SecurityFocus Bugtraq
By Author

399 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 10/01/05
Ending: 10/31/05

• 3APA3A
  • Re: Google Talk cleartext proxy credentials vulnerability (10/15/05)
• ABDUCTER_MINDS_at_YAHOO.COM
  • SQL IN FORUM.PHP (10/30/05)
  • File Including In PBLang (10/27/05)
  • File Including In FLAT NUKE (10/22/05)
• admin_at_batznet.com
  • Woltlab Burning Board info_db.php multiple SQL injection (10/26/05)
• Advisories_at_eeye.com
  • [EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability (10/11/05)
  • [EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability (10/11/05)
  • [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability (10/11/05)
  • [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability (10/11/05)
• advisories_at_matasano.com
  • Network Appliance iSCSI Authentication Bypass (10/25/05)
• advisory_at_kapda.ir
  • [KAPDA::#9] Techno Dreams Scripts Vulnerabilities (10/26/05)
  • [KAPDA::#6] Punbb SQL Injection Vulnerability (10/14/05)
  • Aenovo Multiple Vulnerabilities (10/07/05)
• advisory_at_securityfocus.com
  • [KAPDA::#8] Domain Manager Pro Vulnerability (10/22/05)
• advisory_at_wirecom.org
  • MailEnable W3C Logging Remote Buffer Overflow Proof of Concept (10/07/05)
• ak_at_red-database-security.com
  • Oracle Workflow CSS Vulnerability wf_route (10/20/05)
  • Oracle Workflow CSS Vulnerability wf_monitor (10/20/05)
  • Re: Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
  • Shutdown TNS Listener via Oracle Forms Servlet (10/07/05)
  • Shutdown TNS Listener via Oracle iSQL*Plus (10/07/05)
  • Cross-Site-Scripting Vulnerability in Oracle XMLDB (10/07/05)
  • Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus (10/07/05)
  • Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB (10/07/05)
  • Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB (10/07/05)
• alex_at_aleksanet.com
  • Flat Nuke Cross Site Scripting (10/24/05)
  • DCP - portal XSS & SQL attacks (10/24/05)
• ali202_at_fastermail.com
  • Re: Aenovo Multiple Vulnerabilities (Patch) (10/16/05)
• alireza hassani
  • XSS & Path Disclosure in Chipmunk's products (10/20/05)
  • Re: [KAPDA::#6] Punbb SQL Injection Vulnerability (10/19/05)
  • XSS vulnerability in Zeroblog (10/11/05)
• alljer_at_gmail.com
  • Yahoo RSS XSS Vulnerability (10/17/05)
  • Yahoo RSS XSS Vulnerability (Correction) (10/17/05)
• almaster_at_hotmail.com
  • SQL In Invision Gallery 2.0.3 (10/30/05)
  • SQL saphp Lesson (10/24/05)
  • DBoardGear SQL Injection (10/24/05)
• alphakgen_at_gmail.com
  • phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (10/22/05)
• Andreas Marx
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/26/05)
• Andreas Zeidler
  • Re: [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1 (10/12/05)
  • Re: using php local file include vulnerabilities for command execution (10/11/05)
  • using php local file include vulnerabilities for command execution (10/11/05)
• Andrey Bayora
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/28/05)
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (10/27/05)
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/26/05)
  • Update for the magic byte bug (10/26/05)
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (10/26/05)
  • Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/25/05)
• Animal
  • SQL-Injection in MyBulletinBoard allows attacker to become a board admin. (10/26/05)
• announcements_at_pulltheplug.org
  • PullThePlug Contest: Call For Papers (10/10/05)
• Ariel Berkman
  • xloadimage buffer overflow. (10/05/05)
• arpen_at_home.se
  • Re: [KAPDA::#6] Punbb SQL Injection Vulnerability (10/18/05)
• arpen_at_securityfocus.com
  • Re: Remote File Inclusion in forum PunBB (10/29/05)
• ascii
  • PHP iCalendar CSS (10/25/05)
• atmaca_at_icqmail.com
  • Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit (10/29/05)
• Auri Rahimzadeh
  • Trend Micro's Response to the Magic Byte Bug (10/29/05)
• Ayaz Ahmed Khan
  • PAKCON II: Call for Paper (CfP), Final Call! (10/05/05)
• bambenek_at_gmail.com
  • [Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail (10/01/05)
• Bernhard Mueller
  • SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS (10/25/05)
  • SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (10/25/05)
  • SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS (10/21/05)
• Bharat Mediratta
