bugtraq mailing list - 2012/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 15	³ 6	⁴ 5	⁵	⁶	⁷
⁸	⁹ 29	¹⁰ 12	¹¹ 8	¹²	¹³	¹⁴
¹⁵ 12	¹⁶ 1	¹⁷ 12	¹⁸ 3	¹⁹ 2	²⁰	²¹
²²	²³ 3	²⁴ 19	²⁵ 2	²⁶ 4	²⁷	²⁸
²⁹ 15	³⁰ 2	³¹ 4

Messages by day:

October 2 (15 messages)

CVE-2012-3819: Stack Overflow in DartWebserver.dll <= 1.9 (Ken <catatonicprime@...il.com>)
[ MDVSA-2012:154-1 ] apache (security@...driva.com)
[security bulletin] HPSBST02818 SSRT100960 rev.1 - HP IBRIX X9000 Storage, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBUX02814 SSRT100930 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2012:152-1 ] bind (security@...driva.com)
[ MDVSA-2012:156 ] inn (security@...driva.com)
[ MDVSA-2012:155-1 ] xinetd (security@...driva.com)
GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
Better WP Security v3.4.3 Wordpress - Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
CA20121001-01: Security Notice for CA License ("Williams, James K" <James.Williams@...com>)
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Reminder: ClubHack2012 Call for Papers Closing Soon (abhijeet@...bhack.com)
phptax 0.8 <= Remote Code Execution Vulnerability (pereira@...biz.de)
XSS Vulnerabilities in phpFreeChat (Netsparker Advisories <advisories@...itunasecurity.com>)

October 3 (6 messages)

[ MDVSA-2012:153-1 ] dhcp (security@...driva.com)
[ MDVSA-2012:157 ] openjpeg (security@...driva.com)
[ MDVSA-2012:158 ] gc (security@...driva.com)
Multiple vulnerabilities in Template CMS (advisory@...ridge.com)
Omnistar Mailer v7.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBMU02817 SSRT100950 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Disclos… (security-alert@...com)

October 4 (5 messages)

[ MDVSA-2012:159 ] freeradius (security@...driva.com)
One week left! CFP for ZeroNights Conference in Moscow 19-20 November 2012 (Alexander Polyakov <a.polyakov@...scan.com>)
ANNOUNCE: RFIDIOt v1.0d released and code migration (Adam Laurie <adam@...roup.co.uk>)
XnView JLS File Decompression Heap Overflow ("Joseph Sheridan" <joe@...ctionis.com>)
Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by Ogg DirectShow filters ("Stefan Kanthak" <stefan.kanthak@...go.de>)

October 9 (29 messages)

[DCA-2011-0013] - IBM Informix Dynamic Server 11.50 SET COLLATION Stack OverFlow (Ewerson Guimarães (Crash) - Dclabs <crash@...abs.com.br>)
Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2 (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Multiple SQL Injection in Oracle Enterprise Manager (SQL Tunning Sets components) (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Elevated roles through DBCC (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Java Operating System command execution (Shatter <shatter@...secinc.com>)
[ MDVSA-2012:151-1 ] ghostscript (security@...driva.com)
[ MDVSA-2012:150-1 ] java-1.6.0-openjdk (security@...driva.com)
[ MDVSA-2012:160 ] imagemagick (security@...driva.com)
[SECURITY] [DSA 2555-1] libxslt security update (Moritz Muehlenhoff <jmm@...ian.org>)
ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability ("Security Alert" <Security_Alert@....com>)
Blender 2.63 Exploitable User Mode Write AV (beford <xbefordx@...il.com>)
[ MDVSA-2012:161 ] html2ps (security@...driva.com)
utempter allows fake host setting (paul.szabo@...ney.edu.au)
[SECURITY] [DSA 2556-1] icedove security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2557-1] hostapd security update (Nico Golde <nion@...ian.org>)
[PRE-SA-2012-07] hostapd: Missing EAP-TLS message length validation (Timo Warns <Warns@...-Sense.DE>)
Interspire Email Marketer v6.0.1 - Multiple Vulnerabilites (Vulnerability Lab <research@...nerability-lab.com>)
GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2558-1] bacula security update (Raphael Geissert <geissert@...ian.org>)
[security bulletin] HPSBOV02822 SSRT100966 rev.1 - HP Secure Web Server (SWS) for OpenVMS, Remote Denial of Service (DoS), Unauthorized Ac… (security-alert@...com)
Privilege Escalation Vulnerability in Microsoft Windows (advisory@...ridge.com)
soapbox Local Root / Privilege Escalation Vulnerability (pereira@...biz.de)
WingFTP Server Denial of Service Vulnerability (Anil Pazvant <pazwant@...il.com>)
BufferOverflow Vulnerability on Logica HotScan SWIFT Alliance Access Interface (Anil Pazvant <pazwant@...il.com>)
WingFTP Server Denial of Service Vulnerability (Anil Pazvant <pazwant@...il.com>)
Hardcoreview WriteAV Arbitrary Code Execution (pereira@...biz.de)
FastStone Image Viewer 4.6 <= ReadAVonIP Arbitrary Code Execution (pereira@...biz.de)
Key Systems Electronic Key Lockers command injection and weak authentication vulnerabilities (Travis Lee <eelsivart@...il.com>)

