bugtraq mailing list - 2012/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 6	² 7	³ 8	⁴	⁵
⁶ 4	⁷ 8	⁸ 16	⁹ 4	¹⁰ 6	¹¹	¹²
¹³ 13	¹⁴ 1	¹⁵ 8	¹⁶ 6	¹⁷ 9	¹⁸	¹⁹
²⁰ 11	²¹ 9	²² 6	²³	²⁴ 30	²⁵	²⁶
²⁷ 20	²⁸ 10	²⁹ 10

Messages by day:

February 1 (6 messages)

[Announce] Apache HTTP Server 2.2.22 Released ("William A. Rowe Jr." <wrowe@...che.org>)
802.1X password exploit on many HTC Android devices (Bret Jordan <jordan2175@...il.com>)
Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14 (LpSolit@...il.com)
Multiple vulnerabilities in OpenEMR (advisory@...ridge.ch)
ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability (<Security_Alert@....com>)
XSS phpLDAPadmin: 1.2.0.5 (Debian package) and 1.2.2 (sourceforge) (andsarmiento@...il.com)

February 2 (7 messages)

[ MDVSA-2012:012 ] apache (security@...driva.com)
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Call For Paper (asemailing@...il.com)
Fwd: RA-Guard: Advice on the implementation (feedback requested) (Fernando Gont <fgont@...networks.com>)
[CAL-2012-0004] opera array integer overflow (Code Audit Labs <vulnhunt@...il.com>)
[security bulletin] HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Execution of Arbitrary Code (security-alert@...com)
GLSA (Gentoo Linux Security Advisory) publication changes (Alex Legler <a3li@...too.org>)

February 3 (8 messages)

[security bulletin] HPSBGN02740 SSRT100741 rev.1 - HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Se… (security-alert@...com)
[SECURITY] [DSA 2401-1] tomcat6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2400-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2402-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2403-1] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
RFC 6528 on Defending against Sequence Number Attacks (Fernando Gont <fgont@...networks.com>)
ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability (<Security_Alert@....com>)
[ MDVSA-2012:013 ] mozilla (security@...driva.com)

February 6 (4 messages)

[SECURITY] [DSA 2384-2] cacti regression (Luk Claes <luk@...ian.org>)
[SECURITY] [DSA 2404-1] xen-qemu-dm-4.0 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2405-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)
Mathopd - Directory Traversal Vulnerability (Mateusz Goik <mateusz.goik@...antsoft.pl>)

February 7 (8 messages)

[ MDVSA-2012:014 ] glpi (security@...driva.com)
[SECURITY] [DSA 2403-2] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
SimpleGroupware 0.742 Cross-Site-Scripting vulnerability (security@...oserve.de)
DEF CON 20 Capture the Flag Announcement ("The Dark Tangent" <dtangent@...con.org>)
CVE-2012-0803: Apache CXF does not validate UsernameToken policies correctly (Colm O hEigeartaigh <coheigea@...che.org>)
SQL Injection Vulnerability in Batavi 1.1.2 (Netsparker Advisories <advisories@...itunasecurity.com>)
[security bulletin] HPSBMU02736 SSRT100699 rev.2 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Una… (security-alert@...com)
eFronts Community++ v3.6.10 - Cross Site Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)

February 8 (16 messages)

Unauthenticated remote code execution on D-Link ShareCenter products (roberto.paleari@...ze.net)
[security bulletin] HPSBUX02741 SSRT100728 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Rest… (security-alert@...com)
Cyberoam Central Console v2.00.2 - File Include Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Multiple vulnerabilities in ZENphoto (advisory@...ridge.ch)
[security bulletin] HPSBMU02742 SSRT100740 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Disclosu… (security-alert@...com)
ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-022 : Total Defense Suite UNC Management Console ExportReport SQL Injection Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-023 : Total Defense Suite UNC Management Web Service Database Credentials Disclosure Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-024 : Total Defense Suite UNC Management Web Service uncsp_ViewReportsHomepage SQL Injection Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoin…)
ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-026 : IBM SPSS ExportHTML.dll ActiveX Control Render Method Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-028 : IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoi…)
ZDI-12-029 : IBM Rational Rhapsody BBFlashBack.Recorder.1 InsertMarker Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-030 : IBM Rational Rhapsody BBFlashBack.Recorder.1 TestCompatibilityRecordMode Remote Code Execution Vulnerabili… (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-12-031 : Novell iPrint Server attributes-natural-language Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

