Bugtraq: by thread

Bugtraq: by thread

200 messages starting Nov 02 09 and ending Dec 01 09
Date index | Thread index | Author index

{PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability Protek Research Lab (Nov 02)
- <Possible follow-ups>
- Re: {PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability Vladimir '3APA3A' Dubrovin (Nov 02)
Re: TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities schwartz (Nov 02)
Reminder for DeepSec 2009 Conference DeepSec Conference - Announcement (Nov 02)
ACROS Security: HTML Injection in Oracle WebLogic Server Console (ASPR #2009-10-30-1) ACROS Lists (Nov 02)
[SECURITY] [DSA 1924-1] New mahara packages fix several vulnerabilities Steffen Joeris (Nov 02)
[USN-853-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Nov 02)
[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness Steffen Joeris (Nov 02)
Re: /proc filesystem allows bypassing directory permissions on Martin Rex (Nov 02)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 02)
  - Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 03)
    - Re: /proc filesystem allows bypassing directory permissions on Martin Rex (Nov 03)
    - Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 03)
    - Re: /proc filesystem allows bypassing directory permissions on psz (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on psz (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 04)
    - Re: /proc filesystem allows bypassing directory permissions on Dan Yefimov (Nov 03)
    - Re: /proc filesystem allows bypassing directory permissions on Pavel Kankovsky (Nov 05)
NSOADV-2009-001: Symantec ConsoleUtilities ActiveX Control Buffer Overflow NSO Research (Nov 02)
ZDI-09-075: Novell eDirectory LDAP Null Base DN Denial of Service Vulnerability ZDI Disclosures (Nov 03)
[USN-850-3] poppler vulnerabilities Marc Deslauriers (Nov 03)
Fwd: {Lostmon´s Group} Re: Wowd search client multi ple variable xss (solution) Lostmon lords (Nov 03)
[ MDVSA-2009:292 ] wireshark security (Nov 03)
QuahogCon Call for Papers info (Nov 03)
[ MDVSA-2009:293 ] squidGuard security (Nov 03)
New vulnerability in Xerox Fiery Webtools Bernardo Luis (Nov 03)
- <Possible follow-ups>
- Re: New vulnerability in Xerox Fiery Webtools laurent . hermelin (Nov 12)
Re: Cherokee Web Server 0.5.4 Denial Of Service daniel . crowley (Nov 03)
Secunia Research: IBM Tivoli Storage Manager CAD Service Buffer Overflow Secunia Research (Nov 04)
Bractus SunTrack Multiple XSS Bugs NotHugs (Nov 04)
[security bulletin] HPSBUX02355 SSRT080023 rev.2 - HP-UX Using libc, Remote Denial of Service (DoS) security-alert (Nov 04)
VUPEN Security - Adobe Shockwave Player Multiple Code Execution Vulnerabilities VUPEN Security Research (Nov 04)
Context IS Advisory - Autocomplete Data Theft in Mozilla Firefox Context IS - Disclosure (Nov 04)
[SECURITY] [DSA 1926-1] New TYPO3 packages fix several vulnerabilities Thijs Kinkhorst (Nov 05)
AST-2009-009: Cross-site AJAX request vulnerability Asterisk Security Team (Nov 05)
AST-2009-008: SIP responses expose valid usernames Asterisk Security Team (Nov 05)
ZDI-09-076: Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability ZDI Disclosures (Nov 05)
ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability ZDI Disclosures (Nov 05)
ZDI-09-080: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability ZDI Disclosures (Nov 05)
ZDI-09-077: Sun Java Web Start Arbitrary Command Execution Vulnerability ZDI Disclosures (Nov 05)
ZDI-09-078: Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability ZDI Disclosures (Nov 05)
CONFidence 2.0 schedule online - last time to register Andrzej Targosz (Nov 05)
[Bkis-12-2009] eoCMS SQL injection vulnerability - Bkis Report Bkis (Nov 05)
