SecurityFocus Bugtraq
By Author

402 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

Starting: 10/31/04
Ending: 11/30/04

• 3APA3A
  • Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (11/13/04)
• Adam Zabrocki
  • Atari800 - local root. (11/25/04)
• advisories
  • Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue (11/19/04)
  • Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues (11/19/04)
• advisory_at_stgsecurity.com
  • STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability (11/24/04)
  • STG Security Advisory: [SSA-20041122-11] JSPWiki XSS vulnerability (11/24/04)
  • STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability (11/24/04)
  • STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability (11/24/04)
• alex cottle
  • RE: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] (11/26/04)
• Alex Lanstein
  • XSS in TheFaceBook round 2 (11/15/04)
  • Multiple XSS holes in TheFaceBook (11/13/04)
• Alexander Anisimov
  • [MaxPatrol] SQL-injection in Invision Power Board 2.x (11/18/04)
• Alla Bezroutchko
  • Re: Sun Java Plugin arbitrary package access vulnerability (11/25/04)
• Anton R Ivanov
  • Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (10/30/04)
• Atom 'Smasher'
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
  • Evidence Mounts that the Vote Was Hacked (11/08/04)
• auto333584_at_hushmail.com
  • Java version downgrading proof-of-concept (11/26/04)
• axl daivy
  • IpbProArace 2.5.x SQL injection. (11/20/04)
• Benjamin Tobias Franz
  • Microsoft Internet Explorer permits to examine the existence of local files (11/06/04)
  • URL spoofing bug (with iframes) in Microsoft Internet Explorer (11/02/2004) (11/02/04)
• Berend-Jan Wever
  • FIREFOX flaws: nested array sort() loop Stack overflow exception (11/25/04)
  • MSIE flaws: nested array sort() loop Stack overflow exception (11/25/04)
  • Re: Skype callto:// BoF technical details (11/16/04)
  • Skype callto:// BoF technical details (11/16/04)
  • Re: BoF in Windows 2000: ddeshare.exe (11/09/04)
  • MSIE src&name property disclosure (11/08/04)
• bkfsec
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
• Brett Moore
  • Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] (11/24/04)
  • SecureCRT - Remote Command Execution (11/23/04)
  • Winamp - Buffer Overflow In IN_CDDA.dll (11/23/04)
• Brian Gallagher
  • Re: Critical Vulnerability in Altiris Deployment Server architecture (10/30/04)
• Bryan Burns
  • A Brief Analysis of Bofra/MyDoom.AG/AH (11/18/04)
• Carlos Ulver
  • XSS in Brazilian Insite products (11/24/04)
• Casper.Dik_at_Sun.COM
  • Re: Changes to the filesystem while find is running - comments? (11/24/04)
  • Re: Changes to the filesystem while find is running - comments? (11/24/04)
• chewkeong_at_security.org.sg
  • [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities (11/24/04)
  • [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration (11/22/04)
  • Re: 04WebServer Three Vulnerabilities (11/15/04)
• Chris Withers
  • Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability (11/26/04)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections (11/11/04)
  • Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service (11/10/04)
  • Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication (11/02/04)
• Conectiva Updates
  • [CLA-2004:900] Conectiva Security Announcement - sun-jre (11/26/04)
  • [CLA-2004:899] Conectiva Security Announcement - samba (11/25/04)
  • [CLA-2004:896] Conectiva Security Announcement - bugzilla (11/23/04)
  • [CLA-2004:894] Conectiva Security Announcement - shadow-utils (11/23/04)
  • [CLA-2004:892] Conectiva Security Announcement - MySQL (11/18/04)
  • [CLA-2004:890] Conectiva Security Announcement - libxml2 (11/18/04)
