bugtraq mailing list - 2012/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴ 11	⁵ 16	⁶ 4	⁷	⁸	⁹
¹⁰ 6	¹¹ 12	¹² 2	¹³ 8	¹⁴ 2	¹⁵	¹⁶
¹⁷ 16	¹⁸ 12	¹⁹ 2	²⁰	²¹ 5	²²	²³
²⁴ 13	²⁵ 4	²⁶	²⁷ 15	²⁸ 2	²⁹	³⁰

Messages by day:

September 4 (11 messages)

[slackware-security] mozilla-firefox (SSA:2012-244-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2012-244-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] glibc (SSA:2012-244-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:149 ] fetchmail (security@...driva.com)
Admidio 2.3.5 Multiple security vulnerabilities (sschurtz@...ksecurity.de)
[slackware-security] seamonkey (SSA:2012-244-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] slocate (SSA:2012-244-05) (Slackware Security Team <security@...ckware.com>)
Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic GrabnGo Network Storage (mattijs@...yon.nl)
Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center (mattijs@...yon.nl)
Secunia Research: Adobe Photoshop TIFF SGI24LogLum Decompression Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Group-Office Calendar SQL Injection ("Joseph Sheridan" <joe@...ctionis.com>)

September 5 (16 messages)

QNAP Turbo NAS Multiple Path Injection (Andrea Fabrizi <andrea.fabrizi@...il.com>)
VMWare Tools susceptible to binary planting by hijack (moshez@...secglobal.com)
IPv6 implications on IPv4 nets: IPv6 RAs, IPv4, and VPN "evasion" (Fernando Gont <fgont@...networks.com>)
eFront Educational v3.6.11 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ES Job Search Engine v3.0 - SQL injection vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
eFront Enterprise v3.6.11 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda Web Filter 910 5.0.015 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Ektron CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-009 ("Lists" <lists@...seofsecurity.com>)
KIWICON: THE ANNUCIATION (Kiwicon <kiwicon@...icon.org>)
Cross-Site Scripting (XSS) Vulnerabilities in Flogr (advisory@...ridge.com)
Cross-Site Scripting (XSS) in Kayako Fusion (advisory@...ridge.com)
Сross-Site Request Forgery (CSRF) in TestLink (advisory@...ridge.com)
[IMF 2013] Call for Papers (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
APPLE-SA-2012-09-05-1 Java for OS X 2012-005 and Java for Mac OS X 10.6 Update 10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[Rooted CON 2013] CFP starts! (Román Ramírez <rramirez@...tedcon.es>)
[SECURITY] [DSA 2538-1] moin security update (Raphael Geissert <geissert@...ian.org>)

September 6 (4 messages)

[SECURITY] [DSA 2539-1] zabbix security update (Raphael Geissert <geissert@...ian.org>)
[CVE-2012-3373] Apache Wicket XSS vulnerability via manipulated URL parameter (Carl-Eric Menzel <cmenzel@...ketbuch.de>)
Internet Explorer Script Interjection Code Execution (updated) (ds.adv.pub@...il.com)
[security bulletin] HPSBMU02811 SSRT100937 rev.1 - HP Business Availability Center (BAC) Cross Site Scripting (XSS), Cross Site Request Fo… (security-alert@...com)

September 10 (6 messages)

[SECURITY] [DSA 2540-1] mahara security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2541-1] beaker security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2542-1] qemu-kvm security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2543-1] xen-qemu-dm-4.0 security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2544-1] xen security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2545-1] qemu security update (Raphael Geissert <geissert@...ian.org>)

September 11 (12 messages)

