bugtraq mailing list - 2012/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	² 8	³ 10	⁴ 3	⁵	⁶
⁷	⁸ 10	⁹ 3	¹⁰ 18	¹¹ 9	¹²	¹³
¹⁴ 4	¹⁵ 16	¹⁶ 10	¹⁷ 7	¹⁸ 8	¹⁹	²⁰
²¹	²² 10	²³	²⁴ 11	²⁵ 3	²⁶	²⁷
²⁸ 4	²⁹ 3	³⁰ 10	³¹ 7

Messages by day:

May 1 (3 messages)

Call for Paper: 3rd Workshop on Security and Privacy in Social Networks (asemailing@...il.com)
Corrections about Squid/McAfee URL Filtering Bypass (Gabriel Menezes Nunes <gab.mnunes@...il.com>)
[ MDVSA-2012:067 ] samba (security@...driva.com)

May 2 (8 messages)

Re: Wordpress WPsc-MijnPress plugin Cross-Site Scripting Vulnerabilities (g@...ndi.si)
LAN Messenger v1.2.28 - Denial of Service Vulnerability (Research <research@...nerability-lab.com>)
[security bulletin] HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery (CSR… (security-alert@...com)
[security bulletin] HPSBMU02771 SSRT100558 rev.1 - HP SNMP Agents for Linux, Remote Cross Site Scripting (XSS), URL Redirection (security-alert@...com)
[security bulletin] HPSBMU02772 SSRT100603 rev.1 - HP System Health Application and Command Line Utilities for Linux, Remote Execution of … (security-alert@...com)
[CVE-2012-1002] OpenConf <= 4.11 (author/edit.php) Blind SQL Injection Vulnerability (n0b0d13s@...il.com)
[SECURITY] [DSA 2463-1] samba security update (Moritz Muehlenhoff <jmm@...ian.org>)
Local File Inclusion in PluXml (advisory@...ridge.com)

May 3 (10 messages)

[SECURITY] [DSA 2464-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues (VMware Security Team <security@...are.com>)
FreeBSD Security Advisory FreeBSD-SA-12:01.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Fortinet FortiWeb Web Application Firewall Policy Bypass (Geffrey Velasquez <geffrey@...il.com>)
Firefox security bug (proxy-bypass) in current Tor BBs (oLhrrBHQeTr0EmbKwBXa@...e-mail.net)
LACSEC 2012 Agenda (May 6-11, 2012, Quito, Ecuador) (Fernando Gont <fgont@...networks.com>)
Advisory: Android SQLite Journal Information Disclosure (CVE-2011-3901) (Roee Hay <roeeh@...ibm.com>)
SQL Injection and other issues in Micro Technology Services, Inc. Lynx (bede@...fus.net)
[waraxe-2012-SA#088] - Reflected XSS in Joomla 2.5.4 admin sysinfo page (come2waraxe@...oo.com)
[waraxe-2012-SA#087] - Reflected XSS in Joomla 1.5.26 "ja_purity" template (come2waraxe@...oo.com)

May 4 (3 messages)

Re: DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass (brian.radovich@...arwinds.com)
VMware Backdoor Response Uninitialized Memory Potential VM Break (ds.adv.pub@...il.com)
[SECURITY] [DSA 2462-2] imagemagick regression update (Moritz Muehlenhoff <jmm@...ian.org>)

May 8 (10 messages)

