bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2014/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 6	² 1	³ 1	⁴	⁵
⁶ 3	⁷ 4	⁸ 4	⁹	¹⁰ 2	¹¹	¹²
¹³ 10	¹⁴ 6	¹⁵ 11	¹⁶ 8	¹⁷ 2	¹⁸	¹⁹
²⁰ 9	²¹ 5	²² 12	²³ 6	²⁴ 7	²⁵	²⁶
²⁷ 4	²⁸ 3	²⁹ 3	³⁰ 3	³¹ 3

Messages by day:

January 1 (6 messages)

[SECURITY] [DSA 2831-1] puppet security update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 2832-1] memcached security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2833-1] openssl security update (Moritz Muehlenhoff <jmm@...ian.org>)
CFP - IEEE Co-sponsored CyberSec2014 - Lebanon Section ("The Third International Conference on Cyber Security, Cyber Warfare, and Digital Forensic" <cyb2014@sdi…)
[SECURITY] [DSA 2834-1] typo3-src security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2013-6480] Libcloud doesn't send scrub_data query parameter when destroying a DigitalOcean node (Tomaz Muraus <tomaz@...che.org>)

January 2 (1 message)

Path Traversal in eduTrac (High-Tech Bridge Security Research <advisory@...ridge.com>)

January 3 (1 message)

[security bulletin] HPSBMU02895 SSRT101253 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of … (security-alert@...com)

January 6 (3 messages)

[SECURITY] [DSA 2835-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2836-1] devscripts security update (Raphael Geissert <geissert@...ian.org>)
Open-Xchange Security Advisory 2014-01-06 (Martin Braun <martin.braun@...n-xchange.com>)

January 7 (4 messages)

[HITB-Announce] HITB Magazine Issue 10 Out Now (Hafez Kamal <aphesz@...kinthebox.org>)
AusCERT2014 Call for Presentations and Tutorials (AusCERT <auscert@...cert.org.au>)
SPAMINA EMAIL FIREWALL 3.3.1.1 - Directory Traversal - (sisco.barrera@...il.com)
[SECURITY] [DSA 2837-1] openssl security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 8 (4 messages)

[SECURITY] [DSA 2838-1] libxfont security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple Vulnerabilities in Horizon QCMS (High-Tech Bridge Security Research <advisory@...ridge.com>)
Improper Authentication in Burden (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SECURITY] [DSA 2839-1] spice security update (Salvatore Bonaccorso <carnil@...ian.org>)

January 10 (2 messages)

nullcon Blackshield Awards 2014 (nullcon <nullcon@...lcon.net>)
[CVE-2013-7204] CSRF in Conceptronic IP Camera (CIPCAMPTIWL) (Felipe Molina <felmoltor@...il.com>)

January 13 (10 messages)

Updated [CVE-2014-0031] CloudStack ListNetworkACL API discloses ACLs for other users (David Nalley <ke4qqq@...che.org>)
Updated [CVE-2013-6398] CloudStack Virtual Router stop/start modifies firewall rules allowing additional access (David Nalley <ke4qqq@...che.org>)
[SECURITY] [DSA 2840-1] srtp security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow (Pedro Ribeiro <pedrib@...il.com>)
Cisco Security Advisory: Undocumented Test Interface in Cisco Small Business Devices (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 2841-1] movabletype-opensource security update (Moritz Muehlenhoff <jmm@...ian.org>)
CISTI'2014: List of Workshops ("ML" <marialemos72@...il.com>)
NETGEAR WNR1000v3 Password Recovery Vulnerability (c1ph04mail@...il.com)
[ MDVSA-2014:001 ] kernel (security@...driva.com)
[SECURITY] [DSA 2842-1] libspring-java security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 14 (6 messages)

[SECURITY] [DSA 2843-1] graphviz security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBUX02960 SSRT101419 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS) (security-alert@...com)
[CVE-2014-0647] Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application (Daniel Wood <daniel.wood@...sp.org>)
[slackware-security] php (SSA:2014-013-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] samba (SSA:2014-013-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] libXfont (SSA:2014-013-01) (Slackware Security Team <security@...ckware.com>)

January 15 (11 messages)

CVE-2013-6430 Possible XSS when using Spring MVC (Pivotal Security Team <security@...ivotal.com>)
FreeBSD Security Advisory FreeBSD-SA-14:03.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:04.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:02.ntpd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[CVE-2014-1238] Cross Site Scripting(XSS) in q-pulse application (ali.hussein@...pag.com)
CVE-2013-6429 Fix for XML External Entity (XXE) injection (CVE-2013-4152) in Spring Framework was incomplete (Pivotal Security Team <security@...ivotal.com>)
FreeBSD Security Advisory FreeBSD-SA-14:01.bsnmpd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 2844-1] djvulibre security update (Raphael Geissert <geissert@...ian.org>)
Online OWASP Security Challenges ("Ivan Buetler" <ivan.buetler@...c.ch>)
[slackware-security] openssl (SSA:2014-013-02) (Slackware Security Team <security@...ckware.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

January 16 (8 messages)

CVE-2013-4200 - Plone URL redirection / Forwarding of cookie data (session hijack) in certain browsers ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
[HITB-Announce] #HITB2014AMS Call for Papers - FINAL CALL (Hafez Kamal <aphesz@...kinthebox.org>)
SQL Injection in Sexy Polling Joomla Extension (High-Tech Bridge Security Research <advisory@...ridge.com>)
[ MDVSA-2014:002 ] bind (security@...driva.com)
[ MDVSA-2014:003 ] nrpe (security@...driva.com)
[ MDVSA-2014:005 ] ejabberd (security@...driva.com)
[ MDVSA-2014:006 ] libxslt (security@...driva.com)
[ MDVSA-2014:004 ] nagios (security@...driva.com)

