bugtraq mailing list - 2011/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 16	² 4	³ 10	⁴ 6	⁵	⁶
⁷ 11	⁸ 50	⁹ 33	¹⁰ 5	¹¹	¹²	¹³
¹⁴ 25	¹⁵ 17	¹⁶ 15	¹⁷ 7	¹⁸ 7	¹⁹	²⁰
²¹ 9	²² 16	²³ 10	²⁴ 10	²⁵ 7	²⁶	²⁷
²⁸ 14

Messages by day:

February 1 (16 messages)

ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[CORE-2010-1001] Cisco WebEx .atp and .wrf Overflow Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
HTB22803: Path disclosure in Razor CMS (advisory@...ridge.ch)
[security bulletin] HPSBMA02627 SSRT090246 rev.1 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code (security-alert@...com)
ZDI-11-035: IBM DB2 db2dasrrm validateUser Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-1053-1] Subversion vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
HTB22799: Path disclosure in Pluck CMS (advisory@...ridge.ch)
ZDI-11-036: IBM DB2 db2dasrrm receiveDASMessage Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22798: Path disclosure in Pluck CMS (advisory@...ridge.ch)
ZDI-11-037: Symantec IM Manager Administrative Interface IMAdminSchedTask.asp Eval Code Injection Remote Code Execution… (ZDI Disclosures <zdi-disclosures@...pin…)
Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
HTB22804: SQL Injection in Redaxscript (advisory@...ridge.ch)
HTB22805: Path disclosure in Redaxscript (advisory@...ridge.ch)
Aruba Mobility Controller - multiple advisories: DoS and authentication bypass (Robbie Gill <rgill@...banetworks.com>)
TinyWebGallery: XSS + Directory Traversal (Yam Mesicka <yammesicka@...il.com>)
Cisco Security Advisory: Multiple Cisco WebEx Player Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

February 2 (4 messages)

fix for Nvidia CUDA drivers security breach (Massimo Bernaschi <massimo.bernaschi@...il.com>)
[USN-1054-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-1055-1] OpenJDK vulnerabilities (Steve Beattie <sbeattie@...ntu.com>)
Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints (Cisco Systems Product Security Incident Response Team <…)

February 3 (10 messages)

WOOT '11 Call for Papers (Michal Zalewski <lcamtuf@...edump.cx>)
HTB22809: SQL Injection in ReOS (advisory@...ridge.ch)
HTB22801: Local File Inclusion in Podcast Generator (advisory@...ridge.ch)
HTB22800: Path disclosure in Podcast Generator (advisory@...ridge.ch)
HTB22808: Local File Inclusion in ReOS (advisory@...ridge.ch)
HTB22807: SQL Injection in ReOS (advisory@...ridge.ch)
HTB22802: XSS in Podcast Generator (advisory@...ridge.ch)
HTB22810: SQL Injection in ReOS (advisory@...ridge.ch)
HTB22806: SQL Injection in ReOS (advisory@...ridge.ch)
Majordomo2 - Directory Traversal (SMTP/HTTP) (mike@...ewat.ch)

February 4 (6 messages)

[USN-1057-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[ MDVSA-2011:020 ] pango (security@...driva.com)
ZDI-11-039: BMC PATROL Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure (Raul Siles <raul@...dong.com>)
[USN-1058-1] PostgreSQL vulnerability (Steve Beattie <sbeattie@...ntu.com>)
[SECURITY] [DSA-2157-1] PostgreSQL security update (Florian Weimer <fw@...eb.enyo.de>)

February 7 (11 messages)

Re: [DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability (simpsoed@...ibm.com)
TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR) (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure (beford <xbefordx@...il.com>)
Re: TinyWebGallery: XSS + Directory Traversal (tinywebgallery@...mpfle.de)
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions (Mark Thomas <markt@...che.org>)
Troopers11 - Security Conference in Germany (mozilla@....ids-guide.de)
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions (Mark Thomas <markt@...che.org>)
[SECURITY] Oracle JVM bug causes denial of service in Apache Tomcat (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability (Mark Thomas <markt@...che.org>)
[ MDVSA-2011:021 ] postgresql (security@...driva.com)

