bugtraq mailing list - 2011/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 13	⁴ 3	⁵ 6	⁶ 8	⁷ 8	⁸	⁹
¹⁰	¹¹ 26	¹² 15	¹³ 7	¹⁴ 6	¹⁵	¹⁶
¹⁷ 19	¹⁸ 4	¹⁹	²⁰ 14	²¹ 8	²²	²³
²⁴ 14	²⁵ 9	²⁶ 15	²⁷	²⁸ 35	²⁹	³⁰
³¹ 8

Messages by day:

October 3 (13 messages)

Elastix PBX Extensions Enumeration (Bassem Ammar <basem@...e.ru>)
[ MDVSA-2011:139 ] firefox (security@...driva.com)
[ MDVSA-2011:140 ] mozilla-thunderbird (security@...driva.com)
[ MDVSA-2011:141 ] firefox (security@...driva.com)
[ MDVSA-2011:142 ] mozilla-thunderbird (security@...driva.com)
SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Netvolution referer header SQL injection vulnerability (Dimitris Glynos <dimitris@...sus-labs.com>)
Vulnerabilities in Cytel Studio 9 (Luigi Auriemma <aluigi@...istici.org>)
Vulnerabilities in GenStat 14.1.0.5943 (Luigi Auriemma <aluigi@...istici.org>)
DDIVRT-2011-36 Cybele Software, Inc. ThinVNC Product Suite Arbitrary File Retrieval (ddivulnalert@...frontline.com)
DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal (ddivulnalert@...frontline.com)
Phorum 5.2.18 Cross-site scripting vulnerability (sschurtz@...nline.de)
[SECURITY] [DSA 2314-1] puppet security update (Nico Golde <nion@...ian.org>)

October 4 (3 messages)

vTiger CRM 5.2.x <= Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Multiple vulnerabilities in SonicWall (hvazquez@...test.es)
New open source Security Framework (noreply@...loitpack.com)

October 5 (6 messages)

FreeBSD Security Advisory FreeBSD-SA-11:05.unix [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
VMSA-2011-0011 VMware hosted products address remote code execution vulnerability (VMware Security Team <security@...are.com>)
vTiger CRM 5.2.x <= Remote Code Execution Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
vTiger CRM 5.2.x <= Blind SQL Injection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Secunia Research: Cyrus IMAPd NTTP Authentication Bypass Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 2315-1] openoffice.org security update (Giuseppe Iuculano <iuculano@...ian.org>)

October 6 (8 messages)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Cataly… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager (Cisco Systems Product Security Incident Response Team <ps…)
Re: vTiger CRM 5.2.x <= Remote Code Execution Vulnerability (Steven Nuhn <steve@...ndcomputers.net>)
[SECURITY] [DSA 2316-1] quagga security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2011:143 ] rpm (security@...driva.com)
[SECURITY] [DSA 2317-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability (sschurtz@...nline.de)

October 7 (8 messages)

[SECURITY] [DSA 2318-1] cyrus-imapd-2.2 security update (Nico Golde <nico@...lde.de>)
Secunia Research: Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy Keyview Ichitaro Text Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Autonomy Keyview Ichitaro Object Reconstruction Logic Vulnerability (Secunia Research <remove-vuln@...unia.com>)
VUPEN Security Research - Google Chrome WebKit Engine Ruby Tag Stale Pointer Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Google Chrome WebKit Engine Child Tag Deletion Stale Pointer Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Medium severity flaw with Ark (Tim Brown <timb@...-dimension.org.uk>)
Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM (Tim Brown <timb@...-dimension.org.uk>)

October 11 (26 messages)

