bugtraq mailing list - 2010/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2010/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 14	³	⁴
⁵ 13	⁶ 9	⁷ 16	⁸ 13	⁹ 2	¹⁰	¹¹
¹² 7	¹³ 26	¹⁴	¹⁵ 50	¹⁶ 14	¹⁷	¹⁸
¹⁹ 7	²⁰ 7	²¹ 21	²² 8	²³ 10	²⁴	²⁵
²⁶ 13	²⁷ 18	²⁸ 16	²⁹ 6	³⁰ 6	³¹

Messages by day:

July 2 (14 messages)

[USN-956-1] sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
[Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability ("Bkis" <minhbq@...v.com.vn>)
DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass (ddivulnalert@...frontline.com)
[SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: SAP's web module OLK SQL Injection vulnerability (yuval.lerner@...manage.com.pa)
Vulnerabilities in WP-UserOnline for WordPress ("MustLive" <mustlive@...security.com.ua>)
Re: [Full-disclosure] Remote Command Execution in dotDefender Site Management (Henri Salo <henri@...v.fi>)
REVISION: iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
iScripts ReserveLogic 1.0 SQL Injection Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Re: Cherokee Web Server 0.5.3 Multiple Vulnerabilities (security curmudgeon <jericho@...rition.org>)
VSR Advisory: Multiple Cisco CSS / ACE Client Certificate and HTTP Header Manipulation Vulnerabilities (VSR Advisories <advisories@...curity.com>)
IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation” (bugreport@...uard.info)
Zoph Multiple Parameter Cross Site Scripting Vulnerabilities ("VUPEN Web Security" <advisories@...en.com>)

July 5 (13 messages)

[ MDVSA-2010:127 ] imlib2 (security@...driva.com)
[SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities (Raphael Geissert <geissert@...ian.org>)
IrcDelphi DCA-00010 Vulnerability Report (Ewerson GuimarÃ£es (Crash) - Dclabs <crash@...abs.com.br>)
iScripts SocialWare 2.2.x Multiple Remote Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Canteen Joomla Component 1.0 Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (noreply@...us.com)
Security Advisories from TEHTRI-Security at HITB Europe (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
[Suspected Spam]File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("MustLive" <mustlive@...security.com.ua>)
Hiding Backdoors in plain sight (Mailing lists at Core Security Technologies <lists@...esecurity.com>)
Secunia Research: Joomla BookLibrary From Same Author Module "id" SQL Injection (Secunia Research <remove-vuln@...unia.com>)
Editran editcp V4.1 R7 - Remote buffer overflow (Pedro Andujar <pandujar@...fault.es>)
[HITB-Announce] HITB Magazine Issue 003 + HITBSecConf2010 - Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)

July 6 (9 messages)

Re: SQL injection vulnerability in WebDB (security curmudgeon <jericho@...rition.org>)
NTSOFT BBS E-Market Professional = XSS / Remote Execution Code (ivan.sanchez@...lcode.com.ar)
VLC Player M3U file ftp:// URI Handler Remote Stack Buffer Overflow (praveen_recker@...y.com)
Re: SQL injection vulnerability in TomatoCMS (security curmudgeon <jericho@...rition.org>)
Re: XSS vulnerability in PortalApp (security curmudgeon <jericho@...rition.org>)
Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (P0ndera@....com)
Xlight FTPd Multiple Directory Traversal in SFTP (bill@...ensussecurity.com)
[USN-943-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
pam_captcha username harvest vulnerability (Ian Maguire <imaguire@...erb.net>)

July 7 (16 messages)

[ MDVSA-2010:128 ] lftp (security@...driva.com)
DeepSec 2010 - Call for Papers - REMINDER (DeepSec Conference <deepsec@...psec.net>)
[Full-disclosure] [USN-943-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[Full-disclosure] [USN-956-1] sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (houkouonchi@...kouonchi.jp)
[ MDVSA-2010:130 ] heimdal (security@...driva.com)
DCP-Portal Multiple XSS Vulnerabilities (Andrei Rimsa <rimsa@...e.com>)
Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability (Cisco Systems Product Security Incident…)
MODx Installation File XSS Vulnerability (Andrei Rimsa <rimsa@...e.com>)
ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
PBS Pro race condition vulnerability (BartÅ‚omiej Balcerek <Bartlomiej.Balcerek@....wroc.pl>)
RunCMS XSS Vulnerability via User Agent (Andrei Rimsa <rimsa@...e.com>)
Sandbox 2.0.3 Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[ MDVSA-2010:129 ] heimdal (security@...driva.com)
Pligg Installation File XSS Vulnerability (Andrei Rimsa <rimsa@...e.com>)
Exponent Slideshow XSS Vulnerability (Andrei Rimsa <rimsa@...e.com>)