  • [CLA-2004:889] Conectiva Security Announcement - sasl2 (11/11/04)
  • [CLA-2004:886] Conectiva Security Announcement - xpdf (11/08/04)
  • [CLA-2004:888] Conectiva Security Announcement - libtiff3 (11/08/04)
  • [CLA-2004:883] Conectiva Security Announcement - subversion (11/04/04)
  • [CLA-2004:884] Conectiva Security Announcement - gaim (11/04/04)
  • [CLA-2004:885] Conectiva Security Announcement - apache (11/04/04)
  • [CLA-2004:882] Conectiva Security Announcement - squid (11/03/04)
  • [CLA-2004:881] Conectiva Security Announcement - rsync (11/01/04)
• Crispin Cowan
  • Re: New Whitepaper - "Second-order Code Injection Attacks" (11/02/04)
• customer service mailbox
  • iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrary Package Access Vulnerability (11/22/04)
  • iDEFENSE Security Advisory 11.15.04: Multiple Security Vulnerabilities in Fcron (11/15/04)
• Cyrille Barthelemy
  • phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure (11/26/04)
• Daniel Fabian
  • Password Disclosure for SMB Shares in KDE's Konqueror (11/29/04)
• Daniel Guido
  • Apache 2.0.52 DoS Exploit v2 (11/18/04)
• Daniel Milisic
  • RE: Norton AntiVirus Script Blocking Exploit -- Symantec's response (11/11/04)
• Dave Aitel
  • Re: [Full-Disclosure] MSIE src&name property disclosure (11/08/04)
• David Hayden
  • RE: Evidence Mounts that the Vote Was Hacked (11/11/04)
• devnull_at_Rodents.Montreal.QC.CA
  • Re: Changes to the filesystem while find is running - comments? (11/24/04)
• Dmitry V. Levin
  • Re: Changes to the filesystem while find is running - comments? (11/22/04)
• Donato Ferrante
  • Buffer Overflow in Open Dc Hub 0.7.14 (11/24/04)
• Dr. Death
  • SQL injection in vBulletin forums (last10.php) (11/11/04)
• dullien_at_gmx.de
  • Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration (11/23/04)
• ECL team
  • [ECL] WCI TC-IDE embedded linux vulnerabilities (11/20/04)
• Elia Florio
  • Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (11/02/04)
• Elliott Bäck
  • Google Desktop Search ignores Preferences (11/14/04)
• Exchange
  • Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability (11/25/04)
• Fabian Becker
  • Re: Skype callto:// BoF technical details (11/16/04)
• Florian Laws
  • Re: Incorrect reporting of the Bofra/The Register exploit (11/24/04)
• Florian Weimer
  • Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution (11/16/04)
• Francisco
  • Router ZyXEL Prestige 650 HW http remote admin. (11/21/04)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-04:16.fetch (11/18/04)
• Gerald (Jerry) Carter
  • [SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd (11/15/04)
  • [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7 (11/08/04)
• Gilbert Verdian
  • Safari vulnerable to URL spoofing (10/31/04)
• Graham, Brian
  • FW: Hacker Group back again, this time claiming to have source code to Cisco PIX firewall (11/05/04)
• Gregory Duchemin
  • Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (11/13/04)
  • Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (11/12/04)
• GuidoZ
  • Re: New URL spoofing bug in Microsoft Internet Explorer (11/17/04)
• Gunter Ollmann
  • New Whitepaper - "Second-order Code Injection Attacks" (11/01/04)
• Gunter Ollmann (NGS)
  • RE: New Whitepaper - "Second-order Code Injection Attacks" (11/05/04)
  • RE: New Whitepaper - "Second-order Code Injection Attacks" (11/02/04)
• Gyan chawdhary
  • php 4.3.7 memory limit POC exploit (11/26/04)
• Hans Ulrich Niedermann
  • TWiki search function allows arbitrary shell command execution (11/13/04)
• Hans-Bernhard Broeker
  • Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (11/18/04)
• Haroon Meer
