bugtraq mailing list - 2009/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2009/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 9	² 11	³	⁴
⁵ 8	⁶ 11	⁷ 12	⁸ 14	⁹ 9	¹⁰	¹¹
¹²	¹³ 34	¹⁴ 11	¹⁵ 4	¹⁶ 12	¹⁷ 1	¹⁸
¹⁹ 7	²⁰ 11	²¹ 8	²² 9	²³ 12	²⁴	²⁵
²⁶ 58	²⁷ 19	²⁸ 17	²⁹ 19	³⁰ 18	³¹

Messages by day:

October 1 (9 messages)

[ MDVSA-2009:178 ] perl-IO-Socket-SSL (security@...driva.com)
THOTCON 0x1 - Call For Papers is Open -> October 1, 2009 (THOTCON Announce <announce@...tcon.org>)
{PRL} Novell Edirectory 8.8 SP5 XSS (Protek Research Lab <protekresearchlab@...oo.ca>)
{PRL} Cerberus FTP server 3.0.6 Pre-Auth DoS (Protek Research Lab <protekresearchlab@...oo.ca>)
[ MDVSA-2009:253 ] backuppc (security@...driva.com)
ZDI-09-067: Novell NetWare NFS Portmapper and RPC Module Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2009:254 ] graphviz (security@...driva.com)
Rooted CON 2010 - CFP (Roman Medina-Heigl Hernandez <roman@...labs.com>)
[USN-839-1] Samba vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

October 2 (11 messages)

[USN-840-1] OpenOffice.org vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit (IE) (nospam@...il.it)
AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit (nospam@...il.it)
VMSA-2009-0013 VMware Fusion resolves two security issues (VMware Security team <security@...are.com>)
Re: VMSA-2009-0013 VMware Fusion resolves two security issues (mu-b <mu-b@...it-labs.org>)
[SECURITY] [DSA 1898-1] New openswan packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 1900-1] New PostgreSQL packages fix various problems (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 1899-1] New strongswan packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
FreeBSD Security Advisory FreeBSD-SA-09:13.pipe (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-09:14.devfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ MDVSA-2009:255 ] perl-DBD-Pg (security@...driva.com)

October 5 (8 messages)

[security bulletin] HPSBUX02421 SSRT090047 rev.2 - HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (security-alert@...com)
CORE-2009-0812-Hyperic HQ Multiple XSS (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Palm Pre WebOS <=1.1 Remote File Access Vulnerability (PalmPreHacker@...il.com)
[SECURITY] [DSA 1901-1] New mediawiki1.7 packages fix several vulnerabilities (iuculano@...ian.org (Giuseppe Iuculano))
[oCERT-2009-014] Android denial-of-service issues (Andrea Barisani <lcars@...rt.org>)
CVE-2009-2897: Hyperic HQ - Reflected XSS in stack trace (SpringSource Security Team <security@...ingsource.com>)
CVE-2009-2898: Hyperic HQ - Stored XSS in alerts list (SpringSource Security Team <security@...ingsource.com>)
[SECURITY] [DSA 1902-1] New elinks packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

October 6 (11 messages)

[USN-841-1] GLib vulnerability (Kees Cook <kees@...ntu.com>)
FRHACK01 Slides are online (Jerome Athias <jerome.athias@...e.fr>)
Re: Cross-Site Scripting vulnerability in eCaptcha (code@...ycube.com)
AlleyCode SEH overflow POC‏‏ (rafa.de.sousa@...mail.com)
Re: WinRAR v3.80 - ZIP Filename Spoofing (chris.levny@...il.com)
[Sec-Area Advisory]PBBoard <=2.0.2 - XSS in Topic (admin@...-area.com)
[Advisory]PBBoard <=2.0.2 Full Path Disclosure (admin@...-area.com)
[USN-842-1] Wget vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-843-1] BackupPC vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Dopewars 1.5.12 Server Denial of Service (dougtko@...il.com)
CORE-2009-0922: Jetty Persistent XSS in Sample Cookies Application (CORE Security Technologies Advisories <advisories@...esecurity.com>)