January 17 (2 messages)

[security bulletin] HPSBUX02961 SSRT101420 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
Open-Xchange Security Advisory 2014-01-17 (Martin Braun <martin.braun@...n-xchange.com>)

January 20 (9 messages)

[ MDVSA-2014:007 ] openssl (security@...driva.com)
[ MDVSA-2014:008 ] openjpeg (security@...driva.com)
[ MDVSA-2014:010 ] memcached (security@...driva.com)
[ MDVSA-2014:009 ] librsvg (security@...driva.com)
[SECURITY] [DSA 2845-1] mysql-5.1 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Ammyy Admin - Hidden hard-coded option and Access Control vulnerability. (bhadresh.k.patel@...eroam.com)
[SECURITY] [DSA 2831-2] puppet regression update (Salvatore Bonaccorso <carnil@...ian.org>)
SI6 Networks' IPv6 Toolkit v1.5.2 released! (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2846-1] libvirt security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 21 (5 messages)

Secunia Research: OpenPNE PHP Object Injection Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2014:011 ] java-1.7.0-openjdk (security@...driva.com)
[ MDVSA-2014:012 ] nss (security@...driva.com)
[SECURITY] [DSA 2847-1] drupal7 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2014:013 ] libxfont (security@...driva.com)

January 22 (12 messages)

[ MDVSA-2014:014 ] php (security@...driva.com)
[FFRRA-20131213] Crafted ICMP ECHO REQUEST can cause denial of service on Juniper SSG20 (research-feedback@...i.jp)
SEC Consult SA-20140122-0 :: Critical vulnerabilities in T-Mobile HOME NET Router LTE (Huawei B593u-12) (SEC Consult Vulnerability Lab <research@...-consult.co…)
[ MDVSA-2014:015 ] cups (security@...driva.com)
[ MDVSA-2014:016 ] spice (security@...driva.com)
[ MDVSA-2014:017 ] net-snmp (security@...driva.com)
[ MDVSA-2014:018 ] net-snmp (security@...driva.com)
[ MDVSA-2014:019 ] elinks (security@...driva.com)
Cisco Security Advisory: Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco TelePresence ISDN Gateway D-Channel Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
Cisco Security Advisory: Cisco TelePresence System Software Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
[ MDVSA-2014:020 ] x11-server (security@...driva.com)

January 23 (6 messages)

CISTI'2014: CFP - Doctoral Symposium ("ML" <marialemos72@...il.com>)
CONFidence 2014- Call for Papers (Andrzej Targosz <andrzej.targosz@...idea.org.pl>)
APPLE-SA-2014-01-22-1 iTunes 11.1.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page (tudor.enache@...pag.com)
SQL Injection in JV Comment Joomla Extension (High-Tech Bridge Security Research <advisory@...ridge.com>)
Cross-Site Scripting (XSS) in Komento Joomla Extension (High-Tech Bridge Security Research <advisory@...ridge.com>)

January 24 (7 messages)

[SECURITY] [DSA 2848-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2014-1607.] Cross Site Scripting(XSS) in Drupal Event calendar module (ali.hussein@...pag.com)
[CVE-2013-6235] - Multiple Reflected XSS vulnerabilities in JAMon v2.7 (Christian Catalano <ch.catalano@...il.com>)
[SECURITY] [DSA 2826-2] denyhosts regression update (Yves-Alexis Perez <corsac@...ian.org>)
[CVE-2014-1664] GoToMeeting Information Disclosure via Logging Output (Android) (cjlacayo@...il.com)
[CTF] nullcon HackIM 2014 will start at 24-01-2014, when the clock will strike at 11:59 (+5:30 GMT) (nullcon <nullcon@...lcon.net>)
Security Vulnerabilities in Apache Cordova / PhoneGap (mgeorgiev@...xas.edu)

January 27 (4 messages)

[ MDVSA-2014:022 ] augeas (security@...driva.com)
[ MDVSA-2014:021 ] perl-Proc-Daemon (security@...driva.com)
[ MDVSA-2014:023 ] hplip (security@...driva.com)
[ MDVSA-2014:024 ] graphviz (security@...driva.com)

January 28 (3 messages)

Multiple Vulnerabilities in Eventum (High-Tech Bridge Security Research <advisory@...ridge.com>)
DC4420 - London DEFCON - January meet - Tuesday 28th January 2014 (Major Malfunction <majormal@...ate-radio.org>)
Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

January 29 (3 messages)

Vulnerabilities within Mura CMS / Sitecore MCS / SmarterMail (Mark Litchfield <mark@...uratary.com>)
[slackware-security] mozilla-nss (SSA:2014-028-02) (Slackware Security Team <security@...ckware.com>)
SiteCore XML Control Script Insertion (Mark Litchfield <mark@...uratary.com>)

January 30 (3 messages)

[slackware-security] bind (SSA:2014-028-01) (Slackware Security Team <security@...ckware.com>)
SimplyShare v1.4 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Ektron CMS Take Over - Hijacking Accounts (Mark Litchfield <mark@...uratary.com>)

January 31 (3 messages)

Joomla! JomSocial component < 3.1.0.1 - Remote code execution (Matias Fontanini <matias.fontanini@...il.com>)
[SECURITY] [DSA 2849-1] curl security update (Florian Weimer <fw@...eb.enyo.de>)
[SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service (Security Explorations <contact@...urity-explorations.com>)

113 messages