  • Gallery 2.x Remote File Access Vulnerability (10/14/05)
• bhfh01_at_gmail.com
  • PHP-Nuke Cross-Site Scripting Vulnerability (10/25/05)
• Bipin Gautam
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (10/28/05)
• Bob Beck
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (10/26/05)
• Brian J. Bartlett
  • RE: Advisory: WZCS vulnerabilities (10/05/05)
• Cesar
  • [Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities) (10/21/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/06/05)
• chburchert_at_web.de
  • aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities (10/21/05)
• CIRT.DK Advisory
  • [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection (10/27/05)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability (10/19/05)
• Clayton Kossmeyer
  • Re: [Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted (10/18/05)
• contact_at_webappsec.org
  • Announcement: The Web Application Firewall Evaluation Criteria v1 (10/10/05)
  • WASC Threat Classification in 4 languages (10/05/05)
• D_BuG
  • Re: uplod phpshell in PHP Advanced Transfer Manager (10/30/05)
• dave canuck
  • Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (10/28/05)
• Dave English
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/27/05)
• dave kleiman
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/03/05)
• David Ahmad
  • New List (10/31/05)
• David Litchfield
  • Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server (10/19/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/06/05)
  • Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (01/06/05)
  • Some new whitepapers ... (10/05/05)
• dcrab_at_hackerscenter.com
  • Re: Require many large corporate emails for contact regarding vulnerability. (10/17/05)
• Debasis Mohanty
  • RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (10/25/05)
• Dirk Mueller
  • [KDE Security Advisory] KOffice/KWord RTF import buffer overflow (10/11/05)
• donctl
  • Advisory: WZCS vulnerabilities (10/04/05)
• edward11_at_postmaster.co.uk
  • winrar 3.50 Exploit (10/15/05)
• enji_at_infosys.tuwien.ac.at
  • Yapig: XSS / Code Injection Vulnerability (10/13/05)
• Eric Romang / ZATAZ.com
  • php < 4.4.1 htaccess apache dos (10/24/05)
• Eygene A. Ryabinkin
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (10/27/05)
• Fernando Gont
  • Revised draft on ICMP attacks (10/24/05)
• Fixer
  • Security Contacr for Mycall (10/14/05)
• Florian Weimer
  • Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (10/27/05)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-05:21.openssl (10/11/05)
• Gadi Evron
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
• Gary Oleary-Steele
  • [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability (10/12/05)
  • [SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow (10/12/05)
• Georg Wicherski
  • mwcollect v3.0.0 Release (10/30/05)
• H D Moore
  • Metasploit Framework v2.5 (10/19/05)
• iDEFENSE Labs
  • iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability (10/28/05)
  • iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability (10/25/05)
  • iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability (10/25/05)
  • iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability (10/25/05)
  • iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation (10/20/05)
  • iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation (10/20/05)
  • iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability (10/20/05)
  • iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability (10/13/05)
  • iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability (10/13/05)
  • iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability (10/10/05)
  • iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability (10/10/05)
  • iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability (10/11/05)
  • iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability (10/11/05)
  • RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (10/05/05)
  • iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (10/05/05)
  • iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability (10/04/05)
• inge.henriksen_at_booleansoft.com
  • Re: IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV (09/30/05)
• Integrigy Security
  • Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005 (10/19/05)
• Ivan .