[ MDVSA-2012:150 ] java-1.6.0-openjdk (security@...driva.com)
[SE-2012-01] Security vulnerabilities in IBM Java (Security Explorations <contact@...urity-explorations.com>)
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks (Security Alert <Security_Alert@....com>)
nullcon CTF HackIM is on (nullcon <nullcon@...lcon.net>)
Wordpress Download Monitor - Download Page Cross-Site Scripting ("Joseph Sheridan" <joe@...ctionis.com>)
[PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods (Timo Warns <Warns@...-Sense.DE>)
GreHack 2012 - 19th Oct. Grenoble, France - Call For [ Participation, Student Grants Application, Music Bands/Artists/D… (Fabien DUCHENE <f.duchene@...-online.fr…)
Multiple vulnerabilities in Ezylog photovoltaic management server (roberto@...yhats.it)
ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
VUPEN - Adobe Flash Player "Matrix3D" Integer Overflow Code Execution (APSB12-19) (VUPEN Security Research <advisories@...en.com>)
VUPEN - Microsoft Windows Common Controls MSCOMCTL.OCX Use-after-free (CVE-2012-1856 / MS12-060) (VUPEN Security Research <advisories@...en.com>)
VUPEN - Mozilla Firefox "nsHTMLEditRules" Remote Use-after-free (CVE-2012-3958 / MFSA 2012-58) (VUPEN Security Research <advisories@...en.com>)

September 12 (2 messages)

[SECURITY] [DSA 2546-1] freeradius security update (Nico Golde <nion@...ian.org>)
[ MDVSA-2012:151 ] ghostscript (security@...driva.com)

September 13 (8 messages)

Cisco Security Advisory: Cisco ASA-CX and Cisco PRSM Log Retention Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
Cisco Security Advisory: Cisco Unified Presence and Jabber Extensible Communications Platform Stream Header Denial of Se… (Cisco Systems Product Security Incident…)
Security Advisory AA-007: Arbitrary File Upload Vulnerability in Sitecom Home Storage Center (mattijs@...yon.nl)
Security Advisory AA-007: Command Injection Vulnerability in Sitecom Home Storage Center (mattijs@...yon.nl)
[SECURITY] [DSA 2547-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
APPLE-SA-2012-09-12-1 iTunes 10.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Knowledge Base EE v4.62.0 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

September 14 (2 messages)

[ MDVSA-2012:152 ] bind (security@...driva.com)
[SECURITY] [DSA 2548-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 17 (16 messages)

[SECURITY] [DSA 2480-4] request-tracker3.8 regression update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2549-1] devscripts security update (Raphael Geissert <geissert@...ian.org>)
[ MDVSA-2012:153 ] dhcp (security@...driva.com)
[SECURITY] [DSA 2548-1] Debian Security Team PGP/GPG key change notice (Nico Golde <nion@...ian.org>)
ipv6mon v1.0 released! (IPv6 address monitoring daemon) (Fernando Gont <fgont@...networks.com>)
ASTPP VoIP Billing (4cf207a) - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[INTREST SEC] Atlassian Confluence Wiki XSS Vulnerability (INTREST SEC <researchlab@...rest.at>)
[slackware-security] patch (SSA:2012-257-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2012-257-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] dhcp (SSA:2012-258-01) (Slackware Security Team <security@...ckware.com>)
IPv6 Toolkit v1.2.3 released! (and upcoming IPv6 security trainings) (Fernando Gont <fgont@...networks.com>)
[IA38] NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow (Inshell Security <info@...hell.net>)
Secunia Research: Novell GroupWise iCalendar Date/Time Parsing Denial of Service (Secunia Research <remove-vuln@...unia.com>)
[waraxe-2012-SA#089] - Multiple Vulnerabilities in TorrentTrader 2.08 (come2waraxe@...oo.com)
[Positive Research] Intel SMEP overview and partial bypass on Windows 8 (whitepaper) (noreply@...ecurity.ru)

September 18 (12 messages)

Axis VoIP Manager v2.1.5.7 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBMU02813 SSRT100712 rev.1 - HP Operations Orchestration, Remote Execution of Arbitrary Code (security-alert@...com)
Fortigate UTM WAF Appliance - Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
APPLE-SA-2012-09-17-1 Apple Remote Desktop 3.5.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
NGS00267 Patch Notification: Symantec Messaging Gateway SSH with backdoor user account (NCC Group Research <research@...group.com>)
NGS00268 Patch Notification: Symantec Messaging Gateway Out-of-band stored XSS - delivered by email (NCC Group Research <research@...group.com>)
NGS00263 Patch Notification: Symantec Messaging Gateway - Easy CSRF to add a backdoor-administrator (NCC Group Research <research@...group.com>)
NGS00265 Patch Notification: Symantec Messaging Gateway - Unauthenticated detailed version disclosure (NCC Group Research <research@...group.com>)
NGS00266 Patch Notification: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL (NCC Group Research <research@...group.com>)
Vbulletin (blog_plugin_useradmin) v4.1.12 Sql Injection Vulnerability (irist.ir@...il.com)

