bugtraq mailing list - 2011/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 11	² 7	³	⁴
⁵ 8	⁶ 5	⁷ 4	⁸ 14	⁹ 9	¹⁰	¹¹
¹² 12	¹³ 8	¹⁴ 12	¹⁵ 11	¹⁶ 5	¹⁷	¹⁸
¹⁹ 29	²⁰ 6	²¹ 7	²²	²³ 10	²⁴	²⁵
²⁶	²⁷ 16	²⁸	²⁹ 10	³⁰ 4	³¹

Messages by day:

December 1 (11 messages)

Re: Wordpress enable-latex plugin Remote File Include Vulnerabilities (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2355-1] clearsilver security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities (Henri Salo <henri@...v.fi>)
[security bulletin] HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default (security-alert@...com)
Re: Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003 (Henri Salo <henri@...v.fi>)
Re: [MajorSecurity SA-081]Contao CMS 2.9.2 - Persistent Cross Site Scripting Issue (Henri Salo <henri@...v.fi>)
Re: Contao 2.10.1 Cross-site scripting vulnerability (Henri Salo <henri@...v.fi>)
Ariadne 2.7.6 Multiple XSS vulnerabilities (sschurtz@...nline.de)
Re: Serendipity freetag plugin 'serendipity[tagview]' Cross-Site Scripting vulnerability (Henri Salo <henri@...v.fi>)
Re: Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2356-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)

December 2 (7 messages)

[security bulletin] HPSBHF02723 SSRT100536 rev.1 - HP Protect Tools Device Access Manager for Windows, Remote Execution of Arbitrary Code,… (security-alert@...com)
FreeBSD ftpd/ProFTPD on FreeBSD Remote Root Exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
SANS AppSec 2012 CFP reminder (SANS AppSec CFP <callforpapers-appsec@...s.org>)
[PT-2011-43] Database information disclosure in Kayako Fusion (noreply@...ecurity.ru)
Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store (advisory@...ridge.ch)
InfoSec Southwest 2012 CFP ("I\)ruid" <druid@...ghq.org>)
XSSer v1.6 -beta- aka "Grey Swarm!" released. (psy <root@...depsylon.net>)

December 5 (8 messages)

[security bulletin] HPSBUX02729 SSRT100687 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
fast and somewhat reliable cache timing (Michal Zalewski <lcamtuf@...edump.cx>)
Hackito Ergo Sum 2012 Call For Papers ! (12/13/14 April 2012) (Matthieu Suiche <msuiche@...kitoergosum.org>)
Vulnerabilities in Serv-U 11.1.0.3 (Luigi Auriemma <aluigi@...istici.org>)
[DCA-2011-0014] - Elxis CMS Cross Site Script (Ewerson Guimarães (Crash) - Dclabs <crash@...abs.com.br>)
[SECURITY] [DSA 2358-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Wordpress enable-latex plugin Remote File Include Vulnerabilities (Henri Salo <henri@...v.fi>)
Meditate Web Content Editor 'username_input' SQL-Injection vulnerability (sschurtz@...nline.de)

December 6 (5 messages)

Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities (irist.ir@...il.com)
[security bulletin] HPSBMU02726 SSRT100685 rev.2 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Una… (security-alert@...com)
MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530] (Tom Yu <tlyu@....EDU>)
[SECURITY] [DSA 2359-1] mojarra security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2360-1] Two month advance notification for upcoming end-of-life for Debian oldstable (Moritz Muehlenhoff <jmm@...ian.org>)

December 7 (4 messages)

[security bulletin] HPSBHF02723 SSRT100536 rev.2 - HP ProtectTools Device Access Manager for Windows, Remote Execution of Arbitrary Code, … (security-alert@...com)
[ MDVSA-2011:181 ] proftpd (security@...driva.com)
DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection (ddivulnalert@...frontline.com)
[SECURITY] [DSA 2361-1] chasen security update (Florian Weimer <fw@...eb.enyo.de>)

December 8 (14 messages)

ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-342 : Novell ZENworks Asset Management Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-343 : RealNetworks RealPlayer mp4arender esds channel count Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-344 : RealNetworks RealPlayer RV20 Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-345 : TrendMicro Control Manager CmdProcessor.exe AddTask Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
seamless bait-and-switch (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities (Henri Salo <henri@...v.fi>)
Re: Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities (Henri Salo <henri@...v.fi>)
0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11 (0a29 40 <0a2940@...il.com>)
[DCA-2011-0015] QuesCom Qportal User - OctoWebSvr/COM - Source Code Disclosure (Ewerson Guimarães (Crash) - Dclabs <crash@...abs.com.br>)
[ MDVSA-2011:182 ] dhcp (security@...driva.com)
Re: seamless bait-and-switch (Michal Zalewski <lcamtuf@...edump.cx>)
Call for Papers - 2012 Rocky Mountain Information Security Conference (president@...ver.issa.org)

December 9 (9 messages)

Re: seamless bait-and-switch (Michal Zalewski <lcamtuf@...edump.cx>)
DC4420 - London DEFCON - 13 December 2011 (Major Malfunction <majormal@...ate-radio.org>)
AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings ("Asterisk Security Team" <security@...erisk.org>)
AST-2011-014: Remote crash possibility with SIP and the “automon” feature enabled ("Asterisk Security Team" <security@...erisk.org>)
CA20111208-01: Security Notice for CA SiteMinder ("Williams, James K" <James.Williams@...com>)
[SignalSEC Labs]: HTC Touch2 T3333 Video Player Memory Corruption (signaladvisory@...il.com)
*CLOSING IN 5 DAYS * Re: AppSec DC 2012 - Call for Trainers (AppSec DC <info@...secdc.org>)
the week of silly PoCs continues: data://www.mybank.com/ (Michal Zalewski <lcamtuf@...edump.cx>)
Re: seamless bait-and-switch (Jann Horn <jannhorn@...glemail.com>)

December 12 (12 messages)

[SECURITY] [DSA 2362-1] acpid security update (Moritz Muehlenhoff <jmm@...ian.org>)
Call for Papers -YSTS 6 - Security Conference, Brazil (Luiz Eduardo <le@...s.org>)
zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal (security@...oserve.de)
[ MDVSA-2011:183 ] pidgin (security@...driva.com)
Introduction to R-sequence public key cryptography attack ("Michal Bucko" <michal.bucko@...ytt.com>)
OSI Security: Squiz Matrix - User Account Enumeration (Troy Rose <troy@...security.com.au>)
WordPress flash-album-gallery Plugin 'flagshow.php' Cross Site Scripting Vulnerability (Amir@...st.ir)
Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2011:184 ] krb5 (security@...driva.com)
Re: seamless bait-and-switch (Charles Morris <cmorris@...odu.edu>)
Re: [Full-disclosure] silly PoCs continue: X-Frame-Options give you less than expected (Michal Zalewski <lcamtuf@...edump.cx>)
Re: the week of silly PoCs continues: data://www.mybank.com/ (nothanks@...pback.securityfocus.com)

December 13 (8 messages)

[ MDVSA-2011:185 ] libcap (security@...driva.com)
[ MDVSA-2011:186 ] nfs-utils (security@...driva.com)
ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA(r) Adaptive Authentication (On-Premis… (<Security_Alert@....com>)
Wordpress the-welcomizer plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
ZDI-11-347 : Microsoft Office Word Hidden Border Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-348 : HP OpenView NNM nnmRptConfig.exe nameParams Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

December 14 (12 messages)

Re: WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities (brian@...kawiki.org)
Citrix Receiver, XenDesktop "Pass-the-hash" Attack (vtek63@...il.com)
Multiple vulnerabilities in Browser CRM (advisory@...ridge.ch)
Re: Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities (support@...sa.com)
Re:Re: Introduction to R-sequence public key cryptography attack ("Michal Bucko" <michal.bucko@...ytt.com>)
[MATTA-2011-003] Restorepoint Remote root command execution vulnerability - CVE-2011-4201 CVE-2011-4202 (Tavaris Desamito <tavaris.desamito@...stmatta.com>)
Re: Re: WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities (n0b0d13s@...il.com)
0A29-11-3 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R1.9 (0a29 40 <0a2940@...il.com>)
0A29-11-4 : Privilege escalation vulnerabilities in Nagios XI installer < 2011R1.9 (0a29 40 <0a2940@...il.com>)
PHP-SCMS 1.6.8 "lang" parameter XSS vulnerability (sschurtz@...nline.de)
ESA-2011-039: RSA(r), The Security Division of EMC, announces security fixes and improvements for RSASecurID(r) Software Token 4.1 for… (<Security_Alert@....com>)
HTML 5 Security Report ("Ivan Buetler" <ivan.buetler@...c.ch>)

