Bugtraq

• Thread Index

---

• Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: redb0ne
• Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: ian
• WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability
  • From: Juan Galiana
• International Hacking & Security Conference "POC2008"
  • From: pocadm
• MySQL command-line client HTML injection vulnerability
  • From: Thomas Henlich
• Remote File Inclusion Vulnerability
  • From: Pepelux
• Re: Sun M-class hardware denial of service
  • From: Bob Beck
• Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Jan van Niekerk
• [ MDVSA-2008:208 ] pam_mount
  • From: security
• Re: Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.
  • From: Philippe Devallois
• Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit
  • From: ipsdix
• rPSA-2008-0286-1 mono
  • From: rPath Update Announcements
• White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x
  • From: Seth Fogie
• [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues
  • From: admin
• Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: Aditya K Sood
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• MS Internet Explorer 7 Denial Of Service Exploit
  • From: UniquE
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• [ MDVSA-2008:207 ] openafs
  • From: security
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• [security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files
  • From: security-alert
• Re: php create_function commond injection vulnerability
  • From: Steven M. Christey
• Advisory : Opera Window Object Suppressing Remote Denial of Service
  • From: Aditya K Sood
• Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.
  • From: Aditya K Sood
• [oCERT-2008-013] MPlayer Real demuxer heap overflow
  • From: Andrea Barisani
• Re: php create_function commond injection vulnerability
  • From: mnapier
• RE: Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Larry Seltzer
• Re: php create_function commond injection vulnerability
  • From: bzhbfzj3001
• Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Paul
• ParsaWeb CMS SQL Injection
  • From: admin
• PHP Calendar Script Remote XSS (Permanent) Vulnerabilities
  • From: tan_prathan
• csphonebook 1.02 Remote XSS Vulnerabilitiy
  • From: Ghost hacker
• Login Password Sample Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• hyBook Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• shoutbox Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• ASP News Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC
  • From: Satan_HackerS
• xss in hackmeeting.org
  • From: wiky
• [ MDVSA-2008:206 ] mozilla-thunderbird
  • From: security
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Stefano Zanero
• FtitzBox
  • From: biglowbird
• Re: [Full-disclosure] [IVIZ-08-010] McAfee SafeBoot Device Encryption Plain Text Password Disclosure (v4, Build 4750 and below)
  • From: Kenneth Ng
• Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)
  • From: quakerdoomer
• Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• multiple vendor ftpd - Cross-site request forgery
  • From: cxib
• The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• RPG.Board <= 0.0.8Beta2 Remote SQL Injection
  • From: Guns
• DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
  • From: Reversemode
• CA Service Desk Multiple Cross-Site Scripting Vulnerabilities
  • From: Williams, James K
• Estonian Cyber Security Strategy document -- now available online
  • From: Gadi Evron
• [USN-647-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration
  • From: Teh Kotak
• [ MDVSA-2008:205 ] mozilla-firefox
  • From: security
• [ GLSA 200809-18 ] ClamAV: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-17 ] Wireshark: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-16 ] Git: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• SQL Injection in EasyRealtorPRO 2008
  • From: SmOk3
• [USN-645-3] Firefox and xulrunner regression
  • From: Jamie Strandboge
• Fwd: Returned post for bugtraq@securityfocus.com
  • From: Jose Luis
• adnforum <= 1.0b / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• Cross Site Scripting (XSS) Vulnerabilitiy in flatpress 0.804, CVE-2008-4120
  • From: Fabian Fingerle
• C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow
  • From: Idan Ofrat
• Re: php create_function commond injection vulnerability
  • From: lmfao
• [security bulletin] HPSBST02372 SSRT080133 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-052 to MS08-055
  • From: security-alert
• Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities
  • From: alfredo . melloni
• php create_function commond injection vulnerability
  • From: root
• [security bulletin] HPSBOV02364 SSRT080078 rev.3 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• [ MDVSA-2008:204 ] blender
  • From: security
• Drupal Ajax Checklist Module SQL Injection Vulnerability
  • From: Justin C. Klein Keane
• Drupal Brilliant Gallery module SQL injection vulnerability
  • From: Justin C. Klein Keane
• Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software
  • From: Cisco Systems Product Security Incident Response Team
• Re: Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos.
