bugtraq mailing list - 2007/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2007/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 29	² 31	³ 3	⁴
⁵ 13	⁶ 22	⁷ 11	⁸ 16	⁹ 9	¹⁰ 5	¹¹
¹² 32	¹³ 21	¹⁴ 19	¹⁵ 21	¹⁶ 9	¹⁷ 13	¹⁸
¹⁹ 28	²⁰ 14	²¹ 15	²² 16	²³ 11	²⁴ 9	²⁵
²⁶ 28	²⁷ 19	²⁸ 16	²⁹ 16	³⁰ 14

Messages by day:

November 1 (29 messages)

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability (zdi-disclosures@...m.com)
Re: Comments re ISC's announcement on bind9 security (Henrik Langos <hlangos-bugtraq@...ominate.com>)
ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities (zdi-disclosures@...m.com)
sBlog 0.7.3 Beta Cross Site Request Forgery (Guns@...0.com.ar)
ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability (zdi-disclosures@...m.com)
Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure (kingoftheworld92@...twebnet.it)
CFP: International workshop on Secure Software Engineering - Deadline extended! (secse08@...il.com)
ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability (zdi-disclosures@...m.com)
(tool announce) Orizon v0.50 announce ("Paolo Perego" <thesp0nge@...il.com>)
mac trojan in-the-wild (Gadi Evron <ge@...uxbox.org>)
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client (Bernhard Mueller <research@...-consult.com>)
ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability (zdi-disclosures@...m.com)
Re: Comments re ISC's announcement on bind9 security ("Network Protocol Security" <netprotosec@...il.com>)
ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability (zdi-disclosures@...m.com)
Re: Airkiosk/formlib application is XSS vuln (skien <skienlab@...il.com>)
Two XSS on Blue Coat ProxySG Management Console (research@...checkup.com)
Cryptome: NSA has access to Windows Mobile smartphones (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Re: Comments re ISC's announcement on bind9 security (ntn@...workontap.com)
Re: Airkiosk/formlib application is XSS vuln (Raymond Pete <pete@...kiosk.com>)
[ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities (security@...driva.com)
Re: Comments re ISC's announcement on bind9 security (Theo de Raadt <deraadt@....openbsd.org>)
Re: mac trojan in-the-wild ("Matthew Leeds" <mleeds@...leeds.net>)
[ MDKSA-2007:204 ] - Updated cups packages fix vulnerability (security@...driva.com)
RE: mac trojan in-the-wild ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Comments re ISC's announcement on bind9 security (Tim <tim-security@...tinelchicken.org>)
RE: mac trojan in-the-wild ("Alex Eckelberry" <AlexE@...belt-software.com>)
RE: mac trojan in-the-wild ("Alex Eckelberry" <AlexE@...belt-software.com>)
ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability (zdi-disclosures@...m.com)
RE: Cryptome: NSA has access to Windows Mobile smartphones ("Kurt Dillard" <kurtdillard@....com>)

November 2 (31 messages)

[ GLSA 200711-01 ] gFTP: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
IM upgrade automated social engineering attack (Dragos Ruiu <dr@....net>)
[ GLSA 200711-03 ] Gallery: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Re: Comments re ISC's announcement on bind9 security (Shane Kerr <Shane_Kerr@....org>)
Scribe <= 2.0 Remote PHP Code Execution (kingoftheworld92@...twebnet.it)
Re: Comments re ISC's announcement on bind9 security (Tim <tim-security@...tinelchicken.org>)
Re: Comments re ISC's announcement on bind9 security (Shane Kerr <Shane_Kerr@....org>)
[USN-537-2] Compiz vulnerability (Kees Cook <kees@...ntu.com>)
Re: [botnets] re MAC trojan (fwd) (Gadi Evron <ge@...uxbox.org>)
Re: [Full-disclosure] mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)
RE: mac trojan in-the-wild ("Roger A. Grimes" <roger@...neretcs.com>)
Re: mac trojan in-the-wild (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: [Full-disclosure] mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)
[UPH-07-03] Firefly Media Server remote format string vulnerability (nnp <version5@...il.com>)
[UPH-07-02] Firefly Media Server DoS (nnp <version5@...il.com>)
the heart of the problem [was: RE: mac trojan in-the-wild] (Gadi Evron <ge@...uxbox.org>)
Re: [UPH-07-01] Firefly Media Server DoS (nnp <version5@...il.com>)
Re: mac trojan in-the-wild (nnp <version5@...il.com>)
[UPH-07-01] Firefly Media Server DoS (nnp <version5@...il.com>)
RE: mac trojan in-the-wild ("Memisyazici, Aras" <arasm@...edu>)
Re: [Full-disclosure] mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
RE: mac trojan in-the-wild ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ GLSA 200711-02 ] OpenSSH: Security bypass (Pierre-Yves Rofes <py@...too.org>)
RE: mac trojan in-the-wild ("Roger A. Grimes" <roger@...neretcs.com>)
Re: mac trojan in-the-wild ("Robert McArdle" <robertmcardle@...il.com>)
RE: mac trojan in-the-wild (Jim Harrison <Jim@...tools.org>)
RE: mac trojan in-the-wild (Gadi Evron <ge@...uxbox.org>)
Re: [UPH-07-03] Firefly Media Server remote format string vulnerability (nnp <version5@...il.com>)
[ MDKSA-2007:205 ] - Updated opal packages fix vulnerability (security@...driva.com)
DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) (Roman Medina-Heigl Hernandez <roman@...labs.com>)

