bugtraq mailing list - 2009/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2009/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 5	² 12	³ 5	⁴	⁵
⁶ 13	⁷ 6	⁸ 3	⁹ 5	¹⁰ 3	¹¹	¹²
¹³ 22	¹⁴ 13	¹⁵ 12	¹⁶ 16	¹⁷ 5	¹⁸ 1	¹⁹
²⁰ 18	²¹ 14	²² 13	²³ 12	²⁴ 5	²⁵	²⁶
²⁷ 22	²⁸ 22	²⁹ 22	³⁰ 9	³¹ 5

Messages by day:

July 1 (5 messages)

REMINDER : HITBSecConf2009 - Malaysia: Call for Papers (Praburaajan <prabu@...erunix.com.my>)
Artofdefence Hyperguard Web Application Firewall: Remote Denial of Service ("Kirchner Michael" <sec08003@...hagenberg.at>)
phion airlock Web Application Firewall: Remote Denial of Service via Management Interface (unauthenticated) and Command … ("Kirchner Michael" <sec08003@...hagenbe…)
radware AppWall Web Application Firewall: Source code disclosure on management interface ("Kirchner Michael" <sec08003@...hagenberg.at>)
VMSA-2009-0008 ESX Service Console update for krb5 (VMware Security Team <security@...are.com>)

July 2 (12 messages)

Re: XAMPP for Windows (Xss/PHPinfo) Multiple Vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
[security bulletin] HPSBUX02440 SSRT090106 rev.1 - HP-UX Running NFS/ONCplus, Local Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02431 SSRT090085 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Execution of Arb… (security-alert@...com)
Sourcefire 3D Sensor and DC, privilege escalation vulnerability (c3rb3r@...eotron.ca)
eAccelerator encoder files backup Vulnerability (linuxrootkit2008@...il.com)
[oCERT-2009-009] CamlImages integer overflows (Andrea Barisani <lcars@...rt.org>)
[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers (ISecAuditors Security Advisories <advisories@...cauditors.com…)
[USN-794-1] Perl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-795-1] Nagios vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ GLSA 200907-01 ] libwmf: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
[ GLSA 200907-02 ] ModSecurity: Denial of Service (Alex Legler <a3li@...too.org>)
Multiple Flaws in Axesstel MV 410R (filip.palian@...stk.edu.pl)

July 3 (5 messages)

Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome ("MustLive" <mustlive@...security.com.ua>)
One Click Ownage [White Paper and Scripts] (Ferruh Mavituna <ferruh@...ituna.com>)
[SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
[oCERT-2009-007] FCKeditor input sanitization errors (Andrea Barisani <lcars@...rt.org>)
Re: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome (Michal Zalewski <lcamtuf@...edump.cx>)

July 6 (13 messages)

[oCERT-2009-008] Dillo integer overflow (Andrea Barisani <lcars@...rt.org>)
[security bulletin] HPSBPI02398 SSRT080166 rev.4 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remot… (security-alert@...com)
[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[ GLSA 200907-03 ] APR Utility Library: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
Re: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome (Liu Die Yu <liudieyu.com@...il.com>)
Avax Vector ActiveX 1.3 (avPreview.ocx) Denial of Service Exploit (Satan_hackers@...oo.com)
[Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability (Bkis <svrt@...v.com.vn>)
[SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
High security hole in NullLogic Groupware (Tim Brown <timb@...-dimension.org.uk>)
Medium security hole in TekRADIUS (Tim Brown <timb@...-dimension.org.uk>)
Pwning Nokia phones (and other Symbian based smartphones) (Bernhard Mueller <research@...-consult.com>)
[USN-796-1] Pidgin vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-797-1] tiff vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)

July 7 (6 messages)

SEC Consult SA-20090707-0 :: Symbian S60 / Nokia firmware media codecs multiple memory corruption vulnerabilities (Bernhard Mueller <research@...-consult.com>)
RE: Decompilation Injection ("Maty Siman" <maty@...ckmarx.com>)
CFP - Security Byte / OWASP Asia 2009 (cfp@...uritybyte.org)
Citrix XenCenterWeb Multiple Vulnerabilities (Claudio Criscione <c.criscione@...urenetwork.it>)
[SECURITY] [DSA 1828-1] New ocsinventory-agent packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
[ MDVSA-2009:148 ] kernel (security@...driva.com)

July 8 (3 messages)

[ MDVSA-2009:124-1 ] apache (security@...driva.com)
Re: Back door trojan in acajoom-3.2.6 for joomla (Jan van Niekerk <jvnkrk@...il.com>)
CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information (Core Security Technologies Advisories <advisories@...esecurity.com>)

