bugtraq mailing list - 2012/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 13	³ 5	⁴ 19	⁵ 4	⁶ 2	⁷	⁸
⁹ 11	¹⁰ 2	¹¹ 7	¹² 23	¹³ 5	¹⁴	¹⁵
¹⁶ 14	¹⁷ 11	¹⁸ 4	¹⁹ 6	²⁰	²¹	²²
²³ 8	²⁴ 4	²⁵ 5	²⁶ 9	²⁷ 3	²⁸	²⁹
³⁰ 16	³¹ 1

Messages by day:

July 2 (13 messages)

[SECURITY] [DSA 2505-1] zendframework security update (Florian Weimer <fw@...eb.enyo.de>)
Basilic RCE bug (m.razavi777@...il.com)
IBM Edge Components Caching Proxy XSS Followup (BugsNotHugs <bugsnothugs@...il.com>)
Sun iPlanet Error Page Link Injection (BugsNotHugs <bugsnothugs@...il.com>)
IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure (BugsNotHugs <bugsnothugs@...il.com>)
Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI (BugsNotHugs <bugsnothugs@...il.com>)
[ MDVSA-2012:096-1 ] python (security@...driva.com)
[security bulletin] HPSBMU02781 SSRT100617 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running Postgre… (security-alert@...com)
[security bulletin] HPSBMU02783 SSRT100806 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross S… (security-alert@...com)
NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection ("Research@...Secure" <research@...secure.com>)
NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection ("Research@...Secure" <research@...secure.com>)
NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS ("Research@...Secure" <research@...secure.com>)
NGS00162 Patch Notification: Symantec Message Filter Session Hijacking via session fixation ("Research@...Secure" <research@...secure.com>)

July 3 (5 messages)

Malicious Code Execution in PCI Expansion ROM ("Adam Behnke" <adam@...osecinstitute.com>)
[IA30] Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability (Inshell Security <info@...hell.net>)
[SECURITY] [DSA 2506-1] libapache-mod-security security update (Yves-Alexis Perez <corsac@...ian.org>)
Slideware of IPv6 hacking training (HIP 2012 edition), and future trainings (Portugal & Belgium) (Fernando Gont <fgont@...networks.com>)
[security bulletin] HPSBUX02795 SSRT100878 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)

July 4 (19 messages)

[ MDVSA-2012:101 ] libtiff (security@...driva.com)
[CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution (n0b0d13s@...il.com)
Cyberoam advisory (Ben Laurie <ben@...ks.org>)
From XSLT code execution to Meterpreter shells (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
plow 0.0.5 <= Buffer Overflow Vulnerability (pereira@...biz.de)
Forum Oxalis 0.1.2 <= SQL Injection Vulnerability (pereira@...biz.de)
Vulnerable Microsoft VC++ 2005 runtime libraries in "Microsoft Live Meeting 2007 Client" installed in private location ("Stefan Kanthak" <stefan.kanthak@...go.d…)
Blind SQL Injection in Webmatic (advisory@...ridge.com)
Just4meeting 3.0 - Lisbon/Portugal - 6 to 8 - July (Ralf Braga <ralfbraga@...il.com>)
Wordpress (editormonkey) Arbitrary File Upload Vulnerability (Amir@...st.ir)
[SECURITY] [DSA 2507-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
IIS Short File/Folder Name Disclosure by using tilde ~ character (bugreport@...uard.info)
.Net Framework Tilde Character DoS (bugreport@...uard.info)
.Net Framework Tilde Character DoS - Sorry, exploit-db link corrected (bugreport@...uard.info)
Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities (Research <research@...nerability-lab.com>)
Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
ESA-2012-026: RSA Access Manager Session Replay Vulnerability (Security_Alert@....com)

July 5 (4 messages)

CLscript CMS v3.0 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
ClubHack2012 CFP Open Now (abhijeet@...bhack.com)
IPv6 security tools released (Fernando Gont <fgont@...networks.com>)
[security bulletin] HPSBGN02750 SSRT100795 rev.1 - HP ProtectTools Enterprise Device Access Manager Running on Windows, Remote Execution o… (security-alert@...com)

July 6 (2 messages)

[ MDVSA-2012:102 ] krb5 (security@...driva.com)
Re: Basilic RCE bug (larry0@...com)

July 9 (11 messages)

[SECURITY] [DSA 2509-1] pidgin security update (Luciano Bello <luciano@...ian.org>)
AST-2012-010: Possible resource leak on uncompleted re-invite transactions ("Asterisk Security Team" <security@...erisk.org>)
AST-2012-011: Remote crash vulnerability in voice mail application ("Asterisk Security Team" <security@...erisk.org>)
[SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability (Bertrand Delacretaz <bdelacretaz@...che.org>)
BookNux 0.2 <= Multiple Vulnerabilities (pereira@...biz.de)
[CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability ("Aaron T. Myers" <atm@...udera.com>)
BookNux 0.2 <= Multiple Vulnerabilities (pereira@...biz.de)
Call for Papers: The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012) (Call for papers <call.for.papers.is@...il.com…)
Checkpoint Abra - Vulnerabilities (komarov@...up-ib.ru)
Re: plow 0.0.5 <= Buffer Overflow Vulnerability (Henri Salo <henri@...v.fi>)
GreHack 2012 - extended deadline CFP 15th August 2012 (Grenoble, France) (Fabien DUCHENE <f.duchene@...-online.fr>)

