Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

453 messages starting Oct 01 07 and ending Oct 31 07
Date index | Thread index | Author index

• Affiliate Network Pro Multiple Input Validation and Local file inclusion hack2prison (Oct 01)
• RE: feedreader3 has XSS vulnerability avivra (Oct 01)
• ASP Product catalog SQL injection vulnerability joseph . giron13 (Oct 01)
• [ GLSA 200709-18 ] Bugzilla: Multiple vulnerabilities Raphael Marichez (Oct 01)
• eGov Content Manager Cross Site Scripting Vulrnability DoZ (Oct 01)
• Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow snagg (Oct 01)
  • <Possible follow-ups>
  • Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow ejc (Oct 04)
• ASP-CMS version 1 default password location. joseph . giron13 (Oct 01)
• CheckPoint Secure Platform Multiple Buffer Overflows hvazquez (Oct 01)
  • RE: CheckPoint Secure Platform Multiple Buffer Overflows Tony Reusser (Oct 03)
    • RE: CheckPoint Secure Platform Multiple Buffer Overflows Hugo van der Kooij (Oct 03)
  • <Possible follow-ups>
  • Re: CheckPoint Secure Platform Multiple Buffer Overflows hvazquez (Oct 02)
  • Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows fwadmin (Oct 11)
  • Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows hvazquez (Oct 17)
• New Advisory: X-script GuestBook m2x (Oct 01)
• smbftpd 0.96 format string vulnerability Jerry Illikainen (Oct 01)
• Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9 Luigi Auriemma (Oct 01)
• Unexploitable buffer-overflow in America's Army 2.8.2 through PB Luigi Auriemma (Oct 01)
• Format string in the Doom 3 engine through PB Luigi Auriemma (Oct 01)
• Format string in F.E.A.R. 1.08 through PB Luigi Auriemma (Oct 01)
• ClubHack - CFP closing by 15th October 2007 `ClubHack ` (Oct 01)
• Immunity Debugger v1.2 Release Nicolas Waisman (Oct 01)
• phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion h3llcode (Oct 01)
  • Re: phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion str0ke (Oct 01)
• [ MDKSA-2007:191 ] - Updated libsndfile packages fix vulnerability security (Oct 01)
• [ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability security (Oct 02)
• [SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service dann frazier (Oct 02)
• WifiZoo v1.2 release Hernan Ochoa (Oct 02)
• Original Photo Gallery Remote Command Execution ascii (Oct 02)
• Re: dvddb-0.6 media sql-inj. vuln. james (Oct 02)
• [SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution Noah Meyerhans (Oct 02)
• TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities TSRT (Oct 02)
• TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities TSRT (Oct 02)
• iDefense Security Advisory 10.02.07: Multiple Vendor X Font Server Multiple Vulnerabilities iDefense Labs (Oct 03)
• rPSA-2007-0203-1 rmake rmake-proxy rmake-repos rPath Update Announcements (Oct 03)
• [SECURITY] [DSA 1380-1] New elinks packages fix information disclosure Steve Kemp (Oct 03)
• [SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Oct 03)
• FLEA-2007-0057-1 pidgin Foresight Linux Essential Announcement Service (Oct 03)
• [SECURITY] [DSA 1379-1] New quagga packages fix denial of service Steve Kemp (Oct 03)
• iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs (Oct 03)
  • Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability 3APA3A (Oct 04)
  • <Possible follow-ups>
  • Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs (Oct 04)
• 0day: mIRC pwns Windows jinc4fareijj (Oct 03)
  • Re: 0day: mIRC pwns Windows Gavin Hanover (Oct 03)
    • Re[2]: 0day: mIRC pwns Windows 3APA3A (Oct 04)
      • Re: 0day: mIRC pwns Windows Greg Rubin (Oct 04)
      • Re: Re[2]: 0day: mIRC pwns Windows Gavin Hanover (Oct 04)
  • Re: 0day: mIRC pwns Windows Gregory Rubin (Oct 03)
  • <Possible follow-ups>
  • Re: 0day: mIRC pwns Windows Fred Elliot (Oct 04)
• International Hacking & Security Conference "POC200" poc2007 (Oct 03)
• DRBGuestbook Remote XSS Vulnerability gokhankaya (Oct 03)
• Re: Ruby Net::HTTPS library does not validate server certificate CN Thomas (Oct 03)
• Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) sathyakrishnadas (Oct 03)
  • Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) Amit Klein (Oct 06)
• rPSA-2007-0204-1 qt-x11-free rPath Update Announcements (Oct 03)
• rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs rPath Update Announcements (Oct 03)
• rPSA-2007-0206-1 openssl openssl-scripts rPath Update Announcements (Oct 03)
• Content Builder 0.7.5 RFI Bug mehrad1989 (Oct 03)
