bugtraq mailing list - 2007/08

Messages by day:

August 1 (15 messages)

• [USN-493-1] Firefox vulnerabilities (Kees Cook <kees@...ntu.com>)
• Pwnie Awards Ceremony (Alexander Sotirov <alex@...irov.net>)
• WikiWebWeaver 1.1 beta Upload Shell Vulnerability (yollubunlar@...lubunlar.org)
• [security bulletin] HPSBUX02247 SSRT071432 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS) (security-alert@...com)
• [security bulletin] HPSBUX02248 SSRT071437 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS) (security-alert@...com)
• Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface (tomaz.bratusa@...mintell.com)
• PHP-Nuke (ALL versions) Multiple XSS and HTML injection (mikispag@...il.com)
• FLEA-2007-0038-1 gimp (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: BellaBook Admin Bypass/Remote Code Execution (jem@...jabella.co.uk)
• Re: Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability (bugtraq@...ph3us.org)
• FLEA-2007-0039-1 firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [BuHa-Security] DoS Vulnerability in Konqueror 3.5.7 (bugtraq@...ph3us.org)
• FreeBSD Security Advisory FreeBSD-SA-07:01.jail [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• FreeBSD Security Advisory FreeBSD-SA-07:06.tcpdump (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• FreeBSD Security Advisory FreeBSD-SA-07:07.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

• [ MDKSA-2007:152 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• Pluck 4.3 themes.php Remote File Inclusion and disclosure (no-reply@...a-security.net)
• [USN-494-1] Gimp vulnerability (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2007:151 ] - Updated qt3 packages fix multiple vulnerabilities (security@...driva.com)
• CVE-2007-3384: XSS in Tomcat cookies example (Mark Thomas <markt@...che.org>)
• Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10) ("hfli" <hfli@...tinet.com>)
• rPSA-2007-0153-1 qt-x11-free (rPath Update Announcements <announce-noreply@...th.com>)
• RE: Re: Guidance Software response to iSEC report on EnCase ("Alex Stamos" <alex@...cpartners.com>)
• Minimo .2 and more Firefox 2.0.0.6 Password Manager Vulnerabilites (Seth Fogie <seth@...scanner.com>)
• Hunkaray Okul Portali v1.1 (tr) Sql injection Vuln (yollubunlar@...lubunlar.org)
• our de France Pool 1.0.1 Remote File &#304;nclude Bug (yollubunlar@...lubunlar.org)
• [Whitepaper SecNiche] Insecurities in Implementing Serialization in BISON (Aditya K Sood <zeroknock@...niche.org>)
• Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) (tarkus@...fp.org)

• la-nai cms_v1.2.14 - Remote SQL Injection (k1tk4t@...hack.org)
• [Aria-Security.Net] Next Gen Portfolio Manager SQL Injection (Advisory@...a-security.net)
• FLEA-2007-0040-1 thunderbird (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [USN-495-1] Qt vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• FLEA-2007-0041-1 gdm (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability (bmiskov@...ecatnetworks.com)
• [USN-496-1] koffice vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [SECURITY] [DSA 1344-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [Aria-Security.Net] Gallery In A Box Username & Password Parameters SQL Injection (Advisory@...a-security.net)
• [ELEYTT] 3SIERPIEN2007 ("Michal Bucko" <michal.bucko@...ytt.com>)
• Aceboard forum, SQL injection (karmaguedon@...mail.com)
• FLEA-2007-0042-1 qt (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: security contact for uat.edu needed (Hans Wolters <hans.wolters@...all.nl>)
• Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion Stack Overflow (Werner Van Belle <werner@...lowcouch.org>)
• Re: Exploit In Internet Explorer (Gadi Evron <ge@...uxbox.org>)

• Re: [ELEYTT] 3SIERPIEN2007 (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: [ELEYTT] 3SIERPIEN2007 ("Michal Bucko" <michal.bucko@...ytt.com>)
• [ELEYTT] 4SIERPIEN2007 ("Michal Bucko" <michal.bucko@...ytt.com>)
• [SECURITY] [DSA 1347-1] New xpdf packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Immunity Debugger is now released (nicolas.waisman@...unityinc.com)
• [SECURITY] [DSA 1348-1] New poppler packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDKSA-2007:153 ] - Updated gd packages fix several vulnerabilities (security@...driva.com)
• [CFP] Kiwicon 2k7 - Call For Papers (<kiwicon@...icon.org>)
• Re: MySQLDumper vulnerability: Bypassing Apache based access control possible (admin@...qldumper.de)
• Re: security contact for uat.edu needed (Hans Wolters <php@...all.nl>)
• ContentDM Search.php XSS Vulnerability (Monkeyboy9997@...mail.com)
• Joomla J! Reactions Component Remote File include Bug (yollubunlar@...mail.com)
• [SECURITY] [DSA 1345-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1346-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