July 10 (2 messages)

[security bulletin] HPSBMU02796 SSRT100594 rev.1 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arb… (security-alert@...com)
Re: Re: plow 0.0.5 <= Buffer Overflow Vulnerability (pereira@...biz.de)

July 11 (7 messages)

Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability (mbsarwin@...gnset.com.sg)
Multiple Cross-Site Scripting (XSS) in Kajona (advisory@...ridge.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices (Cisco Systems Product Security Incident Response Team <psir…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability (<Security_Alert@....com>)

July 12 (23 messages)

ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities (<Security_Alert@....com>)
[ MDVSA-2012:103 ] automake (security@...driva.com)
[ MDVSA-2012:104 ] openjpeg (security@...driva.com)
[ MDVSA-2012:105 ] pidgin (security@...driva.com)
TP Link Gateway v3.12.4 - Multiple Web Vulnerabilities (Admin <admin@...nerability-lab.com>)
Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Funeral Script PHP - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities (Research <research@...nerability-lab.com>)
Reserve Logic v1.2 Booking CMS - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
ZDI-12-114 : HP OpenView Performance Agent coda.exe Opcode 0x34 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-115 : HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-116 : EMC AutoStart ftAgent Opcode 50 Subcode 04 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-117 : EMC AutoStart ftAgent Opcode 50 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-118: EMC AutoStart ftAgent Opcode 0x03 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-119: EMC AutoStart ftAgent Opcode 0x41 Subcode 0x00 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-120: EMC AutoStart ftAgent Opcode 85 Subcode 22 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-121: EMC AutoStart ftAgent Opcode 85 Subcode 01 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-122: EMC AutoStart ftAgent Opcode 65 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-123: EMC AutoStart ftAgent Opcode 50 Subcode 60 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-124: EMC AutoStart ftAgent Opcode 50 Subcode 42 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2511-1] puppet security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2512-1] mono security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 13 (5 messages)

security advisory: AirDroid 1.0.4 beta (Kathrin Schäberle <kschaeberle@...e-consulting.com>)
[SECURITY] [DSA 2510-1] extplorer security update (Luciano Bello <luciano@...ian.org>)
[ MDVSA-2012:106 ] libexif (security@...driva.com)
[ MDVSA-2012:107 ] exif (security@...driva.com)
[security bulletin] HPSBMU02796 SSRT100594 rev.2 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arb… (security-alert@...com)

July 16 (14 messages)

[slackware-security] pidgin (SSA:2012-195-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2012-195-01) (Slackware Security Team <security@...ckware.com>)
Google Chrome 19 metro_driver.dll mishandling (moshez@...secglobal.com)
Event Calendar PHP 1.2 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
VamCart v0.9 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
SMF Board v2.0.2 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability (Research <research@...nerability-lab.com>)
MGB OpenSource Guestbook 0.6.9.1 Multiple security vulnerabilities (sschurtz@...ksecurity.de)
WordPress Plugin 'Count Per Day' 3.1.1 Multiple Cross-site scripting vulnerabilities (sschurtz@...ksecurity.de)
CakePHP 2.x-2.2.0-RC2 XXE Injection (pawel.wylecial@...il.com)
libexif project security advisory July 12, 2012 (Dan Fandrich <dan@...eharvesters.com>)
[security bulletin] HPSBGN02787 SSRT100876 rev.1 - HP AssetManager, Remote Cross Site Scripting (XSS) and Unauthorized Data Modification (security-alert@...com)
0A29-12-2 :Metasploit 'pcap_log' plugin privilege escalation vulnerability (0a29 40 <0a2940@...il.com>)

July 17 (11 messages)

CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Re: [Full-disclosure] Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin ("Thor \(Hammer of God\)" <thor@...merofgod.com>)
DC4420 - London DEFCON - July meet - Tuesday July 17th 2012 (Major Malfunction <majormal@...ate-radio.org>)
AVAVoIP v1.5.12 - Multiple Web Vulnerabilities (Administrator <admin@...nerability-lab.com>)
KeyPass Password Safe v1.22 - Software Filter Vulnerability (Research <research@...nerability-lab.com>)
DomsHttpd 1.0 <= Remote Denial Of Service (pereira@...biz.de)
Secunia Research: Cisco Linksys PlayerPT ActiveX Control "SetSource()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[PT-2012-23] SQL Injection in Dr.Web Anti-virus (noreply@...ecurity.ru)
[security bulletin] HPSBMU02799 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.0x Running JDK for HP-UX, Linux, Solaris, and Windo… (security-alert@...com)
[security bulletin] HPSBMU02797 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.1x Running JDK for HP-UX, Linux, Solaris, and Windo… (security-alert@...com)

July 18 (4 messages)

