bugtraq mailing list - 2008/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2008/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 9	³ 17	⁴ 24	⁵ 14	⁶ 7	⁷ 2	⁸
⁹ 7	¹⁰ 21	¹¹ 15	¹² 9	¹³ 8	¹⁴ 8	¹⁵
¹⁶ 13	¹⁷ 10	¹⁸ 8	¹⁹ 15	²⁰ 6	²¹ 3	²²
²³ 9	²⁴ 5	²⁵ 11	²⁶ 10	²⁷ 12	²⁸ 1	²⁹
³⁰ 8

Messages by day:

June 2 (9 messages)

[SECURITY] [DSA 1553-2] New ikiwiki packages fix regression (thijs@...ian.org (Thijs Kinkhorst))
rPSA-2008-0180-1 samba samba-client samba-server samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
ARP handler Inspection tool released (Andrea Di Pasquale <spikey.it@...il.com>)
BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability (sys-project@...mail.com)
Re: xt:Commerce possible DoS (decoder-bugtraq@...-hero.net)
OtomiGenX v2.2 Ultimate Authentication bypass Vulnerability (hadihadi_zedehal_2006@...oo.com)
ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability (sys-project@...mail.com)
[ECHO_ADV_96$2008] HiveMaker Professional <= 1.0.2 (cid) Sql Injection Vulnerability (erdc@...o.or.id)
rPSA-2008-0181-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)

June 3 (17 messages)

[SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability (Mark Thomas <markt@...che.org>)
DEFCON 16 Updates - Get involved! ("The Dark Tangent" <dtangent@...con.org>)
Advisory: Xerox Workaround & planned patch (suzanne.hawley@...ox.com)
Windows Installer msiexec GUID Buffer Overflow ("Patrick Webster" <patrick@...hack.com>)
[SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code (security-alert@...com)
Re: Windows Installer msiexec GUID Buffer Overflow (0xjbrown41@...il.com)
[ GLSA 200806-01 ] mtr: Stack-based buffer overflow (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200806-02 ] libxslt: Execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
RE: Windows Installer msiexec GUID Buffer Overflow ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Windows Installer msiexec GUID Buffer Overflow (0xjbrown41@...il.com)
London DEFCON June meet - DC4420 - Thursday 5th June (Major Malfunction <majormal@...ate-radio.org>)
[USN-614-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit (ipsdix@...il.com)
AccessMe Tool Release (Oliver Lavery <oliver@...uritycompass.com>)
AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode ("Asterisk Security Team" <security@...erisk.org>)
[ MDVSA-2008:109 ] - Updated kernel packages fix bugs (security@...driva.com)

June 4 (24 messages)

QuickerSite Multiple Vulnerabilities (Admin@...report.ir)
[security bulletin] HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrar… (security-alert@...com)
IMF 2008 - Deadline Extension (2nd try) (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
CSIS-RI-0003: Multiple buffer overflow vulnerabilities in HP ActiveX (rand@...s.dk)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities (iDefense Labs <labs-no-reply@...fense.co…)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Authorization Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Akamai Technologies Security Advisory 2008-0001 (Download Manager) (Akamai Security Team <security@...mai.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, … (VMware Security team <security@...are.c…)
ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow (zdi-disclosures@...m.com)
ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability (zdi-disclosures@...m.com)
TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
iDefense Security Advisory 06.04.08: Skype File URI Security Bypass Code Execution Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability (zdi-disclosures@...m.com)
Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (Luigi Auriemma <aluigi@...istici.org>)
CORE-2008-0425 - NASA BigView Stack Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)

June 5 (14 messages)

Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (Luigi Auriemma <aluigi@...istici.org>)
CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilities ("Williams, James K" <James.Williams@...com>)
AST-2008-009: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised ("Asterisk Security Team" <security@...erisk.org>)
e107 Plugin echat MENU Blind SQL Injection Vulnerability (hadihadi_zedehal_2006@...oo.com)
[security bulletin] HPSBST02312 SSRT071428 rev.2 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code (security-alert@...com)
Remote DoS vulnerability in Linksys WRH54G (dubingyao@...il.com)
SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities (tan_prathan@...mail.com)
Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability (cocoruder <cocoruder@...il.com>)
AST-2008-009: (Corrected subject) Remote crash vulnerability in ooh323 channel driver ("Asterisk Security Team" <security@...erisk.org>)
iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.04.08: VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
F5 FirePass Content Inspection Management XSS (nnposter@...closed.not)
WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability (tan_prathan@...mail.com)

June 6 (7 messages)

[ MDVSA-2008:110 ] - Updated Firefox packages fix vulnerabilities (security@...driva.com)
Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery (Secunia Research <remove-vuln@...unia.com>)
Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software) (Akamai Security Team <security@...mai.com>)
Vulnerability in Network General/Net Scout product (jgrove_2000@...oo.com)
rPSA-2008-0185-1 vsftpd (rPath Update Announcements <announce-noreply@...th.com>)
SchoolCenter URL Handling Cross Site Scripting Vulnerability (DoZ@...kersCenter.com)
Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