October 7 (12 messages)

[ MDVSA-2009:256 ] dbus (security@...driva.com)
[ MDVSA-2009:257 ] qemu (security@...driva.com)
{PRL} XLPD 3.0 Remote DoS (Protek Research Lab <protekresearchlab@...oo.ca>)
Remote File Inclusion In AIOCP (hadikiamarsi@...mail.com)
Re: FRHACK01 Slides are online (Jerome Athias <jerome.athias@...e.fr>)
BulletProof FTP Client Buffer Overflow (SEH) (rafa.de.sousa@...mail.com)
[security bulletin] HPSBPI02463 SSRT090061 rev.1 - HP LaserJet Printers, HP Color LaserJet Printers, Remote Cross Site Scripting (XSS) (security-alert@...com)
[ MDVSA-2009:258 ] openssl (security@...driva.com)
[SECURITY] [DSA 1903-1] New graphicsmagick packages fix several vulnerabilities (Giuseppe Iuculano <giuseppe@...ulano.it>)
iDefense Security Advisory 10.07.09: IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[DSECRG-09-017] SAP GUI vsflexGrid ActiveX - Buffer Overflow vulnerability (DSecRG <research@...crg.com>)
[DSECRG-09-048] HP LaserJet printers - Multiple Stored XSS vulnerabilities (DSecRG <research@...crg.com>)

October 8 (14 messages)

DreamPoll 3.1 Vulnerabilities (mark@...osecstuff.com)
[ MDVSA-2009:259 ] snort (security@...driva.com)
Remote buffer overflow in httpdx (pankaj208@...il.com)
BMW 'inventory.php"<= SQL Injection Vulnerability (Dazz.band@...mail.com)
[USN-844-1] mimeTeX vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-845-1] Pan vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:217-1 ] mozilla-thunderbird (security@...driva.com)
[ MDVSA-2009:217-2 ] mozilla-thunderbird (security@...driva.com)
FreeBSD 6.4 pipeclose()/knlist_cleardel() race condition exploit (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
FreeBSD 7.2 VFS/devfs race condition exploit (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
WASC Announcement: Announcing the Web Application Security Scanner Evaluation Criteria v1 (announcements@...appsec.org)
vBulletin - Multiple Versions - Cross Site Script Redirection (advisories@...ern0t.net)
[USN-846-1] ICU vulnerability (Jamie Strandboge <jamie@...onical.com>)
QuickCart Multiple vlunerabilities (Paweł Łaskarzewski <kl3ryk@...il.com>)

October 9 (9 messages)

[USN-847-1] Devscripts vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2009:261 ] graphicsmagick (security@...driva.com)
[ MDVSA-2009:260 ] imagemagick (security@...driva.com)
CA20091008-01: Security Notice for CA Anti-Virus Engine ("Williams, James K" <James.Williams@...com>)
[SECURITY] [DSA 1904-1] New wget packages fix SSL certificate verification weakness (iuculano@...ian.org (Giuseppe Iuculano))
[USN-847-2] devscripts vulnerability (Jamie Strandboge <jamie@...onical.com>)
Docebo Multiple SQL-Injection Vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)
[ MDVSA-2009:262 ] netpbm (security@...driva.com)
Re: Remote buffer overflow in httpdx (dr_ide@...hmail.com)

October 13 (34 messages)