• AL-Caricatier V.2.5 Remote File Include (RaeD@...Mail.Com)
• ALL vgallite Remote File Include (RaeD@...Mail.Com)
• AuraCMS [Forum Module] - Remote SQL Injection (k1tk4t@...hack.org)
• AL-Athkar.v2.0 Remote File Include (RaeD@...Mail.Com)
• [SECURITY] [DSA 1349-1] New libextractor packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [ELEYTT] 3SIERPIEN2007 (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re:Re: [ELEYTT] 3SIERPIEN2007 ("Michal Bucko" <michal.bucko@...ytt.com>)
• Question about exploit exposing SSN & user info (hsukowa@...oo.com)
• Envolution (News) <= v1.1.0 Remote SQL Injection (k1tk4t@...hack.org)
• DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy (William Warren <hescominsoon@...anuelcomputerconsulting.com>)
• CORRECTION: EXPL0it FIXED :JPG PoC denial of service exploit by CrazyAngel (reza_zahfaran@...oo.com)
• [security bulletin] HPSBMA02250 SSRT061275 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Execution of Arbitrar… (security-alert@...com)
• [security bulletin] HPSBUX02251 SSRT071449 rev.1 - HP-UX Running BIND, Remote DNS Cache Poisoning (security-alert@...com)
• Active Gmail "Sidejacking" - https is NOT ENOUGH (Mike Perry <mikeperry@...ked.org>)
• PHP mSQL (msql_connect) Buffer Overflow PoC (nima_501@...oo.com)
• cfp: TRsec, Istanbul Turkey (gadie@...ondsecurity.com)
• TS-2007-002-0: BlueCat Networks Adonis root Privilege Access ("anonymous.c7ffa4057a" <anonymous.c7ffa4057a@...nymousspeech.com>)
• RE: Question about exploit exposing SSN & user info ("J. Patterson Wicks" <pwicks@...gen.com>)
• [SECURITY] [DSA 1350-1] New tetex-bin packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• RE: Question about exploit exposing SSN & user info ("Michal Bucko" <michal.bucko@...ytt.com>)
• EZPhotoSales 1.9.3 Multiple Vulnerabilities (Seth Fogie <seth@...scanner.com>)
• Re: Question about exploit exposing SSN & user info ("J. Oquendo" <sil@...iltrated.net>)
• Ariadne CMS Remote File Inclusion (Advisory@...a-security.net)
• Konqueror: URL address bar spoofing vulnerabilities (Robert Swiecki <jagger@...ecki.net>)
• ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability (zdi-disclosures@...m.com)

• Re: Konqueror: URL address bar spoofing vulnerabilities (paraw <paraw@...oo.it>)
• Re: [Full-disclosure] Konqueror: URL address bar spoofing vulnerabilities (Robert Swiecki <jagger@...ecki.net>)
• Re: CORRECTION: EXPL0it FIXED :JPG PoC denial of service exploit by CrazyAngel (ifsecure@...il.com)
• Re: Konqueror: URL address bar spoofing vulnerabilities (Jonathan Smith <smithj@...th.com>)
• C-SAM oneWallet forget password Cross Site Scripting vulnerability (tusharvartak@...mail.com)
• Re: [Full-disclosure] Konqueror: URL address bar spoofing vulnerabilities (Jonathan Smith <smithj@...th.com>)
• VietPHP Remote File Inclusion Vulnerbility (master-of-desastor@...mail.com)
• Re: [Full-disclosure] Konqueror: URL address bar spoofing vulnerabilities (Patrick Nagel <mail@...rick-nagel.net>)
• [SECURITY] [DSA 1352-1] New pdfkit.framework packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• iDefense Security Advisory 08.07.07: Hewlett-Packard HP-UX Remote ldcconn Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [SECURITY] [DSA 1351-] New bochs packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
• iDefense Security Advisory 08.07.07: Apple Mac OS X mDNSResponder HTTP Request Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• ASA-2007-019: Remote crash vulnerability in Skinny channel driver (Security Response Team <security@...erisk.org>)
• DoS in Microsoft Media Player 11 on Win XP SP2 (thesinoda@...mail.com)
• XSS vulnerability in Cisco MeetingPlace ("Disclosure" <Disclosure@...uretest.com>)
• RE: XSS vulnerability in Cisco MeetingPlace ("Paul Oxman (poxman)" <poxman@...co.com>)
• [USN-496-2] poppler vulnerability (Kees Cook <kees@...ntu.com>)
• Guestbook Script 1.9 RFI (Ma$tEr-0F-De$a$t0r@...mail.com)
• Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Coppermine Photo Gallery (yabbse.inc.php) Remote File Inclusion Vulnerability (master-of-desastor@...mail.com)
• [ GLSA 200708-02 ] Xvid: Array indexing vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200708-01 ] Macromedia Flash Player: Remote arbitrary code execution (Raphael Marichez <falco@...too.org>)

• [Aria-Security.net] SAS Hotel Management System SQL Injection (Advisory@...a-security.net)
• Re: [ELEYTT] 4SIERPIEN2007 (support1@...ancedsearchbar.com)
• [ GLSA 200708-03 ] libarchive (formerly named as bsdtar): Multiple pax Extension Header Vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ECHO_ADV_83$2007] PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability (erdc@...o.or.id)
• Cisco NHRP denial of service (cisco-sa-20070808-nhrp) (Martin Kluge <mk@...si.de>)
• Summercon 2007 Atlanta August 24 - 26 (rragan@...dynamics.com)
• Gstebuch Version 1.5 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Mapos Bilder Galerie Version 1.0 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Bilder Uploader 1.3 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Web News 1.1 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• File Uploader Version 1.1 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Shoutbox 1.0 Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Design flaw in AS3 socket handling allows port probing (fukami <fukami@...tioneins.de>)
• VNSECON07 Materials released (Jerome Athias <jerome.athias@...e.fr>)
• iDefense Security Advisory 08.09.07: Hewlett-Packard OpenView Operations OVTrace Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• FinDix Remote File Inclusion Vulnerability (rizgar@...uxmail.org)
• Join us at OWASP Mumbai Meet : 6th September 2007 (dharmeshmm@...sp.org)
• Re: [ELEYTT] 3SIERPIEN2007 (xyborg@...il.com)
• Re: TS-2007-002-0: BlueCat Networks Adonis root Privilege Access (security@...ecatnetworks.com)
• [ GLSA 200708-04 ] ClamAV: Denial of Service (Raphael Marichez <falco@...too.org>)