June 7 (2 messages)

[USN-615-1] Evolution vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit (m.memelli@...mind.com)

June 9 (7 messages)

XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN ("Eduardo Jorge" <serrano.neves@...il.com>)
[ GLSA 200806-03 ] Imlib 2: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions (dann frazier <dannf@...ian.org>)
webTA by kronos - XSS ("Alex Eden" <Alex.Eden@...et-int.com>)
[SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 1593-1] New tomcat5.5 packages cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
Further Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability" ("William A. Rowe, Jr." <wrowe@...e-clan.net>)

June 10 (21 messages)

[web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability (unohope@...oot.org)
[oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing (Andrea Barisani <lcars@...rt.org>)
[web-app] ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability (unohope@...oot.org)
[web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability (unohope@...oot.org)
[web-app] yBlog 0.2.2.2 Multiple Remote Vulnerabilities (unohope@...oot.org)
[web-app] Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities (unohope@...oot.org)
Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Co… (security-alert@...com)
[web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability (unohope@...oot.org)
iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
XSS - Glassfish Web Admin Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) ) ("Eduardo Jorge" <serrano.neves@...il.com>)
iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution (zdi-disclosures@...m.com)
ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
[ MDVSA-2008:111 ] - Updated Evolution packages fix vulnerabilities (security@...driva.com)
Many bugs on CMS system Piugame (Psymera <psymera@...il.com>)
ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability (zdi-disclosures@...m.com)

June 11 (15 messages)

[security bulletin] HPSBUX02342 SSRT080063 rev.1 - HP-UX Running Apache or Tomcat with PHP, Remote Execution of Arbitrary Code (security-alert@...com)
TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core (lars@...o3.org)
PHPEasyData 1.5.4 Multiple Vulnerabilities (Sylvain <sylvain.thual@...ck-internet.fr>)
Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS (Secunia Research <remove-vuln@...unia.com>)
CORE-2008-0125: CitectSCADA ODBC service vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
phpRaider <= v1.0.6,7 Maybe Other Versions Remote File include Vulnerable (none@...e.com)
Flat Calendar v1.1 Remote Permission Bypass Vulnerability (none@...e.com)
[security bulletin] HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Co… (security-alert@...com)
[SECURITY] [DSA 1594-1] New imlib2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension AllocateGlyph() Integer Overflow Vulnera… (iDefense Labs <labs-no-reply@...fense.c…)
iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension ProcRenderCreateCursor() Integer Overflo… (iDefense Labs <labs-no-reply@...fense.c…)
iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension Gradient Creation Integer Overflow Vulne… (iDefense Labs <labs-no-reply@...fense.c…)
Xigla Multiple Products - Multiple Vulnerabilities (Admin@...report.ir)
iDefense Security Advisory 06.11.08: Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption… (iDefense Labs <labs-no-reply@...fense.c…)
iDefense Security Advisory 06.11.08: Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)

June 12 (9 messages)

Pooya Site Builder (PSB) SQL Injection Vulnerabilities (Admin@...report.ir)
rPSA-2008-0189-1 kernel xen (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1595-1] New xorg-server packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability (sys-project@...mail.com)
SNMPv3 Authentication Bypass - CVE-2008-0960 (inode <inode@...iaservice.net>)
DEFCON Switzerland looking for DEFCON visitors (DEF CON Switzerland <ch.defcon@...il.com>)
[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities (Devin Carraway <devin@...ian.org>)
[ MDVSA-2008:112 ] - Updated kernel packages fix security issues (security@...driva.com)
[SECURITY] [DSA 1596-1] New typo3 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)

June 13 (8 messages)

[USN-616-1] X.org vulnerabilities (Kees Cook <kees@...ntu.com>)
AS/400 Vulnerabilities (Jon Kibler <Jon.Kibler@...t.com>)
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10) ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Securify bulletin: Microsoft Active Directory Denial-of-service ("Securify Bulletins" <bulletins@...urify.com>)
[USN-612-9] openssl-blacklist update (Jamie Strandboge <jamie@...onical.com>)
[USN-612-10] OpenVPN regression (Jamie Strandboge <jamie@...onical.com>)
RE: AS/400 Vulnerabilities ("Michael Wojcik" <Michael.Wojcik@...roFocus.com>)
RE: Securify bulletin: Microsoft Active Directory Denial-of-service ("Michael Wojcik" <Michael.Wojcik@...roFocus.com>)

June 14 (8 messages)