February 8 (50 messages)

R7-0038: Check Point Endpoint Security Server Information Disclosure (HD Moore <HD_Moore@...id7.com>)
R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities (HD Moore <HD_Moore@...id7.com>)
Re: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure (info@...eos.com)
ZDI-11-043: Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22811: XSS vulnerability in UMI.CMS (advisory@...ridge.ch)
HTB22816: XSS vulnerability in ViArt Shop (advisory@...ridge.ch)
HTB22815: XSS vulnerability in ViArt Shop (advisory@...ridge.ch)
ZDI-11-044: Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-041: Microsoft Office Excel Office Art Object Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-045: IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-11-046: IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-040: Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22814: XSS vulnerability in ViArt Shop (advisory@...ridge.ch)
ZDI-11-047: IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-048: IBM Lotus Domino iCalendar Meeting Request Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-049: IBM Lotus Domino SMTP Multiple Filename Arguments Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-051: IBM Lotus Notes cai URI Handler Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-052: Lotus Domino Server diiop Client Request Operation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-053: Lotus Domino Server diiop getEnvironmentString Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22819: XSS vulnerability in WebAsyst Shop-Script (advisory@...ridge.ch)
HTB22813: XSS vulnerability in UMI.CMS (advisory@...ridge.ch)
HTB22817: XSS vulnerability in WebAsyst Shop-Script (advisory@...ridge.ch)
Re: Microsoft Terminal Services vulnerable to MITM-attacks. (sam.vaughey@...il.com)
[ MDVSA-2011:023 ] proftpd (security@...driva.com)
Data Encryption Systems - DESLock+ - Local Kernel Code Execution/Denial of Service (Digit Security Research <research@...it-security.com>)
ZDI-11-054: Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
[USN-1059-1] Dovecot vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
ZDI-11-055: Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-056: Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-057: Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-058: SCO Openserver IMAP Daemon Long Verb Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-059: CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22812: XSRF (CSRF) in UMI.CMS (advisory@...ridge.ch)
ZDI-11-060: Novell eDirectory Malformed NCP Request Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-061: EMC Replication Manager Client irccd.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
rPSA-2011-0010-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
ZDI-11-042: Microsoft Office Excel Axis Properties Record Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi (VMware Security Team <security@...are.com>)
ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22818: Stored XSS vulnerability in WebAsyst Shop-Script (advisory@...ridge.ch)
[security bulletin] HPSBST02630 SSRT1000385 rev.1 - HP StorageWorks X9000 Network Storage Systems, Remote Unauthenticated Access (security-alert@...com)
[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF) (security-alert@...com)
ESA-2011-004: EMC Replication Manager remote code execution vulnerability (<Security_Alert@....com>)
DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 (Major Malfunction <majormal@...ate-radio.org>)
iDefense Security Advisory 02.08.11: Microsoft Windows Picture and Fax Viewer Library (labs-no-reply <labs-no-reply@...p.vrsn.com>)
MITKRB5-SA-2011-001 kpropd denial of service [CVE-2010-4022] (Tom Yu <tlyu@....edu>)
MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2011-0282 CVE-2011-0283] (Tom Yu <tlyu@....edu>)

February 9 (33 messages)