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
• Jason Coombs
  • Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/01/05)
• Jason Haar
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (10/26/05)
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (10/26/05)
• Jerome Athias
  • Re: Some new whitepapers ... (10/06/05)
• Josh Zlatin-Amishav
  • BID #14752 update (09/30/05)
• khc_at_bsdmail.org
  • RTasarim WebAdmin modul SQL injection (10/14/05)
• Kurt Seifried
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/08/05)
• L. Adrian Griffis
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/03/05)
• Lachniet, Mark
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/02/05)
• Len Sassaman
  • CodeCon 2006 Call For Papers (10/11/05)
• lgreenem_at_cmp.com
  • Research for network security news article (10/12/05)
• Lila Buchalski
  • RE: Some new whitepapers ... (10/05/05)
  • Announcement : Core Banking Application Security List (10/05/05)
• list_at_rem0te.com
  • Kaspersky Antivirus Remote Heap Overflow (10/03/05)
• liudieyu_at_umbrella.name
  • ie7 will have more mechanisms (10/17/05)
• lms_at_fe.up.pt
  • Planet Technology Corp FGSW2402RS switch default password / "backdoor" (10/06/05)
• Ludwig Nussel
  • SUSE Security Announcement: permissions (SUSE-SA:2005:062) (10/24/05)
• Luigi Auriemma
  • F.E.A.R. 1.01 likes lithsock (10/21/05)
• m123303_at_richmond.ac.uk
  • Google Talk cleartext proxy credentials vulnerability (10/14/05)
• ma+nomail_at_dt.e-technik.uni-dortmund.de
  • fetchmail security announcement 2005-02 (CVE-2005-3088) (10/27/05)
• Mandriva Security Team
  • MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues. (10/27/05)
  • MDKSA-2005:201 - Updated sudo packages fix vulnerability (10/27/05)
  • MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities (10/26/05)
  • MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities (10/26/05)
  • MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities. (10/26/05)
  • MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow (10/26/05)
  • MDKSA-2005:195 - Updated squid packages fix vulnerabilities (10/26/05)
  • MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities (10/26/05)
  • MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities. (10/26/05)
  • MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities. (10/26/05)
  • MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities (10/26/05)
  • MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities. (10/21/05)
  • MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability (10/21/05)
  • MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities. (10/21/05)
  • MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities. (10/21/05)
  • MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability. (10/21/05)
  • MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability. (10/21/05)
  • MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow (10/18/05)
  • MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability (10/14/05)
  • MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities (10/14/05)
  • MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability (10/14/05)
  • MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability (10/14/05)
  • MDKSA-2005:181 - Updated squid packages fix vulnerabilities (10/12/05)
  • MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability (10/12/05)
  • MDKSA-2005:179 - Updated openssl packages fix vulnerabilities (10/12/05)
  • MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability (10/12/05)
  • MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability (10/07/05)
  • MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability (10/08/05)
  • MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability (10/07/05)
  • MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities (10/07/05)
  • MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities (10/07/05)
  • MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability (10/07/05)
  • MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities (10/03/05)
• Marcus Meissner
  • SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061) (10/19/05)
• Martin Pitt
  • [USN-151-3] zlib vulnerabilities (10/29/05)
  • [USN-213-1] sudo vulnerability (10/28/05)
  • [USN-206-2] Fixed lynx packages for USN-206-1 (10/29/05)
  • [USN-212-1] libgda2 vulnerability (10/28/05)
  • [USN-211-1] Enigmail vulnerability (10/20/05)
  • Re: [Full-disclosure] [USN-208-1] SSH server vulnerability (10/18/05)
  • [USN-210-1] netpbm vulnerability (10/18/05)
  • [USN-208-1] graphviz vulnerability (10/17/05)
  • [USN-207-1] PHP vulnerability (10/17/05)
  • [USN-208-1] SSH server vulnerability (10/17/05)
  • [USN-206-1] Lynx vulnerability (10/17/05)
  • [USN-204-1] SSL library vulnerability (10/14/05)
  • [USN-205-1] Curl and wget vulnerabilities (10/14/05)
  • [USN-203-1] Abiword vulnerabilities (10/13/05)
  • [USN-201-1] SqWebmail vulnerabilities (10/11/05)
  • [USN-202-1] KOffice vulnerability (10/12/05)
  • [USN-200-1] Thunderbird vulnerabilities (10/11/05)
  • [USN-195-1] Ruby vulnerability (10/10/05)
  • [USN-199-1] Linux kernel vulnerabilities (10/10/05)
  • [USN-197-1] Shorewall vulnerability (10/10/05)
  • [USN-198-1] cfengine vulnerabilities (10/10/05)