  • Setiri + Invisible browsers != browsers (11/27/04)
• Hat-Squad Security Team
  • [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM (11/03/04)
• Heikki Kortti
  • Re: Update: Web browsers - a mini-farce (MSIE gives in) (11/09/04)
• Heikki Toivonen
  • Re: [Full-Disclosure] FIREFOX flaws: nested array sort() loop Stack overflow exception (11/25/04)
• Henning Brauer
  • Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (11/01/04)
• Hernan Racciatti
  • IPFront - Release (11/23/04)
• Hongzhen Zhou
  • CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability (11/30/04)
• http-equiv_at_excite.com
  • Re: New URL spoofing bug in Microsoft Internet Explorer (11/11/04)
  • p h i s h i n g p h o r p h u n p h o r p h u q u e s a k e (11/01/04)
• Hugo van der Kooij
  • Re: Router ZyXEL Prestige 650 HW http remote admin. (11/23/04)
• icbm
  • Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows (11/24/04)
• isno
  • Re: MSIE flaws: nested array sort() loop Stack overflow exception (11/26/04)
• J. S. Connell
  • Re: BoF in Windows 2000: ddeshare.exe (11/10/04)
• Jack C
  • BoF in Windows 2000: ddeshare.exe (11/09/04)
• Jake Appelbaum
  • Re: Evidence Mounts that the Vote Was Hacked (11/11/04)
  • Security Contact for T-Mobile? (11/09/04)
• James Youngman
  • Re: Changes to the filesystem while find is running - comments? (11/24/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Changes to the filesystem while find is running - comments? (11/22/04)
• Janek Vind
  • [waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke] (11/17/04)
  • [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions] (11/12/04)
• Jason Coombs
  • Airport x-ray software creating images of phantom weapons? (11/16/04)
• Javier Fernandez-Sanguino
  • Re: debian dhcpd, old format string bug (11/02/04)
• Jay D. Dyson
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
  • Re: Evidence Mounts that the Vote Was Hacked (11/09/04)
• je_at_sekure.net
  • Sudo version 1.6.8p2 now available (fwd) (11/12/04)
• Jeff Williams
  • Re: New Whitepaper - "Second-order Code Injection Attacks" (11/02/04)
• Jei
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
• Jerome ATHIAS
  • Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory] (11/25/04)
  • Fotolog.net cross-site scripting vulnerabilities [RLSA_05-2004] (11/23/04)
  • GFHost PHP GMail remote command execution exploit that achieves webserver id privileges (11/21/04)
  • Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (11/21/04)
  • Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (11/18/04)
• jessica soules
  • SQL Injection in phpBT (bug.php) add project (11/12/04)
  • phpBB Code EXEC (v2.0.10) (11/13/04)
  • SQL Injection in phpBT (bug.php) (11/13/04)
• Jirka Kosina
  • Re: Linux ELF loader vulnerabilities (11/12/04)
  • Re: [Full-Disclosure] Re: Linux ELF loader vulnerabilities (11/11/04)
• John Cobb
  • PnTresMailer code browser 6.03 Vulnerabilities (11/26/04)
• Jonathan Angliss
  • [SquirrelMail Security Advisory] Cross Site Scripting in encoded text (11/10/04)
• Josh Bressers
  • Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow (11/05/04)
• Joshua Wright
  • Offline WPA-PSK auditing tool (coWPAtty) (11/08/04)
• Jouko Pynnonen
  • Sun Java Plugin arbitrary package access vulnerability (11/23/04)
• Joxean Koret
  • Multiple Vulnerabilities in WebCalendar (11/10/04)
• Juergen Schmidt
  • Flaws in SP2 security features, part II (11/16/04)
• Justin Rush
  • Unsecure Ftpd on HP PSC 2510 Printer (11/10/04)
• Jérôme
  • [SNS Advisory No.79] A Possibility of Cookie Overwrite in Microsoft Internet Explorer (11/15/04)
  • SQL Injection in phpBT (bug.php - Add) (11/12/04)
  • IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command (11/13/04)