CVE-2010-4435 - Multiple Vendor Calendar Manager Remote Code Execution ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-066: Adobe Acrobat Reader U3D Texture .iff RLE Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2011:024 ] krb5 (security@...driva.com)
ZDI-11-067: Adobe Acrobat Reader U3D Texture rgba RLE Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-068: Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-069: Adobe Acrobat Reader U3D Texture psd RLE Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[HITB-Announce] HITB Magazine Issue 005 Released (Hafez Kamal <aphesz@...kinthebox.org>)
ZDI-11-070: Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-071: Adobe Reader BMP RLE_8 Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-072: Adobe Reader BMP ColorData Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-073: Adobe Reader ICC Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-074: Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-075: Adobe Acrobat Reader rt3d.dll Multimedia Playing Arbitrary Memory Overwite Remote Code Execution Vulnerabil… (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 02.08.11: Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
ZDI-11-077: Adobe Acrobat Reader U3D Texture Parser ILBM Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 02.08.11: Adobe Shockwave Player Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
ZDI-11-078: Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-079: Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-080: Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Integer Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
CGI:IRC XSS issue (CVE-2011-0050) (David Leadbeater <dgl@....cx>)
Re: Microsoft Terminal Services vulnerable to MITM-attacks. (Ansgar Wiechers <bugtraq@...netcobalt.net>)
RE: Microsoft Terminal Services vulnerable to MITM-attacks. (Jim Harrison <Jim@...tools.org>)
TPTI-11-01: Adobe Shockwave dirapi.dll IFWV Trusted Offset Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-02: Adobe Shockwave TextXtra Invalid Seek Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-04: Adobe Shockwave GIF Logical Screen Descriptor Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-03: Adobe Shockwave Font Xtra String Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-05: Adobe Shockwave PFR1 Font Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
SourceBans Version 1.4.7 XSS (null@...l.null)

February 10 (5 messages)

RE: Microsoft Terminal Services vulnerable to MITM-attacks. ("Ziots, Edward" <EZiots@...espan.org>)
[SECURITY] [DSA-2158-1] cgiirc security update (Steve Kemp <skx@...ian.org>)
[SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability (Brett Porter <brett@...che.org>)
Linksys WAP610N Unauthenticated Root Consle (Matteo Ignaccolo <matteo.ignaccolo@...urenetwork.it>)
[SECURITY] CVE-2011-0533: Apache Continuum cross-site scripting vulnerability (Brett Porter <brett@...che.org>)

February 14 (25 messages)

[USN-1060-1] Exim vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[SECURITY] [DSA 2159-1] vlc security update (Moritz Muehlenhoff <jmm@...ian.org>)
CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (VMware Security team <security@...are.com>)
VUPEN Security Research - Adobe Shockwave DIRAPI LCTX Chunck Memory Corruption Vulnerability (APSB11-01) ("VUPEN Security Research" <advisories@...en.com>)
ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player ("ACROS Security Lists" <lists@...os.si>)
ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader ("ACROS Security Lists" <lists@...os.si>)
HTB22852: SQL Injection in WP Forum Server wordpress plugin (advisory@...ridge.ch)
HTB22851: SQL Injection in WP Forum Server wordpress plugin (advisory@...ridge.ch)
VUPEN Security Research - Microsoft Internet Explorer "mshtml.dll" Dangling Pointer Vulnerability (CVE-2011-0036) ("VUPEN Security Research" <advisories@...en.c…)
[SECURITY] [DSA 2160-1] tomcat6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
HTB22820: SQL Injection in RunCMS (advisory@...ridge.ch)
[ MDVSA-2011:026 ] phpmyadmin (security@...driva.com)
HTB22821: Path disclosure in RunCMS (advisory@...ridge.ch)
HTB22822: XSS vulnerability in RunCMS (advisory@...ridge.ch)
Kunena SQL Injection Vulnerability & Information Leakage (Red Matter <disclosures@...matterinc.com>)
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
[SECURITY] [DSA 2161-1] OpenJDK security update (Florian Weimer <fw@...eb.enyo.de>)
[USN-1061-1] iTALC vulnerability (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 2162-1] openssl security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2163-1] python-django security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2161-2] OpenJDK security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2011:027 ] openoffice.org (security@...driva.com)

February 15 (17 messages)