February 9 (4 messages)

[SECURITY] [DSA 2407-1] cvs security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:015 ] wireshark (security@...driva.com)
[SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability (Leonardo Uribe <lu4242@...che.org>)
[Suspected Spam] eFront Community++ v3.6.10 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)

February 10 (6 messages)

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Kloxo LxCenter Server CP v6.1.10 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2012:016 ] glpi (security@...driva.com)

February 13 (13 messages)

[slackware-security] vsftpd (SSA:2012-041-05) (Slackware Security Team <security@...ckware.com>)
[slackware-security] glibc (SSA:2012-041-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] proftpd (SSA:2012-041-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] httpd (SSA:2012-041-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2012-041-02) (Slackware Security Team <security@...ckware.com>)
OWASP AppSec USA 2011 Video & Slides Posted (adam@...otheory.com)
Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[Suspected Spam] eFront Community++ v3.6.10 - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
sqlinjection bug in nova cms (rezahmail@...il.com)
[ MDVSA-2012:017 ] firefox (security@...driva.com)
[ MDVSA-2012:018 ] mozilla-thunderbird (security@...driva.com)
[Announcement] ClubHack Mag - Call for Articles (abhijeet@...bhack.com)
[SECURITY] [DSA 2408-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 14 (1 message)

[ MDVSA-2012:019 ] apr (security@...driva.com)

February 15 (8 messages)

[CAL-2011-0055]Adobe Shockwave Player Parsing block_cout memory corruption vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-2011-0071]Adobe Shockwave Player Parsing cupt atom heap overflow (Code Audit Labs <vulnhunt@...il.com>)
FreePBX Remote Exploit (dougw@...uxsecurityblog.com)
[ MDVSA-2012:020 ] phpldapadmin (security@...driva.com)
Multiple vulnerabilities in 11in1 (advisory@...ridge.ch)
Multiple vulnerabilities in LEPTON (advisory@...ridge.ch)
[SECURITY] [DSA 2409-1] devscripts security update (Raphael Geissert <geissert@...ian.org>)
TELUS Security Labs VR - Oracle Java Web Start Command Argument Injection Remote Code Execution (noreply@...us.com)

February 16 (6 messages)

Cisco Security Advisory: Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
[SECURITY] [DSA 2410-1] libpng security update (Moritz Muehlenhoff <jmm@...ian.org>)
2012 Honeynet Project Security Workshop (Guillaume Arcas <guillaume.arcas@...eynet.org>)
[PRE-SA-2012-01] Denial-of-service vulnerability in java.util.zip (Timo Warns <warns@...-sense.de>)
Re: sqlinjection bug in nova cms (Henri Salo <henri@...v.fi>)
Hackito Ergo sum // HES2012 Final CFP // Call for Hackers (Jonathan Brossard <endrazine@...il.com>)

February 17 (9 messages)

Pandora FMS v4.0.1 - Local File Include Vulnerability + VD Session ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[Spam] Skype v5.6.59.x - Memory Corruption Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
0-DAY XSS of cforms II is now fixed after a year and four months (was Re: cforms WordPress Plugin Cross Site Scripting Vulne… (Kousuke Ebihara <kousuke@...k.org>)
Re: Fwd: 0-DAY XSS of cforms II is now fixed after a year and four months (was Re: cforms WordPress Plugin Cross Site S… ("Rodrigo Rubira Branco \(BSDaemon\)" <r…)
[security bulletin] HPSBPI02728 SSRT100692 rev.4 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default (security-alert@...com)
IETF I-D: Security and Interoperability Implications of Oversized IPv6 Header Chains (Fernando Gont <fgont@...networks.com>)
PHP 5.2.x Remote Code Execution Vulnerability (Worawit Wang <worawita@...il.com>)
Puppet Dashboard insecure by default ("Schweiss, Chip" <chip@...ovates.com>)
[ MDVSA-2012:021 ] java-1.6.0-openjdk (security@...driva.com)

