bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 7	² 2	³	⁴	⁵
⁶ 3	⁷ 2	⁸ 1	⁹	¹⁰	¹¹	¹²
¹³ 15	¹⁴ 4	¹⁵ 7	¹⁶ 4	¹⁷ 1	¹⁸	¹⁹
²⁰ 1	²¹ 1	²² 2	²³ 4	²⁴ 1	²⁵	²⁶
²⁷ 1	²⁸ 1

Messages by day:

February 1 (7 messages)

[security bulletin] HPESBGN03696 rev.1 - HPE Helion Eucalyptus, Remote Escalation of Privilege (security-alert@....com)
[SECURITY] [DSA 3778-1] ruby-archive-tar-minitar security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPESBHF03700 rev.1 - HPE iMC PLAT, Remote Disclosure of Information, Denial of Service (DoS) (security-alert@....com)
[SECURITY] [DSA 3779-1] wordpress security update (Sebastien Delafond <seb@...ian.org>)
ESA-2017-003: EMC Network Configuration Manager (NCM) Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
Cisco Security Advisory: Cisco Prime Home Authentication Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[security bulletin] HPSBST03588 rev 1. - HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS, Remote Arbitra… (security-alert@....com)

February 2 (2 messages)

Ghostscript 9.20 Filename Command Execution (apparitionsec@...il.com (hyp3rlinx))
[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)

February 6 (3 messages)

ZoneMinder - multiple vulnerabilities (john@...abyteit.com.au)
[SECURITY] [DSA 3781-1] svgsalamander security update (Moritz Muehlenhoff <jmm@...ian.org>)
Teleopti WFM <= 7.1.0 Multiple Vulnerabilities ("Graph-X" <graphx@...aint.org>)

February 7 (2 messages)

[security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND, Multiple Remote Denial of Service (DoS) (HPE Product Security Response Team <security-alert@hpe…)
SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Visu ser… (SEC Consult Vulnerability Lab <research…)

February 8 (1 message)

ESA-2017-001: EMC Isilon InsightIQ Authentication Bypass Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

February 13 (15 messages)

Cisco Security Advisory: Cisco AnyConnect Secure Mobility Client for Windows SBL Privileges Escalation Vulnerability (Cisco Systems Product Security Incident Re…)
Cisco Security Advisory: Cisco ASA Clientless SSL VPN CIFS Heap Overflow Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Authentication bypass vulnerability in Western Digital My Cloud ("Securify B.V." <lists@...urify.nl>)
[SECURITY] [DSA 3782-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules (Pierre Kim <pierre.kim.sec@...il.com>)
[SECURITY] [DSA 3783-1] php5 security update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 3784-1] viewvc security update (Sebastien Delafond <seb@...ian.org>)
[security bulletin] HPESBNS03702 rev.1 - HPE NonStop OSS Core Utilities with Bash Shell, Local Arbitrary Command Execution, Elevation of… (security-alert@....com)
WebKitGTK+ Security Advisory WSA-2017-0002 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
[security bulletin] HPESBHF03704 rev.1 - HPE OfficeConnect Network Switches, Local Unauthorized Data Modification (security-alert@....com)
[slackware-security] openssl (SSA:2017-041-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2017-041-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] tcpdump (SSA:2017-041-04) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPESBGN03698 rev.1 - HPE DDMi using OpenSSL, Remote Arbitrary Code Execution, Bypass Security Restrictions, Denial o… (security-alert@....com)

February 14 (4 messages)

[SECURITY] [DSA 3786-1] vim security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3787-1] tomcat7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3788-1] tomcat8 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities (security-alert@....com)

February 15 (7 messages)

[security bulletin] HPESBGN03697 rev.1 - HPE Business Service Management (BSM), Remote Disclosure of Information (security-alert@....com)
Cisco Security Response: Cisco Smart Install Protocol Misuse (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[security bulletin] HPESBHF03703 rev.1 - HPE Network Products including Comware v7 and VCX using OpenSSL, Remote Unauthorized Disclosur… (security-alert@....com)
CVE-2017-5586: Remote code execution in OpenText Documentum D2 ("Andrey B. Panfilov" <andrew@...filov.tel>)
Advisory X41-2017-002: Multiple Vulnerabilities in ytnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
CVE-2017-5585: SQL injection in OpenText Documentum Content Server 7.3 (PostgreSQL builds only) ("Andrey B. Panfilov" <andrew@...filov.tel>)
Cisco Security Advisory: Cisco UCS Director Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

February 16 (4 messages)

KL-001-2017-001 : Trendmicro InterScan Arbitrary File Write (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2017-003 : Trendmicro InterScan Remote Root Access Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[SYSS-2017-001] Simplessus Files: SQL Injection (adrian.vollmer@...s.de)
[SYSS-2017-004] Simplessus Files: Path Traversal (adrian.vollmer@...s.de)

February 17 (1 message)

[SECURITY] [DSA 3790-1] spice security update (Salvatore Bonaccorso <carnil@...ian.org>)

February 20 (1 message)

PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 21 (1 message)

APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

February 22 (2 messages)

[security bulletin] HPESBHF03709 rev.1 - HPE Network products including Comware, IMC, and VCX running OpenSSL, Remote Denial of Service … (security-alert@....com)
[SECURITY] [DSA 3788-2] tomcat8 regression update (Salvatore Bonaccorso <carnil@...ian.org>)

February 23 (4 messages)

[SECURITY] [DSA 3791-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-17:02.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Air Transfer 1.2.1 & 1.0.14 - Multiple XSS Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Advisory X41-2017-004: Multiple Vulnerabilities in tnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)

February 24 (1 message)

[SECURITY] [DSA 3792-1] libreoffice security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 27 (1 message)

[SECURITY] [DSA 3795-1] bind9 security update (Michael Gilbert <mgilbert@...ian.org>)

February 28 (1 message)

Advisory X41-2017-001: Multiple Vulnerabilities in X.org (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)

57 messages