  • From: LIUDIEYU dot COM
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Control Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Vulnerability in Cisco IOS While Processing SSL Packet
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Internet Information Service (adsiis.dll) activex remote DOS
  • From: hamedata
• IAS Helper COM Component (iashlpr.dll) activex remote DOS
  • From: hamedata
• Internet Information Service remote set password
  • From: hamedata
• [USN-645-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• [USN-645-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos.
  • From: Aditya K Sood
• [ GLSA 200809-15 ] GNU ed: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200809-14 ] BitlBee: Security bypass
  • From: Pierre-Yves Rofes
• mantis CVE-2008-3102 (Re: menalto gallery: Session hijacking vulnerability, CVE-2008-3102)
  • From: Hanno Böck
• Re: Blue Coat xss
  • From: Hugo van der Kooij
• Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: Philipp Hagemeister
• Re: Aruba Mobility Controller Shared Default Certificate - Response from Aruba Networks
  • From: Robbie (Rupinder) Gill
• menalto gallery: Session hijacking vulnerability, CVE-2008-3102
  • From: Hanno Böck
• [ MDVSA-2008:203 ] awstats
  • From: security
• [ MDVSA-2008:202 ] phpMyAdmin
  • From: security
• Xss In Datalife Engine CMS 7.2
  • From: hadikiamarsi
• Aruba Mobility Controller Shared Default Certificate
  • From: nnposter
• Squirrelmail: Session hijacking vulnerability, CVE-2008-3663
  • From: Hanno Böck
• [ MDVSA-2008:201 ] pan
  • From: security
• [ MDVSA-2008:200 ] ed
  • From: security
• [ GLSA 200809-13 ] R: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [ GLSA 200809-12 ] Newsbeuter: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098
  • From: Fabian Fingerle
• [SECURITY] [DSA-1619-2] New python-dns package fixes regression
  • From: Devin Carraway
• [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: admin
• [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Directory traversal in the webadmin of Unreal Tournament 3 1.3
  • From: Luigi Auriemma
• [ GLSA 200809-11 ] HAVP: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-10 ] Mantis: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Nelson Brito
• Blue Coat xss
  • From: jplopezy
• [security bulletin] HPSBUX02370 SSRT071459 rev.1 - HP-UX Running rpcbind, Remote Denial of Service (DoS)
  • From: security-alert
• MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection
  • From: Guns
• drupal: Session hijacking vulnerability, CVE-2008-3661
  • From: Hanno Böck
• MyFWB 1.0 Remote SQL Injection
  • From: Guns
• Advanced Electron Forum <= 1.0.6 Remote Code Execution
  • From: GulfTech Security Research
• [SECURITY] [DSA 1634-2] New wordnet packages fix regression
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1640-1] New python-django packages fix cross site request forgery
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1642-1] New horde3 packages fix cross site scripting
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1641-1] New phpmyadmin packages fix several issues
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1639-1] New twiki packages execution of arbitrary code
  • From: Steve Kemp
• [ MDVSA-2008:199 ] wireshark
  • From: security
• [ GLSA 200809-09 ] Postfix: Denial of Service
  • From: Pierre-Yves Rofes
• Annutel - Annuaire Téléphonique v1.0 Sensetive Files (MDP)
  • From: sn0oPy . team
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: John Bailey
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Quark IT - Hilton Travis
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Memisyazici, Aras
• [USN-646-1] rdesktop vulnerabilities
  • From: Jamie Strandboge
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Steve Shockley
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: John Bailey
• PHP pro bid v 6.04 SQL injection
  • From: Jan van Niekerk
• VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman
  • From: VMware Security Team
• LooYu Web IM 2008 Cross-Site Scripting Vulnerabilities
  • From: xsp
• vi can run arbitrary commands via 'tags' file
  • From: Eli the Bearded
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Memisyazici, Aras
• cyask 3.x Local File Inclusion Vulnerability
  • From: xuanmumu
• menalto gallery: Session hijacking vulnerability, CVE-2008-3662
  • From: Hanno Böck
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Siim Põder
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Quark IT - Hilton Travis
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Hi Two Points to consider
  • From: Aditya K Sood
• [security bulletin] HPSBOV02364 SSRT080078 rev.2 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• Sama XSS Bug
  • From: Lagon666
• [ MDVSA-2008:189-1 ] clamav
  • From: security
• rPSA-2008-0276-1 mercurial mercurial-hgk
  • From: rPath Update Announcements
• rPSA-2008-0278-1 tshark wireshark
  • From: rPath Update Announcements
• [security bulletin] HPSBMA02369 SSRT080115 rev.1 - HP ProLiant Essentials Rapid Deployment Pack (RDP) Running Symantec Altiris Deployment Solution, Remote SQL Injection, Remote or Local Gain Extended Privileges, Local Denial of Service (DoS)
  • From: security-alert
• ShmooCon 2009 CFP
  • From: Bruce Potter
• Microsoft Internet Explorer DoS in Rendering Malicious PNG Files.
