bugtraq mailing list - 2013/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 5	³ 9	⁴ 4	⁵ 3	⁶	⁷ 3	⁸
⁹ 1	¹⁰ 15	¹¹ 13	¹² 1	¹³ 11	¹⁴	¹⁵
¹⁶ 5	¹⁷ 5	¹⁸ 15	¹⁹ 7	²⁰ 8	²¹	²²
²³ 7	²⁴ 3	²⁵ 5	²⁶ 15	²⁷ 3	²⁸	²⁹
³⁰ 11

Messages by day:

September 2 (5 messages)

[slackware-security] gnutls (SSA:2013-242-03) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 2747-1] cacti security update (Florian Weimer <fw@...eb.enyo.de>)
list of vulnerability discovered by RealPentesting (Pedro Guillen <pgn.pedroguillen@...il.com>)
Full Disclosure - Multiple vulnerabilities in five Zoom ADSL Modem/Routers (kyle Lovett <krlovett@...il.com>)
Defense in depth -- the Microsoft way (part 9): erroneous documentation ("Stefan Kanthak" <stefan.kanthak@...go.de>)

September 3 (9 messages)

IndiaNIC Testimonail WP plugin - Multiple vulnerabilities (roguecoder@...h.com)
[SECURITY] [DSA 2740-2] python-django regression update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2748-1] exactimage security update (Florian Weimer <fw@...eb.enyo.de>)
Mikrotik RouterOS 5.* and 6.* sshd remote preauth heap corruption (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[SECURITY] [DSA 2749-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:224 ] libtiff (security@...driva.com)
[ MDVSA-2013:225 ] libdigidoc (security@...driva.com)
ESA-2013-057: RSA Archer(r) GRC Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
PayPal's "invalid" aksession Padding Oracle Flaw ("Timothy D. Morgan" <tmorgan@...curity.com>)

September 4 (4 messages)

[SECURITY] [DSA 2750-1] imagemagick security update (Florian Weimer <fw@...eb.enyo.de>)
[PSA-2013-0903-1] Apple Safari Heap Buffer Overflow (bugtraq@...ketstormsecurity.org)
SEC Consult SA-20130904-0 :: GroupLink everything HelpDesk - undocumented password reset/admin takeover and XSS vulnera… (SEC Consult Vulnerability Lab <research…)
Call for Paper/Event - nullcon Goa 2014 (nullcon <nullcon@...lcon.net>)

September 5 (3 messages)

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Play… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 2751-1] libmodplug security update (Raphael Geissert <geissert@...ian.org>)
[ MDVSA-2013:226 ] roundcubemail (security@...driva.com)

September 7 (3 messages)

CFP: WorldCIST'14 - World Conference on IST; Best papers published in ISI Journals ("Maria Lemos" <marialemos72@...il.com>)
APPLE-SA-2013-09-06-1 AirPort Base Station Firmware Update 7.6.4 (Mihaela Popescu-Stanesti <maru@...le.com>)
APPLE-SA-2013-09-06-1 AirPort Base Station Firmware Update 7.6.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 9 (1 message)

[CORE-2013-0809] Sophos Web Protection Appliance Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)

September 10 (15 messages)

[CVE-2013-5701] Watchguard Server Center v11.7.4 wgpr.dll Insecure Library Loading Local Privilege Escalation Vulnerabilit… (Julien Ahrens <info@...security.com>)
[slackware-security] subversion (SSA:2013-251-01) (Slackware Security Team <security@...ckware.com>)
Event Easy Calendar 1.0.0 WP plugin (roguecoder@...h.com)
[ MDVSA-2013:227 ] python-setuptools (security@...driva.com)
[SECURITY] [DSA 2752-1] phpbb3 security update (Thijs Kinkhorst <thijs@...ian.org>)
Multiple vulnerabilities on D-Link Dir-505 devices (alessandro.dipinto@...ificialstudios.org)
Open-Xchange Security Advisory 2013-09-10 (Martin Braun <martin.braun@...n-xchange.com>)
[ MDVSA-2013:228 ] cacti (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-13:12.ifioctl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:13.nullfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:10.sctp [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:11.sendfile (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ MDVSA-2013:229 ] bzr (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-13:09.ip_multicast [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[security bulletin] HPSBPV02918 rev.1 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Cod… (security-alert@...com)