• FreeBSD Security Advisory FreeBSD-SA-07:08.openssl FreeBSD Security Advisories (Oct 03)
• FLEA-2007-0058-1 openssl openssl-scripts Foresight Linux Essential Announcement Service (Oct 04)
• [RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities RISE Security (Oct 04)
• Cart32 Arbitrary File Download Vulnerability Paul Craig (Oct 04)
• [RISE-2007002] Borland InterBase Multiple Buffer Overflow Vulnerabilities RISE Security (Oct 04)
• Re: Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9[EXPLOIT] weak (Oct 04)
• [USN-523-1] ImageMagick vulnerabilities Kees Cook (Oct 04)
• FLEA-2007-0059-1 qt qt-tools Foresight Linux Essential Announcement Service (Oct 04)
• [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN [ NO REPLY ] (Oct 04)
  • <Possible follow-ups>
  • [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN [ NO REPLY ] (Oct 06)
• DDIVRT-2007-05 NetSupport Manager Client Buffer Overflow vulnerabilityresearch (Oct 04)
• [ GLSA 200710-01 ] RPCSEC_GSS library: Buffer overflow Pierre-Yves Rofes (Oct 04)
• [USN-524-1] OpenOffice.org vulnerability Kees Cook (Oct 05)
• [USN-525-1] libsndfile vulnerability Kees Cook (Oct 05)
• [USN-526-1] debian-goodies vulnerability Kees Cook (Oct 05)
• URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Juergen Schmidt (Oct 05)
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Roger A. Grimes (Oct 05)
    • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller (Oct 06)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. (Oct 06)
      • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Thierry Zoller (Oct 06)
      • Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Kurt Dillard (Oct 06)
      • Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Glynn Clements (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype KJK::Hyperion (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype KJK::Hyperion (Oct 09)
      • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller (Oct 11)
      • Re[3]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype 3APA3A (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. (Oct 09)
      • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. (Oct 09)
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Valdis . Kletnieks (Oct 09)
      • Message not available
      • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype gjgowey (Oct 09)
      • Message not available
      • Fwd: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype merigoth (Oct 11)
      • Message not available
      • Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available KJK::Hyperion (Oct 15)
      • Re: Third-party patch for CVE-2007-3896, UPDATE NOW KJK::Hyperion (Oct 17)
      • Re: URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Thierry Zoller (Oct 11)
      • RE: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Roger A. Grimes (Oct 09)
  • Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Andreas Lindenblatt (Oct 09)
  • Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Andreas Lindenblatt (Oct 09)
  • <Possible follow-ups>
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Juergen Schmidt (Oct 06)
  • Re[2]: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller (Oct 06)
    • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Morning Wood (Oct 09)
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Jim Slora (Oct 09)
• [SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting Thijs Kinkhorst (Oct 05)
• [ MDKSA-2007:193 ] - Updated openssl packages fix vulnerabilities security (Oct 05)
• rPSA-2007-0209-1 elinks rPath Update Announcements (Oct 05)
• Multiple vulnerabilities in Dropteam 1.3.3 Luigi Auriemma (Oct 05)
• Reporting Vulnerable Public Web mail ivan . sanchez (Oct 05)
• Re: Re: file upload vulnerability in joomla media component vinodsharma . mimit (Oct 05)
• Format string in The Dawn of Time 1.69s beta4 Luigi Auriemma (Oct 05)
• [SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities Steve Kemp (Oct 05)
• SSHatter 0.6 Tim Brown (Oct 06)
• CMS Creamotion - Remote File inclusion security (Oct 06)
• idmos-phoenix cms Remote File inclusion security (Oct 06)
• Else If cms Multiple Remote vulnerabilities security (Oct 06)
• [ GLSA 200710-02 ] PHP: Multiple vulnerabilities Raphael Marichez (Oct 08)
• [SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow Steve Kemp (Oct 08)
• [ GLSA 200710-04 ] libsndfile: Buffer overflow Raphael Marichez (Oct 08)
• [ GLSA 200710-07 ] Tk: Buffer overflow Raphael Marichez (Oct 08)
