Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

361 messages starting May 02 05 and ending May 31 05
Date index | Thread index | Author index

• DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' KF (lists) (May 02)
• Multiple Vulnerabilities in Video Cam Server 1.0.0 Donato Ferrante (May 02)
• [ GLSA 200505-01 ] Horde Framework: Multiple XSS vulnerabilities Luke Macken (May 02)
• Clients format string and server crash in Mtp-Target 1.2.2 Luigi Auriemma (May 02)
• Insecure pty permissions in OS X < 10.4 Matt Johnston (May 02)
• Re: Apache hacks (./atac, d0s.txt) a.list.address () gmail com (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Nick Bright (May 02)
  • <Possible follow-ups>
  • Re: Apache hacks (./atac, d0s.txt) Chris Umphress (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Sagiko (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Daniel Cid (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Luiz Henrique (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Skip Carter (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Robert Zilbauer (May 02)
  • Re: Apache hacks (./atac, d0s.txt) KF (lists) (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Jay D. Dyson (May 02)
  • Re: Apache hacks (./atac, d0s.txt) Steve Kemp (May 02)
• Microsoft WINS Vulnerability + OS/SP Scanner class (May 02)
• Defcon Capture the Flag registration is open Kenshoto (May 02)
• [ GLSA 200504-30 ] phpMyAdmin: Insecure SQL script installation Sune Kloppenborg Jeppesen (May 02)
• Golden FTP Server Pro Remote Buffer Overflow Exploit mohamed amhemed (May 02)
• JGS-Portal 3.0.1 SQL-Injection admin (May 02)
• Regions bank phishing scam Ryan S (May 02)
• Can't trust COMODO Gunter Ollmann (NGS) (May 02)
  • Message not available
    • Re: Can't trust COMODO - An Update Gunter Ollmann (May 09)
• Re: Privilege escalation in BulletProof FTP Server v2.4.0.31 [PoC] Jerome ATHIAS (May 02)
• Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241 Lachlan. H (May 02)
• [CLA-2005:952] Conectiva Security Announcement - kernel Conectiva Updates (May 02)
• tHorK FrameWork Beta v0.1::: another exploit framework gilbert nzeka (May 02)
• ASP.NET __VIEWSTATE crypto validation prone to replay attacks Michal Zalewski (May 03)
  • Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks H D Moore (May 05)
  • <Possible follow-ups>
  • RE: ASP.NET __VIEWSTATE crypto validation prone to replay attacks Tim Farley (May 05)
  • Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks Michal Zalewski (May 05)
    • Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks Michal Zalewski (May 06)
      • Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks Anton Ivanov (May 12)
• [SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription Martin Schulze (May 05)
• [HSC Security Group] ASP Inline Corporate Calendar SQL injection Zinho (May 05)
• Advisories for 4 vulnerabilities addressed by Apple SU 2005-005 David Remahl (May 05)
• Multiple SQL injections and XSS in FishCart 3.1 dcrab (May 05)
• Golden Ftp Server Pro - Directory Traversal Vuln Lachlan. H (May 05)
• Authentication bypass, sql injections and xss in ArticleLive 2005 dcrab (May 05)
  • <Possible follow-ups>
  • Re: Authentication bypass, sql injections and xss in ArticleLive 2005 Steven M. Christey (May 11)
• iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability iDEFENSE Labs (May 05)
• Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 ShineShadow (May 05)
• Gossamer Threads Links SQL login XSS Vulnerability Nathan House (May 05)
• leafnode security announcement leafnode-SA-2005-01 Matthias Andree (May 05)
