SecurityFocus Bugtraq
By Author

368 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 10/01/04
Ending: 10/30/04

• 0-1-2-3_at_gmx.de
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
  • New URL spoofing bug in Microsoft Internet Explorer (10/28/04)
• 3APA3A
  • Presentation: Bypassing client application protection techniques with notepad (10/28/04)
  • Re: [Full-Disclosure] iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (10/06/04)
• Abe Usher
  • MonkeyShell: using XML-RPC for access to a remote shell (10/11/04)
• ACROS Security
  • ACROS Security: Session Fixation in JRun Management Console (10/14/04)
  • ACROS Security: HTML Injection in JRun Management Console (10/14/04)
  • ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response (10/14/04)
  • ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer (10/13/04)
• Adam Gowdiak
  • J2ME security vulnerabilities (10/22/04)
• advisories
  • Re:[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue (09/29/04)
• advisory
  • BindView Advisory: Memory Leak and DoS in NT4 RPC server (10/13/04)
• advisory_at_stgsecurity.com
  • STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability (10/25/04)
• Ahmad Muammar
  • Multiple Vulnerabilities in AJ-Fork (10/01/04)
• Alan Cox
  • CAN-2004-0814: Linux terminal layer races (10/21/04)
• albatross_at_tim.it
  • MS October Security bulletins (10/12/04)
  • GDI+ JPEG exploit (10/06/04)
• Alexander Antipov
  • [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board (10/11/04)
  • [Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal (10/06/04)
  • [MAXPATROL Security Advisories] Cross site scripting in Invision Power Board (10/05/04)
• americanidiot_at_hushmail.com
  • Writing Trojans that bypass Windows XP Service Pack 2 Firewall (10/12/04)
• Amit Klein (AKsecurity)
  • Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS (10/12/04)
  • Security advisory - Xerces-C++ 2.5.0: Attribute blowup (10/02/04)
• Anatole Shaw
  • PuTTY SSH client vulnerability (10/27/04)
• Andrew Hunter
  • [IE 6 SP2] Possible URL Spoofing (10/15/04)
• André Malo
  • Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (10/29/04)
• Atom 'Smasher'
  • Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd) (10/25/04)
• Babar Shafiq Nazmi
  • Re: Possible GDI Exploit Vector (10/01/04)
• Berend-Jan Wever
  • Re: [Full-Disclosure] python does mangleme (with IE bugs!) (10/25/04)
  • Test your windows OS (10/05/04)
• bil
  • Re: Directory traversal in Yak! 2.1.2 (10/16/04)
• Bipin Gautam
  • Re: EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability (10/14/04)
  • Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug (10/05/04)
• Boren, Rich (SSRT)
  • [security bulletin] SSRT3526 Serviceguard potential increase in privilege (10/26/04)
  • [Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access (10/22/04)
  • [security bulletin]SSRT4826 rev.0 Mozilla Application Suite for HP Tru64 UNIX Multiple Potential Security Vulnerabilities (10/05/04)
• Brandon Petty
  • Re: Oracle 9i Union Flaw (10/01/04)
  • Oracle 9i Union Flaw (10/01/04)
• Brett Moore
  • SetWindowLong Shatter Attacks (10/14/04)
  • Buffer Overflow In Microsoft Excel (10/14/04)
• Brian Gallagher
  • Critical Vulnerability in Altiris Deployment Server architecture (10/21/04)
• Brooks, Shane
  • RE: Critical Vulnerability in Altiris Deployment Server architecture (10/25/04)
• bugtraq_at_rloxy.com
  • Clientexec Billing Software (10/12/04)
• Carl
  • Multiple vulnerabilities in Sage Saleslogix (10/18/04)
• Carlos Barros
  • mpg123 "getauthfromurl" buffer overflow (10/20/04)
• Chaotic Evil
  • HTTP Response Splitting in Serendipity 0.7-beta4 (10/21/04)
  • HTTP Response Splitting Vulnerability in Wordpress 1.2 (10/07/04)
• Chenghuai Lu
  • Re: EEYE: RealPlayer pnen3260.dll Heap Overflow (10/05/04)
• Chris Frey
  • Re: zgv image viewing heap overflows (10/28/04)
• Chris Norton
  • Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory (10/18/04)
• Chris Paget
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (09/27/04)
• chris_at_scary.beasts.org
