bugtraq mailing list - 2010/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2010/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 10	² 17	³ 10	⁴ 13	⁵ 8	⁶	⁷
⁸ 13	⁹ 9	¹⁰ 21	¹¹ 6	¹² 10	¹³	¹⁴
¹⁵ 18	¹⁶ 11	¹⁷ 10	¹⁸	¹⁹ 7	²⁰	²¹
²² 6	²³ 25	²⁴ 20	²⁵ 9	²⁶ 3	²⁷	²⁸
²⁹ 17	³⁰ 11	³¹ 13

Messages by day:

March 1 (10 messages)

ARISg5 (Version 5.0) Cross Site Scripting Vulnerability (lament@...ack.org)
Month of PHP Security 2010 - CALL FOR PAPERS (Stefan Esser <stefan.esser@...tioneins.de>)
Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0) (mori@...sporan.net)
Re: Re: Circumventing Critical Security in Windows XP (anonym@...nym.com)
CONFidence 2010 /25-26 May/, CfP (andrzej.targosz@...idea.org.pl)
Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability (lament@...ack.org)
[USN-905-1] sudo vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[ MDVSA-2010:051 ] mozilla-thunderbird (security@...driva.com)

March 2 (17 messages)

Re: Easy FTP Server 1.7.0.2 Remote BoF (Paul Makowski <my.hndl@...il.com>)
[ MDVSA-2010:052 ] sudo (security@...driva.com)
ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
1024CMS Blind SQL Injection Vulnerability (admin@...report.ir)
Eshbel Priority MarketGate module Cross Site Scripting Vulnerability (lament@...ack.org)
ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities (lament@...ack.org)
[xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter (lis cker <liscker@...mail.com>)
Re: Re: Circumventing Critical Security in Windows XP (Jann Horn <jannhorn@...glemail.com>)
Todd Miller Sudo local root exploit discovered by Slouching (Kingcope <kcope2@...glemail.com>)
iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Circumventing Critical Security in Windows XP (Ansgar Wiechers <bugtraq@...netcobalt.net>)
[ MDVSA-2010:053 ] apache (security@...driva.com)
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Luxology Modo 401 .LXO Integer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
NSOADV-2010-004: McAfee LinuxShield remote/local code execution (NSO Research <nso-research@...iriu.de>)

March 3 (10 messages)

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@ci…)
RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution ("Veal, Richard" <rveal@...ternpower.co.uk>)
Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution (NSO Research <nso-research@...iriu.de>)
Re: Todd Miller Sudo local root exploit discovered by Slouching (andy@...mail.com)
Re: Todd Miller Sudo local root exploit discovered by Slouching (Kingcope <kcope2@...glemail.com>)
[ GLSA 201003-01 ] sudo: Privilege escalation (Alex Legler <a3li@...too.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability (Cisco Systems Product Security Incident Respons…)
CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: Todd Miller Sudo local root exploit discovered by Slouching (Jann Horn <jannhorn@...glemail.com>)

March 4 (13 messages)

[USN-906-1] CUPS vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow (NSO Research <nso-research@...iriu.de>)
[SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
IETF effort: Security Assesment of the Internet Protocol (Fernando Gont <fernando.gont@...il.com>)
VMSA-2010-0004 ESX Service Console and vMA third party updates (VMware Security Team <security@...are.com>)
Re: Re: Todd Miller Sudo local root exploit discovered by Slouching (noone@...hing.com)
Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21) (Martin Barbella <martybarbella@...il.com>)
Unspecified EMC Documentum Remote Code Execution Vulnerability (dr_ch1na@...hmail.com)
fcrontab Information Disclosure Vulnerability (Dan Rosenberg <dan.j.rosenberg@...il.com>)
CA20100304-01: Security Notice for CA SiteMinder ("Williams, James K" <James.Williams@...com>)
[ MDVSA-2010:054 ] pam_krb5 (security@...driva.com)
[xss] a xss on "ThreadID" parameter in BBSXP 2008 from china (lis cker <liscker@...mail.com>)

March 5 (8 messages)

Juniper SA Series Cross Site Scripting Issue (Security Lists NL <security.lists.nl@...ica.com>)
iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Todd Miller Sudo local root exploit discovered by Slouching (Steve Shockley <steve.shockley@...ckley.net>)
SQL injection vulnerability in Natychmiast CMS (Maciej Gojny <vuln@...ko-security.com>)
[ MDVSA-2010:055 ] poppler (security@...driva.com)
Call for Papers: EC2ND 2010 (Konrad Rieck <konrad.rieck@...berlin.de>)
ncpfs, Multiple Vulnerabilities (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: ncpfs, Multiple Vulnerabilities (dan.j.rosenberg@...il.com)