  • From: Aditya K Sood
• [AJECT] SurgeMail IMAP 3.9e vulnerability
  • From: João Antunes
• Pidgin IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Miranda IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Skype IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• [ MDVSA-2008:197-1 ] koffice
  • From: security
• [NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting
  • From: John Cobb
• [NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting
  • From: John Cobb
• [ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities
  • From: adv
• [ MDVSA-2008:198 ] R-base
  • From: security
• [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC
  • From: Albert Sellarès
• [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure
  • From: John Cobb
• [SECURITY] [DSA 1638-1] New openssh packages fix denial of service
  • From: Florian Weimer
• Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS
  • From: Shatter
• Team SHATTER Security Advisory: Security Vulnerability in CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio
  • From: Shatter
• Failed assertion in the Unreal engine
  • From: Luigi Auriemma
• InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.
  • From: Brian Dowling
• [ MDVSA-2008:197 ] koffice
  • From: security
• [ MDVSA-2008:182-1 ] wordnet
  • From: security
• Security flaw in Airtel DSL modems
  • From: shr
• [ MDVSA-2008:196 ] mplayer
  • From: security
• TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow
  • From: dvlabs
• Critical Vulnerability in Apple Quicktime’s Indeo Codec
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 1637-1] New git-core packages fix buffer overflow
  • From: Devin Carraway
• Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS
  • From: j . v . vallejo
• Baidu Hi IM client software DoS bug, div zero make client crash
  • From: Li Gen
• [ MDVSA-2008:195 ] apache
  • From: security
• [ MDVSA-2008:194 ] apache2
  • From: security
• [ MDVSA-2008:193 ] kolab-server
  • From: security
• Baidu Hi IM software parsing plaintext stack overflow
  • From: Li Gen
• CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service
  • From: Core Security Technologies Advisories
• Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit
  • From: Guns
• [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting
  • From: Marc Ruef
• community real-time BGP hijack notification service
  • From: Gadi Evron
• Clients format strings in the Unreal engine
  • From: Luigi Auriemma
• [USN-644-1] libxml2 vulnerabilities
  • From: Kees Cook
• Secunia Research: Trend Micro OfficeScan "cgiRecvFile.exe" Buffer Overflow
  • From: Secunia Research
• Re: OpenWiki<--v0.78 Cross-Site Scripting
  • From: DJeep
• Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability
  • From: Stefan Esser
• [ MDVSA-2008:191 ] rsh
  • From: security
• [ MDVSA-2008:192 ] libxml2
  • From: security
• [USN-643-1] FreeType vulnerabilities
  • From: Kees Cook
• Server termination in the Unreal engine 3
  • From: Luigi Auriemma
• [TKADV2008-007] Linux Kernel SCTP-AUTH API Information Disclosure Vulnerability and NULL Pointer Dereferences
  • From: Tobias Klein
• [SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• RE: SQL Smuggling
  • From: Gary Oleary-Steele
• Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability
  • From: Stefan Esser
• Nooms 1.1
  • From: irancrash
• [security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• minb Remote Code Execution Exploit
  • From: r3d . w0rm
• PhsBlog v0.2 Bypass Sql injection Filtering Exploit
  • From: irancrash
• sqlvdir.dll ActiveX Remote Buffer Overflow Exploit
  • From: bee***l1986
• PhpWebGallery 1.3.4 Multiple Vulnerabilities (XSS/LFI)
  • From: irancrash
• ZoneAlarm Security Suite buffer overflow
  • From: jplopezy
• Re: Sun M-class hardware denial of service
  • From: Curtis Maloney
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Ezphotogallery 2.1 Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure)
  • From: irancrash
• [USN-642-1] Postfix vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 1635-1] New freetype packages fix multiple vulnerabilities
  • From: Steve Kemp
• ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: terry white
• [ MDVSA-2008:190 ] postfix
  • From: security