Re: Linksys WAP610N Unauthenticated Root Console (Matteo Ignaccolo <matteo.ignaccolo@...urenetwork.it>)
[USN-1063-1] QEMU vulnerability (Kees Cook <kees@...ntu.com>)
[USN-1062-1] Kerberos vulnerabilities (Steve Beattie <sbeattie@...ntu.com>)
HTB22831: XSS vulnerability in Gollos (advisory@...ridge.ch)
HTB22832: Path disclosure in ArtGK CMS (advisory@...ridge.ch)
HTB22830: Multiple XSS vulnerabilities in Gollos (advisory@...ridge.ch)
HTB22829: Path disclosure in Xaraya (advisory@...ridge.ch)
HTB22826: Multiple XSS vulnerabilities in Wikipad (advisory@...ridge.ch)
HTB22828: Multiple XSS vulnerabilities in Photopad (advisory@...ridge.ch)
HTB22824: SQL Injection in Seo Panel (advisory@...ridge.ch)
HTB22833: Information Disclosure in Arctic Fox CMS (advisory@...ridge.ch)
HTB22823: SQL Injection in Seo Panel (advisory@...ridge.ch)
[ MDVSA-2011:028 ] openssl (security@...driva.com)
HTB22827: File Content Disclosure in Wikipad (advisory@...ridge.ch)
Tembria Server Monitor Multiple Cross-site Scripting (XSS) Vulnerabilities (robkraus@...utionary.com)
HTB22825: SQL Injection in Seo Panel (advisory@...ridge.ch)
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability (robkraus@...utionary.com)

February 16 (15 messages)

[USN-1064-1] OpenSSL vulnerability (Steve Beattie <sbeattie@...ntu.com>)
ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability (Brett Porter <brett@...che.org>)
ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-084: Oracle Java Unsigned Applet Applet2ClassLoader Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-1065-1] shadow vulnerability (Kees Cook <kees@...ntu.com>)
Gain Windows Domain Admin Privileges - Online Challenge ("Ivan Buetler" <ivan.buetler@...c.ch>)
[SECURITY] [DSA 2165-1] ffmpeg-debian security update (Luciano Bello <luciano@...ian.org>)
ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2166-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2164-1] shadow security update (Nico Golde <nion@...ian.org>)
ZDI-11-086: Oracle Java Webstart Trusted JNLP Extension Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <…)
[SECURITY] [DSA 2167-1] phpmyadmin security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2168-1] openafs security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 17 (7 messages)

[SECURITY] [DSA 2169-1] telepathy-gabble security update (Nico Golde <nion@...ian.org>)
PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (cxib@...urityreason.com)
ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
HTB22836: Path disclosure in Coppermine (advisory@...ridge.ch)
HTB22835: DoS (Denial of Service) Risk in FlatnuX (advisory@...ridge.ch)
HTB22834: Path disclosure in FlatnuX (advisory@...ridge.ch)

February 18 (7 messages)

[USN-1066-1] Django vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (Marcin Orlowski <carlos@...h.org.pl>)
[USN-1067-1] Telepathy Gabble vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2011:029 ] kernel (security@...driva.com)
www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest (bt@...ln.com)
Re: DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 (Major Malfunction <majormal@...ate-radio.org>)
ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

February 21 (9 messages)

[security bulletin] HPSBUX02628 SSRT090183 rev.1 - HP-UX Running CDE Calendar Manager, Remote Execution of Arbitrary Code (security-alert@...com)
[ MDVSA-2011:030 ] tomcat5 (security@...driva.com)
[ MDVSA-2011:031 ] python-django (security@...driva.com)
[SECURITY] [DSA 2170-1] mailman security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2011:032 ] eclipse (security@...driva.com)
www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest (bt@...ln.com)
Domino Sametime Multiple Reflected Cross-Site Scripting (david.daly@...nach.com)
[ MDVSA-2011:033 ] awstats (security@...driva.com)
Privacy, Security, Trust (PST 2011) - Call for Papers ("Serguei A. Mokhov on behalf of PST-11" <mokhov@....concordia.ca>)

February 22 (16 messages)