  • CESA-2004-006: libtiff (10/13/04)
• Christoph Jeschke
  • [Powie's PSCRIPT Forum] Multiple SQL-Injection Vulnerabilities (10/15/04)
• Christopher J. Pilkington
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
• Conectiva Updates
  • [CLA-2004:880] Conectiva Security Announcement - foomatic-filters (10/27/04)
  • [CLA-2004:879] Conectiva Security Announcement - kernel (10/26/04)
  • [CLA-2004:878] Conectiva Security Announcement - zlib (10/25/04)
  • [CLA-2004:877] Conectiva Security Announcement - mozilla (10/22/04)
  • [CLA-2004:875] Conectiva Security Announcement - gtk+ (10/18/04)
  • [CLA-2004:873] Conectiva Security Announcement - samba (10/14/04)
  • [CLA-2004:872] Conectiva Security Announcement - cups (10/14/04)
• CORE Security Technologies Advisories
  • CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities (10/12/04)
• Crispin Cowan
  • Re: Mozilla Firefox (tested on 0.9.3) html-code crash. (10/28/04)
  • Re: avoiding stackguard (10/22/04)
• customer service mailbox
  • iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability (10/27/04)
  • iDEFENSE Security Advisory XX.XX.04 - Novell SuSe Linux LibTIFF Heap Overflow Vulnerability (10/22/04)
  • iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability (10/18/04)
  • iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability (09/29/04)
  • iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability (09/30/04)
• Dan Margolis
  • [ GLSA 200410-04 ] PHP: Memory disclosure and arbitrary location file upload (10/06/04)
• Daniel Milisic
  • Norton AntiVirus 2004/2005 Script Blocking Redux (10/22/04)
  • Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant) (10/15/04)
• Daniel Veditz
  • Re: [Full-Disclosure] Update: Web browsers - a mini-farce (MSIE gives in) (10/24/04)
• Dave Aitel
  • IT Underground Talks (10/13/04)
• David Brodbeck
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/27/04)
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/25/04)
• David Miller
  • [BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2 (10/25/04)
• David Schwartz
  • RE: Diebold Global Election Management System (GEMS) Backdoor (09/29/04)
• Derek Martin
  • rssh: pizzacode security alert (10/23/04)
• Derek Soeder
  • EEYE: Windows VDM #UD Local Privilege Escalation (10/13/04)
  • EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability (10/13/04)
• Dirk Mueller
  • [kde-announce] [KDE security advisory] Multiple integer overflows in kpdf (10/22/04)
  • [KDE security advisory] Multiple integer overflows in kpdf (10/22/04)
• Dominic Hargreaves
  • [FLSA-2004:2089] Updated mozilla packages fix security vulnerabilities (10/27/04)
  • [FLSA-2004:1804] Updated kernel resolves security vulnerabilities (10/18/04)
  • [FLSA-2004:2102] Updated samba packages fix security vulnerability [updated] (10/15/04)
  • [FLSA-2004:2102] Updated samba packages fix security vulnerability (10/13/04)
  • [FLSA-2004:1325] Updated mod_python packages fix security vulnerability (10/03/04)
  • [FLSA-2004:1733] Updated squirrelmail resolves security vulnerabilities (10/02/04)
• Dragos Ruiu
  • pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security (10/26/04)
• Dror Shalev
  • RE: [IE 6 SP2] Possible URL Spoofing (10/19/04)
• ducch apple
  • Mozilla Firefox (tested on 0.9.3) html-code crash. (10/25/04)
• Eric Lackey
  • CFMX vulnerability (10/01/04)
• ET LoWNOISE
  • [LoWNOISE] IPSWITCH WhatsUp Gold 8.03 Remote fr33 exploit (10/03/04)
• Evans, Arian
  • ASP.NET cannonicalization issue (10/07/04)
• Exoduks
  • [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3. (10/12/04)
• Florian Rock
  • SQL Injection in UBB.threads 3.4.x (10/21/04)
• FraMe
  • PHP4 cURL functions bypass open_basedir (10/27/04)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-04:15.syscons (10/04/04)
• gabrield89_at_hotmail.com
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/25/04)
• Geoff Vass
  • RE: Diebold Global Election Management System (GEMS) Backdoor (09/28/04)
• Gerald (Jerry) Carter
  • ERRATA: Potential Arbitrary File Access (CAN-2004-0815) (10/05/04)