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• Re: E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability
  • From: packet
• [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
  • From: Will Drewry
• Windows GDI+ GIF memory corruption
  • From: Ivan Fratric
• iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:189 ] clamav
  • From: security
• Multiple Vulnerabilities: LedgerSMB < 1.2.15
  • From: Chris Travers
• iDefense Security Advisory 09.09.08: Apple QuickTime PICT Integer Overflow Vulnerability
  • From: iDefense Labs
• Re: SQL Smuggling
  • From: Tim
• Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability
  • From: Brett Moore
• Re: Sun M-class hardware denial of service
  • From: Bob Beck
• ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: Micheal Patterson
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Julien Stuby
• RE: Sun M-class hardware denial of service
  • From: Michael Wojcik
• Re: SQL Smuggling
  • From: Marco Ivaldi
• DeepSec 2008 - Conference Schedule
  • From: DeepSec Conference Vienna
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated
  • From: Mark Thomas
• SQL Smuggling
  • From: douglen
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• ZDI-08-060: Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: B 650
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: B 650
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Mike Duncan
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Razi Shaban
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Rotem Kerner
• Sun M-class hardware denial of service
  • From: Theo de Raadt
• Stash v1.0.3 Admin bypass / Remote File Disclosure
  • From: r3d . w0rm
• [USN-641-1] Racoon vulnerabilities
  • From: Kees Cook
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Razi Shaban
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: gynvael
• Re: Sagem Router F@ST 2404 Remote Denial Of Service Exploit
  • From: Vladimir '3APA3A' Dubrovin
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Wellington Wagner F. Sarmento
• [ GLSA 200809-08 ] Amarok: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Mike Duncan
• [ GLSA 200809-07 ] libTIFF: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: a
• WASC Announcement: 2007 Web Application Security Statistics Published
  • From: statistics
• Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Rotem Kerner
• Sagem Router F@ST 2404 Remote Denial Of Service Exploit
  • From: zigma
• Re: Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: prenaud
• DEFCON London - DC4420 - September meet this Thursday 11th
  • From: Major Malfunction
• [scip_Advisory 3808] D-Link DIR-100 long url filter evasion
  • From: Marc Ruef
• Re: [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks
  • From: ProCheckUp Research
• [ GLSA 200809-06 ] VLC: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• phpAdultSite CMS flaws
  • From: SmOk3
• xoops-1.3.10 shell command execute vulnerability ( causing snoopy class )
  • From: geinblues
• Re: RES: Google Chrome Automatic File Download
  • From: Nick FitzGerald
• [ MDVSA-2008:188 ] tomcat5
  • From: security
• Google Chrome Auto download exploit ..
  • From: security
• [ GLSA 200809-05 ] Courier Authentication Library: SQL injection vulnerability
  • From: Pierre-Yves Rofes
• Re: Has anyone implemented "double forward DNS"?
  • From: Steven Bakker
• Re: Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
  • From: dstinbox
• Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability
  • From: Security Vulnerability Research Team
• Re: XCon 2008 Call for Paper
  • From: Sowhat
• Re: XCon 2008 Call for Paper
  • From: Sowhat
• XCon 2008 Call for Paper
  • From: Sowhat
• Risky Chrome (The perfect cleartext password offering )
  • From: quakerdoomer
• rPSA-2008-0268-1 libtiff
  • From: rPath Update Announcements
• Re: Zen Cart <= 1.3.8a SQL Injection
  • From: Ian Wilson
• other google chrome crash
  • From: jplopezy
• [security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure
  • From: security-alert
• [ MDVSA-2008:186 ] python
  • From: security
• Multiple MicroWorld products insecure directory permissions
  • From: Edi Strosar
• [ GLSA 200809-02 ] dnsmasq: Denial of Service and DNS spoofing
  • From: Robert Buchholz
• Re: Has anyone implemented "double forward DNS"?