September 11 (13 messages)

eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Synology DSM multiple vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)
[security bulletin] HPSBUX02926 SSRT101281 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[SECURITY] [DSA 2754-1] exactimage security update (Raphael Geissert <geissert@...ian.org>)
Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Insecure CHIASMUS encryption in GSTOOL (Jan Schejbal <jan.mailinglisten@...glemail.com>)
Cross-Site Scripting (XSS) in WikkaWiki (High-Tech Bridge Security Research <advisory@...ridge.com>)
ProFTPd mod_sftp/mod_sftp_pam invalid pool allocation in kbdint authentication (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[SECURITY] [DSA 2755-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)
OWASP Zed Attack Proxy 2.2.0 (psiinon <psiinon@...il.com>)
[ MDVSA-2013:230 ] gdm (security@...driva.com)
[security bulletin] HPSBUX02928 SSRT101274 rev.1 - HP-UX running perl, Remote Denial of Service (DoS) (security-alert@...com)

September 12 (1 message)

[ MDVSA-2013:231 ] openswan (security@...driva.com)

September 13 (11 messages)

[iBliss Security Advisory] Cross-Site Scripting (XSS) vulnerability in Design-approval-system wordpress plugin (Alexandro Silva <alexos@...iss.com.br>)
APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2013-09-12-2 Safari 5.1.10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
WordPress Fixes Multiple Vulnerabilities With 3.6.1 Release (danielthomson72@...il.com)
OpenSSL,OpenSSH ecdsa authentication code inconsistent return values.. no vulnerability? (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[SECURITY] [DSA 2753-1] mediawiki security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2013:233 ] python-OpenSSL (security@...driva.com)
[SECURITY] [DSA 2756-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
Zimbra Collaboration Suite (ZCS) Session Replay Vulnerability (brianwarehime@...il.com)
[ MDVSA-2013:232 ] libmodplug (security@...driva.com)
[ MDVSA-2013:234 ] python-django (security@...driva.com)

September 16 (5 messages)

[SECURITY] [DSA 2757-1] wordpress security update (Yves-Alexis Perez <corsac@...ian.org>)
Moodle 2.5.0-1 (badges/external.php) PHP Object Injection Vulnerability (emilio.pinn@...il.com)
OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption ("Kevin W. Wall" <kevin.w.wall@...il.com>)
Botconf 2013 - Pre-programme pubished & registration open (Nantes, France, 5-6/12/2013) (Eric Freyssinet <eric.freyssinet@...il.com>)
[ MDVSA-2013:235 ] mediawiki (security@...driva.com)

September 17 (5 messages)

ExpressionEngine 2.6 Persistent XSS (Richard Clifford <darkmantis@...ershade.org>)
EarthVPN certificate configuration vulnerabilities (y6whynrzab@...mail.com)
[ MDVSA-2013:236 ] subversion (security@...driva.com)
APPLE-SA-2013-09-17-1 OS X Server v2.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 2758-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)

September 18 (15 messages)

[slackware-security] mozilla-firefox (SSA:2013-260-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2013-260-03) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2013:237 ] firefox (security@...driva.com)
SQL Injection in vtiger CRM (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SECURITY] [DSA 2759-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2760-1] chrony security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU02917 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Remote Command Execution and Pri… (security-alert@...com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Data Center Network Manager (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Unauthenticated Username and Pa… (Cisco Systems Product Security Incident…)
APPLE-SA-2013-09-18-1 iTunes 11.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2013-09-18-2 iOS 7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBUX02927 SSRT101288 rev.1 - HP-UX Apache Web Server, Remote Execution of Arbitrary Code, Denial of Service (DoS) (security-alert@...com)
APPLE-SA-2013-09-18-3 Xcode 5.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
CVE-2013-5210 Adtran Netvanta Remote Code Injection via XSS ("J. Oquendo" <joquendo@...ensive.net>)
Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

September 19 (7 messages)

[security bulletin] HPSBMU02900 rev.3 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulner… (security-alert@...com)
[slackware-security] glibc (SSA:2013-260-01) (Slackware Security Team <security@...ckware.com>)
An Analysis of the (In)Security State of the GameHouse Game Installation Mechanism (RBS Research <research@...kbasedsecurity.com>)
[PT-2013-41] Arbitrary Code Execution in Ajax File and Image Manager (noreply@...ecurity.ru)
[ MDVSA-2013:238 ] wireshark (security@...driva.com)
Re: %windir%\temp\sso\ssoexec.dll (or: howtrustworthy is Microsoft's build process) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[ MDVSA-2013:239 ] wordpress (security@...driva.com)

September 20 (8 messages)

[security bulletin] HPSBGN02923 rev.1 - HP ArcSight Enterprise Security Manager Management Web Interface, Remote Cross Site Scripting (XSS… (security-alert@...com)
[SECURITY] [DSA 2761-1] puppet security update (Raphael Geissert <geissert@...ian.org>)
[security bulletin] HPSBGN02925 rev.1 - HP IceWall SSO, IceWall File Manager and IceWall Federation Agent, Multiple Remote Unauthorized Ac… (security-alert@...com)
Paypal Inc Bug Bounty #99 - Filter Bypass & Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[iBliss Security Advisory] Blind SQL injection vulnerability in NOSpamPTI wordpress plugin (Alexandro Silva <alexos@...iss.com.br>)
Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
APPLE-SA-2013-09-20-1 Apple TV 6.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS) (security-alert@...com)