• Re: Guestbook Script 1.9 RFI (laurent.gaffie@...il.com)
• TSLSA-2007-0024 - multi (Trustix Security Advisor <tsl@...stix.org>)
• BH/DC: Tactical Exploitation Materials (H D Moore <sflist@...italoffense.net>)
• New Oracle Forensics Paper ("David Litchfield" <davidl@...software.com>)
• [ GLSA 200708-05 ] GD: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• rPSA-2007-0154-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (rPath Update Announcements <announce-noreply@...th.com>)
• [ MDKSA-2007:154 ] - Updated xine-ui packages fix denial of service and arbitrary code execution (security@...driva.com)
• [HS-A007] Qbik WinGate Remote Denial of Service (Harmony Security Advisory <advisory@...monysecurity.com>)
• rPSA-2007-0155-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
• Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface (router@...il.si)
• rPSA-2007-0157-1 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
• Zyxel Zywall 2 multiple vulnerabilities (Henri Lindberg - Smilehouse Oy <henri.lindberg@...lehouse.com>)
• Re: Coppermine Photo Gallery (yabbse.inc.php) Remote File Inclusion Vulnerability (laurent.gaffie@...il.com)
• [ MDKSA-2007:155 ] - Updated tcpdump packages fix remote denial of service (security@...driva.com)
• Re: Gstebuch Version 1.5 Remote Command Execution Vulnerability (ilkerkandemir@...et.com)
• Re:Re: [ELEYTT] 3SIERPIEN2007 ("Michal Bucko" <michal.bucko@...ytt.com>)
• Re: Gstebuch Version 1.5 Remote Command Execution Vulnerability ("Carsten Eilers" <ceilers-lists@....de>)

• [ MDKSA-2007:156 ] - Updated imlib2 packages fix several issues (security@...driva.com)
• php-stats xss whois.php (vasodipandora@...il.com)
• [ MDKSA-2007:157 ] - Updated kdelibs packages fix cross-site scripting (XSS) vulnerabilities (security@...driva.com)
• FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com (ilkerkandemir@...et.com)
• [SECURITY] [DSA 1353-1] New tcpdump packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit (ilkerkandemir@...et.com)

• Best Top List Remote File Upload Vulnerability (rizgar@...uxmail.org)
• [ GLSA 200708-06 ] Net::DNS: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200708-08 ] SquirrelMail G/PGP plugin: Arbitrary code execution (Raphael Marichez <falco@...too.org>)
• SOTEeSKLEP Remote File Disclosure Vulnerability (theoden@...eria.pl)
• WengoPhone SIP phone Remote Denial of Service vulnerability (zwell@...u.com)
• Lib2 PHP v0.2 (DOCUMENT_ROOT) Remote File Inclusion Vulnerability (ilkerkandemir@...et.com)
• Beautifier Version 0.1 Remote File Include Vulnerability // MefistoLabs.Com (ilkerkandemir@...et.com)
• CounterPath X-Lite SIP phone Remote Denial of Service vulnerability (zwell@...u.com)
• mcNews (skinfile) Remote File Include Vulnerability (ilkerkandemir@...et.com)
• [ GLSA 200708-07 ] Xfce Terminal: Remote arbitrary code execution (Raphael Marichez <falco@...too.org>)
• Re: security contact for uat.edu needed (Hans Wolters <php@...all.nl>)
• PHPCentral Login Script Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• PHPCentral Poll Script Remote Command Execution Vulnerability (rizgar@...uxmail.org)
• Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability (rizgar@...uxmail.org)
• JobLister3 SQL injection vulnerabilities (joseph.giron13@...il.com)
• Vulnerability in multiple "now playing" scripts for various IRC clients (Wouter Coekaerts <wouter@...kaerts.be>)
• Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator" (Felix Domke <tmbinc@...tedvb.net>)
• [o0o] Bypassing servlet input validation filters (OWASP Stinger + Struts example) (Meder Kydyraliev <meder@....nu>)
• [SECURITY] [DSA 1354-1] New gpdf packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com (hawkgotyou@...il.com)
• eXV2.de Browser Cookie is not properly sanitised (webmaster@...-o.org)
• Multiple vulnerabilities in ircu (Wouter Coekaerts <wouter@...kaerts.be>)
• Streamripper 1.62.1 - Buffer Overflows (chris.rohlf@...il.com)
• Remote Denial of Service for SSH service at Dell DRAC4 (maybe Mocana SSH) (Robert Scheck <scheck@...s.de>)
• [SECURITY] [DSA 1355-1] New kdegraphics packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Remote Denial of Service for SSH service at Dell DRAC4 (maybeMocana SSH) (Thierry Zoller <Thierry@...ler.lu>)
• [security bulletin] HPSBMA02237 SSRT061260 rev.1 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Cod… (security-alert@...com)
• [security bulletin] HPSBMA02238 SSRT061260 rev.1 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution (security-alert@...com)
• [security bulletin] HPSBMA02241 SSRT061260 rev.1 - HP OpenView Service Quality Manager (OV SQM) Running Shared Trace Service, Remote Arbit… (security-alert@...com)
• [security bulletin] HPSBMA02242 SSRT061260 rev.1 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrar… (security-alert@...com)
• [security bulletin] HPSBMA02245 SSRT061260 rev.1 - HP OpenView Dashboard Running Shared Trace Service, Remote Arbitrary Code Execution (security-alert@...com)
• [security bulletin] HPSBMA02246 SSRT061260 rev.1 - HP OpenView Performance Insight (OVPI) Running Shared Trace Service, Remote Arbitrary C… (security-alert@...com)
• [security bulletin] HPSBMA02235 SSRT061260 rev.1 - HP OpenView Internet Service (OVIS) Running Shared Trace Service, Remote Arbitrary Code… (security-alert@...com)
• [security bulletin] HPSBMA02244 SSRT061260 rev.1 - HP OpenView Business Process Insight and Related Products Running Shared Trace Service,… (security-alert@...com)
• FLEA-2007-0043-1 openssl (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [security bulletin] HPSBMA02239 SSRT061260 rev.1 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code… (security-alert@...com)