July 9 (5 messages)

MySQL <= 5.0.45 post auth format string vulnerability (Kingcope <kcope2@...glemail.com>)
Pwnie Awards 2009 (Alexander Sotirov <alex@...irov.net>)
Update: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:149 ] apache (security@...driva.com)
[ MDVSA-2009:149 ] apache (security@...driva.com)

July 10 (3 messages)

Atlantic SimpleCaddy Shopping Cart Price Manipulation (domingos.bruges@...ked.com)
HTC / Windows Mobile OBEX FTP Service Directory Traversal (alberto.morenot@...il.com)
Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)

July 13 (22 messages)

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl (VMware Security team <security@...are.com>)
[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1753-2] End-of-life announcement for icedove in oldstable (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1830-1] New icedove packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[ GLSA 200907-04 ] Apache: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 200907-05 ] git: git-daemon Denial of Service (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-06 ] Adobe Reader: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-07 ] ModPlug: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-08 ] Multiple Ralink wireless drivers: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-09 ] Cyrus-SASL: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-10 ] Syslog-ng: Chroot escape (Robert Buchholz <rbu@...too.org>)
[ GLSA 200907-11 ] GStreamer plug-ins: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
DDIVRT-2009-26 LogRover SQL Injection Authentication Bypass (ddivulnalert@...frontline.com)
[oCERT-2009-012] libtiff tools integer overflows (Andrea Barisani <lcars@...rt.org>)
[security bulletin] HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module (J9155A), Remote Unauthorized Access, … (security-alert@...com)
[USN-800-1] irssi vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-799-1] D-Bus vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-801-1] tiff vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-802-1] Apache vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[SECURITY] [DSA 1831-1] New djbdns packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2009:150 ] libtiff (security@...driva.com)
[SECURITY] [DSA 1832-1] New camlimages packages fix arbitrary code execution (Thijs Kinkhorst <thijs@...ian.org>)

July 14 (13 messages)

Re: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Neil Dickey <neil@...l.niu.edu>)
[oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection (Andrea Barisani <lcars@...rt.org>)
[SECURITY] [DSA 1829-2] New sork-passwd-h3 packages fix regression (white@...ian.org (Steffen Joeris))
Secunia Research: Novell eDirectory iMonitor "Accept-Language" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Nick Boyce <nick.boyce@...il.com>)
Re[2]: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
Virtualmin Multiple Vulnerabilities (Filip Palian <filip.palian@...stk.edu.pl>)
FortiGuard Advisory: Microsoft Office Web Components Remote Memory Corruption Vulnerability ("noreply-secresearch@...tinet.com" <noreply-secresearch@...tinet.co…)
[ GLSA 200907-12 ] ISC DHCP: dhcpclient Remote execution of arbitrary code (Alex Legler <a3li@...too.org>)
ZDI-09-045: Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-09-05: Microsoft DirectShow QuickTime Atom Parsing Memory Corruption Vulnerability (dvlabs <dvlabs@...pingpoint.com>)
[SECURITY] [DSA 1833-1] New dhcp3 packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
[USN-803-1] dhcp vulnerability (Jamie Strandboge <jamie@...onical.com>)

July 15 (12 messages)

Admin News Tools 2.5 Remote File Download Vulnerability (info@...uritylab.ir)
MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS <= 3.10.7/3.9.9--> (y3nh4ck3r@...il.com)
Re: Re[2]: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Nick Boyce <nick.boyce@...il.com>)
Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages (Cisco Systems Product Security Incident Response Team <psirt@ci…)
iDefense Security Advisory 07.15.09: Microsoft Embedded OpenType Font Engine (T2EMBED.DLL) Heap Buffer Overflow Vulnera… (iDefense Labs <labs-no-reply@...fense.c…)
[SECURITY] [DSA 1834-1] New apache2 packages fix denial of service (Stefan Fritsch <sf@...ian.org>)
[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... (Thierry Zoller <Thierry@...ler.lu>)
Mobile Rediff Username and Password Disclosure (gursev.kalra@...ndstone.com)
Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome (Michal Zalewski <lcamtuf@...edump.cx>)
iDefense Security Advisory 07.15.09: Microsoft Office Publisher 2007 Arbitrary Pointer Dereference Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

July 16 (16 messages)

Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) (Thierry Zoller <Thierry@...ler.lu>)
Re:[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... (Thierry Zoller <Thierry@...ler.lu>)
Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... (R Dicaire <kritek@...il.com>)
[ MDVSA-2009:151 ] dhcp (security@...driva.com)
Vulnerable DLLs distributed with Terratec HomeCinema 6.3 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome (advisories@...ern0t.net)
FRHACK List of Talks and Speakers released (Jerome Athias <jerome.athias@...e.fr>)
Re: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Re[2]: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) (Thierry Zoller <Thierry@...ler.lu>)
Re[2]: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... (Thierry Zoller <Thierry@...ler.lu>)
[DSECRG-09-025] Oracle Secure Enterprise Search 10.1.8 Linked XSS vulnerability (DSecRG <research@...crg.com>)
[ GLSA 200907-13 ] PulseAudio: Local privilege escalation (Robert Buchholz <rbu@...too.org>)
[DSECRG-09-031] Oracle BEA Weblogic 10.3 Linked ХSS vulnerability (DSecRG <research@...crg.com>)
[oCERT-2009-011] Android improper camera and audio permission verification (Andrea Barisani <lcars@...rt.org>)
[SECURITY] [DSA 1836-1] New fckeditor packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-804-1] PulseAudio vulnerability (Kees Cook <kees@...ntu.com>)

July 17 (5 messages)

[ GLSA 200907-14 ] Rasterbar libtorrent: Directory traversal (Robert Buchholz <rbu@...too.org>)
COMRaider Idefense Labs CreateFolder() and Copy() Insecure Method (Hard Disk Filler Exploit) (irancrash@...il.com)
[ MDVSA-2009:152 ] pulseaudio (security@...driva.com)
PulseAudio local race condition privilege escalation vulnerability (Akita Software Security <lists@...tasecurity.nl>)
Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking (cevans@...gle.com)

July 18 (1 message)

[ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking (ISecAuditors Security Advisories <advisories@...cauditors.com>)

July 20 (18 messages)

[ MDVSA-2009:153 ] dhcp (security@...driva.com)
Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking (Vicente Aguilera <vaguilera@...cauditors.com>)
[SECURITY] [DSA 1838-1] New pulseaudio packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)
[ GLSA 200907-15 ] Nagios: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2009:156 ] net-snmp (security@...driva.com)
Hacking CSRF Tokens using CSS History Hack (Inferno@...ureThoughts.com)
Adobe related service (getPlus_HelperSvc.exe) local elevation of privileges (nospam@...il.it)
Re: PHP-Revista Multiple vulnerabilities (security curmudgeon <jericho@...rition.org>)
[ MDVSA-2009:155 ] git (security@...driva.com)
DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 1839-1] New gst-plugins-good0.10 packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
[USN-805-1] Ruby vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:154 ] dhcp (security@...driva.com)
[SECURITY] [DSA 1837-1] New dbus packages fix denial of service (white@...ian.org (Steffen Joeris))
[ MDVSA-2009:157 ] perl-Compress-Raw-Zlib (security@...driva.com)
[ GLSA 200907-16 ] Python: Integer overflows (Robert Buchholz <rbu@...too.org>)
CORE-2009-0227: Real Helix DNA RTSP and SETUP request handler vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)

July 21 (14 messages)

Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... (Thierry Zoller <Thierry@...ler.lu>)
RE: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome (Jeremiah Gowdy <Jeremiah.Gowdy@...edomvoice.com>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome ("MustLive" <mustlive@...security.com.ua>)
[INFIGO-2009-07-09]: NASA Common Data Format remote buffer overflow(s) ("infocus" <infocus@...igo.hr>)
mChek 3.4 Information Disclosure (gursev.kalra@...ndstone.com)
Re: Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking (admin@...kycode.net)
Re: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonke… (Michal Zalewski <lcamtuf@...edump.cx>)
Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey… (Thierry Zoller <Thierry@...ler.lu>)
Re: Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, S… (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome,… ("Steven M. Christey" <coley@...us.mitre…)
Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit (Jeremy Brown <0xjbrown41@...il.com>)
Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey,… (Thierry Zoller <Thierry@...ler.lu>)
Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seam… ("Steven M. Christey" <coley@...us.mitre…)
ZDI-09-046: Novell Privileged User Manager Remote DLL Injection Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

July 22 (13 messages)

Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey… (Thierry Zoller <Thierry@...ler.lu>)
Re: Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, S… (Michal Zalewski <lcamtuf@...edump.cx>)
RainbowCrack 1.4 is released - The Time-Memory Tradeoff Hash Cracker (shuanglei@...e.com)
Re[8]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey… (Thierry Zoller <Thierry@...ler.lu>)
Re: Re[6]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, S… (Michal Zalewski <lcamtuf@...edump.cx>)
Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey,… (Thierry Zoller <Thierry@...ler.lu>)
[security bulletin] HPSBUX02437 SSRT090038 rev.1 - HP-UX Running XNTP, Remote Execution of Arbitrary Code (security-alert@...com)
Need information, for MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow CVE-2008-5616 ("Rajendra Prasad . Palnaty" <rajendra.palnaty@...escale.com>)
Re: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPh… (Andrew Farmer <andfarm@...il.com>)
Re[6]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey… (Thierry Zoller <Thierry@...ler.lu>)
[USN-798-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Phorum : Permanent Cross-Site Scripting Vulnerabilities (crashfr@...dream.com)
Akamai Technologies Security Advisory 2009-0001 (Download Manager) (Akamai Security Team <security@...mai.com>)

July 23 (12 messages)

[SECURITY] [DSA 1840-1] New xulrunner packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[GSEC-TZO-45-2009] iPhone remote code execution (Thierry Zoller <Thierry@...ler.lu>)
wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability ("Cru3l.b0y" <cru3l.b0y@...il.com>)
Ocean CMS 0.0.2 Remote File Inclusion Vulnerability ("Cru3l.b0y" <cru3l.b0y@...il.com>)
LifeType 1.2.8 Remote File Inclusion Vulnerability ("Cru3l.b0y" <cru3l.b0y@...il.com>)
Re: LifeType 1.2.8 Remote File Inclusion Vulnerability (GulfTech Security Research <security@...ftech.org>)
Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability (g30rg3_x <g30rg3x@...il.com>)
Stored XSS on Communigate Pro 5.2.14 and prior versions (Andrea Purificato - bunker <andrea.purificato@...il.com>)
Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability ("MustLive" <mustlive@...security.com.ua>)
Re: Re: Back door trojan in acajoom-3.2.6 for joomla (chris.boergermann@...erko.de)
[USN-806-1] Python vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: Back door trojan in acajoom-3.2.6 for joomla (Jeffrey Walton <noloader@...il.com>)

July 24 (5 messages)

[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple Full Path Disclosure vulnerabilities (ISecAuditors Security Advisories <advisories@...cauditors.co…)
Re: Asante FM2008 10/100 Ethernet switch backdoor login (secfocus2@....philipps.us)
[ MDVA-2009:158 ] pango (security@...driva.com)
Oracle CPUjul2009 (Dennis Yurichev <dennis@...us.info>)
URL spoofing bug involving Firefox's error pages and document.write (jplopezy@...il.com)

July 27 (22 messages)

Cisco WLC 4402 Denial-of-Service vulnerability (SySS security advisories -- Christoph Bott <advisories@...t.syss.de>)
PHP filesystem attack vectors - Take Two (ascii <ascii@...amail.com>)
Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome ("MustLive" <mustlive@...security.com.ua>)
Remote File Inclusion in aiocp (hadikiamarsi@...mail.com)
rPSA-2009-0111-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
IXXO Cart! Standalone and Joomla Component SQL Injection (SmOk3 <smok3f00@...il.com>)
[SECURITY] [DSA 1841-1] New git-core packages fix denial of service (Nico Golde <nion@...ian.org>)
[ MDVSA-2009:159 ] mysql (security@...driva.com)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome ("MustLive" <mustlive@...security.com.ua>)
DoS vulnerabilities in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
[Tool] sqlmap 0.7 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
Re: URL spoofing bug involving Firefox's error pages and document.write (xu shaopei <xisigr@...il.com>)
Re: URL spoofing bug involving Firefox's error pages and document.write (security@...ern0t.net)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. (tixxDZ <tixxdz@...il.com>)
NcFTPd <= 2.8.5 remote jail breakout (Kingcope <kcope2@...glemail.com>)
Re: URL spoofing bug involving Firefox's error pages and document.write ("YGN Ethical Hacker Group (http://yehg.net)" <lists@...g.net>)
cross site scripting the browser google "chrome" (biko linux <bikolinux@...il.com>)
computer crime statistics ("Choon Ming" <choonming2002@...il.com>)
Re: NcFTPd <= 2.8.5 remote jail breakout (Kingcope <kcope2@...glemail.com>)
Re: URL spoofing bug involving Firefox's error pages and document.write (Michael Wood <itnetsec@...il.com>)
RE: computer crime statistics ("McDonnell, Michael" <michael.mcdonnell@...berta.ca>)

July 28 (22 messages)

