full-disclosure mailing list - 2013/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 3	² 8	³ 3
⁴ 6	⁵ 3	⁶ 5	⁷ 1	⁸ 7	⁹ 2	¹⁰ 6
¹¹ 5	¹² 11	¹³ 7	¹⁴ 7	¹⁵ 8	¹⁶ 7	¹⁷ 3
¹⁸ 14	¹⁹ 4	²⁰ 3	²¹	²²	²³	²⁴
²⁵	²⁶	²⁷ 19	²⁸ 30

Messages by day:

February 1 (3 messages)

[HITB-Announce] #HITB2013AMS FINAL CALL for Paper Submissions (Hafez Kamal <aphesz@...kinthebox.org>)
Oracle Automated Service Manager 1.3 & Auto Service Request 4.3 local root during install ("Larry W. Cashdollar" <larry0@...com>)
[ MDVSA-2013:006 ] freetype2 (security@...driva.com)

February 2 (8 messages)

Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
FreeBSD 9.1 ftpd Remote Denial of Service (Maksymilian Arciemowicz <max@...b.net>)
[SECURITY] [DSA 2614-1] libupnp security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2615-1] libupnp4 security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2617-1] samba security update (Luciano Bello <luciano@...ian.org>)
Defcon Kerala Information Security Meet 2013 Call For Papers (Ajin Abraham <ajin25@...il.com>)
Multiple vulnerabilities in Flash News theme for WordPress ("MustLive" <mustlive@...security.com.ua>)

February 3 (3 messages)

Armor Safe Technologies CacheTALK III Default Admin Password (BugsNotHugs <bugsnothugs@...il.com>)
Multiple Vulnerabilities: Nagios XI 2012R1.5b ("temp66@...il.com" <temp66@...il.com>)
[SECURITY] [DSA 2616-1] nagios3 security update (Jonathan Wiltshire <jmw@...ian.org>)

February 4 (6 messages)

[SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU (Security Explorations <contact@...urity-explorations.com>)
[IMF 2013] Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Free Monthly Websites v2.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #20 - Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities - full (Vulnerability Lab <research@...nerability-lab.com>)
OSX (ML) assertion bug (Gino O'Donnell <g@...7.io>)

February 5 (3 messages)

Re: [SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU (Security Explorations <contact@...urity-explorations.com>)
A new Facebook Token Hijacker malware (Vulncheck Security <info@...ncheck.com>)
[ MDVSA-2013:007 ] mysql (security@...driva.com)

February 6 (5 messages)

Hackito Ergo Sum 2013 - Call For Paper - HES2013 CFP (Steeve BARBEAU <steeve.barbeau@...il.com>)
WirelessFiles v1.1 iPad iPhone - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Microsoft Skype Shop - GiftCards Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2013:008 ] mysql (security@...driva.com)
Cisco Security Advisory: Cisco ATA 187 Analog Telephone Adaptor Remote Access Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)

February 7 (1 message)

DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up (DefenseCode <defensecode@...ensecode.com>)

February 8 (7 messages)

PayPal Bug Bounty #26 - Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ifIndex overflow (Linux Kernel - net/core/dev.c) [maybe offtopic] (Daniel Preussker <daniel@...ussker.net>)
[SECURITY] [DSA 2618-1] ircd-hybrid security update (Luciano Bello <luciano@...ian.org>)
Mathematica9.0.1 on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)
Cybsec Advisory#2013-0208 Multiple Cross Site Request Forgery vulnerabilities in TP-LINK Admin Panel]] ("CYBSEC Labs" <cybseclabs@...sec.com>)
Re: [SECURITY] [DSA 2618-1] ircd-hybrid security update ("303.100@...il.com" <303.100@...il.com>)

February 9 (2 messages)

[ MDVSA-2013:009 ] libssh (security@...driva.com)
George Bush's family emails, pics ransacked - and spewed online (Georgi Guninski <guninski@...inski.com>)

February 10 (6 messages)

[SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2612-2] ircd-ratbox update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: ifIndex overflow (Linux Kernel - net/core/dev.c) [maybe offtopic] (Daniel Corbe <corbe@...be.net>)
New security advisories for Apache CXF (Colm O hEigeartaigh <coheigea@...che.org>)
Arbitrary command execution and trivial password guessing on Brother printers (auto61149890@...hmail.me)
Re: ifIndex overflow (Linux Kernel - net/core/dev.c) [maybe offtopic] (Jeffrey Walton <noloader@...il.com>)

February 11 (5 messages)

Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack (Adam Laurie <adam@...roup.co.uk>)
Re: ifIndex overflow (Linux Kernel - net/core/dev.c) [maybe offtopic] (Daniel Preussker <daniel@...ussker.net>)
Huawei Mobile Partner | Permission Weakness Local Privilege Escalation (YGN Ethical Hacker Group <lists@...g.net>)
#warning -- DICE.COM insecure passwords (warning@...e-error.net)
[ MDVSA-2013:010 ] java-1.6.0-openjdk (security@...driva.com)

February 12 (11 messages)