July 8 (13 messages)

[USN-959-1] PAM vulnerability (Kees Cook <kees@...ntu.com>)
[USN-960-1] libpng vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
XSS vulnerability in CruxPA (advisory@...ridge.ch)
XSS vulnerability in CruxPA (advisory@...ridge.ch)
XSS vulnerability in CruxPA (advisory@...ridge.ch)
XSS vulnerability in CruxPA (advisory@...ridge.ch)
XSS vulnerability in CruxCMS (advisory@...ridge.ch)
XSS vulnerability in CruxCMS (advisory@...ridge.ch)
Re: RunCMS XSS Vulnerability via User Agent (rimsa@...e.com)
Re: MODx Installation File XSS Vulnerability (rimsa@...e.com)
[scip_Advisory 4143] Shemes Grabbit Malicious NZB Date Denial of Service (Marc Ruef <maru@...p.ch>)
Re: MODx Installation File XSS Vulnerability (jason@...xcms.com)
Pligg Installation File XSS Vulnerability (Andrei Rimsa <rimsa@...e.com>)

July 9 (2 messages)

Vulnerabilities in SimpNews ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability (Mark Thomas <markt@...che.org>)

July 12 (7 messages)

XSS holes dotDefender (sh4v@...-datagrams.net)
[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA-2069-1] New znc packages fix denial of service (Raphael Geissert <geissert@...ian.org>)
Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? (Richard.haf@...il.com)
Opera Crash by <canvas> Element (info@...uritylab.ir)
IE6 css set Denial of Service Vulnerability (info@...uritylab.ir)
Metasploit Framework 3.4.1 Released (egypt@...asploit.com)

July 13 (26 messages)

[ MDVSA-2010:131 ] iscsitarget (security@...driva.com)
Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? (paul.sec117@...il.com)
FreeBSD Security Advisory FreeBSD-SA-10:07.mbuf (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. (VMware Security Team <security@...are.com>)
[security bulletin] HPSBMA02547 SSRT100179 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Execution of Arb… (security-alert@...com)
[security bulletin] HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access (security-alert@...com)
[security bulletin] HPSBMA02549 SSRT090158 rev.1 - HP Insight Control Power Management for Windows, Local Unauthorized Access to Data, Den… (security-alert@...com)
[security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBMA02550 SSRT100170 rev.1 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cr… (security-alert@...com)
[security bulletin] HPSBMA02551 SSRT100165 rev.1 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBMA02553 SSRT100184 rev.1 - HP Insight Control Server Migration for Windows, Local and Remote Unauthorized Access t… (security-alert@...com)
VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities ("VUPEN Security Research" <advisories@...en.com>)
[security bulletin] HPSBMA02555 SSRT100064 rev.1 - HP Client Automation Enterprise Infrastructure (Radia) Remote Disclosure of Information (security-alert@...com)
ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerabi… (ZDI Disclosures <zdi-disclosures@...pin…)
[USN-961-1] Ghostscript vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: hashdays 2010 - Call for Papers (#days CFP) (Hashdays CFP <cfp@...con-switzerland.org>)
SQL injection vulnerability in CMSQLite (advisory@...ridge.ch)
[security bulletin] HPSBOV02539 SSRT090267 rev.1 - HP OpenVMS Auditing, Local Information Disclosure, Elevation of Privilege, Denial of Se… (security-alert@...com)
SQL injection vulnerability in CMSQLite (advisory@...ridge.ch)
XSS vulnerability in Diem (advisory@...ridge.ch)
XSS vulnerability in CMSQLite (advisory@...ridge.ch)
XSS vulnerability in Diem (advisory@...ridge.ch)
SQL injection vulnerability in CMSQLite (advisory@...ridge.ch)
XSS vulnerability in Diem (advisory@...ridge.ch)

July 15 (50 messages)

TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability (research <research@...checkup.com>)
Pwnie Awards 2010 (Alexander Sotirov <alex@...irov.net>)
[security bulletin] HPSBMA02439 SSRT080082 rev.3 - HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows, Re… (security-alert@...com)
ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[Suspected Spam]Cross-Site Scripting vulnerabilities in SimpGB ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-119: Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...ping…)
ZDI-10-120: Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
ZDI-10-121: Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-122: Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
SAPGui BI wadmxhtml.dll Tags Property Heap Corruption ("Elazar Broad" <elazar@...hmail.com>)
ZDI-10-123: Oracle Secure Backup Administration Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-124: Oracle Secure Backup Web Interface Various Post-Auth Command Injection Remote Code Execution Vulnerabilitie… (ZDI Disclosures <zdi-disclosures@...pin…)
[ MDVSA-2010:132 ] python (security@...driva.com)
cPanel XSS Vulnerability (thomas@...hosting.com)
CVE-2010-2375: WebLogic Plugin HTTP Injection via Encoded URLs (VSR Advisories <advisories@...curity.com>)
[USN-961-1] Ghostscript vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: pam_captcha username harvest vulnerability (Ian Maguire <floatingdecimal@...il.com>)
Opera Browser Address Bar Spoofing Vulnerability (info@...uritylab.ir)
[USN-962-1] VTE vulnerability (Kees Cook <kees@...ntu.com>)
[security bulletin] HPSBMA02554 SSRT100018 rev.2 - HP Insight Control for Linux, Remote Execution of Arbitrary Code, Remote Denial of Serv… (security-alert@...com)
XSS vulnerability in DSite CMS (advisory@...ridge.ch)
XSS vulnerability in Gekko Web Builder (advisory@...ridge.ch)
Outlook PR_ATTACH_METHOD file execution vulnerability (Akita Software Security <lists@...tasecurity.nl>)
XSS vulnerability in Pligg search module (advisory@...ridge.ch)
[SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
XSS vulnerability in Taggon CMS (advisory@...ridge.ch)
XSS vulnerability in WebPress (advisory@...ridge.ch)
Re: pam_captcha username harvest vulnerability (Jordan Sissel <jls@...icomplete.com>)
XSS vulnerability in WebPress (advisory@...ridge.ch)
[SECURITY] [DSA 2071-1] New libmikmod packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
XSS vulnerability in phpwcms (advisory@...ridge.ch)
Secunia Research: GIGABYTE Dldrv2 ActiveX Control Unsafe Methods (Secunia Research <remove-vuln@...unia.com>)
Stored XSS vulnerability in Pixie (advisory@...ridge.ch)
[security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code (security-alert@...com)
XSS vulnerability in Pixie (advisory@...ridge.ch)
[security bulletin] HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cr… (security-alert@...com)
XSS vulnerability in FestOS (advisory@...ridge.ch)
XSRF (CSRF) in Pixie (advisory@...ridge.ch)
XSS vulnerability in FestOS (advisory@...ridge.ch)
{PRL} Novell Groupwise Webaccess Stack Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
XSRF (CSRF) in Pixie (advisory@...ridge.ch)
XSS vulnerability in WebPress (advisory@...ridge.ch)
XSRF (CSRF) in phpwcms (advisory@...ridge.ch)
XSS vulnerability in WebPress (advisory@...ridge.ch)
ClubHack2010 CFP (ClubHack <seclist@...bhack.com>)
OWASP Appsec Germany Call for Papers ("Tobias Glemser" <tglemser@...e-consulting.com>)
IS-2010-006 - D-Link DAP-1160 formFilter buffer overflow (Cristofaro Mune <pulsoid@...silence.org>)

July 16 (14 messages)

[ MDVSA-2010:133 ] libpng (security@...driva.com)
[ MDVSA-2010:134 ] ghostscript (security@...driva.com)
Kiwicon IV: Our Worst CFP Yet (Kiwicon <kiwicon@...icon.org>)
[ MDVSA-2010:136 ] ghostscript (security@...driva.com)
[ MDVSA-2010:135 ] ghostscript (security@...driva.com)
[MajorSecurity SA-076]Conpresso CMS - Cross site Scripting vulnerabilities (david.kurz@...orsecurity.net)
ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: ZDI-10-121: Command Injection Remote Code Execution Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
A new zombie port scanning attack (ithilgore <ithilgore.ryu.l@...il.com>)
{PRL} Novell Groupwise Internet Agent Stack Overflow (Francis Provencher <francisprovencher@...tekresearchlab.com>)
RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)