• Greg A. Woods
  • Re: cdrecord local root exploit (10/01/04)
• GreyMagic Security
  • Regression in IE: Accessing remote/local content in IE (GM#009-IE) (10/12/04)
• GuidoZ
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
• GulfTech Security
  • dbPowerAmp Buffer Overflow And Dos Vulnerabilities (10/01/04)
• houseofdabus HOD
  • [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow (PoC) (10/20/04)
• http-equiv_at_excite.com
  • Re: [IE 6 SP2] Possible URL Spoofing (10/16/04)
• http-equiv_at_excite.com
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/30/04)
  • How to Break Windows XP SP2 + Internet Explorer 6 SP2 (10/20/04)
• Hugo van der Kooij
  • RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (09/28/04)
• infamous41md_at_hotpop.com
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/30/04)
  • RE: libgd integer overflow (10/29/04)
  • Re: debian dhcpd, old format string bug (10/29/04)
  • debian dhcpd, old format string bug (10/26/04)
  • zgv image viewing heap overflows (10/26/04)
  • wvtfpd remote root heap overflow (10/26/04)
  • pppd out of bounds memory access, possible DOS (10/26/04)
  • libgd integer overflow (10/26/04)
  • inetutils tftp client, DNS resolving bofs (10/26/04)
  • libxml2 remote buffer overflows (not in xml parsing code though) (10/26/04)
• Ivan Casado
  • More details on BID 11408 (3com 3cradsl72 wireless router) (10/15/04)
• James McGlinn
  • SQL Injection vulnerability in bBlog 0.7.3 (10/01/04)
• Jason T. Miller
  • Re: cdrecord local root exploit (10/01/04)
• Jay Calvert
  • Re: Writing Trojans that bypass Windows XP Service Pack 2 Firewall (10/16/04)
• je_at_sekure.net
  • OpenSSL 0.9.7e released (fwd from mark@openssl.org) (10/26/04)
• Jean-Baptiste Marchand
  • Re: Insecure Default Service DACL's in Windows 2003 (10/13/04)
• Jeff Bates
  • RE: Promiscuous email printing in Canon imageRunner (09/30/04)
• Jelmer
  • Adobe acrobat / Adobe Reader 6 can read local files (10/12/04)
  • Microsoft cabarc directory traversal (10/12/04)
• Jian Hui Wang
  • [Gosecure Adivsory] Neoteris IVE Vulnerability (10/06/04)
  • [GoSecure Advisory] Neoteris IVE Vulnerability (10/06/04)
• Jim Hatfield
  • Re: EEYE: Windows VDM #UD Local Privilege Escalation (10/14/04)
• Jim Ley
  • Google Script Insertion Exploit (10/19/04)
• John Bissell
  • New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory (10/14/04)
• Joxean Koret
  • Two Vulnerabilities in OpenWFE Web Client (10/24/04)
• Juan C Calderon
  • Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (Risk increased) (10/21/04)
  • Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (10/18/04)
  • IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (10/18/04)
• Jérôme
  • Re: New URL spoofing bug in Microsoft Internet Explorer (10/30/04)
  • MailCarrier 2.51 SMTP server Buffer Overflow [PoC included] (10/26/04)
  • Re: Google Script Insertion Exploit (10/23/04)
  • Ability FTP Server 2.34 Buffer Overflow Exploit (10/22/04)
• K-OTiK Security
  • Fake RedHat - Fedora Security Patch / Trojan Source Code & Analysis (10/25/04)
• Karb0nOxyde -
  • 3COM Wireless router (3CRADSL72) information disclosure (10/13/04)
• Karol Wiêsek
  • cPanel symlink chmod issue (10/18/04)
  • cPanel hardlink chown issue (10/18/04)
  • cPanel hardlink backup issue (10/18/04)
• keitel andres ortega
  • a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3 (10/15/04)
• kers0r
  • Reverse Engineering the First Pocket PC Trojan (10/12/04)
• KF_lists
  • [Fwd: Altiris Carbon Copy Remote Control local SYSTEM exploitation.] (10/22/04)
  • Re: Critical Vulnerability in Altiris Deployment Server architecture (10/21/04)
• Kurt Dillard
  • RE: Insecure Default Service DACL's in Windows 2003 (10/12/04)
• Kurt Lieber
  • [ GLSA 200410-21 ] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive (10/21/04)
  • [ GLSA 200410-06 ] CUPS: Leakage of sensitive information (10/09/04)
  • [ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities (10/07/04)
• Larry Cashdollar
  • local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (10/29/04)