September 19 (2 messages)

[SECURITY] [DSA 2550-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
Joomla 2.5.6 Multiple Cross-site scripting vulnerabilities (sschurtz@...ksecurity.de)

September 21 (5 messages)

[2.0 Update] Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Team…)
[security bulletin] HPSBMU02815 SSRT100715 rev.2 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execut… (security-alert@...com)
APPLE-SA-2012-09-19-1 iOS 6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2012-09-19-2 OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004 (Apple Product Security <product-security-noreply@...ts.apple.…)
APPLE-SA-2012-09-19-3 Safari 6.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 24 (13 messages)

[security bulletin] HPSBMU02815 SSRT100715 rev.3 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execut… (security-alert@...com)
[SECURITY] [DSA 2551-1] isc-dhcp security update (Nico Golde <nion@...ian.org>)
GreHack 2012 - 19th Oct. Grenoble, France - Conference + CTF - Call For [ Participation, Student Grants Application, Mu… (Fabien DUCHENE <f.duchene@...-online.fr…)
[CVE-ID REQUEST] Atlassian Confluence - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities (Robert Gilbert <rgilbert@...ock.com>)
[Announcement] ClubHack Magazine's Sept 2012 Issue Out (abhijeet@...ag.in)
ESA-2012-037: RSA(r) Authentication Agent 7.1 for Microsoft Windows(r) and RSA(r) Authentication Client 3.5 Access Cont… (Security Alert <Security_Alert@....com>)
Toshiba ConfigFree CF7 File Stack Buffer Overflow (ProfileName) ("Joseph Sheridan" <joe@...ctionis.com>)
Toshiba ConfigFree CF7 File Remote Command Execution ("Joseph Sheridan" <joe@...ctionis.com>)
Toshiba ConfigFree CF7 File Stack Buffer Overflow (Comment Field ("Joseph Sheridan" <joe@...ctionis.com>)
DDIVRT-2012-42 Novell GroupWise Agents Arbitrary File Retrieval (CVE-2012-0419) (ddivulnalert@...frontline.com)
CVE-2012-4415: guacamole local root vulnerability (Timo Juhani Lindfors <timo.lindfors@....fi>)
[Positive Research] Intel SMEP Part II: Bypassing Intel SMEP on Windows 8 x64 Using Return-oriented Programming (noreply@...ecurity.ru)
APPLE-SA-2012-09-24-1 Apple TV 5.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 25 (4 messages)

[SE-2012-01] Critical security issue affecting Java SE 5/6/7 (Security Explorations <contact@...urity-explorations.com>)
[waraxe-2012-SA#090] - Insecure SSL Connection in Thomson SpeedTouch ST780 (come2waraxe@...oo.com)
[Announcement] CHMag - Call for Articles (abhijeet@...ag.in)
[Full-disclosure] "Dell Data Protection | Access" for Windows contains and installs outdated, superfluous and vulnerab… (Stefan Kanthak <stefan.kanthak@...go.de…)

September 27 (15 messages)

[SECURITY] [DSA 2550-2] asterisk regression update (Moritz Muehlenhoff <jmm@...ian.org>)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilit… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <…)
Cisco Security Advisory: Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <…)
Cisco Security Advisory: Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability (Cisco Systems Product Security Incident Response Team <ps…)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
Cisco Security Advisory: Cisco IOS Software DHCP Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 2554-1] iceape security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2552-1] tiff security update (Luciano Bello <luciano@...ian.org>)
XSS in OSSEC wui 0.3 ("A. Ramos" <aramosf@...il.com>)
NGS00254 Patch Notification: Apple Mac OS X Lion USB Hub Class Hub Descriptor Arbitrary Code Execution (NCC Group Research <research@...group.com>)
[IMF 2013] 2nd Call for Papers (Oliver Goebel <goebel@...t.uni-stuttgart.de>)

September 28 (2 messages)

[ MDVSA-2012:154 ] apache (security@...driva.com)
[ MDVSA-2012:155 ] xinetd (security@...driva.com)

130 messages

Powered by blists - more mailing lists