November 3 (3 messages)

phphelpdesk Multiple vulnerabilities (Joseph.giron13@...il.com)
[ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability (security@...driva.com)
[SECURITY] [DSA 1397-1] New mono packages fix integer overflow (Moritz Muehlenhoff <jmm@...ian.org>)

November 5 (13 messages)

Skalinks <= 1_5 Cross Site Request Forgery Add Admin (djvincy@...mail.it)
JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit (gmdarkfig@...il.com)
[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
[Tool] sqlmap: a blind SQL injection tool (release 0.5) (Bernardo Damele <bernardo.damele@...il.com>)
iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Comments re ISC's announcement on bind9 security (Tim <tim-security@...tinelchicken.org>)
Leopard's firewall damages Skype and WoW (Juergen Schmidt <ju@...heise.de>)
[SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution (Florian Weimer <fw@...ian.org>)
iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability (zdi-disclosures@...m.com)

November 6 (22 messages)

[SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability (security@...driva.com)
rPSA-2007-0232-1 perl (rPath Update Announcements <announce-noreply@...th.com>)
[USN-539-1] CUPS vulnerability (Kees Cook <kees@...ntu.com>)
[ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability (security@...driva.com)
[CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix (mj@...n.com)
Re: IM upgrade automated social engineering attack (Roman Shirokov <insecure@...dex.ru>)
SMF .htaccess bypass (h3llcode@...mail.it)
Re: SMF .htaccess bypass ("Matt D. Harris" <mdh@...itox.net>)
IDMOS v1.0 Alpha Multiple RFI Vulnerability (Guns@...0.com.ar)
Re: SMF .htaccess bypass ("anuj tenani" <anujtenani@...il.com>)
Cypress BX script backdoored? (Chris <chris@...rflow.no>)
PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection (Guns@...0.com.ar)
Re: IM upgrade automated social engineering attack (Dragos Ruiu <dr@....net>)
rPSA-2007-0231-1 pcre (rPath Update Announcements <announce-noreply@...th.com>)
iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
MyWebFTP Password Disclosure (Advisory@...a-Security.net, "[NO-REPLY]"@securityfocus.com)
[SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution (Florian Weimer <fw@...ian.org>)
[ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities (security@...driva.com)
[ GLSA 200711-05 ] SiteBar: Multiple issues (Pierre-Yves Rofes <py@...too.org>)

November 7 (11 messages)

SiteMinder Agent: Cross Site Scripting ("Giuseppe Gottardi" <overet@...uritydate.it>)
Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[ GLSA 200711-06 ] Apache: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-08 ] libpng: Multiple Denials of Service (Pierre-Yves Rofes <py@...too.org>)
[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ GLSA 200711-09 ] MadWifi: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-10 ] Mono: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)

November 8 (16 messages)

Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (buzzy@...zta.fm)
Aria-Security.Net Research: Request For Travel Sql Injection (Advisory@...a-security.net, no-reply@...urityfocus.com)
Simple Machine Forum - Private section/posts/info disclosure (h3llcode@...mail.it)
[OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: SiteMinder Agent: Cross Site Scripting (securityfocus@...device.com)
[ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows (Pierre-Yves Rofes <py@...too.org>)
[security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access (security-alert@...com)
[ GLSA 200711-13 ] 3proxy: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability (security@...driva.com)
Aria-Security.Net Research: Lotfian BROCHURE Management System (Advisory@...a-security.net, no-reply@...urityfocus.com)
[ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability (security@...driva.com)
[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting (Thijs Kinkhorst <thijs@...ian.org>)
AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc applic… (The Asterisk Development Team <security…)

November 9 (9 messages)

CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's (Dragos Ruiu <dr@....net>)
[ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability (security@...driva.com)
Re: Re: SiteMinder Agent: Cross Site Scripting (overet@...uritydate.it)
li-guestbook sql inj (abc.seo@...il.com)
[ MDKSA-2007:214 ] - Updated flac packages fix vulnerability (security@...driva.com)
Re: SiteMinder Agent: Cross Site Scripting ("Williams, James K" <James.Williams@...com>)
Re: Simple Machine Forum - Private section/posts/info disclosure (klynn.securityfocus@...inlynn.com)
xoops mylinks module - sql injection (root@...icker.it)
Re: Simple Machine Forum - Private section/posts/info disclosure (Jindrich Kubec <kubecj@....cz>)

November 10 (5 messages)

[SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution (Thijs Kinkhorst <thijs@...ian.org>)
SQL injection bug found in TBSource. (drakomo@...il.com)
iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)

November 12 (32 messages)

[48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow ("[48bits] vulndev" <vulndev@...its.com>)
[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Eggblog v3.1.0 XSS Vulnerability (mesut@...abs.org)
FLEA-2007-0066-1 ImageMagick (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Oracle 0-day to get SYSDBA access (pete@...efinnigan.com)
Re: Re: Simple Machine Forum - Private section/posts/info disclosure (rx@...ky0u.org)
Standing Up Against German Laws - Project HayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Jan Newger <memger@....net>)
PHP-Nuke Module Advertising Blind SQL Injection (Guns@...0.com.ar)
CVE-2007-3694: Cross site scripting (XSS) in broadcast machine ("Hanno Böck" <hanno@...eck.de>)
Aria-Security.Net Research: Rapid Classified HotList Image (Advisory@...a-security.net, no-reply@...urityfocus.com)
PeopleAggregatory security advisory - re CVE-2007-5631 (phil@...adbandmechanics.com)
FLEA-2007-0064-1 pcre (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0068-1 ruby (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0063-1 perl (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
FLEA-2007-0069-1 perl (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0065-1 libpng (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Alice - dns spoofer (fabio <ctrlaltca@...ero.it>)
FLEA-2007-0067-1 pidgin (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Cisco IOS Shellcode ("Research" <Research@...plc.com>)
Re: Standing Up Against German Laws - Project HayNeedle (johan beisser <jb@...stic.org>)
Re: Standing Up Against German Laws - Project HayNeedle ("Matt D. Harris" <mdh@...itox.net>)
RFID: Security Briefings (angelo@...iello.org)
HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges (security-alert@...com)
AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service (L4teral <l4teral@...il.com>)
[ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: Standing Up Against German Laws - Project HayNeedle (johan beisser <jb@...stic.org>)
[ GLSA 200711-15 ] FLAC: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability (security@...driva.com)
[ GLSA 200711-16 ] CUPS: Memory corruption (Pierre-Yves Rofes <py@...too.org>)
PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'download_plugin.php3' server-side script (research@...checkup.com)

November 13 (21 messages)

[ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS (ISecAuditors Security Advisories <advisories@...cauditors.com>)
ATC-08 Call for papers (repost) (atc08@...lf.no)
Re: Bosdev Multiple vulnerabilities (sales@...dev.com)
[ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
After 6 months - fix available for Microsoft DNS cache poisoning attack (Amit Klein <amit.klein@...steer.com>)
PHP <= 5.2.5 stream_wrapper_register() denial of service (laurent.gaffie@...il.com)
PHP <= 5.2.5 Gettext Lib Multiple Denial of service (laurent.gaffie@...il.com)
Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Peter Conrad <conrad@...ano.de>)
Oracle 11g/10g Installation Vulnerability ("David Litchfield" <davidl@...software.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Florian Echtler <echtler@...tum.de>)
Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Duncan Simpson <dps@...pson.demon.co.uk>)
[USN-540-1] flac vulnerability (Kees Cook <kees@...ntu.com>)
iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Paul Wouters <paul@...net.nl>)
[ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities (security@...driva.com)
Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (johan beisser <jb@...stic.org>)
Re: Standing Up Against German Laws - Project HayNeedle (johan beisser <jb@...stic.org>)
Re: Standing Up Against German Laws - Project HayNeedle (Valdis.Kletnieks@...edu)
Re: Standing Up Against German Laws - Project HayNeedle (Stefano Zanero <s.zanero@...urenetwork.it>)
[USN-541-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
ExoPHPdesk user profile XSS / profile SQL injection (Joseph.giron13@...il.com)