• Larry Seltzer
  • RE: New URL spoofing bug in Microsoft Internet Explorer (10/30/04)
  • RE: New URL spoofing bug in Microsoft Internet Explorer (10/29/04)
• Len Sassaman
  • CodeCon 2005 Call for Papers (10/06/04)
• Lin Xiaofeng
  • Multiple vulnerabilities in ZanfiCmsLite (10/11/04)
  • Multiple vulnerabilities in BlackBoard (10/06/04)
• LSS Security
  • ProFTPD 1.2.x remote users enumeration bug - correction (10/17/04)
  • ProFTPD 1.2.x remote users enumeration bug (10/15/04)
  • Re: Full path disclosure in PHP Links - more (10/05/04)
• Luigi Auriemma
  • Crashs in Master of Orion III 1.2.5 (10/27/04)
  • Buffer-overflow in Age of Sail II 1.04.151 (10/20/04)
  • Broadcast crash in Vypress Tonecast 1.3 (10/19/04)
  • Directory traversal in Yak! 2.1.2 (10/15/04)
  • Re: Format String Vulnerability in Valve's CS-Source (10/14/04)
  • Buffer-overflow in ShixxNOTE 6.net (10/13/04)
  • Limited \secure\ buffer-overflow in some old Monolith games (10/08/04)
  • Server crash in Flash Messaging 5.2.0g (10/07/04)
  • Directory traversal in Tridcomm 1.3 (10/06/04)
  • In-game format string in Judge Dredd vs. Death 1.01 (10/02/04)
  • Broadcast buffer-overflow in Vypress Messenger 3.5.1 (10/01/04)
• Luke Macken
  • [ GLSA 200410-25 ] Netatalk: Insecure tempfile handling in etc2ps.sh (10/25/04)
  • [ GLSA 200410-26 ] socat: Format string vulnerability (10/25/04)
  • [ GLSA 200410-15 ] Squid: Remote DoS vulnerability (10/18/04)
  • [ GLSA 200410-10 ] gettext: Insecure temporary file handling (10/11/04)
  • [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities (10/14/04)
  • [ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm (10/13/04)
  • [ GLSA 200410-10 ] gettext: Insecure temporary file handling (10/13/04)
• Mandrake Linux Security Team
  • MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities (10/22/04)
  • MDKSA-2004:115 - Updated kdegraphics packages fix DoS vulnerability (10/22/04)
  • MDKSA-2004:113 - Updated xpdf packages fix vulnerabilities (10/22/04)
  • MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability (10/22/04)
  • MDKSA-2004:112 - Updated squid packages fix SNMP processing vulnerability (10/21/04)
  • MDKSA-2004:110 - Updated gaim packages fix vulnerabilities (10/21/04)
  • MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities (10/21/04)
  • MDKSA-2004:107 - Updated mozilla packages fix vulnerabilities (10/20/04)
  • MDKSA-2004:108 - Updated cvs packages fix vulnerability (10/20/04)
  • MDKSA-2004:109 - Updated libtiff packages fix multiple vulnerabilities (10/20/04)
  • MDKSA-2004:106 - Updated cyrus-sasl packages fix local vulnerability (10/07/04)
  • MDKSA-2004:105 - Updated xine-lib packages fix multiple vulnerabilities (10/06/04)
  • MDKSA-2004:104 - Updated samba packages fix vulnerability (10/02/04)
• Marc Deslauriers
  • [FLSA-2004:1237] Updated gaim package resolves security issues (10/16/04)
  • [FLSA-2004:2072] Updated CUPS packages fix security vulnerability (10/16/04)
  • [FLSA-2004:1737] Updated httpd packages fix a mod_proxy security vulnerability (10/14/04)
  • [FLSA-2004:1888] Updated mod_ssl package fixes Apache security vulnerabilities (10/14/04)
  • [FLSA-2004:1833] Updated lha resolves security vulnerabilities (10/14/04)
  • [FLSA-2004:1324] Updated libxml2 resolves security vulnerability (10/04/04)
  • [FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities (10/03/04)
• Marc Maiffret
  • EEYE: RealPlayer Zipped Skin File Buffer Overflow (10/27/04)
  • EEYE: RealPlayer pnen3260.dll Heap Overflow (10/01/04)
• marco correnti
  • Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory (10/15/04)
• Marco Ivaldi
  • Re: Promiscuous email printing in Canon imageRunner (10/01/04)
• Marcus Garvey
  • Hawking Technologies HAR11A router considered insecure (10/26/04)
• Marcus Meissner
  • SuSE Security Announcement: libtiff (SUSE-SA:2004:038) (10/22/04)
  • SuSE Security Announcement: kernel (SUSE-SA:2004:037) (10/21/04)
• Martin Pitt
  • [USN-12-1] ppp Denial of Service (10/29/04)
  • [USN-11-1] libgd2 vulnerabilities (10/29/04)