• [ GLSA 200710-06 ] OpenSSL: Multiple vulnerabilities Pierre-Yves Rofes (Oct 08)
• [ GLSA 200710-03 ] libvorbis: Multiple vulnerabilities Raphael Marichez (Oct 08)
• [ GLSA 200710-05 ] QGit: Insecure temporary file creation Pierre-Yves Rofes (Oct 08)
• new vuln in snewscms.net.ru in lang file info (Oct 08)
• TorrentTrader Classic Mutiple Remote vulnerabilities security (Oct 08)
• rPSA-2007-0210-1 xen rPath Update Announcements (Oct 09)
• [security bulletin] HPSBUX02262 SSRT071447 rev. 1 - HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS) security-alert (Oct 09)
• [security bulletin] HPSBUX01137 SSRT5954 rev.11 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS) security-alert (Oct 09)
• BT Home Flub: Pwnin the BT Home Hub Adrian P (Oct 09)
• [security bulletin] HPSBUX02181 SSRT061289 rev.3 - HP-UX Running IPFilter, Remote Denial of Service (DoS) security-alert (Oct 09)
• [security bulletin] HPSBMA02274 SSRT071445 rev.1 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) security-alert (Oct 09)
• [security bulletin] HPSBMA02275 SSRT071445 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alert (Oct 09)
• Black Hat Tokyo + DC and Europe CfPs now open. Jeff Moss (Oct 09)
  • <Possible follow-ups>
  • Black Hat Tokyo + DC and Europe CfPs now open. Jeff Moss (Oct 11)
• Viart Shopping Cart Directory Transversal Vuln [ NO REPLY ] (Oct 09)
• rPSA-2007-0212-1 util-linux rPath Update Announcements (Oct 09)
• DNewsWeb Softwares Cross Site Scripting Vulrnability DoZ (Oct 09)
• Vulnerabilities xoxland (Oct 09)
  • Re: Vulnerabilities Victor Brilon (Oct 11)
  • <Possible follow-ups>
  • Re: Vulnerabilities sottwell (Oct 11)
• Research: Cybercrime and the Electoral System Oliver Friedrichs (Oct 09)
• RE: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Brett Moore (Oct 09)
• LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues Chris Travers (Oct 09)
• [USN-527-1] xen-3.0 vulnerability Kees Cook (Oct 09)
• NULL pointer crash in World in Conflict 1.000 Luigi Auriemma (Oct 09)
• iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Labs (Oct 09)
  • Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow Nick FitzGerald (Oct 10)
• The Death of Defence in Depth ? - An invitation to Hack.lu Thierry Zoller (Oct 09)
  • Re: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu Felix 'FX' Lindner (Oct 11)
• [ GLSA 200710-09 ] NX 2.1: User-assisted execution of arbitrary code Pierre-Yves Rofes (Oct 09)
• [ GLSA 200710-08 ] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow Pierre-Yves Rofes (Oct 09)
• Regarding vulnerability in ViArt Shop support (Oct 10)
• 3Com WIFI router remote administration vulnerability. Guy Mizrahi (Oct 10)
• Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Damir Rajnovic (Oct 10)
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake (Oct 10)
    • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis (Oct 11)
      • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake (Oct 11)
      • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis (Oct 11)
      • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake (Oct 11)
      • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Roman Medina-Heigl Hernandez (Oct 12)
      • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Mark Senior (Oct 12)
    • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Florian Weimer (Oct 11)
  • <Possible follow-ups>
  • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis (Oct 16)
• wmtrssreader joomla component 1.0 Remote File Include Vulnerability cyber-crime (Oct 10)
• Remote Desktop Command Fixation Attacks pdp (architect) (Oct 10)
  • Re: Remote Desktop Command Fixation Attacks Steve Shockley (Oct 10)
    • Re: Remote Desktop Command Fixation Attacks pdp (architect) (Oct 11)
  • RE: Remote Desktop Command Fixation Attacks Thor (Hammer of God) (Oct 10)
    • RE: Remote Desktop Command Fixation Attacks M. Burnett (Oct 11)
    • Re: Remote Desktop Command Fixation Attacks pdp (architect) (Oct 11)
      • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks gboyce (Oct 11)
      • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks pdp (architect) (Oct 11)
      • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks gjgowey (Oct 11)
      • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Paul Melson (Oct 11)
      • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Alex Everett (Oct 15)
      • RE: Remote Desktop Command Fixation Attacks Jim Harrison (Oct 11)
