 libpng (rPath Update Announcements <announce-noreply@...th.com>)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method (sethb@...ix.com)
XSS vulnerability on various german online banking sites (sparkasse) (Ulrich Keil <ulrich@...-keiler.de>)
VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability (john@...tinelli.com)
TSLSA-2007-0017 - multi (Trustix Security Advisor <tsl@...stix.org>)
[SECURITY] [DSA 1293-1] New quagga packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: Apple Safari on MacOSX may reveal user's saved passwords (David Cantrell <d.cantrell@...cometechnologies.com>)
XCon2007 Call For Paper (XFOCUS Security Team <security@...cus.org>)
[SECURITY] [DSA 1291-2] New samba packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[ GLSA 200705-16 ] PhpWiki: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-17 ] Apache mod_security: Rule bypass (Raphael Marichez <falco@...too.org>)
[security bulletin] HPSBTU02209 SSRT071323 rev.1 - HP Tru64 UNIX Running Secure Shell (SSH), Remote Unauthorized Identification of Valid U… (security-alert@...com)
[security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Co… (security-alert@...com)
[OpenPKG-SA-2007.012] OpenPKG Security Advisory (samba) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: Apple Safari on MacOSX may reveal user's saved passwords (graham.coles@...-logic-group.com)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method ("mailbox@...tinelli.com" <john@...tinelli.com>)
Re: Apple Safari on MacOSX may reveal user's saved passwords ("Mark Senior" <senatorfrog@...il.com>)
[security bulletin] HPSBST02214 SSRT071422 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-023 to MS07-029 (security-alert@...com)
Defeating Citibank Virtual Keyboard protection using screenshot method ("aditya kuppa" <aditya1010@...il.com>)
[OpenPKG-SA-2007.013] OpenPKG Security Advisory (png) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included) (john@...tinelli.com)
Re: Defeating Citibank Virtual Keyboard protection using screenshot method ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
[ MDKSA-2007:105 ] - Updated fetchmail packages fix potential APOP vulnerabilities (security@...driva.com)
FLEA-2007-0018-1: libpng (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)

May 18 (14 messages)

[USN-461-1] Quagga vulnerability (Kees Cook <kees@...ntu.com>)
rPSA-2007-0104-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
eSyndiCat Input Validation Error Vulnerability (hack2prison@...oo.com)
[OpenPKG-SA-2007.015] OpenPKG Security Advisory (quagga) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: Apple Safari on MacOSX may reveal user's saved passwords (poplix <poplix@...uasia.org>)
Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method (balazs.zolika@...il.com)
Predictable TCP ISN in Packeteer PacketShaper (nnposter@...closed.not)
[OpenPKG-SA-2007.017] OpenPKG Security Advisory (ratbox) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
ACROS Security: Session Fixation Vulnerability in HP SIM 5.0 ("ACROS Security" <lists@...os.si>)
REWTERZ-20070518 - Authentication Bypass in Rational Soft's Hidden Administrator ("rewterz security team" <advisories@...terz.com>)
Re: XSS vulnerability on various german online banking sites (sparkasse) - CORRECTION (Ulrich Keil <ulrich@...-keiler.de>)
Re: Apple Safari on MacOSX may reveal user's saved passwords ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability (VMware Security team <security@...are.com>)
[USN-436-2] KTorrent vulnerability (Kees Cook <kees@...ntu.com>)

May 19 (7 messages)

Re: Apple Safari on MacOSX may reveal user's saved passwords (poplix <poplix@...uasia.org>)
NASA Site Bug ( Check URI Input ) (matrix@...kerz.ir)
[SECURITY] [DSA 1295-1] New php5 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2007-1355] Tomcat documentation XSS vulnerabilities (Mark Thomas <markt@...che.org>)
RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2 (john@...tinelli.com)
RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability (john@...tinelli.com)
[ MDKSA-2007:106 ] - Updated squirrelmailpackages fix vulnerabilities (security@...driva.com)

