bugtraq mailing list - 2009/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2009/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 11	³ 12	⁴ 11	⁵ 17	⁶ 6	⁷	⁸
⁹ 12	¹⁰ 13	¹¹	¹² 14	¹³ 9	¹⁴	¹⁵
¹⁶ 10	¹⁷ 11	¹⁸ 9	¹⁹ 6	²⁰ 9	²¹	²²
²³ 12	²⁴ 6	²⁵ 10	²⁶	²⁷	²⁸	²⁹
³⁰ 21

Messages by day:

November 2 (11 messages)

{PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability (Protek Research Lab <protekresearchlab@...oo.ca>)
Re: TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities (schwartz@...com)
Reminder for DeepSec 2009 Conference (DeepSec Conference - Announcement <deepsec@...psec.net>)
ACROS Security: HTML Injection in Oracle WebLogic Server Console (ASPR #2009-10-30-1) ("ACROS Lists" <lists@...os.si>)
[SECURITY] [DSA 1924-1] New mahara packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness (white@...ian.org (Steffen Joeris))
[USN-853-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: {PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Re: /proc filesystem allows bypassing directory permissions on (Martin Rex <Martin.Rex@....com>)
Re: /proc filesystem allows bypassing directory permissions on (Pavel Machek <pavel@....cz>)
NSOADV-2009-001: Symantec ConsoleUtilities ActiveX Control Buffer Overflow (NSO Research <nso-research@...iriu.de>)

November 3 (12 messages)

Re: /proc filesystem allows bypassing directory permissions on (Gabor Gombas <gombasg@...aki.hu>)
QuahogCon Call for Papers (info@...hogcon.org)
ZDI-09-075: Novell eDirectory LDAP Null Base DN Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: /proc filesystem allows bypassing directory permissions on (Martin Rex <Martin.Rex@....com>)
[USN-850-3] poppler vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Fwd: {Lostmon´s Group} Re: Wowd search client multiple variable xss (solution) (Lostmon lords <lostmon@...il.com>)
Re: /proc filesystem allows bypassing directory permissions on (Gabor Gombas <gombasg@...aki.hu>)
Re: /proc filesystem allows bypassing directory permissions on (Dan Yefimov <dan@...htwave.net.ru>)
[ MDVSA-2009:292 ] wireshark (security@...driva.com)
[ MDVSA-2009:293 ] squidGuard (security@...driva.com)
New vulnerability in Xerox Fiery Webtools (Bernardo Luis <bernardo@...up.pt>)
Re: Cherokee Web Server 0.5.4 Denial Of Service (daniel.crowley@...esecurity.com)

November 4 (11 messages)

Re: /proc filesystem allows bypassing directory permissions on (psz@...hs.usyd.edu.au)
Secunia Research: IBM Tivoli Storage Manager CAD Service Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Bractus SunTrack Multiple XSS (Bugs NotHugs <bugsnothugs@...il.com>)
Re: /proc filesystem allows bypassing directory permissions on (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on (Pavel Machek <pavel@....cz>)
Re: /proc filesystem allows bypassing directory permissions on (psz@...hs.usyd.edu.au)
Re: /proc filesystem allows bypassing directory permissions on (Gabor Gombas <gombasg@...aki.hu>)
[security bulletin] HPSBUX02355 SSRT080023 rev.2 - HP-UX Using libc, Remote Denial of Service (DoS) (security-alert@...com)
VUPEN Security - Adobe Shockwave Player Multiple Code Execution Vulnerabilities ("VUPEN Security Research" <advisories@...en.com>)
Re: /proc filesystem allows bypassing directory permissions on (Gabor Gombas <gombasg@...aki.hu>)
Context IS Advisory - Autocomplete Data Theft in Mozilla Firefox (Context IS - Disclosure <disclosure@...textis.co.uk>)

November 5 (17 messages)