  • [USN-6-1] postgresql contributed script vulnerability (10/27/04)
  • [USN-8-1] gaim vulnerabilities (10/27/04)
  • [USN-7-1] imagemagick vulnerability (10/27/04)
  • [USN-3-1] GhostScript utility script vulnerabilities (10/27/04)
  • [USN-9-1] tetex-bin vulnerabilities (10/28/04)
  • [USN-4-1] Standard C library script vulnerabilities (10/28/04)
  • [USN-5-1] gettext vulnerabilities (10/27/04)
• Martin Schulze
  • [SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities (10/29/04)
  • [SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability (10/29/04)
  • [SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability (10/28/04)
  • [SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal (10/28/04)
  • [SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface (10/21/04)
  • [SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution (10/21/04)
  • [SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities (10/20/04)
  • [SECURITY] [DSA 571-1] New libpng3 packages fix several vulnerabilities (10/20/04)
  • [SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service (10/18/04)
  • [SECURITY] [DSA 568-1] New cyrus-sasl-mit packages fix arbitrary code execution (10/16/04)
  • [SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service (10/18/04)
  • [SECURITY] [DSA 567-1] New libtiff packages fix remote code execution (10/15/04)
  • [SECURITY] [DSA 566-1] New CUPS packages fix information leak (10/14/04)
  • [SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm (10/14/04)
  • [SECURITY] [DSA 565-1] New sox packages fix buffer overflow (10/13/04)
  • [SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution (10/13/04)
  • [SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution (10/12/04)
  • [SECURITY] [DSA 563-2] New cyrus-sasl packages really fix arbitrary code execution (10/12/04)
  • [SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities (10/11/04)
  • [SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality (10/10/04)
  • [SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities (10/07/04)
  • [SECURITY] [DSA 600-1] New samba packages fix arbitrary file access (10/07/04)
  • [SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service (10/06/04)
  • [SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation (10/06/04)
  • [SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise (10/04/04)
  • [SECURITY] [DSA 553-1] New getmail packages fix root compromise (09/27/04)
• Matt Zimmerman
  • Re: Buffer Overflow in Spider game (10/06/04)
  • [SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free (10/03/04)
• Matthew Oyer
  • XXS in SCT email client (10/13/04)
  • XXS in fusetalk forum (10/13/04)
• Matthias Geerdsen
  • [ GLSA 200410-23 ] Gaim: Multiple vulnerabilities (10/24/04)
• mccauley_at_gmx.net
  • Re: 3COM Wireless router (3CRADSL72) information disclosure (10/15/04)
• MCMuir_at_dstoutput.com
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/27/04)
• Michael Bartosh
  • Latest Apple Sec update (10/06/04)
• Michael Engert
  • Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (10/29/04)
• michael evanchik
  • Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (10/25/04)
• Michael Shigorin
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
• Michael Wojcik
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/28/04)
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/27/04)
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/27/04)
• Michal Zalewski
  • Re: Mozilla Firefox (tested on 0.9.3) html-code crash. (10/29/04)
  • Update: Web browsers - a mini-farce (MSIE gives in) (10/23/04)
  • Web browsers - a mini-farce (10/18/04)
• Microsoft Security Response Center
  • New Microsoft Security Response Center PGP Key [pgp] (10/06/04)
• MrJoe
  • Micronet wireless broadband router SP916BM admin password reset when power off (10/12/04)
• ned
  • python does mangleme (with IE bugs!) (10/24/04)
• newbug Tseng
  • Re: cdrdao local root exploit (10/01/04)
• NGSSoftware Insight Security Research
  • High Risk Vulnerability in RealPlayer (10/27/04)