[ MDVSA-2009:263 ] sympa (security@...driva.com)
[ MDVSA-2009:265 ] egroupware (security@...driva.com)
[ MDVSA-2009:275 ] python-django (security@...driva.com)
[G-SEC 46-2009] Computer Associates multiple products arbritary code execution (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:264 ] gd (security@...driva.com)
[SECURITY] [DSA 1895-2] New opensaml2 and shibboleth-sp2 packages fix regression (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2009:266 ] awstats (security@...driva.com)
Re: Re: Remote buffer overflow in httpdx (pankaj208@...il.com)
[ MDVSA-2009:267 ] xmlsec1 (security@...driva.com)
[SECURITY] [DSA 1905-1] New python-django packages fix denial of service (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 1906-1] End-of-life announcement for clamav in stable and oldstable (white@...ian.org (Steffen Joeris))
DEDECMS v5.1 Sql Injection Vulnerability (info@...uritylab.ir)
[ MDVSA-2009:268 ] mono (security@...driva.com)
[ MDVSA-2009:269 ] mono (security@...driva.com)
[ MDVSA-2009:271 ] libnasl (security@...driva.com)
[ MDVSA-2009:270 ] wireshark (security@...driva.com)
[ MDVSA-2009:272 ] libmikmod (security@...driva.com)
[ MDVSA-2009:273 ] strongswan (security@...driva.com)
Quick Heal Local Privilege Escalation Vulnerability (ss_contacts@...mail.com)
Palm Pre WebOS version <= 1.1 Floating Point Exception (PalmPreHacker@...il.com)
[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities (iuculano@...ian.org (Giuseppe Iuculano))
[ MDVSA-2009:274 ] phpmyadmin (security@...driva.com)
[BONSAI] SQL Injection in Achievo (Bonsai - Information Security <advisories@...sai-sec.com>)
[BONSAI] XSS in Achievo - Customized XSS payload included (Bonsai - Information Security <advisories@...sai-sec.com>)
[ MDVSA-2009:276 ] python-django (security@...driva.com)
ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 10.13.09: Adobe Acrobat and Reader U3D File Invalid Array Index Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-09-069: Microsoft Windows Media Player Audio Voice Sample Rate Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-073: Adobe Reader Compact Font Format Malformed Index Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-072: Microsoft Windows GDI+ TIFF Parsing Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 10.13.09: Adobe Acrobat and Reader Firefox Plugin Use After Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 10.13.09: Microsoft Windows GDI+ TIFF File Parsing Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 10.13.09: Microsoft Office Drawing Format Shape Properties Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)

October 14 (11 messages)

[SECURITY] [DSA 1908-1] New samba packages fix several vulnerabilities (Nico Golde <nion@...ian.org>)
Windows GDI+ TIFF memory corruption (Ivan Fratric <ifsecure@...il.com>)
Windows Media Audio Voice remote code execution (Ivan Fratric <ifsecure@...il.com>)
[AntiSnatchOr] Pentaho Bi-server multiple vulnerabilities (Michele Orru <antisnatchor@...il.com>)
[ MDVSA-2009:277 ] samba (security@...driva.com)
[AntiSnatchOr] Eclipse BIRT <= 2.2.1 Reflected XSS (Michele Orru <antisnatchor@...il.com>)
Secunia Research: Microsoft Office BMP Image Colour Handling Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
DEFCON London - DC4420 October 2009 Meet - This Thursday 15th (Major Malfunction <majormal@...ate-radio.org>)
Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-848-1] Zope vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:278 ] compiz-fusion-plugins-main (security@...driva.com)

October 15 (4 messages)

[SECURITY] [DSA 1909-1] New postgresql-ocaml packages provide secure escaping (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1911-1] New pygresql packages provide secure escaping (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1910-1] New mysql-ocaml packages provide secure escaping (white@...ian.org (Steffen Joeris))
Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)

October 16 (12 messages)

[ MDVSA-2009:279 ] ocaml-mysql (security@...driva.com)
[USN-849-1] libsndfile vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit (support@...code.com)
NSFOCUS SA2009-01 : UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
NSFOCUS SA2009-03 : Windows Kernel Malformed PE File Remote DoS Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
n.runs-SA-2009.007 - Adobe Acrobat - Invalid pointer write could lead to arbitrary code execution (<security@...ns.com>)
[SECURITY] [DSA 1912-1] New camlimages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
DWebPro allow an invader to execute any program at server side (rafa.de.sousa@...mail.com)
WASC Announcement: 2008 Web Application Security Statistics Published (announcements@...appsec.org)
VMSA-2009-0014 VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues (VMware Security Team <security@...are.com>)
VUPEN Security - Adobe Acrobat and Reader U3D Filter Code Execution Vulnerabilities ("VUPEN Security Research" <advisories@...en.com>)

