SecurityFocus Bugtraq
By Subject
328 messages sorted by: [ author ] [ date ] [ thread ] [ attachment ]
Starting: 01/01/04
Ending: 01/30/04
- ----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========----------
- ----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========----------
- ----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========----------
- 2Wire-Gateway Cross Site Scripting and Directory Transversal bug in SSL Form
- [ GLSA 200401-02 ] Honeyd remote detection vulnerability via a probe packet
- [ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability
- [ GLSA 200401-04 ] GAIM 0.75 Remote overflows
- [CLA-2004:799] Conectiva Security Announcement - kernel
- [CLA-2004:800] Conectiva Security Announcement - lftp
- [CLA-2004:801] Conectiva Security Announcement - ethereal
- [CLA-2004:808] Conectiva Security Announcement - cvs
- [CLA-2004:809] Conectiva Security Announcement - screen
- [CLA-2004:810] Conectiva Security Announcement - kdepim
- [ESA-20040105-001] 'kernel' bug and security fixes.
- [ESA-20040119-002] 'tcpdump' multiple vulnerabilities.
- [FLSA-2004:1187] Updated screen resolves security vulnerability
- [FLSA-2004:1207] Updated cvs resolves security vulnerability
- [Fwd: [TH-research] Bagle remote uninstall]
- [Fwd: [TH-research] OT: Israeli Post Office break-in]
- [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V1.0
- [OpenCA Advisory] Vulnerability in signature verification
- [OpenPKG-SA-2004.001] OpenPKG Security Advisory (inn)
- [OpenPKG-SA-2004.002] OpenPKG Security Advisory (tcpdump)
- [RHSA-2003:417-01] Updated kernel resolves security vulnerability
- [RHSA-2004:001-01] Updated Ethereal packages fix security issues
- [RHSA-2004:003-01] Updated CVS packages fix minor security issue
- [RHSA-2004:006-01] Updated kdepim packages resolve security vulnerability
- [RHSA-2004:007-01] Updated tcpdump packages fix various vulnerabilities
- [RHSA-2004:032-01] Updated Gaim packages fix various vulnerabiliies
- [RHSA-2004:034-01] Updated mc packages resolve buffer overflow vulnerability
- [SCSA-025] Invision Power Board SQL Injection Vulnerability
- [SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability
- [SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution
- [SECURITY] [DSA 407-1] New ethereal packages fix several vulnerabilities
- [SECURITY] [DSA 408-1] New screen packages fix group utmp exploit
- [SECURITY] [DSA 409-1] New bind packages fix denial of service
- [SECURITY] [DSA 410-1] New libnids packages fix buffer overflow
- [SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability
- [SECURITY] [DSA 412-1] New nd packages fix buffer overflows
- [SECURITY] [DSA 413-1] New Linux 2.4.18 packages fix locate root exploit
- [SECURITY] [DSA 414-1] New jabber packages fix denial of service
- [SECURITY] [DSA 415-1] New zebra packages fix denial of service
- [SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal
- [SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)
- [SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha)
- [SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak
- [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection
- [SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution
- [SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking
- [SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64)
- [SECURITY] [DSA 424-1] New mc packages fix buffer overflow
- [SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities
- [SECURITY] [DSA 426-1] New netpbm-free packages fix insecure temporary file creation
- [SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)
- [SECURITY] [DSA 428-1] New slocate packages fix buffer overflow
- [SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys
- [SECURITY] [DSA 430-1] New trr19 packages fix local games exploit
- [SECURITY] [DSA-422-1] multiple CVS improvements
- [SECURITY] INN: Buffer overflow in control message handling
- [slackware-security] GAIM security update (SSA:2004-026-01)
- [slackware-security] INN security update (SSA:2004-014-02)
- [slackware-security] kdepim security update (SSA:2004-014-01)
- [slackware-security] Kernel security update (SSA:2004-006-01)
- [slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01)
- [SST]ServU MDTM command remote buffero verflow adv
- [SuSE 9.0] possible symlink attacks in some scripts
- a method for bypassing cookie restrictions in web browsers
- Abuse report email for CitiBank/CitiCards?