[SECURITY] [DSA 1926-1] New TYPO3 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
AST-2009-009: Cross-site AJAX request vulnerability ("Asterisk Security Team" <security@...erisk.org>)
AST-2009-008: SIP responses expose valid usernames ("Asterisk Security Team" <security@...erisk.org>)
ZDI-09-076: Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-080: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-077: Sun Java Web Start Arbitrary Command Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-078: Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: /proc filesystem allows bypassing directory permissions on (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
CONFidence 2.0 schedule online - last time to register (Andrzej Targosz <andrzej.targosz@...il.com>)
[Bkis-12-2009] eoCMS SQL injection vulnerability - Bkis Report (Bkis <svrt@...v.com.vn>)
[security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code (security-alert@...com)
[SECURITY] [DSA 1927-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
CORE-2009-0912: Blender .blend Project Arbitrary Command Execution (CORE Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-855-1] libhtml-parser-perl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-854-1] GD library vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 6 (6 messages)

[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Using Blended Browser Threats involving Chrome to steal files on your computer ("Inferno" <Inferno@...ureThoughts.com>)
[ MDVSA-2009:294 ] firefox (security@...driva.com)
[SECURITY] [DSA 1929-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Php 5.3.0 pdflib extension open_basedir bypass (r3d.w0rm@...oo.com)
[ GLSA 200911-01 ] Horde: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)

November 9 (12 messages)

[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1931-1] New NSPR packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1932-1] New pidgin packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2009:295 ] apache (security@...driva.com)
[SECURITY] CVE-2009-3548 Apache Tomcat Windows Installer insecure default administrative password (Mark Thomas <markt@...che.org>)
FRHACK01 DVDs (Jerome Athias <jerome.athias@...e.fr>)
ToutVirtual VirtualIQ Multiple Vulnerabilities ("Claudio Criscione" <blackfireml@...urenetwork.it>)
DoS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: DoS vulnerability in Internet Explorer (r.st@...cast.net)
Re: Re: DoS vulnerability in Internet Explorer (notdisclosed@...m.la)
Re: FRHACK01 DVDs (Jerome Athias <jerome.athias@...e.fr>)

November 10 (13 messages)

Atheros Driver Reserved Frame Vulnerability (Laurent Butti <laurent.butti@...nge-ftgroup.com>)
[USN-856-1] CUPS vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-857-1] Qt vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[MORNINGSTAR-2009-02] Multiple security issues in Cute News and UTF-8 Cute News (Andrew Horton <andrew@...ningstarsecurity.com>)
Marvell Driver Multiple Information Element Overflows (Laurent Butti <laurent.butti@...nge-ftgroup.com>)
[security bulletin] HPSBUX02476 SSRT090250 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabi… (security-alert@...com)
[SECURITY] [DSA 1933-1] New cups packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability (zhangmc@...l.ustc.edu.cn)
TPTI-09-07: Microsoft Windows License Logging Service Heap Corruption Vulnerability (dvlabs <dvlabs@...pingpoint.com>)
ZDI-09-082: Microsoft Office Excel PivotTable Cache Record Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-083: Microsoft Excel Shared Feature Header Pointer Offset Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 11.10.09: Microsoft Excel FEATHEADER Record Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

November 12 (14 messages)

Re: XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability (Protek Research Lab <protekresearchlab@...oo.ca>)
Exploit writing tutorials (Peter Van Eeckhoutte <peter.ve@...elan.be>)
Novell eDirectory 8.8 SP5 Denial of Service (advisory@...kattack.com)
Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[USN-858-1] OpenLDAP vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: New vulnerability in Xerox Fiery Webtools (laurent.hermelin@....com)
[USN-853-2] Firefox and Xulrunner regression (Jamie Strandboge <jamie@...onical.com>)
Yahoo Messenger 9 ActiveX DoS (Null Pointer) Vulnerability (advisory@...kattack.com)
[SWRX-2009-002] McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability (ctu-no-reply@...ureworks.com)
VUPEN Security Research - Microsoft Office Excel Code Execution Vulnerabilities ("VUPEN Security Research" <advisories@...en.com>)
WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution (golunski@...t.eu)
Panda Security Software Local Privilege Escalation (ss_contacts@...mail.com (Maxim A. Kulakov))
[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability (ctu-no-reply@...ureworks.com)
RE: Exploit writing tutorials (Peter Van Eeckhoutte <peter.ve@...elan.be>)

November 13 (9 messages)