May 22 (36 messages)

[ MDKSA-2007:107 ] - Updated evolution packages fix APOP weakness (security@...driva.com)
SimpGB v1.46.0 Remote File Include Exploit (the_3dit0r@...oo.com)
Simple Accessible XHTML Online News v4.6 Remote File Include Exploit (the_3dit0r@...oo.com)
Re: Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot - (webmaster@...bonize.co.uk)
Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities (securityresearch@...vigilance.com)
[USN-459-2] pptpd regression (Kees Cook <kees@...ntu.com>)
RE: DDOS abuse contacts ("test" <noreply@...fileheaven.com>)
Remedy for: Remot File Include In phpexplorator_2_0 (tchouamou@...il.com)
[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability (Noah Meyerhans <noahm@...ian.org>)
[ISecAuditors Security Advisories] Microsoft IIS5 NTLM and Basic authentication bypass (ISecAuditors Security Advisories <advisories@...cauditors.com>)
RedLevel Advisory #022 - ClonusWiki .5 Cross-Site Scripting Vulnerability (john@...tinelli.com)
Jetbox CMS version 2.1 XSS Attack Vulnerability (securityresearch@...vigilance.com)
Security Videos (thejus_mb@...oo.com)
Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) ("Eduardo Tongson" <propolice@...il.com>)
Oracle Forensics Part 4: Live Response ("David Litchfield" <davidl@...software.com>)
[waraxe-2007-SA#050] - Sql Injection in WordPress 2.1.3 (come2waraxe@...oo.com)
Remider: VNSECON 07 Call for Papers ends on June 08 (rd <rd@...ecurity.net>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities (john@...tinelli.com)
Jetbox CMS version 2.1 Multiple Path Disclosure Vulnerabilities (securityresearch@...vigilance.com)
[SECURITY] [DSA 1296-1] New php4 packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
GMTT Music Distro 1.2 XSS Exploit (corrado.liotta@...ce.it)
[security bulletin] HPSBUX02217 SSRT071337 rev.1 - HP-UX running Kerberos, Remote Arbitrary Code Execution (security-alert@...com)
Q1 2007 Application Security Trends Report ("Tom Stracener" <strace@...il.com>)
Cisco Security Advisory: Vulnerability In Crypto Library (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ GLSA 200705-18 ] PPTPD: Denial of Service attack (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[USN-460-2] Samba regression (Kees Cook <kees@...ntu.com>)
[Call for Participation] DIMVA 2007 (Robin Sommer <info@...va.org>)
RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2 (john@...tinelli.com)
[SECURITY] [DSA 1291-3] New samba packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
FINAL Call For Papers: Chaos Communication Camp 2007, Berlin ("Paul Böhm" <paul@...hm.org>)
RedLevel Advisory #020 - HLstats v1.35 Cross-Site Scripting Vulnerability #3 (john@...tinelli.com)
FLEA-2007-0019-1: python (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
phpPgAdmin-4.1.1 Remote File Include & Url Redirecting Vulnerabilitiy (the_3dit0r@...oo.com)
SQL-Injection in IP-TRACKING Mod for phpBB2.0.x (Cornelius Riemenschneider <c.r1@....de>)
RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability (john@...tinelli.com)

May 23 (25 messages)