  • [USN-196-1] Xine library vulnerability (10/10/05)
  • [USN-194-1] texinfo vulnerability (10/06/05)
  • [USN-193-1] dia vulnerability (10/04/05)
  • [USN-155-3] Fixed mozilla locale packages (10/04/05)
• Martin Schulze
  • [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities (10/28/05)
  • [SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution (10/28/05)
  • [SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution (10/27/05)
  • [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness (10/27/05)
  • [SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution (10/27/05)
  • [SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution (10/26/05)
  • [SECURITY] [DSA 873-1] New net-snmp packages fix denial of service (10/26/05)
  • [SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution (10/26/05)
  • [SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution (10/25/05)
  • [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution (10/25/05)
  • [SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution (10/25/05)
  • [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution (10/21/05)
  • [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file (10/20/05)
  • [SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities (10/20/05)
  • [SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities (10/20/05)
  • [SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass (10/13/05)
  • [SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files (10/13/05)
  • [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution (10/12/05)
  • [SECURITY] [DSA 850-1] New tcpdump packages fix denial of service (10/09/05)
  • [SECURITY] [DSA 851-1] New openvpn packages fix denial of service (10/09/05)
  • [SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution (10/09/05)
  • [SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities (10/09/05)
  • [SECURITY] [DSA 854-1] New tcpdump packages fix denial of service (10/09/05)
  • [SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution (10/10/05)
  • [SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution (10/10/05)
  • [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file (10/10/05)
  • [SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution (10/10/05)
  • [SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution (10/10/05)
  • [SECURITY] [DSA 860-1] New Ruby packages fix safety bypass (10/11/05)
  • [SECURITY] [DSA 861-1] New uw-imap packages fix arbitrary code execution (10/11/05)
  • [SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass (10/11/05)
  • [SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution (10/08/05)
  • [SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities (10/08/05)
  • [SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass (10/08/05)
  • [SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities (10/07/05)
  • [SECURITY] [DSA 845-1] New mason packages fix missing init script (10/06/05)
  • [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass (10/05/05)
  • [SECURITY] [DSA 843-1] New arc packages fix insecure temporary files (10/05/05)
  • [SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution (10/04/05)
  • [SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file (10/04/05)
  • [SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution (10/04/05)
  • [SECURITY] [DSA 840-1] New drupal packages fix remote command execution (10/04/05)
  • [SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service (10/02/05)
  • [SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution (10/01/05)
  • [SECURITY] [DSA 833-1] New mysql-dfsg-4.1 packages fix arbitrary code execution (10/01/05)
  • [SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting (10/01/05)
  • [SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting (10/01/05)
  • [SECURITY] [DSA 828-1] New squid packages fix denial of service (09/30/05)
  • [SECURITY] [DSA 809-2] New squid packages fix denial of service (09/30/05)
  • [SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution (09/30/05)
• max_at_jestsuper.pl
  • [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1 (10/10/05)
• Meder Kydyraliev
  • Linux Orinoco drivers information leakage (10/12/05)
• mgotts_at_2roads.com
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (10/28/05)
• Michael Stone
  • [SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities (10/03/05)
  • [SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file (09/30/05)
• mkanat_at_bugzilla.org
  • Security Advisory for Bugzilla 2.18.3, 2.20rc2, and 2.21 (10/01/05)
• Morten Torstensen
  • Re: Windows host based firewall tester (10/19/05)
• Neil Dickey
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/04/05)
• NGSSoftware Insight Security Research
  • Multiple Critical and High Vulnerabilities in Oracle Database Server (10/19/05)
  • High Risk Vulnerability in Sun Directory Server (10/06/05)
  • Patches available for critical flaws in HP Openview (10/05/05)
• Nicob
  • Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (10/27/05)
• none_at_securityfocus.com
  • Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability (10/14/05)
• OpenPKG
  • [OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl) (10/17/05)
• papipsycho_at_hotmail.com
  • Nuked klan 1.7: SQL vulnerability (10/22/05)