Technical Details of Security Issues Regarding Safari for Windows ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
[ MDVSA-2008:113 ] - Updated kernel packages fix security issue (security@...driva.com)
Re: AS/400 Vulnerabilities (security curmudgeon <jericho@...rition.org>)
[ MDVSA-2008:114 ] - Updated util-linux-ng packages fix log injection issue (security@...driva.com)
Collection of Vulnerabilities in Fully Patched Vim 7.1 ("Jan Minář" <rdancer@...ncer.org>)
Re: Collection of Vulnerabilities in Fully Patched Vim 7.1 (Bram Moolenaar <Bram@...lenaar.net>)
GSC Privilege Escalation Exploit (Moose <moose@...erarium.net>)
[ GLSA 200806-04 ] rdesktop: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

June 16 (13 messages)

DUC NO-IP Local Password Information Disclosure Vulnerability (glafkos@...osec.org.uk)
Re: AS/400 Vulnerabilities (Marco Ivaldi <raptor@...iaservice.net>)
Muitiple XSS - Glassfish Web Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) ) ("Eduardo Jorge" <serrano.neves@...il.com>)
E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability (sys-project@...mail.com)
Denial of Service in S.T.A.L.K.E.R. 1.0006 (Luigi Auriemma <aluigi@...istici.org>)
PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability (sys-project@...mail.com)
[ECHO_ADV_97$2008] Pre News Manager <= 1.0 (index.php id) Sql Injection Vulnerability (erdc@...o.or.id)
[ECHO_ADV_98$2008] Pre Ads Portal <= 2.0 Sql Injection Vulnerability (erdc@...o.or.id)
Returnil Virtual System 2008 - Password Disclosure Issue (mikuvoli@...rige.nu)
VistaReseller Panel BETA Xss Vulnerability (irancrash@...il.com)
[DSECRG-08-026] LFI in Open Azimyt CMS 0.22 (Digital Security Research Group <research@...c.ru>)
[ MDVSA-2008:115 ] - Updated x11-server packages fix several vulnerabilities (security@...driva.com)
[ MDVSA-2008:116 ] - Updated x11-server packages fix several vulnerabilities (security@...driva.com)

June 17 (10 messages)

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21 (Luigi Auriemma <aluigi@...istici.org>)
Hacking Coffee Makers. (Craig Wright <Craig.Wright@....com.au>)
fetchmail security announcement fetchmail-SA-2007-02 (CVE-2007-4565) (ma+bt@...e-technik.uni-dortmund.de)
Server freezed in Skulltag 0.97d2-RC2 (Luigi Auriemma <aluigi@...istici.org>)
fetchmail security announcement fetchmail-SA-2008-01 (CVE-2008-2711) (ma+bt@...e-technik.uni-dortmund.de)
iPhoneDbg Toolkit ("Nicolas A. Economou" <lists@...est.com>)
[ GLSA 200806-06 ] Evolution: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200806-05 ] cbrPager: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS) ("S21sec labs" <s21seclabs@...sec.com>)
S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS) ("S21sec labs" <s21seclabs@...sec.com>)

June 18 (8 messages)

[security bulletin] HPSBST02344 SSRT080087 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-030 to MS08-036 (security-alert@...com)
CA ARCserve Backup Discovery Service Denial of Service Vulnerability ("Williams, James K" <James.Williams@...com>)
[USN-617-1] Samba vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Announcement && CFP: ISOI 5, Tallinn Estonia (Gadi Evron <ge@...uxbox.org>)
Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
A more detailed description of the Jura F90 vulnerability. (Craig Wright <Craig.Wright@....com.au>)
Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
RE: A more detailed description of the Jura F90 vulnerability. ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 19 (15 messages)

[USN-612-11] openssl-blacklist update (Jamie Strandboge <jamie@...onical.com>)
vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities (Admin@...Report.ir)
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities (Admin@...Report.ir)
Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities (Admin@...Report.ir)
RE: A more detailed description of the Jura F90 vulnerability. (Craig Wright <Craig.Wright@....com.au>)
CSW Security Advisory 0002: Oral B SmartMonitor Information Disclosure Vulnerability and DoS (craigswright@....org)
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities (Admin@...Report.ir)
RE: A more detailed description of the Jura F90 vulnerability. ("Thor (Hammer of God)" <thor@...merofgod.com>)
vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities (Admin@...Report.ir)
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities (Admin@...Report.ir)
[ GLSA 200806-07 ] X.Org X server: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
An Apology. (cwrigh20@...toffice.csu.edu.au)
Re: RFI ====> vBulletin v3.6.5 (hh-ua@...mail.com)

June 20 (6 messages)

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
[ MDVSA-2008:117 ] - Updated fetchmail packages fix DoS vulnerability (security@...driva.com)
Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
BackTrack 3 Final has been released ("Max Moser" <max.moser@...il.com>)
[ MDVSA-2008:118 ] - Updated net-snmp/ucd-snmp packages fix vulnerabilities (security@...driva.com)
Diigo Toolbar - Global XSS and Information Leakage in SSL URLs ("Ferruh Mavituna" <ferruh@...ituna.com>)

