bugtraq mailing list - 2010/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2010/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 13	²	³	⁴
⁵ 34	⁶ 15	⁷ 4	⁸ 6	⁹ 14	¹⁰ 1	¹¹
¹² 2	¹³ 14	¹⁴ 22	¹⁵ 13	¹⁶ 13	¹⁷ 1	¹⁸
¹⁹ 18	²⁰ 14	²¹ 17	²² 12	²³ 8	²⁴	²⁵
²⁶ 14	²⁷ 8	²⁸ 11	²⁹ 14	³⁰ 7

Messages by day:

April 1 (13 messages)

[USN-922-1] libnss-db vulnerability (Kees Cook <kees@...ntu.com>)
VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
CSRF Vulnerability in OSSIM 2.2.1 (nicolas.grandjean@...ix.fr)
DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability (eidelweiss@...erservices.com)
VUPEN Security Research - Apple Quicktime FLC Encoded Movie Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Zabbix <= 1.8.1 SQL Injection (Dawid Golunski <golunski@...t.eu>)
VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Juniper SRX Critical Denial of Service Vulnerability ("J. Oquendo" <sil@...iltrated.net>)
VUPEN Security Research - Apple Quicktime PICT Handling Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VMSA-2010-0006 ESX Service Console updates for samba and acpid (VMware Security Team <security@...are.com>)

April 5 (34 messages)

Vulnerability Centreon IT & Network Monitoring v2.1.5 (Mehdi Mahdjoub - Sysdream IT Security Services <m.mahdjoub@...dream.com>)
[SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBMA02490 SSRT090222 rev.2 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (X… (security-alert@...com)
[SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX) (eidelweiss@...erservices.com)
ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Vulnerabilities in HoloCMS ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability (eidelweiss@...erservices.com)
ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

April 6 (15 messages)

ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Vulnerabilities in TAK cms ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Hack.lu 2010 CfP (info <info@...k.lu>)
Miranda TLS MitM with XMPP/Jabber protocol (Jan Schejbal <jan.mailinglisten@...glemail.com>)
CA20100406-01: Security Notice for CA XOsoft ("Kotas, Kevin J" <Kevin.Kotas@...com>)
ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases (Tom Yu <tlyu@....edu>)
ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2030-1] New mahara packages fix sql injection (Nico Golde <nion@...ian.org>)
ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

April 7 (4 messages)

CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[ MDVSA-2010:069 ] nss (security@...driva.com)
[USN-923-1] OpenJDK vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-924-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)

April 8 (6 messages)

Vulnerabilities in Dunia Soccer ("MustLive" <mustlive@...security.com.ua>)
TCPDF Library Remote Code Execution Vulnerability (Matthias -apoc- Hecker <apoc@...serv.org>)
[HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)
DeepSec 2010 - Call for Papers and Experts (DeepSec Conference <deepsec@...psec.net>)
Vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
[USN-925-1] MoinMoin vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

April 9 (14 messages)

Re: Vulnerabilities in Dunia Soccer (Susan Bradley <sbradcpa@...bell.net>)
Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability (Secunia Research <remove-vuln@...unia.com>)
WinSoftMagic Photo Editor .PNG File Buffer Overflow (eidelweiss@...erservices.com)
[USN-926-1] ClamAV vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (VMware Security team <security@...are.com>)
Secunia Research: Pulse CMS Cross-Site Request Forgery (Secunia Research <remove-vuln@...unia.com>)
[USN-624-2] Erlang vulnerability (Jamie Strandboge <jamie@...onical.com>)
ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
JAVA web start arbitrary command-line injection - "-XXaltjvm" arbitrary dll loading (0day) (Reversemode <advisories@...ersemode.com>)
Vulnerabilities in phpCOIN ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerabilities in Dunia Soccer ("MustLive" <mustlive@...security.com.ua>)
Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: Vulnerabilities in Dunia Soccer (Susan Bradley <sbradcpa@...bell.net>)

April 10 (1 message)

VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (VMware Security team <security@...are.com>)

April 12 (2 messages)

Re: Vulnerabilities in phpCOIN (Susan Bradley <sbradcpa@...bell.net>)
[USN-927-1] NSS vulnerability (Jamie Strandboge <jamie@...onical.com>)

April 13 (14 messages)

VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
AneCMS Multiple Vulnerabilities (admin@...report.ir)
[USN-927-3] Thunderbird regression (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
[USN-927-2] NSS regression (Jamie Strandboge <jamie@...onical.com>)
Vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
CVE-2009-4510: TANDBERG VCS Static SSH Host Keys (VSR Advisories <advisories@...curity.com>)
iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 2031-1] New krb5 packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval (VSR Advisories <advisories@...curity.com>)
CVE-2009-4509: TANDBERG VCS Authentication Bypass ("Timothy D. Morgan" <tmorgan@...curity.com>)
[USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[security bulletin] HPSBPI02398 SSRT080166 rev.5 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remot… (security-alert@...com)

April 14 (22 messages)

ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2) ("ACROS Lists" <lists@...os.si>)
Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems ("MustLive" <mustlive@...security.com.ua>)
Vana CMS Remote File Download (info@...uritylab.ir)
Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1) ("ACROS Lists" <lists@...os.si>)
Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability (Clear Skies Security <smiles@...arskies.net>)
Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit (dlrow1991@...il.com)
ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive (fizix610@...mail.com)
ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities (wsn1983@...il.com)
Secunia Research: Visualization Library DAT File Parsing Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:070 ] firefox (security@...driva.com)
ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:072 ] cups (security@...driva.com)
[ MDVSA-2010:071 ] krb5 (security@...driva.com)
[USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability (Fabien PERIGAUD <fperigaud@...si.com>)
60cycleCMS (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability (eidelweiss@...erservices.com)

April 15 (13 messages)

ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
[security bulletin] HPSBUX02517 SSRT100058 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Mo… (security-alert@...com)
Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
[ MDVSA-2010:073-1 ] cups (security@...driva.com)
[ MDVSA-2010:073 ] cups (security@...driva.com)
VUPEN Security Research - Adobe Acrobat and Reader PNG Data Buffer Overflow Vulnerability ("VUPEN Web Research" <advisories@...en.com>)
Ziggurat CMS Multiple Vulnerabilities (info@...uritylab.ir)
[DSecRG-09-053] VMware Remoute Console - format string (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Vulnerability in CB Captcha for Joomla and Mambo ("MustLive" <mustlive@...security.com.ua>)
[CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities (Jacopo Cappellato <jacopoc@...che.org>)
VUPEN Security Research - Adobe Acrobat and Reader JPEG Data Buffer Overflow Vulnerability ("VUPEN Web Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability ("VUPEN Web Research" <advisories@...en.com>)

April 16 (13 messages)

ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability (eidelweiss@...erservices.com)
VUPEN Security Research - Adobe Acrobat and Reader BMP Data Buffer Overflow Vulnerability ("VUPEN Web Research" <advisories@...en.com>)
ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities ("VUPEN Web Research" <advisories@...en.com>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (nant@...mlapolis.com)
[USN-929-1] irssi vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-928-1] Sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service (Sébastien Delafond <seb@...ian.org>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (Susan Bradley <sbradcpa@...bell.net>)
Hackproofing Oracle Financials 11i & R12 (Joxean Koret <joxeankoret@...oo.es>)
[USN-890-6] CMake vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:075 ] openoffice.org (security@...driva.com)

April 17 (1 message)

[ MDVSA-2010:074 ] kdebase (security@...driva.com)

April 19 (18 messages)

Re: Vulnerability in CB Captcha for Joomla and Mambo (Matteo Valenza <ilmetu@...il.com>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (Susan Bradley <sbradcpa@...bell.net>)
[ MDVSA-2010:080 ] brltty (security@...driva.com)
[SECURITY] [DSA 2036-1] New jasper packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2010:076 ] openssl (security@...driva.com)
WinMount MOU File Handling Overflow Vulnerability (lilf <lilf@...soft.com>)
[SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:081 ] apache-mod_auth_shadow (security@...driva.com)
Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[Suspected Spam]New vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues (Stefan Fritsch <sf@...ian.org>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (James Martin <eaglejfm@...il.com>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (nant@...mlapolis.com)
[ MDVSA-2010:078 ] sudo (security@...driva.com)
CompleteFTP v3.3.0 - Remote Memory Consumption DoS ("Mehdi Mahdjoub [SYSDREAM]" <m.mahdjoub@...dream.com>)
iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