ABUS TVIP 11550/21550 Multiple vulnerabilities (and possibly other ABUS cams) ("Marco van Berkum" <marco@...eam-portal.org>)
Contao 2.10.1 Cross-site scripting vulnerability (sschurtz@...nline.de)
SilverStripe 2.4.5 Multiple backend Cross-site scripting vulnerabilities (sschurtz@...nline.de)
[ MDVSA-2011:144 ] apache (security@...driva.com)
[SECURITY] [DSA 2319-1] policykit-1 security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2320-1] dokuwiki regression fix (Thijs Kinkhorst <thijs@...ian.org>)
openEngine 2.0 'key' Blind SQL Injection vulnerability (sschurtz@...nline.de)
KaiBB 2.0.1 XSS and SQL Injection vulnerabilities (sschurtz@...nline.de)
[ GLSA 201110-01 ] OpenSSL: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2011:131-1 ] libxml (security@...driva.com)
[ MDVSA-2011:145 ] libxml2 (security@...driva.com)
NGS00062 Technical Advisory: Apple OSX / iPhone ImageIO TIFF getBandProcTIFF TileWidth Heap Overflow ("Research@...Secure" <research@...secure.com>)
[Announcement] ClubHack Mag Issue 21- October 2011 Released (abhijeet@...bhack.com)
[ MDVSA-2011:146 ] cups (security@...driva.com)
[ MDVSA-2011:147 ] cups (security@...driva.com)
[SECURITY] [DSA 2321-1] moin security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2322-1] bugzilla security update (Jonathan Wiltshire <jmw@...ian.org>)
[security bulletin] HPSBMU02710 SSRT100601 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access (security-alert@...com)
[ GLSA 201110-03 ] (Stefan Behte <craig@...too.org>)
[ GLSA 201110-04 ] (Stefan Behte <craig@...too.org>)
[ GLSA 201110-05 ] GnuTLS: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 201110-07 ] vsftpd: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
Related POC for JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities (admin@...report.ir)
ZOHO ManageEngine ADSelfService Plus Administrative Access (roberto.paleari@...ze.net)
[ GLSA 201110-06 ] PHP: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
APPLE-SA-2011-10-11-1 iTunes 10.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)

October 12 (15 messages)

[ MDVSA-2011:148 ] samba (security@...driva.com)
Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364) (Adi Sharabani <adish@...ibm.com>)
LedgerSMB 1.3.0 released, includes anti-XSRF framework (Chris Travers <chris@...atrontech.com>)
Multiple vulnerabilities in BugFree (advisory@...ridge.ch)
Multiple vulnerabilities in Pretty Link WordPress Plugin (advisory@...ridge.ch)
Re: SilverStripe 2.4.5 Multiple backend Cross-site scripting vulnerabilities (Henri Salo <henri@...v.fi>)
AppSec DC 2012 CFP is OPEN! (AppSec DC <cfp@...secdc.org>)
CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption (CORE Security Technologies Advisories <advisories@...esecurity.com>)
APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2011-10-12-1 iOS 5 Software Update (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2011-10-12-5 Pages for iOS v1.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2011-10-12-6 Numbers for iOS v1.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
iDefense Security Advisory 10.11.11: Microsoft Internet Explorer Object Handling Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
APPLE-SA-2011-10-12-4 Safari 5.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

October 13 (7 messages)

Two Remote Code Execution Vulnerabilities in Internet Explorer (Ivan Fratric <ifsecure@...il.com>)
VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (VMware Security Team <security@...are.com>)
SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Acces… (SEC Consult Vulnerability Lab <research…)
Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass (Drew Calcott <drew.calcott@...urity-assessment.com>)
Multiple G-WAN vulnerabilities (Fredrik Widlund <fredrik.widlund@...il.com>)
iDefense Security Advisory 10.12.11: Apple MobileSafari Attachment Viewing Cross Site Scripting Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 10.12.11: Apple Mobile OfficeImport Framework Word Document Parsing Memory Corruption Vulner… (labs-no-reply <labs-no-reply@...p.vrsn.…)

October 14 (6 messages)

[ GLSA 201110-08 ] feh: Multiple vulnerabilities (Stefan Behte <craig@...too.org>)
[ GLSA 201110-09 ] Conky: Privilege escalation (Stefan Behte <craig@...too.org>)
[ GLSA 201110-10 ] Wget: User-assisted file creation or overwrite (Tim Sammut <underling@...too.org>)
[ GLSA 201110-11 ] Adobe Flash Player: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
DC4420 - London DEFCON - October meet - Tuesday October 18th 2011 (Major Malfunction <majormal@...ate-radio.org>)
[PTResearch] SAP DIAG Decompress plugin for Wireshark (noreply@...ecurity.ru)

October 17 (19 messages)