October 10 (12 messages)

Re: FastStone Image Viewer 4.6 <= ReadAVonIP Arbitrary Code Execution (pereira@...biz.de)
[slackware-security] mozilla-firefox (SSA:2012-283-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:162 ] bind (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Cataly… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format Player (Cisco Systems Product Security Incident Response Team <psirt@...c…)
[CVE-2012-4501] CloudStack configuration vulnerability (John Kinsella <jlk@...ashyour.com>)
VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update) (pereira@...biz.de)
Microsoft Office Excel ReadAV Arbitrary Code Execution (pereira@...biz.de)
Multiple vulnerabilities in OpenX (advisory@...ridge.com)
Omnistar Document Manager v8.0 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

October 11 (8 messages)

ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities ("Security Alert" <Security_Alert@....com>)
VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates (VMware Security Response Center <security@...are.com>)
FileBound - Privilege Escalation Vulnerability - Security Advisory - SOS-12-010 ("Lists" <lists@...seofsecurity.com>)
[slackware-security] bind (SSA:2012-284-01) (Slackware Security Team <security@...ckware.com>)
Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB (roberto@...yhats.it)
[ MDVSA-2012:163 ] firefox (security@...driva.com)
[ MDVSA-2012:164 ] libxslt (security@...driva.com)
Last reminder for ClubHack 2012 : Call for Papers (abhijeet@...bhack.com)

October 15 (12 messages)

[slackware-security] mozilla-thunderbird (SSA:2012-285-02) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:165 ] graphicsmagick (security@...driva.com)
[ MDVSA-2012:166 ] bacula (security@...driva.com)
[slackware-security] mozilla-firefox (SSA:2012-285-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:167 ] firefox (security@...driva.com)
[CVE-2012-4750] Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability (lorenzo.cantoni86@...il.com)
Re: VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update) (pereira@...biz.de)
SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Multiple vulnerabilities in Samsung Kies (advisory@...ridge.com)
Critical issues affecting Steam users (ReVuln <info@...uln.com>)
[slackware-security] seamonkey (SSA:2012-288-01) (Slackware Security Team <security@...ckware.com>)

October 16 (1 message)

Visual Tools DVR multiple vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)

October 17 (12 messages)

APPLE-SA-2012-10-16-1 Java for OS X 2012-006 and Java for Mac OS X 10.6 Update 11 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 2559-1] libexif security update (Yves-Alexis Perez <corsac@...ian.org>)
SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20121017-1 :: Unirgy uStoreLocator SQL Injection - Magento extension (SEC Consult Vulnerability Lab <research@...-consult.com>)
[IMF 2013] 3rd Call for Papers: Deadline Extended (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server) (SEC Consult Vulnerability Lab <research@...-co…)
Multiple vulnerabilities in AContent (advisory@...ridge.com)
Multiple vulnerabilities in Subrion CMS (advisory@...ridge.com)
Multiple vulnerabilities in jCore (advisory@...ridge.com)
[waraxe-2012-SA#092] - Multiple Vulnerabilities in Wordpress Slideshow Plugin (come2waraxe@...oo.com)
[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin (come2waraxe@...oo.com)
MitM-vulnerability in Palo Alto Networks GlobalProtect (Micha Borrmann <Micha.Borrmann@...S.de>)

October 18 (3 messages)

Internet Explorer 9 XSS Filter Bypass (pereira@...biz.de)
CA20121018-01: Security Notice for CA ARCserve Backup ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Multiple Vulnerabilities in Campaign Enterprise <= 11.0.538 (Ken <catatonicprime@...il.com>)

October 19 (2 messages)

CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies (Vulnerability Lab <research@...nerability-lab.com>)
Old Habits Die Hard: Cross-Zone Scripting in Dropbox & Google Drive Mobile Apps (Roi Saltzman <roisaltzman@...il.com>)

October 23 (3 messages)

XSS Vulnerabilities in TaskFreak (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS Vulnerabilities in CMSMini (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS Vulnerabilities in ClipBucket (Netsparker Advisories <advisories@...itunasecurity.com>)

October 24 (19 messages)

F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] [DSA 2560-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2561-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [Full-disclosure] F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (Gary Driggs <gdriggs@...il.com>)
VaM Shop Cross-Site Scripting and Blind SQL Injection Vulnerabilities (sec.team@...erservices.com)
[ MDVSA-2012:168 ] hostapd (security@...driva.com)
DC4420 - London DEFCON - October meet - tomorrow, Tuesday 23rd October. (alien DC4420 <alien@...420.org>)
[security bulletin] HPSBHF02819 SSRT100920 rev.1 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBUX02824 SSRT100970 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities (security-alert@...com)
VUPEN Security Research - Microsoft Internet Explorer "OnMove" Use-After-Free Vulnerability (MS12-063) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Microsoft Internet Explorer "scrollIntoView" Use-After-Free Vulnerability (MS12-063) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Oracle Java Font Processing "maxPointCount" Heap Overflow Vulnerability (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Oracle Java Font Processing Glyph Element Memory Corruption Vulnerability (VUPEN Security Research <advisories@...en.com>)
[SECURITY] [DSA 2565-1] iceweasel security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2563-1] viewvc security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2562-1] cups-pk-helper security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2564-1] tinyproxy security update (Thijs Kinkhorst <thijs@...ian.org>)
[waraxe-2012-SA#094] - Multiple Vulnerabilities in Wordpress GRAND Flash Album Gallery Plugin (come2waraxe@...oo.com)
HP/H3C and Huawei SNMP Weak Access to Critical Data (Kurt Grutzmacher <grutz@...gojango.net>)

October 25 (2 messages)

Smf 2.0.2 Cross-Site Scripting Vulnerability (irist.ir@...il.com)
Wordpress 3.4 Cross-Site Scripting Vulnerability (irist.ir@...il.com)

October 26 (4 messages)

[security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2566-1] exim4 security update (Nico Golde <nion@...ian.org>)
Inventory 1.0 Multiple SQL Vulnerabilities (Thomas Richards <g13net@...il.com>)
Inventory 1.0 Multiple XSS Vulnerabilities (Thomas Richards <g13net@...il.com>)

October 29 (15 messages)

[SECURITY] [DSA 2567-1] request-tracker3.8 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2568-1] rtfm security update (Florian Weimer <fw@...eb.enyo.de>)
[slackware-security] mozilla-firefox (SSA:2012-300-01) (Slackware Security Team <security@...ckware.com>)
EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
Exploit - EasyITSP by Lemens Telephone Systems 2.0.2 (Michał Błaszczak <blaszczakm@...il.com>)
KmPlayer v3.0.0.1440 Local Crash PoC (irist.ir@...il.com)
PIAF H.M.S - SQL Injection (Michał Błaszczak <blaszczakm@...il.com>)
[Full-disclosure] SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
[Full-disclosure] SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[Full-disclosure] Critical issues affecting Steam users (ReVuln <info@...uln.com>)
[Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)
[Full-disclosure] SEC Consult SA-20121017-1 :: Unirgy uStoreLocator SQL Injection - Magento extension (SEC Consult Vulnerability Lab <research@...-consult.com>)
[Full-disclosure] [IMF 2013] 3rd Call for Papers: Deadline Extended (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
[Full-disclosure] SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Conte… (SEC Consult Vulnerability Lab <research…)
Call for Papers: DIMVA 2013 (Collin Mulliner <crm@....neu.edu>)

October 30 (2 messages)

[SECURITY] [DSA 2569-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBUX02825 SSRT100974 rev.1 - HP-UX Running Java, Remote Indirect Vulnerabilities (security-alert@...com)

October 31 (4 messages)

[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin (come2waraxe@...oo.com)
[slackware-security] mozilla-thunderbird (SSA:2012-304-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2012-304-02) (Slackware Security Team <security@...ckware.com>)
Security Advisory - TP-LINK TL-WR841N LFI - [UPDATE] ("Matan Azugi" <matan@...sec.co.il>)

154 messages

Powered by blists - more mailing lists