March 8 (13 messages)

[ MDVSA-2010:056 ] openoffice.org (security@...driva.com)
Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002 ("Lists" <lists@...seofsecurity.com.au>)
[xss] a xss on "action" parameter in BBSMAX (lis cker <liscker@...mail.com>)
Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (drstrangep0rk@...hmail.com)
phpinfo() XSS Vulnerability (info@...uritylab.ir)
ZoneAlarm Security Circumvention ("Andrew Barkley" <barkley@....net>)
"Writing JIT-Spray Shellcode for fun and profit" by DSecRG (DSecRG <research@...crg.com>)
[ MDVSA-2010:057 ] apache (security@...driva.com)
rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0014-1 mysql mysql-bench mysql-server (rPath Update Announcements <announce-noreply@...th.com>)
[USN-907-1] gnome-screensaver vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
rPSA-2010-0013-1 gzip (rPath Update Announcements <announce-noreply@...th.com>)

March 9 (9 messages)

Re: phpinfo() XSS Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0 (lis cker <liscker@...mail.com>)
Croogo CMS 1.2 Cross Site Scripting Vulnerabilities (Paulino Calderon <calderon@...vuln.com>)
IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability (lament@...ack.org)
SQL injection vulnerability in wILD CMS (Maciej Gojny <vuln@...ko-security.com>)
Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
[SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands (security-alert@...com)
ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

March 10 (21 messages)

ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow (CORE Security Technologies Advisories <advisories@...esecurity…)
iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[ MDVSA-2010:058 ] php (security@...driva.com)
[xss] a xss on "threadid" parameter in BBSMAX (lis cker <liscker@...mail.com>)
Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure (Secunia Research <remove-vuln@...unia.com>)
VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Vulnerabilities in Hydra Engine ("MustLive" <mustlive@...security.com.ua>)
iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Secunia Research: Employee Timeclock Software Backup Information Disclosure (Secunia Research <remove-vuln@...unia.com>)
iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDVSA-2010:059 ] virtualbox (security@...driva.com)
Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[USN-908-1] Apache vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio (Jakob Lell <jakob@...tu-berlin.de>)
Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability (lament@...ack.org)

March 11 (6 messages)

[SECURITY] [DSA 2011-1] New dpkg packages fix path traversal (Nico Golde <nion@...ian.org>)
[ MDVSA-2010:060 ] squid (security@...driva.com)
[USN-909-1] dpkg vulnerability (Kees Cook <kees@...ntu.com>)
Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker (Luka Milkovic <milkovic.luka@...il.com>)
Vulnerabilities in Abton ("MustLive" <mustlive@...security.com.ua>)
Skype URI Handler Input Validation (Paul Craig <paul.craig@...urity-assessment.com>)

March 12 (10 messages)

ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:061 ] ncpfs (security@...driva.com)
[USN-911-1] MoinMoin vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface! (lis cker <liscker@...mail.com>)
VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
[SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

March 15 (18 messages)

CVE-2010-0188 Exploit Code (villys777@...il.com)
Sun Java System Communication Express CSRF via HPP (edgard.chammas@...ond-security.org)
Vulnerability in phpAdsNew, OpenAds and OpenX ("MustLive" <mustlive@...security.com.ua>)
SyScan'10 CFP ("thomas@...can.org" <thomas@...can.org>)
[HITB-Announce] HITBSecConf2010 - Dubai Agenda Released (Hafez Kamal <aphesz@...kinthebox.org>)
Pars CMS SQL Injection Vulnerability (faghani@...c.ir)
Zigurrat CMS SQL Injection Vulnerability (faghani@...c.ir)
Ananta Gazelle SQL Injection Vulnerability (admin@...report.ir)
[Tool] sqlmap 0.8 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
[SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
...because you can't get enough of clickjacking (Michal Zalewski <lcamtuf@...edump.cx>)
PlumberCon 10 - Call for Papers (astera <a.schneeweisz@...il.com>)
ZoneAlarm 9 (ForceField) Security Disclosure ("Andrew Barkley" <barkley@....net>)
New vulnerabilities in Abton ("MustLive" <mustlive@...security.com.ua>)
Multiple DOM-Based XSS in Dojo Toolkit SDK (labs@...security.com)
ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: ZoneAlarm Security Circumvention (Ansgar Wiechers <bugtraq@...netcobalt.net>)
QuickZip 0day detailed write-up (Security <security@...elan.be>)

