bugtraq mailing list - 2010/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2010/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 6	⁴ 11	⁵ 8	⁶ 13	⁷ 10	⁸	⁹
¹⁰ 11	¹¹ 13	¹² 37	¹³ 13	¹⁴ 3	¹⁵ 1	¹⁶ 2
¹⁷ 11	¹⁸ 17	¹⁹ 9	²⁰ 13	²¹ 20	²² 1	²³
²⁴	²⁵ 33	²⁶ 23	²⁷ 10	²⁸ 19	²⁹	³⁰
³¹ 12

Messages by day:

May 3 (6 messages)

A vulnerability in Kaspersky Antivirus (daniel lopez <danielxdad@...il.com>)
Cross-Site Scripting vulnerability in Mango ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities (Sebastien Delafond <seb@...ian.org>)
Puntal (index.php) Remote File Inclusion Vulnerabilities (eidelweiss@...erservices.com)
[ MDVSA-2010:089 ] gnutls (security@...driva.com)
RE: Puntal (index.php) Remote File Inclusion Vulnerabilities ("Tom Walsh - lists" <mailinglist@...resshosting.net>)

May 4 (11 messages)

Re: RE: Puntal (index.php) Remote File Inclusion Vulnerabilities (donald00@...e.com)
[SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery (Raphael Geissert <geissert@...ian.org>)
XSRF (CSRF) in eliteCMS (advisory@...ridge.ch)
XSRF (CSRF) in Zikula Application Framework (advisory@...ridge.ch)
XSS in eliteCMS (advisory@...ridge.ch)
XSS in ecoCMS (advisory@...ridge.ch)
XSS in Acuity CMS (advisory@...ridge.ch)
[ MDVSA-2010:090 ] samba (security@...driva.com)
Re: Puntal (index.php) Remote File Inclusion Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)
[CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow (Core Security Technologies Advisories Team <advisories@...esecurity.com>)
REC0N 2010 (MONTREAL) CFP Reminder & Preview (David Mirza Ahmad <dma@...on.cx>)

May 5 (8 messages)

[ MDVSA-2010:091 ] openoffice.org (security@...driva.com)
Vulnerabilities in t3m_cumulus_tagcloud for TYPO3 ("MustLive" <mustlive@...security.com.ua>)
[security bulletin] HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (eidelweiss@...erservices.com)
[security bulletin] HPSBMA02400 SSRT080144 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
SmartCMS v.2 SQL injection vulnerability (Maciej Gojny <vuln@...ko-security.com>)
[security bulletin] HPSBMA02483 SSRT090257 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
[CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities (Core Security Technologies Advisories <advisories@...esecurity.com>)

May 6 (13 messages)

KHOBE - 8.0 earthquake for Windows desktop security software ("www.matousec.com - Research" <research@...ousec.com>)
[USN-936-1] dvipng vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167) (ma+bt@...e-technik.uni-dortmund.de)
[USN-937-1] TeX Live vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
PCRE compile workspace overflow (Michael Santos <michael.santos@...il.com>)
[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution (Luciano Bello <luciano@...ian.org>)
BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability (lilf <lilf@...soft.com>)
VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability (VMware Security team <security@...are.com>)
[security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (security-alert@...com)
Re: Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (Frank Habermann <lordlamer@...dlamer.de>)
[USN-919-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
New web malwares attacking big hosting providers (angelo@...iello.org)

May 7 (10 messages)

Vulnerability with Cisco ACE. A2 3.0 (probably all version) (Alexis Tremblay <tralexhan@...il.com>)
[ MDVSA-2010:092 ] cacti (security@...driva.com)
Re: KHOBE - 8.0 earthquake for Windows desktop security software (noloader@...il.com)
Re: New web malwares attacking big hosting providers (Davide Canali <davide@...idecanali.com>)
XSS vulnerability in Jaws (advisory@...ridge.ch)
[Wintercore Research] Consona Products - Multiple vulnerabilities (vulns@...tercore.com)
REZERVI (root) Remote Command Execution Vulnerability (eidelweiss@...erservices.com)
pmwiki: persistent cross site scripting (XSS), CVE-2010-1481 (Hanno Böck <hanno@...eck.de>)
CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482 (Hanno Böck <hanno@...eck.de>)
Injection of ECShop apps. (lis cker <liscker@...mail.com>)