      • Re: Remote Desktop Command Fixation Attacks hvdkooij (Oct 12)
      • Message not available
      • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Pete Simpson (Oct 12)
      • RE: Remote Desktop Command Fixation Attacks Thor (Hammer of God) (Oct 12)
      • Re: Remote Desktop Command Fixation Attacks pdp (architect) (Oct 15)
      • Message not available
      • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks pdp (architect) (Oct 15)
• Several vulnerabilities in CMS Made Simple 1.1.3.1 Omid (Oct 10)
• 0day: Hacking secured CITRIX from outside pdp (architect) (Oct 10)
• Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password Cisco Systems Product Security Incident Response Team (Oct 10)
• AST-2007-022: Buffer overflows in voicemail when using IMAP storage The Asterisk Development Team (Oct 10)
• [SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution Noah Meyerhans (Oct 10)
• Vulnerabilities digest 3APA3A (Oct 10)
• iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability iDefense Labs (Oct 10)
• [ELEYTT] 10PAZDZIERNIK2007 Michal Bucko (Oct 10)
• ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability zdi-disclosures (Oct 10)
• ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities zdi-disclosures (Oct 10)
• TPTI-07-18: EMC RepliStor Server Heap Overflow Vulnerability TSRT (Oct 10)
• ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability zdi-disclosures (Oct 11)
• IRM Advisory: Cisco IOS LPD Remote Stack Overflow Andy Davis (Oct 11)
• URI handling as the harbinger of interaction errors Steven M. Christey (Oct 11)
  • Re: URI handling as the harbinger of interaction errors Florian Weimer (Oct 11)
• CORE-2007-0928: Stack-based buffer overfl ow vulnerability in OpenBSD’s DHCP server Core Security Technologies Advisories (Oct 11)
• [ MDKSA-2007:194 ] - Updated libvorbis packages fix vulnerabilities security (Oct 11)
• October Microsoft Tuesday Todd Manning (Oct 11)
• M$ will fix URI? Memisyazici, Aras (Oct 11)
• Joomla! swMenuFree 4.6 Component Remote File Include Guns (Oct 11)
  • <Possible follow-ups>
  • Re: Joomla! swMenuFree 4.6 Component Remote File Include sean (Oct 12)
• [security bulletin] HPSBUX02273 SSRT071476 rev. 1 - HP-UX running Apache, Remote Unauthorized Denial of Service (DoS) security-alert (Oct 11)
• CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability hfli (Oct 11)
• [USN-528-1] MySQL vulnerabilities Kees Cook (Oct 11)
• EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference eEye Advisories (Oct 11)
• iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Labs (Oct 11)
• [security bulletin] HPSBMA02230 SSRT071436 rev.1 - HP Select Identity, Remote Unauthorized Access security-alert (Oct 11)
• [USN-529-1] Tk vulnerability Kees Cook (Oct 11)
• S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service S21sec Labs (Oct 11)
• [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities Williams, James K (Oct 11)
• rPSA-2007-0214-1 initscripts rPath Update Announcements (Oct 11)
• Tikiwiki 1.9.8 exploit ITW Moritz Naumann (Oct 11)
  • Re: Tikiwiki 1.9.8 exploit ITW 3APA3A (Oct 12)
• OpenSSL Security Advisory Ben Laurie (Oct 12)
• SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS Bernhard Mueller (Oct 12)
• [USN-530-1] hplip vulnerability Kees Cook (Oct 12)
• [ GLSA 200710-10 ] SKK Tools: Insecure temporary file creation Raphael Marichez (Oct 13)
• [ GLSA 200710-11 ] X Font Server: Multiple Vulnerabilities Pierre-Yves Rofes (Oct 13)
• [ GLSA 200710-13 ] Ampache: Multiple vulnerabilities Pierre-Yves Rofes (Oct 13)
• [SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Oct 13)
• [ GLSA 200710-14 ] DenyHosts: Denial of Service Pierre-Yves Rofes (Oct 13)
• VImpX ActiveX (VImpX.ocx v. 4.7.3.0) Remote saw_xyz (Oct 13)
• playing for fun with <=IE7 laurent . gaffie (Oct 13)
  • RE: playing for fun with <=IE7 Roger A. Grimes (Oct 15)
  • RE: playing for fun with <=IE7 James C. Slora Jr. (Oct 15)
  • RE: playing for fun with <=IE7 avivra (Oct 16)
  • <Possible follow-ups>
  • Re: RE: playing for fun with <=IE7 jason . gerfen (Oct 15)
  • Re: Re: RE: playing for fun with <=IE7 laurent . gaffie (Oct 25)
• [ GLSA 200710-12 ] T1Lib: Buffer overflow Pierre-Yves Rofes (Oct 13)
• Clients buffer-overflow in Live for Speed 0.5X10 Luigi Auriemma (Oct 15)
• [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service Martin Schulze (Oct 15)
• [SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service Martin Schulze (Oct 15)
• [ GLSA 200710-16 ] X.Org X server: Composite local privilege escalation Pierre-Yves Rofes (Oct 15)