[ MDVSA-2009:160 ] ruby (security@...driva.com)
[ MDVSA-2009:161 ] squid (security@...driva.com)
Re: computer crime statistics (Scotty <scott.nielsen@....edu>)
Fwd: cross site scripting the browser google "chrome" (Karn Ganeshen <karnganeshen@...il.com>)
[SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Fwd: Google Chrome About:blank Spoof (Lostmon lords <lostmon@...il.com>)
[SECURITY] [DSA 1843-1] New squid3 packages fix denial of service (Nico Golde <nion@...ian.org>)
RE: computer crime statistics ("Michael Theroux" <michael.theroux@...xus.com>)
Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2009:162 ] java-1.6.0-openjdk (security@...driva.com)
CORE-2009-0707: Firebird SQL op_connect_request main listener shutdown vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[ MDVSA-2009:163 ] tomcat5 (security@...driva.com)
Cisco Security Advisory: Active Template Library (ATL) Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2009:164 ] jasper (security@...driva.com)
[RISE-2009003] Linux eCryptfs parse_tag_3_packet Encrypted Key Buffer Overflow Vulnerability (RISE Security <advisories@...esecurity.org>)
RE: computer crime statistics (Paul Petersen <P.Petersen@...com>)
[ MDVSA-2009:167 ] php (security@...driva.com)
[ MDVSA-2009:165 ] ghostscript (security@...driva.com)
[security bulletin] HPSBMA02438 SSRT090092 rev.1 - HP ProLiant DL/ML 100 Series G5/G6 Servers with ProLiant Onboard Administrator Powered … (security-alert@...com)
[ MDVSA-2009:166 ] c-client (security@...driva.com)
[ MDVSA-2009:168 ] apache (security@...driva.com)
[RISE-2009002] Linux eCryptfs parse_tag_11_packet Literal Data Buffer Overflow Vulnerability (RISE Security <advisories@...esecurity.org>)

July 29 (22 messages)

[ MDVSA-2009:169 ] libtiff (security@...driva.com)
[ MDVSA-2009:171 ] pulseaudio (security@...driva.com)
[ MDVSA-2009:170 ] initscripts (security@...driva.com)
[ MDVSA-2009:172 ] dhcp (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-09:12.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ MDVSA-2009:173 ] pidgin (security@...driva.com)
[SECURITY] [DSA 1844-1] New Linux 2.6.24 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 1845-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 1846-1] New kvm packages fix denial of service (dann frazier <dannf@...ian.org>)
[USN-808-1] Bind vulnerability (Kees Cook <kees@...ntu.com>)
Pre-Beta Invite , New (Free) Anti-Virus Software (Andrew Mcphee <andrew@...unet.com>)
[SECURITY] [DSA 1847-1] New bind9 packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities (Cisco Systems Product Security Incident Res…)
[ MDVSA-2009:174 ] perl-Compress-Raw-Zlib (security@...driva.com)
[ MDVSA-2009:175 ] pango (security@...driva.com)
[ MDVSA-2009:176 ] git (security@...driva.com)
[ MDVSA-2009:177 ] ruby (security@...driva.com)
[ MDVSA-2009:178 ] squid (security@...driva.com)
[ MDVSA-2009:179 ] mysql (security@...driva.com)
Re: Citrix XenCenterWeb Multiple Vulnerabilities (bill.carovano@...rix.com)
[ MDVSA-2009:180 ] compface (security@...driva.com)
[ MDVSA-2009:181 ] bind (security@...driva.com)

July 30 (9 messages)

[security bulletin] HPSBUX02421 SSRT090047 rev.1 - HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (security-alert@...com)
Re: THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
rPSA-2009-0113-1 bind bind-utils (rPath Update Announcements <announce-noreply@...th.com>)
EPSON Status Monitor 3 local privilege escalation vulnerability (nospam@...il.it)
Re: THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression (Stefan Fritsch <sf@...ian.org>)
wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability ("Cru3l.b0y" <cru3l.b0y@...il.com>)
Re: wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability (Francesco Laurita <francesco@...ncesco-laurita.info>)
EC2ND 2009 CFP - 5th European Conference on Computer Network Defence (Maggi Federico <federico.maggi@...il.com>)

July 31 (5 messages)

[ MDVSA-2009:182 ] firefox (security@...driva.com)
XOOPS Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-005 ("Lists" <lists@...seofsecurity.com.au>)
Re: wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability ("YGN Ethical Hacker Group (http://yehg.net)" <lists@...g.net>)
[ MDVSA-2009:183 ] apache-mod_security (security@...driva.com)
[ MDVSA-2009:184 ] apache-mod_security (security@...driva.com)

263 messages

Powered by blists - more mailing lists