  • Nuked klan 1.7: Remote Exploit (10/24/05)
  • Nuked klan 1.7: Bypassed level admin on forum(corrected) (10/24/05)
  • Nuked klan 1.7: XSS vulnerability (10/21/05)
• Paul
  • RE: Possible Bug in PHP-Fusion 6.0.204 (10/25/05)
• Paul Craig
  • Multiple vulnerabilities within RockLiffe MailSite Express WebMail (10/28/05)
• Paul Laudanski
  • Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (10/25/05)
  • phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (10/25/05)
  • Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (10/18/05)
• Paul Szabo
  • gnome-pty-helper writes arbitrary utmp records (10/07/05)
• peanut_at_black-rat.no-ip.com
  • Possible Bug in PHP-Fusion 6.0.204 (10/24/05)
• Phantasmal Phantasmagoria
  • The Malloc Maleficarum (10/11/05)
• philipp_at_kolmann.at
  • Trillian remote crashable (10/03/05)
• Piotr Bania
  • Exploiting Windows Device Drivers Whitepaper (10/16/05)
  • Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (10/13/05)
• please_reply_to_security_at_sco.com
  • OpenServer 5.0.7 : authsh and backupsh buffer overflow (10/21/05)
  • UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow (10/21/05)
• poizon_at_securityinfo.ru
  • DboardGear - uncorrect import themes (SQL-inject) (10/25/05)
• ppwd25_at_hotmail.com
  • Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC (10/21/05)
• preben_at_watchcom.no
  • Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images (10/29/05)
  • aspReady FAQ - open for SQL-injections (10/06/05)
• Q_EADS_CCR_DCR/STI/C?=
  • Skype security advisory (10/25/05)
• Radoslav Dejanoviæ
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/07/05)
• Rainer Duffner
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/06/05)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/06/05)
• retrogod_at_aliceposta.it
  • PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution (10/24/05)
  • e107 remote commands execution (10/18/05)
  • Cyphor 0.19 SQL Injection / Board takeover / cross site scripting (10/08/05)
  • Utopia News Pro 1.1.3 SQL Injection / cross site scripting (10/07/05)
  • MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass (10/01/05)
• rgod_at_aliceposta.it
  • versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover (10/11/05)
• Richard M. Smith
  • Looking for a security contact at Macrovision/InstallShield (10/26/05)
  • Looking for security contacts at Sony and Lenovo (FKA IBM) (10/25/05)
• rod hedor
  • Remote File Inclusion in forum PunBB (10/24/05)
• Scott Cromar
  • Insecure Temporary Files in BMC/Control-M Agent (10/22/05)
• Sebastian Krahmer
  • SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060) (10/17/05)
• SEC Consult Research
  • Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (10/27/05)
• Secunia Research
  • Secunia Research: ATutor Multiple Vulnerabilities (10/27/05)
  • Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability (10/26/05)
  • Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow (10/21/05)
  • Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities (10/18/05)
  • Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow (10/13/05)
  • Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability (10/12/05)
  • Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities (10/11/05)
  • Secunia Research: Webroot Desktop Firewall Two Vulnerabilities (10/06/05)
  • Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities (10/06/05)
  • Secunia Research: ALZip Multiple Archive Handling Buffer Overflow (10/05/05)
• secure_at_symantec.com
  • VERITAS NetBackup: Java User-Interface, format string vulnerability (10/12/05)
• Security Alert
  • [security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS) (10/13/05)
• security curmudgeon
  • Re: [Dailydave] Security contact for ... (10/07/05)
• security-alert_at_hp.com
  • [security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005 (10/24/05)
  • [security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access (10/21/05)
  • [security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access (10/19/05)
  • [security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (10/13/05)
  • [security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access (10/07/05)
  • [security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access (10/07/05)
  • [security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege (10/06/05)
  • [security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) (10/06/05)
  • [security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access (10/04/05)
  • [security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access (10/04/05)
  • [security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code (10/04/05)
  • [security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code (10/04/05)
  • [security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (10/04/05)
• security_at_aewebworks.com
  • Re: Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability (10/02/05)
• Seth Fogie
  • Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse (10/14/05)
• Shell
  • Linksys WRT54G/S Directory Traversal (10/19/05)
• sikikmail_at_gmail.com
  • SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable) (10/25/05)
  • Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable) (10/22/05)
• Silent / Saracoth