June 21 (3 messages)

[ MDVSA-2008:119 ] - Updated exiv2 packages fix vulnerability (security@...driva.com)
rPSA-2008-0200-1 xorg-server (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (rPath Update Announcements <announce-noreply@...th.com>)

June 23 (9 messages)

[ MDVSA-2008:120 ] - Updated nasm packages fix vulnerability (security@...driva.com)
Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities (tan_prathan@...mail.com)
n.runs-SA-2008.001 - Jscape Secure FTP Applet (<security@...ns.com>)
Trust Testing and Metrics (Pete Herzog <pete@...com.org>)
Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma <aluigi@...istici.org>)
Firefox 3.0 security bug: Extensions can STILL hide themselves ("azurIt" <azurit@...ox.sk>)
Re: Summary of AS/400 Vulnerability Information (Jon Kibler <Jon.Kibler@...t.com>)
[ MDVSA-2008:121 ] - Updated freetype2 packages fix vulnerabilities (security@...driva.com)
NULL pointer in World in Conflict 1.008 (Luigi Auriemma <aluigi@...istici.org>)

June 24 (5 messages)

[ GLSA 200806-08 ] OpenSSL: Denial of Service (Robert Buchholz <rbu@...too.org>)
[ GLSA 200806-09 ] libvorbis: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200806-10 ] FreeType: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
fetchmail REVISED security announcement fetchmail-SA-2008-01 (CVE-2008-2711) (ma+bt@...e-technik.uni-dortmund.de)
[ MDVSA-2008:122 ] - Updated clamav packages fix vulnerability (security@...driva.com)

June 25 (11 messages)

[ GLSA 200806-11 ] IBM JDK/JRE: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
RSS-aggregator (display) Remote File Inclusion Vulnerability (Ghost hacker <ghost-r00t@...mail.com>)
[BMSA 2008-07] Format string vulnerability in 5th street (Nam Nguyen <namn@...emoon.com.vn>)
IdeBox (include) Remote File Inclusion Vulnerability (Ghost hacker <ghost-r00t@...mail.com>)
mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability (Ghost hacker <ghost-r00t@...mail.com>)
ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet (<security@...ns.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilitie… (Cisco Systems Product Security Incident…)
mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability (Ghost hacker <ghost-r00t@...mail.com>)
mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability (Ghost hacker <ghost-r00t@...mail.com>)
[ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability (adv@...dc.org)
[ MDVSA-2008:123 ] - Updated imlib2 packages fix vulnerabilities (security@...driva.com)

June 26 (10 messages)

Re: IdeBox (include) Remote File Inclusion Vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version "842 Procapita 840SP1" (pelzi@...zi.net)
The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities (tan_prathan@...mail.com)
Pidgin 2.4.1 Vulnerability (jplopezy@...il.com)
Evolution Vulnerability (jplopezy@...il.com)
Rhythmbox Vulnerability (jplopezy@...il.com)
[USN-620-1] OpenSSL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
rPSA-2008-0206-1 ruby (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1599-1] New dbus packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
WellyBlog Open Source Blog Portal Cross Site Scripting Vulnerabilitiy (the_3dit0r@...oo.com)

June 27 (12 messages)

[USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2008:124 ] - Updated xine-lib packages fix vulnerability in Speex decoder (security@...driva.com)
[USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
New Release of 'Unhide' (20080519) ("yago jesus" <yjesus@...urity-projects.com>)
rPSA-2008-0207-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[security bulletin] HPSBUX02342 SSRT080063 rev.2 - HP-UX Running Apache with PHP, Remote Execution of Arbitrary Code (security-alert@...com)
BA-Con 2008 CFP - Buenos Aires, Sept. 30 / Oct. 1 (closes July 11 2008) (Dragos Ruiu <dr@....net>)
[security bulletin] HPSBUX02341 SSRT080075 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBUX02341 SSRT080075 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code (security-alert@...com)

June 28 (1 message)

[Tool] PktAnon packet trace anonymization tool released (Christoph Mayer <mayer@...uka.de>)

June 30 (8 messages)

Remote SQL Injection (saidmoftakhar@....de)
Re: Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006 (Luigi Auriemma <aluigi@...istici.org>)
Endless loop in Halo 1.07 (Luigi Auriemma <aluigi@...istici.org>)
Security and Hacking Papers - Updated! (ork@...il.it)
[security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Co… (security-alert@...com)
Re: Remote SQL Injection (packet@...ketstormsecurity.org)
RSS-aggregator Multiple vulnerabilities (Sylvain <sylvain.thual@...ck-internet.fr>)

252 messages

Powered by blists - more mailing lists