bugtraq mailing list - 2008/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2008/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	²
³ 13	⁴ 16	⁵ 9	⁶ 10	⁷ 11	⁸	⁹ 10
¹⁰ 5	¹¹ 8	¹² 6	¹³ 7	¹⁴ 4	¹⁵	¹⁶
¹⁷ 12	¹⁸ 14	¹⁹ 18	²⁰ 12	²¹ 5	²² 9	²³
²⁴ 24	²⁵ 17	²⁶ 7	²⁷ 5	²⁸ 3	²⁹ 1	³⁰

Messages by day:

November 1 (2 messages)

[ MDVSA-2008:223 ] kernel (security@...driva.com)
sharedlog CMS Remote File Includes (joseph.giron13@...il.com)

November 3 (13 messages)

Re: [Full-disclosure] Windows RPC worm (MS08-067) in the wild (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day ("Adrian P." <ap@...citizen.org>)
Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewall… ("Adrian P" <unknown.pentester@...il.com…)
Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewall… ("Adrian P" <unknown.pentester@...il.com…)
Windows RPC worm (MS08-067) in the wild (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
DriveCMS article.php remote sql injection (beenudel1986@...il.com)
Re: iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (Fionnbharr <thouth@...il.com>)
A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability (Henri Lindberg - Smilehouse Oy <henri.lindberg@...lehouse.com>)
Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow (Bitsec Labs <labs@...sec.com>)
[ GLSA 200811-01 ] Opera: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
iDefense Security Advisory 11.03.08: Multiple Vendor CUPS texttops Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 11.03.08: Multiple Vendor CUPS SGI imagetops Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

November 4 (16 messages)

[USN-660-1] enscript vulnerability (Kees Cook <kees@...ntu.com>)
[security bulletin] HPSBMA02380 SSRT080121 rev.1 - HP System Management Homepage (SMH) for HP-UX, Local Unauthorized Access (security-alert@...com)
Secunia Research: Adobe Acrobat/Reader "util.printf()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Aruba Mobility Controller SNMP Community String Disclosure (nnposter@...closed.not)
rPSA-2008-0311-1 postfix (rPath Update Announcements <announce-noreply@...th.com>)
[Tool] sqlmap 0.6.2 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls… ("Steven M. Christey" <coley@...re.org>)
[security bulletin] HPSBUX02381 SSRT080083 rev.1 - HP-UX Running Xserver, Remote Execution of Arbitrary Code (security-alert@...com)
FirmChannel Digital Signage 3.24 Cross-site scripting (brad.antoniewicz@...ndstone.com)
Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (sipherr@...il.com)
iDefense Security Advisory 11.04.08: Multiple Vendor NOS Microsystems getPlus Downloader Stack Buffer Overflow Vulnerab… (iDefense Labs <labs-no-reply@...fense.c…)
ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability (zdi-disclosures@...m.com)
ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability (zdi-disclosures@...m.com)
iDefense Security Advisory 11.04.08: Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)

November 5 (9 messages)

iDefense Security Advisory 11.04.08: Adobe Acrobat And Reader AcroJS Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDVSA-2008:224 ] kernel (security@...driva.com)
Re: Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0… (unknown.pentester@...il.com)
Re: Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0… (unknown.pentester@...il.com)
[USN-662-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
Applications can open up remote root access on G1 Phone (Jim Paris <jim@...n.com>)
[USN-663-1] system-tools-backends regression (Kees Cook <kees@...ntu.com>)
DFLabs PTK Forensic Local Command Execution Vulnerability (luca.carettoni@...isoft.com)
[ MDVSA-2008:225 ] net-snmp (security@...driva.com)