July 19 (7 messages)

[ MDVSA-2010:137 ] freetype2 (security@...driva.com)
[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
SeaMonkey 2.0.5 Address Bar Spoofing Vulnerability (info@...uritylab.ir)
YACK CMS 10.5.27 Remote File Inclusion Vulnerability (g1xsystem@...dowslive.com)
Microsoft ClickOnce MITM Vulnerabilities (Tom Ritter <tom@...ter.vg>)
VMSA-2010-0012 VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities (VMware Security Team <security@...are.com>)
PoC for CVE-2010-1869 (ghostscript) and CVE-2010-1039 (rpc.pcnfsd) (Rodrigo Branco <rbranco@...ckpoint.com>)

July 20 (7 messages)

CVE-2010-2382: Solaris flar unsafe use of temporary files (Frank Stuart <fstuart@...uart.com>)
CVE-2010-2382: Solaris nfslogd unsafe use of temporary files (Frank Stuart <fstuart@...uart.com>)
CVE-2010-2384: Solaris wbem unsafe use of temporary files (Frank Stuart <fstuart@...uart.com>)
[USN-963-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[security bulletin] HPSBMA02425 SSRT080091 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
[USN-963-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-962-1] VTE vulnerability (Kees Cook <kees@...ntu.com>)

July 21 (21 messages)

[security bulletin] HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
[Onapsis Security Advisory 2010-006] SAP J2EE Web Services Navigator Cross-Site Scripting (Onapsis Research Labs <research@...psis.com>)
ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-132: Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-10-133: Mozilla Firefox CSS font-face Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2074-1] New ncompress packages fix execution of arbitrary code (Giuseppe Iuculano <iuculano@...ian.org>)
[USN-940-2] Kerberos vulnerability (Kees Cook <kees@...ntu.com>)
ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAR Federated Identity Manage… (<Security_Alert@....com>)
[oCERT-2010-002] Joomla input sanitization errors (XSS) (Andrea Barisani <lcars@...rt.org>)
[SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal (Thijs Kinkhorst <thijs@...ian.org>)
[security bulletin] HPSBMA02557 SSRT100025 rev.1- HP OpenView Network Node Manager (OV NNM) Running on Windows, Remote Execution of Arbitr… (security-alert@...com)
Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Mozilla Firefox 3.5.x Address Bar Spoofing Vulnerability (info@...uritylab.ir)
[Suspected Spam]SQL Injection vulnerability in coWiki ("MustLive" <mustlive@...security.com.ua>)
[security bulletin] HPSBMA02558 SSRT100158 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
VUPEN Security Research - HP OpenView Network Node Manager "nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - HP OpenView Network Node Manager "ov.dll" Buffer Overflow Vulnerability (CVE-2010-2704) ("VUPEN Security Research" <advisories@...en.…)
[security bulletin] HPSBMA02551 SSRT100065 rev.2 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS) (security-alert@...com)

July 22 (8 messages)

ZDI-10-137: Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
XSS vulnerability in Spitfire search (advisory@...ridge.ch)
XSS vulnerability in Spitfire (advisory@...ridge.ch)
XSS vulnerability in Spitfire (advisory@...ridge.ch)
XSS vulnerability in Spitfire (advisory@...ridge.ch)
XSS vulnerability in Spitfire (advisory@...ridge.ch)
vBulletin - Critical Information Disclosure (advisories@...ern0t.net)

July 23 (10 messages)

[USN-927-6] NSS vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-957-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[DSECRG-09-040] SAP Netweaver wsnavigator XSS Security Vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-09-068] SAP NetWaver SLD - multiple XSS (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[USN-927-8] Thunderbird update (Jamie Strandboge <jamie@...onical.com>)
[USN-927-7] nspr update (Jamie Strandboge <jamie@...onical.com>)
RE: vBulletin - Critical Information Disclosure ("Jon" <lunatike@...mail.fr>)
[USN-930-4] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-930-5] ant, apturl, Epiphany, gluezilla, gnome-python-extras, liferea, mozvoikko, OpenJDK, packagekit, ubufox, webf… (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:138 ] iputils (security@...driva.com)

July 26 (13 messages)

Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw (spider@...fus.net)
Internet Explorer 8.0 Address Bar Spoofing Vulnerability (info@...uritylab.ir)
DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit (g1xsystem@...dowslive.com)
Call For Papers - Hackers 2 Hackers Conference 7th Edition - Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
Multiple vulnerabilities in MC Content Manager ("MustLive" <mustlive@...security.com.ua>)
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
QQplayer smi File Processing Buffer Overflow Vulnerability (lilf <lilf@...soft.com>)
Mac OS X WebDAV kernel extension local denial-of-service (Dan Rosenberg <dan.j.rosenberg@...il.com>)
[LWSA-2010-001] Likewise Open 5.4 & 6.0 (Gerald Carter <gcarter@...ewise.com>)
Re: Internet Explorer 8.0 Address Bar Spoofing Vulnerability (Shreyas Zare <shreyas@...fence.com>)
[USN-958-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-957-2] Firefox and Xulrunner vulnerability (Jamie Strandboge <jamie@...onical.com>)
Nessus Vulnerabilities (madhck@...il.com)

July 27 (18 messages)

Paper on the law and Implantable Devices security (Gadi Evron <ge@...uxbox.org>)
[USN-930-6] Firefox and Xulrunner vulnerability (Jamie Strandboge <jamie@...onical.com>)
Heap Overflow/DoS Vulnerability in Media Player Classic (praveen_recker@...y.com)
XSS vulnerability in SyndeoCMS (advisory@...ridge.ch)
SQL injection vulnerability in Theeta CMS (advisory@...ridge.ch)
XSS vulnerability in SyndeoCMS (advisory@...ridge.ch)
XSS vulnerability in Theeta CMS (advisory@...ridge.ch)
XSS vulnerability in SyndeoCMS (advisory@...ridge.ch)
XSS vulnerability in Theeta CMS (advisory@...ridge.ch)
XSS vulnerability in Theeta CMS (advisory@...ridge.ch)
FuzzDiff tool (Dan Rosenberg <drosenberg@...curity.com>)
[USN-964-1] Likewise Open vulnerability (Kees Cook <kees@...ntu.com>)
[MajorSecurity SA-079]PHPKIT WCMS - Multiple stored Cross Site Scripting Issues (david.kurz@...orsecurity.net)
London DEFCON July meet - DC4420 - Wed 28th July 2010 (Dominic <dominicgs@...il.com>)
TTVideo 1.0 Joomla Component SQL Injection Vulnerability (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[ MDVSA-2010:140 ] php (security@...driva.com)
iKAT - Interactive Kiosk Attack Tool v3 : Defcon 18 Edition (Paul Craig <paul.craig@...urity-assessment.com>)
[ MDVSA-2010:141 ] samba (security@...driva.com)

July 28 (16 messages)

[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Re: TTVideo 1.0 Joomla Component SQL Injection Vulnerability (martin@...ghtomato.com)
Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Jira Enterprise 4.0.1 - Multiple Low Risk Vulnerabilities (advisories@...ern0t.net)
[security bulletin] HPSBMA02549 SSRT090158 rev.2 - HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data (security-alert@...com)
PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
Vulnerabilities in Cetera eCommerce ("MustLive" <mustlive@...security.com.ua>)
New vulnerabilities in Cetera eCommerce ("MustLive" <mustlive@...security.com.ua>)

July 29 (6 messages)

[ MDVSA-2010:142 ] openldap (security@...driva.com)
CFP NcN 2010 ("Jose Nicolas Castellano" <jncastellano@...onname.org>)
[security bulletin] HPSBUX02556 SSRT100014 rev.2 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code (security-alert@...com)
PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection (Salvatore Fresta aka Drosophila <drosophilaxxx@...il.com>)
[HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th (Hafez Kamal <aphesz@...kinthebox.org>)
[SECURITY] [DSA 2077-1] New openldap packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)

July 30 (6 messages)

Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities ("Insomnia Security" <advisories@...omniasec.com>)
Akamai Download Manager arbitrary file download & execution (Akita Software Security <lists@...tasecurity.nl>)
Day of bugs in WordPress 2 ("MustLive" <mustlive@...security.com.ua>)
ESA-2010-012: EMC Disk Library (EDL) Denial Of Service Vulnerability (<Security_Alert@....com>)
XSS vulnerability in Campsite (advisory@...ridge.ch)
XSS vulnerability in Campsite (advisory@...ridge.ch)

276 messages

Powered by blists - more mailing lists