• [ MDKSA-2007:159 ] - Updated gpdf packages fix vulnerability (security@...driva.com)
• PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability (0dd exploit) (Emanuele Gentili <bathym@...56d67.org>)
• Re: PHPCentral Login Script Remote Command Execution Vulnerability (Magnus Holmgren <holmgren@...ator.liu.se>)
• [ MDKSA-2007:161 ] - Updated poppler packages fix vulnerability (security@...driva.com)
• [ MDKSA-2007:160 ] - Updated pdftohtml packages fix vulnerability (security@...driva.com)
• CVE-2007-3382: Handling of cookies containing a ' character (Mark Thomas <markt@...che.org>)
• [ MDKSA-2007:158 ] - Updated xpdf packages fix vulnerability (security@...driva.com)
• CVE-2007-3385: Handling of \" in cookies (Mark Thomas <markt@...che.org>)
• CVE-2007-3386: XSS in Host Manager (Mark Thomas <markt@...che.org>)
• Re: SOTEeSKLEP Remote File Disclosure Vulnerability (m@...e.pl)
• [USN-497-1] xfce4-terminal vulnerability (Kees Cook <kees@...ntu.com>)
• Re: phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit (BlackHawk <hawkgotyou@...il.com>)
• DeskPRO Admin Panel Multiple HTML Injections (DoZ@...kersCenter.com)
• COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• Re: CVE-2007-3382: Handling of cookies containing a ' character (Christopher Schultz <chris@...istopherschultz.net>)
• WireShark MMS Remote Denial of Service vulnerability (zwell@...u.com)
• IBM Rational ClearQuest Web SQL Injection Login Bypass (swhite@...urestate.com)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability ("eEye Advisories" <eEyeAdvisories@...e.com>)
• EEYE: Windows Metafile AttemptWrite Heap Overflow ("eEye Advisories" <eEyeAdvisories@...e.com>)
• FLEA-2007-0044-1 tetex tetex-dvips tetex-fonts (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Multiple vulnerabilities in Live for Speed 0.5X10 (Luigi Auriemma <aluigi@...istici.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• FLEA-2007-0045-1 poppler (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• Crash in Zoidcom 0.6.7 (Luigi Auriemma <aluigi@...istici.org>)
• rPSA-2007-0160-1 openoffice.org (rPath Update Announcements <announce-noreply@...th.com>)
• [ MDKSA-2007:163 ] - Updated koffice packages fix vulnerability (security@...driva.com)
• ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerability (zdi-disclosures@...m.com)
• Multiple vulnerabilities in Babo Violent 2 2.08.00 (Luigi Auriemma <aluigi@...istici.org>)
• TPTI-07-14: HP OpenView Multiple Product Shared Trace Service Stack Overflow Vulnerabilities (TSRT@...m.com)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability (zdi-disclosures@...m.com)

• ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability (zdi-disclosures@...m.com)
• [ MDKSA-2007:164 ] - Updated tetex packages fix multiple vulnerabilities (security@...driva.com)
• iDefense Security Advisory 08.14.07: Microsoft Windows Vista Sidebar RSS Feeds Gadget Cross Site Scripting Vulnerabilit… (iDefense Labs <labs-no-reply@...fense.c…)
• Re: Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (x82_@...ru)
• iDefense Security Advisory 08.14.07: Microsoft XML Core Services XMLDOM Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Glynn Clements <glynn@...ements.plus.com>)
• [ GLSA 200708-09 ] Mozilla products: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Re: PHPCentral Login Script Remote Command Execution Vulnerability ("Steven M. Christey" <coley@...re.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Cross Site Request Forgery in 2wire routers (hkm@...im.ws)
• NSFOCUS SA2007-01 : Microsoft IE5 CSS Parsing Memory Corruption Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
• McAfee Virus Scan for Linux and Unix v5.10.0 Local Buffer Overflow (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Re: Vulnerability in multiple "now playing" scripts for various IRC clients (v9@...ehalo.us)
• Re: [Full-disclosure] McAfee Virus Scan for Linux and Unix v5.10.0 Local Buffer Overflow ("Harry Muchow" <wonderfulandromeda@...il.com>)
• Re: Remote Denial of Service for SSH service at Dell DRAC4 (maybeMocana SSH) (Robert Scheck <scheck@...s.de>)
• SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability (Aditya K Sood <zeroknock@...niche.org>)
• HPSBMA02240 SSRT061260 rev.1 - HP OpenView Operations Manager for Windows (OVOW) with the OpenView Operations Add On Module for OpenView O… (security-alert@...com)
• Re: [Full-disclosure] SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability (Aditya K Sood <zeroknock@...niche.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Cisco Security Advisory: Local Privilege Escalation Vulnerabilities in Cisco VPN Client (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• RE: [Full-disclosure] SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability ("Debasis Mohanty" <debasis.mohanty.listmails@...il.…)
• [ MDKSA-2007:162 ] - Updated kdegraphics packages fix vulnerability (security@...driva.com)
• Re: Vulnerability in multiple "now playing" scripts for various IRC clients (Michael Tharp <gxti@...tiallystapled.com>)
• Systme de vote en temps rel v1.0 Remote File include Bug (cybermilitan@...mail.com)
• iDefense Security Advisory 08.15.07: ESRI ArcSDE Numeric Literal Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• rPSA-2007-0161-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• Trackeur v.1 Remote File &#304;nclude Bug (cybermilitan@...mail.com)
• Contact at Secure Computing (Dave Piscitello <dave@...ecom.com>)
• Safari for windows remote arbitry file upload (laurent.gaffie@...il.com)
• [ MDKSA-2007:165 ] - Updated cups packages fix vulnerability (security@...driva.com)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• Re: Safari for windows remote arbitry file upload (Neil Dickey <neil@...l.niu.edu>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)