• eXtremail(ly easy) remote roots mu-b (Oct 15)
• [ GLSA 200710-15 ] KDM: Local privilege escalation Pierre-Yves Rofes (Oct 15)
• InnovaShop™® (mgs.jps) Cross Siting Script ing jose luis góngora fernández (Oct 15)
• Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability jose luis góngora fernández (Oct 15)
• [SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution Florian Weimer (Oct 15)
• Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability jose luis góngora fernández (Oct 15)
• HTML Injection Vuln in nssboard kcghost (Oct 15)
• SYMSA-2007-010: Microsoft ActiveSync 4.x Weak Password Obfuscation research (Oct 16)
• CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability bugtraq (Oct 16)
• about phpMyAdmin setup.php XSS vulnerability Marc Delisle (Oct 16)
• IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX Andy Davis (Oct 16)
• FW: [Dailydave] Canada's Response to Black Hat - SecTor 2007 Taylor, Gord (Oct 16)
• WWWISIS <= 7.1 (IsisScript) Multiple Vulnerabilities jose luis góngora fernández (Oct 16)
• [ MDKSA-2007:198 ] - Updated util-linux packages fix vulnerability security (Oct 16)
• Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability Secunia Research (Oct 16)
• SSH attacks - anyone else seen these? Tim (Oct 16)
  • Re: SSH attacks - anyone else seen these? Gayathri Swaminathan (Oct 16)
    • Re: SSH attacks - anyone else seen these? Jose Nazario (Oct 16)
  • Re: SSH attacks - anyone else seen these? Mark R. Bowyer (Oct 16)
  • Re: SSH attacks - anyone else seen these? James Lay (Oct 17)
    • Re: SSH attacks - anyone else seen these? Tim (Oct 18)
  • Re: SSH attacks - anyone else seen these? pand0ra (Oct 17)
• [security bulletin] HPSBMA02230 SSRT071436 rev.2 - HP Select Identity, Remote Unauthorized Access security-alert (Oct 16)
• [ MDKSA-2007:196 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Oct 16)
• [security bulletin] HPSBST02280 SSRT071480 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-055 to MS07-060 security-alert (Oct 16)
• [ MDKSA-2007:197 ] - Updated tar packages prevent buffer overflow security (Oct 16)
• [security bulletin] HPSBTU02276 SSRT071472 rev.1 - HP Tru64 UNIX Running Apache Tomcat, Remote Unauthorized Access, Remote Denial of Service (DoS) security-alert (Oct 16)
• [security bulletin] HPSBUX02277 SSRT071453 rev.1 - HP-UX Running OpenSSL, Local Denial of Service (DoS) security-alert (Oct 16)
• [ MDKSA-2007:195 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Oct 16)
• [ GLSA 200710-17 ] Balsa: Buffer overflow Raphael Marichez (Oct 17)
• AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql Asterisk Security Team (Oct 17)
• Oracle TNS Listener DoS and/or remote memory inspection NGSSoftware Insight Security Research (Oct 17)
• Multiple SQL Injection Flaws in Oracle CTX_DOC package NGSSoftware Insight Security Research (Oct 17)
• Oracle RDBMS TNS Data packet DoS NGSSoftware Insight Security Research (Oct 17)
• Oracle audit issue with XMLDB ftp service NGSSoftware Insight Security Research (Oct 17)
• Multiple CSRF in SimplePHPBlog deme (Oct 17)
  • Re: Multiple CSRF in SimplePHPBlog Hanno Böck (Oct 18)
• Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Cisco Systems Product Security Incident Response Team (Oct 17)
• Re: Netgear FVG318 is vunerable to DOS attack NetGear (Oct 17)
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Cisco Systems Product Security Incident Response Team (Oct 17)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Cisco Systems Product Security Incident Response Team (Oct 17)
• SQL Injection Flaw in Oracle Workspace Manager David Litchfield (Oct 17)
• [ MDKSA-2007:199 ] - Updated phpMyAdmin packages fix multiple vulnerabilities security (Oct 17)
• SYMSA-2007-011: Microsoft WM5 PocketPC Phone Ed SMS Handler Issue research (Oct 17)
• Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day) Reversemode (Oct 18)
• Nortel UNIStim IP Softphone Buffer-Overflow daniel . stirnimann (Oct 18)
• Nortel IP Phone Surveillance Mode daniel . stirnimann (Oct 18)
• Nortel IP Phone Flooding Denial of Service daniel . stirniman (Oct 18)
• Nortel IP Phone forced re-authentication daniel . stirnimann (Oct 18)
• Latest web hacking incidents Ofer Shezaf (Oct 18)
• Nortel Telephony Server Denial of Service daniel . stirnimann (Oct 18)
• [SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution Steve Kemp (Oct 18)
• [security bulletin] HPSBUX02273 SSRT071476 rev.2 - HP-UX Running Apache, Remote Unauthorized Denial of Service (DoS) security-alert (Oct 18)
