bugtraq mailing list - 2013/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴ 19	⁵ 9	⁶ 7	⁷ 1	⁸ 4	⁹	¹⁰
¹¹ 8	¹² 2	¹³ 6	¹⁴ 10	¹⁵ 3	¹⁶	¹⁷
¹⁸ 16	¹⁹ 4	²⁰ 13	²¹ 7	²² 13	²³	²⁴
²⁵ 14	²⁶ 7	²⁷ 2	²⁸ 12

Messages by day:

February 4 (19 messages)

ESA-2013-002: RSA Archer® GRC Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
[HITB-Announce] #HITB2013AMS FINAL CALL for Paper Submissions (Hafez Kamal <aphesz@...kinthebox.org>)
Oracle Automated Service Manager 1.3 & Auto Service Request 4.3 local root during install (larry0@...com)
FreeBSD 9.1 ftpd Remote Denial of Service (max@...ecurity.com)
[ MDVSA-2013:006 ] freetype2 (security@...driva.com)
[security bulletin] HPSBMU02842 SSRT100909 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross S… (security-alert@...com)
DC++ 0.802 and below incorrectly registers URI schemes in Windows (ullner@...il.com)
APPLE-SA-2013-02-01-1 Java for Mac OS X v10.6 Update 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 2614-1] libupnp security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2615-1] libupnp4 security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2617-1] samba security update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 2616-1] nagios3 security update (Jonathan Wiltshire <jmw@...ian.org>)
Directory Traversal - EasyITSP <= 2.0.7 (Michał Błaszczak <blaszczakm@...il.com>)
NGS00336 Patch Notification: Symantec Network Access Control Privilege Escalation (NCC Group Research <research@...group.com>)
NGS00315 Patch Notification: Symantec Enterprise Security Management Agent Privilege Escalation (NCC Group Research <research@...group.com>)
[SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU (Security Explorations <contact@...urity-explorations.com>)
[IMF 2013] Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Multiple Vulnerabilities in D'Link DIR-600 and DIR-300 (rev B) (devnull@...ur1ty.de)
Free Monthly Websites v2.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 5 (9 messages)

0day full - Free Monthly Websites v2.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
APPLE-SA-2013-02-04-1 OS X Server v2.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re: [SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU (Security Explorations <contact@...urity-explorations.com>)
[ MDVSA-2013:007 ] mysql (security@...driva.com)
[security bulletin] HPSBST02846 SSRT100798 rev.1 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code (security-alert@...com)
[MajorSecurity-SA-2013-014] Sony Playstation Vita Browser - firmware 2.05 - Adressbar spoofing (research@...orsecurity.com)
CVE-2012-6451 Authentication Bypass in LOREX IP Cameras (doylej.ia@...il.com)
[PT-2012-53] Privilege Gaining in DataLife Engine (noreply@...ecurity.ru)
Multiple Vulnerabilities in Linksys E1500/E2500 (devnull@...ur1ty.de)

February 6 (7 messages)

[CVE-2013-1463]Wordpress wp-table-reloaded‏ plugin XSS in SWF (hip@...ight-labs.org)
SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin (advisory@...ridge.com)
Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin (advisory@...ridge.com)
[KIS-2013-02] CubeCart <= 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[ MDVSA-2013:008 ] mysql (security@...driva.com)
DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up (DefenseCode <defensecode@...ensecode.com>)
Cisco Security Advisory: Cisco ATA 187 Analog Telephone Adaptor Remote Access Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)

February 7 (1 message)

[CVE-2013-1464]Wordpress Audio Player Plugin XSS in SWF‏‏ (hip@...ight-labs.org)

February 8 (4 messages)

DIMVA 2013 - Extended deadline for paper submission: February 17, 2013! (Collin Mulliner <crm@....neu.edu>)
[SECURITY] [DSA 2618-1] ircd-hybrid security update (Luciano Bello <luciano@...ian.org>)
[slackware-security] curl (SSA:2013-038-01) (Slackware Security Team <security@...ckware.com>)
Mathematica9.0.1 on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)

February 11 (8 messages)

[ MDVSA-2013:009 ] libssh (security@...driva.com)
[SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2612-2] ircd-ratbox update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:010 ] java-1.6.0-openjdk (security@...driva.com)
Multiple Vulnerabilities in Linksys WRT160Nv2 (devnull@...ur1ty.de)
Multiple Vulnerabilities in Linksys WAG200G (devnull@...ur1ty.de)
Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack (Adam Laurie <adam@...roup.co.uk>)
I Read It Somewhere (IRIS) citations management tool <= v1.3 (post auth) Remote Command Execution (aeon.s.flux@...il.com)

February 12 (2 messages)