Re: WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution (golunski@...t.eu)
XM Easy Personal FTP Server 'APPE' and 'DELE' Command Remote Denial of Service Vulnerability (zhangmc@...l.ustc.edu.cn)
rPSA-2009-0142-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0143-1 util-linux util-linux-extras (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0144-1 apr-util (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0145-1 samba samba-client samba-server samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0142-2 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2009:296 ] gimp (security@...driva.com)
[USN-859-1] OpenJDK vulnerabilities (Kees Cook <kees@...ntu.com>)

November 16 (10 messages)

[ MDVSA-2009:298 ] xine-lib (security@...driva.com)
[ MDVSA-2009:297 ] ffmpeg (security@...driva.com)
[ MDVSA-2009:158-1 ] pango (security@...driva.com)
[ MDVSA-2009:299 ] xine-lib (security@...driva.com)
[ MDVSA-2009:300 ] apache-conf (security@...driva.com)
Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation (contact.fingers@...il.com)
[DSECRG-09-062] Alteon OS BBI (Nortell) - Multiple Vulnerabilities (DSecRG <research@...crg.com>)
Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability (zhangmc@...l.ustc.edu.cn)
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues (Stefan Fritsch <sf@...ian.org>)
Re: DoS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)

November 17 (11 messages)

[ MDVSA-2009:158-2 ] pango (security@...driva.com)
[security bulletin] HPSBUX02451 SSRT090137 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
Hellcode Research: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability (karakorsankara@...mail.com)
[SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate verification weakness (Giuseppe Iuculano <iuculano@...ian.org>)
Metasploit Framework 3.3 Released (HD Moore <hdm@...oore.com>)
Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Execution… (security-alert@...com)
Home FTP Server 'MKD' Command Directory Traversal Vulnerability (zhangmc@...l.ustc.edu.cn)
Kaspersky Anti-Virus 2010 <= 9.0.0.463 pointer dereference vulnerability (s.leberre@...dream.com)
[SECURITY] [DSA 1936-1] New libgd2 packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)

November 18 (9 messages)

CORE-2009-0814: HP Openview NNM 7.53 Invalid DB Error Code vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[ GLSA 200911-02 ] Sun JDK/JRE: Multiple vulnerabilites (Alex Legler <a3li@...too.org>)
[security bulletin] HPSBUX02409 SSRT080171 rev.2 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), … (security-alert@...com)
DEFCON London - DC4420 - NO MEETING this Thursday! 19th November 2009 (Major Malfunction <majormal@...ate-radio.org>)
TLS / SSLv3 vulnerability explained (DRAFT) (Thierry Zoller <Thierry@...ler.lu>)
[security bulletin] HPSBMI02473 SSRT080138 rev.1 - Cisco Catalyst Blade Switch 3020/3120, Remote Denial of Service (DoS) (security-alert@...com)
Secunia Research: RhinoSoft Serv-U TEA Decoding Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Announcement: Critical Internet Infrastructure WG is now open to public participation (Gadi Evron <ge@...uxbox.org>)
CORE-2009-1027: IBM SolidDB invalid error code vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)

November 19 (6 messages)

[USN-860-1] Apache vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[security bulletin] HPSBPI02472 SSRT090196 rev.1 - Certain HP Color LaserJet Printers, Remote Unauthorized Access to Data, Denial of Servi… (security-alert@...com)
[security bulletin] HPSBMA02477 SSRT090177 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (security-alert@...com)
Auto Manager admin.cgi Multiple Field XSS (Bugs NotHugs <bugsnothugs@...il.com>)
AssetsSoSimple supplier_admin.php Supplier Field XSS (Bugs NotHugs <bugsnothugs@...il.com>)
NSA Iraqi Computer Attacks And U.S. Defense (Gadi Evron <ge@...uxbox.org>)

November 20 (9 messages)

K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution) (cxib@...urityreason.com)
Firefox 3.5.3 Remote Array Overrun (UPDATE) (cxib@...urityreason.com)
SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution) (cxib@...urityreason.com)
Opera 10.01 Remote Array Overrun (Arbitrary code execution) (cxib@...urityreason.com)
KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution) (cxib@...urityreason.com)
PHP "multipart/form-data" denial of service (Bogdan Calin <bogdan@...netix.com>)
[security bulletin] HPSBMA02478 SSRT090251 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Access (security-alert@...com)
IE7 (info@...uritylab.ir)
VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third par… (VMware Security Team <security@...are.c…)