[ MDVSA-2011:149 ] cyrus-imapd (security@...driva.com)
[slackware-security] httpd (SSA:2011-284-01) (Slackware Security Team <security@...ckware.com>)
[ GLSA 201110-12 ] Unbound: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2011:150 ] squid (security@...driva.com)
[ MDVSA-2011:151 ] libpng (security@...driva.com)
Re: [Full-disclosure] Breaking the links: Exploiting the linker (Tim Brown <timb@...-dimension.org.uk>)
foofus.net Security Advisory - Toshiba eStudio Multifunction Printer Authentication Bypass (percx@...fus.net)
DAEMON Tools IOCTL local denial-of-service vulnerability (tanda@...rteenforty.jp)
WordPress Plugin BackWPUp 2.1.4 - Security Advisory - SOS-11-012 ("Lists" <lists@...seofsecurity.com>)
[Announcement] ClubHack Magazine - Call for Articles (abhijeet@...bhack.com)
[ MDVSA-2011:152 ] ncompress (security@...driva.com)
[ MDVSA-2011:153 ] libxfont (security@...driva.com)
[ MDVSA-2011:154 ] systemtap (security@...driva.com)
ZDI-11-288 : Microsoft Internet Explorer Select Element Insufficient,Type Checking Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-11-289 : Microsoft Internet Explorer swapNode Handling Remote Code,Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-290 : Microsoft Internet Explorer SetExpandedClipRect Remote,Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
AST-2011-012: Remote crash vulnerability in SIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
[ MDVSA-2011:155 ] systemtap (security@...driva.com)

October 18 (4 messages)

[PT-2011-14] SQL injection vulnerability in BoonEx Dolphin (noreply@...ecurity.ru)
Site@...ool 2.4.10 SQL Injection & XSS vulnerabilities (sschurtz@...nline.de)
Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection (n0b0d13s@...il.com)
[ MDVSA-2011:156 ] tomcat5 (security@...driva.com)

October 20 (14 messages)

MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529] (Tom Yu <tlyu@....EDU>)
[ GLSA 201110-13 ] Tor: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: CiscoWorks Common Services Arbitrary Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)
Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities (sschurtz@...nline.de)
[security bulletin] HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure (security-alert@...com)
DNS Poisoning via Port Exhaustion (Roee Hay <roeeh@...ibm.com>)
Multiple vulnerabilities in Tine 2.0 (advisory@...ridge.ch)
[security bulletin] HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote Execution of Arbitrary Code (security-alert@...com)
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability (nospam@...il.it)
OCS Inventory NG 2.0.1 Persistent XSS (CVE-2011-4024) (Nicolas DEROUET <nicolas.derouet@...il.com>)
GotRoot Security Challenge ("Ivan Buetler" <ivan.buetler@...c.ch>)
[SECURITY] [DSA 2324-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 21 (8 messages)

Metasploit 4.1.0 Web UI stored XSS vulnerability (sschurtz@...nline.de)
[ MDVSA-2011:157 ] freetype2 (security@...driva.com)
VUPEN Security Research - Microsoft Internet Explorer "X-UA-COMPATIBLE" Use-after-free Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
inCommand Technologies, Inc. Cross-site Scripting Vulnerability (md.r00t.defacer@...il.com)
[ MDVSA-2011:158 ] phpmyadmin (security@...driva.com)
TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN function) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Database Vault Account Management Vulnerabilites (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection Vulnerability in Oracle DROP INDEX for spatial datatypes (Shatter <shatter@...secinc.com>)

October 24 (14 messages)

[ GLSA 201110-14 ] D-Bus: Multiple vulnerabilities (Stefan Behte <craig@...too.org>)
[ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code (Tim Sammut <underling@...too.org>)
[ GLSA 201110-16 ] Cyrus IMAP Server: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ GLSA 201110-17 ] Avahi: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 201110-18 ] rgmanager: Privilege escalation (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2011:159 ] krb5 (security@...driva.com)
[ MDVSA-2011:160 ] krb5 (security@...driva.com)
[ GLSA 201110-20 ] Clam AntiVirus: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[SECURITY] [DSA 2325-1] kfreebsd-8 security update (Aurelien Jarno <aurel32@...ian.org>)
[SECURITY] [DSA 2326-1] pam security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues. (0x9950@...il.com)
jara 1.6 sql injection vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit (n0b0d13s@...il.com)
TC-SA-2011-01: Multiple vulnerabilities in OmniTouch Instant Communication Suite ("Tobias Glemser" <tglemser@...e-consulting.com>)