  • From: Ansgar -59cobalt- Wiechers
• clamav: Crash with crafted chm, CVE-2008-1389
  • From: Hanno Böck
• [ GLSA 200809-01 ] yelp: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200809-03 ] RealPlayer: Buffer overflow
  • From: Robert Buchholz
• [ GLSA 200809-04 ] MySQL: Privilege bypass
  • From: Robert Buchholz
• Zen Cart <= 1.3.8a SQL Injection
  • From: GulfTech Security Research
• Re: Google Chrome Automatic File Download
  • From: Juha-Matti Laurio
• [USN-640-1] libxml2 vulnerability
  • From: Kees Cook
• Marvell Driver Null SSID Association Request Vulnerability
  • From: Laurent Butti
• Atheros Vendor Specific Information Element Overflow
  • From: Laurent Butti
• Marvell Driver EAPoL-Key Length Overflow
  • From: Laurent Butti
• Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664
  • From: Fabian Fingerle
• FreeBSD Security Advisory FreeBSD-SA-08:07.amd64
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:09.icmp6
  • From: FreeBSD Security Advisories
• Re: Has anyone implemented "double forward DNS"?
  • From: Glynn Clements
• Re: Has anyone implemented "double forward DNS"?
  • From: terry white
• Re: Has anyone implemented "double forward DNS"?
  • From: Jerry Franz
• [ MDVSA-2008:185 ] python-django
  • From: security
• RE: Google Chrome Automatic File Download
  • From: James C. Slora Jr.
• Re: Has anyone implemented "double forward DNS"?
  • From: Ansgar Wiechers
• Re: In search of examples of malicious source code
  • From: Gabriele Zanoni
• [ MDVSA-2008:184 ] libtiff
  • From: security
• Re: Has anyone implemented "double forward DNS"?
  • From: The Fungi
• FreeBSD Security Advisory FreeBSD-SA-08:08.nmount
  • From: FreeBSD Security Advisories
• Cisco Secure ACS Denial Of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Secure ACS EAP Parsing Vulnerability
  • From: Laurent Butti
• Re: Google Chrome Automatic File Download
  • From: Razi Shaban
• RES: Google Chrome Automatic File Download
  • From: DIOGO LEAL CHAGAS
• Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• Google Chrome Browser (ver.0.2.149.27) Vulnerability
  • From: psy . echo
• Google Chrome Automatic File Download
  • From: nerex
• TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload
  • From: admin
• Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow
  • From: Secunia Research
• [Tool] Distack framework for attack detection and traffic analysis
  • From: Christoph Mayer
• RUXCON 2008 Final Call For Papers
  • From: cfp
• Has anyone implemented "double forward DNS"?
  • From: Duncan Simpson
• Exploit
  • From: Admin
• T2´08 Challenge - Free Tickets Available
  • From: Tomi Tuominen
• [ MDVSA-2008:183 ] opensc
  • From: security
• In search of examples of malicious source code
  • From: Steve . Coleman
• [Suspected Spam]New IETF I-D-: Security Assessment of the Internet Protocol version 4
  • From: Fernando Gont
• [USN-639-1] tiff vulnerability
  • From: Kees Cook
• [Tool] sqlmap 0.6 released
  • From: Bernardo Damele A. G.
• [ MDVSA-2008:182 ] wordnet
  • From: security
• CS-Cart <= 1.3.5 SQL Injection
  • From: GulfTech Security Research
• Postfix Linux-only local denial of service
  • From: Wietse Venema
• [AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability
  • From: João Antunes
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• ToorCon X Lineup & Training Seminars Posted & Pre-Registration Ending
  • From: h1kari
• HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1634-1] New wordnet packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1633-1] New slash packages fix multiple vulnerabilities
  • From: Florian Weimer
• [oCERT-2008-014] WordNet stack and heap overflows
  • From: Rob Holland
• rPSA-2008-0264-1 ruby
  • From: rPath Update Announcements
• Multiple Cross Site Scripting (XSS) Vulnerabilities in vtigerCRM 5.0.4, CVE-2008-3101
  • From: Fabian Fingerle
• [SECURITY] [DSA 1627-2] New opensc package fix incomplete check
  • From: Thijs Kinkhorst
• PoCfix (PoC for Postfix local root vuln - CVE-2008-2936)
  • From: Roman Medina-Heigl Hernandez
• Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges
  • From: Felix Buenemann

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2008-09