[SECURITY] [DSA 2171-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Domino Sametime Multiple Reflected Cross-Site Scripting (barkley@....net)
[ MDVSA-2011:034 ] banshee (security@...driva.com)
AST-2011-002: Multiple array overflow and crash vulnerabilities in UDPTL code ("Asterisk Security Team" <security@...erisk.org>)
HTB22845: SQL Injection in cdnvote wordpress plugin (advisory@...ridge.ch)
HTB22842: Path disclosure in Comment Rating wordpress plugin (advisory@...ridge.ch)
HTB22844: XSS in GD Star Rating wordpress plugin (advisory@...ridge.ch)
HTB22843: Path disclosure in GD Star Rating wordpress plugin (advisory@...ridge.ch)
[ MDVSA-2011:035 ] tomboy (security@...driva.com)
HTB22840: Path disclosure in Starbox Voting wordpress plugin (advisory@...ridge.ch)
HTB22841: SQL Injection in Comment Rating wordpress plugin (advisory@...ridge.ch)
HTB22838: Path disclosure in Vote It Up wordpress plugin (advisory@...ridge.ch)
HTB22839: SQL Injection in Z-Vote wordpress plugin (advisory@...ridge.ch)
[USN-1068-1] Aptdaemon vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Vanilla Forums 2.0.17.1 ~ 2.0.17.5 <= Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[USN-1069-1] Mailman vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

February 23 (10 messages)

[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables (Timo Warns <warns@...-sense.de>)
[SECURITY] [DSA 2172-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances (Cisco Systems Product Security Incident Response Team <…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vuln… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2011:036 ] mailman (security@...driva.com)
[USN-1070-1] Bind vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)

February 24 (10 messages)

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-092: (0day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pin…)
WordPress Uploadify Plugin 1.0 Remote File Upload (Leonardo Rota Botelho <me@...nardobotelho.com>)
ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
HTB22846: SQL Injection in IWantOneButton wordpress plugin (advisory@...ridge.ch)
HTB22847: XSS in IWantOneButton wordpress plugin (advisory@...ridge.ch)
HTB22850: SQL Injection in WP Forum Server wordpress plugin (advisory@...ridge.ch)
HTB22851: SQL Injection in WP Forum Server wordpress plugin (advisory@...ridge.ch)
[ MDVSA-2011:037 ] avahi (security@...driva.com)

February 25 (7 messages)

[BMSA-2011-01] Insecure secure cookie in web.go (Nam Nguyen <namn@...emoon.com.vn>)
CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System ("Williams, James K" <James.Williams@...com>)
prestashop vuln: sql injection submitted to bugtraq@...urityfocus.com ("Antonio S.M" <antonio_s_martino@...oo.es>)
Linksys Cisco Wag120N CSRF Vulnerability (irancrash@...il.com)
DoS Condition with Altigen VoIP Phone Systems (Patrick Kelley <psworn@...il.com>)
Re: Linksys Cisco Wag120N CSRF Vulnerability (tadeu1@...il.com)
[USN-1071-1] Linux kernel vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

February 28 (14 messages)

[USN-1072-1] Linux vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-1073-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-1074-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 2173-1] pam-pgsql security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2174-1] avahi security update (Thijs Kinkhorst <thijs@...ian.org>)
Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability (difficult-511@...mail.com)
CONFidence 2011- CfP only 6 days left, we are still waiting for your submission (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
[security bulletin] HPSBPI02635 SSRT100391 rev.1 - HP Web Jetadmin Running on Windows, Local Unauthorized Access to Managed Resources (security-alert@...com)
Re: prestashop vuln: sql injection submitted to bugtraq@...urityfocus.com (nebojsa@...stashop.com)
FreeBSD crontab information leakage (Dan Rosenberg <dan.j.rosenberg@...il.com>)
[ MDVSA-2011:038 ] samba (security@...driva.com)
[USN-1075-1] Samba vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1076-1] ClamAV vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1077-1] FUSE vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

272 messages

Powered by blists - more mailing lists