• Local file detection bug found through Adobe SVG Viewer Hyperdose Security (May 05)
• iDEFENSE Security Advisory 05.04.05: Apple Mac OS X vpnd Server_id Buffer Overflow Vulnerability iDEFENSE Labs (May 05)
• directory traversal in SimpleCam 1.2 Donato Ferrante (May 05)
• MRO Maximo v4 & v5 Felix (May 05)
• MegaBook V2.0 - Cross Site Scripting Exploit Spy Hat (May 05)
  • <Possible follow-ups>
  • Re: MegaBook V2.0 - Cross Site Scripting Exploit Morning Wood (May 06)
  • Re: MegaBook V2.0 - Cross Site Scripting Exploit Spy Hat (May 09)
• Oracle 9i / 10g Fine Grained Auditing Issue Alexander Kornbrust (May 05)
• Oracle 10g DBMS_SCHEDULER SESSION_USER issue Alexander Kornbrust (May 05)
• dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronic (May 05)
• Multiple vulnerabilities in myBloggie 2.1.1 Alberto Trivero (May 05)
• [USN-113-1] libnet-ssleay-perl vulnerability Martin Pitt (May 05)
• Multiple Vulnerabilities In SitePanel2 GulfTech Security Research (May 05)
• Multiple Vulnerabilities In osTicket GulfTech Security Research (May 05)
• Local root vuln in VPN daemon on MacOS X Pieter de Boer (May 05)
• Re: AWStats <= 6.4 Multiple vulnerabilities Laurent Destailleur (May 05)
• [USN-116-1] gzip vulnerabilities Martin Pitt (May 05)
• [USN-118-1] PostgreSQL vulnerabilities Martin Pitt (May 05)
• DMA[2005-0502a] - 'Apple OSX multiple Bluetooth vulnerabilities' Kevin Finisterre (May 05)
• [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart Exoduks (May 05)
• [USN-114-1] kimgio vulnerability Martin Pitt (May 05)
• [USN-117-1] cvs vulnerability Martin Pitt (May 05)
• [USN-115-1] Kommander vulnerability Martin Pitt (May 05)
• Gamespy cd-key validation system: Cd-key never in use Luigi Auriemma (May 06)
• Mac OS 10.4: new-account-wizzard in Mail 2.0 sends clear-text passwords Markus Wörle (May 06)
• Multiple vulnearabilities in e107 cms hennoj (May 06)
• [ GLSA 200505-02 ] Oops!: Remote code execution Luke Macken (May 06)
• Sql Injection in CJ Ultra Plus v1.0.3-1.0.4 Kold (May 06)
• MDKSA-2005:082 - Updated OpenOffice.org packages fix heap overflow vulnerability Mandriva Security Team (May 06)
• Multiple Vulnerabilities In Invision Power Board GulfTech Security Research (May 06)
• MDKSA-2005:081 - Updated XFree86/XOrg packages fix libXpm vulnerabilities Mandriva Security Team (May 06)
• FreeBSD Security Advisory FreeBSD-SA-05:06.iir FreeBSD Security Advisories (May 06)
• FreeBSD Security Advisory FreeBSD-SA-05:07.ldt FreeBSD Security Advisories (May 06)
• FreeBSD Security Advisory FreeBSD-SA-05:08.kmem FreeBSD Security Advisories (May 06)
• PHP Advanced Transfer Manager v1.21 tjomi4 (May 06)
• [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow Gary O'leary-Steele (May 06)
• [SECURITY] [DSA 721-1] New squid packages fix ACL bypass Martin Schulze (May 06)
• [USN-119-1] tcpdump vulnerabilities Martin Pitt (May 06)
• [USN-122-1] Squid vulnerability Martin Pitt (May 06)
• [USN-121-1] OpenOffice.org vulnerability Martin Pitt (May 06)
• [USN-120-1] Apache 2 vulnerability Martin Pitt (May 06)
• Secure Science Corporation Advisory CSA-056 SSC Advisory Notice (May 06)
• [USN-123-1] Xine library vulnerabilities Martin Pitt (May 06)
• [ GLSA 200505-03 ] Ethereal: Numerous vulnerabilities Sune Kloppenborg Jeppesen (May 06)
• 4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow Braden Thomas (May 06)
• firefox 1.0.3 spoof+auto dl john smith (May 07)
  • <Possible follow-ups>
  • Re: firefox 1.0.3 spoof+auto dl Paul (May 09)
• PwsPHP v1.2.2 Final - Multiples vulnerabilities SecuBox fRoGGz (May 09)
