bugtraq mailing list - 2012/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 31	⁴ 9	⁵ 9	⁶ 2	⁷ 13	⁸	⁹
¹⁰ 15	¹¹ 7	¹²	¹³ 10	¹⁴ 6	¹⁵	¹⁶
¹⁷ 7	¹⁸	¹⁹ 10	²⁰ 2	²¹	²²	²³
²⁴ 20	²⁵	²⁶	²⁷ 5	²⁸ 5	²⁹	³⁰
³¹ 6

Messages by day:

December 3 (31 messages)

[SECURITY] [DSA 2577-1] libssh security update (Yves-Alexis Perez <corsac@...ian.org>)
ESA-2012-052 RSA NetWitness Informer Cross-Site Request Forgery and Click-jacking Vulnerabilities (Security Alert <Security_Alert@....com>)
Low severity flaw in RIM BlackBerry PlayBook OS browser (Tim Brown <timb@...-dimension.org.uk>)
FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
MySQL (Linux) Heap Based Overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
MySQL (Linux) Database Privilege Elevation Zeroday Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
MySQL Denial of Service Zeroday PoC (king cope <isowarez.isowarez.isowarez@...glemail.com>)
MySQL Remote Preauth User Enumeration Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Re: [Full-disclosure] MySQL (Linux) Heap Based Overrun PoC Zeroday (Jeffrey Walton <noloader@...il.com>)
Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Jeffrey Walton <noloader@...il.com>)
Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL (Linux) Heap Based Overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL (Linux) Database Privilege Elevation Zeroday Exploit (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL Denial of Service Zeroday PoC (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL Remote Preauth User Enumeration Zeroday (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] MySQL (Linux) Heap Based Overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Yves-Alexis Perez <corsac@...ian.org>)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[SECURITY] [DSA 2580-1] libxml security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:176 ] libxml2 (security@...driva.com)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
tinymcpuk xss vulnerability (admin@...elweiss.info)
SEC Consult SA-20121203-0 :: F5 FirePass SSL VPN Unauthenticated local file inclusion (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: phpGiftReq SQL Injection (generalpf@...il.com)

December 4 (9 messages)

[SECURITY] [DSA 2581-1] mysql-5.1 security update (Yves-Alexis Perez <corsac@...ian.org>)
DC4420 - London DEFCON - Christmas 2012 meet! Tuesday 11th December 2012 (Major Malfunction <majormal@...ate-radio.org>)
MySQL Local/Remote FAST Account Password Cracking (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Privilege Escalation through Binary Planting in Panda Internet Security (by_argos@...mail.com)
Centrify Deployment Manager v2.1.0.283 (larry0@...com)
Centrify Deployment Manager v2.1.0.283 (larry0@...com)
FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
FreeSSHD Remote Authentication Bypass Zeroday Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Re: MySQL Windows Remote System Level Exploit (Stuxnet technique) 0day (king cope <isowarez.isowarez.isowarez@...glemail.com>)

December 5 (9 messages)

[security bulletin] HPSBPI02807 SSRT100928 rev.1 - HP LaserJet Pro 400 Multi Function Printers, Remote Unauthorized Access (security-alert@...com)
[security bulletin] HPSBPI02828 SSRT100778 rev.1 - HP LaserJet and Color LaserJet, Cross-Site Scripting (XSS) (security-alert@...com)
CVE-2012-4534 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
CVE-2012-3546 Apache Tomcat Bypass of security constraints (Mark Thomas <markt@...che.org>)
CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter (Mark Thomas <markt@...che.org>)
[security bulletin] HPSBMU02816 SSRT100949 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unautho… (security-alert@...com)
[security bulletin] HPSB3C02831 SSRT100661 rev.1 - HP Intelligent Management Center User Access Manager (UAM), Remote Execution of Arbitra… (security-alert@...com)
Re: Stack overflow in Microsoft HTML Help 6.1 (CHM files) (chiles.simpson.ctr@...fa.af.mil)
Buffalo LinkStation LS-WTGL Default Admin Account & Guest Access Information (Darius Freamon <darius.freamon@...il.com>)

December 6 (2 messages)

[ MDVSA-2012:177 ] bind (security@...driva.com)
CA20121205-01: Security Notice for CA XCOM Data Transport on Unix and Linux ("Kotas, Kevin J" <Kevin.Kotas@...com>)

December 7 (13 messages)