- Advisory 01/2004: 12 x Gaim remote overflows
- an article on the Israeli Post Office break-in
- Announcing adore-ng 0.31
- Announcing Userland Exec
- AV products vulnerability [Fwd: [TH-research] Upx hack tool]
- Bagle worm status + more blocking information
- BRS WebWeaver Webserver Cross Site Scripting Vulnerability
- BWS v1.0b3 Directory Transversal Vulnerability
- bzip2 bombs still causes problems in antivirus-software
- Chaosreader: Trace TCP/UDP from snoop/tcpdump logs
- Cisco Security Advisory: Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049)
- Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability
- Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers
- Cisco Security Advisory: Vulnerabilities in H.323 Message Processing
- DameWare Mini Remote Control < v3.73 remote exploit by kralor]
- Denial of service in Getware's built-in webserver (Webcam Live and Photohost)
- Denial Of Service in SurfNOW 2.2
- Directories management bypassing in Goahead webserver <= 2.1.8
- Directory traversal and XSS in BremsServer 1.2.4
- Directory Traversal in Accipiter Direct Server 6.0
- DoS in GoodTech Telnet Server 4.0.103
- EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity
- Elevated scanning: TCP port 135 (RPC) AND 445 (Domain Services)
- exploit for HD Soft Windows FTP Server 1.6
- Finjan SurfinGate Vulnerability
- FirstClass Client 7.1: Command Execution via Email Web Link
- FishCart Integer Overflow / Rounding Error
- FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs
- FREESCO public http server - Cross Site Scripting Vulnerabillity
- GAIM Patch update
- Gallery v1.3.3 Cross Site Scripting Vulnerabillity
- GeoHttpServer Authentification Bypass Vulnerability & D.O.S (Denial Of Service)
- Get admin rights using Doro (pdf creator)
- GOOROO CROSSING: File Spoofing Internet Explorer 6
- Happy belated Personal Firewall day - SRT2004-01-17-0628 - Agnitum Optpost firewall allows Local SYSTEM access
- Hijacking Apache 2 via mod_perl
- Honeyd Security Advisory 2004-001: Remote Detection Via Simple Probe Packet
- HotNews arbitary file inclusion
- HP printers and currency anti-copying measures
- Immunix Secured OS 7.3 kernel update
- include() vuln in EasyDynamicPages v.2.0
- information and reverse engineering bits of the Mydoom worm
- Inrtra Forum Cross Site Scripting Vulnerabillity
- Internet Explorer - Multiple Vulnerabilities
- ISA Server 2000 - Vulnerability in H.323 Filter Can Cause Rem ote Code Execution (816458)
- January 15 is Personal Firewall Day, help the cause
- KDE Security Advisory: VCF file information reader vulnerability
- Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows
- Linux kernel do_mremap() proof-of-concept exploit code
- Linux kernel mremap vulnerability
- Linux kernel mremap() bug update
- Linux mremap bug correction
- Lotus Notes Domino 6.0.2 (linux) faulty default permissions
- MacOS X TruBlueEnvironment Buffer Overflow
- Major hack attack on the U.S. Senate
- Mambo OS v4.5/v4.6: remote command execution
- MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability
- MDKSA-2004:001 - Updated kernel packages fix local root vulnerability
- MDKSA-2004:002 - Updated ethereal packages fix vulnerabilities
- MDKSA-2004:003 - Updated kdepim packages fix vulnerability
- MDKSA-2004:004 - Updated slocate packages fix vulnerability
- MDKSA-2004:005 - Updated jabber packages fix DoS vulnerability
- MDKSA-2004:006 - Updated gaim packages fix multiple vulnerabilities
- MDKSA-2004:007 - Updated mc packages fix buffer overflow vulnerability
- MDKSA-2004:008 - Updated tcpdump packages fix several vulnerabilities
- Mephistoles Httpd 0.6.0final XSS
- Microsoft Word Protection Bypass
- More info on blocking the Bagle worm
- More phpGedView Vulnerabilities
- Multiple MetaDot Vulnerabilities [ All Versions ]
- multiple payload handling flaws in isakmpd, again
- Multiple Vulnerabilities in Phorum 3.4.5
- Multiple vulnerabilities in WWW Fileshare Pro <= 2.42
- nCipher Advisory #8: payShield library may verify bad requests
- Need for Speed Hot pursuit 2 <= 242 client's buffer overflow
- NetBus Pro Web Server Direcory Listing And Remote File Upload
- NETCam webserver Directory traversal bug
- NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities
- Network Associates Product Security Contact
- Networker 6.0 - possible symlink attack
- New MiMail variant is DDoS'ing SCO.com
- new outbreak warning - Bagle
- New release of Patchfinder2 (windows rootkit detector)
- new WIN virus?