• [ GLSA 200505-04 ] GnuTLS: Denial of Service vulnerability Matthias Geerdsen (May 09)
• [SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution Martin Schulze (May 09)
• Firefox Remote Compromise Leaked Paul (May 09)
• Firefox Remote Compromise Technical Details Paul (May 09)
• [SECURITY] [DSA 722-1] New smail packages fix arbitrary code execution Martin Schulze (May 09)
• NISCC Vulnerability Advisory IPSEC - 004033 albatross (May 09)
• Announcement: The Web Security Mailing List contact (May 09)
• [SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow Ejovi Nuwere (May 09)
• phpbb 2.0.15 released - patches high critical vuln Paul Laudanski (May 09)
  • Re: phpbb 2.0.15 released - patches high critical vuln Paul Laudanski (May 13)
• Advanced Guestbook 2.3.1 Spy Hat (May 09)
• Easy Message Board Directory Traversal and Remote Command SoulBlack Group (May 09)
• Viruses can evade Sophos Anti-Virus xerces8 (May 09)
• [ GLSA 200505-05 ] gzip: Multiple vulnerabilities Sune Kloppenborg Jeppesen (May 10)
• [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability Sune Kloppenborg Jeppesen (May 10)
• Esqo advisory: GeoVision Digital Video Surveillance System - Multiple authentication issues Tirath Rai (May 10)
• Crash in Zoidcom 1.0 beta 4 Luigi Auriemma (May 10)
• New Macromedia Security Zone Bulletin Posted Macromedia Security Zone (May 10)
• TSLSA-2005-0021 - squid Trustix Security Advisor (May 10)
• TCP/IP implementations do not adequately validate ICMP error messages Alok Menghrajani - Ilion Security SA (May 10)
  • Re: TCP/IP implementations do not adequately validate ICMP error messages Peter Keel (May 11)
  • Re: TCP/IP implementations do not adequately validate ICMP error messages Maciej Soltysiak (May 11)
  • Re: SPAM-HIGH: TCP/IP implementations do not adequately validate ICMP error messages David Nichols (May 12)
  • RE: TCP/IP implementations do not adequately validate ICMP error messages David Schwartz (May 12)
• Firefox Crash?? orebla Orebla (May 10)
  • Re: Firefox Crash?? Joxean Koret (May 12)
  • Re: Firefox Crash?? Christophe Lucas (May 12)
  • Re: Firefox Crash?? Jeremy Kelley (May 12)
• [ GLSA 200505-08 ] HT Editor: Multiple buffer overflows Sune Kloppenborg Jeppesen (May 10)
• CAIF 1.2 released Oliver Goebel (May 10)
• WowBB view_user.php SQL Injection Vulnerability Megasky (May 10)
• Gamespy cd-key validation system: "Cd-key in use" DoS versus many games Luigi Auriemma (May 10)
• [ GLSA 200505-07 ] libTIFF: Buffer overflow Sune Kloppenborg Jeppesen (May 10)
• remote root security bug in ethereal 0.9.13 >= and <= 0.10.10 suresec advisories (May 10)
• Linux kernel ELF core dump privilege elevation Paul Starzetz (May 11)
  • Re: Linux kernel ELF core dump privilege elevation Bruno Lustosa (May 11)
    • Re: Linux kernel ELF core dump privilege elevation codeQ (May 13)
  • Re: Linux kernel ELF core dump privilege elevation Greg KH (May 11)
    • Re: Linux kernel ELF core dump privilege elevation Greg KH (May 11)
    • Re: Linux kernel ELF core dump privilege elevation Paul Starzetz (May 12)
  • Re: Linux kernel ELF core dump privilege elevation (kernel module workaround) Andrew Griffiths (May 12)
    • Re: Linux kernel ELF core dump privilege elevation (kernel module workaround) chris (May 13)
  • Re: Linux kernel ELF core dump privilege elevation antoine (May 12)
    • Re: Linux kernel ELF core dump privilege elevation Pedro Venda (May 13)
• MDKSA-2005:083 - Updated ethereal packages fix multiple vulnerabilities Mandriva Security Team (May 11)
• Metasploit Framework v2.4 H D Moore (May 11)
• Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability Cisco Systems Product Security Incident Response Team (May 11)
• [HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS Zinho (May 11)
• [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability pokley (May 11)
• Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk Arne Vidström (May 11)
  • Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk Arne Vidström (May 26)
• Guesbook Pro XSS & HTML Injection SoulBlack Group (May 11)
• Ethereal <= 0.10.10 SIP dissector stack overflow DoS exploit Shaun Colley (May 11)
• BakBone NetVault last warning class (May 12)
• OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. please_reply_to_security (May 12)
• Yappa-NG Multiple Vulnerabilities GulfTech Security Research (May 12)
• [DR018] Quartz Composer / QuickTime 7 information leakage David Remahl (May 12)
• Firefox 1.0.4 released. Several vulnerabilities fixed Paul (May 12)
• Security Advisory for Bugzilla 2.18, 2.19.2, and 2.16.8 Max Kanat-Alexander (May 12)
• Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk Thor Arne Johansen (May 12)
• Directtopics Multiple Vulnerabilities (Security Advisory) Morinex Eneco (May 12)
• Acrowave AAP-3100AR authetication bypass Martin Tornwall (May 12)
• MDKSA-2005:087 - Updated tcpdump packages fix multiple vulnerabilities Mandriva Security Team (May 12)
• MDKSA-2005:086 - Updated gaim packages fix multiple vulnerabilities Mandriva Security Team (May 12)
• MDKSA-2005:085 - Updated kdelibs packages fix vulnerabilities Mandriva Security Team (May 12)
• MDKSA-2005:084 - Updated gnutls packages fix vulnerabilities Mandriva Security Team (May 12)
• [ GLSA 200505-09 ] Gaim: Denial of Service and buffer overflow vulnerabilties Sune Kloppenborg Jeppesen (May 12)
• [USN-125-1] Gaim vulnerabilities Martin Pitt (May 12)
• htdigest exploit code [bid 13537] K sPecial (May 12)
• [USN-124-1] Mozilla and Firefox vulnerabilities Martin Pitt (May 12)
• [USN-124-2] Fixed packages for USN-124-1 Martin Pitt (May 12)
• FreeBSD Security Advisory FreeBSD-SA-05:09.htt [REVISED] FreeBSD Security Advisories (May 13)
• OllyDbg "INT3 AT" Format String Vulnerability Piotr Bania (May 13)
• ITU 2005 Call For Papers Michal Szymanski (May 13)
• 32-bit qmail fun (qmail-pop3d) (fwd) Lars Olsson (May 13)
• Ultimate PHP Board (UPB) Security Advisory Morinex Eneco (May 13)
• OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage please_reply_to_security (May 13)
• Netvault Remote Heap Overflow (another one) nolimit bugtraq (May 13)
• [FLSA-2005:155508] Updated cvs package fixes security issues Marc Deslauriers (May 13)
• [FLSA-2005:154988] Updated openoffice.org packages fix security issues Marc Deslauriers (May 13)
• Willings WebCam - Password Disclosure Issue SecuBox fRoGGz (May 13)
• Windows image size crash RSnake (May 13)
  • Re: Windows image size crash Giuseppe `lan` Marocchio (May 13)
  • Re: Windows image size crash Oliver J. Morais (May 13)
  • Re: Windows image size crash Bernhard Mitterer (May 14)
  • <Possible follow-ups>
  • Re: Windows image size crash cmthemc (May 18)
• cross-domain cookie theft: who's to blame? Tim Tompkins (May 13)
• OpenBB SQL Injection & Cross-site Scripting Vulnerability Megasky (May 13)
• Yahoo! Messenger URL Handler Remote DoS Vulnerability Torseq Tech . (May 13)
• PHPHeaven PHPMyChat Cross-site Scripting Vulnerablitiy Megasky (May 13)
• Yahoo! Chat Add Buddy Without Consent Privacy Issue Torseq Tech . (May 13)
• [ GLSA 200505-10 ] phpBB: Cross-Site Scripting Vulnerability Sune Kloppenborg Jeppesen (May 14)
• Gaim 1.2.1 -- PoC Stack Overflow Ron (May 14)