[slackware-security] ruby (SSA:2012-341-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] libxml2 (SSA:2012-341-03) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 2582-1] xen security update (Yves-Alexis Perez <corsac@...ian.org>)
TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities (advisory@...ridge.com)
Multiple SQL Injection vulnerabilities in ClipBucket (advisory@...ridge.com)
Multiple vulnerabilities in Achievo (advisory@...ridge.com)
Fwd: SQL injection (Emmanuel FARCY <manu.farcy@...il.com>)
CanSecWest13 CFP Open Until December 14 2012, Conf March 7-9 2013, Vancouver (Dragos Ruiu <dr@....net>)
Update on CVE assigned for Video Lead Form Plugin Cross-Site (nauty.me04@...il.com)
Update on CVE assigned for Wordpress Plugin Simple Gmail Login (nauty.me04@...il.com)
Multiple vulnerabilities in Achievo (advisory@...ridge.com)
Multiple SQL Injection vulnerabilities in ClipBucket (advisory@...ridge.com)
TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities (advisory@...ridge.com)

December 10 (15 messages)

[slackware-security] libssh (SSA:2012-341-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2012-341-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 2583-1] iceweasel security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2584-1] iceape security update (Yves-Alexis Perez <corsac@...ian.org>)
[ MDVSA-2012:178 ] mysql (security@...driva.com)
Android Kernel 2.6 Local DoS (Thomas Richards <g13net@...il.com>)
Centrify Deployment Manager v2.1.0.283 local root (larry0@...com)
FreeVimager 4.1.0 <= WriteAV Arbitrary Code Execution (pereira@...biz.de)
DIMIN Viewer 5.4.0 <= WriteAV Arbitrary Code Execution (pereira@...biz.de)
SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932 (tommccredie@...il.com)
Multiple Command Execution Vulnerabilities in Smartphone Pentest Framework (advisory@...ridge.com)
Call for Papers: DIMVA 2013 (Collin Mulliner <crm@....neu.edu>)
Snare for Linux Cross-Site Scripting via Log Injection (sometimesbugs@...il.com)
Snare for Linux Cross-Site Request Forgery (sometimesbugs@...il.com)
Snare for Linux Password Disclosure (sometimesbugs@...il.com)

December 11 (7 messages)

[security bulletin] HPSBOV02834 SSRT101055 rev.1 - HP OpenVMS LOGIN or ACMELOGIN, Remote or Local Denial of Service (DoS) (security-alert@...com)
Path Traversal Vulnerability on Secure Transport versions 5.1 SP2 and earlier ("Perez, Sebastian \(LATCO - Buenos Aires\)" <seperez@...OITTE.com>)
Information disclosure (mouse tracking) vulnerability in Microsoft Internet Explorer versions 6-10 (Nick Johnson <nick@...der.io>)
[SECURITY] [DSA 2585-1] bogofilter security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2586-1] perl security update (Florian Weimer <fw@...eb.enyo.de>)
Multiple critical vulnerabilities in Maxthon and Avant browsers (Roberto Suggi Liverani <malerischnet@...il.com>)
[SECURITY] [DSA 2587-1] libcgi-pm-perl security update (Florian Weimer <fw@...eb.enyo.de>)

December 13 (10 messages)

[ MDVSA-2012:179 ] cups (security@...driva.com)
Addressbook v8.1.24.1 Group Name XSS ("Kenneth F. Belva" <ken@...verbackventuresllc.com>)
OpenDocMan 1.2.6.2 - 3 Vulnerabilities ("Kenneth F. Belva" <ken@...verbackventuresllc.com>)
File Upload Concern in Front Account 2.3.13 and OpenDocMan 1.2.6.2 ("Kenneth F. Belva" <ken@...verbackventuresllc.com>)
FCKEditor File Upload Vulnerability (bugreport@...uard.info)
'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469) (Mark Stanislav <mark.stanislav@...il.com>)
Network Reconnaissance in IPv6 Networks (Fernando Gont <fgont@...networks.com>)
Network Reconnaissance in IPv6 Networks (errata) (Fernando Gont <fgont@...networks.com>)
RVAsec 2013 CFP Now Open (Sullo <csullo@...il.com>)
[security bulletin] HPSBUX02832 SSRT101042 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)

December 14 (6 messages)

Re: Centrify Deployment Manager v2.1.0.283 (to-choi.lau@...trify.com)
[btrfs] is vulnerable to a hash-DoS attack ("Pascal Junod \(Mailing Lists\)" <mailinglists@...od.info>)
Password Disclosure in D-Link IP Cameras (CVE-2012-4046) (doylej.ia@...il.com)
Issues in Netgear WGR614 wireless router (gsuberland@...il.com)
DDIVRT-2012-48 VMware View Connection Server Directory Traversal (CVE-2012-5978) (ddivulnalert@...frontline.com)
Wordpress Pingback Port Scanner (FireFart@...il.com)