• [security bulletin] HPSBMA02274 SSRT071445 rev.2 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) security-alert (Oct 18)
• [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day) Reversemode (Oct 18)
• CFP C H A S E - 2 0 0 7 Lahore Pakistan chase (Oct 18)
• Re[2]: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu Thierry Zoller (Oct 18)
• rPSA-2007-0219-1 libpng rPath Update Announcements (Oct 18)
• [SECURITY] [DSA 1389-1] New zoph packages fix SQL injection Moritz Muehlenhoff (Oct 18)
• Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak (Oct 18)
  • <Possible follow-ups>
  • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) farion42 (Oct 20)
    • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak (Oct 22)
  • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak (Oct 29)
• Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07) Stefan Kanthak (Oct 18)
• Serious holes affecting SiteBar 3.3.8 Tim Brown (Oct 18)
• Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096) Stefan Kanthak (Oct 18)
• [ GLSA 200710-18 ] util-linux: Local privilege escalation Raphael Marichez (Oct 18)
• [ GLSA 200710-19 ] The Sleuth Kit: Integer underflow Raphael Marichez (Oct 18)
• S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting S21sec Labs (Oct 18)
• [ MDKSA-2007:200 ] - Updated tk packages fix vulnerabilities security (Oct 18)
• [ GLSA 200710-20 ] PDFKit, ImageKits: Buffer overflow Raphael Marichez (Oct 19)
• rPSA-2007-0220-1 ImageMagick rPath Update Announcements (Oct 19)
• [SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution Noah Meyerhans (Oct 19)
• A-Cart SQL Injection And Cross-Site Scripting [ NO REPLY ] (Oct 19)
  • <Possible follow-ups>
  • Re: A-Cart SQL Injection And Cross-Site Scripting laurent . gaffie (Oct 25)
• [CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability Williams, James K (Oct 19)
• [SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities Moritz Muehlenhoff (Oct 19)
• [Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln. [ NO REPLY ] (Oct 20)
• [SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff (Oct 20)
• Simple Machines Forum multiple sql injection flaws with exploit code. th3 . r00k . spammenot (Oct 20)
• ReloadCMS Vulnerable sekuru (Oct 20)
• [ GLSA 200710-21 ] TikiWiki: Arbitrary command execution Raphael Marichez (Oct 22)
• [ GLSA 200710-22 ] TRAMP: Insecure temporary file creation Raphael Marichez (Oct 22)
• PacSec 2007 Agenda (Tokyo 11-29/30) Dragos Ruiu (Oct 22)
• [ELEYTT] Public Advisory 20-10-2007 Michal Bucko (Oct 22)
• [Aria-Security.Net] dmcms.0.7.0 SQL Injection [No Reply] (Oct 22)
• Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities gmdarkfig (Oct 22)
• [USN-532-1] nagios-plugins vulnerability Kees Cook (Oct 22)
• [USN-534-1] OpenSSL vulnerability Kees Cook (Oct 22)
• Cracking the iPhone (5 article series) H D Moore (Oct 22)
• [USN-533-1] util-linux vulnerability Kees Cook (Oct 22)
• Folder Access bypass hack2prison (Oct 22)
• Jeebles Directory Local File Inclusion hack2prison (Oct 22)
• [USN-531-1] dhcp vulnerability Kees Cook (Oct 22)
• simple dns rebinding protection with dnsmasq Collin R. Mulliner (Oct 22)
• [TOOL] w3af - Web Application Attack and Audit Framework Andres Riancho (Oct 22)
• Hackish XSS in shoutbox/blocco.php deme (Oct 22)
• Camino release 1.5.2 fixes several vulnerabilities Juha-Matti Laurio (Oct 22)
• [ GLSA 200710-23 ] Star: Directory traversal vulnerability Raphael Marichez (Oct 22)
• Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue advisories (Oct 22)
• [USN-501-2] Ghostscript vulnerability Kees Cook (Oct 22)
• [ MDKSA-2007:201 ] - Updated hplip packages fix vulnerabilities security (Oct 23)
• [USN-535-1] Firefox vulnerabilities Kees Cook (Oct 23)
• CFP for HITBSecConf2008 - Dubai now open Praburaajan (Oct 23)
• [ GLSA 200710-24 ] OpenOffice.org: Heap-based buffer overflow Raphael Marichez (Oct 23)
• Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection Seth Fogie (Oct 23)
• [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities vulnpost-remove (Oct 23)
• SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service research (Oct 23)
• [Vulz] Seeblick 1.0 Beta File Upload Vulz pete . houston . 17187 (Oct 23)
• [Vulz] Japanese PHP Gallery Hosting File Upload Vulz pete . houston . 17187 (Oct 23)
• [Vulz] eLouai's Download Script Remote File Download Vulnerability pete . houston . 17187 (Oct 23)
• [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87 pete . houston . 17187 (Oct 23)