Format Factory v2.95 - Buffer Overflow Vulnerabilities (Research <research@...nerability-lab.com>)
[ MDVSA-2012:069 ] cifs-utils (security@...driva.com)
[ MDVSA-2012:070 ] samba (security@...driva.com)
[SECURITY] [DSA 2459-2] quagga security update (Florian Weimer <fw@...eb.enyo.de>)
Format Factory v2.95 - Buffer Overflow Vulnerabilities (Research <research@...nerability-lab.com>)
VMware Backdoor ghi.guest.trashFolder.state Uninitialized Memory Potential VM Break (ds.adv.pub@...il.com)
APPLE-SA-2012-05-07-1 iOS 5.1.1 Software Update (Apple Product Security <product-security-noreply@...le.com>)
Fwd: [cryptography] Apple Legacy filevault barn door... (Jeffrey Walton <noloader@...il.com>)
Ubuntu, Linux Mint, and the Guest Account (Jeffrey Walton <noloader@...il.com>)
Re: [Full-disclosure] Ubuntu, Linux Mint, and the Guest Account (Marc Deslauriers <marc.deslauriers@...onical.com>)

May 9 (3 messages)

[security bulletin] HPSBMU02775 SSRT100853 rev.1 - HP Performance Insight for Networks Running on HP-UX, Linux, Solaris, and Windows, Remo… (security-alert@...com)
rssh security announcement (Derek Martin <code@...zashack.org>)
Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability (security@...amis.de)

May 10 (18 messages)

Re: rssh security announcement (Derek Martin <code@...zashack.org>)
[SECURITY] [DSA 2464-2] icedove regression update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBMU02775 SSRT100853 rev.2 - HP Performance Insight for Networks Running on HP-UX, Linux, Solaris, and Windows, Remo… (security-alert@...com)
Adobe Shockwave Player Remote Code Execution (CVE-2012-2029) ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
Adobe Shockwave Player Remote Code Execution (CVE-2012-2030) ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
Adobe Shockwave Player Remote Code Execution (CVE-2012-2031) ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
[SECURITY] [DSA 2465-1] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2466-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)
Re: rssh security announcement (Derek Martin <code@...zashack.org>)
[SECURITY] [DSA 2467-1] mahara security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2422-2] file regression fix (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2468-1] libjakarta-poi-java security update (Florian Weimer <fw@...eb.enyo.de>)
APPLE-SA-2012-05-09-1 OS X Lion v10.7.4 and Security Update 2012-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2012-05-09-2 Safari 5.1.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Drupal 7.14 <= Full Path Disclosure Vulnerability (pereira@...biz.de)
Drupal 7.14 <= Full Path Disclosure Vulnerability (Update) (pereira@...biz.de)
[ MDVSA-2012:068-1 ] php (security@...driva.com)
Re: Drupal 7.14 <= Full Path Disclosure Vulnerability (pereira@...biz.de)

May 11 (9 messages)

[ MDVSA-2012:071 ] php (security@...driva.com)
[ MDVSA-2012:072 ] roundcubemail (security@...driva.com)
[SECURITY] [DSA 2469-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
Adobe Photoshop CS5.1 U3D.8BI Library Collada Asset Elements Stack Based Buffer Overflow Vulnerability (nospam@...il.it)
ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities (<Security_Alert@....com>)
CORE-2012-0123 - SAP Netweaver Dispatcher Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Multiple vulnerabilities in OrangeHRM (advisory@...ridge.com)
Cross-Site Scripting (XSS) in Pivotx (advisory@...ridge.com)
t2'12: Call for Papers 2012 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)

May 14 (4 messages)

b2ePMS 1.0 Authentication Bypass Vulnerability (pereira@...biz.de)
[SECURITY] [DSA 2670-1] wordpress security update (Yves-Alexis Perez <corsac@...ian.org>)
Universal Reader Filename Denial Of Service Vulnerability (demonalex@....com)
Liferay users can assign themselves to organizations, leading to possible privilege escalation (Jelmer Kuperus <jelmer.advisories@...il.com>)

May 15 (16 messages)