Re: Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack (Adam Laurie <adam@...roup.co.uk>)
Crafted certificate can cause network exploitable exec/dos (Siemens Business Services Trust Center Root-CA V1.1.1) -- … (Dirk-Willem van Gulik <dirkx@...weaving…)
Re: #warning -- DICE.COM insecure passwords (Valdis.Kletnieks@...edu)
Re: ifIndex overflow (Linux Kernel - net/core/dev.c) [maybe offtopic] (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 2620-1] rails security update (Florian Weimer <fw@...eb.enyo.de>)
Re: #warning -- DICE.COM insecure passwords (Tim <tim-security@...tinelchicken.org>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Polycom HDX Telnet Authorization Bypass (Paul Haas <paul.haas@...urity-assessment.com>)
Re: #warning -- DICE.COM insecure passwords (Travis Biehn <tbiehn@...il.com>)
Re: #warning -- DICE.COM insecure passwords (Jeffrey Walton <noloader@...il.com>)
Paypal Bug Bounty #17 - Certificate Listing/Import Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 13 (7 messages)

Transferable Remote v1.1 iPad iPhone - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2013:011 ] samba (security@...driva.com)
[Security-news] SA-CONTRIB-2013-016 - Banckle Chat - Access bypass - Unsupported (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-015 - Manager Change for Organic Groups - Cross site scripting (XSS) (security-news@...pal.org)
CA20130213-01: Security Notice for CA ControlMinder ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Microsoft Internet Explorer SLayoutRun Use After Free (Scott Bell <scott.bell@...urity-assessment.com>)

February 14 (7 messages)

Sonicwall OEM Scrutinizer v9.5.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Simple password obfuscation in Enterprise Architect ("Diening, Holm" <holm.diening@...atik.de>)
[SECURITY] [DSA 2621-1] openssl security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2622-1] polarssl security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2623-1] openconnect security update (Florian Weimer <fw@...eb.enyo.de>)
[IA46] Photodex ProShow Producer v5.0.3297 ColorPickerProc() Memory Corruption (Inshell Security <info@...hell.net>)
Empirum Password Obfuscation Design Flaw (otr@...kcay.de)

February 15 (8 messages)

Re: CFP: InfoSec Southwest 2013 (Tod Beardsley <todb@...asploit.com>)
McAfee Vulnerability in VSE and Host IPS ("Anonymous Remailer (austria)" <mixmaster@...ailer.privacy.at>)
SilentCircle (Encrypted VoIP auditing) - Please cooperate (sc2013a@...hmail.com)
GrrCON 2013: Grand Rapids, MI - Sept 12 -13 (<cfp@...con.org>)
Sonar v.3.4.1 => XSS (CWE-79) ("Kacper R." <info@...ilteam.pl>)
[ MDVSA-2013:012 ] postgresql (security@...driva.com)
CSRF, XSS and Redirector vulnerabilities in IBM Lotus Domino ("MustLive" <mustlive@...security.com.ua>)
CORE-2012-1128 - SAP Netweaver Message Server Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)

February 16 (7 messages)

Re: SilentCircle (Encrypted VoIP auditing) - Please cooperate (Ali-Reza Anghaie <ali@...ketknife.com>)
Apple IOS 6.1 Simple Passcode Bypass (Swair Mehta <swairmehta@...il.com>)
[SECURITY] [DSA 2624-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
SI6 Networks IPv6 Toolkit v1.3 released! (Fernando Gont <fgont@...networks.com>)
АВТО: Я временно отсутствую (возврат 22.02.2013) (Maksim.Filenko@...b.com)
[IA47] Photodex ProShow Producer v5.0.3297 PXT File title Value Handling Buffer Overflow (Inshell Security <info@...hell.net>)
[SECURITY] [DSA 2625-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 17 (3 messages)

Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit) (Fernando Gont <fgont@...networks.com>)
Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit) (Marc Heuse <mh@...sec.de>)
Smoke Loader C&C panel lfi and arbitrary file deletion (Ian French <tohitsugu@...il.com>)

February 18 (14 messages)

Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (Vulnerability Lab <research@...nerability-lab.com>)
USB Sharp v1.3.4 iPad iPhone - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PACK 0.0.3 - Password Analysis and Cracking Kit (iphelix <iphelix@...sprawl.org>)
[SECURITY] [DSA 2626-1] lighttpd security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2627-1] nginx security update (Thijs Kinkhorst <thijs@...ian.org>)
Re: Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Sniffing HDCP crypto keys with a $30 Bus Pirate and a broken HDMI cable (Adam Laurie <adam@...roup.co.uk>)
Re: Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (andfarm <andfarm@...il.com>)
Re: Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
[SECURITY] [DSA 2628-1] nss-pam-ldapd security update (Moritz Muehlenhoff <jmm@...ian.org>)
MyFi Wireless Disk 1.2 iPad iPhone - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Air Transfer v1.2.0 iPad iPhone - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
XSS vulnerabilities in ZeroClipboard ("MustLive" <mustlive@...security.com.ua>)

February 19 (4 messages)