November 23 (12 messages)

ZDI-09-085: Hewlett-Packard Operations Manager Server Backdoor Account Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Vulnerabilities in plugins for WordPress ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising (white@...ian.org (Steffen Joeris))
[ MDVSA-2009:301 ] kernel (security@...driva.com)
Code to mitigate IE STYLE zero-day (ds.adv.pub@...il.com)
[Bkis-13-2009] e107 Multiple Vulnerabilities (Bkis <svrt@...v.com.vn>)
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
[ MDVSA-2009:302 ] php (security@...driva.com)
Millions of PDF invisibly embedded with your internal disk paths ("Inferno" <inferno@...urethoughts.com>)
CORE-2009-0908: Autodesk SoftImage Scene TOC Arbitrary Command Execution (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2009-0909: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2009-0910: Autodesk Maya Script Nodes Arbitrary Command Execution (CORE Security Technologies Advisories <advisories@...esecurity.com>)

November 24 (6 messages)

RE: Millions of PDF invisibly embedded with your internal disk paths ("Thor (Hammer of God)" <thor@...merofgod.com>)
TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote DoS Vulnerabilities (leinakesi@...il.com)
XM Easy Personal FTP Server Remote DoS Vulnerability (leinakesi@...il.com)
Executing arbitrary PHP code on OpenX <= 2.8.1 (Moritz Naumann <security@...itz-naumann.com>)
New Paper: MitM Attacks against the chipTAN comfort Online Banking System (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[USN-861-1] libvorbis vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 25 (10 messages)

[security bulletin] HPSBMA02417 SSRT090031 rev.2 - HP Data Protector Express and HP Data Protector Express Single Server (security-alert@...com)
Vulnerabilities in WP-Cumulus for WordPress ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities (Giuseppe Iuculano <giuseppe@...ulano.it>)
rPSA-2009-0154-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0155-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0156-1 sun-jdk sun-jre (rPath Update Announcements <announce-noreply@...th.com>)
Re: Millions of PDF invisibly embedded with your internal disk paths (Patrick Webster <sflist@...hack.com>)
[ GLSA 200911-03 ] UW IMAP toolkit: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[resent] [ GLSA 200911-04 ] dstat: Untrusted search path (Robert Buchholz <rbu@...too.org>)
[ GLSA 200911-05 ] Wireshark: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)

November 30 (21 messages)

[SECURITY] [DSA-1940-1] New php5 packages fix several issues (Stefan Fritsch <sf@...ian.org>)
[ GLSA 200911-06 ] PEAR Net_Traceroute: Command injection (Alex Legler <a3li@...too.org>)
[USN-862-1] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:303 ] php (security@...driva.com)
[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2009:306 ] dovecot (security@...driva.com)
Remote Command Execution in dotDefender Site Management (John Dos <dotdefeater@...glemail.com>)
Some more details on IE STYLE zero-day (ds.adv.pub@...il.com)
[security bulletin] HPSBUX02482 SSRT090249 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of (security-alert@...com)
[BMSA-2009-07] Backdoor in PyForum (Nam Nguyen <namn@...emoon.com.vn>)
Cacti 0.8.7e: Multiple security issues (Moritz Naumann <security@...itz-naumann.com>)
TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) (Thierry Zoller <Thierry@...ler.lu>)
Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition (k4mr4n_St@...oo.com)
Announce: RFIDIOt-1.0a released - November 2009 (Adam Laurie <adam@...roup.co.uk>)
Xxasp v3.3.2 Sql injection (secu_lab_ir@...oo.com)
Windows packages for BIND9 contain vulnerable MSVC runtime components ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others (Andrea Purificato <a.purificato@....it>)
[ MDVSA-2009:304 ] bind (security@...driva.com)
Eshopbuilde CMS SQL Injection Vulnerability (faghani@...c.ir)
[ MDVSA-2009:304 ] php (security@...driva.com)
[SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

199 messages

Powered by blists - more mailing lists