  • High Risk Vulnerability in Quicktime for Windows (10/27/04)
  • Microsoft Windows NetDDE Service Buffer Overflow (10/13/04)
  • MSN Gaming Heartbeat Component Buffer Overflow (10/13/04)
  • Microsoft Internet Explorer Install Engine Control Buffer Overflow (10/19/04)
  • Patch available for high risk flaws in the AtHoc Toolbar (10/06/04)
  • Patch available for multiple high risk vulnerabilities in RealPlayer (10/06/04)
  • Patch available for critical IBM DB2 Universal Database flaws (10/05/04)
• Nick Caramella
  • windows 2000 server terminal server denial of service (10/22/04)
• Nick FitzGerald
  • Re: Regression in IE: Accessing remote/local content in IE (GM#009-IE) (10/12/04)
• Nick Leoncavallo
  • Re: Adobe acrobat / Adobe Reader 6 can read local files (10/14/04)
• Nikyt0x Argentina
  • Full path disclosure in PHP Links (10/03/04)
• NSFOCUS Security Team
  • NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability (10/21/04)
• OpenPKG
  • [OpenPKG-SA-2004.048] OpenPKG Security Advisory (squid) (10/29/04)
  • [OpenPKG-SA-2004.047] OpenPKG Security Advisory (apache) (10/29/04)
  • [OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql) (10/29/04)
  • [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl) (10/15/04)
  • [OpenPKG-SA-2004.043] OpenPKG Security Advisory (tiff) (10/14/04)
• Paul Kurczaba
  • Re: [IE 6 SP2] Possible URL Spoofing (10/16/04)
• Paul Schmehl
  • Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd) (10/27/04)
• Paul Szabo
  • Eudora 6.2.0.7 attachment spoof (10/11/04)
• Pavel Kankovsky
  • Re: CAN-2004-0814: Linux terminal layer races (10/23/04)
• Pedro Sanches
  • Full path disclosure and sql injection on CubeCart 2.0.1 (10/06/04)
• Peter J. Holzer
  • Re: Oracle 9i Union Flaw (10/04/04)
• Peter Kruse
  • Rendering large binary file as HTML makes Mozilla Firefox stop responding (10/26/04)
• Phantasmal Phantasmagoria
  • On Polymorphic Evasion (10/02/04)
• pigrelax
  • PTms04-030 (10/26/04)
• please_reply_to_security_at_sco.com
  • UnixWare 7.1.4 UnixWare 7.1.3 : The error handling in the inflate and inflateBack functions in ZLib compression library allows local users to cause a denial of service (10/19/04)
  • UnixWare 7.1.4 : Multiple Vulnerabilities in libpng (10/12/04)
  • UnixWare 7.1.3up UnixWare 7.1.4 : CUPS before 1.1.21 allows remote attackers to cause a denial of service (10/12/04)
• Polazzo Justin
  • RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall (10/15/04)
• R00tCr4ck
  • Multiple Vulnerabilities in CoolPHP (10/16/04)
• Ramon de Carvalho Valle
  • MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86 (10/27/04)
• Rene
  • dwc_articles possible sql injection (10/23/04)
• Richard Dawe
  • Re: libgd integer overflow (10/29/04)
• Richard M. Smith
  • Is Windows up to snuff for running our world? (10/22/04)
• Richard Stanway
  • Multiple Vulnerabilites in Quake II Server (10/27/04)
• Scott T. Cameron
  • Re: Full path disclosure in PHP Links (10/05/04)
• sculptex_at_sculptex.co.uk
  • Re: Full path disclosure and sql injection on CubeCart 2.0.1 (10/22/04)
• Sebastian Krahmer
  • SUSE Security Announcement: mozilla (SUSE-SA:2004:036) (10/06/04)
• secure_at_symantec.com
  • Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant) (10/20/04)
  • Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant) (10/18/04)
• security
  • Bug in hotmail (10/24/04)
• Security Team
  • Buffer Overflow in Spider game (10/03/04)
• Shannon Eric Peevey
  • Re: Adobe acrobat / Adobe Reader 6 can read local files (10/15/04)
• Shawn McMahon
  • Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (09/29/04)
• Simon Zuckerbraun
  • RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall (10/18/04)
• Sinan Eren
  • ms04-031 pre-auth ?? (10/18/04)
• Solar Designer
  • Re: cdrecord local root exploit (10/02/04)
• Some One
  • Re: Format String Vulnerability in Valve's CS-Source (10/15/04)
  • UPDATE: Format String Vulnerability in Valve's CS-Source (10/14/04)
  • Format String Vulnerability in Valve's CS-Source (10/13/04)
• Sowhat .