April 20 (14 messages)

[ MDVSA-2010:077 ] nss_db (security@...driva.com)
iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDVSA-2010:079 ] irssi (security@...driva.com)
[SECURITY] [DSA 2038-1] New pidgin packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
sudoedit local privilege escalation through PATH manipulation (Agazzini Maurizio <maurizio.agazzini@...iaservice.net>)
[ MDVSA-2010:082 ] clamav (security@...driva.com)
Re: Vulnerability in CB Captcha for Joomla and Mambo ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:076-1 ] openssl (security@...driva.com)
CSRF in e107 (advisory@...ridge.ch)
MITKRB5-SA-2010-004 [CVE-2010-1320] double free in KDC (Tom Yu <tlyu@....edu>)
Vbulletin - Two-Step External Link XSS (edgard.chammas@...ond-security.org)
Re: sudoedit local privilege escalation through PATH manipulation (Ansgar Wiechers <bugtraq@...netcobalt.net>)
[USN-931-1] FFmpeg vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2010:083 ] emacs (security@...driva.com)

April 21 (17 messages)

IP address spoofing in e107 (advisory@...ridge.ch)
[USN-932-1] KDM vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-929-2] irssi regression (Jamie Strandboge <jamie@...onical.com>)
Re: [Suspected Spam]New vulnerabilities in CMS SiteLogic (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[ MDVSA-2010:070-1 ] firefox (security@...driva.com)
Re: Re: Vulnerability in CB Captcha for Joomla and Mambo (none@...il.com)
[security bulletin] HPSBUX02517 SSRT100058 rev.2 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Mo… (security-alert@...com)
[security bulletin] HPSBUX02518 SSRT100051 rev.1 - HP-UX, Local Denial of Service (DoS) (security-alert@...com)
[#OUF-273299]: AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities (sinner <submit@...ensive-security.com>)
[security bulletin] HPSBMA02491 SSRT100060 rev.1 - HP Operations Manager for Windows, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access (security-alert@...com)
CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Call for participation -- Eth0:2010 Summer (Mark Janssen <program@...-0.nl>)
Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error (Secunia Research <remove-vuln@...unia.com>)
Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authe… (Cisco Systems Product Security Incident…)
London DEFCON April meet - DC4420 - Wed 28th April 2010 (Major Malfunction <majormal@...ate-radio.org>)
ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

April 22 (12 messages)

[SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability (Mark Thomas <markt@...che.org>)
[security bulletin] HPSBMA02494 SSRT090168 rev.1 - HP Virtual Machine Manager (VMM) for Windows, Remote Unauthorized Access, Privilege Ele… (security-alert@...com)
Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting … (Roberto Suggi Liverani <roberto.suggi@s…)
CfP: GameSec 2010 - Deadline is 3 weeks away! (Albert Levi <levi@...anciuniv.edu>)
Re: sudoedit local privilege escalation through PATH manipulation (Agazzini Maurizio <inode@...iaservice.net>)
Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability (th_decoder@....com)
Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability (th_decoder@....com)
[security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting … (security-alert@...com)
[security bulletin] HPSBUX02519 SSRT100004 rev.1 - HP-UX Running BIND, Remote Compromise of NXDOMAIN Responses (security-alert@...com)
Apache ActiveMQ is prone to source code disclosure vulnerability. (research@...pod.com)
Vulnerabilities in NovaBoard ("MustLive" <mustlive@...security.com.ua>)
XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp (michael.mueller@...egralis.com)

April 23 (8 messages)

[HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Vulnerabilities in NovaBoard (terry white <twhite@...ota.com>)
In-portal 5.0.3 Remote Arbitrary File Upload Exploit (eidelweiss@...erservices.com)
IWD Group SQL Injection Vulnerabilities (md.r00t.defacer@...il.com)
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Hafez Kamal <aphesz@...kinthebox.org>)
[ MDVSA-2010:071 ] mozilla-thunderbird (security@...driva.com)
ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Vulnerability in Referer for DataLife Engine ("MustLive" <mustlive@...security.com.ua>)

April 26 (14 messages)