• TlbInf32 ActiveX Command Execution ("Brett Moore" <brett.moore@...urity-assessment.com>)
• [SECURITY] [DSA 1356-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Wojciech Purczynski <cliph@...c.pl>)
• [USN-498-1] libvorbis vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Trackeur v.1 Remote File &#304;nclude Bug (the.tiger100@...il.com)
• Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing ("imei Addmimistrator" <addmimistrator@...il.com>)
• MS07-042 XMLDOM substringData() PoC (Alla Bezroutchko <alla@...nit.be>)
• FLEA-2007-0046-1 cups (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Another Oracle Forensics Paper... ("David Litchfield" <davidl@...software.com>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Re: Vulnerability in multiple "now playing" scripts for various IRC clients (Wouter Coekaerts <wouter@...kaerts.be>)
• TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation ("anonymous.c7ffa4057a" <anonymous.c7ffa4057a@...nymousspeech.com>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Glynn Clements <glynn@...ements.plus.com>)
• [ GLSA 200708-11 ] Lighttpd: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200708-12 ] Wireshark: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Glynn Clements <glynn@...ements.plus.com>)
• Local privilege escalation vulnerability in Cisco VPN client (NGSSoftware Insight Security Research <nisr@...software.com>)
• [ GLSA 200708-10 ] MySQL: Denial of Service and information leakage (Raphael Marichez <falco@...too.org>)

• ToorCon 9 CFP ("David Hulton" <0x31337@...il.com>)
• [USN-499-1] Apache vulnerabilities (Kees Cook <kees@...ntu.com>)
• iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Re: Safari for windows remote arbitry file upload (laurent.gaffie@...il.com)
• iDefense Security Advisory 08.16.07: IBM DB2 Universal Database buildDasPaths Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• rPSA-2007-0164-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple Untrusted Search Path Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• vBulletin V3.6.8 XSS Password Md5 Hash (RaeD@...Mail.Com)
• Olate Download 3.4.1~environment.php.php~Code Execution ("imei Addmimistrator" <addmimistrator@...il.com>)
• Release of Pass-The-Hash Toolkit for Windows v1.0 ("Hernan Ochoa" <hernan@...il.com>)
• Re: Guidance Software response to iSEC report on EnCase (luke.cleverley@...il.com)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Re: Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (x82_@...ru)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Glynn Clements <glynn@...ements.plus.com>)
• Re: vBulletin V3.6.8 XSS Password Md5 Hash (scott-REMOVE@...lletin.com)
• Skype Network Remote DoS Exploit ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
• Cross Platform remote IM vulnerability / DOS (Danslo@...oo.com)
• Re: iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple Race Condition Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Cross Platform remote IM vulnerability / DOS ("Gavin Hanover" <netmunky@...il.com>)
• iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple File Creation Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• HPSBMA02242 SSRT061260 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution --… (security-alert@...com)
• Re: Cross Platform remote IM vulnerability / DOS ("J. Oquendo" <sil@...iltrated.net>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Nicolas Rachinsky <bugtraq-0@...turing-complete.org>)
• iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Remote Memory Read in Diskeeper 9 - 2007 (<auto48696@...hmail.com>)

• [ GLSA 200708-13 ] BIND: Weak random number generation (Raphael Marichez <falco@...too.org>)
• Multiple vulnerabilities in rFactor 1.250 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in Toribash 2.71 (Luigi Auriemma <aluigi@...istici.org>)
• Unexploitable buffer-overflow in the logging function of the Unreal engine (Luigi Auriemma <aluigi@...istici.org>)