October 17 (1 message)

CanSecWest 2010 CALL FOR PAPERS (deadline Nov 30, conf. Mar22-26) and PacSec (Nov 4/5) Selections (dr@....net (Dragos Ruiu))

October 19 (7 messages)

[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection (iuculano@...ian.org (Giuseppe Iuculano))
Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce. (adam@...pasec.com)
3Com OfficeConnect Firewall/Router multiple remote Vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)
In-depth research on the recent PDF zero-day exploit (CVE-2009-3459) (cocoruder <cocoruder@...il.com>)
Vulnerability in Zoiper softphone version 2.22 - Denial Of Service ("Inj3ct0r.com" <inj3ct0r@...t.ru>)
McKesson Horizon Clinical Infrastructure (HCI) version 7.6/7.8/10.0/10.1 hardcoded passwords (foo@....com)
phpcms 2008 Remote File Disclosure Vulnerability (info@...uritylab.ir)

October 20 (11 messages)

[ MDVSA-2009:283 ] cups (security@...driva.com)
Overland Guardian OS CLI command line bug - let you get uid 0 shell (trompele@...il.com)
[CVE-2009-1479] Boxalino - Directory Traversal Vulnerability (Axel Neumann <axel.neumann@...c.ch>)
[ MDVSA-2009:280 ] cups (security@...driva.com)
[ MDVSA-2009:281 ] cups (security@...driva.com)
[ MDVSA-2009:282 ] cups (security@...driva.com)
EMC RepliStor Server (rep_serv.exe) 6.3.1.3 remote denial of service (nospam@...il.it)
South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges (nospam@...il.it)
[ MDVSA-2009:284 ] gd (security@...driva.com)
NSOADV-2009-002: Websense Email Security Web Administrator DoS (NSO Research <nso-research@...iriu.de>)
NSOADV-2009-003: Websense Email Security Cross Site Scripting (NSO Research <nso-research@...iriu.de>)

October 21 (8 messages)

[ GLSA 200910-01 ] Wget: Certificate validation error (Alex Legler <a3li@...too.org>)
[ MDVSA-2009:285 ] php (security@...driva.com)
turbodiff v1.01 beta released ("Nicolas A. Economou" <neconomou@...esecurity.com>)
[ MDVSA-2009:286 ] ocaml-camlimages (security@...driva.com)
[USN-850-1] poppler vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[waraxe-2009-SA#075] - Remote File Disclosure in Vivvo CMS 4.1.5.1 (come2waraxe@...oo.com)
[USN-851-1] Elinks vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 (jason@...software.com)

October 22 (9 messages)

TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities (Davide Canali <davide@...idecanali.com>)
[oCERT-2009-016] Poppler, xpdf integer overflow during heap allocation (Will Drewry <redpig@...rt.org>)
Corsaire White Paper: Attacking Magstripe Gift Cards ("Adrian P." <research@...saire.com>)
Call for Papers: Conference on Cyber Conflict, Estonia (k g <kgconference@...il.com>)
Everfocus EDR1600 remote authentication bypass (Andrea Fabrizi <andrea.fabrizi@...il.com>)
[ MDVSA-2009:287 ] xpdf (security@...driva.com)
Avast! Multiple Vulnerabilities (ss_contacts@...mail.com)
{PRL} Eureka Mail client BoF (Protek Research Lab <protekresearchlab@...oo.ca>)
{PRL} Pegasus Mail client BoF (Protek Research Lab <protekresearchlab@...oo.ca>)

October 23 (12 messages)

[SECURITY] [DSA 1914-1] New mapserver packages fix serveral vulnerabilities (Nico Golde <nion@...ian.org>)
[ GLSA 200910-02 ] Pidgin: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[security bulletin] HPSBUX02466 SSRT090192 rev.1 - HP-UX Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Unauthorized Acces… (security-alert@...com)
RE: [Full-disclosure] NSOADV-2009-003: Websense Email Security Cross Site Scripting ("Hubbard, Dan" <dhubbard@...sense.com>)
[security bulletin] HPSBUX02465 SSRT090192 rev.1 - HP-UX Running Apache-based Web Server, Remote Denial of Service (DoS) Cross-Site Script… (security-alert@...com)
[USN-850-2] poppler regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
HP Quality Centre Weak password Obfuscation (jason@...er-security.co.uk)
[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
/proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)