November 6 (10 messages)

hMAilServer 4.4.2 (PHPWebAdmin) local & remote file inclusion (nospam@...il.it)
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass (Devin Carraway <devin@...ian.org>)
Remote access vulnerability using BigDump ver. 0.29b (XiaShing@...il.com)
Arab Portal v2.1 Remote File Disclosure (Win32) (r3d.w0rm@...oo.com)
Re: phpWebSite links.php Sql Injection (verdonv@...rs.sourceforge.net)
Re: Applications can open up remote root access on G1 Phone (Jim Paris <jim@...n.com>)
[TKADV2008-012] VLC media player cue Processing Stack Overflow Vulnerability (Tobias Klein <tk@...pkit.de>)
[USN-664-1] Tk vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[TKADV2008-011] VLC media player RealText Processing Stack Overflow Vulnerability (Tobias Klein <tk@...pkit.de>)
[security bulletin] HPSBTU02383 SSRT080098 rev.1 - HP Tru64 UNIX running AdvFS "showfile" command, Local Gain Extended Privileges (security-alert@...com)

November 7 (11 messages)

[USN-665-1] Netpbm vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2008:226 ] ruby (security@...driva.com)
VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues (VMware Security Team <security@...are.com>)
Re: [WEB SECURITY] countermeasure against attacks through HTML shared files ("Adrian P." <adrian.pastor@...CHECKUP.com>)
countermeasure against attacks through HTML shared files (fcorella@...cor.com)
[ MDVSA-2008:224-1 ] kernel (security@...driva.com)
Re: [WEB SECURITY] countermeasure against attacks through HTML shared files (fcorella@...cor.com)
VMware Emulation Flaw x64 Guest Privilege Escalation (2/2) (ds.adv.pub@...il.com)
[USN-662-2] Ubuntu kernel modules vulnerability (Kees Cook <kees@...ntu.com>)
[USN-666-1] Dovecot vulnerability (Kees Cook <kees@...ntu.com>)
Re: countermeasure against attacks through HTML shared files (Peter Watkins <peterw@....org>)

November 9 (10 messages)

Re: countermeasure against attacks through HTML shared files (fcorella@...cor.com)
Enthusiast 3 Remote Code Execution (admin@...report.ir)
[AK-ADV2008-001] Openfire Jabber-Server: Multiple Vulnerabilities (Authentication Bypass, SQL injection, ...) (Andreas Kurtz <mail@...reas-kurtz.de>)
Re: [WEB SECURITY] countermeasure against attacks through HTML shared files (Amit Klein <aksecurity@...il.com>)
Re: [WEB SECURITY] countermeasure against attacks through HTML shared files (fcorella@...cor.com)
BSOD in Win'2k3, Vista x86 and x64 by nonpriviledged user (support@...lprog.com)
Multiple remote vulnerabilities MoinMoin v1.80 (XiaShing@...il.com)
[SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
Metrica Service Assurance Multiple Cross Site Scripting (f.bianchino@...il.com)
ClamAV get_unicode_name() off-by-one buffer overflow (Moritz Jodeit <moritz@...eit.org>)

November 10 (5 messages)

[ GLSA 200811-02 ] Gallery: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200811-04 ] Graphviz: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
Collabtive 0.4.8 Multiple Vulnerabilities (ascii <ascii@...amail.com>)
Re: Default key algorithm in Thomson and BT Home Hub routers (securityfocus@...kkusters.com)

November 11 (8 messages)

Re: [WEB SECURITY] countermeasure against attacks through HTML shared files (fcorella@...cor.com)
[SECURITY] [DSA 1664-1] New ekg packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
Google Chrome Break (Liu Die Yu <liudieyu.com@...il.com>)
Joomla Component JooBlog 0.1.1 (PostID) SQL Injection Vuln. (Stephen Argent <stephen@...yhat-security.com>)
Re [WEB SECURITY] countermeasure against attacks through HTML shared files (fcorella@...cor.com)
ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc (Pyrokinesis@...pam.it)
[security bulletin] HPSBMA02380 SSRT080121 rev.2 - HP System Management Homepage (SMH) for HP-UX, Local Unauthorized Access (security-alert@...com)
[USN-669-1] gnome-screensaver vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 12 (6 messages)