LACSEC 2013: 8th Network Security Event for Latin America and the Caribbean (CFP) (Fernando Gont <fgont@...networks.com>)
TWiki Security Alert CVE-2013-1751: MAKETEXT Variable Has Another Shell Command Execution Issue (Peter Thoeny <peter09@...eny.org>)
Paper - Hiding Data in Hard-drive Service Areas (Ariel Berkman <aberkman@...il.com>)
Foswiki Security: Alert CVE-2013-1666 - Remote Code Execution Vulnerability in MAKETEXT macro. (George Clark <geonwiki@...achrone.com>)

February 20 (3 messages)

Re: Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2 (Vulnerability Lab <research@...nerability-lab.com>)
XSS vulnerabilities in YAML, Multiproject for Trac, UserCollections for Piwigo, TAO and TableTools for DataTables for … ("MustLive" <mustlive@...security.com.ua…)
[ MDVSA-2013:013 ] squid (security@...driva.com)

February 27 (19 messages)

[SECURITY] [DSA 2632-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
Cisco Security Advisory: Cisco Unified Presence Server Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Excessive CPU Utilization Vul… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 2634-1] python-django security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2633-1] fusionforge security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2633-1] fusionforge security update (Yves-Alexis Perez <corsac@...ian.org>)
Gambas 3.3.4 Directory hijack vulnerability ("Larry W. Cashdollar" <larry0@...com>)
test (imipak <imipak@...il.com>)
[ MDVSA-2013:015 ] apache (security@...driva.com)
[Security-news] SA-CONTRIB-2013-024 - Creative Theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-026 - Best Responsive Theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-025 - Fresh Theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-027 - Professional theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-032 - Company theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-030 - Clean Theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[CTF] nullcon Battle UnderGround 2013 will start at 01-03-2013, when the clock will strike at 10:00 am (IST) (nullcon <nullcon@...lcon.net>)
Archlinux/x86-64 3.1.x-3.7.x x86-64 CVE-2013-1763 sock_diag_handlers[] warez (sd <sd@...ksheep.org>)
DC4420 - London DEFCON Tuesday 26th Feb 2013 (Major Malfunction <majormal@...ate-radio.org>)
NoSuchCon CFP 2.0 / 15-17 May 2013 / Paris, France (Jonathan Brossard <endrazine@...il.com>)

February 28 (30 messages)

Hacking Xerox MFP Firmware Patch Process - percX at foofus.net (dh@...ereddefense.com)
user data collection ("taxakis" <taxakis@...il.com>)
Re: user data collection (Valdis.Kletnieks@...edu)
Re: test (coderman <coderman@...il.com>)
Re: test (Jeffrey Walton <noloader@...il.com>)
Cisco 3560 DoS (BugsNotHugs <bugsnothugs@...il.com>)
[SE-2012-01] New security issues affecting Oracle's Java SE 7u15 (updated) (Security Explorations <contact@...urity-explorations.com>)
44CON 12th - 13th September London 2013 Call For Papers/Workshops (Steve <steve@...on.com>)
Re: MySQL Denial of Service Zeroday PoC (Sergei Golubchik <serg@...monty.org>)
Advisory Notification (Raffaele Addesso <r.addesso@...ersistemi.it>)
[ MDVSA-2013:016 ] php (security@...driva.com)
TeamSHATTER Security Advisory: SQL Injection in Oracle Alter FBA Table (CVE-2012-1751) (Shatter <shatter@...secinc.com>)
[CTF] nullcon Battle UnderGround 2013 will start at 01-03-2013, when the clock will strike at 10:00 am (IST) (nullcon <nullcon@...lcon.net>)
Fileutils ruby gem possible remote command execution and insecure file handling in /tmp ("Larry W. Cashdollar" <larry0@...com>)
TeamSHATTER Security Advisory: Oracle 11g Stealth Password Cracking Vulnerability (CVE-2012-3137) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle EM Cross Site Scripting in XDBResource cancelURL parameter (CVE-2013-0352) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle Database GeoRaster API overflow (CVE-2012-3220) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: HTTP Response Splitting in Oracle EM (policyViewSettings) (CVE-2013-0354) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (advReplicationAdmin) (CVE-2013-0372) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (SCPLBL_COLLECTED parameters) (CVE-2013-0353) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Oracle EM Segment Advisor Arbitrary URL redirection/phishing (CVE-2012-3219) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (streams queue) (CVE-2013-0373) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: Cross-site scripting in Oracle EM (advReplicationAdmin) (CVE-2013-0355) (Shatter <shatter@...secinc.com>)
TeamSHATTER Security Advisory: SQL Injection in Oracle EM (Resource Manager) (CVE-2013-0358) (Shatter <shatter@...secinc.com>)
[waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05 (Janek Vind <come2waraxe@...oo.com>)
Re: test ("Hey, Lukas (KRZ)" <L.Hey@....de>)
ROOTCON 7 Call for Papers (JJ Turla <shipcodez@...il.com>)
Re: Arbitrary command execution and trivial password guessing on Brother printers (auto61149890@...hmail.me)
Re: Arbitrary command execution and trivial password guessing on Brother printers (Jeffrey Walton <noloader@...il.com>)

162 messages

Powered by blists - more mailing lists