May 10 (11 messages)

rPSA-2010-0034-1 ntp ntp-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0036-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0037-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2010:093 ] mysql (security@...driva.com)
Vulnerabilities in Sebo - webstore ("MustLive" <mustlive@...security.com.ua>)
XSS vulnerability in Advanced Poll (advisory@...ridge.ch)
SA00001-2010 (Zakar Miklós <zakar.miklos@...cellar.hu>)
Family Connections 2.2.3 Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Turnkey Innovations SQL Injection Vulnerability (md.r00t.defacer@...il.com)
Month of PHP Security - Summary - 1st May - 10th May (Stefan Esser <stefan.esser@...tioneins.de>)
XSS vulnerability in EasyPublish CMS (advisory@...ridge.ch)

May 11 (13 messages)

[security bulletin] HPSBMA02528 SSRT100106 rev.1 - HP Performance Center Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (security-alert@...com)
[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
Re: [Full-disclosure] Month of PHP Security - Summary - 1st May - 10th May (Eren Türkay <eren@...dus.org.tr>)
Re: Vulnerabilities in Sebo - webstore ("MustLive" <mustlive@...security.com.ua>)
XSS in Saurus CMS (advisory@...ridge.ch)
Re: Vulnerabilities in Sebo - webstore (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability (eidelweiss@...erservices.com)
[ MDVSA-2010:090-1 ] samba (security@...driva.com)
{PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
XSS in DynamiXgate Affiliate Store Builder (advisory@...ridge.ch)
Re: Vulnerabilities in Sebo - webstore (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
[security bulletin] HPSBMA02527 SSRT010098 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)

May 12 (37 messages)

[SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Multiple memory corruption vulnerabilities in Ghostscript (Dan Rosenberg <dan.j.rosenberg@...il.com>)
[CORE-2010-0405] Adobe Director Invalid Read (Core Security Technologies Advisories Team <advisories@...esecurity.com>)
Vulnerability in widget Cumulus for BlogEngine.NET ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.c…)
CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ] (ekoparty Security Conference <no-reply@...party.com.ar>)
ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Palo Alto Network Vulnerability - Cross-Site Scripting (XSS) (jeromie@...secinc.com)
ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:094 ] tetex (security@...driva.com)
[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite (Code Audit Labs <vulnhunt@...il.com>)
PolyPager 1.0rc10 (fckeditor) File Upload Security Issue (eidelweiss@...erservices.com)
iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283) ("VUPEN Security Research" <advisories@...en.com>)
[security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBMA02520 SSRT100071 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Unauthorized Acc… (security-alert@...com)
Secunia Research: TomatoCMS Script Insertion Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: TomatoCMS "q" SQL Injection Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

May 13 (13 messages)

VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280) ("VUPEN Security Research" <advisories@...en.com>)
[ MDVSA-2010:095 ] libxext (security@...driva.com)
Secunia Research: KDE KGet Insecure File Operation Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access (security-alert@...com)
Secunia Research: Free Download Manager metalink "name" Directory Traversal (Secunia Research <remove-vuln@...unia.com>)
[USN-938-1] KDENetwork vulnerability (Jamie Strandboge <jamie@...onical.com>)
Joomla Component advertising (com_aardvertiser) File Inclusion Vulnerability (eidelweiss@...erservices.com)
XSS vulnerability in NPDS (advisory@...ridge.ch)
Blind SQL injection vulnerability in NPDS REvolution (advisory@...ridge.ch)
LinksAutomation Multiple Remote Vulnerabilities (md.r00t.defacer@...il.com)

May 14 (3 messages)

Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Re: [CORE-2010-0405] Adobe Director Invalid Read (Core Security Technologies Advisories <advisories@...esecurity.com>)
CfP: GameSec 2010 - Deadline extended to 31 May 2010 (Albert Levi <levi@...anciuniv.edu>)

May 15 (1 message)

Mathematica on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)

May 16 (2 messages)

Vulnerability in tagcloud for Kasseler CMS ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)