[security bulletin] HPSBMA02385 SSRT080161 rev.1 - HP Service Manager (HPSM), Gain Extended Privileges (security-alert@...com)
Re: Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] ("Giuseppe Gottardi" <overet@...uritydate.it>)
rPSA-2008-0315-1 net-snmp net-snmp-client net-snmp-server net-snmp-utils (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1665-1] New libcdaudio packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
rPSA-2008-0318-1 initscripts (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0316-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)

November 13 (7 messages)

[ MDVSA-2008:227 ] gnutls (security@...driva.com)
Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM (Shatter <shatter@...secinc.com>)
Digital Armaments October-November Hacking Challenge: Linux Local Kernel Exploit (5,000$) (info@...italarmaments.com)
New Whitepaper - .NET Framework Rootkits: Backdoors inside your Framework ("Erez Metula" <erezmetula@...ecure.co.il>)

November 14 (4 messages)

[USN-670-1] VMBuilder vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability (billy.markette@...kland.af.mil)
[ MDVSA-2008:228 ] mozilla-firefox (security@...driva.com)
[ MDVSA-2008:229 ] clamav (security@...driva.com)

November 17 (12 messages)

Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] (Piergiorgio Venuti <piergiorgio@...asec.org>)
Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] ("Micheal Cottingham" <techie.micheal@...il.com>)
[ GLSA 200811-05 ] PHP: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
ANNOUNCE: RFIDIOt release RFIDIOt-0.1u (Adam Laurie <adam@...roup.co.uk>)
Microsoft Windows Server Service (MS08-067) Exploit ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
[waraxe-2008-SA#068] - Sql Injection in vBulletin 3.7.3.pl1 (come2waraxe@...oo.com)
rPSA-2008-0321-1 enscript (rPath Update Announcements <announce-noreply@...th.com>)
RE: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] ("Castigliola, Angelo" <ACastigliola@...M.COM>)
Opera 9.6x file:// overflow (send9@...seclabs.com)
Exodus v0.10 uri handler arbitrary parameter injection (Pyrokinesis@...pam.it)
[waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4 (come2waraxe@...oo.com)
[USN-671-1] MySQL vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 18 (14 messages)

Kimson cms cross site scripting vulnerability (md.r00t.defacer@...il.com)
rPSA-2008-0322-1 gnutls (rPath Update Announcements <announce-noreply@...th.com>)
Re: Opera 9.6x file:// overflow (jplopezy@...il.com)
[ MDVSA-2008:227-1 ] gnutls (security@...driva.com)
[USN-667-1] Firefox and xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-672-1] ClamAV vulnerability (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2008:230 ] firefox (security@...driva.com)
[DSECRG-08-039] Local File Include Vulnerability in Pluck CMS 4.5.3 (Digital Security Research Group <research@...c.ru>)
Outdated and vulnerable OpenSource libraries used in "Deutsche Telekom" home banking software ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[security bulletin] HPSBST02386 SSRT080164 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-067 to MS08-069 (security-alert@...com)
Re: Re: Opera 9.6x file:// overflow (jplopezy@...il.com)
Re: Re: Re: Opera 9.6x file:// overflow (send9@...seclabs.com)
Black Hat November News: CFPS Now Open, Webinar 5 and Japan on-line. ("jmoss" <jmoss@...ckhat.com>)

November 19 (18 messages)