Magic iso heap over flow <Help> (KaCo678@....com)
BoastMachine v3.0 platinum - Session İd Hacking ("vagrant Pest" <kernel-32@...mail.com>)
NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities (Ismael Briones <ismak@...atel.com>)
ABC Excel Parser Pro v4.0 Remote File Include Exploit (the_3dit0r@...oo.com)
Re: notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit. (kimhm682000@...oo.com)
POC CODE - TI89 Titanium Resident EPO Calculator Virus (T89.GAARA) (Piotr Bania <bania.piotr@...il.com>)
[USN-462-1] PHP vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities (v9@...ehalo.us)
[ MDKSA-2007:108 ] - Updated gimp packages fix stack overflow in sunras plugin (security@...driva.com)
[USN-463-1] vim vulnerability (Kees Cook <kees@...ntu.com>)
Re: Magic iso heap over flow <Help> (v9@...ehalo.us)
Re: notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit. (Jerome Athias <jerome.athias@...e.fr>)
Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Q1 2007 Application Security Trends Report (Corrected Link) ("Tom Stracener" <strace@...il.com>)
Cisco CallManager 4.1 Input Validation Vulnerability (Stefan Friedli <stfr@...p.ch>)
[waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5 (come2waraxe@...oo.com)
FreeBSD Security Advisory FreeBSD-SA-07:04.file (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
iDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerab… (iDefense Labs <labs-no-reply@...fense.c…)
rPSA-2007-0107-1 mysql mysql-bench mysql-server (rPath Update Announcements <announce-noreply@...th.com>)
RE: Cisco CallManager 4.1 Input Validation Vulnerability ("Mark-David McLaughlin (marmclau)" <marmclau@...co.com>)
RE: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS??? ("kingcope" <kingcope@....net>)
Re: Magic iso heap over flow <Help> (c0ntexb@...il.com)
Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS??? (Richard Moore <rich@...tpoint.ltd.uk>)
Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS??? (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re[2]: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS??? (3APA3A <3APA3A@...URITY.NNOV.RU>)

May 24 (15 messages)

rPSA-2007-0108-1 freetype (rPath Update Announcements <announce-noreply@...th.com>)
FLEA-2007-0020-1: freetype (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ MDKSA-2007:109 ] - Updated tetex packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:104-1 ] - Updated samba packages fix multiple vulnerabilities (security@...driva.com)
Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities (Ismael Briones <ismak@...atel.com>)
[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
[OpenPKG-SA-2007.018] OpenPKG Security Advisory (freetype) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
n.runs-SA-2007.008 - Avast! Antivirus CAB parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
Vulnerability in Credant Mobile Guardian Shield for Windows (myucebox@...oo.com)
WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW) ("vagrant - e-hack.org" <kernel-32@...mail.com>)
Dart Communications PowerTCP Service Control (DartService.dll 3.1.3.3) remote buffer overflow (retrog@...ce.it)
FLEA-2007-0021-1: madwifi (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0022-1: file (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
rPSA-2007-0109-1 file (rPath Update Announcements <announce-noreply@...th.com>)

May 25 (14 messages)

n.runs-SA-2007.009 - Avast! Antivirus SIS parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
Multiple XSS in Digirez (xx_hack_xx_2004@...mail.com)
Pligg critical vulnerability ("242th section" <242th.section@...il.com>)
GTP 3G © Gnuturk Portal System year=**&month= Cross-Site Scripting Vulnerability ("vagrant - e-hack.org" <kernel-32@...mail.com>)
BoastMachine index.php Cross Site Scripting Vulnerability (newbinaryfile@...il.com)
IE 6 / Dart Communications PowerTCP ZIP Compression Control (DartZip.dll 1.8.5.3) remote buffer overflow (retrog@...ce.it)
Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulne ("pito pito" <the-modest-pirate@...mail.com>)
Vulnerability - cpCommerce - XSS (jadoba@...oba.net)
TSLSA-2007-0019 - multi (Trustix Security Advisor <tsl@...stix.org>)
iDefense Security Advisory 05.25.07: Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
rtpBreak - detects, reconstructs and analyzes any RTP session ("michele dallachiesa" <michele.dallachiesa@...il.com>)
[OpenPKG-SA-2007.019] OpenPKG Security Advisory (php) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
webCMS_1.00 Database Disclosure Vulnerabilitiy (the_3dit0r@...oo.com)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) ("diabol the japanophile" <diaborusan@...il.com>)

May 26 (6 messages)