December 15 (11 messages)

NGS00138 Patch Notification: Websense Triton 7.6 - Authentication bypass in report management UI ("Research@...Secure" <research@...secure.com>)
[ MDVSA-2011:187 ] php-pear (security@...driva.com)
NGS00137 Patch Notification: Websense Triton 7.6 - Reflected XSS in report management UI ("Research@...Secure" <research@...secure.com>)
NGS00140 Patch Notification: Websense Triton 7.6 - Unauthenticated remote command execution as SYSTEM ("Research@...Secure" <research@...secure.com>)
NGS00141 Patch Notification: Websense Triton 7.6 - Stored XSS in report management UI ("Research@...Secure" <research@...secure.com>)
[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2011-006] Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
New IETF I-D on "Stable Privacy Addresses" (Fernando Gont <fgont@...networks.com>)
New IETF I-Ds on Fragmentation-related security issues (Fernando Gont <fgont@...networks.com>)
Seotoaster SQL-Injection Admin Login Bypass (security@...oserve.de)
[ MDVSA-2011:188 ] libxml2 (security@...driva.com)

December 16 (5 messages)

<BASE> tag used for hijacking external resources (XSS) (Bouke van Laethem <vanlaethem@...il.com>)
[security bulletin] HPSBUX02719 SSRT100658 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02729 SSRT100687 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2011:189 ] jasper (security@...driva.com)
Re: <BASE> tag used for hijacking external resources (XSS) (Jann Horn <jannhorn@...glemail.com>)

December 19 (29 messages)

silly PoCs continue: X-Frame-Options give you less than expected (Michal Zalewski <lcamtuf@...edump.cx>)
VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Microsoft Windows Media Player DVR-MS Buffer Overflow Vulnerability (MS11-092) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Flash Player "SAlign" Memory Corruption Vulnerability (CVE-2011-2459) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Microsoft Windows "datime.dll" Remote Code Execution Vulnerability (MS11-090) ("VUPEN Security Research" <advisories@...en.com>)
[SECURITY] [DSA 2363-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: <BASE> tag used for hijacking external resources (XSS) (Mario Vilas <mvilas@...il.com>)
Re: <BASE> tag used for hijacking external resources (XSS) (Bouke van Laethem <vanlaethem@...il.com>)
Re: <BASE> tag used for hijacking external resources (XSS) (Mario Vilas <mvilas@...il.com>)
Re: <BASE> tag used for hijacking external resources (XSS) (Bouke van Laethem <vanlaethem@...il.com>)
Re: <BASE> tag used for hijacking external resources (XSS) (Mario Vilas <mvilas@...il.com>)
Re: RFI in JAF CMS (Henri Salo <henri@...v.fi>)
Re: WordPress flash-album-gallery Plugin 'flagshow.php' Cross Site Scripting Vulnerability (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2364-1] xorg security update (Moritz Muehlenhoff <jmm@...ian.org>)
[Suspected Spam] Content Papst CMS v2011.2 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
appRain CMF v0.1.5 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
SASHA v0.2.0 Mutiple XSS (tom <tom@...net.com>)
PHP Booking Calendar 10e XSS (tom <tom@...net.com>)
[SECURITY] [DSA 2365-1] dtc security update (Moritz Muehlenhoff <jmm@...ian.org>)
IFIP NTMS'2012 - Deadline Extended to 12 January 2012 (publicity@...s-conf.org)
[ MDVSA-2011:190 ] libarchive (security@...driva.com)
[ MDVSA-2011:191 ] libarchive (security@...driva.com)
SEC Consult SA-20111219-0 :: Client-side remote arbitrary file upload in SecCommerce SecSigner Java Applet (SEC Consult Vulnerability Lab <research@...-consult…)
SEC Consult SA-20111219-1 :: Multiple vulnerabilities in WhatsApp (SEC Consult Vulnerability Lab <research@...-consult.com>)
Novell Sentinel Log Manager <=1.2.0.1 Path Traversal (Andrea Fabrizi <andrea.fabrizi@...il.com>)
Syhunt: Time-Based Blind NoSQL Injection ("Felipe M. Aragon" <felipe@...unt.com>)
[SECURITY] [DSA 2366-1] mediawiki security update (Jonathan Wiltshire <jmw@...ian.org>)
Slides of our "Hacking IPv6 Networks" training at DEEPSEC 2011 (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2367-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)