[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising (Thijs Kinkhorst <thijs@...ian.org>)
[USN-931-2] FFmpeg regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
hashdays 2010 - Call for Papers (#days CFP) (hashdays CFP <cfp@...con-switzerland.org>)
t2'10: Call for Papers 2010 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)
phpegasus 'config.php' Arbitrary File Upload Vulnerability (eidelweiss@...erservices.com)
SmodCMS 'config.php' Arbitrary File Upload Vulnerability (eidelweiss@...erservices.com)
[security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Ac… ("Morris, John R. (SSRT)" <john.morris@h…)
NovaStor NovaNet <= 13.0 issues (mu-b <mu-b@...it-labs.org>)
Re: New vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses) (wborskey@...il.com)
A XSS in User_ChkLogin.asp of PowerEasy 2006 (lis cker <liscker@...mail.com>)
Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses) (r.st@...cast.net)
Madirish Webmail 2.01 (basedir) RFI/LFI Vulnerability (eidelweiss@...erservices.com)
Conference on Cyber Conflict: speakers selected! (k g <kgconference@...il.com>)

April 27 (8 messages)

New vulnerabilities in CMS SiteLogic (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[SECURITY] [DSA 2021-2] New spamass-milter packages fix regression (Giuseppe Iuculano <iuculano@...ian.org>)
Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses) (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses) (Dominik George <nik@...uralnet.de>)
XSS vulnerability in Zikula Application Framework (advisory@...ridge.ch)
XSS vulnerability in Zikula Application Framework (advisory@...ridge.ch)
[security bulletin] HPSBMA02488 SSRT100013 rev.2 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosur… (security-alert@...com)
[security bulletin] HPSBMA02525 SSRT100083 rev.1 - HP System Insight Manager Running on HP-UX, Linux, and Windows , Remote Cross Site Scri… (security-alert@...com)

April 28 (11 messages)

Adobe viewer plugin can be made to crash IE or FF ("Angus Mann" <angusmann@...ox.com>)
[ MDVSA-2010:084 ] java-1.6.0-openjdk (security@...driva.com)
Fun with FORTIFY_SOURCE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
STP mitm attack idea (Przemyslaw Borkowski <xperience@...eria.pl>)
Re: STP mitm attack idea (Jann Horn <jannhorn@...glemail.com>)
ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
[ MDVSA-2010:078-1 ] sudo (security@...driva.com)
[ MDVSA-2010:085 ] pidgin (security@...driva.com)
[ MDVSA-2009:332-1 ] gimp (security@...driva.com)
Re: Vulnerability in CB Captcha for Joomla and Mambo ("MustLive" <mustlive@...security.com.ua>)
XSS in Microsoft SharePoint Server 2007 (advisory@...ridge.ch)

April 29 (14 messages)

[USN-933-1] PostgreSQL vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: STP mitm attack idea (news <news@...cean.net>)
Re: STP mitm attack idea (wlet@....net)
RE: STP mitm attack idea (Stefan Laudat <Stefan.Laudat@...ianztiriac.ro>)
Re: STP mitm attack idea ("Jason T. Masker" <jason@...ker.net>)
CONFidence 2010, 25-26th May - Call For Participation (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
Apache ActiveMQ XSS Vulnerability (arun.gnyan@...il.com)
vBulletin - Insecure Custom BBCode Tags (advisories@...ern0t.net)
Re: STP mitm attack idea (Jean-Christophe Baptiste <jc@...cean.net>)
[ MDVSA-2010:087 ] poppler (security@...driva.com)
Re: STP mitm attack idea (Joel Maslak <jmaslak@...elope.net>)
Vulnerabilities in CCMS ("MustLive" <mustlive@...security.com.ua>)
Re: STP mitm attack idea (Ivan Jager <aij+@...h.org>)
[ MDVSA-2010:086 ] kdegraphics (security@...driva.com)

April 30 (7 messages)

Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
SQL Injection in MS Access with backslash escaped input (gheibi@...il.com)
RE: STP mitm attack idea ("Williams, Dan" <dwilliam@...don.ca>)
EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17) (Dragos Ruiu <dr@....net>)
BPstyle - Graphic studio SQL Injection Vulnerabilities (md.r00t.defacer@...il.com)
[USN-934-1] Netpbm vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:088 ] kernel (security@...driva.com)

275 messages

Powered by blists - more mailing lists