December 17 (7 messages)

[SECURITY] [DSA 2588-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2589-1] tiff security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:180 ] perl-CGI (security@...driva.com)
Foswiki Security Alert CVE-2012-6329, CVE-2012-6330 Remote code execution and other vulnerabilities in MAKETEXT macro (George Clark <geonwiki@...achrone.com>)
Re: Issues in Netgear WGR614 wireless router (Liam <liamtr@...il.com>)
RE: PHP Addressbook v8.2.5 Group Name XSS ("Kenneth F. Belva" <ken@...verbackventuresllc.com>)
IPv6 Neighbor Discovery security (new documents) (Fernando Gont <fgont@...networks.com>)

December 19 (10 messages)

Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability (pereira@...biz.de)
SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Enterpriser16 LoadBalancer v7.1 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root (larry0@...com)
Multiple SQL Injection Vulnerabilities in Elite Bulletin Board (advisory@...ridge.com)
Firefly MediaServer Multiple Remote DoS Vulnerabilities (advisory@...ridge.com)
Multiple vulnerabilities in Banana Dance (advisory@...ridge.com)
[ MDVSA-2012:181 ] python-django (security@...driva.com)
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339] (Ken <catatonicprime@...il.com>)
EMC Avamar: World writable cache files (fulldisclosure <fulldisclosure@...yhat.dk>)

December 20 (2 messages)

Re: Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability (Fabio Baroni <fabiothebest@...il.com>)
Re: Re: Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability (pereira@...biz.de)

December 24 (20 messages)

DoS vulnerability in Siemens S7-1200 PLCs (Arne Vidström <arne.vidstrom@....se>)
Re: Re: Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability (pereira@...biz.de)
[security bulletin] HPSBUX02835 SSRT100763 rev.1 - HP-UX Running BIND, Remote Domain Name Revalidation (security-alert@...com)
ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability. (Security Alert <Security_Alert@....com>)
CA20121220-01: Security Notice for CA IdentityMinder ("Williams, James K" <James.Williams@...com>)
VMSA-2012-0018 VMware security updates for vCSA and ESXi (VMware Security Response Center <security@...are.com>)
Re: Re: Re: Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability (koppensb@....at)
CubeCart 3.0.20 (3.0.x) and lower | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 3.0.20 (3.0.x) and lower | Arbitrary File Upload (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 3.0.20 (3.0.x) and lower | Multiple SQL Injection Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2012:182 ] apache-mod_security (security@...driva.com)
[ MDVSA-2012:183 ] apache-mod_security (security@...driva.com)
CubeCart 4.4.6 and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[TOOL RELEASE] SQL Fingerprint powered by ENG++ Technology [Version 1.33.23-170308] (Nelson Brito <nbrito@...ure.org>)
CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 4.4.6 and lower | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 4.4.6 and lower | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 4.4.6 and lower | Multiple SQL Injection Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 4.4.6 and lower | Local File Inclusion Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 4.x/5.x | Setup Re-installation Privilege Escalation Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

December 27 (5 messages)

Open-Realty CMS 3.x | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Open-Realty CMS 3.x | Persistent Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] [DSA 2590-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:184 ] libtiff (security@...driva.com)
Polycom® HDX® Video End Points Web Management Cross Site Scripting (XSS) vulnerability ("Rustein, Fara Denise \(LATCO - Buenos Aires\)" <frustein@...OITTE.com…)

December 28 (5 messages)

Log Analyzer 3.6.0 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2591-1] mahara security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2592-1] elinks security update (Moritz Muehlenhoff <jmm@...ian.org>)
CubeCart 5.0.7 and lower versions | Insecure Backup File Handling (YGN Ethical Hacker Group <lists@...g.net>)

December 31 (6 messages)

GnuPG 1.4.12 and lower - memory access errors and keyring database corruption (KB Sriram <kbsriram@...il.com>)
Re: CubeCart 5.0.7 and lower versions | Insecure Backup File Handling (Sean Jenkins <sean@...ehost.com>)
[SECURITY] [DSA 2593-1] moin security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2594-1] virtualbox-ose security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2595-1] ghostscript security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2596-1] mediawiki-extensions security update (Jonathan Wiltshire <jmw@...ian.org>)

157 messages

Powered by blists - more mailing lists