November 14 (19 messages)

Aria-Security.Net: MetaCart SQL Injection (No-Reply@...a-Security.net)
Predictable DNS transaction IDs in Microsoft DNS Server (Alla Bezroutchko <alla@...nit.be>)
Free Forums "search" Sql Injection (No-Reply@...a-Security.net)
DocuSafe "Search" SQL Injection (No-Reply@...a-Security.net)
[USN-542-1] poppler vulnerabilities (Kees Cook <kees@...ntu.com>)
Konqueror Remote Denial Of Service (laurent.gaffie@...il.com)
[USN-541-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 ("IRM Research" <research@...plc.com>)
[ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability (security@...driva.com)
[security bulletin] HPSBMA02288 SSRT071465 rev.1 - HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, … (security-alert@...com)
Re: Standing Up Against German Laws - Project HayNeedle (Raj Mathur <raju@...ux-delhi.org>)
[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: Standing Up Against German Laws - Project HayNeedle (imipak <imipak@...il.com>)
[ GLSA 200711-18 ] Cpio: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
[ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Breaking RSA: Totient indirect factorization (gandlf <gandlf@...il.com>)
[ GLSA 200711-20 ] Pioneers: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Standing Up Against German Laws - Project HayNeedle (Frank Guthausen <fg-bugtraq@...-server.de>)

November 15 (21 messages)

iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Breaking RSA: Totient indirect factorization (Alexander Klimov <alserkli@...ox.ru>)
iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Some hashes for the record (shadown <shadown@...il.com>)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[security bulletin] HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access (security-alert@...com)
[SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd ("Gerald (Jerry) Carter" <jerry@...ba.org>)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
[SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd ("Gerald (Jerry) Carter" <jerry@...ba.org>)
Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges ("Nick Boyce" <nick.boyce@...il.com>)
Re: Breaking RSA: Totient indirect factorization (Clifton Royston <cliftonr@...a.net>)
Aida-Web Information Exposure ("MC Iglo" <mc.iglo@...glemail.com>)
[TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability ("Tobias Klein" <tk@...pkit.de>)
[ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities (security@...driva.com)
EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications ("eEye Advisories" <eEyeAdvisories@...e.com>)
[USN-542-2] KOffice vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page (research@...checkup.com)
Re: Breaking RSA: Totient indirect factorization (gandlf <gandlf@...il.com>)
PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter) (research@...checkup.com)
[USN-543-1] VMWare vulnerabilities (Kees Cook <kees@...ntu.com>)

November 16 (9 messages)

[ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities (security@...driva.com)
[RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability (RISE Security <advisories@...esecurity.org>)
[USN-544-1] Samba vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
[ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf (security@...driva.com)
Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (cocoruder <cocoruder@...il.com>)
AhnLab AntiVirus Remote Kernel Memory Corruption (Sowhat <smaillist@...il.com>)
Javamail login username and password same email problem (thetaung@...il.com)
Re: Breaking RSA: Totient indirect factorization (Watson Ladd <watsonbladd@...il.com>)
Re: Breaking RSA: Totient indirect factorization ("Erick Galinkin" <erick.galinkin@...il.com>)

November 17 (13 messages)

JiRos Upload Manager SQL Injection (no-reply@...a-security.net)
rPSA-2007-0241-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
[USN-544-2] Samba regression (Jamie Strandboge <jamie@...ntu.com>)
RE: Standing Up Against German Laws - Project HayNeedle ("Quark IT - Hilton Travis" <Hilton@...rkIT.com.au>)
net-finity (links.php) Remote SQL Injection Vulnerability (verys-secret@...mail.com)
Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability (verys-secret@...mail.com)
Myspace Clone Script (index.php) Remote File Inclusion Vulnerability (verys-secret@...mail.com)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability ("CaseArmour.net Security Administrator" <security@...earmour.net>)
security contact for mitsubishi electric? (Chris Withers <chris@...plistix.co.uk>)
Sciurus Hosting Panel Code İnjection (admin@...ofrm.com)
[ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities (security@...driva.com)