[USN-673-1] libxml2 vulnerabilities (Kees Cook <kees@...ntu.com>)
Firefox cross-domain image theft (CESA-2008-009) ("Chris Evans" <scarybeasts@...il.com>)
Microsoft VISTA TCP/IP stack buffer overflow (Thomas Unterleitner <t.unterleitner@...on.com>)
PR07-11: Cross-site Request Forgery (CSRF) on Sun Java System Identity Manager (ProCheckUp Research <research@...checkup.com>)
Metasploit Framework 3.2 Released (H D Moore <sflist@...italoffense.net>)
Re: Opera 9.6x file:// overflow (xiashing@...il.com)
Secunia Research: Streamripper Multiple Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter (ProCheckUp Research <research@...checkup.com>)
[ MDVSA-2008:231 ] libxml2 (security@...driva.com)
PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760 (ProCheckUp Research <research@...checkup.com>)
rPSA-2008-0325-1 libxml2 (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1667-1] New python2.4 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-674-1] HPLIP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: [ MDVSA-2008:231 ] libxml2 (Eygene Ryabinkin <rea-sec@...elabs.ru>)
[ MDVSA-2008:232 ] dovecot (security@...driva.com)
Re: Re: Re: Re: Opera 9.6x file:// overflow ("peterjohan@....net" <peterjohan@....net>)
Re: [ MDVSA-2008:232 ] dovecot (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: Re: Re: Re: Opera 9.6x file:// overflow ("Zack Payton" <zpayton@...il.com>)

November 20 (12 messages)

Re: Re: Re: Re: Re: Opera 9.6x file:// overflow (psy.echo@...il.com)
[ MDVSA-2008:220-1 ] kernel (security@...driva.com)
Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani (Jan van Niekerk <jvnkrk@...il.com>)
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS) (security-alert@...com)
boastMachine v3.1 Remote Sql Injection (r3d.w0rm@...oo.com)
Social Engine 2.7 CRLF Injection + SQL injection (office@...kattack.at)
Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani (dkoston@...il.com)
SecurityReason : PHP 5.2.6 (error_log) safe_mode bypass (cxib@...urityreason.com)
Re: Re: Re: Re: Re: Opera 9.6x file:// overflow (theindigowolf@...il.com)
Re: Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani (irancrash@...il.com)
Re: Re: Re: Re: Re: Re: Opera 9.6x file:// overflow (send9@...seclabs.com)
[ MDVSA-2008:233 ] libcdaudio (security@...driva.com)

November 21 (5 messages)

ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability (zdi-disclosures@...m.com)
KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit (Pyrokinesis@...pam.it)
OpenSSH security advisory: cbc.adv (Damien Miller <djm@....openbsd.org>)
DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal (vulnerabilityresearch@...frontline.com)

November 22 (9 messages)

[ MDVSA-2008:234 ] kernel (security@...driva.com)
Adobe Flash Multiple Vulnerabilities (iSEC Partners <disclosure@...cpartners.com>)
[SVRT-04-08] Vulnerability in WireShark 1.0.4 for DoS Attack ("svrt" <svrt@...v.com.vn>)
Re: Re: MS Internet Explorer 7 Denial Of Service Exploit (craig@...net.net)
[SECURITY] [DSA 1668-1] New hf packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
rPSA-2008-0324-1 gvim vim vim-minimal (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0327-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0328-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (zimpel@...nline.de)

November 24 (24 messages)

Re: MS Internet Explorer 7 Denial Of Service Exploit (Nick Kirby <nick.kirby@...othwall.net>)
Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (tecklord@...uritylab.ru)
Re: OpenSSH security advisory: cbc.adv (Otto Moerbeek <otto@...jf.net>)
Re: Re: Re: MS Internet Explorer 7 Denial Of Service Exploit (0xjbrown41@...il.com)
[SECURITY] [DSA 1669-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2008:235 ] mozilla-thunderbird (security@...driva.com)
Revised: OpenSSH security advisory: cbc.adv (Damien Miller <djm@....openbsd.org>)
Amaya (id) Remote Stack Overflow Vulnerability (writ3r@...il.com)
Re: Re: MS Internet Explorer 7 Denial Of Service Exploit (Glynn Clements <glynn@...ements.plus.com>)
Amaya (URL Bar) Remote Stack Overflow Vulnerability (writ3r@...il.com)
[SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis) ("svrt" <svrt@...v.com.vn>)
Google Chrome MetaCharacter URI Obfuscation Vulnerability (Aditya K Sood <0kn0ck@...niche.org>)
Re: OpenSSH security advisory: cbc.adv ("Nick Boyce" <nick.boyce@...il.com>)
[USN-676-1] WebKit vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-675-1] Pidgin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: OpenSSH security advisory: cbc.adv (Guillaume MULLER <guillaume.muller@...esurf.fr>)
FreeBSD Security Advisory FreeBSD-SA-08:11.arc4random (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[USN-675-2] Gaim vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-674-2] HPLIP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
WebStudio CMS 'pageid' Blind SQL Injection (glafkos@...alavista.com)
[SECURITY] [DSA 1670-1] New enscript packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Siemens C450IP/C475IP DoS (Martin Kluge <mk@...si.de>)
[SECURITY] [DSA 1671-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (zimpel@...nline.de)