[SECURITY] [DSA-2471-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2457-2] New icedove/iceweasel packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:073 ] openssl (security@...driva.com)
[ MDVSA-2012:074 ] ffmpeg (security@...driva.com)
[ MDVSA-2012:076 ] ffmpeg (security@...driva.com)
Re: rssh security announcement (Derek Martin <code@...zashack.org>)
Trigerring Java code from a SVG image (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
ICACLS.EXE ignores and destroys SE_DACL_PROTECTED/SE_SACL_PROTECTED ("Stefan Kanthak" <stefan.kanthak@...go.de>)
NETGEAR Exposure of Sensitive Information - Security Advisory - SOS-12-005 ("Lists" <lists@...seofsecurity.com>)
APPLE-SA-2012-05-14-1 Flashback Removal Security Update (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2012-05-14-2 Leopard Security Update 2012-003 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Multiple xss issues in Liferay (Jelmer Kuperus <jelmer.advisories@...il.com>)
Guests can view names and emailadresses of all Liferay users in liferay 6.1 (Jelmer Kuperus <jelmer.advisories@...il.com>)
Liferay 6.1 can be compromised without having an account on the portal (Jelmer Kuperus <jelmer.advisories@...il.com>)
[ MDVSA-2012:075 ] ffmpeg (security@...driva.com)
Liferay 6.1 json webservices are subject to cross-site request forgery attacks (Jelmer Kuperus <jelmer.advisories@...il.com>)

May 16 (10 messages)

APPLE-SA-2012-05-15-1 QuickTime 7.7.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Apple Quicktime Memory Corruption (CVE-2012-0671) ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
[SECURITY] [DSA 2472-1] gridengine security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Trigerring Java code from a SVG image (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object (Rob Weir <robweir@...che.org>)
CVE-2012-2149 OpenOffice.org memory overwrite vulnerability (Rob Weir <robweir@...che.org>)
CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 (Rob Weir <robweir@...che.org>)
The story of the Linux kernel 3.x... (pi3@....com.pl)
[PRE-SA-2012-03] Linux kernel: Buffer overflow in HFS plus filesystem (Timo Warns <warns@...-sense.de>)
FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability (demonalex@....com)

May 17 (7 messages)

[SECURITY] [DSA 2473-1] openoffice.org security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:077 ] imagemagick (security@...driva.com)
[ MDVSA-2012:078 ] imagemagick (security@...driva.com)
[security bulletin] HPSBUX02777 SSRT100854 rev.1 - HP-UX Running Java JRE and JDK, Remote Denial (security-alert@...com)
[security bulletin] HPSBUX02782 SSRT100844 rev.1 - HP-UX Running OpenSSL, Remote Denial of (security-alert@...com)
DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection (ddivulnalert@...frontline.com)
[SECURITY] [DSA 2474-1] ikiwiki security update (Raphael Geissert <geissert@...ian.org>)

May 18 (8 messages)

Re: [oss-security] CVE Request: Planeshift buffer overflow (Kurt Seifried <kseifried@...hat.com>)
[security bulletin] HPSBOV02780 SSRT100766 rev.1 - HP OpenVMS ACMELOGIN, Local Unauthorized (security-alert@...com)
[SECURITY] [DSA 2475-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
Re: [oss-security] CVE Request: Planeshift buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: [oss-security] CVE Request: Planeshift buffer overflow (Kurt Seifried <kseifried@...hat.com>)
H2HC Brazil 9th Edition - Call for Papers ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
SEC Consult SA-20120518 :: Memory overwrite vulnerability in libwpd (OpenOffice.org) - CVE-2012-2149 (SEC Consult Vulnerability Lab <research@...-consult.com>)
New Open Source Web Application Vulnerability Scanner Available (webvulscan@...il.com)

May 22 (10 messages)