November 19 (28 messages)

[ECHO_ADV_84$2007] ProfileCMS <= 1.0 Remote SQL Injection Vulnerability (erdc@...o.or.id)
[ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-26 ] teTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Vulnerability Hash Database - Maillist (Sowhat <smaillist@...il.com>)
Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (jf <jf@...glingpointers.net>)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ GLSA 200711-25 ] MySQL: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-21 ] Bochs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
VigileCMS 1.4 Multiple Remote Vulnerabilities (info@...ncosmo.com)
[ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability (security@...driva.com)
IceBB 1.0rc6 <= Remote SQL Injection (aeroxteam-nospam@...il.com)
[ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Crash in LIVE555 Media Server 2007.11.01 (Luigi Auriemma <aluigi@...istici.org>)
Belkin Wireless G Router DoS (r00t@...ckh0l3.com)
[SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[Aria-Secutiy Net] Click&BaneX SQL Injection (no-reply@...a-Security.net)
Re: IceBB 1.0rc6 <= Remote SQL Injection (aeroxteam-nospam@...il.com)
Citrix NetScaler Web Management XSS (nnposter@...closed.not)
Wordpress Cookie Authentication Vulnerability ("Steven J. Murdoch" <bugtraq+Steven.Murdoch@...cam.ac.uk>)
Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nils Toedtmann <securityfocus@...s.toedtmann.net>)
Alcatel OmniPCX Enterprise VoIP Vulnerability (daniel.stirnimann@...c.ch)
rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (rPath Update Announcements <announce-noreply@...th.com>)
[ GLSA 200711-28 ] Perl: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Kapetanakis Giannis <bilias@....physics.uoc.gr>)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Graeme Fowler <G.E.Fowler@...ro.ac.uk>)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Michal Zalewski <lcamtuf@...ne.cc>)

November 20 (14 messages)

[ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nils Toedtmann <securityfocus@...s.toedtmann.net>)
Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN (joel@...hkin.net)
[ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities (security@...driva.com)
[security bulletin] HPSBUX02289 SSRT071461 rev.1 - HP-UX Running BIND 8, Remote DNS Cache Poisoning (security-alert@...com)
[ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities (security@...driva.com)
EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow ("eEye Advisories" <eEyeAdvisories@...e.com>)
[ GLSA 200711-29 ] Samba: Execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-30 ] PCRE: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-31 ] Net-SNMP: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Kapetanakis Giannis <bilias@....physics.uoc.gr>)
[ GLSA 200711-32 ] Feynmf: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS) ("Adrian P" <unknown.pentester@...il.com>)
[ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities (security@...driva.com)

November 21 (15 messages)

rPSA-2007-0243-1 flac (rPath Update Announcements <announce-noreply@...th.com>)
Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Paul Schmehl <pauls@...allas.edu>)
rPSA-2007-0245-2 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection (no-reply@...a-Security.net)
[ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities (security@...driva.com)
Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection (no-reply@...a-Security.net)
rPSA-2007-0245-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controllin… ("Jason Muskat de VE3TSJ - GCFA, GCUX, C…)
Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Gadi Evron <ge@...uxbox.org>)
E-vanced Solutions Multiple Vulnerabilites (Joseph.giron13@...il.com)
GWextranet Multiple Vulnerabilites (Joseph.giron13@...il.com)
[SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities (bugtraq@...ncosmo.com)
Ucms <= 1.8 Backdoor Remote Command Execution Exploit (bugtraq@...ncosmo.com)
SkyPortal vRC6 Multiple Remote Vulnerabilities (bugtraq@...ncosmo.com)

November 22 (16 messages)

[ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities (security@...driva.com)
Wheatblog (wB) Remote File inclusion .. (security@...or.net)
Aria-Security.net: NetAuctionHelp SQL Injection (no-reply@...a-Security.net)
[ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities (erdc@...o.or.id)
GetBlog local File inclusion .. (security@...or.net)
Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de) (zero-x@...uxmail.org)
[Argeniss] Data0: Next generation malware for stealing databases (Paper) (Cesar <cesarc56@...oo.com>)
Re: Simple Machines Forum multiple sql injection flaws with exploit code. (root@...k.com)
MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (security@...or.net)
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit (bugtraq@...ncosmo.com)
MySpace Scripts - Poll Creator JavaScript Injection Vulnerability (DoZ@...kersCenter.com)
Gadu-Gadu Local/Remote Buffer Overflow vulnerability (j00ru.vx@...il.com)
Using CSRF to Attack Mobile Phones ("avivra" <avivra@...il.com>)
[ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability (security@...driva.com)
[SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (gg_vuln@...oo.com)

November 23 (11 messages)

Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (emacs25@...il.com)
Aria-Security.net: Irola My-Time v3.5 SQL Injection (no-reply@...a-Security.net)
[0day Remote Command Execution] VigileCMS <= 1.8 Stealth (wegotyourbox@...il.com)
Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (BlackHawk <hawkgotyou@...il.com>)
Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (j00ru.vx@...il.com)
Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (gynvael@...illium.org)
Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (sdfkjsomcoismwevoiweo@...pl)
Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (emacs25@...il.com)
Mp3 ToolBox 1.0 beta 5 Remote File İnclude Vulnerability (cybermilitan@...mail.com)
Re: Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (gynvael@...illium.org)
[ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities (security@...driva.com)

November 24 (9 messages)

Bitcomet Resource Browser v1.1 XSS (jplopezy@...il.com)
Aria-Security.net: CoolShot E-Lite POS 1.0 (no-reply@...a-Security.net)
Re: Aria-Security.net: NetAuctionHelp SQL Injection (support@...auctionhelp.com)
PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution (kingoftheworld92@...twebnet.it)
[ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability (cybermilitan@...mail.com)
vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable (cybermilitan@...mail.com)
Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection (no-reply@...a-Security.net)
NetAuctionHelp Classified Ads v1.0 SQL Injection (no-reply@...a-Security.net)

November 26 (28 messages)

[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
Aria-Security.Net: Gouae DWD Realty SQL Injection (noreply@...a-security.net)
[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
HPSBST02291 SSRT071498 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-061 and MS07-062 (security-alert@...com)
PHP 5.2.4 mail.force_extra_parameters unsecure (cxib@...urityreason.com)
two bytehoard 2.1 bugs (Ernesto Alvarez <ealvarez@...ivesec.biz>)
Skype DoS (mail@...not)
PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability (sys-project@...mail.com)
Calendar Proverbs <=1.1 (caladmin.php) Remote SQL Injection (sys-project@...mail.com)
FMDeluxe (index.php) Cross-Site Scripting Vulnerability (sys-project@...mail.com)
Citrix NetScaler Web Management Cookie Weakness (nnposter@...closed.not)
GWExtranet Script Injections & Privilege Escalation Vulnerability (DoZ@...kersCenter.com)
[ GLSA 200711-33 ] nss_ldap: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
2007-06 Sentinel Protection Server Directory Traversal (VulnerabilityResearch@...italDefense.net)
[ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
DeluxeBB E-Mail Address Change Security Bypass (bugtraq@...ncosmo.com)
Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection (kingoftheworld92@...twebnet.it)
SimpleGallery v0.1.3 (index.php) Cross-Site Scripting Vulnerability (sys-project@...mail.com)
PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (kingoftheworld92@...twebnet.it)
Directory Traversal in SafeNet Sentinel Protection Server and Keys Server (Elliot Kendall <ekendall@...ndeis.edu>)
JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability (sys-project@...mail.com)
ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (zdi-disclosures@...m.com)
Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (kingoftheworld92@...twebnet.it)
FIGIS (FILogin.do) Bypass SQL Injection Vulnerability (sys-project@...mail.com)
CONFidence 2008 CfP (andrzej.targosz@...idea.org.pl)

November 27 (19 messages)

