bugtraq mailing list - 2013/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 13	⁴ 4	⁵ 2	⁶ 6	⁷	⁸	⁹
¹⁰ 2	¹¹ 15	¹² 5	¹³ 5	¹⁴	¹⁵	¹⁶
¹⁷ 1	¹⁸ 11	¹⁹ 8	²⁰ 6	²¹ 1	²²	²³
²⁴ 7	²⁵ 9	²⁶ 4	²⁷ 15	²⁸ 10	²⁹	³⁰ 2

Messages by day:

June 3 (13 messages)

[ MDVSA-2013:171 ] gnutls (security@...driva.com)
[SECURITY] [DSA 2699-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2700-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2701-1] krb5 security update (Michael Gilbert <mgilbert@...ian.org>)
Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous other … ("Stefan Kanthak" <stefan.kanthak@...go.…)
CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption (Felipe Manzano <feliam@...amuse.com>)
CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow (Felipe Manzano <feliam@...amuse.com>)
CVE-2013-3664 - Sketchup Multiple Vulnerabilities (Felipe Manzano <feliam@...amuse.com>)
Unauthenticated command execution on Netgear DGN devices (roberto@...yhats.it)
Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues (Pedro Andujar <pandujar@...fault.es>)
DS3 Authentication Server - Multiple Issues (Pedro Andujar <pandujar@...fault.es>)
Open-Xchange Security Advisory 2013-06-03 (Martin Braun <martin.braun@...n-xchange.com>)
[ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0 (ISecAuditors Security Advisories <advisories@...cauditors.com>)

June 4 (4 messages)

CVE-2013-3724 Monkey HTTPD 1.1.1 - Denial of Service Vulnerability (dougtko@...il.com)
CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution (dougtko@...il.com)
[SECURITY] [DSA 2702-1] telepathy-gabble security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Monkey HTTPD 1.1.1 - Denial of Service Vulnerability (dougtko@...il.com)

June 5 (2 messages)

[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of … (security-alert@...com)
[CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)

June 6 (6 messages)

CVE-2013-3734 - JBoss AS Administration Console - Password Returned in Later Response (amroot <i@...oot.com>)
[ANN] Struts 2.3.14.3 GA (fast-track) release available (Lukasz Lenart <lukaszlenart@...che.org>)
SEC Consult SA-20130605-0 :: Multiple vulnerabilities in CTERA Portal (SEC Consult Vulnerability Lab <research@...-consult.com>)
CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
APPLE-SA-2013-06-04-2 Safari 6.0.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)

June 10 (2 messages)

Re: [#1298868584] Copy&paste from web browser considered dangerous ("Google Security" <security@...gle.com>)
DEFCON London - DC4420 - June CFP - Lightning talks!!! - Tuesday 25th June 2013 (Major Malfunction <majormal@...ate-radio.org>)

June 11 (15 messages)

WordPress 3.5.1, Denial of Service (Krzysztof Katowicz-Kowalewski <vnd@...h.net>)
Re: Netgear FVG318 is vunerable to DOS attack (No@...il.com)
Re: Re: Netgear FVG318 is vunerable to DOS attack (no@...il.com)
Fail2ban 0.8.9, Denial of Service (Apache rules only) (Krzysztof Katowicz-Kowalewski <vnd@...h.net>)
Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2703-1] subversion security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2704-1] mesa security update (Raphael Geissert <geissert@...ian.org>)
CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C (Anthony Dubuissez <anthony.dubuissez@...era.fr>)
[SECURITY] [DSA 2705-1] pymongo security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2706-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)
[slackware-security] php (SSA:2013-161-01) (Slackware Security Team <security@...ckware.com>)
CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (James Joshi <jjoshi@...t.edu>)
[security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access (security-alert@...com)
t2'13: Call for Papers 2013 (Helsinki / Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)
Re: WordPress 3.5.1, Denial of Service (Peter Bex <Peter.Bex@...all.nl>)

June 12 (5 messages)

[security bulletin] HPSBMU02884 rev.1 - HP Service Manager and HP ServiceCenter, Cross Site Scripting (XSS) and Disclosure of Information (security-alert@...com)
CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: WordPress 3.5.1, Denial of Service (Solar Designer <solar@...nwall.com>)
SQL Injection in Dolphin (advisory@...ridge.com)
[ MDVSA-2013:172 ] wireshark (security@...driva.com)

June 13 (5 messages)

Slideware of recent presentations about IPv6 security (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2707-1] dbus security update (Yves-Alexis Perez <corsac@...ian.org>)
[ MDVSA-2013:173 ] subversion (security@...driva.com)
LSE Leading Security Experts GmbH - LSE-2013-06-13 - Avira AntiVir Engine ("LSE Leading Security Experts GmbH \(Security Advisories\)" <advisories@...xperts.de…)
Re: WordPress 3.5.1, Denial of Service (Henri Salo <henri@...v.fi>)

June 17 (1 message)

[security bulletin] HPSBHF02885 rev.2 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access (security-alert@...com)

June 18 (11 messages)

CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability ("Cantor, Scott" <cantor.2@....edu>)
CVE-2013-2155: Apache Santuario C++ denial of service vulnerability ("Cantor, Scott" <cantor.2@....edu>)
CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability ("Cantor, Scott" <cantor.2@....edu>)
Re: CVE-2013-2156: Apache Santuario C++ heap overflow vulnerability ("Cantor, Scott" <cantor.2@....edu>)
FreeBSD Security Advisory FreeBSD-SA-13:06.mmap (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 2710-1] xml-security-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
Apple and Wifi Hotspot Credentials Management Vulnerability (Jeffrey Walton <noloader@...il.com>)
Re: Apple and Wifi Hotspot Credentials Management Vulnerability (Jeffrey Walton <noloader@...il.com>)
APPLE-SA-2013-06-18-1 Java for OS X 2013-004 and Mac OS X v10.6 Update 16 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 2698-1] tiff security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 2628-2] nss-pam-ldapd update (Moritz Muehlenhoff <jmm@...ian.org>)

June 19 (8 messages)

ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) V… (Security Alert <Security_Alert@....com>)
Remote code execution in Puppet (andreas.lindqvist@....se)
Facebook critical design flaw (jjshoe@...il.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
[SECURITY] [DSA 2711-1] haproxy security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2013-0523] IBM WebSphere Commerce: Encrypted URL Parameter Vulnerable to Padding Oracle Attacks (VSR Advisories <advisories@...curity.com>)

June 20 (6 messages)

Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Hunger <hunger@...ger.hu>)
Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Emiel Kollof <coolvibe@...kerheaven.org>)
Joomla crypto vulnerability (all versions) (Marco Beierer <marco.beierer@...ecurity.ch>)
[SECURITY] [DSA 2712-1] otrs2 security update (Florian Weimer <fw@...eb.enyo.de>)
Android ICS "adb restore" directory traversal vulnerability (resending after bounce) (Ariel Berkman <aberkman@...il.com>)
[security bulletin] HPSBUX02876 SSRT101148 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)

June 21 (1 message)

DC4420 - London DEFCON - June meet - Lightning Talks!!! - Tuesday 25th June 2013 (Tony Naggs <tonynaggs@...il.com>)

June 24 (7 messages)

FreeBSD Security Advisory FreeBSD-SA-13:06.mmap [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Facebook Information Disclosure (Packet Storm <bugtraq@...ketstormsecurity.org>)
ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln (kyle Lovett <krlovett@...il.com>)
GreHack 2013 - CFP ends on June, 30 - Conf: Nov. 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
Linksys X3000 - Multiple Vulnerabilities (devnull@...ur1ty.de)
[slackware-security] curl (SSA:2013-174-01) (Slackware Security Team <security@...ckware.com>)
CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (Deadline Extended) (James Joshi <jjoshi@...t.edu>)

June 25 (9 messages)

[ MDVSA-2013:176 ] kernel (security@...driva.com)
[security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access (security-alert@...com)
Re: Facebook Information Disclosure (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2713-1] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Facebook Information Disclosure (terry white <twhite@...ota.com>)
SEC Consult SA-20130625-0 :: Multiple vulnerabilities in IceWarp Mail Server (SEC Consult Vulnerability Lab <research@...-consult.com>)
Barnraiser Prairie OpenID idp: Directory traversal attack (prairie@...linator.com)
[ MDVSA-2013:177 ] dbus (security@...driva.com)
[ MDVSA-2013:178 ] nfs-utils (security@...driva.com)

June 26 (4 messages)

[Full-disclosure] Magnolia CMS multiple access control vulnerabilities (Adrian Furtuna <adif2k8@...il.com>)
[SECURITY] [DSA 2714-1] kfreebsd-9 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple XSS Vulnerabilities in Xaraya (advisory@...ridge.com)
[SECURITY] [DSA 2716-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)

June 27 (15 messages)

Security focus, we need your help (Adnan Ahmad <ahmad.adnan@...il.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Email Security Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Web Security Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2013:179 ] firefox (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Content Security Management Appliance (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability (Cisco Systems Product Security Incident Response…)
[SECURITY] [DSA 2715-1] puppet security update (Raphael Geissert <geissert@...ian.org>)
[security bulletin] HPSBST02890 rev.1 - HP StoreOnce D2D Backup System, Unauthorized Remote Access and Modification (security-alert@...com)
[security bulletin] HPSBUX02886 rev.1 - HP-UX Running HP Secure Shell, Remote Denial of Service (DoS) (security-alert@...com)
CVE-2013-2210 ("Cantor, Scott" <cantor.2@....edu>)
[ MDVSA-2013:180 ] curl (security@...driva.com)
[ MDVSA-2013:181 ] mesa (security@...driva.com)
[ MDVSA-2013:182 ] mesa (security@...driva.com)
[ MDVSA-2013:183 ] java-1.7.0-openjdk (security@...driva.com)
[ MDVSA-2013:184 ] perl-Dancer (security@...driva.com)

June 28 (10 messages)

[ MDVSA-2013:185 ] perl-Module-Signature (security@...driva.com)
Re: Re: EMC Avamar: World writable cache files (security_alert@....com)
eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[slackware-security] ruby (SSA:2013-178-01) (Slackware Security Team <security@...ckware.com>)
Re: Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability (Henri Salo <henri.salo@...si.fi>)
[ MDVSA-2013:186 ] puppet (security@...driva.com)
Re: EMC Avamar: World writable cache files (security_alert@....com)

June 30 (2 messages)

[SECURITY] [DSA 2717-1] xml-security-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
Wordpress wp-private-messages Plugin Sql Injection vulnerability (iedb.team@...il.com)

126 messages

Powered by blists - more mailing lists