  • 04WebServer Three Vulnerabilities (11/10/04)
  • Microsoft ISA Server Authentication Bypassing (11/02/04)
• Jérôme ATHIAS
  • SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (11/18/04)
• K-OTiK Security
  • Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] (11/27/04)
  • Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity... (11/20/04)
• Karol Wiêsek
  • ncpfs buffer overflow (11/29/04)
• Ken S
  • Re: Sun Java Plugin arbitrary package access vulnerability (11/25/04)
  • Re: Sun Java Plugin arbitrary package access vulnerability (11/23/04)
• kers0r
  • Windows Mobile Pocket PC Security (11/23/04)
• kevin anonymous
  • echalk vuln (11/23/04)
• kf_lists
  • Re: Privilege escalation flaw in MDaemon 7.2. (11/30/04)
  • Re: Unsecure Ftpd on HP PSC 2510 Printer (11/12/04)
  • Re: Unsecure Ftpd on HP PSC 2510 Printer (11/12/04)
• Kier Darby
  • Vulnerability not with vBulletin (11/12/04)
• Komrade
  • WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability (11/22/04)
  • CoffeeCup FTP Clients Buffer Overflow Vulnerability (11/22/04)
• Kurczaba Associates advisories
  • Zone Labs IMsecure Active Link Filter Bypass (11/11/04)
• Kurt Huwig
  • DOS against Java JNDI/DNS (11/08/04)
• Laurent Papier
  • Re: Router ZyXEL Prestige 650 HW http remote admin. (11/24/04)
• Lawrence MacIntyre
  • Re: Unsecure Ftpd on HP PSC 2510 Printer (11/12/04)
  • Re: Unsecure Ftpd on HP PSC 2510 Printer (11/12/04)
  • Re: Unsecure Ftpd on HP PSC 2510 Printer (11/11/04)
• Liu Die Yu
  • Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 (11/29/04)
  • Macromedia provided wrong "Solution" in mpsb02-08 (11/28/04)
• loni_at_securityforest.com
  • SecurityForest - Public Release #1 (11/19/04)
• LSS Security
  • BNC 2.8.9 remote buffer overflow (11/10/04)
• Luigi Auriemma
  • Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4 (11/30/04)
  • Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004) (11/28/04)
  • Buffer-overflow in Orbz 2.10 (11/29/04)
  • Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11 (11/24/04)
  • Broadcast memory corruption in Soldier of Fortune II 1.03 (11/23/04)
  • Broadcast client crash in Halo 1.05 (11/22/04)
  • Multiple vulnerabilities in Hired Team: Trial (Shine engine) (11/15/04)
  • Format string bug in Army Men RTS (11/14/04)
  • Crash in Secure Network Messenger 1.4.2 (11/12/04)
  • Resources consumption in 602 Lan Suite 2004.0.04.0909 (11/06/04)
  • In-game format string bug in the Lithtech engine (11/05/04)
• Luke Macken
  • [ GLSA 200411-36 ] phpMyAdmin: Multiple XSS vulnerabilities (11/27/04)
  • [ GLSA 200411-27 ] Fcron: Multiple vulnerabilities (11/18/04)
  • [ GLSA 200411-19 ] Pavuk: Multiple buffer overflows (11/10/04)
  • [ GLSA 200411-14 ] Kaffeine, gxine: Remotely exploitable buffer overflow (11/07/04)
  • [ GLSA 200411-12 ] zgv: Multiple buffer overflows (11/07/04)
  • [ GLSA 200411-10 ] Gallery: Cross-site scripting vulnerability (11/06/04)
  • ERRATA: [ GLSA 200411-01 ] ppp: No denial of service vulnerability (11/02/04)
  • [ GLSA 200411-04 ] Speedtouch USB driver: Privilege escalation vulnerability (11/02/04)
  • [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability (11/01/04)
• M. Shirk
  • [SHK-001]Payflow Link Default Config may lead to Hidden Field Modification (11/29/04)
• Maestro De-Seguridad
  • security hole (http response splitting) in phpwebsite (11/11/04)
• Mandrake Linux Security Team
  • MDKSA-2004:137-1 - Updated libxpm4 packages correct issues with previous update (11/30/04)
  • MDKSA-2004:141 - Updated zip packages fix vulnerability (11/26/04)
  • MDKSA-2004:140 - Updated a2ps packages fix vulnerability (11/26/04)
  • MDKSA-2004:139 - Updated cyrus-imapd packages fix multiple vulnerabilities (11/25/04)
  • MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities (11/23/04)
  • MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities (11/23/04)
  • MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities (11/23/04)
  • MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities (11/23/04)
  • MDKSA-2004:136 - Updated samba packages fix remote vulnerability (11/19/04)
  • MDKSA-2004:133 - Updated sudo packages fix vulnerability (11/17/04)
  • MDKSA-2004:134 - Updated apache packages fix buffer overflow in mod_include (11/17/04)
  • MDKSA-2004:132 - Updated gd packages fix integer overflows (11/17/04)
  • MDKSA-2004:135 - Updated apache2 packages fix request DoS (11/17/04)
  • MDKSA-2004:128 - Updated ruby packages fix remote DoS vulnerability (11/08/04)
  • MDKSA-2004:127 - Updated libxml and libxml2 packages fix multiple vulnerabilities (11/05/04)
  • MDKSA-2004:126 - Updated shadow-utils packages fix security bypass vulnerability (11/05/04)
  • MDKSA-2004:125 - Updated iptables packages fix vulnerability (11/05/04)
  • MDKSA-2004:124 - Updated xorg-x11 packages fix libXpm overflow vulnerabilities (11/04/04)
  • MDKSA-2004:123 - Updated perl-MIME-tools packages fix vulnerability (11/02/04)
  • MDKSA-2004:122 - Updated mod_ssl packages fix information disclosure vulnerability (11/02/04)
  • MDKSA-2004:121 - Updated netatalk packages fix temporary file vulnerability (11/02/04)
  • MDKSA-2004:120 - Updated mpg123 packages fix vulnerability (11/02/04)
  • MDKSA-2004:119 - Updated MySQL packages fix multiple vulnerabilities (11/02/04)
  • MDKSA-2004:118 - Updated perl-Archive-Zip packages fix vulnerability (11/02/04)
  • MDKSA-2004:117 - Updated gaim packages fix vulnerability (11/02/04)
• Marc Deslauriers
  • [FLSA-2004:2076] Updated foomatic package fixes security vulnerability (11/05/04)
• Marc Maiffret
  • EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service (11/09/04)
• Marc Schoenefeld
  • Rumours about Opera (11/25/04)
  • Java Vulnerabilities in Opera 7.54 (11/19/04)
• Marcus Meissner
  • SUSE Security Announcement: samba (SUSE-SA:2004:040) (11/15/04)
• Mark Adler
  • zlib 1.2.2 released (11/02/04)
  • zlib 1.2.2 released (11/01/04)
• Martin Buchholz
  • Re: Changes to the filesystem while find is running - comments? (11/24/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/22/04)
• Martin Pitt
  • [USN-32-1] mysql vulnerabilities (11/25/04)
  • [USN-31-1] cyrus21-imapd vulnerabilities (11/23/04)
  • [USN-30-1] Linux kernel vulnerabilities (11/19/04)
  • [USN-29-1] samba vulnerability (11/18/04)
  • [USN-28-1] sudo vulnerability (11/17/04)
  • [USN-27-1] libxpm4 vulnerability (11/17/04)
  • [USN-26-1] bogofilter vulnerability (11/17/04)
  • [USN-25-1] libgd2 vulnerability (11/15/04)
  • [USN-24-1] openssl script vulnerability (11/11/04)
  • [USN-23-1] apache2 vulnerability (11/11/04)
  • [USN-22-1] samba vulnerability (11/10/04)
  • [USN-21-1] libgd vulnerabilities (11/10/04)
  • [USN-20-1] Ruby CGI module vulnerability (11/09/04)
  • [USN-19-1] squid vulnerabilities (11/06/04)
  • [USN-17-1] passwd vulnerability (11/05/04)
  • Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow (11/05/04)
  • [USN-18-1] zip vulnerability (11/05/04)
  • [USN-16-1] perl vulnerabilities (11/02/04)
  • [USN-15-1] lvm10 vulnerability (11/01/04)
  • [USN-14-1] xpdf vulnerabilities (11/01/04)
  • [USN-13-1] groff utility vulnerability (11/01/04)
  • [USN-10-1] XML library vulnerabilities (10/29/04)
• Martin Schulze
  • [SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution (11/29/04)
  • [SECURITY] [DSA 601-1] New libgd1 packages fix arbitrary code execution (11/29/04)
  • [SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution (11/25/04)