  • Multiple AntiVirus Reserved Device Name Handling Vulnerability (10/19/04)
  • Mutiple AntiVirus Reserved Device Name Handling Vulnerability (10/18/04)
• Spy Hat
  • Hack Dot AE (10/22/04)
• Steve Kemp
  • Re: Buffer Overflow in Spider game (10/04/04)
• Steven
  • AOL Journals BlogID incrementing discloses account names and e-mail (10/22/04)
  • Windows DoS in certain pGina configurations (10/22/04)
  • Multiple Cross Site Scripting Vulnerabilities in FuseTalk (10/13/04)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200410-29 ] PuTTY: Pre-authentication buffer overflow (10/27/04)
• SysAdminKC
  • Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory (10/15/04)
• Tarragon Allen
  • Re: debian dhcpd, old format string bug (10/28/04)
• Thierry Carrez
  • [ GLSA 200410-31 ] Archive::Zip: Virus detection evasion (10/29/04)
  • [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf (10/28/04)
  • [ GLSA 200410-28 ] rssh: Format string vulnerability (10/27/04)
  • [ GLSA 200410-22 ] MySQL: Multiple vulnerabilities (10/24/04)
  • [ GLSA 200410-24 ] MIT krb5: Insecure temporary file use in send-pr.sh (10/25/04)
  • [ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system (10/18/04)
  • [ GLSA 200410-13 ] BNC: Input validation flaw (10/15/04)
  • [ GLSA 200410-11 ] tiff: Buffer overflows in image decoding (10/13/04)
  • [ GLSA 200410-02 ] Netpbm: Multiple temporary file issues (10/04/04)
  • [ GLSA 200410-01 ] sharutils: Buffer overflows in shar.c and unshar.c (10/01/04)
• Thomas Biege
  • SUSE Security Announcement: xpdf, gpdf, kpdf, pdftohtml, cups (SUSE-SA:2004:039) (10/26/04)
  • SUSE Security Announcement: samba (SUSE-SA:2004:035) (10/05/04)
• Thor
  • Re: Is Windows up to snuff for running our world? (10/25/04)
• Thor Larholm
  • RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (10/20/04)
• Tiago Halm
  • IISShield and ASP.NET canonicalization (10/13/04)
• Tim Newsham
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
  • RE: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
• Trustix Security Advisor
  • TSLSA-2004-0054 - multi (10/15/04)
  • TSLSA-2004-0053 - cyrus-sasl (10/08/04)
  • TSLSA-2004-0051 - samba (10/01/04)
• Valdis.Kletnieks_at_vt.edu
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/29/04)
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/28/04)
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/27/04)
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (10/26/04)
  • Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd) (10/26/04)
• vallez_at_gmail.com
  • avoiding stackguard (10/18/04)
• van Helsing
  • Re: Buffer Overflow in Spider game (10/05/04)
• vuln_at_hexview.com
  • [HV-LOW] Unsafe WAV header handling can cause DoS on Windows (10/22/04)
  • [HV-MED] UPDATE: RIM Blackberry DoS, data loss (10/14/04)
  • [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss (10/13/04)
  • [HV-HIGH] MS Word multiple exceptions, at least one exploitable (10/07/04)
• Walton, John Michael (John)
  • FW: problem in voip environment (10/12/04)
• wirepair
  • Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities (10/13/04)
• Yves Goergen
  • Re: Multiple vulnerabilities in BlackBoard (10/06/04)
• Zero_X www.lobnan.de Team
  • apexec.pl is still vulnerable against Directory Traversal. (10/17/04)
• Ziots, Edward
  • Insecure Default Service DACL's in Windows 2003 (10/11/04)

Last message date: 10/30/04
Archived on: 10/30/04 CEST

---

368 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(10)