[SECURITY] [DSA 2514-1] iceweasel security update (Nico Golde <nion@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2012-200-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2012-200-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2012-200-04) (Slackware Security Team <security@...ckware.com>)

July 19 (6 messages)

[slackware-security] libexif (SSA:2012-200-01) (Slackware Security Team <security@...ckware.com>)
ZDI-12-126 : (0 day) HP StorageWorks File Migration Agent RsaCIFS.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-127 : (0Day) HP StorageWorks File Migration Agent RsaFTP.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
GreHack 2012 - Call For Musicians/Artists/DJs application open till October 5th 2012 (Grenoble, France) (Fabien DUCHENE <f.duchene@...-online.fr>)
[SECURITY] [DSA 2515-1] nsd3 security update (Nico Golde <nion@...ian.org>)
[Announcement] ClubHack Magazine's July 2012 Issue Released (abhijeet@...ag.in)

July 23 (8 messages)

[ MDVSA-2012:108 ] php (security@...driva.com)
POC2012 Call for Paper (pocadm@...il.com)
NESSUS ANDROID APP - stores login info in plain text (securityfocus@...pam.jshipp.com)
CodeIgniter <= 2.1.1 xss_clean() Cross Site Scripting filter bypass (Krzysztof Kotowicz <kkotowicz@...il.com>)
Free Web App Security Challenges - Hackademics Project ("Ivan Buetler" <ivan.buetler@...c.ch>)
Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability (Amir@...st.ir)
[SECURITY] [DSA 2508-1] kfreebsd-8 security update (Yves-Alexis Perez <corsac@...ian.org>)
file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install. (larry0@...com)

July 24 (4 messages)

[ MDVSA-2012:109 ] libxslt (security@...driva.com)
Re: Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability (Henri Salo <henri@...v.fi>)
[ MDVSA-2012:110 ] mozilla (security@...driva.com)
Android DNS poisoning: Randomness gone bad (CVE-2012-2808) (Roee Hay <roeeh@...ibm.com>)

July 25 (5 messages)

[slackware-security] libpng (SSA:2012-206-01) (Slackware Security Team <security@...ckware.com>)
APPLE-SA-2012-07-25-1 Safari 6.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[ MDVSA-2012:111 ] libgdata (security@...driva.com)
Cross-Site Scripting (XSS) in Redaxo (advisory@...ridge.com)
[security bulletin] HPSBUX02789 SSRT100824 rev.3 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges (security-alert@...com)

July 26 (9 messages)

[security bulletin] HPSBUX02795 SSRT100878 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
APPLE-SA-2012-07-25-2 Xcode 4.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
tekno.Portal 0.1b - SQLi Vulnerability in "anket.php" (Socket_0x03@...aexe.com)
[ MDVSA-2012:112 ] perl-DBD-Pg (security@...driva.com)
[SECURITY] [DSA 2516-1] isc-dhcp security update (Nico Golde <nion@...ian.org>)
[ MDVSA-2012:113 ] arpwatch (security@...driva.com)
[ MDVSA-2012:114 ] apache-mod_auth_openid (security@...driva.com)
[ MDVSA-2012:115 ] dhcp (security@...driva.com)
[ MDVSA-2012:116 ] dhcp (security@...driva.com)

July 27 (3 messages)

[ MDVSA-2012:117 ] python-pycrypto (security@...driva.com)
Security advisory for Bugzilla 4.3.2, 4.2.2, 4.0.7 and 3.6.10 (LpSolit@...il.com)
[ MDVSA-2012:118 ] apache-mod_security (security@...driva.com)

July 30 (16 messages)

[slackware-security] bind (SSA:2012-209-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:119 ] bind (security@...driva.com)
[ MDVSA-2012:110-1 ] mozilla (security@...driva.com)
TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Spark IM Client Local Password Decryption (Adam Caudill <adam@...mcaudill.com>)
ocPortal 7.1.5 <= | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Security Advisory in LedgerSMBv 1.3.20 and below: Denial of Service vulnerability (Chris Travers <chris@...atrontech.com>)
Dr. Web Control Center Admin UI Remote Script Code Injection ("Oliver Karow" <Oliver.Karow@....de>)
DataWatch Monarch BI v5.1 admin section reflected cross-site scripting (vulns@...nach.com)
DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting (vulns@...nach.com)
DataWatch Monarch Business Intelligence (BI) v5.1 client section stored cross-site scripting (vulns@...nach.com)
DataWatch Monarch Business Intelligence (BI) v5.1 Blind SQL injection (vulns@...nach.com)
DataWatch Monarch Business Intelligence (BI) v5.1 Admin Section Blind XPath Injection (vulns@...nach.com)
TEMENOS T24 R07.03 Reflected Cross-Site Scripting (vulns@...nach.com)
TEMENOS T24 R07.03 Authentication Bypass (vulns@...nach.com)
[SECURITY] [DSA 2517-1] bind9 security update (Nico Golde <nion@...ian.org>)

July 31 (1 message)

MITKRB5-SA-2012-001: KDC heap corruption and crash [CVE-2012-1014 CVE-2012-1015] (Tom Yu <tlyu@....EDU>)

172 messages

Powered by blists - more mailing lists