May 17 (11 messages)

phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) ("VUPEN Web Security" <advisories@...en.com>)
phpvidz Administrative Password Disclosure (mike@...ewat.ch)
Vulnerability in 3D user cloud for Joomla ("MustLive" <mustlive@...security.com.ua>)
Joomla component SimpleDownload Local File Inclusion (jerzy.patraszewski@...il.com)
[oCERT-2010-001] multiple http client unexpected download filename vulnerability (Daniele Bianco <danbia@...rt.org>)
CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface (s2-security <s2-security@...are.com>)
[ MDVSA-2010:096 ] tetex (security@...driva.com)
[SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal (Thijs Kinkhorst <thijs@...ian.org>)
XSS, SQL injection vulnerability in I-Vision CMS (Maciej Gojny <vuln@...ko-security.com>)
DEF CON 18 CFP closing in two weeks ("The Dark Tangent" <dtangent@...con.org>)
Call for Papers: EC2ND 2010 (Konrad Rieck <konrad.rieck@...berlin.de>)

May 18 (17 messages)

[SECURITY] [DSA 2038-2] New pidgin packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Re: Vulnerability in 3D user cloud for Joomla ("MustLive" <mustlive@...security.com.ua>)
[security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Informat… (security-alert@...com)
[security bulletin] HPSBGN02511 SSRT100022 rev.3 - Certain HP Small Form Factor, Microtower and Workstations PC's with Broadcom Integrated… (security-alert@...com)
XSS vulnerability in JComments, Joomla (advisory@...ridge.ch)
[ MDVSA-2010:097 ] pidgin (security@...driva.com)
XSS vulnerability in NPDS REvolution (advisory@...ridge.ch)
[security bulletin] HPSBOV02497 SSRT090245 rev.3 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial … (security-alert@...com)
Stored XSS vulnerability in NPDS REvolution (advisory@...ridge.ch)
DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("MustLive" <mustlive@...security.com.ua>)
Security Awareness for kids (Pete Herzog <lists@...com.org>)
Re: XSS vulnerability in NPDS (developpeur@...s.org)
Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities (geinblues@...il.com)
[security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial … (security-alert@...com)
MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref (Tom Yu <tlyu@....edu>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Susan Bradley <sbradcpa@...bell.net>)
[ MDVSA-2010:099 ] wireshark (security@...driva.com)

May 19 (9 messages)

[ MDVSA-2010:098 ] kdenetwork4 (security@...driva.com)
[security bulletin] HPSBUX02523 SSRT100036 rev.1 - HP-UX Running ONCPlus, Remote Denial of Service (DoS), Increase in Privilege (security-alert@...com)
The New ISO Hacking Standard (Pete Herzog <lists@...com.org>)
Metasploit Framework 3.4.0 Released (HD Moore <hdm@...italoffense.net>)
Caucho Technology Resin digest.php Cross Site Scripting Vulnerability (xuanmumu@...il.com)
[Suspected Spam][USN-939-1] X.org vulnerabilities (Kees Cook <kees@...ntu.com>)
[ MDVSA-2010:100 ] krb5 (security@...driva.com)
Secunia Research: Orbit Downloader metalink "name" Directory Traversal (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:101 ] mysql (security@...driva.com)

May 20 (13 messages)

Linux Mint 8 mintUpdate Insecure Temporary File Creation (L4teral <l4teral@...il.com>)
[Suspected Spam][USN-940-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
[Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability (unknown user <mac68k@...il.com>)
Smart Douran CMS Remote File Download (info@...uritylab.ir)
[ MDVSA-2010:102 ] ghostscript (security@...driva.com)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("MustLive" <mustlive@...security.com.ua>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Susan Bradley <sbradcpa@...bell.net>)
XSS bug in US Robotics firmware USR5463-v0_06.bin (sh4v@...-datagrams.net)
[HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
[USN-941-1] MoinMoin vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
RE: STP mitm attack idea (Guillermo Marro Bruno <gmmarro@...wgate.net>)
[ MDVSA-2010:082-1 ] clamav (security@...driva.com)
Re: The New ISO Hacking Standard (Simon Kilvington <s.kilvington@...s.qinetiq.com>)

May 21 (20 messages)

Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center) (research <research@...checkup.com>)
Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines ("MustLive" <mustlive@...security.com.ua>)
XSRF (CSRF) in ocPortal (advisory@...ridge.ch)
XSS vulnerability in LiSK CMS (advisory@...ridge.ch)
XSS vulnerability in gpEasy CMS (advisory@...ridge.ch)
XSS vulnerability in LiSK CMS (advisory@...ridge.ch)
Re: The New ISO Hacking Standard (Pete Herzog <lists@...com.org>)
[ MDVSA-2010:104 ] dovecot (security@...driva.com)
Cacti Multiple Parameter Cross Site Scripting Vulnerabilities ("VUPEN Web Security" <advisories@...en.com>)
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities ("VUPEN Web Security" <advisories@...en.com>)
Mastering Trust in Security Assessments (Pete Herzog <lists@...com.org>)
[USN-942-1] PostgreSQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Month of PHP Security - Summary - 11st May - 21th (Stefan Esser <stefan.esser@...tioneins.de>)
Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (praveen_recker@...y.com)
OSSTMM 3 based Home Security Vacation Guide v.2! (Pete Herzog <lists@...com.org>)
PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console (research <research@...checkup.com>)
[ MDVSA-2010:103 ] postgresql (security@...driva.com)
HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039 (Rodrigo Branco <rbranco@...ckpoint.com>)
SQL injection vulnerability in LiSK CMS (advisory@...ridge.ch)
XSRF (CSRF) in NPDS REvolution (advisory@...ridge.ch)

May 22 (1 message)

SQL injection vulnerability in LiSK CMS (advisory@...ridge.ch)

May 25 (33 messages)

[ MDVSA-2010:105 ] openoffice.org (security@...driva.com)
Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Jabłoński, Paweł <PJablonski@...x.pl>)
CompleteFTP Server v 4.x "PORT" command Remote DOS exploit (eidelweiss@...erservices.com)
Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability (security curmudgeon <jericho@...rition.org>)
[SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg… (praveen_recker@...y.com)
[ MDVSA-2010:106 ] aria2 (security@...driva.com)
[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
[Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis ("Bkis" <minhbq@...v.com.vn>)
Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities (Dan Rosenberg <dan.j.rosenberg@...il.com>)
[SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH) (michael.messner@...egralis.com)
Sun Solaris 10 libc/*convert (*cvt) buffer overflow (cxib@...urityreason.com)
Hustoj is HUST ACM OnlineJudge "fckeditor" file upload security issue (eidelweiss@...erservices.com)
Ghostscript 8.64 executes random code at startup (ne01026@...gny.2a.pl)
Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (cxib@...urityreason.com)
Vulnerabilities in DS-Syndicate for Joomla ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis ("Bkis" <minhbq@...v.com.vn>)
Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (yicong2010@...oo.com)
JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability (eidelweiss@...erservices.com)
New vulnerabilities in plugin DS-Syndicate for Joomla ("MustLive" <mustlive@...security.com.ua>)
rPSA-2010-0039-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (info@...uritylab.ir)
London DEFCON May meet - DC4420 - Wed 26th May 2010 (Major Malfunction <majormal@...ate-radio.org>)
Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (yicong2010@...oo.com)
Arbitrary UNC file read in IE 8 (Tim Starling <tstarling@...imedia.org>)
SQL injection vulnerability in Zabbix <= 1.8.1 (David Guimaraes <skysbsb@...il.com>)
OSSTMM 3 STAR Released! (Pete Herzog <lists@...com.org>)

May 26 (23 messages)

