bugtraq mailing list - 2011/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 12	² 7	³	⁴
⁵ 1	⁶ 25	⁷ 8	⁸ 5	⁹ 11	¹⁰	¹¹
¹² 9	¹³ 5	¹⁴ 16	¹⁵ 11	¹⁶ 10	¹⁷	¹⁸
¹⁹ 8	²⁰ 3	²¹ 4	²²	²³ 9	²⁴	²⁵
²⁶ 10	²⁷ 7	²⁸ 30	²⁹ 7	³⁰ 1

Messages by day:

September 1 (12 messages)

ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBUX02700 SSRT100506 rev.1 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (security-alert@...com)
Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Sana Net (viewpages.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
More on IPv6 RA-Guard evasion (IPv6 security) (Fernando Gont <fgont@...networks.com>)
Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Dan Luedtke <maildanrl@...glemail.com>)
Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Fernando Gont <fgont@...networks.com>)
Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Dan Luedtke <maildanrl@...glemail.com>)
Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Marc Heuse <mh@...sec.de>)
Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Fernando Gont <fgont@...networks.com>)
Fulci (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Olonet (prodotto.php?idproduct) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)

September 2 (7 messages)

Studio Linea (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
PMCMA: Post Memory Corruption Memory Analysis (Jonathan Brossard <endrazine@...il.com>)
KnFTPd v1.0.0 Multiple Command Remote Buffer Overflow (liuqx@...c.org.cn)
ITTWeb Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ph5gruppo (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
[PT-2011-19] SQL injection vulnerability in Help Request System (noreply@...ecurity.ru)
Vulnerabilities in BroadWin WebAccess Client 1.0.0.10 (Luigi Auriemma <aluigi@...istici.org>)

September 5 (1 message)

ezmlm warning (bugtraq-help@...urityfocus.com)

September 6 (25 messages)

Virtualismi (prodotto.php?id) Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
Loop (ricetta.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Manifattura Web (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
XSS Ebuddy (responsible disclosure) (Rener Silva <rener@...abs.com.br>)
ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2011:129 ] mozilla (security@...driva.com)
Editel (news-dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
BvCom (dettaglio.php?idnews) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
WSTAFF Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
MaiNick (ricetta.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Abarkam (detail.php?input) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
TTW (ricetta.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Pranian Group e107 Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
Extended submission deadline for: The 6th International Conference for Internet Technology and Secured Transactions (IC… (Call for papers <call.for.papers.is@gma…)
t2′11 Challenge to be released 2011-09-10 10:00 EEST (Tomi Tuominen <tomi.tuominen@...fi>)
[ MDVSA-2011:130 ] apache (security@...driva.com)
[ MDVSA-2011:131 ] libxml (security@...driva.com)
Multiple vulnerabilities in MantisBT (advisory@...ridge.ch)
[Announcement] ClubHack Mag Issue 20- September 2011 Released (abhijeet@...bhack.com)
[SECURITY] [DSA 2298-2] apache2 regression fix (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 2300-2] nss security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2301-1] rails security update (Luciano Bello <luciano@...ian.org>)
[ MDVSA-2011:132 ] pidgin (security@...driva.com)
openvas 2.x race condition (Bugs NotHugs <bugsnothugs@...il.com>)

September 7 (8 messages)

Windows server 2008 R1 local DoS ("Aliz 'Randomdude'" <randomdude@...il.com>)
[slackware-security] mozilla-firefox (SSA:2011-249-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2011-249-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2011-249-02) (Slackware Security Team <security@...ckware.com>)
Arbitrary File Upload in '1 Flash Gallery' Wordpress Plugin (supernothing@...reclockcycles.org)
Embarcadero ER/Studio XE2 Server Portal Tom Sawyer's Default GET Extension Factory ActiveX Control Remote Code Execution (nospam@...il.it)
XSS in Zikula (advisory@...ridge.ch)
Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability (Cisco Systems Product Security Incident Response Te…)

September 8 (5 messages)

OWASP AppSec USA 2011 - Two Weeks Away (Adam Baso <adam.baso@...sp.org>)
[ MDVSA-2011:133 ] mozilla (security@...driva.com)
[SECURITY] [DSA 2302-1] bcfg2 security update (Nico Golde <nico@...lde.de>)
Multiple XSS vulnerabilities in LightNEasy 3.2.4 (sschurtz@...nline.de)
[security bulletin] HPSBUX02702 SSRT100606 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)

September 9 (11 messages)