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of t (10/10/05)
• slythers_at_gmail.com
  • PHP local safedir restriction bypass (10/17/05)
• snsadv
  • [SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities (10/25/05)
  • [SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability (10/21/05)
• sp3x_at_securityreason.com
  • SecurityAlert SA025 : PHPNuke Remote Directory Traversal (10/19/05)
• SPI Labs
  • Oracle 10g - emagent.exe Stack-Based Overflow (10/20/05)
• sQl_at_hotmail.com
  • uplod phpshell in PHP Advanced Transfer Manager (10/29/05)
• Stefan Esser
  • Advisory 17/2005: phpBB Multiple Vulnerabilities (10/31/05)
  • Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo() (10/31/05)
  • Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str() (10/31/05)
  • Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability (10/31/05)
  • Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability (10/22/05)
• Stefano Zanero
  • Re: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (10/03/05)
• Steve Shockley
  • Re: Network Appliance iSCSI Authentication Bypass (10/28/05)
• steve.shockley_at_shockley.net
  • Re: Network Appliance iSCSI Authentication Bypass (10/28/05)
• Steven M. Christey
  • A common researcher diagnosis error: misreading error messages (10/04/05)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors (10/30/05)
  • [ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow (10/30/05)
  • [ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability (10/17/05)
  • [ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing (10/17/05)
  • [ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow (10/14/05)
  • [ GLSA 200510-08 ] xine-lib: Format string vulnerability (10/08/05)
  • [ GLSA 200510-09 ] Weex: Format string vulnerability (10/08/05)
  • [ GLSA 200510-05 ] Ruby: Security bypass vulnerability (10/06/05)
  • [ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import (10/06/05)
  • [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability (10/04/05)
• sup3r_linux_at_hotmail.com
  • Remote MySQL User on Cpanel Default installation with blank password (10/25/05)
• Tatercrispies
  • Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (10/27/05)
• Thierry Carrez
  • Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (10/28/05)
  • [ GLSA 200510-24 ] Mantis: Multiple vulnerabilities (10/28/05)
  • [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack (10/28/05)
  • [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (10/28/05)
  • [ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities (10/25/05)
  • [ GLSA 200510-20 ] Zope: File inclusion through RestructuredText (10/25/05)
  • [ GLSA 200510-19 ] cURL: NTLM username stack overflow (10/22/05)
  • [ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng (10/20/05)
  • [ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows (10/20/05)
  • [ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues (10/17/05)
  • [ GLSA 200510-13 ] SPE: Insecure file permissions (10/15/05)
  • [ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback (10/12/05)
  • [ GLSA 200510-10 ] uw-imap: Remote buffer overflow (10/11/05)
  • [ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability (10/07/05)
  • [ GLSA 200510-04 ] Texinfo: Insecure temporary file creation (10/05/05)
  • [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files (10/03/05)
  • [ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation (10/03/05)
  • [ GLSA 200509-20 ] AbiWord: RTF import stack-based buffer overflow (09/30/05)
  • UPDATE: [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities (09/30/05)
• Thierry Zoller
  • Ciscos VPN-Client-Passwords can be decrypted (10/16/05)
• Thomas Biege
  • Call for Papers - DIMVA 2006 (10/04/05)
• Thomas Henlich
  • Mozilla Thunderbird SMTP down-negotiation weakness (10/25/05)
• Tim
  • Windows host based firewall tester (10/18/05)
• Tobias Glemser
  • Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages (10/12/05)
• Tony Finch
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (10/26/05)
• Tony Jambu
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (10/08/05)
• Trustix Security Advisor
  • TSLSA-2005-0059 - multi (10/24/05)
• unsecure_at_writeme.com
  • Antivirus detection bypass by special crafted archive. (10/07/05)
• v9
  • OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (10/31/05)
• why_at_nsfocus.com
  • NetFlow Analyzer 4 XSS Vulnerability (10/18/05)
• Will Belcher
  • SECURECon 2006 Call for papers! (10/18/05)
• Williams, James K
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte (10/27/05)
  • RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability (10/20/05)
  • cacam_logsecurity_win32 exploit published on 20051018 by Metasploit (10/19/05)
  • CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability (10/14/05)
  • Re: Antivirus detection bypass by special crafted archive. (10/14/05)
  • Re: Security contact for ... (10/06/05)
• X_at_securityfocus.com,
  • Remote File Inclusion in vCard :) (10/26/05)
• ZATAZ Audits
  • flexbackup default config insecure temporary file creation (10/17/05)
• zdi-disclosures_at_3com.com
  • ZDI-05-001: VERITAS NetBackup Remote Code Execution (10/12/05)

Last message date: 10/31/05
Archived on: 10/31/05 CET

---

399 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2005-10