- newsPHP v216 patch
- NextPlace.com E-Commerce ASP Engine
- OpenSSL ASN.1 parsing bugs PoC / brute forcer
- Openssl proof of concept code?
- Oracle HTTP Server Cross Site Scripting Vulnerabillity
- Oracle toplink mapping workbench password algorithm
- OwnServer 1.0 Directory Transversal Vulnerability
- Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory
- Paper announcement: Is finding security holes a good idea?
- PHP Manpage lookup directory transversal / file disclosing
- phpBB privmsg.php XSS vulnerability patch.
- PhpDig 1.6.x: remote command execution
- phpShop Vulnerabilities
- Possible XSS vuln in VCard4J
- PostNuke Issues (0.726 && Possibly Older)
- Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB
- ProxyNow! 2.x Multiple Overflow Vulnerabilities
- QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities
- RapidCache Multiple Vulnerabilities
- RealNetworks fails to address Cross-Site Scripting in RealOne Player
- Remote Code Execution in ezContents
- Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1
- Resources consumption in Goahead webserver <= 2.1.8
- Resources consumption in Reptile webserver daily version
- RFC: virus handling
- Security Announcement: untrusted ELF library path in some cvsup binary RPMs
- Security bug in Xerox Document Centre
- Self-Executing FOLDERS: Windows XP Explorer Part V
- Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV
- Serv-U exploit
- Serv-U ftp 4.2 site chmod long_file_name exploit
- SGI Advanced Linux Environment security update #8
- SGI Advanced Linux Environment security update #9
- SmoothWall Project Security Advisory SWP-2004:001
- SnapStream PVS LITE Cross Site Scripting Vulnerabillity
- Snort-inline
- SRT2004-01-17-0227 - BlackICE allows local users to become SYSTEM
- SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access.
- SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities
- SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM
- SuSE linux 9.0 YaST config Skribt [exploit]
- SUSE Security Announcement: gaim (SuSE-SA:2004:004)
- SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:001)
- SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:003)
- SUSE Security Announcement: tcpdump (SuSE-SA:2004:002)
- Switch Off Multiple Vulnerabilities
- symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower)
- TBE - the banner engine server-side script execution vulnerability
- The Bat! 2.01 memory corruption
- Tiny Server 1.1 (1.0.5) Multiple Vulnerabilities
- TSLSA-2004-0005 - slocate
- TSLSA-2004-01 - kernel
- Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code
- unauthorized deletion of IPsec (and ISAKMP) SAs in racoon
- userland binary vulnerabilities on IRIX
- vBulletin Forum 2.3.xx calendar.php SQL Injection
- vBulletin Security Vulnerability
- Vuln in PHPGEDVIEW 2.61 Multi-Problem
- vulnerabilities of postscript printers
- Webcam Watchdog Stack Overflow Vulnerability
- WebcamXP v1.06.945 Cross Site Scripting Vulnerabillity
- WebTrends Reporting Center Path Disclosure vulnerability
- What is the point here?
- Windows FTP Server Format String Vulnerability
- Windows XP Explorer Executes Arbitrary Code in Folders
- xsok local games exploit
- xsok local games exploit (2)
- Xtreme ASP Photo Gallery
- Yabb SE SQL Injection
- Yahoo Instant Messenger Long Filename Downloading Buffer Overflow
- yet another new phising scam
- ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving
- ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving
- ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity
Last message date: 01/30/04
Archived on: 01/30/04 CET
328 messages sorted by: [ author ] [ date ] [ thread ] [ attachment ]