[ MDVSA-2012:079 ] sudo (security@...driva.com)
Call for Papers: The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012) (Call for papers <call.for.papers.is@...il.com…)
[SECURITY] [DSA 2476-1] pidgin-otr security update (Jonathan Wiltshire <jmw@...ian.org>)
Acuity CMS 2.6.x <= Path Traversal Arbitrary File Access (YGN Ethical Hacker Group <lists@...g.net>)
Acuity CMS 2.6.x <= Arbitrary File Upload (YGN Ethical Hacker Group <lists@...g.net>)
PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version (admin@...report.ir)
[SECURITY] [DSA 2477-1] sympa security update (Florian Weimer <fw@...eb.enyo.de>)
[Announcement] CHMag's Issue 28, May 2012 Released (abhijeet@...ag.in)
DC4420 - London DEFCON - May meet - Tuesday May 22nd 2012 (Major Malfunction <majormal@...ate-radio.org>)
Tftpd32 DHCP Server Denial Of Service Vulnerability (demonalex@....com)

May 24 (11 messages)

ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities (<Security_Alert@....com>)
IPv6 security: New IETF I-Ds, slideware and videos for recent presentations, trainings, etc... (Fernando Gont <fgont@...networks.com>)
[ MDVSA-2012:080 ] wireshark (security@...driva.com)
[SECURITY] [DSA 2478-1] sudo security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2479-1] libxml2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:081 ] firefox (security@...driva.com)
[SECURITY] [DSA 2480-1] request-tracker3.8 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple XSS in pragmaMx (advisory@...ridge.com)
Multiple vulnerabilities in Pligg CMS (advisory@...ridge.com)
Multiple vulnerabilities in LogAnalyzer (Filippo Cavallarin <filippo.cavallarin@...seq.it>)
[CVE-2012-2098] Apache Commons Compress and Apache Ant denial of service vulnerability (Stefan Bodewig <bodewig@...che.org>)

May 25 (3 messages)

GreHack 2012 - Call For Papers (Grenoble, France) (Fabien DUCHENE <f.duchene@...-online.fr>)
CFP: Hacktivity 2012, October 12-13, Budapest, Hungary (Attila Bartfai <attila.bartfai@...ktivity.com>)
Kingcopes AthCon 2012 Slides & Notes ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)

May 28 (4 messages)

Tftpd32 DNS Server Denial Of Service Vulnerability (demonalex@....com)
WinRadius Server Denial Of Service Vulnerability (demonalex@....com)
[SE-2011-01] Security of SAT TV set-to-boxes and DVB chipsets (details released) (Security Explorations <contact@...urity-explorations.com>)
[ MDVSA-2012:082 ] pidgin (security@...driva.com)

May 29 (3 messages)

[ MDVSA-2012:083 ] util-linux (security@...driva.com)
[ MDVSA-2012:084 ] ncpfs (security@...driva.com)
DDIVRT-2012-43 SCLIntra Enterprise SQL Injection and Authentication Bypass (ddivulnalert@...fronline.com)

May 30 (10 messages)

[SECURITY] [DSA 2480-2] request-tracker3.8 regression update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:085 ] tomcat5 (security@...driva.com)
Mapserver for Windows (MS4W) Remote Code Execution (bruk0ut.sec@...il.com)
AST-2012-007: Remote crash vulnerability in IAX2 channel driver. ("Asterisk Security Team" <security@...erisk.org>)
AST-2012-008: Skinny Channel Driver Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
Re: Progress Webspeed exploit for all releases (Eelko Neven <suresync@...il.com>)
2 Buffer Overflows in Wireless Manager Sony VAIO (advisory@...ridge.com)
FreeBSD Security Advisory FreeBSD-SA-12:01.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-12:02.crypt (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)

May 31 (7 messages)

things you can do with downloads (Michal Zalewski <lcamtuf@...edump.cx>)
[security bulletin] HPSBUX02784 SSRT100871 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
script-fu buffer overflow in GIMP 2.6 ("Joseph Sheridan" <joe@...ctionis.com>)
[ MDVSA-2012:086 ] acpid (security@...driva.com)
[security bulletin] HPSBMU02785 SSRT100526 rev.1 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)
OpenSSL 1.0.1 Buffer Overflow Vulnerability (chenz9187@...il.com)
[SECURITY] [DSA 2483-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)

157 messages

Powered by blists - more mailing lists