October 26 (58 messages)

Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux ("Arturo 'Buanzo' Busleiman" <buanzo@...nzo.com.ar>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
[ MDVSA-2009:288 ] proftpd (security@...driva.com)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
[SECURITY] [DSA 1912-2] New advi packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1916-1] New kdelibs packages fix SSL certificate verification weakness (iuculano@...ian.org (Giuseppe Iuculano))
[SECURITY] [DSA 1917-1] New mimetex packages fix several vulnerabilities (iuculano@...ian.org (Giuseppe Iuculano))
Novell eDirectory 8.8 SP5 for Windows - Buffer Overflow Vulnerability (karakorsankara@...mail.com)
Re: /proc filesystem allows bypassing directory permissions on Linux (Daryl Tester <dt-bugtraq@...dcraftedcomputers.com.au>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on Linux (Derek Martin <code@...zashack.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Anton Ivanov <arivanov@...segv.cx>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Anton Ivanov <arivanov@...segv.cx>)
SharePoint 2007 ASP.NET Source Code Disclosure ("Daniel Martin" <daniel@...software.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Anton Ivanov <anton.ivanov@...-begemot.co.uk>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
squidGuard 1.3 & 1.4 : buffer overflow (majinboo <majinbou@...il.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Anton Ivanov <anton.ivanov@...-begemot.co.uk>)
Jetty 6.x and 7.x Multiple Vulnerabilities (ascii <ascii@...amail.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
[SECURITY] [DSA 1918-1] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1919-1] New smarty packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
[ GLSA 200910-03 ] Adobe Reader: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
[DSECRG-09-010] Oracle 10g CTXSYS.DRVXTABC - plsql injection (DSecRG <research@...crg.com>)
Re: Re: /proc filesystem allows bypassing directory permissions on Linux (nomail@...ail.com)
RunCms v.2M1 /modules/forum/post.php - 'forum' remote semi-blind SQL Injection Exploit (nospam@...il.it)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Casper.Dik@....com)
Re: /proc filesystem allows bypassing directory permissions on Linux (Stephen Harris <bugtraq@...ddy.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Tony Finch <dot@...at.at>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Tamber Penketh <james.penketh@...glemail.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Klaus Lichtenwalder <k.lichtenwalder@...puter.org>)
[SECURITY] [DSA-1920-1] New nginx packages fix denial of service (Stefan Fritsch <sf@...ian.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Joel Maslak <jmaslak@...elope.net>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Ansgar Wiechers <bugtraq@...netcobalt.net>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Isara Beaumont <isara.beaumont@...glemail.com>)
Cherokee Web Server 0.5.4 Denial Of Service (usman@...re.net)
AST-2009-007: ACL not respected on SIP INVITE ("Asterisk Security Team" <security@...erisk.org>)

October 27 (19 messages)

Re: /proc filesystem allows bypassing directory permissions on Linux ("Kinzel, David" <dakinzel@...cor.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Glynn Clements <glynn@...ements.plus.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on Linux (Matthew Dempsky <matthew@...psky.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Rising Multiple Products Local Privilege Escalation Vulnerability (ss_contacts@...mail.com)
{PRL} Rising Firewall 2009 Privilege Escalation (Protek Research Lab <protekresearchlab@...oo.ca>)
Adobe Acrobat Reader up to 9.1.1 ONLY Linux integer overflow to heap overflow. (adam@...pasec.com)
{PRL} Rising Antivirus 2009 Privilege Escalation (Protek Research Lab <protekresearchlab@...oo.ca>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Vincent Zweije <vincent+bugtraq@...se.xs4all.nl>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Tony Finch <dot@...at.at>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on Linux (CaT <cat@....com.au>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Marco Verschuur <marco@....nl>)
Aruba Networks Advisory ID: AID-102609 - Malformed 802.11 Association Request frame causes Denial of Service condition o… (Robbie Gill <rgill@...banetworks.com>)