• report a bug ! (Advisory@...a-security.net)
• Gurur Haber v2.0 (the.dumenci@...il.com)
• [SECURITY] [DSA 1357-1] New koffice packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• OWASP Mumbai Meeting : 6th Sep 2007 (dharmeshmm@...il.com)
• Astaro DOS and POP3 bypass issues partially resolved (William Warren <wwarren@...anuelcomputerconsulting.com>)
• [ GLSA 200708-15 ] Apache mod_jk: Directory traversal (Raphael Marichez <falco@...too.org>)
• iDefense Security Advisory 08.20.07: Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 08.20.07: Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities (iDefense Labs <labs-no-reply@...fense.c…)
• IMF 2007 - Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Glynn Clements <glynn@...ements.plus.com>)
• [ GLSA 200708-14 ] NVIDIA drivers: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ MDKSA-2007:167 ] - Updated libvorbis packages fix vulnerabilities (security@...driva.com)
• Re: Joomla J! Reactions Component Remote File include Bug (software@...cnet.com)
• [ MDKSA-2007:166 ] - Updated rsync packages fix off-by-one buffer overflow (security@...driva.com)
• [Reversemode Advisory] CheckPoint ZoneLabs Vsdatant.sys multiple local privilege escalation vulnerabilities (Reversemode <advisories@...ersemode.com>)
• Re: Skype Network Remote DoS Exploit ("Steven M. Christey" <coley@...re.org>)
• Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability (Dan Yefimov <dan@...5.lightwave.net.ru>)
• SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service (research@...antec.com)
• [ MDKSA-2007:167-1 ] - Updated libvorbis packages fix vulnerabilities (security@...driva.com)
• Re: TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation (security@...ecatnetworks.com)
• Re: SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
• [HISPASEC] Fileinfo 2.0.9 plugin for Total Commander multiple vulnerabilities ("Gynvael Coldwind" <gynvael@...illium.org>)
• Re: PHPCentral Poll Script Remote Command Execution Vulnerability (Coopercentral@...il.com)
• Mambo Component SimpleFAQ V2.11 - Remote SQL Injection (k1tk4t@...hack.org)
• ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities (zdi-disclosures@...m.com)
• RE: Skype Network Remote DoS Exploit ("Marc Maiffret" <mmaiffret@...e.com>)
• Re: Re: Safari for windows remote arbitry file upload (Neil Dickey <neil@...l.niu.edu>)
• Re: PHPCentral Poll Script Remote Command Execution Vulnerability (Eren Türkay <turkay.eren@...il.com>)

• SIEMENS Gigaset SE361 router XSS (morin.josh@...il.com)
• [USN-501-1] jasper vulnerability (Kees Cook <kees@...ntu.com>)
• Invision Power Board D22-Shoutbox HTML Injections (DoZ@...kersCenter.com)
• [USN-500-1] rsync vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing (postmaster@...trixonline.com)
• No cON Name 2007 - CALL FOR PAPERS (deese@...zialk.net)
• Re: Re: SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service (s1m0n13@...mail.com)
• Joomla Component SimpleFAQ V2.11 - Remote SQL Injection (k1tk4t@...hack.org)
• RE: SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service ("Michael Bednar" <MBEDNAR@...z.pitt.edu>)
• Dalai Forum Remote File Inclusion Exploit (system-errrror@...mail.com)
• RE: Skype Network Remote DoS Exploit ("David Harley" <david.a.harley@...il.com>)
• Re: report a bug ! (Steve Shockley <steve.shockley@...ckley.net>)
• Re[2]: Skype Network Remote DoS Exploit ("Matthew Leeds" <mleeds@...leeds.net>)
• Re: Skype Network Remote DoS Exploit ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
• Firesoft Remote File Inclusion (system-errrror@...mail.com)
• Re: Re: Joomla J! Reactions Component Remote File include Bug (yollubunlar@...lubunlar.org)
• Re: Skype Network Remote DoS Exploit (Roland Dobbins <rdobbins@...co.com>)
• iDefense Security Advisory 08.20.07: Trend Micro SSAPI Long Path Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Vulnerabilities digest (3APA3A <3APA3A@...URITY.NNOV.RU>)
• AST-2007-020: Resource Exhaustion Vulnerability in Asterisk SIP channel driver (Asterisk Security Team <security@...erisk.org>)
• iDefense Security Advisory 08.21.07: Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 08.21.07: Trend Micro ServerProtect RPCFN_SYNC_TASK Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• [ MDKSA-2007:168 ] - Updated vim packages fix vulnerability (security@...driva.com)
• [ MDKSA-2007:169 ] - Updated gdm packages fix DoS vulnerability (security@...driva.com)
• Local Privilege Escalation Vulnerabilities in Lotus Notes Client (kochetkov.vladimir@...il.com)
• Encryption Weakness in Sun Sun AS 9.0_0.1 (build b02-p01) (<fred@...ovannetworks.com>)
• Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities ("OS2A BTO" <os2a.bto@...il.com>)
• Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system. (Ezequiel Gutesman <egutesman@...esecurity.com>)
• Re: Local Privilege Escalation Vulnerabilities in Lotus Notes Client (3APA3A <3APA3A@...URITY.NNOV.RU>)
• HPSBST02255 SSRT071456 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-042 to MS07-050 (security-alert@...com)
• Olate Download 3.4.2~modules/core/uim.php~XSS ("imei Addmimistrator" <addmimistrator@...il.com>)
• Olate Download 3.4.2~modules/core/fldm.php~comments tag [url] XSS ("imei Addmimistrator" <addmimistrator@...il.com>)
• Camino release 1.5.1 fixes several vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system. (Ezequiel Gutesman <egutesman@...esecurity.com>)
• TeamSpeak 2 Server Vulnerabilities? (lehox <lehox@...oskueste.de>)
• Re: RE: SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service (bjohnson@....edu)
• Re: Skype Network Remote DoS Exploit ("Jay" <jay.tomas@...osecguru.com>)
• Olate Download 3.4.2~download.php ~ sql injection ("imei Addmimistrator" <addmimistrator@...il.com>)
• Re: SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service ("Tuc at T-B-O-H.NET" <ml@...-o-h.net>)
• Buffer-overflow in the Asura engine (Luigi Auriemma <aluigi@...istici.org>)
• Re: Vulnerabilities digest ("Steven M. Christey" <coley@...us.mitre.org>)