• [FLSA-2005:152763] Updated qt packages fixes security issues Marc Deslauriers (May 14)
• [USN-126-1] GNU TLS library vulnerability Martin Pitt (May 14)
• [FLSA-2005:152768] Updated ruby package fixes security issues Marc Deslauriers (May 14)
• Skull-Splitter's Guestbook Multiple XXS/HTML injection Morinex Eneco (May 14)
• [FLSA-2005:152804] Updated openmotif packages fix image vulnerability Marc Deslauriers (May 14)
• MDKSA-2005:088 - Updated mozilla packages fix multiple vulnerabilities Mandriva Security Team (May 14)
• [FLSA-2005:152856] Updated sudo packages fix security issue Marc Deslauriers (May 14)
• [FLSA-2005:152912] Updated imap packages fix security issues Marc Deslauriers (May 14)
• [FLSA-2005:152871] Updated nfs-utils package fixes security issue Marc Deslauriers (May 14)
• [ GLSA 200505-11 ] Mozilla Suite, Mozilla Firefox: Remote compromise Sune Kloppenborg Jeppesen (May 16)
• [ GLSA 200505-12 ] PostgreSQL: Multiple vulnerabilities Sune Kloppenborg Jeppesen (May 16)
• Multiple Vulnerabilities in MetaCart e-Shop dedi dwianto (May 16)
• Postnuke 0.750 - 0.760rc4 local file inclusion pokley (May 16)
• DotNetNuke (Multiple XSS) Mark Woan (May 16)
• Woltlab Burning Board SQL Injection Vulnerability GulfTech Security Research (May 16)
• Pico Server (pServ) Local Information Disclosure Claus R. F. Overbeck (May 16)
• Pico Server (pServ) Information Disclosure Of CGI Sources Claus R. F. Overbeck (May 16)
• Pico Server (pServ) Remote Command Injection Claus R. F. Overbeck (May 16)
• Mac OS X - Adobe Version Cue local root exploit [c version exploit] ali reza AcTiOnSpIdEr (May 16)
• [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) deluxe (May 16)
  • <Possible follow-ups>
  • Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) deluxe (May 19)
• cdrdao exploit for mandrake 10.2 ( Mandriva 2005) newbug Tseng (May 16)
• Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability alert7 (May 17)
• [CLA-2005:953] Conectiva Security Announcement - kde Conectiva Updates (May 17)
• [ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability Sune Kloppenborg Jeppesen (May 17)
• OpenServer 5.0.6 OpenServer 5.0.7 : telnet client multiple issues please_reply_to_security (May 17)
• MDKSA-2005:088-1 - Updated mozilla-firefox packages re-enable extensions Mandriva Security Team (May 17)
• Linux kernel pktcdvd ioctl break user space limit vulnerability [corrected] bugs (May 18)
• Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine Torseq Tech . (May 18)
• Help Center Live Vulnerabilities GulfTech Security Research (May 18)
• [SECURITY] [DSA 724-1] New phpsysinfo packages fix cross site scripting Martin Schulze (May 18)
• [USN-127-1] bzip2 vulnerabilities Martin Pitt (May 18)
• [USN-128-1] nasm vulnerability Martin Pitt (May 18)
• Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack. Konrad Malewski (May 18)
• [USN-129-1] Squid vulnerability Martin Pitt (May 18)
• Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) Steven M. Christey (May 18)
• Re: Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine Torseq Tech . (May 18)
• Re: Mac OS X - Adobe Version Cue local root exploit [c version exploit] Vade 79 (May 18)
• NOVELL ZENWORKS MULTIPLE REMØTE STACK & HEAP OVERFLOWS list (May 18)
• [FLSA-2005:152883] Updated mozilla packages fix security issues Marc Deslauriers (May 18)
• [FLSA-2005:152771] Updated pam packages fix security issue Marc Deslauriers (May 18)
• Security issue in Microsoft Outlook Bakchodiya (May 18)
  • <Possible follow-ups>
  • RE: Security issue in Microsoft Outlook Scovetta, Michael V (May 20)