  • [SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution (11/25/04)
  • [SECURITY] [DSA 598-1] New yardradius packages fix arbitrary code execution (11/25/04)
  • [SECURITY] [DSA 595-1] New bnc packages arbitrary code execution (11/24/04)
  • [SECURITY] [DSA 596-2] New sudo packages removes debug output (11/24/04)
  • [SECURITY] [DSA 596-1] New sudo packages fix privilege escalation (11/24/04)
  • [SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution (11/17/04)
  • [SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution (11/16/04)
  • [SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability (11/12/04)
  • [SECURITY] [DSA 591-1] New libgd2 packages fix arbitrary code execution (11/09/04)
  • [SECURITY] [DSA 589-1] New libgd1 packages fix arbitrary code execution (11/09/04)
  • [SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution (11/09/04)
  • [SECURITY] [DSA 586-1] New ruby packages fix denial of service (11/08/04)
  • [SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files (11/08/04)
  • [SECURITY] [DSA 587-1] New freeam packages fix arbitrary code execution (11/08/04)
  • [SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour (11/05/04)
  • Re: debian dhcpd, old format string bug (11/05/04)
  • [SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability (11/04/04)
  • [SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory (11/03/04)
  • [SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution (11/02/04)
  • [SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution (11/02/04)
  • [SECURITY] [DSA 580-1] New iptables packages fix modprobe failure (11/01/04)
  • [SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution (11/01/04)
  • [SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution (11/01/04)
• matt_at_welho.com
  • Incorrect reporting of the Bofra/The Register exploit (11/22/04)
• Matthias Geerdsen
  • [ GLSA 200411-35 ] phpWebSite: HTTP response splitting vulnerability (11/26/04)
  • [ GLSA 200411-21 ] Samba: Remote Denial of Service (11/11/04)
  • [ GLSA 200411-18 ] Apache 2.0: Denial of Service by memory consumption (11/10/04)
  • [ GLSA 200411-09 ] shadow: Unauthorized modification of account information (11/04/04)
  • [ GLSA 200411-03 ] Apache 1.3: Buffer overflow vulnerability in mod_include (11/02/04)
• Menashe Eliezer
  • Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (11/08/04)
• Michael Silk
  • RE: New URL spoofing bug in Microsoft Internet Explorer (11/17/04)
• michael young
  • Re: Liferay Cross Site Scripting Flaw (11/25/04)
• Michal Zalewski
  • Re: [Full-Disclosure] MSIE src&name property disclosure (11/08/04)
  • Re: [Full-Disclosure] MSIE src&name property disclosure (11/08/04)
  • MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (fwd) (11/02/04)
• morning_wood
  • Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (11/02/04)
• Network Intelligence (I) Pvt. Ltd.
  • Nortel Networks Contivity VPN Client information leakage vulnerability (11/10/04)
• NGSSoftware Insight Security Research
  • Medium Risk Vulnerability in WinRAR (11/02/04)
• Nicolas Gregoire
  • Re: New Whitepaper - "Second-order Code Injection Attacks" (11/02/04)
• Nicolas Robillard
  • Zone Labs Ad-Blocking Instability (11/18/04)
• Nicolas RUFF
  • Hardware support for XP SP2 DEP not enabled by default ? (11/22/04)
• Nicolas Waisman
  • Immunity, Inc Advisor (11/26/04)
• Noam Rathaus
  • Contact in HP related to OpenView / Coda (11/11/04)
• OpenPKG
  • [OpenPKG-SA-2004.051] OpenPKG Security Advisory (imapd) (11/29/04)
  • [OpenPKG-SA-2004.049] OpenPKG Security Advisory (gd) (10/30/04)
  • [OpenPKG-SA-2004.050] OpenPKG Security Advisory (libxml) (10/31/04)