• [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar pete . houston . 17187 (Oct 23)
  • <Possible follow-ups>
  • [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar pete.houston.17187 (Oct 23)
• [ MDKSA-2007:202 ] - Updated Firefox packages fix multiple vulnerabilities security (Oct 23)
• Korean GHBoard Multiple Vulnerabilities by Xcross87 pete . houston . 17187 (Oct 23)
• SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability research (Oct 23)
• [SECURITY] [DSA 1393-1] New xfce4-terminal packages fix arbitrary command execution Steve Kemp (Oct 23)
• [SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal Steve Kemp (Oct 23)
• 3proxy 0.5.3j released (bugfix) 3APA3A (Oct 23)
• [USN-531-2] dhcp vulnerability Kees Cook (Oct 23)
• [USN-536-1] Thunderbird vulnerabilities Kees Cook (Oct 23)
• [USN-537-1] gnome-screensaver vulnerability Kees Cook (Oct 23)
• [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass Thijs Kinkhorst (Oct 23)
• Aria-Security.Net [Web based alpha tabbed address book SQL Injection] [ NO REPLY ] (Oct 24)
• HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data security-alert (Oct 24)
• Aleris Software Systems Web Publisher Calendar SQL injection Joseph . giron13 (Oct 24)
• [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities Fatih Ozavci (Oct 24)
• [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection [ NO REPLY ] (Oct 24)
• rPSA-2007-0222-1 cpio tar rPath Update Announcements (Oct 24)
• Bosdev Multiple vulnerabilities Joseph . giron13 (Oct 24)
• Novell OpenSUSE SWAMP multiple XSS morin . josh (Oct 24)
  • <Possible follow-ups>
  • Re: Novell OpenSUSE SWAMP multiple XSS test (Oct 26)
• OSI CODES - PHP Live! Remote File Inclusion [ NO REPLY ] (Oct 24)
• iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability iDefense Labs (Oct 24)
• iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability iDefense Labs (Oct 24)
• [ GLSA 200710-25 ] MLDonkey: Privilege escalation Raphael Marichez (Oct 24)
• [ GLSA 200710-26 ] HPLIP: Privilege escalation Raphael Marichez (Oct 25)
• [ GLSA 200710-27 ] ImageMagick: Multiple vulnerabilities Raphael Marichez (Oct 25)
• [SECURITY] [DSA 1389-2] New zoph packages fix SQL injection Thijs Kinkhorst (Oct 25)
• Flatnuke3 Remote Cookie Manipoulation / Privilege Escalation kingoftheworld92 (Oct 25)
• HPSBMA02133 SSRT061201 rev.6 - HP Oracle for OpenView (OfO) Critical Patch Update security-alert (Oct 25)
• [SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation Steve Kemp (Oct 25)
• rPSA-2007-0221-1 php php-mysql php-pgsql rPath Update Announcements (Oct 25)
• First ever ModSecurity public training at OWASP/WASC conf in SJ Ofer Shezaf (Oct 25)
• [PoC] DNS Recursion bandwidth amplification Shadow (Oct 25)
• i-Gallery 3.4 bug crack password! hackerbinhphuoc (Oct 25)
• iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability iDefense Labs (Oct 25)
• usd250 helpdesk XSS vulnerabily. Joseph . giron13 (Oct 25)
• Directory traversal flaw in shttp digineo Advisories (Oct 25)
• IRM Discover More Vulnerabilities in Cisco IOS Andy Davis (Oct 25)
• TikiWiki <= 1.9.8.1 Cross Site Scripting / Local File Inclusion L4teral (Oct 25)
• Multi Host Forum Pro phpbb & ipb Multiple Sql Injection kingoftheworld92 (Oct 25)
• [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code Raphael Marichez (Oct 25)
• [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure kingoftheworld92 (Oct 25)
• [ GLSA 200710-28 ] Qt: Buffer overflow Raphael Marichez (Oct 25)
• [USN-538-1] libpng vulnerabilities Kees Cook (Oct 25)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption Piotr Bania (Oct 26)
• Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability Guns (Oct 26)
• FLEA-2007-0060-1 initscripts Foresight Linux Essential Announcement Service (Oct 26)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Memory Corruption Piotr Bania (Oct 26)
• rPSA-2007-0225-1 firefox rPath Update Announcements (Oct 26)
• [SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities Moritz Muehlenhoff (Oct 27)
• Smart-Shop Shopping Cart Cross-Site Scripting Vulrnability DoZ (Oct 29)
• teatro 1.6 ( basePath ) Remote File Include Vulnerability alkomandoz-hacker (Oct 29)
• [waraxe-2007-SA#059] - XSS in WordPress 2.3 come2waraxe (Oct 29)
• Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability Stefan Esser (Oct 29)
• How to subvert Oracle Database Vault Joxean Koret (Oct 29)
• Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion Secunia Research (Oct 29)