• UnixWare 7.1.4 : Updated mozilla fixes many security issues please_reply_to_security (May 18)
• MDKSA-2005:089 - Updated cdrdao packages fix local root vulnerability Mandriva Security Team (May 19)
• MDKSA-2005:090 - Updated nasm packages fix vulnerability Mandriva Security Team (May 19)
• MDKSA-2005:091 - Updated bzip2 packages fix multiple vulnerabilities Mandriva Security Team (May 19)
• MDKSA-2005:092 - Updated gzip packages fix several vulnerabilities Mandriva Security Team (May 19)
• D-Link DSL routers authentication bypass Francesco Orro (May 19)
• [SECURITY] [DSA 725-1] New ppxp packages fix local root exploit Martin Schulze (May 19)
• [ GLSA 200505-14 ] Cheetah: Untrusted module search path Sune Kloppenborg Jeppesen (May 19)
• JavaMail Information Disclosure (msgno) Ricky Latt (May 19)
• UNICODE BUFFER OVERFLOW IN MS-WORD Bahaa Naamneh (May 19)
• phpATM arbitrary PHP code inclusion Ingvar Gilbert (May 19)
• [FLSA-2005:152815] Updated libtiff packages fix security issues Marc Deslauriers (May 19)
• [USN-130-1] TIFF library vulnerability Martin Pitt (May 19)
• [SECURITY] [DSA 726-1] New oops packages fix format string vulnerability Martin Schulze (May 20)
• UPDATE: [ GLSA 200504-23 ] Kommander: Insecure remote script execution Sune Kloppenborg Jeppesen (May 20)
• ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability Sune Kloppenborg Jeppesen (May 20)
• [ GLSA 200505-15 ] gdb: Multiple vulnerabilities Sune Kloppenborg Jeppesen (May 20)
• pst.advisory: gedit fun. opensource is god .lol windows yan feng (May 20)
• [SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution Martin Schulze (May 20)
• picasm error handling stack overflow vulnerability Shaun Colley (May 20)
• worm "postcard" e-mail issue M. Perri (May 20)
• episodex guestbook security bypass & html injection farhad koosha (May 20)
• Security contact for Trillian Suramya Tomar (May 20)
• [BuHa Security] Wordpress SQL-Injection Thomas Waldegger (May 20)
• [UPDATE] UNICODE BUFFER OVERFLOW IN MS-WORD Bahaa Naamneh (May 20)
• [SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3} Maksymilian Arciemowicz (May 21)
• [SECURITYREASON.COM] PostNuke XSS and Full path disclosure 0.760RC3=>x Maksymilian Arciemowicz (May 21)
• [SECURITYREASON.COM] PostNuke Non Critical SQL Injection and Include 0.760-RC3=>x Maksymilian Arciemowicz (May 21)
• pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows yan feng (May 21)
• [SECURITYREASON.COM] PostNuke SQL Injection 0.750=>x Maksymilian Arciemowicz (May 21)
• Computer Associates Vet Antivirus Library Remote Heap Overflow list (May 23)
• SQL injections in PortailPHP CENSORED (May 23)
• Cookie Cart Default Installation Multiple Vulnerabilities SoulBlack Group (May 23)
• Format string and crash in Warrior Kings 1.3 and Battles 1.23 Luigi Auriemma (May 23)
• Meteor FTP Server v1.5 Buffer Overflow Auston J (May 23)
• [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities Sune Kloppenborg Jeppesen (May 24)
• [ GLSA 200505-18 ] Net-SNMP: fixproc insecure temporary file creation Sune Kloppenborg Jeppesen (May 24)
• CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability Williams, James K (May 24)
  • <Possible follow-ups>
  • RE: CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability Williams, James K (May 27)
• Blue Coat Reporter multiple remote vulnerabilities Oliver Karow (May 24)
• Gforge - viewFile.php security flaw Filippo Spike Morelli (May 24)
• ACROS Security: HTML Injection in BEA WebLogic Server Console (2) ACROS Security (May 24)
  • Re: ACROS Security: HTML Injection in BEA WebLogic Server Console (2) Will Schroeder (May 26)