[slackware-security] openssl (SSA:2013-042-01) (Slackware Security Team <security@...ckware.com>)
Re: Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack (Adam Laurie <adam@...roup.co.uk>)

February 13 (6 messages)

Simple password obfuscation in Enterprise Architect ("Diening, Holm" <holm.diening@...atik.de>)
[SECURITY] [DSA 2620-1] rails security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2013:011 ] samba (security@...driva.com)
Multiple Vulnerabilities in OpenPLI (devnull@...ur1ty.de)
[SECURITY] [DSA 2622-1] polarssl security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2621-1] openssl security update (Thijs Kinkhorst <thijs@...ian.org>)

February 14 (10 messages)

CA20130213-01: Security Notice for CA ControlMinder ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[slackware-security] pidgin (SSA:2013-044-01) (Slackware Security Team <security@...ckware.com>)
Re: Aastra IP Telephone encrypted .tuz configuration file leakage (noreply@...tra.com)
[security bulletin] HPSBMU02815 SSRT100715 rev.5 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execut… (security-alert@...com)
Multiple Vulnerabilities in TP-Link TL-WA701N / TL-WA701ND (devnull@...ur1ty.de)
Multiple Vulnerabilities in Edimax EW-7206-APg and EW-7209APg (devnull@...ur1ty.de)
[SECURITY] [DSA 2623-1] openconnect security update (Florian Weimer <fw@...eb.enyo.de>)
[IA46] Photodex ProShow Producer v5.0.3297 ColorPickerProc() Memory Corruption (Inshell Security <info@...hell.net>)

February 15 (3 messages)

Re: CFP: InfoSec Southwest 2013 (Tod Beardsley <todb@...asploit.com>)
[ MDVSA-2013:012 ] postgresql (security@...driva.com)
Empirum Password Obfuscation Design Flaw (otr@...kcay.de)

February 18 (16 messages)

CORE-2012-1128 - SAP Netweaver Message Server Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
SI6 Networks IPv6 Toolkit v1.3 released! (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2624-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2625-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit) (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2626-1] lighttpd security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2627-1] nginx security update (Thijs Kinkhorst <thijs@...ian.org>)
Sniffing HDCP crypto keys with a $30 Bus Pirate and a broken HDMI cable (Adam Laurie <adam@...roup.co.uk>)
Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit) (Marc Heuse <mh@...sec.de>)
Multiple Vulnerabilities in Netgear DGN2200B (devnull@...ur1ty.de)
[IA47] Photodex ProShow Producer v5.0.3297 PXT File title Value Handling Buffer Overflow (Inshell Security <info@...hell.net>)
PHP-Fusion 7.02.05 SQL Injection (Krzysztof Katowicz-Kowalewski <vnd@...h.net>)
Re: Aastra IP Telephone encrypted .tuz configuration file leakage (Timo Juhani Lindfors <timo.lindfors@....fi>)
[SECURITY] [DSA 2628-1] nss-pam-ldapd security update (Moritz Muehlenhoff <jmm@...ian.org>)
Reflective XSS in Marekkis Watermark-Plugin Cross-Site Scripting Vulnerability (nauty.me04@...il.com)
Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability (nauty.me04@...il.com)

February 19 (4 messages)

FreeBSD Security Advisory FreeBSD-SA-13:01.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:02.libc (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Foswiki Security: Alert CVE-2013-1666 - Remote Code Execution Vulnerability in MAKETEXT macro. (George Clark <geonwiki@...achrone.com>)
SQLi found in Kodak Insite (robert@...crime.com)

February 20 (13 messages)

APPLE-SA-2013-02-19-1 Java for OS X 2013-001 and Mac OS X v10.6 Update 13 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[slackware-security] mozilla-firefox (SSA:2013-050-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2013-050-02) (Slackware Security Team <security@...ckware.com>)
Multiple Cross-Site Scripting (XSS) in glFusion (advisory@...ridge.com)
Alt-N MDaemon's WorldClient Disclosure of Authentication Credentials Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
Alt-N MDaemon's WorldClient Username Enumeration Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
Alt-N MDaemon Email Body HTML/JS Injection Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
Alt-N MDaemon's WorldClient & WebAdmin Cross-Site Request Forgery Vulnerability (demetris papapetrou <demetrispapapetrou@...il.com>)
[ MDVSA-2013:013 ] squid (security@...driva.com)
[CVE-2013-1636]Wordpress pretty-link plugin XSS in SWF‏ (hip@...ight-labs.org)
[SECURITY] [DSA 2630-1] postgresql-8.4 security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 21 (7 messages)