  • [OpenPKG-SA-2004.045] OpenPKG Security Advisory (mysql) (10/30/04)
• Paul
  • Microsoft Help ActiveX Control Related Topics Local Content Accessing Vulnerability (11/28/04)
• Paul Mackerras
  • Re: [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability (11/02/04)
• Paul S. Owen
  • EXEC exploit in phpBB - new release (11/19/04)
  • EXEC exploit in phpBB - fix (11/18/04)
• Paul Schmehl
  • Re: [Full-Disclosure] MSIE src&name property disclosure (11/08/04)
• Paul Starzetz
  • Addendum, recent Linux <= 2.4.27 vulnerabilities (11/19/04)
  • Linux ELF loader vulnerabilities (11/10/04)
• Paul Szabo
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/23/04)
  • Re: Changes to the filesystem while find is running - comments? (11/22/04)
  • Eudora 6.2 attachment spoof (11/13/04)
• Pavel Kankovsky
  • Re: Linux ELF loader vulnerabilities (11/11/04)
• Peter Conrad
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
• Peter Greenwood
  • Re: Sun Java Plugin arbitrary package access vulnerability (11/25/04)
• Petr Stehlik
  • Re: Atari800 - local root. (fwd) (11/26/04)
• q q
  • Re: New URL spoofing bug in Microsoft Internet Explorer (11/16/04)
• Quincy Jackson
  • Re: Nortel Networks Contivity VPN Client information leakage vulnerability (11/10/04)
• Quith
  • FluxBox crash vulnerability (11/26/04)
• R00tCr4ck
  • Multiple Vulnerabilities in Web Forums Server (11/02/04)
• r`Futile
  • Re: Crash in Secure Network Messenger 1.4.2 (11/13/04)
• Rafael San Miguel Carrasco
  • Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (11/18/04)
• Ralph Harvey
  • Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration (11/24/04)
• Randal, Phil
  • RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability (11/23/04)
• Reed Arvin
  • Privilege escalation flaw in MDaemon 7.2. (11/29/04)
  • Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14. (11/30/04)
  • Privilege escalation flaw in AClient Service for Windows (Version 5.6.181). (11/19/04)
  • Privilege escalation in Mailtraq Version 2.6.1.1677. (11/18/04)
  • Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions. (11/18/04)
• rexolab
  • Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (11/18/04)
  • RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (11/17/04)
• Rick Crelia
  • Re: Evidence Mounts that the Vote Was Hacked (11/10/04)
• Robert Hetzler
  • Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (11/19/04)
• Roman Medina-Heigl Hernandez
  • TWiki exploit (search.pm / CAN-2004-1037) (11/19/04)
• Ron Brinker
  • RE: EXEC exploit in phpBB - fix (11/18/04)
• roozbeh afrasiabi
  • Re: New URL spoofing bug in Microsoft Internet Explorer (11/09/04)
  • Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities (10/31/04)
• Roy Arends
  • Inofficial updates to 758884/NISCC/DNS (11/18/04)
• saudi linux
  • AppServ 2.5.x and Prior Exploit (11/18/04)
  • Hotfoon Ver 4.0 Highv Risk (11/10/04)
• Secure Science Corporation Advisory Notice
  • SSC Advisory TSA-053 (Ureach.com) (11/05/04)
  • SSC Advisory TSA-052 (Callwave.com) (11/04/04)
  • SSC Advisory TSA-052 (Callwave.com) (11/03/04)
• secure_at_symantec.com
  • Re: [HV-LOW] Symantec LiveUpdate issues may cause DoS (11/10/04)
• security curmudgeon
  • Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (11/20/04)
• security-advisories_at_freebsd.org
  • FreeBSD Security Advisory FreeBSD-SA-04:16.fetch (11/19/04)
• Serkan Akpolat
  • Prozilla Remote Exploit (11/24/04)
• Sherlock, Nathan
  • RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability (11/23/04)
• ShineShadow
  • Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems. (11/05/04)
• Solar Designer
  • Re: [ GLSA 200411-09 ] shadow: Unauthorized modification of account information (11/04/04)
• Sowhat .