• [ GLSA 200708-16 ] Qt: Multiple format string vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200708-17 ] Opera: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• phpress 0.2.0 (adisplay.php) Remote File Inclusion (naxx <cerbelum@...il.com>)
• rPSA-2007-0168-1 rsync (rPath Update Announcements <announce-noreply@...th.com>)
• VMWare poor guest isolation design ("M. Burnett" <mb@...o.net>)
• Reminder: HITBSecConf2007 - Malaysia is less than 2 weeks away (Praburaajan <prabu@...kinthebox.org>)
• SPIP v1.7 Remote File Inclusion Bug (system-errrror@...mail.com)
• Re: TeamSpeak 2 Server Vulnerabilities? (3APA3A <3APA3A@...URITY.NNOV.RU>)
• X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities ("Gynvael Coldwind" <gynvael@...illium.org>)
• Re: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• [ MDKSA-2007:170 ] - Updated gimp packages fix input data validation issues in several plugins (security@...driva.com)
• rPSA-2007-0169-1 xterm (rPath Update Announcements <announce-noreply@...th.com>)

• RE: VMWare poor guest isolation design ("M. Burnett" <mb@...o.net>)
• RE: VMWare poor guest isolation design ("William Holmberg" <wholmberg@...pi.com>)
• FLEA-2007-0047-1 rsync (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Security Advisory for Bugzilla 3.0, 2.22.1, and 2.20.4 (mkanat@...zilla.org)
• FLEA-2007-0048-1 xterm (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Heap overflow in Skulltag 0.97d-beta4.1 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple denial of service in Soldat 1.4.2/2.6.2 (Luigi Auriemma <aluigi@...istici.org>)
• RE: VMWare poor guest isolation design ("James C. Slora Jr." <james.slora@...a.com>)
• Re: VMWare poor guest isolation design ("Jonathan Yu" <jonathan.i.yu@...il.com>)
• The Korean Hacking & Security Conference "POC 2007" call for papers (poc2007@...il.com)
• Re: report a bug ! (Draichis <draichis@...il.com>)
• Re: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• Tikiwiki 1.9.7 HTML/embed object injection (morin.josh@...il.com)
• RE: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• RE: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• Re: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• 24th Chaos Communication Congress 2007: Call for Participation (fukami <fukami@...tioneins.de>)
• about recent phpMyAdmin "vulnerabilities" (Marc Delisle <Marc.Delisle@...epsherbrooke.qc.ca>)
• Re: VMWare poor guest isolation design ("Jonathan Yu" <jonathan.i.yu@...il.com>)
• Re: VMWare poor guest isolation design ("Matt Richard" <matt.richard@...il.com>)

• Re: VMWare poor guest isolation design (Tim Newsham <newsham@...a.net>)
• security vulnerability in VMware (seppi@...pig.de)
• More on VMWare poor guest isolation design ("M. Burnett" <mb@...o.net>)
• n.runs-SA-2007.026 - Sophos Antivirus BZip parsing Infinite Loop Advisory (<security@...ns.com>)
• [USN-502-1] KDE vulnerabilities (Kees Cook <kees@...ntu.com>)
• n.runs-SA-2007.025 - ClamAV Remote Code Execution Advisory (<security@...ns.com>)
• Security vulnerability in BufferZone 2.5 (seppi@...pig.de)
• AST-2007-021: Crash from invalid/corrupted MIME bodies when using voicemail with IMAP storage (Asterisk Security Team <security@...erisk.org>)
• Re: SPIP v1.7 Remote File Inclusion Bug (Magnus Holmgren <holmgren@...ator.liu.se>)
• RE: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• RE: VMWare poor guest isolation design ("Ken Kousky" <kkousky@...inc.com>)
• rPSA-2007-0172-1 tar (rPath Update Announcements <announce-noreply@...th.com>)
• n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (<security@...ns.com>)

• SIDVault LDAP Server Remote Buffer Overflow (Joxean Koret <joxeankoret@...oo.es>)
• [SECURITY] [DSA 1358-1] New asterisk packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: More on VMWare poor guest isolation design (Tim Newsham <newsham@...a.net>)
• Sunshop v4.0 <= Blind SQL Injection exploit (auah@...ap.com)
• RE: VMWare poor guest isolation design ("Ken Kousky" <kkousky@...inc.com>)
• InterWorx-CP Multiple HTML Injections Vulnerabilitie (DoZ@...kersCenter.com)
• Abledesign Dynamic Picture Frame XSS (morin.josh@...il.com)
• Moonware Software Multiple Vulnerabilities (s0cratex@...mail.com)
• iDefense Security Advisory 08.27.07: Motorola Timbuktu Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 08.27.07: Motorola Timbuktu Pro Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [USN-503-1] Thunderbird vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: More on VMWare poor guest isolation design (wietse@...cupine.org (Wietse Venema))
• OpenBSD 4.1 - Heap overflow vulnerabillity (acheddamiman@...il.com)
• FLEA-2007-0049-1 tar (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (3APA3A <3APA3A@...URITY.NNOV.RU>)
• ePersonnel_RC_2004 Remote File Bug (system-errrror@...mail.com)
• eyeOS checksum prediction (komarov@...efence.ru)
• BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) ("Amit Klein" <aksecurity@...il.com>)
• PhpGedView login page multiple XSS (morin.josh@...il.com)
• HPSBUX02249 SSRT071442 rev.1 HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unqualified Configuration… (security-alert@...com)
• RE: More on VMWare poor guest isolation design ("M. Burnett" <mb@...o.net>)
• Community input/questions for ISOI 3? (Gadi Evron <ge@...uxbox.org>)
• Re: n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (Sergio Alvarez <sergio.alvarez@...ns.com>)