[security bulletin] HPSBMU02836 SSRT101056 rev.1 - HP ArcSight Connector Appliance and ArcSight Logger, Remote Disclosure of Information, … (security-alert@...com)
TeamSHATTER Security Advisory: SQL Injection in Oracle Alter FBA Table (CVE-2012-1751) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle 11g Stealth Password Cracking Vulnerability (CVE-2012-3137) (Shatter <shatter@...secinc.com>)
Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
MyFi Wireless Disk 1.2 iPad iPhone - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Alt-N MDaemon Email Body HTML/JS Injection Vulnerability (brad.wyro@...n.com)
Paper - Hiding Data in Hard-drive Service Areas (Ariel Berkman <aberkman@...il.com>)

February 22 (13 messages)

TeamSHATTER Security Advisory: Oracle EM Cross Site Scripting in XDBResource cancelURL parameter (CVE-2013-0352) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle Database GeoRaster API overflow (CVE-2012-3220) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: HTTP Response Splitting in Oracle EM (policyViewSettings) (CVE-2013-0354) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (advReplicationAdmin) (CVE-2013-0372) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (SCPLBL_COLLECTED parameters) (CVE-2013-0353) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (streams queue) (CVE-2013-0373) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle EM Segment Advisor Arbitrary URL redirection/phishing (CVE-2012-3219) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (Resource Manager) (CVE-2013-0358) (Shatter <shatter@...secinc.com>)
CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage / Public Service Announcement (Kurt Seifried <kseifried@...hat.com>)
OSEC-2013-01: nagios metacharacter filtering omission (Rudolph Pereira <rudolph.pereira@...amsec.com>)
TeamSHATTER Security Advisory: Cross-site scripting in Oracle EM (advReplicationAdmin) (CVE-2013-0355) (Shatter <shatter@...secinc.com>)
Samsung Galaxy S3 partial screen-lock bypass (ukpentestinfo@....com)

February 25 (14 messages)

[ MDVSA-2013:014 ] java-1.6.0-openjdk (security@...driva.com)
[SECURITY] [DSA 2631-1] squid3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
NoSuchCon CFP 2.0 / 15-17 May 2013 / Paris, France (Jonathan Brossard <endrazine@...il.com>)
[SE-2012-01] New security issues affecting Oracle's Java SE 7u15 (Security Explorations <contact@...urity-explorations.com>)
DC4420 - London DEFCON Tuesday 26th Feb 2013 (Major Malfunction <majormal@...ate-radio.org>)
VUPEN Security Research - Microsoft Windows OLE Automation Code Execution Vulnerability (VUPEN Security Research <advisories@...en.com>)
[SECURITY] [DSA 2629-1] openjpeg security update (Michael Gilbert <mgilbert@...ian.org>)
[Onapsis Security Advisory 2013-001] SAP Portal PDC Information Disclosure (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2013-002] SAP SDM Denial of Service (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2013-003] SAP Enterprise Portal Cross-Site-Scripting (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2013-004] SAP J2EE Core Service Arbitrary File Access (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2013-006] SAP SMD Agent Code Injection (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2013-005] SAP CCMS Agent Code Injection (Onapsis Research Labs <research@...psis.com>)
Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 26 (7 messages)

[IA48] Photodex ProShow Producer v5.0.3297 Insecure Library Loading Vulnerability (Inshell Security <info@...hell.net>)
Fwd: [SECURITY] CVE-2013-0253 Apache Maven 3.0.4 (Olivier Lamy <olamy@...che.org>)
CONFidence 2013 - Call for Papers - 28-29.05.2013 Krakow, Poland (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
[slackware-security] seamonkey (SSA:2013-056-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 2632-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[ MDVSA-2013:015 ] apache (security@...driva.com)
Denial of Service vulnerability in War FTP Daemon 1.82 (Jarle Aase <jgaa@...a.com>)

February 27 (2 messages)

[SECURITY] [DSA 2633-1] fusionforge security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2634-1] python-django security update (Nico Golde <nion@...ian.org>)

February 28 (12 messages)

Cisco Security Advisory: Cisco Unified Presence Server Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Excessive CPU Utilization Vulne… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Unified Communications Manager Multiple Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team …)
[ MDVSA-2013:016 ] php (security@...driva.com)
[waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05 (come2waraxe@...oo.com)
Unauthenticated remote access to D-Link DIR-645 devices (roberto@...yhats.it)
[KIS-2013-03] Joomla! <= 3.0.2 (highlight.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
Multiple Vulnerabilities in Piwigo (advisory@...ridge.com)
Cross-Site Scripting (XSS) in Geeklog (advisory@...ridge.com)
Stored Cross-site Scripting ('XSS') in Airvana HubBub C1-600-RT Femtocell (scott.behrens@...hapsis.com)
PHEARCON Call For Papers (AA <anarchy.ang31@...il.com>)
Fileutils ruby gem possible remote command execution and insecure file handling in /tmp (larry0@...com)

157 messages

Powered by blists - more mailing lists