February 20 (11 messages)

Downloads Folder: A Binary Planting Minefield ("ACROS Security Lists" <lists@...os.si>)
WebsiteBaker 2.8.2 SP2 HTTP-Referer XSS vulnerability (sschurtz@...ksecurity.de)
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability [Updated] (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] [DSA 2411-1] mumble security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2412-1] libvorbis security update (Moritz Muehlenhoff <jmm@...ian.org>)
SEC Consult SA-20120220-1 :: Multiple Vulnerabilities in ELBA5 (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20120220-0 :: Multiple critical vulnerabilities in VOXTRONIC voxlog professional (SEC Consult Vulnerability Lab <research@...-consult.com>)
SQL Injection Vulnerabilities in TestLink (jnatal <jnatal@...t.inteco.es>)
DC4420 - London DEFCON - February meet - Tuesday February 21st 2012 (Major Malfunction <majormal@...ate-radio.org>)
OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)

February 21 (9 messages)

[SECURITY] [DSA 2413-1] libarchive security update (Luk Claes <luk@...ian.org>)
Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (muuratsalo experimental hack lab <muuratsalo@...il.com>)
F*EX <= 20100208 Cross Site Scripting Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
F*EX 20111129-2 Cross Site Scripting Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Re: [oss-security] OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: [oss-security] Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements (Fernando Gont <fgont@...networks.com>)
Mercurycom MR804 Router - Multiple HTTP Header Fields Denial Of Service Vulnerability (demonalex@....com)

February 22 (6 messages)

[SECURITY] [DSA 2414-1] fex security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2415-1] libmodplug security update (Nico Golde <nion@...ian.org>)
Multiple security vulnerabilities in Tremulous 1.1.0, GPP1, and unofficial MG and TJW engines (Simon McVittie <smcv@...ian.org>)
[ MDVSA-2012:022 ] libpng (security@...driva.com)
Multiple XSS in Chyrp (advisory@...ridge.ch)
[ MDVSA-2012:023 ] libxml2 (security@...driva.com)

February 24 (30 messages)

Mobile Mp3 Search Engine HTTP Response Splitting (CorryL <corryl80@...il.com>)
ZDI-12-032 : Oracle Java Runtime Environment readMabCurveData Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
ZDI-12-033 : ABB WebWare RobNetScanHost.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-034 : Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-035 : Microsoft Internet Explorer CDispNode t:MEDIA Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-036 : Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-037 : Oracle Java Web Start JNLP Double Quote Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-038 : Oracle Java JavaFX Arbitrary Argument Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-039 : Oracle Java Web Start java-vm-args Command Argument Injection Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-12-01 : Oracle Java True Type Font IDEF Opcode Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2417-1] libxml2 security update (Nico Golde <nico@...lde.de>)
NGS00120 Patch Notification: BlackBerry PlayBook Samba Remote Code Execution ("Research@...Secure" <research@...secure.com>)
YVS Image Gallery Sql injection (CorryL <corryl80@...il.com>)
Security advisory for Bugzilla 4.2 and 4.0.5 (LpSolit@...il.com)
Cisco Security Advisory: Cisco Small Business SRP 500 Series Multiple Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability (demonalex@....com)
[SECURITY] [DSA 2416-1] notmuch security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2012:022 ] mozilla (security@...driva.com)
[security bulletin] HPSBUX02737 SSRT100747 rev.2 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBMU02739 SSRT100280 rev.2 - HP Data Protector Storage Media Operations (SMO), Remote Execution of Arbitrary Code (security-alert@...com)
[Onapsis Security Advisory 2012-01] Oracle JD Edwards JDENET Arbitrary File Write (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-02] Oracle JD Edwards Security Kernel Remote Password Disclosure (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-03] Oracle JD Edwards SawKernel Arbitrary File Read (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-04] Oracle JD Edwards SawKernel GET_INI Information Disclosure (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-05] Oracle JD Edwards JDENET Multiple Information Disclosure (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-06] Oracle JD Edwards JDENET Large Packets Denial of Service (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-07] Oracle JD Edwards SawKernel SET_INI Configuration Modification (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2012-08] Oracle JD Edwards Security Kernel Information Disclosure (Onapsis Research Labs <research@...psis.com>)
PHP Gift Registry 1.5.5 SQL Injection (Thomas Richards <g13net@...il.com>)
Dropbear SSH server use-after-free vulnerability (Danny Fullerton <northox@...tor.org>)