November 25 (17 messages)

[USN-677-1] OpenOffice.org vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Re: OpenSSH security advisory: cbc.adv ("dennis jackson" <dennis.jackson@...rect.co.uk>)
Re: OpenSSH security advisory: cbc.adv ("Nick Boyce" <nick.boyce@...il.com>)
Re: OpenSSH security advisory: cbc.adv (Damien Miller <djm@...drot.org>)
CanSecWest 2009 CFP (March 18-20 2009, Deadline December 8 2008) (Dragos Ruiu <dr@....net>)
Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis) (Nam Nguyen <namn@...emoon.com.vn>)
MyBB 1.4.3 my_post_key Disclosure Vulnerability ("nbbn@....net" <nbbn@....net>)
Re: OpenSSH security advisory: cbc.adv (Fabian Hänsel <fabtagon@....de>)
New tool and paper for Oracle forensics... ("David Litchfield" <davidl@...software.com>)
Re: OpenSSH security advisory: cbc.adv (Bob Beck <beck@...berta.ca>)
[security bulletin] HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Rem… (security-alert@...com)
Re: Microsoft VISTA TCP/IP stack buffer overflow (dale@...efaq.com)
RSA EnVision Remote Password Disclosure (nicolas.viot@...rinsec.com)
Re: Microsoft VISTA TCP/IP stack buffer overflow (Edi Strosar <edi.strosar@...il.com>)
[CFP] FRHACK 01 Call For Papers (save the dates!) (Jerome Athias <jerome.athias@...e.fr>)
WordPress XSS vulnerability in RSS Feed Generator (Jeremias Reith <jr@...ragate.net>)

November 26 (7 messages)

[USN-668-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-678-1] GnuTLS vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis) ("svrt" <svrt@...v.com.vn>)
Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation (Aditya K Sood <0kn0ck@...niche.org>)
XSS in Internet Explorer 6 and 7 ("MustLive" <mustlive@...security.com.ua>)
Re: XSS in Internet Explorer 6 and 7 (Thierry Zoller <Thierry@...ler.lu>)
WHMCS V3.7.1 Sensible Information Disclosure (julianrdz91@...il.com)

November 27 (5 messages)

Re: WHMCS V3.7.1 Sensible Information Disclosure (julianrdz91@...il.com)
FreeRainbowTables.com has changed generation platform (Jerome Athias <jerome.athias@...e.fr>)
[HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation (office@...kattack.at)
[USN-680-1] Samba vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
AssoCIateD 1.4.4 Remote Cross Site Scripting Vulnerability (tan_prathan@...mail.com)

November 28 (3 messages)

SecurityReason : PHP 5.2.6 dba_replace() destroying file (cxib@...urityreason.com)
DC4420 - DEFCON London - Christmas meeting - Tuesday 2nd December 2008 (Major Malfunction <majormal@...ate-radio.org>)
[tool] Exomind v0.2 is out! (Jose Orlicki <jorlicki@...esecurity.com>)

November 29 (1 message)

[SECURITY] [DSA 1672-1] New imlib2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

228 messages

Powered by blists - more mailing lists