[USN-545-1] link-grammar vulnerability (Kees Cook <kees@...ntu.com>)
Creating Backdoors in Cisco IOS using Tcl ("IRM Research" <research@...plc.com>)
[USN-546-1] Firefox vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-547-1] PCRE vulnerabilities (Kees Cook <kees@...ntu.com>)
Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 (Adam Laurie <adam@...roup.co.uk>)
National Computer and Information Security Conferences ACIS 2008 - COLOMBIA (Jeimy Cano <jjcano@...oo.com>)
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
OWASP Israel Conference 2007, Dec 3rd 2007 ("Ofer Shezaf" <ofer@...zaf.com>)
[security bulletin] HPSBUX02251 SSRT071449 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning (security-alert@...com)
Ruby/Gnome2 0.16.0 Format String Vulnerability (chris.rohlf@...il.com)
Re: [Full-disclosure] Creating Backdoors in Cisco IOS using Tcl (Nicolas FISCHBACH <nicolist@...urite.org>)
Eurologon CMS Multiple SQL Injection (kingoftheworld92@...twebnet.it)
Eurologon CMS Db credentials disclosure / files download (kingoftheworld92@...twebnet.it)
Re: Creating Backdoors in Cisco IOS using Tcl (michael@...verly.com)
CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor (Core Security Technologies Advisories <advisories@...esecurity.com>)
Liferay Enterprise Portal multiple XSS (morin.josh@...il.com)
PHPSlideShow XSS Update (morin.josh@...il.com)
PHPkit 1.6.1 (include.php?path=) Remote File Inclusion (sys-project@...mail.com)
[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

November 28 (16 messages)

[SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Win2K3 Priv Escalation (justin@...racing.com)
Re: Win2K3 Priv Escalation (Jan Münther <jan.muenther@...ns.com>)
Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
Secunia Research: Symantec Backup Exec Job Engine Denial of Service (Secunia Research <remove-vuln@...unia.com>)
RE: Win2K3 Priv Escalation ("Matt Ausmus" <mausmus@...pman.edu>)
Re: Win2K3 Priv Escalation ("Justin@ESC" <justin@...racing.com>)
RE: Win2K3 Priv Escalation ("Thor (Hammer of God)" <thor@...merofgod.com>)
Gekko <=0.8.2 (temp directory) Path Disclosure (sys-project@...mail.com)
SYM07-029 Symantec BEWS Multiple DoS in Job Engine ("Secure" <secure@...antec.com>)
[ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
Some Data of POC2007 (poc2007@...il.com)
[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (security@...driva.com)
Re: Gekko <=0.8.2 (temp directory) Path Disclosure ("J. Carlos Nieto" <xiam@...teslibres.org>)
rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (rPath Update Announcements <announce-noreply@...th.com>)
[USN-548-1] Pidgin vulnerability (Kees Cook <kees@...ntu.com>)

November 29 (16 messages)

[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (security@...driva.com)
[security bulletin] HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBUX02292 SSRT071499 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (security-alert@...com)
[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra) (info@...italarmaments.com)
APC Management Vulnerability (garys@...alserversolutions.com)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS ("IRM Research" <research@...plc.com>)
FreeBSD Security Advisory FreeBSD-SA-07:10.gtar (FreeBSD Security Advisories <security-advisories@...eBSD.org>)
FreeBSD Security Advisory FreeBSD-SA-07:09.random (FreeBSD Security Advisories <security-advisories@...eBSD.org>)
ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service (Pierre-Yves Rofes <py@...too.org>)
AST-2007-026 - SQL Injection issue in cdr_pgsql (Asterisk Security Team <security@...ium.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Valdis.Kletnieks@...edu)
AST-2007-025 - SQL Injection issue in res_config_pgsql (Asterisk Security Team <security@...ium.com>)
[USN-549-1] PHP vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Steve Shockley <steve.shockley@...ckley.net>)

November 30 (14 messages)

[ MDKSA-2007:224-3 ] - Updated samba packages fix regressions (security@...driva.com)
Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Matthew Leeds" <mleeds@...leeds.net>)
DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2 (thesinoda@...mail.com)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Vincent Archer <varcher@...yall.com>)
Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
SCARE metrics and tool release (Pete Herzog <lists@...com.org>)
PR07-14: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script (research@...checkup.com)
PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method (research@...checkup.com)
PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script (research@...checkup.com)
Re: Aria-Security.net: CoolShot E-Lite POS 1.0 (coolshot@...spam_coolshot.net)
rPSA-2007-0254-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" ("Max Moser" <max.moser@...il.com>)
QEMU code_gen_buffer overflow POC (TeLeMan <geleman@...il.com>)
Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" (Jacob Appelbaum <jacob@...elbaum.net>)

440 messages

Powered by blists - more mailing lists