    • RE: ACROS Security: HTML Injection in BEA WebLogic Server Console (2) ACROS Security (May 27)
• ACROS Security: HTML Injection in BEA WebLogic Server Console (1) ACROS Security (May 24)
• Endless loop in Halo 1.06 Luigi Auriemma (May 24)
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability iDEFENSE Labs (May 24)
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability iDEFENSE Labs (May 24)
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities iDEFENSE Labs (May 24)
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Labs (May 24)
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability iDEFENSE Labs (May 24)
• Javamail Multiple Information Disclosure Vulnerabilities Ricky Latt (May 24)
• [ GLSA 200505-16 ] ImageMagick, GraphicsMagick: Denial of Service vulnerability Thierry Carrez (May 24)
• [USN-131-1] Linux kernel vulnerabilities Martin Pitt (May 24)
• [USN-132-1] ImageMagick vulnerabilities Martin Pitt (May 24)
• [SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting Martin Schulze (May 25)
• exim 4.40 exploit plugger (May 25)
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d Format String Vulnerability iDEFENSE Labs (May 25)
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability iDEFENSE Labs (May 25)
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability iDEFENSE Labs (May 25)
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d FETCH Command Resource Consumption DoS Vulnerability iDEFENSE Labs (May 25)
• PHP Injection in PHP Poll Creator rash ilusion (May 25)
  • Re: PHP Injection in PHP Poll Creator Michael Cordover (May 26)
• shtool insecure temporary file creation ZATAZ.net (May 25)
• High Risk Vulnerability in L-Soft's LISTSERV Server NGSSoftware Insight Security Research (May 25)
• OpenServer 5.0.6 OpenServer 5.0.7 : nwprint privilege escalation please_reply_to_security (May 25)
• Zone Labs ZoneAlarm Vet anti-virus engine OLE processing vulnerability Zone Labs Product Security (May 25)
• davfs2 does not honour Unix permissions martin f krafft (May 25)
• [SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting Martin Schulze (May 26)
• [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service Martin Schulze (May 26)
  • Re: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service John GALLET (May 27)
• Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability Piotr Bania (May 26)
• Invision Power Board 1.* and 2.* Exploit (BID 13529) Petey Beege (May 26)
• [ GLSA 200505-19 ] gxine: Format string vulnerability Thierry Carrez (May 26)
• [USN-133-1] Apache utility vulnerability Martin Pitt (May 26)
• [USN-134-1] Firefox vulnerabilities Martin Pitt (May 26)
• Re: PowerLink WAN Aggregator - Vunerability preasoner (May 26)
• [security bulletin] SSRT4884 rev.0 - HP-UX TCP/IP Remote Denial of Service (DoS) Boren, Rich (SSRT) (May 26)
• [security bulletin] SSRT5954 rev.1 - HP-UX TCP/IP Remote Denial of Service (DoS) Boren, Rich (SSRT) (May 26)
• Re: Multiple Sql injection and XSS vulnerabilities in phpBB Plus v.1.52 and below and some of its modules. security curmudgeon (May 26)
• Meteor FTP Server: PoC Exploit Dim K0r0l (May 26)
• Re: [Full-disclosure] iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability jamesbug (May 26)
• [security bulletin] SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access Boren, Rich (SSRT) (May 26)
• Buffer-overflow and crash in Terminator 3: War of the Machines 1.16 Luigi Auriemma (May 26)
• Buffer-overflow in C'Nedra 0.4.0 Luigi Auriemma (May 26)