September 23 (7 messages)

Wordpress fgallery_plus Plugin Xss vulnerabilities (iedb.team@...il.com)
[ANN] Struts 2.3.15.2 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
Wordpress fgallery_plus Plugin Xss vulnerabilities (iedb.team@...il.com)
Wordpress fgallery_plus Plugin Xss vulnerabilities (iedb.team@...il.com)
Re: [ANN] Struts 2.3.15.2 GA release available - security fix (Emi Lu <emilu@...s.concordia.ca>)
[SECURITY] [DSA 2762-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
[IBliss Security Advisory] Cross-site scripting ( XSS ) in Bradesco gateway wordpress plugin (Alexandro Silva <alexos@...iss.com.br>)

September 24 (3 messages)

Re: DC4420 - London DEFCON - September meet - Tuesday 24th September 2013 (Tony Naggs <tonynaggs@...il.com>)
CVE-2013-5118 - XSS Good for Enterprise iOS (mario@...lest.com)
[SECURITY] [DSA 2763-1] pyopenssl security update (Salvatore Bonaccorso <carnil@...ian.org>)

September 25 (5 messages)

GreHack 2013 - 15 Nov. Grenoble, France - Conf. Registration OPEN (Fab Duchene <f.duchene@...hack.org>)
Multiple Vulnerabilities in X2CRM (High-Tech Bridge Security Research <advisory@...ridge.com>)
[ MDVSA-2013:240 ] glpi (security@...driva.com)
[ MDVSA-2013:241 ] perl-Crypt-DSA (security@...driva.com)
[security bulletin] HPSBMU02872 SSRT101185 rev.2 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS) (security-alert@...com)

September 26 (15 messages)

Cisco Security Advisory: Cisco IOS Software Queue Wedge Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software IPv6 Virtual Fragmentation Reassembly Denial of Service Vulnerability (Cisco Systems Product Security Incident Resp…)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software Zone-Based Firewall and Content Filtering Vulnerability (Cisco Systems Product Security Incident Response Team <psi…)
Cisco Security Advisory: Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response T…)
Cisco Security Advisory: Cisco IOS Software DHCP Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cisco Security Advisory: Cisco IOS Software Resource Reservation Protocol Interface Queue Wedge Vulnerability (Cisco Systems Product Security Incident Response…)
joomla com_zimbcomment Components Local File Include vulnerability (iedb.team@...il.com)
[SECURITY] [DSA 2764-1] libvirt security update (Moritz Muehlenhoff <jmm@...ian.org>)
XAMPP 1.8.1 Local Write Access Vulnerability (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[ MDVSA-2013:242 ] kernel (security@...driva.com)
[ISecAuditors Security Advisories] Multiple Reflected Cross-Site Scripting vulnerabilities (ISecAuditors Security Advisories <advisories@...cauditors.com>)
AW: Cisco Security Advisory: Cisco IOS Software Zone-Based Firewall and Content Filtering Vulnerability ("Aichhorn, Herbert" <Herbert.Aichhorn@...asoft.com>)
ESA-2013-060: EMC VPLEX Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

September 27 (3 messages)

APPLE-SA-2013-09-26-1 iOS 7.0.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re:joomla com_zimbcomment Components Local File Include vulnerability (Sergio Tam <tam.sergio@...il.com>)
[SECURITY] [DSA 2765-1] davfs2 security update (Luciano Bello <luciano@...ian.org>)

September 30 (11 messages)

[SECURITY] [DSA 2766-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[ MDVSA-2013:243 ] polkit (security@...driva.com)
[IBliss Security Advisory] Cross-site scripting ( XSS ) in PHP IDNA Convert (Alexandro Silva <alexos@...iss.com.br>)
Linux Kernel Patches For Linux Kernel Security (geinblues@...il.com)
[slackware-security] seamonkey (SSA:2013-271-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 27671-1] proftpd-dfsg security update (Nico Golde <nion@...ian.org>)
[CVE-2013-5725] - Byword for iOS Data Destruction Vulnerability (guillaume@...aryfactory.ca)
Firefox for Android - Same-origin bypass through symbolic links (Takeshi Terada <mbsdtest01@...il.com>)
Open-Xchange Security Advisory 2013-09-30 (Martin Braun <martin.braun@...n-xchange.com>)
[ MDVSA-2013:244 ] davfs2 (security@...driva.com)
CVE-2130-5680, HylaFAX+ heap overflow, unchecked network traffic. (Dennis Jenkins <dennis.jenkins.75@...il.com>)

149 messages

Powered by blists - more mailing lists