February 27 (20 messages)

TWSL2012-003: Cross-Site Scripting Vulnerability in Movable Type Publishing Platform (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Kongreg8 1.7.3 Mutiple XSS (Thomas Richards <g13net@...il.com>)
Syhunt: Google V8 - Server-Side JS Injection in vulnerable web apps ("Felipe M. Aragon" <felipe@...unt.com>)
NGS00237 Patch Notification: Samba Andx request Remote Code Execution ("Research@...Secure" <research@...secure.com>)
[SECURITY] [DSA 2414-2] fex regression (Nico Golde <nion@...ian.org>)
pidgin OTR information leakage (Dimitris Glynos <dimitris@...sus-labs.com>)
DeepSec "Sector v6" - Call for Papers (DeepSec Conference <deepsec@...psec.net>)
FrameJammer DOM based XSS (mkey@...email.hu)
Case YVS Image Gallery (Henri Salo <henri@...v.fi>)
[ MDVSA-2012:023 ] libvpx (security@...driva.com)
Socusoft Photo 2 Video v8.05 - Buffer Overflow Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
OSQA CMS v3b - Multiple Persistent Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Wolf CMS v0.7.5 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: pidgin OTR information leakage (Jann Horn <jannhorn@...glemail.com>)
[SECURITY] [DSA 2418-1] postgresql-8.4 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities (regis@...ibarr.fr)
Recon 2012 - Call For Papers - June 14-16, 2012 - Montreal, Quebec (cfp2012@...on.cx)
Re: [Full-disclosure] pidgin OTR information leakage (Michele Orru <antisnatchor@...il.com>)
[SECURITY] [DSA 2419-1] puppet security update (Florian Weimer <fw@...eb.enyo.de>)
Re: [Full-disclosure] pidgin OTR information leakage (Rich Pieri <ratinox@....EDU>)

February 28 (10 messages)

Re: [Full-disclosure] pidgin OTR information leakage (Jeffrey Walton <noloader@...il.com>)
Re: [oss-security] Case YVS Image Gallery (Henri Salo <henri@...v.fi>)
Re: [Full-disclosure] pidgin OTR information leakage (Dimitris Glynos <dimitris@...sus-labs.com>)
Re: [Full-disclosure] pidgin OTR information leakage (Dimitris Glynos <dimitris@...sus.gr>)
[ MDVSA-2012:022-1 ] mozilla (security@...driva.com)
[ MDVSA-2012:023-1 ] libvpx (security@...driva.com)
Reliable Windows 7 Exploitation: A Case Study (Ivan Fratric <ifsecure@...il.com>)
ImgPals Photo Host Version 1.0 Admin Account Disactivation (CorryL <corryl80@...il.com>)
[ MDVSA-2012:025 ] samba (security@...driva.com)
[SECURITY] [DSA 2420-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)

February 29 (10 messages)

Multiple XSS in Dotclear (advisory@...ridge.ch)
[ MDVSA-2012:026 ] postgresql (security@...driva.com)
[ MDVSA-2012:027 ] postgresql8.3 (security@...driva.com)
Cisco Security Advisory: Cisco Cius Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Skinny Client Control Protocol Vulnerabilities (Cisco Systems Product Security Incident Response T…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unity Connection (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco TelePresence Video Communication Server Session Initiation Protocol Denial of Service Vu… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 2421-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2422-1] file security update (Florian Weimer <fw@...eb.enyo.de>)

192 messages

Powered by blists - more mailing lists