October 25 (9 messages)

[SECURITY] [DSA 2327-1] libfcgi-perl security-update (Nico Golde <nion@...ian.org>)
[ GLSA 201110-21 ] Asterisk: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ MDVSA-2011:161 ] postgresql (security@...driva.com)
[security bulletin] HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (security-alert@...com)
[SECURITY] [DSA 2328-1] freetype security update (Moritz Muehlenhoff <jmm@...ian.org>)
zFtp Server <= 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[ GLSA 201110-22 ] PostgreSQL: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 201110-19 ] X.Org X Server: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
Re: jara 1.6 sql injection vulnerability (Henri Salo <henri@...v.fi>)

October 26 (15 messages)

[ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection (Alex Legler <a3li@...too.org>)
Path disclosure in SPIP (advisory@...ridge.ch)
[security bulletin] HPSBMU02714 SSRT100244 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unautho… (security-alert@...com)
Cisco Security Advisory: Cisco Unified Communications Manager Directory Traversal Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Cisco Security Advisory: Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Cisco Security Advisory: Cisco Unified Contact Center Express Directory Traversal Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Security Agent Remote Code Execution Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
ZDI-11-296 : Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-297 : Adobe Reader U3D PCX Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-298 : Adobe Reader U3D IFF RGBA Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-299 : Adobe Reader PICT Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-300 : Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-301 : Adobe Reader U3D PICT 0Eh Encoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

October 28 (35 messages)

[SECURITY] [DSA 2329-1] torque security update (Nico Golde <nion@...ian.org>)
SANS AppSec 2012 CFP is Open (SANS AppSec CFP <callforpapers-appsec@...s.org>)
ZDI-11-303 : Apple QuickTime H264 Stream frame_cropping Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-304 : Apple Quicktime Advanced Audio Codec Frame Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-305 : Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-306 : Oracle Java IIOP Deserialization Type Confusion Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-308 : Cisco WebEx Player ATAS32.DLL linesProcessed Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-309 : Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-310 : Adobe Reader Compound Glyph Index Sign Extension Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-3315] (ddivulnalert@...frontline.com)
[ GLSA 201110-24 ] Squid: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ GLSA 201110-25 ] Pure-FTPd: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ GLSA 201110-26 ] libxml2: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
APPLE-SA-2011-10-26-1 QuickTime 7.7.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
foofus.net security advisory - Toshiba eStudio Multifunction Printer Information Leakage (percx@...fus.net)
[SECURITY] [DSA 2330-1] simplesamlphp security update (Thijs Kinkhorst <thijs@...ian.org>)
ZDI-11-311 : Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-313 : Apple QuickTime FLC RLE Packet Count Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-312 : Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-314 : Apple Quicktime PnPixPat PatType 3 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-315 : Apple QuickTime FLC Delta Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-316 : Apple QuickTime H264 Matrix Conversion Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBUX02719 SSRT100658 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges (security-alert@...com)
VMSA-2011-0013 VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (VMware Security Response Team <security@vm…)
Re: jara 1.6 sql injection vulnerability (Henri Salo <henri@...v.fi>)
[PT-2011-20] Authorization bypass vulnerability in OneOrZero AIMS (noreply@...ecurity.ru)
[PT-2011-21] SQL injection vulnerability in OneOrZero AIMS (noreply@...ecurity.ru)
[PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300 (noreply@...ecurity.ru)
[PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router (noreply@...ecurity.ru)
[SECURITY] [DSA 2323-1] radvd security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2331-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities (n0b0d13s@...il.com)
RE: [CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues. ("Paul Oxman \(poxman\)" <poxman@...co.com>)

October 31 (8 messages)

[security bulletin] HPSBUX02702 SSRT100606 rev.5 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02707 SSRT100626 rev.2 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)
[SECURITY] [DSA 2332-1] python-django security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2333-1] phpldapadmin security update (Jonathan Wiltshire <jmw@...ian.org>)
Apple's Mail.app mail of death (Paul <shebang@...e-mail.net>)
PlotLineControl ActiveX Control "LinePutPoint" Integer Overflow (demonalex@....com)
Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC (*.oce) (nospam@...il.it)
YaTFTPSvr TFTP Server Directory Traversal Vulnerability (demonalex@....com)

218 messages

Powered by blists - more mailing lists