  • XDICT Buffer OverRun Vulnerability,funny :-) (11/01/04)
• Stefan Esser
  • Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities (11/23/04)
  • Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities (11/17/04)
  • Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow (11/15/04)
• Steve
  • PHPKIT SQL Injection, XSS (11/22/04)
• Steve Clement
  • Re: Router ZyXEL Prestige 650 HW http remote admin. (11/24/04)
• Steven M. Christey
  • Making distinctions between similar-looking vulnerabilities (11/05/04)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200411-38 ] Sun and Blackdown Java: Applet privilege escalation (11/29/04)
  • [ GLSA 200411-32 ] phpBB: Remote command execution (11/24/04)
  • [ GLSA 200411-33 ] TWiki: Arbitrary command execution (11/24/04)
  • [ GLSA 200411-26 ] GIMPS, SETI@home, ChessBrain: Insecure installation (11/17/04)
  • [ GLSA 200411-25 ] SquirrelMail: Encoded text XSS vulnerability (11/17/04)
  • [ GLSA 200411-24 ] BNC: Buffer overflow vulnerability (11/16/04)
  • [ GLSA 200411-22 ] Davfs2, lvm-user: Insecure tempfile handling (11/11/04)
  • [ GLSA 200411-20 ] ez-ipupdate: Format string vulnerability (11/11/04)
  • [ GLSA 200411-16 ] zip: Path name buffer overflow (11/09/04)
  • [ GLSA 200411-17 ] mtink: Insecure tempfile handling (11/09/04)
  • [ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities (11/07/04)
  • [ GLSA 200411-11 ] ImageMagick: EXIF buffer overflow (11/06/04)
  • [ GLSA 200411-02 ] Cherokee: Format string vulnerability (11/01/04)
• tal zeltzer
  • Exploiting default exception handler to increase exploit stability on win32 (11/01/04)
• Ted Percival
  • Re: Linux ELF loader vulnerabilities (11/11/04)
• Thierry Carrez
  • [ GLSA 200411-34 ] Cyrus IMAP Server: Multiple remote vulnerabilities (11/25/04)
  • [ GLSA 200411-31 ] ProZilla: Multiple vulnerabilities (11/23/04)
  • [ GLSA 200411-30 ] pdftohtml: Vulnerabilities in included Xpdf (11/23/04)
  • [ GLSA 200411-29 ] unarj: Long filenames buffer overflow and a path traversal vulnerability (11/19/04)
  • [ GLSA 200411-28 ] X.Org, XFree86: libXpm vulnerabilities (11/19/04)
  • [ GLSA 200411-23 ] Ruby: Denial of Service issue (11/16/04)
  • [ GLSA 200411-15 ] OpenSSL, Groff: Insecure tempfile handling (11/08/04)
  • UPDATE: [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf (11/06/04)
  • UPDATE: [ GLSA 200410-20 ] Xpdf, CUPS: Multiple integer overflows (11/06/04)
  • [ GLSA 200411-08 ] GD: Integer overflow (11/03/04)
  • [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability (11/03/04)
  • [ GLSA 200411-05 ] libxml2: Remotely exploitable buffer overflow (11/02/04)
  • [ GLSA 200411-06 ] MIME-tools: Virus detection evasion (11/02/04)
• Thomas Biege
  • SUSE Security Announcement: xshared, XFree86-libs, xorg-x11-libs (SUSE-SA:2004:041) (11/17/04)
• Thomas Rogg
  • Unofficial Internet Explorer FRAME/IFRAME fix (11/12/04)
• Timo Sirainen
  • up-imapproxy DoS vulnerabilities (11/07/04)
• Tom
  • Security Contact Info for IPSWITCH (11/10/04)
• Trustix Security Advisor
  • TSL-2004-0063 - multi (11/29/04)
  • TSLSA-2004-0061 - multi (11/22/04)
  • TSLSA-2004-0058 - multi (11/16/04)
  • TSLSA-2004-0056 - apache (11/05/04)
  • TSLSA-2004-0055 - multi (11/01/04)
• Valdis.Kletnieks_at_vt.edu
  • Re: BoF in Windows 2000: ddeshare.exe (11/09/04)
• Vincenzo Ciaglia
  • Linux Netwosix NEPOTE Updated! (11/29/04)
• vuln_at_hexview.com
  • [HV-LOW] Symantec LiveUpdate issues may cause DoS (11/05/04)
  • [HV-MED] Zip/Linux long path buffer overflow (11/04/04)
• y3dips_at_www.securityfocus.com, [ echo|staff ]@securityfocus.com@www.securityfocu
  • Vulnerabilities in JAF CMS (11/09/04)
• zee_at_psybnc.it
  • Phpbb id: 10701 update and Attachmodule add-on Directory Traversal (11/26/04)
• Zero_X www.lobnan.de Team
  • EZshopper is still vulnerable against Directory Traversal. (11/25/04)
• Zone Labs Product Security
  • Zone Labs Security Advisory: Ad-Blocking Instability (11/19/04)

Last message date: 11/30/04
Archived on: 11/30/04 CET

402 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint