Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

351 messages starting Sep 01 08 and ending Sep 30 08
Date index | Thread index | Author index

• PoCfix (PoC for Postfix local root vuln - CVE-2008-2936) Roman Medina-Heigl Hernandez (Sep 01)
• Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges Felix Buenemann (Sep 01)
• [SECURITY] [DSA 1627-2] New opensc package fix incomplete check Thijs Kinkhorst (Sep 01)
• Multiple Cross Site Scripting (XSS) Vulnerabilities in vtigerCRM 5.0.4, CVE-2008-3101 Fabian Fingerle (Sep 01)
• rPSA-2008-0264-1 ruby rPath Update Announcements (Sep 01)
• [oCERT-2008-014] WordNet stack and heap overflows Rob Holland (Sep 01)
• [SECURITY] [DSA 1633-1] New slash packages fix multiple vulnerabilities Florian Weimer (Sep 02)
• [SECURITY] [DSA 1634-1] New wordnet packages fix arbitrary code execution Thijs Kinkhorst (Sep 02)
• HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS) security-alert (Sep 02)
• ToorCon X Lineup & Training Seminars Posted & Pre-Registration Ending h1kari (Sep 02)
• Postfix Linux-only local denial of service Wietse Venema (Sep 02)
• [AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability João Antunes (Sep 02)
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) security-alert (Sep 02)
• [ MDVSA-2008:182 ] wordnet security (Sep 02)
• CS-Cart <= 1.3.5 SQL Injection GulfTech Security Research (Sep 02)
• [Tool] sqlmap 0.6 released Bernardo Damele A. G. (Sep 02)
• [USN-639-1] tiff vulnerability Kees Cook (Sep 02)
• [Suspected Spam]New IETF I-D-: Security Assessment of the Internet Protocol version 4 Fernando Gont (Sep 02)
• In search of examples of malicious source code Steve . Coleman (Sep 02)
  • Re: In search of examples of malicious source code Gabriele Zanoni (Sep 03)
• [ MDVSA-2008:183 ] opensc security (Sep 02)
• T2´08 Challenge - Free Tickets Availa ble Tomi Tuominen (Sep 02)
• Exploit Admin (Sep 02)
• Has anyone implemented "double forward DNS"? Duncan Simpson (Sep 02)
  • Re: Has anyone implemented "double forward DNS"? The Fungi (Sep 03)
  • Re: Has anyone implemented "double forward DNS"? Ansgar Wiechers (Sep 03)
    • Re: Has anyone implemented "double forward DNS"? Ansgar -59cobalt- Wiechers (Sep 04)
      • Re: Has anyone implemented "double forward DNS"? Steven Bakker (Sep 05)
  • Re: Has anyone implemented "double forward DNS"? Jerry Franz (Sep 03)
  • Re: Has anyone implemented "double forward DNS"? Glynn Clements (Sep 04)
  • Re: Has anyone implemented "double forward DNS"? terry white (Sep 04)
• RUXCON 2008 Final Call For Papers cfp (Sep 03)
• Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow Secunia Research (Sep 03)
• [Tool] Distack framework for attack detection and traffic analysis Christoph Mayer (Sep 03)
• Google Chrome Automatic File Download nerex (Sep 03)
  • RES: Google Chrome Automatic File Download DIOGO LEAL CHAGAS (Sep 03)
    • Re: RES: Google Chrome Automatic File Download Nick FitzGerald (Sep 06)
  • Re: Google Chrome Automatic File Download Razi Shaban (Sep 03)
    • RE: Google Chrome Automatic File Download James C. Slora Jr. (Sep 03)
  • <Possible follow-ups>
  • Re: Google Chrome Automatic File Download Juha-Matti Laurio (Sep 04)
• Google Chrome Browser (ver.0.2.149.27) Vulnerability psy . echo (Sep 03)
• Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Cisco Systems Product Security Incident Response Team (Sep 03)
• Cisco Secure ACS Denial Of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 03)
• TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload admin (Sep 03)
• Cisco Secure ACS EAP Parsing Vulnerability Laurent Butti (Sep 03)
• FreeBSD Security Advisory FreeBSD-SA-08:08.nmount FreeBSD Security Advisories (Sep 03)
• [ MDVSA-2008:184 ] libtiff security (Sep 03)
• [ MDVSA-2008:185 ] python-django security (Sep 03)
• FreeBSD Security Advisory FreeBSD-SA-08:09.icmp6 FreeBSD Security Advisories (Sep 04)
• FreeBSD Security Advisory FreeBSD-SA-08:07.amd64 FreeBSD Security Advisories (Sep 04)
• Marvell Driver EAPoL-Key Length Overflow Laurent Butti (Sep 04)
• Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664 Fabian Fingerle (Sep 04)
• Marvell Driver Null SSID Association Request Vulnerability Laurent Butti (Sep 04)
• [USN-640-1] libxml2 vulnerability Kees Cook (Sep 04)
• Atheros Vendor Specific Information Element Overflow Laurent Butti (Sep 04)
• Zen Cart <= 1.3.8a SQL Injection GulfTech Security Research (Sep 04)
  • Re: Zen Cart <= 1.3.8a SQL Injection Ian Wilson (Sep 05)
• [ GLSA 200809-04 ] MySQL: Privilege bypass Robert Buchholz (Sep 04)
• [ GLSA 200809-03 ] RealPlayer: Buffer overflow Robert Buchholz (Sep 04)
• [ GLSA 200809-01 ] yelp: User-assisted execution of arbitrary code Robert Buchholz (Sep 04)
• clamav: Crash with crafted chm, CVE-2008-1389 Hanno Böck (Sep 04)
• [ GLSA 200809-02 ] dnsmasq: Denial of Service and DNS spoofing Robert Buchholz (Sep 04)
• Multiple MicroWorld products insecure directory permissions Edi Strosar (Sep 04)
• [ MDVSA-2008:186 ] python security (Sep 05)
• [security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure security-alert (Sep 05)
• other google chrome crash jplopezy (Sep 05)
• rPSA-2008-0268-1 libtiff rPath Update Announcements (Sep 05)
• Risky Chrome (The perfect cleartext password offering ) quakerdoomer (Sep 05)
• XCon 2008 Call for Paper Sowhat (Sep 05)
  • <Possible follow-ups>
  • Re: XCon 2008 Call for Paper Sowhat (Sep 05)
    • Re: XCon 2008 Call for Paper Sowhat (Sep 05)
• Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability Security Vulnerability Research Team (Sep 05)
• Re: Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy dstinbox (Sep 05)
• [ GLSA 200809-05 ] Courier Authentication Library: SQL injection vulnerability Pierre-Yves Rofes (Sep 05)
• Google Chrome Auto download exploit .. security (Sep 06)
• [ MDVSA-2008:188 ] tomcat5 security (Sep 06)
• xoops-1.3.10 shell command execute vulnerability ( causing snoopy class ) geinblues (Sep 08)
• phpAdultSite CMS flaws SmOk3 (Sep 08)
• [ GLSA 200809-06 ] VLC: Multiple vulnerabilities Pierre-Yves Rofes (Sep 08)
• Re: [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks ProCheckUp Research (Sep 08)
• [scip_Advisory 3808] D-Link DIR-100 long url filter evasion Marc Ruef (Sep 08)
• DEFCON London - DC4420 - September meet this Thursday 11th Major Malfunction (Sep 08)
• Re: Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability prenaud (Sep 08)
• Sagem Router F () ST 2404 Remote Denial Of Service Exploit zigma (Sep 08)
  • Re: Sagem Router F () ST 2404 Remote Denial Of Service Exploit Vladimir '3APA3A' Dubrovin (Sep 09)
• Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Rotem Kerner (Sep 08)
  • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Mike Duncan (Sep 08)
  • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Wellington Wagner F. Sarmento (Sep 08)
    • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Rotem Kerner (Sep 09)
      • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Mike Duncan (Sep 09)
  • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Razi Shaban (Sep 09)
  • <Possible follow-ups>
  • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit a (Sep 08)
  • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit gynvael (Sep 09)
    • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Razi Shaban (Sep 09)
      • Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit Julien Stuby (Sep 10)
• WASC Announcement: 2007 Web Application Security Statistics Published statistics (Sep 08)
• [ GLSA 200809-07 ] libTIFF: User-assisted execution of arbitrary code Pierre-Yves Rofes (Sep 08)
• [ GLSA 200809-08 ] Amarok: Insecure temporary file creation Pierre-Yves Rofes (Sep 08)
• [USN-641-1] Racoon vulnerabilities Kees Cook (Sep 09)
• Stash v1.0.3 Admin bypass / Remote File Disclosure r3d . w0rm (Sep 09)
• Sun M-class hardware denial of service Theo de Raadt (Sep 09)
  • Message not available
    • Re: Sun M-class hardware denial of service B 650 (Sep 09)
      • Re: Sun M-class hardware denial of service terry white (Sep 10)
  • <Possible follow-ups>
  • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 09)
    • Re: Sun M-class hardware denial of service B 650 (Sep 09)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 09)
      • RE: Sun M-class hardware denial of service Michael Wojcik (Sep 10)
      • Re: Sun M-class hardware denial of service Micheal Patterson (Sep 10)
      • Re: Sun M-class hardware denial of service Florian Weimer (Sep 10)
      • Re: Sun M-class hardware denial of service Curtis Maloney (Sep 11)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 11)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Re: Sun M-class hardware denial of service Florian Weimer (Sep 29)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Re: Sun M-class hardware denial of service Florian Weimer (Sep 29)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Message not available
      • Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
      • Re: Sun M-class hardware denial of service Bob Beck (Sep 30)
      • Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
      • Re: Sun M-class hardware denial of service Bob Beck (Sep 10)
• ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability zdi-disclosures (Sep 09)
• ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability zdi-disclosures (Sep 09)
• ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability zdi-disclosures (Sep 09)
• ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability zdi-disclosures (Sep 09)
• ZDI-08-060: Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability zdi-disclosures (Sep 09)
• SQL Smuggling douglen (Sep 09)
  • Re: SQL Smuggling Marco Ivaldi (Sep 10)
  • Re: SQL Smuggling Tim (Sep 10)
    • RE: SQL Smuggling Gary Oleary-Steele (Sep 11)
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated Mark Thomas (Sep 10)
• DeepSec 2008 - Conference Schedule DeepSec Conference Vienna (Sep 10)
• ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability zdi-disclosures (Sep 10)
• ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability zdi-disclosures (Sep 10)
• Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability Brett Moore (Sep 10)
• iDefense Security Advisory 09.09.08: Apple QuickTime PICT Integer Overflow Vulnerability iDefense Labs (Sep 10)
• Multiple Vulnerabilities: LedgerSMB < 1.2.15 Chris Travers (Sep 10)
• [ MDVSA-2008:189 ] clamav security (Sep 10)
• iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability iDefense Labs (Sep 10)
• Windows GDI+ GIF memory corruption Ivan Fratric (Sep 10)
• [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) Will Drewry (Sep 10)
• Re: E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability packet (Sep 10)
• [ MDVSA-2008:190 ] postfix security (Sep 10)
• [SECURITY] [DSA 1635-1] New freetype packages fix multiple vulnerabilities Steve Kemp (Sep 10)
• ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability zdi-disclosures (Sep 10)
• [USN-642-1] Postfix vulnerabilities Kees Cook (Sep 11)
• Ezphotogallery 2.1 Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure) irancrash (Sep 11)
• ZoneAlarm Security Suite buffer overflow jplopezy (Sep 11)
• PhpWebGallery 1.3.4 Multiple Vulnerabilities (XSS/LFI) irancrash (Sep 11)
• sqlvdir.dll ActiveX Remote Buffer Overflow Exploit beenudel1986 (Sep 11)
• PhsBlog v0.2 Bypass Sql injection Filtering Exploit irancrash (Sep 11)
• minb Remote Code Execution Exploit r3d . w0rm (Sep 11)
• [security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access security-alert (Sep 11)
• Nooms 1.1 irancrash (Sep 11)
• Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability Stefan Esser (Sep 11)
• [SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities dann frazier (Sep 11)
• [TKADV2008-007] Linux Kernel SCTP-AUTH API Information Disclosure Vulnerability and NULL Pointer Dereferences Tobias Klein (Sep 11)
• [USN-643-1] FreeType vulnerabilities Kees Cook (Sep 12)
• Server termination in the Unreal engine 3 Luigi Auriemma (Sep 12)
• [USN-644-1] libxml2 vulnerabilities Kees Cook (Sep 12)
• [ MDVSA-2008:192 ] libxml2 security (Sep 12)
• Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability Stefan Esser (Sep 12)
• [ MDVSA-2008:191 ] rsh security (Sep 12)
• Clients format strings in the Unreal engine Luigi Auriemma (Sep 12)
• Re: OpenWiki<--v0.78 Cross-Site Scripting DJeep (Sep 12)
• Secunia Research: Trend Micro OfficeScan "cgiRecvFile.exe" Buffer Overflow Secunia Research (Sep 12)
• [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting Marc Ruef (Sep 12)
• community real-time BGP hijack notification service Gadi Evron (Sep 12)
• Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit Guns (Sep 12)
• CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service Core Security Technologies Advisories (Sep 13)
• Baidu Hi IM software parsing plaintext stack overflow Li Gen (Sep 13)
• [ MDVSA-2008:193 ] kolab-server security (Sep 15)
• [ MDVSA-2008:194 ] apache2 security (Sep 15)
• [ MDVSA-2008:195 ] apache security (Sep 15)
• Baidu Hi IM client software DoS bug, div zero make client crash Li Gen (Sep 15)
• Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS j . v . vallejo (Sep 15)
• [SECURITY] [DSA 1637-1] New git-core packages fix buffer overflow Devin Carraway (Sep 15)
• Critical Vulnerability in Apple Quicktime’s Ind eo Codec NGSSoftware Insight Security Research (Sep 15)
• TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow dvlabs (Sep 16)
• [ MDVSA-2008:196 ] mplayer security (Sep 16)
• [ MDVSA-2008:182-1 ] wordnet security (Sep 16)
• Security flaw in Airtel DSL modems shr (Sep 16)
• [ MDVSA-2008:197 ] koffice security (Sep 16)
• InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely. Brian Dowling (Sep 16)
• Failed assertion in the Unreal engine Luigi Auriemma (Sep 16)
• Team SHATTER Security Advisory: Security Vulnerability in CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio Shatter (Sep 16)
• Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS Shatter (Sep 16)
• [SECURITY] [DSA 1638-1] New openssh packages fix denial of service Florian Weimer (Sep 16)
• [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure John Cobb (Sep 16)
• [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC Albert Sellarès (Sep 16)
• [ MDVSA-2008:198 ] R-base security (Sep 16)
• [ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities adv (Sep 16)
• [NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting John Cobb (Sep 16)
• [NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting John Cobb (Sep 17)
• [ MDVSA-2008:197-1 ] koffice security (Sep 17)
• Skype IM Client Password Disclosure Vulnerability. Aditya K Sood (Sep 17)
• Miranda IM Client Password Disclosure Vulnerability. Aditya K Sood (Sep 17)
• Pidgin IM Client Password Disclosure Vulnerability. Aditya K Sood (Sep 17)
  • RE: Pidgin IM Client Password Disclosure Vulnerability. Quark IT - Hilton Travis (Sep 18)
    • Re: Pidgin IM Client Password Disclosure Vulnerability. Aditya K Sood (Sep 18)
      • RE: Pidgin IM Client Password Disclosure Vulnerability. Quark IT - Hilton Travis (Sep 19)
  • <Possible follow-ups>
  • RE: Pidgin IM Client Password Disclosure Vulnerability. Memisyazici, Aras (Sep 18)
    • Re: Pidgin IM Client Password Disclosure Vulnerability. John Bailey (Sep 19)
      • RE: Pidgin IM Client Password Disclosure Vulnerability. Memisyazici, Aras (Sep 19)
      • Re: Pidgin IM Client Password Disclosure Vulnerability. John Bailey (Sep 19)
    • Re: Pidgin IM Client Password Disclosure Vulnerability. Steve Shockley (Sep 19)
• [AJECT] SurgeMail IMAP 3.9e vulnerability João Antunes (Sep 17)
• Microsoft Internet Explorer DoS in Rendering Malicious PNG Files. Aditya K Sood (Sep 17)
• ShmooCon 2009 CFP Bruce Potter (Sep 17)
• [security bulletin] HPSBMA02369 SSRT080115 rev.1 - HP ProLiant Essentials Rapid Deployment Pack (RDP) Running Symantec Altiris Deployment Solution, Remote SQL Injection, Remote or Local Gain Extended Privileges, Local Denial of Service (DoS) security-alert (Sep 17)
• rPSA-2008-0278-1 tshark wireshark rPath Update Announcements (Sep 17)
• rPSA-2008-0276-1 mercurial mercurial-hgk rPath Update Announcements (Sep 17)
• [ MDVSA-2008:189-1 ] clamav security (Sep 17)
• [security bulletin] HPSBOV02364 SSRT080078 rev.2 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access security-alert (Sep 18)
• Hi Two Points to consider Aditya K Sood (Sep 18)
• Sama XSS Bug Lagon666 (Sep 18)
• vi can run arbitrary commands via 'tags' file Eli the Bearded (Sep 18)
• LooYu Web IM 2008 Cross-Site Scripting Vulnerabilities xsp (Sep 19)
• PHP pro bid v 6.04 SQL injection Jan van Niekerk (Sep 19)
• [USN-646-1] rdesktop vulnerabilities Jamie Strandboge (Sep 19)
• VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman VMware Security Team (Sep 19)
• Annutel - Annuaire Téléphonique v1.0 Sensetive Files (MDP) sn0oPy . team (Sep 19)
• [ GLSA 200809-09 ] Postfix: Denial of Service Pierre-Yves Rofes (Sep 19)
• [ MDVSA-2008:199 ] wireshark security (Sep 19)
• [SECURITY] [DSA 1639-1] New twiki packages execution of arbitrary code Steve Kemp (Sep 19)
• [SECURITY] [DSA 1642-1] New horde3 packages fix cross site scripting Thijs Kinkhorst (Sep 20)
• [SECURITY] [DSA 1640-1] New python-django packages fix cross site request forgery Thijs Kinkhorst (Sep 20)
• [SECURITY] [DSA 1634-2] New wordnet packages fix regression Thijs Kinkhorst (Sep 20)
• [SECURITY] [DSA 1641-1] New phpmyadmin packages fix several issues Thijs Kinkhorst (Sep 20)
• Advanced Electron Forum <= 1.0.6 Remote Code Execution GulfTech Security Research (Sep 20)
• MyFWB 1.0 Remote SQL Injection Guns (Sep 20)
• drupal: Session hijacking vulnerability, CVE-2008-3661 Hanno Böck (Sep 22)
• MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection Guns (Sep 22)
• Blue Coat xss jplopezy (Sep 22)
  • Re: Blue Coat xss Hugo van der Kooij (Sep 23)
• "Exploit creation - The random approach" or "Playing with random to build exploits" Nelson Brito (Sep 22)
  • Re: "Exploit creation - The random approach" or "Playing with random to build exploits" Stefano Zanero (Sep 26)
• [ GLSA 200809-10 ] Mantis: Multiple vulnerabilities Pierre-Yves Rofes (Sep 22)
• [ GLSA 200809-11 ] HAVP: Denial of Service Pierre-Yves Rofes (Sep 22)
• [security bulletin] HPSBUX02370 SSRT071459 rev.1 - HP-UX Running rpcbind, Remote Denial of Service (DoS) security-alert (Sep 22)
• Directory traversal in the webadmin of Unreal Tournament 3 1.3 Luigi Auriemma (Sep 22)
• [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues admin (Sep 22)
• [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues admin (Sep 22)
  • Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues Philipp Hagemeister (Sep 23)
  • <Possible follow-ups>
  • Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues admin (Sep 22)
• [SECURITY] [DSA-1619-2] New python-dns package fixes regression Devin Carraway (Sep 22)
• Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098 Fabian Fingerle (Sep 22)
• [ GLSA 200809-12 ] Newsbeuter: User-assisted execution of arbitrary code Pierre-Yves Rofes (Sep 23)
• [ GLSA 200809-13 ] R: Insecure temporary file creation Pierre-Yves Rofes (Sep 23)
• [ MDVSA-2008:200 ] ed security (Sep 23)
• [ MDVSA-2008:201 ] pan security (Sep 23)
• Squirrelmail: Session hijacking vulnerability, CVE-2008-3663 Hanno Böck (Sep 23)
• Aruba Mobility Controller Shared Default Certificate nnposter (Sep 23)
• Xss In Datalife Engine CMS 7.2 hadikiamarsi (Sep 23)
• [ MDVSA-2008:202 ] phpMyAdmin security (Sep 23)
• [ MDVSA-2008:203 ] awstats security (Sep 23)
• menalto gallery: Session hijacking vulnerability, CVE-2008-3102 Hanno Böck (Sep 23)
  • mantis CVE-2008-3102 (Re: menalto gallery: Session hijacking vulnerability, CVE-2008-3102) Hanno Böck (Sep 24)
• Re: Aruba Mobility Controller Shared Default Certificate - Response from Aruba Networks Robbie (Rupinder) Gill (Sep 23)
• [ GLSA 200809-14 ] BitlBee: Security bypass Pierre-Yves Rofes (Sep 24)
• [ GLSA 200809-15 ] GNU ed: User-assisted execution of arbitrary code Pierre-Yves Rofes (Sep 24)
• Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos. Aditya K Sood (Sep 24)
  • Re: Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos. LIUDIEYU dot COM (Sep 24)
• [USN-645-1] Firefox and xulrunner vulnerabilities Jamie Strandboge (Sep 24)
• [USN-645-2] Firefox vulnerabilities Jamie Strandboge (Sep 24)
• Internet Information Service remote set password hamedata (Sep 24)
• IAS Helper COM Component (iashlpr.dll) activex remote DOS hamedata (Sep 24)
• Internet Information Service (adsiis.dll) activex remote DOS hamedata (Sep 24)
• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Vulnerability in Cisco IOS While Processing SSL Packet Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Control Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information Cisco Systems Product Security Incident Response Team (Sep 24)
• Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 24)
• Drupal Brilliant Gallery module SQL injection vulnerability Justin C. Klein Keane (Sep 24)
• Drupal Ajax Checklist Module SQL Injection Vulnerability Justin C. Klein Keane (Sep 24)
• [ MDVSA-2008:204 ] blender security (Sep 24)
• [security bulletin] HPSBOV02364 SSRT080078 rev.3 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access security-alert (Sep 25)
• php create_function commond injection vulnerability root (Sep 25)
  • <Possible follow-ups>
  • Re: php create_function commond injection vulnerability lmfao (Sep 25)
    • Re: php create_function commond injection vulnerability bzhbfzj3001 (Sep 29)
      • Re: php create_function commond injection vulnerability mnapier (Sep 29)
  • Re: php create_function commond injection vulnerability Steven M. Christey (Sep 29)
• Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities alfredo . melloni (Sep 25)
• [security bulletin] HPSBST02372 SSRT080133 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-052 to MS08-055 security-alert (Sep 25)
• C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow Idan Ofrat (Sep 25)
• Cross Site Scripting (XSS) Vulnerabilitiy in flatpress 0.804, CVE-2008-4120 Fabian Fingerle (Sep 25)
• adnforum <= 1.0b / Insecure Cookie Handling Vulnerability Pepelux (Sep 25)
• Fwd: Returned post for bugtraq () securityfocus com Jose Luis (Sep 25)
• [USN-645-3] Firefox and xulrunner regression Jamie Strandboge (Sep 25)
• SQL Injection in EasyRealtorPRO 2008 SmOk3 (Sep 25)
• [ GLSA 200809-16 ] Git: User-assisted execution of arbitrary code Pierre-Yves Rofes (Sep 25)
• [ GLSA 200809-17 ] Wireshark: Multiple Denials of Service Pierre-Yves Rofes (Sep 25)
• [ GLSA 200809-18 ] ClamAV: Multiple Denials of Service Pierre-Yves Rofes (Sep 25)
• [ MDVSA-2008:205 ] mozilla-firefox security (Sep 26)
• Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration Teh Kotak (Sep 26)
• [USN-647-1] Thunderbird vulnerabilities Jamie Strandboge (Sep 26)
• Estonian Cyber Security Strategy document -- now available online Gadi Evron (Sep 26)
• CA Service Desk Multiple Cross-Site Scripting Vulnerabilities Williams, James K (Sep 26)
• DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit Reversemode (Sep 26)
• RPG.Board <= 0.0.8Beta2 Remote SQL Injection Guns (Sep 26)
• The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability Pepelux (Sep 26)
• multiple vendor ftpd - Cross-site request forgery cxib (Sep 26)
• Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability Pepelux (Sep 26)
• Re: [Full-disclosure] [IVIZ-08-010] McAfee SafeBoot Device Encryption Plain Text Password Disclosure (v4, Build 4750 and below) Kenneth Ng (Sep 26)
• Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector) quakerdoomer (Sep 26)
• FtitzBox biglowbird (Sep 26)
• [ MDVSA-2008:206 ] mozilla-thunderbird security (Sep 26)
• xss in hackmeeting.org wiky (Sep 27)
• Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC Satan_HackerS (Sep 27)
• ASP News Remote Password Disclouse Vulnerability Ghost hacker (Sep 27)
• csphonebook 1.02 Remote XSS Vulnerabilitiy Ghost hacker (Sep 27)
• shoutbox Remote Password Disclouse Vulnerability Ghost hacker (Sep 27)
• hyBook Remote Password Disclouse Vulnerability Ghost hacker (Sep 27)
• Login Password Sample Remote Password Disclouse Vulnerability Ghost hacker (Sep 27)
• PHP Calendar Script Remote XSS (Permanent) Vulnerabilities tan_prathan (Sep 29)
• ParsaWeb CMS SQL Injection admin (Sep 29)
• Verizon FIOS (and DSL?) wireless access point insecure default WEP key Paul (Sep 29)
  • RE: Verizon FIOS (and DSL?) wireless access point insecure default WEP key Larry Seltzer (Sep 29)
• [oCERT-2008-013] MPlayer Real demuxer heap overflow Andrea Barisani (Sep 29)
• Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Aditya K Sood (Sep 29)
  • Re: Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Philippe Devallois (Sep 30)
• Advisory : Opera Window Object Suppressing Remote Denial of Service Aditya K Sood (Sep 29)
• [security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files security-alert (Sep 29)
• [ MDVSA-2008:207 ] openafs security (Sep 29)
• MS Internet Explorer 7 Denial Of Service Exploit UniquE (Sep 29)
  • Re: MS Internet Explorer 7 Denial Of Service Exploit Jan van Niekerk (Sep 30)
• Advisory: Google Chrome Window Object Suppressing Remote Denial of Service. Aditya K Sood (Sep 29)
  • <Possible follow-ups>
  • Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service. redb0ne (Sep 30)
  • Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service. ian (Sep 30)
• [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues admin (Sep 30)
• White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x Seth Fogie (Sep 30)
• rPSA-2008-0286-1 mono rPath Update Announcements (Sep 30)
• [ MDVSA-2008:208 ] pam_mount security (Sep 30)
• Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit ipsdix (Sep 30)
• Remote File Inclusion Vulnerability Pepelux (Sep 30)
• MySQL command-line client HTML injection vulnerability Thomas Henlich (Sep 30)
• International Hacking & Security Conference "POC2008" pocadm (Sep 30)
• WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability Juan Galiana (Sep 30)
• [USN-648-1] nasm vulnerability Kees Cook (Sep 30)

Previous period

Next period