• Found nice mass exploits for fedora and imap (linux0day@...oo.co.uk)
• Re: Found nice mass exploits for fedora and imap (jf <jf@...glingpointers.net>)
• Re: Found nice mass exploits for fedora and imap (Jon Lewis <jlewis@...is.org>)
• n.runs, Sophos, German laws, and customer safety ("Steven M. Christey" <coley@...re.org>)
• [SECURITY] [DSA 1359-1] New dovecot packages fix directory traversal (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA 1360-1] New rsync packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
• Re: OpenBSD 4.1 - Heap overflow vulnerabillity (Steve Shockley <steve.shockley@...ckley.net>)
• Re: n.runs, Sophos, German laws, and customer safety (Jerome Athias <jerome.athias@...e.fr>)
• [ MDKSA-2007:171 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• [USN-505-1] vim vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-504-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-506-1] tar vulnerability (Kees Cook <kees@...ntu.com>)

• [HISPASEC] Blizzard StarCraft Brood War 1.15.1 Remote DoS ("Gynvael Coldwind" <gynvael@...illium.org>)
• Re: Unexploitable buffer-overflow in the logging function of the Unreal engine (rickmccl@...il.com)
• [USN-469-2] Enigmail regression (Kees Cook <kees@...ntu.com>)
• EnterpriseDB Advanced Server 8.2 Unitialized Pointer (Joxean Koret <joxeankoret@...oo.es>)
• Cisco Security Advisory: XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page (Cisco Systems Product Security Incident Response …)
• HPSBMA02236 SSRT061260 rev.1 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote … (security-alert@...com)
• Re[2]: Unexploitable buffer-overflow in the logging function of the Unreal engine (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: InterWorx-CP Multiple HTML Injections Vulnerabilitie (info@...erworx.com)
• Multiple vulnerabilities in Doomsday 1.9.0-beta5.1 (Luigi Auriemma <aluigi@...istici.org>)
• [SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
• The Long Run (Dave Aitel <dave@...unityinc.com>)
• [SECURITY] [DSA 1362-1] New lighttpd packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)

• [USN-507-1] tcp-wrappers vulnerability (Kees Cook <kees@...ntu.com>)
• VMware poor guest isolation design (VMware Security team <security@...are.com>)
• PR07-23: Non-persistent Cross-site Scripting (XSS) on Absolute Poll Manager XE admin page (research@...checkup.com)
• Re: Re: Multiple OS kernel insecure handling of stdio file descriptor (watercloud@...cus.org)
• RE: More on VMWare poor guest isolation design (Tim Newsham <newsham@...a.net>)
• Updated: VMware poor guest isolation design (VMware Security team <security@...are.com>)
• Re: n.runs, Sophos, German laws, and customer safety (Oliver Karow <oliver.karow@....de>)
• Sony: The Return Of The Rootkit ("Quark IT - Hilton Travis" <Hilton@...rkIT.com.au>)
• Re: n.runs, Sophos, German laws, and customer safety (Anonymous@...nymous.de)
• Re: n.runs, Sophos, German laws, and customer safety (alan <alan@...eserver.org>)
• RE: VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• iDefense Security Advisory 08.30.07: Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabiliti… (iDefense Labs <labs-no-reply@...fense.c…)
• RE: More on VMWare poor guest isolation design (Arthur Corliss <corliss@...italmages.com>)
• SQL Injection in Cisco CallManager (Elliot Kendall <ekendall@...ndeis.edu>)
• Cisco CSS WebNS ssh crash (NetExpress <NetExpress@...cali.it>)
• Immunity Debugger v1.1 Release (Nicolas Waisman <nicolas.waisman@...unityinc.com>)
• [48bits] Advisory : Multiple vulnerabilities in Norman NVC 5.82 driver ("vulndev 48bits" <vulndev@...its.com>)

• Ragnarok Online Control Panel Authentication Bypass Vulnerability [new method] (dp14@...mail.com)
• [USN-508-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Digital Armaments Security Advisory 24.07.2006: Siemens Speedstream Wireless/Router Denial of Service Vulnerability (malaguka@...oo.com)
• [USN-509-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
• HPSBTU02256 SSRT071449 rev.1 - HP Tru64 UNIX or HP Tru64 Internet Express running BIND, Remote DNS Cache Poisoning (security-alert@...com)
• HPSBMA02239 SSRT061260 rev.2 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (security-alert@...com)
• [USN-510-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
• Team SHATTER Advisory: IBM DB2 Buffer overflow in sysproc.auth_list_groups_for_authid (Team SHATTER <shatter@...secinc.com>)
• Re: Sony: The Return Of The Rootkit (Paul Sebastian Ziegler <psz@...erved.de>)
• Aztech router DSL600EU IP and ARP spoof (acheddamiman@...il.com)

490 messages

Powered by blists - more mailing lists