• Webroot Desktop Firewall <=5.5.10.20 DNS recursion komarov (Oct 29)
• FLEA-2007-0061-1 sun-jre sun-jdk Foresight Linux Essential Announcement Service (Oct 29)
• FLEA-2007-0062-1 firefox Foresight Linux Essential Announcement Service (Oct 29)
• Omnistar Live Software Cross-Site Scripting Vulrnability DoZ (Oct 29)
• AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit Guns (Oct 29)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in function MDSYS.SDO_CS.TRANSFORM Team SHATTER (Oct 29)
• SAXON version 5.4 Multiple Path Disclosure Vulnerabilities securityresearch (Oct 29)
• SAXON version 5.4 XSS Attack Vulnerability securityresearch (Oct 29)
• Final Call for Papers for Security Track at ApacheCon Europe 2008 Lars Eilebrecht (Oct 29)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO Team SHATTER (Oct 29)
• Security Briefings angelo (Oct 29)
• [SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution Noah Meyerhans (Oct 29)
• rPSA-2007-0225-2 firefox thunderbird rPath Update Announcements (Oct 29)
• Comments re ISC's announcement on bind9 security Network Protocol Security (Oct 29)
  • <Possible follow-ups>
  • Re: Comments re ISC's announcement on bind9 security Shane Kerr (Oct 31)
• Heap overflow in RealPlayer ID3 tag parser NGSSoftware Insight Security Research (Oct 29)
  • Holes in the firewall of Mac OS X Leopard Juergen Schmidt (Oct 29)
    • Re: Holes in the firewall of Mac OS X Leopard Brandon S. Allbery KF8NH (Oct 29)
      • Re: Holes in the firewall of Mac OS X Leopard Juergen Schmidt (Oct 30)
• Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096) Stefan Kanthak (Oct 29)
• SAXON version 5.4 SQL Injection Vulnerability securityresearch (Oct 29)
• Untrusted Java applet can connect to localhost NGSSoftware Insight Security Research (Oct 29)
• Memory overwrites in JVM via malformed TrueType font NGSSoftware Insight Security Research (Oct 29)
• RFIDIOt release - version 0.1q Adam Laurie (Oct 30)
• Airkiosk/formlib application is XSS vuln skienlab (Oct 30)
• Siebel Security Basics Jonathan Katz (Oct 30)
• Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow Secunia Research (Oct 30)
• Django 0.96 (stable) Admin Panel CSRF J. Carlos Nieto (Oct 30)
• DeepSec 2007 Registration: hurry up, seats are filling fast Stefano Zanero (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX swcons Local Arbitrary File Access Vulnerability iDefense Labs (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability iDefense Labs (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability iDefense Labs (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX lqueryvg Stack Buffer Overflow Vulnerability iDefense Labs (Oct 30)
• Firefox / IE6 crash on javascript nested loops thabob (Oct 30)
  • Re: Firefox / IE6 crash on javascript nested loops Jan Heisterkamp (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX lquerypv Stack Buffer Overflow Vulnerability iDefense Labs (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability iDefense Labs (Oct 30)
• iDefense Security Advisory 10.30.07: IBM AIX bellmail Stack Buffer Overflow Vulnerability iDefense Labs (Oct 30)
• [ GLSA 200710-31 ] Opera: Multiple vulnerabilities Raphael Marichez (Oct 30)
• ILIAS <= 3.8.3 Cross Site Scripting L4teral (Oct 30)
• [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code Pierre-Yves Rofes (Oct 30)
  • Re: [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code Steffan Baron (Oct 31)
• In Memoriam: Jun-ichiro Hagino Dragos Ruiu (Oct 30)
• Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability Secunia Research (Oct 31)
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow Secunia Research (Oct 31)
• SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability Bernhard Mueller (Oct 31)
• iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability iDefense Labs (Oct 31)
• iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability iDefense Labs (Oct 31)
• [security bulletin] HPSBMA02236 SSRT061260 rev.2 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution security-alert (Oct 31)
• [security bulletin] HPSBMA02237 SSRT061260 rev.2 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Code Execution security-alert (Oct 31)
• [security bulletin] HPSBMA02238 SSRT061260 rev.2 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution security-alert (Oct 31)
• (tool announcement) bunny the fuzzer Michal Zalewski (Oct 31)
• rPSA-2007-0227-1 cups rPath Update Announcements (Oct 31)

Previous period

Next period