October 28 (17 messages)

VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues (VMware Security Team <security@...are.com>)
[oCERT-2009-015] KDE multiple issues (Andrea Barisani <lcars@...rt.org>)
[ MDVSA-2009:289 ] kernel (security@...driva.com)
PHP168 v6.0 rc (info@...uritylab.ir)
Mariposa Botnet C&C decryption plugin for wireshark (megumi1990@...il.com)
[G-SEC 47-2009] Symantec generic PDF detection bypass (Thierry Zoller <Thierry@...ler.lu>)
Secunia Research: Mozilla Firefox Floating Point Memory Allocation Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Marco Verschuur <marco@....nl>)
[SECURITY] [DSA 1921-1] New expat packages fix denial of service (iuculano@...ian.org (Giuseppe Iuculano))
Re: /proc filesystem allows bypassing directory permissions on Linux (Derek Martin <code@...zashack.org>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on Linux (Ivan Jager <aij+@...h.org>)
[G-SEC 49-2009] McAfee generic PDF detection bypass (Thierry Zoller <Thierry@...ler.lu>)
Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation (Tavis Ormandy <taviso@....lonestar.org>)
[G-SEC 48-2009] F-SECURE - Generic PDF detection bypass (Thierry Zoller <Thierry@...ler.lu>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Matthew Dempsky <matthew@...psky.org>)

October 29 (19 messages)

Hijacking Opera's Native Page using malicious RSS payloads ("Inferno" <inferno@...urethoughts.com>)
Fwd: Wowd search client multiple variable xss (Lostmon lords <lostmon@...il.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (CaT <cat@....com.au>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)
ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
iDefense Security Advisory 10.28.09: Mozilla Firefox GIF Color Map Parsing Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
[ MDVSA-2009:290 ] firefox (security@...driva.com)
Re: /proc filesystem allows bypassing directory permissions on Linux (Vincent Zweije <vzweije@...ije.nl>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Dan Yefimov <dan@...htwave.net.ru>)
Re: /proc filesystem allows bypassing directory permissions on Linux (CaT <cat@....com.au>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Glynn Clements <glynn@...ements.plus.com>)
Re: /proc filesystem allows bypassing directory permissions on (Martin Rex <Martin.Rex@....com>)
2wire Remote Denial of Service (Pedro Joaquin <pjoaquin@...sec.com>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)

October 30 (18 messages)

[ MDVSA-2009:291 ] jetty5 (security@...driva.com)
Re: /proc filesystem allows bypassing directory permissions on Linux (Jim Paris <jim@...n.com>)
SafeNet SoftRemote Local Buffer Overflow - Security Advisory - SOS-09-008 ("Lists" <lists@...seofsecurity.com.au>)
Re: /proc filesystem allows bypassing directory permissions on (Pavel Machek <pavel@....cz>)
[SECURITY] [DSA 1923-1] New libhtml-parser-perl packages fix denial of service (Nico Golde <nion@...ian.org>)
com_jumi / jumi 2.0.5 for joomla 1.5 backdoored (Jan van Niekerk <jvnkrk@...il.com>)
CubeCart 4 Session Management Bypass (Bogdan Calin <bogdan@...netix.com>)
PSAtr v1.2 Sql Injection (info@...uritylab.ir)
Windows Media Player Plugin: Local File Detection Vulnerability (renard-volant@...mail.com)
CVE-2009-1979 (Oracle RDBMS) (Dennis Yurichev <dennis@...us.info>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Marco Verschuur <marco@....nl>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Jim Paris <jim@...n.com>)
{PRL} My Remote File Server Privilege Escalation (Protek Research Lab <protekresearchlab@...oo.ca>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Marco Verschuur <marco@....nl>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Marco Verschuur <marco@....nl>)
Re: /proc filesystem allows bypassing directory permissions on Linux (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on Linux (psz@...hs.usyd.edu.au)

314 messages

Powered by blists - more mailing lists