[USN-465-1] PulseAudio vulnerability (Kees Cook <kees@...ntu.com>)
Zindizayn Okul Web Sistemi v1.0 Sql VulnZ. (g0rk3m-31@...mail.com)
Re: Pligg critical vulnerability ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
[ GLSA 200705-19 ] PHP: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
RMForum Database Disclosure Vulnerabilitiy (the_3dit0r@...oo.com)
[ GLSA 200705-20 ] Blackdown Java: Applet privilege escalation (Raphael Marichez <falco@...too.org>)

May 28 (10 messages)

n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
[SECURITY] [DSA 1298-1] New otrs2 packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
Inout Meta Searh engine Remote Code Execution (BlackHawk <hawkgotyou@...il.com>)
RFI In Script FlashChat_v479 (Raed@...Mail.Com)
Re: RFI In Script FlashChat_v479 (the.tiger100@...il.com)
DGNews version 2.1 Path Disclosure Vulnerability (securityresearch@...vigilance.com)
DGNews version 2.1 SQL Injection Vulnerability (securityresearch@...vigilance.com)
myEvent version 1.6 Multiple Path Disclosure Vulnerabilities (securityresearch@...vigilance.com)
Re: fx-APP Version 0.0.8.1 (chiweeman@...il.com)
DGNews version 2.1 XSS Attack Vulnerability (securityresearch@...vigilance.com)

May 29 (10 messages)

Mac OS X vpnd local format string (NGSSoftware Insight Security Research <nisr@...software.com>)
Re: DGNews version 2.1 SQL Injection Vulnerability (laurent.gaffie@...il.com)
[MajorSecurity Advisory #48]eggblog - Session fixation Issue (admin@...orsecurity.de)
Re: Mac OS X vpnd local format string (Kevin Finisterre (lists) <kf_lists@...italmunition.com>)
n.runs-SA-2007.011 - Avira Antivir Antivirus UPX parsing Divide by Zero Advisory (<security@...ns.com>)
Apache httpd vulenrabilities (Blazej Miga <bla@....poznan.pl>)
RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability (john@...tinelli.com)
[security bulletin] HPSBUX02087 SSRT4728 rev.5 - HP-UX running TCP/IP Remote Denial of Service (DoS) (security-alert@...com)
cpcommerce < v1.1.0 [sql injection] (laurent.gaffie@...il.com)
Full Path Disclosure in Almnzm (xx_hack_xx_2004@...mail.com)

May 30 (7 messages)

Particle Blogger 1.2.1 SQL Injection (ls@...ima.serapis.net)
Practicle Gallery 1.0.1 XSS (ls@...ima.serapis.net)
[ GLSA 200705-21 ] MPlayer: Two buffer overflows (Raphael Marichez <falco@...too.org>)
[tool] Etherbat - Ethernet topology discovery (bugtraq@...ptonix.org)
Re: RFI In Script FlashChat_v479 ("mailbox@...tinelli.com" <john@...tinelli.com>)
[ GLSA 200705-22 ] FreeType: Buffer overflow (Raphael Marichez <falco@...too.org>)
n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service (<security@...ns.com>)

May 31 (11 messages)

[USN-466-1] freetype vulnerability (Kees Cook <kees@...ntu.com>)
MyBloggie 2.1.6 SQL Injection (ls@...ima.serapis.net)
GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun) ("James Youngman" <jay@....org>)
PHP JackKnife [multiple vulnerabilities] (laurent.gaffie@...il.com)
[ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-24 ] libpng: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-25 ] file: Integer overflow (Raphael Marichez <falco@...too.org>)
Re: Progress Webspeed exploit for all releases (sauge@...uus.com)
[USN-467-1] Gimp vulnerability (Kees Cook <kees@...ntu.com>)
rPSA-2007-0112-1 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
FLEA-2007-0023-1: firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)

437 messages

Powered by blists - more mailing lists