[SECURITY] [DSA 2303-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[security bulletin] HPSBUX02702 SSRT100606 rev.2 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)
28C3: CFP for 28th Chaos Communication Congress (fukami <lists@....io>)
Disassembling .NET Client Challenge ("Ivan Buetler" <ivan.buetler@...c.ch>)
CVE-2011-2730: Spring Framework Information Disclosure (s2-security <s2-security@...are.com>)
CVE-2011-2732: Spring Security header injection vulnerability (s2-security <s2-security@...are.com>)
CVE-2011-2894: Spring Framework and Spring Security serialization-based remoting vulnerabilities (s2-security <s2-security@...are.com>)
CVE-2011-2731: Spring Security privilege escalation when using RunAsManager (s2-security <s2-security@...are.com>)
[ MDVSA-2011:134 ] rsyslog (security@...driva.com)
[slackware-security] httpd (SSA:2011-252-01) (Slackware Security Team <security@...ckware.com>)
APPLE-SA-2011-09-09-1 Security Update 2011-005 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 12 (9 messages)

[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 2306-1] ffmpeg security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2307-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2304-1] squid3 security update (Nico Golde <nion@...ian.org>)
[Announcement] ClubHack Magazine - Call for Articles (abhijeet@...bhack.com)
[NTMS 2012] Call for Papers, Istanbul- Turkey, 7 - 10 May 2012 (mbadra@...il.com)
Multiple XSS vulnerabilities in CMS Papoo Light Version (sschurtz@...nline.de)
ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar (<Security_Alert@....com>)
[SECURITY] [DSA 2308-1] mantis security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 13 (5 messages)

Advisory for MS11-035 / ZDI-11-167 (Luigi Auriemma <aluigi@...istici.org>)
XSS vulnerability in FortiMail Messaging Security Appliance (sschurtz@...nline.de)
Vulnerabilities in trading and SCADA softwares (Luigi Auriemma <aluigi@...istici.org>)
[security bulletin] HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial … (security-alert@...com)
Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal ("Irene Abezgauz" <irene@...kersec.com>)

September 14 (16 messages)

iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 09.13.11: Microsoft Excel Record Integer Signedness Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 09.13.11: Adobe Reader and Acrobat JPEG Processing Use After Free Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
[SECURITY] [DSA 2309-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
Colasoft Capsa7.2.1 Malformed SNMP Packet Denial of Service (vuln@...c.org.cn)
Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal ("Irene Abezgauz" <irene@...kersec.com>)
Multiple vulnerabilities in SiT! Support Incident Tracker (advisory@...ridge.ch)
Re: Vulnerabilities in trading and SCADA softwares (fergal.cassidy@...suresoft.com)
VUPEN Security Research - Adobe Acrobat and Reader TIFF BitsPerSample Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader Picture Dimensions Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader IFF Processing Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader PCX Processing Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader BMP Dimensions Heap Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Acrobat and Reader Picture Processing Stack Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Invitation to Register and Participate in the Entretiens Jacques Cartier (EJC) Colloquium on IT Security, Cyber Forensic… ("Serguei A. Mokhov \(on behalf of EJC20…)

September 15 (11 messages)

ESA-2011-029: Buffer overflow vulnerability in multiple EMC Ionix products (<Security_Alert@....com>)
Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@…)
Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulner… (Cisco Systems Product Security Incident…)
Re: Vulnerabilities in trading and SCADA softwares (Jeffrey Walton <noloader@...il.com>)
CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Nortel Contact Recording Centralized Archive 6.5.1 EyrAPIConfiguration getSubKeys() Remote SQL Injection Exploit (nospam@...il.it)
XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
[Onapsis Security Advisory 2011-014] SAP WebAS Remote Denial of Service (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2011-015] SAP WebAS webrfc Cross-Site Scripting (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2011-016] SAP WebAS Malicious SAP Shortcut Generation (Onapsis Research Labs <research@...psis.com>)

September 16 (10 messages)

RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("Thor \(Hammer of God\)" <thor@...merofgod.com>)
RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("Thor \(Hammer of God\)" <thor@...merofgod.com>)
RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
CFP for first independent international Security Conference in Russia - ZeroNights (by Defcon-Russia) (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability (by ERPScan) (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose (by ERPScan) (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Re: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission (Jeffrey Walton <noloader@...il.com>)

September 19 (8 messages)

[ MDVSA-2011:133-1 ] mozilla (security@...driva.com)
[ MDVSA-2011:132-1 ] pidgin (security@...driva.com)
[ MDVSA-2011:134-1 ] rsyslog (security@...driva.com)
[ MDVSA-2011:130-1 ] apache (security@...driva.com)
[SECURITY] [DSA 2305-1] vsftpd security update (Nico Golde <nion@...ian.org>)
Cisco TelePresence Multiple Vulnerabilities - SOS-11-010 ("Lists" <lists@...seofsecurity.com>)
VUPEN Security Research - Microsoft Office Excel Formula Record Heap Corruption Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
[security bulletin] HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation (BSA) Essentials, Remote Execution of Arbitrary Code (security-alert@...com)