• PHP Stat Administrative User Authentication Bypass SoulBlack Group (May 27)
• PostNuke Critical SQL Injection and XSS 0.750=>x sp3x (May 27)
• [USN-114-2] Fixed packages for USN-114-1 Martin Pitt (May 27)
• [USN-135-1] gdb vulnerabilities Martin Pitt (May 27)
• [ GLSA 200505-20 ] Mailutils: Multiple vulnerabilities in imap4d and mail Thierry Carrez (May 27)
• [USN-136-1] binutils vulnerability Martin Pitt (May 27)
• [USN-136-2] Fixed packages for USN-136-1 Martin Pitt (May 27)
• User32.dll Icon Size Crash - k - (May 27)
  • Re: User32.dll Icon Size Crash Daniel Souza (May 27)
• [AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability Team SHATTER (May 27)
• [AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability Team SHATTER (May 27)
• DSL-504T (and maybe many other) remote access without password bug alessandro (May 27)
• Citrix security contact Eyal Udassin (May 27)
  • Re: Citrix security contact security curmudgeon (May 31)
• [SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification Martin Schulze (May 27)
• SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 Alberto Trivero (May 27)
• Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005) Benjamin Tobias Franz (May 30)
• Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) Benjamin Tobias Franz (May 30)
  • Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) Benton Lam (May 31)
  • <Possible follow-ups>
  • Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005) - k - (May 31)
• Microsoft Internet Explorer - Crash on processing embedded files with endless loop (05/28/2005) Benjamin Tobias Franz (May 30)
• Microsoft Internet Explorer - Crash on to many stack overflows (05/28/2005) Benjamin Tobias Franz (May 30)
• PicoWebServer Remote Unicode Stack Overflow Dennis Elser (May 30)
• Format String Vulnerability In Peercast 0.1211 And Earlier GulfTech Security Research (May 30)
• Compuware Softice (DbgMsg driver) Local Denial Of Service Piotr Bania (May 30)
• Crash in Stronghold 2 1.2 Luigi Auriemma (May 30)
• CYBSEC - PHPMailer Infinite Loop Denial of Service Mariano Nuñez Di Croce (May 30)
• MyBB 1.0 RC4 XSS Bug August Christopher (May 30)
• Multiple vulnerabilities in x-cart Gold CENSORED (May 30)
• MDKSA-2005:095 - Updated gdb packages fix vulnerabilities Mandriva Security Team (May 30)
• TSL-2005-0026 - multi Trustix Security Advisor (May 31)
• Spam exploiting MS05-016 Nick FitzGerald (May 31)
• TSL-2005-0025 - binutils Trustix Security Advisor (May 31)
• RE: Microsoft Internet Explorer - Crash on adding sites to restri cted zone (05/28/2005) Hohn, Joerg (May 31)
• Nortel VPN Router Malformed Packet DoS Vulnerability Roy Hills (May 31)
• [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 Xnuxer Security (May 31)
  • Re: [security () suse de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 Marcus Meissner (May 31)
    • Re: [security () suse de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 Todd C. Miller (May 31)
    • Re: [security () suse de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 Justin (May 31)
  • Re: [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3 Ow Mun Heng (May 31)
• PowerDownload Remote File Inclusion SoulBlack Group (May 31)
• SyScAN'05 organiser () syscan org (May 31)
• [Argeniss] MS05-012 Exploit Cesar (May 31)
• Wide-scale industrial espionage using Trojan horses in Israel Gadi Evron (May 31)
• multiple vulnerability Calendarix Advanced DarkBicho (May 31)
• Multiple vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 Alberto Trivero (May 31)
• 504T and now also 604T remote access. alessandro (May 31)

Previous period

Next period