December 20 (6 messages)

ZDI-11-350 : Enterasys NetSight nssyslogd PRI Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBUX02697 SSRT100591 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
Re: SASHA v0.2.0 Mutiple XSS (Henri Salo <henri@...v.fi>)
Multiple vulnerabilities in PHPShop CMS Free (advisory@...ridge.ch)
Tiki Wiki CMS Groupware Stored Cross-Site-Scripting (security@...oserve.de)
Re: ESA-2011-039: RSA(r), The Security Division of EMC, announces security fixes and improvements for RSASecurID(r) Software Token 4.1 f… (security_alert@....com)

December 21 (7 messages)

TWSL2011-018: Authentication Bypass Vulnerability in IBM TS3100/TS3200 Web User Interface (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
post-XSS landscape (Michal Zalewski <lcamtuf@...edump.cx>)
[SECURITY] [DSA 2381-] lighttpd security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2368-1] lighttpd security update (Nico Golde <nion@...ian.org>)
RE: RFI in JAF CMS (Frédéric BOURLA <frederic.bourla@...ridge.ch>)
Multiple vulnerabilities in OBM (advisory@...ridge.ch)
Multiple vulnerabilities in epesi BIM (advisory@...ridge.ch)

December 23 (10 messages)

[SECURITY] [DSA 2369-1] libsoup2.4 security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2370-1] unbound security update (Florian Weimer <fw@...eb.enyo.de>)
Exploit for Asterisk Security Advisory AST-2011-013 (Ben Williams <ben+bugtraq@...hu.net.nz>)
[MATTA-2011-001] pfSense x509 Insecure Certificate Creation (Florent Daigniere <florent.daigniere@...stmatta.com>)
ZDI-11-351 : WellinTech KingView HistoryServer.exe Opcode 3 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-352 : HP Managed Printing Administration jobAcct Multiple Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-353 : HP Managed Printing Administration MPAUploader.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TWSL2011-019: Cross-Site Scripting Vulnerability in phpMyAdmin (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection (n0b0d13s@...il.com)

December 27 (16 messages)

Xmas 2011 Security Puzzle ("Ivan Buetler" <ivan.buetler@...c.ch>)
FreeBSD Security Advisory FreeBSD-SA-11:06.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:07.chroot (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:08.telnetd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:09.pam_ssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-11:10.pam (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Merry Christmas from the FreeBSD Security Team (FreeBSD Security Officer <cperciva@...ebsd.org>)
[ MDVSA-2011:192 ] mozilla (security@...driva.com)
Lighttpd Proof of Concept code for CVE-2011-4362 (pi3@...ec.pl)
[SECURITY] [DSA 2372-1] heimdal security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2373-1] inetutils security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2374-1] openswan security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2375-1] krb5. krb5-appl security update (Florian Weimer <fw@...eb.enyo.de>)
MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862] (Tom Yu <tlyu@....EDU>)
[ MDVSA-2011:193 ] squid (security@...driva.com)
[ MDVSA-2011:194 ] icu (security@...driva.com)

December 29 (10 messages)

[security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulner… (security-alert@...com)
[security bulletin] HPSBPI02728 SSRT100692 rev.2 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default (security-alert@...com)
[security bulletin] HPSBMU02731 SSRT100518 rev.1 - HP Database Archiving Software, Remote Execution of Arbitrary Code (security-alert@...com)
[ MDVSA-2011:195 ] krb5-appl (security@...driva.com)
[ MDVSA-2011:196 ] ipmitool (security@...driva.com)
Re: Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities (Henri Salo <henri@...v.fi>)
n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (<security@...ns.com>)
[oCERT-2011-003] multiple implementations denial-of-service via hash algorithm collision (Andrea Barisani <lcars@...rt.org>)
Winn Guestbook v2.4.8c Stored XSS (tom <tom@...net.com>)
Security advisory for Bugzilla 4.2rc1, 4.0.3, 3.6.7 and 3.4.13 (LpSolit@...il.com)

December 30 (4 messages)

[SECURITY] [DSA 2376-1] ipmitool security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2263-2] movabletype-opensource security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2011:197 ] php (security@...driva.com)
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416 (SEC Consult Vulnerability Lab <research@...-consult.com…)

188 messages

Powered by blists - more mailing lists