September 20 (3 messages)

NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF - SOS-11-011 ("Lists" <lists@...seofsecurity.com>)
Advisory: Opera Mobile Cache Poisoning XAS (Roee Hay <roeeh@...ibm.com>)
Advisory: Dolphin Browser HD Cross-Application Scripting (Roee Hay <roeeh@...ibm.com>)

September 21 (4 messages)

NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux ("Research@...Secure" <research@...secure.com>)
Multiple vulnerabilities in Help Desk Software (advisory@...ridge.ch)
Trusteer Rapport and anti-keylogging (mu-b <mu-b@...it-labs.org>)
IPv6 security presentation at Hack.lu 2011 (Fernando Gont <fgont@...networks.com>)

September 23 (9 messages)

Re: NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux (Tavis Ormandy <taviso@...xchg8b.com>)
[security bulletin] HPSBOV02497 SSRT090245 rev.4 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial … (security-alert@...com)
[ MDVSA-2011:135 ] iproute2 (security@...driva.com)
Vulnerabilities in Sunway ForceControl 6.1 sp3 (SCADA) (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 2310-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
secureURL.php design flaws (Boldizsar Bencsath <boldi@...l2005.etl.hu>)
TLS/SSL Compatibility Report 2011 (Thierry Zoller <Thierry@...ler.lu>)
XSS Vulnerabilities in TWiki < 5.1.0 (Netsparker Advisories <advisories@...itunasecurity.com>)
Security issue is_a function in PHP 5.3.7+ (cipri@...e.nl)

September 26 (10 messages)

TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Server (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Hackito Ergo Sum 2012 dates (Philippe Langlois <phil@...ec.com>)
PunBB 1.3.6 bug (Amir@...st.ir)
Serendipity freetag plugin 'serendipity[tagview]' Cross-Site Scripting vulnerability (sschurtz@...nline.de)
Advanced Electron Forums (AEF) 1.0.9 <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
AdaptCMS 2.0.1 Multiple security vulnerabilities (sschurtz@...nline.de)
[CVE-2011-3645] Multiple vulnerability in Newgen's Omnidocs (sohil_garg@...oo.co.in)
[SECURITY] CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication (Mark Thomas <markt@...che.org>)
Vulnerability found in Flynax Classifieds products (Nasel Pentest <pentest@...el.com.ar>)

September 27 (7 messages)

Re: PunBB 1.3.6 bug (Henri Salo <henri@...v.fi>)
[security bulletin] HPSBUX02702 SSRT100606 rev.4 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)
openEngine 2.0 'id' Blind SQL Injection vulnerability (sschurtz@...nline.de)
NGS00109 Patch Notification: ImpressPages CMS Remote code execution ("Research@...Secure" <research@...secure.com>)
Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Novell GroupWise Internet Agent HTTP Interface Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
iDefense Security Advisory 09.26.11: Novell GroupWise iCal TZNAME Heap Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)

September 28 (30 messages)

[SECURITY] [DSA 2311-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)
European Security Services GPS v1.0 - Multiple Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Barracuda Backup v2.0 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
VUPEN Security Research - Novell GroupWise "TZNAME" Remote Buffer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Novell GroupWise "BYWEEKNO" Remote Memory Corruption Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Novell GroupWise "integerList" Remote Buffer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
FreeBSD Security Advisory FreeBSD-SA-11:03.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:04.compress (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:05.unix (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
VUPEN Security Research - Novell GroupWise "RRULE" Remote Buffer Overflow Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Vulnerabilities in PcVue 10 (SCADA) (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Traq (advisory@...ridge.ch)
Vulnerabilities in EViews 7.2 (Luigi Auriemma <aluigi@...istici.org>)
Integer overflow in Sterling Trader 7.0.2 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE Weekday Recurrence Heap Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 09.26.11: Novell GroupWise iCal Date Invalid Array Indexing Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
Cisco Security Advisory: Cisco 10000 Series Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Data-Link Switching Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software IPv6 over MPLS Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Tea…)
iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE ByWeekNo Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerabilities (Cisco Systems Product Security Incident …)
Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vuln… (Cisco Systems Product Security Incident…)
[ MDVSA-2011:137 ] openssl (security@...driva.com)
Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)
Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2011:136 ] openssl (security@...driva.com)

September 29 (7 messages)

[security bulletin] HPSBUX02707 SSRT100626 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2011:138 ] wireshark (security@...driva.com)
Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities (sschurtz@...nline.de)
Arbitrary memory corruption in NCSS 07.1.21 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 2312-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
DeepSec 2011 Conference - Final Schedule Published (DeepSec Conference <deepsec@...psec.net>)

September 30 (1 message)

[SECURITY] [DSA 2313-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)

199 messages

Powered by blists - more mailing lists