Sun Solaris 10 ftpd Cross-site request forgery (cxib@...urityreason.com)
XSS vulnerability in razorCMS (advisory@...ridge.ch)
XSS vulnerability in GetSimple CMS (advisory@...ridge.ch)
XSS vulnerability in RuubikCMS (advisory@...ridge.ch)
SQL injection vulnerability in 360 Web Manager (advisory@...ridge.ch)
XSS vulnerability in 360 Web Manager (advisory@...ridge.ch)
SQL injection vulnerability in 360 Web Manager (advisory@...ridge.ch)
Flock web browser v2.5.6 (Remote Memory Corrupt) Crash Exploit (g1xsystem@...dowslive.com)
[ MDVSA-2010:107 ] mysql (security@...driva.com)
[Suspected Spam][USN-944-1] GNU C Library vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Ghostscript 8.64 executes random code at startup (paul.szabo@...ney.edu.au)
Re: Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Casper.Dik@....COM)
CfP: GameSec 2010 - 5 days left to the deadline (Albert Levi <levi@...anciuniv.edu>)
Re: Ghostscript 8.64 executes random code at startup (Krzysztof Żelechowski <giecrilj@...gny.2a.pl>)
Cyberoam SSL VPN Client - Plain-text Storage of Username and Password ("Wasim Halani" <wasim.halani@...consulting.com>)
Re: Ghostscript 8.64 executes random code at startup (paul.szabo@...ney.edu.au)
ESA-2010-007: EMC Avamar Denial Of Service Vulnerability (<Security_Alert@....com>)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
[security bulletin] HPSBGN02315 SSRT071487 rev.1 - HP TestDirector for Quality Center running on AIX, Linux and Solaris, Remote Unauthoriz… (security-alert@...com)
[security bulletin] HPSBMA02442 SSRT090108 rev.1 - HP Business Availability Center Running Apache, Remote Cross Site Scripting (XSS), Cros… (security-alert@...com)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

May 27 (10 messages)

Static analysis tool exposition (SATE) 2010 Call for participation (Vadim Okun <vadim.okun@...t.gov>)
Re: SQL injection vulnerability in 360 Web Manager (Packet Storm <packet@...ketstormsecurity.org>)
Re: Ghostscript 8.64 executes random code at startup (paul.szabo@...ney.edu.au)
FreeBSD Security Advisory FreeBSD-SA-10:04.jail (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-10:05.opie (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-10:06.nfsclient (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Cross Site URL Hijacking by using Error Object in Mozilla Firefox (subs@...uard.info)
EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30) (Dragos Ruiu <dr@....net>)
[ MDVSA-2010:109 ] gtk+2.0 (security@...driva.com)
[ MDVSA-2010:110 ] clamav (security@...driva.com)

May 28 (19 messages)

Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("MustLive" <mustlive@...security.com.ua>)
clearsite Remote File Include Vulnerability (admin@...ly.com)
[Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("MustLive" <mustlive@...security.com.ua>)
[USN-945-1] ClamAV vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates (VMware Security team <security@...are.com>)
SQL injection in OSCommerce Add-On Visitor Web Stats (Christopher Schramm <bugtraq@...kaweb.org>)
Re: Ghostscript 8.64 executes random code at startup (paul.szabo@...ney.edu.au)
Administrivia: Real domain names in PoC/exploit examples (dm@...urityfocus.com)
CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities ("Patroklos Argyroudis" <argp@...sus-labs.com>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("John Smith" <at-x@...e.com>)
Re: Administrivia: Real domain names in PoC/exploit examples (Nate Eldredge <nate@...tsmathematics.com>)
Re: Administrivia: Real domain names in PoC/exploit examples (dm@...urityfocus.com)
Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
Re: [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Susan Bradley <sbradcpa@...bell.net>)
SQL injection vulnerability in ImpressPages CMS (advisory@...ridge.ch)
Re: Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("John Smith" <at-x@...e.com>)
SQL injection vulnerability in ImpressPages CMS (advisory@...ridge.ch)
SQL injection vulnerability in ImpressPages CMS (advisory@...ridge.ch)
Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability (g1xsystem@...dowslive.com)

May 31 (12 messages)

Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>)
IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Cristofaro Mune <pulsoid@...silence.org>)
Nginx 0.8.35 Space Character Remote Source Disclosure (info@...uritylab.ir)
[security bulletin] HPSBUX02523 SSRT100036 rev.2 - HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege (security-alert@...com)
[Suspected Spam]Vulnerability in ArtDesign CMS ("MustLive" <mustlive@...security.com.ua>)
DM Database Server Memory Corruption Vulnerability (wsn1983@...il.com)
GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability (g1xsystem@...dowslive.com)
Re: Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("John Smith" <at-x@...e.com>)
Re: Ghostscript 8.64 executes random code at startup (paul.szabo@...ney.edu.au)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("MustLive" <mustlive@...security.com.ua>)
GR Board v1.8.6. (theme) Local File Inclusion Vulnerability (g1xsystem@...dowslive.com)
Re: Nginx 0.8.35 Space Character Remote Source Disclosure (abc12345@...hmail.com)

296 messages

Powered by blists - more mailing lists