March 16 (11 messages)

Vulnerability httpdx v1.5.3 (Mehdi Mahdjoub - Sysdream IT Security Services <m.mahdjoub@...dream.com>)
rPSA-2010-0022-1 sendmail sendmail-cf (rPath Update Announcements <announce-noreply@...th.com>)
ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-912-1] Audio File Library vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory (Giuseppe Iuculano <iuculano@...ian.org>)
rPSA-2010-0018-1 bind bind-utils caching-nameserver (rPath Update Announcements <announce-noreply@...th.com>)
Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
SugarCRM Stored XSS vulnerability (Jeromie Jackson <jeromie@...secinc.com>)
ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-913-1] libpng vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

March 17 (10 messages)

CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Exe… (security-alert@...com)
[CORELAN-10-13] - Windisc Local Stack BOF (Security <security@...elan.be>)
Vulnerabilities in VXDate for Joomla ("MustLive" <mustlive@...security.com.ua>)
Miranda IM silent TLS failure (Jan Schejbal <jan.mailinglisten@...glemail.com>)
Secunia Research: Quicksilver Forums Backup Information Disclosure (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure (Secunia Research <remove-vuln@...unia.com>)
Sahana 0.6.2.2 Authentication Bypass (Christopher <vooduhal@...il.com>)

March 19 (7 messages)

[USN-915-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference (Raphael Geissert <geissert@...ian.org>)
CA20100318-01: Security Notice for CA ARCserve Backup ("Kotas, Kevin J" <Kevin.Kotas@...com>)
There are lost of xss vul in PHPWind v6.0 ! (lis cker <liscker@...mail.com>)
IBM Lotus 6.x HTTP Response Splitting Vulnerability (lament@...ack.org)
Vulnerability Httpdx v1.5.3b (Mehdi Mahdjoub - Sysdream IT Security Services <m.mahdjoub@...dream.com>)
announcing skipfish, an automated web app security scanner (Michal Zalewski <lcamtuf@...edump.cx>)

March 22 (6 messages)

Aris AGX agXchange ESM Open Redirection Vulnerability (lament@...ack.org)
Firefox 3.6 for Windows includes a forged CA cert (Francis Litterio <flitterio@...il.com>)
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
[ MDVSA-2010:062 ] curl (security@...driva.com)
[SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting (Nico Golde <nion@...ian.org>)
IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability (lament@...ack.org)

March 23 (25 messages)

MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
CFP - GameSec 2010 - Conference on Decision and Game Theory for Security (Albert Levi <levi@...anciuniv.edu>)
Re: Firefox 3.6 for Windows includes a forged CA cert (dveditz@...zio.com)
[ MDVSA-2010:063 ] libpng (security@...driva.com)
[ MDVSA-2010:064 ] libpng (security@...driva.com)
Re: Firefox 3.6 for Windows includes a forged CA cert (adam@...ga.org.uk)
REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left (Stefan Esser <stefan.esser@...tioneins.de>)
{PRL} Lexmark Multiple Laser Printer Remote Stack Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
Re: Firefox 3.6 for Windows includes a forged CA cert (Mike Duncan <Mike.Duncan@...a.gov>)
[SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution (Giuseppe Iuculano <iuculano@...ian.org>)
IE 6.0 - Local Crash Exploit (info@...uritylab.ir)
Vulnerability Astaro Security Linux v5 (Mehdi Mahdjoub - Sysdream IT Security Services <m.mahdjoub@...dream.com>)
[DSECRG-09-064] SAP GUI - Insecure method, code execution (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Re: IE 6.0 - Local Crash Exploit (Veg <veg@...squirrel.org>)
Re: Vulnerability Astaro Security Linux v5 (jdaniel@...aro.com)
Safari browser port blocking bypassed by integer overflow (Gary Niger <goatsec@...il.com>)
Vulnerabilities in CaptchaSecurityImages ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:065 ] cpio (security@...driva.com)
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Hafez Kamal <aphesz@...kinthebox.org>)
MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413] (Tom Yu <tlyu@....edu>)
Re: Vulnerability Astaro Security Linux v5 (Akos Szalkai <szalkai@...hu>)
[CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String) (Security <security@...elan.be>)
Aris AGX agXchange ESM Cross Site Scripting Vulnerability (lament@...ack.org)
Re: Firefox 3.6 for Windows includes a forged CA cert (Marcus Meissner <meissner@...e.de>)
Internet Explorer 7.0 0day Vulnerability (k4mr4n_St@...oo.com)

March 24 (20 messages)

{PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services (Francis Provencher <francisprovencher@...tekresearchlab.com>)
Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine) (Andriy Tereshchenko <tag@...odessa.ua>)
Vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities (Nico Golde <nion@...ian.org>)
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction* (Hafez Kamal <aphesz@...kinthebox.org>)
CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities (s2-security <s2-security@...are.com>)
[USN-916-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
CVE-2009-4505 OpenCMS OAMP Comments Module XSS ("Cyrill Brunschwiler" <cyrill.brunschwiler@...c.ch>)
[USN-918-1] Samba vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
"$referer" export lead to the cross-site flaws in all versions of Discuz! (lis cker <liscker@...mail.com>)
Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Symlink attack with Solaris Update manager (bugs@....dhs.org)
Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[USN-917-1] Puppet vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Multiple vulnerabilities in Deliver (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team…)
Symlink attack with Solaris Update manager and Sun Patch Cluster (bugs <bugs@....dhs.org>)

March 25 (9 messages)

Vulnerabilities in WeBAM ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:066 ] kernel (security@...driva.com)
[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access (security-alert@...com)
Ruxcon 2010 Call For Papers (cfp@...con.org.au)
There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by th… (lis cker <liscker@...mail.com>)
Multiple Vulnerabilities in EASY Enterprise DMS (michael.mueller@...egralis.com)
Re: Vulnerabilities in WeBAM (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule (Jonathan Brossard <endrazine@...il.com>)

March 26 (3 messages)

[ MDVSA-2010:067 ] kernel (security@...driva.com)
Vulnerabilities in TooFAST ("MustLive" <mustlive@...security.com.ua>)
[security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled (security-alert@...com)

March 29 (17 messages)

[security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial … (security-alert@...com)
[ MDVSA-2010:068 ] php (security@...driva.com)
[SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
[ MDVSA-2010:068 ] php (security@...driva.com)
{PRL} Novell Netware FTP Remote Stack Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
London DEFCON March meet - DC4420 - Wednesday March 31st 2010 (Major Malfunction <majormal@...ate-radio.org>)
Medium security hole in Varnish reverse proxy (Tim Brown <timb@...-dimension.org.uk>)
Exploiting nano (Dan Rosenberg <dan.j.rosenberg@...il.com>)
SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5 (Andreas Kirbach <andreas.kirbach@...pro.de>)
Remote buffer overflow in aircrack-ng causes DOS and possible code execution (Lukas Lueg <lukas.lueg@...glemail.com>)
Vulnerabilities in ArcManager ("MustLive" <mustlive@...security.com.ua>)
XSS vulnerability in easy page cms (info@...uritylab.ir)
Re: [Full-disclosure] Medium security hole in Varnish reverse proxy (John Adams <jna@...tter.com>)
Joomla Component com_weblinks Sql Injection Vulnerability (info@...uritylab.ir)
Joomla Component com_xmap Sql Injection Vulnerability (info@...uritylab.ir)
Vulnerabilities in MiniManager for Project MANGOS ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:068 ] php (security@...driva.com)

March 30 (11 messages)

Re: [Full-disclosure] Medium security hole in Varnish reverse proxy (Tim Brown <timb@...-dimension.org.uk>)
[security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS) (security-alert@...com)
[USN-919-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (X… (security-alert@...com)
[security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthor… (security-alert@...com)
OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities (michael.mueller@...egralis.com)
Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting (Secunia Research <remove-vuln@...unia.com>)
VMSA-2010-0005 VMware products address vulnerabilities in WebAccess (VMware Security Team <security@...are.com>)
[security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS)… (security-alert@...com)
iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability (rajat swarup <rajats@...il.com>)

March 31 (13 messages)

Trustwave's SpiderLabs Security Advisory TWSL2010-002 (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Elevation of Privilege Vulnerability in iTunes for Windows (jason@...software.com)
[SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability (Jan Lehnardt <jan@...che.org>)
OpenDcHub 0.8.1 Remote Code Execution Exploit (Pierre Noguès <pierre@...ahax.com>)
Multiple XSS vulnerabilities in OSSIM 2.2.1 (nicolas.grandjean@...ix.fr)
[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[Suspected Spam]Vulnerabilities in NoCMS ("MustLive" <mustlive@...security.com.ua>)
iDefense Security Advisory 03.30.10: Oracle Java Runtime Environment Image FIle Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
BitComet <= 1.19 Remote DOS Exploit (Pierre Noguès <pierre@...ahax.com>)
[SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability (Jan Lehnardt <jan@...che.org>)

267 messages

Powered by blists - more mailing lists