[security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code security-alert (Nov 05)
- <Possible follow-ups>
- [security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code security-alert (Nov 17)
CORE-2009-0912: Blender .blend Project Arbitrary Command Execution CORE Security Technologies Advisories (Nov 05)
ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability ZDI Disclosures (Nov 05)
[USN-855-1] libhtml-parser-perl vulnerability Marc Deslauriers (Nov 05)
[USN-854-1] GD library vulnerabilities Marc Deslauriers (Nov 05)
[SECURITY] [DSA 1927-1] New Linux 2.6.26 packages fix several vulnerabilities dann frazier (Nov 05)
[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities dann frazier (Nov 06)
Using Blended Browser Threats involving Chrome to steal files on your computer Inferno (Nov 06)
[ MDVSA-2009:294 ] firefox security (Nov 06)
[SECURITY] [DSA 1929-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Nov 06)
Php 5.3.0 pdflib extension open_basedir bypass r3d . w0rm (Nov 06)
[ GLSA 200911-01 ] Horde: Multiple vulnerabilities Alex Legler (Nov 06)
[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities Steffen Joeris (Nov 09)
[SECURITY] [DSA 1931-1] New NSPR packages fix several vulnerabilities Moritz Muehlenhoff (Nov 09)
[SECURITY] [DSA 1932-1] New pidgin packages fix arbitrary code execution Moritz Muehlenhoff (Nov 09)
[ MDVSA-2009:295 ] apache security (Nov 09)
[SECURITY] CVE-2009-3548 Apache Tomcat Windows Installer insecure default administrative password Mark Thomas (Nov 09)
FRHACK01 DVDs Jerome Athias (Nov 09)
- Message not available
  - Re: FRHACK01 DVDs Jerome Athias (Nov 09)
ToutVirtual VirtualIQ Multiple Vulnerabilities Claudio Criscione (Nov 09)
DoS vulnerability in Internet Explorer MustLive (Nov 09)
- <Possible follow-ups>
- Re: DoS vulnerability in Internet Explorer r . st (Nov 09)
- Re: Re: DoS vulnerability in Internet Explorer notdisclosed (Nov 09)
- Re: DoS vulnerability in Internet Explorer MustLive (Nov 16)
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability Cisco Systems Product Security Incident Response Team (Nov 09)
Atheros Driver Reserved Frame Vulnerability Laurent Butti (Nov 10)
[USN-856-1] CUPS vulnerability Marc Deslauriers (Nov 10)
[USN-857-1] Qt vulnerabilities Marc Deslauriers (Nov 10)
[MORNINGSTAR-2009-02] Multiple security issues in Cute News and UTF-8 Cute News Andrew Horton (Nov 10)
Marvell Driver Multiple Information Element Overflows Laurent Butti (Nov 10)
[security bulletin] HPSBUX02476 SSRT090250 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other Vulnerabilities security-alert (Nov 10)
[SECURITY] [DSA 1933-1] New cups packages fix cross-site scripting Steffen Joeris (Nov 10)
XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability zhangmc (Nov 10)
- Re: XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability Protek Research Lab (Nov 12)
TPTI-09-07: Microsoft Windows License Logging Service Heap Corruption Vulnerability dvlabs (Nov 10)
ZDI-09-082: Microsoft Office Excel PivotTable Cache Record Parsing Memory Corruption Vulnerability ZDI Disclosures (Nov 10)
ZDI-09-083: Microsoft Excel Shared Feature Header Pointer Offset Memory Corruption Vulnerability ZDI Disclosures (Nov 10)
iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability iDefense Labs (Nov 10)
iDefense Security Advisory 11.10.09: Microsoft Excel FEATHEADER Record Memory Corruption Vulnerability iDefense Labs (Nov 10)
Exploit writing tutorials Peter Van Eeckhoutte (Nov 12)
- Message not available
  - RE: Exploit writing tutorials Peter Van Eeckhoutte (Nov 12)
Novell eDirectory 8.8 SP5 Denial of Service advisory (Nov 12)
Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability Secunia Research (Nov 12)
[USN-858-1] OpenLDAP vulnerability Marc Deslauriers (Nov 12)
[USN-853-2] Firefox and Xulrunner regression Jamie Strandboge (Nov 12)
Panda Security Software Local Privilege Escalation Maxim A. Kulakov (Nov 12)
Yahoo Messenger 9 ActiveX DoS (Null Pointer) Vulnerability advisory (Nov 12)
[SWRX-2009-002] McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability ctu-no-reply (Nov 12)
VUPEN Security Research - Microsoft Office Excel Code Execution Vulnerabilities VUPEN Security Research (Nov 12)
WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution golunski (Nov 12)
- <Possible follow-ups>
- Re: WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution golunski (Nov 13)
[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability ctu-no-reply (Nov 12)
rPSA-2009-0142-1 httpd mod_ssl rPath Update Announcements (Nov 13)
rPSA-2009-0143-1 util-linux util-linux-extras rPath Update Announcements (Nov 13)
rPSA-2009-0144-1 apr-util rPath Update Announcements (Nov 13)
rPSA-2009-0145-1 samba samba-client samba-server samba-swat rPath Update Announcements (Nov 13)
XM Easy Personal FTP Server 'APPE' and 'DELE' Command Remote Denial of Service Vulnerability zhangmc (Nov 13)
rPSA-2009-0142-2 httpd mod_ssl rPath Update Announcements (Nov 13)
[ MDVSA-2009:296 ] gimp security (Nov 13)
[USN-859-1] OpenJDK vulnerabilities Kees Cook (Nov 13)
[ MDVSA-2009:298 ] xine-lib security (Nov 16)
[ MDVSA-2009:297 ] ffmpeg security (Nov 16)
[ MDVSA-2009:299 ] xine-lib security (Nov 16)
[ MDVSA-2009:300 ] apache-conf security (Nov 16)
[ MDVSA-2009:158-1 ] pango security (Nov 16)
[DSECRG-09-062] Alteon OS BBI (Nortell) - Multiple Vulnerabilities DSecRG (Nov 16)
Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability zhangmc (Nov 16)
Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation contact . fingers (Nov 16)
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues Stefan Fritsch (Nov 16)
[ MDVSA-2009:158-2 ] pango security (Nov 17)
[security bulletin] HPSBUX02451 SSRT090137 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS) security-alert (Nov 17)
Hellcode Research: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability karakorsankara (Nov 17)
[SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate verification weakness Giuseppe Iuculano (Nov 17)
Metasploit Framework 3.3 Released HD Moore (Nov 17)
Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability Secunia Research (Nov 17)
[security bulletin] HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Execution of Arbitrary Code security-alert (Nov 17)
Home FTP Server 'MKD' Command Directory Traversal Vulnerability zhangmc (Nov 17)
Kaspersky Anti-Virus 2010 <= 9.0.0.463 pointer dereference vulnerability s . leberre (Nov 17)
[SECURITY] [DSA 1936-1] New libgd2 packages fix several vulnerabilities Giuseppe Iuculano (Nov 17)
CORE-2009-0814: HP Openview NNM 7.53 Invalid DB Error Code vulnerability CORE Security Technologies Advisories (Nov 18)
[ GLSA 200911-02 ] Sun JDK/JRE: Multiple vulnerabilites Alex Legler (Nov 18)
[security bulletin] HPSBUX02409 SSRT080171 rev.2 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege security-alert (Nov 18)
DEFCON London - DC4420 - NO MEETING this Thursday! 19th November 2009 Major Malfunction (Nov 18)
TLS / SSLv3 vulnerability explained (DRAFT) Thierry Zoller (Nov 18)
[security bulletin] HPSBMI02473 SSRT080138 rev.1 - Cisco Catalyst Blade Switch 3020/3120, Remote Denial of Service (DoS) security-alert (Nov 18)
Secunia Research: RhinoSoft Serv-U TEA Decoding Buffer Overflow Secunia Research (Nov 18)
Announcement: Critical Internet Infrastructure WG is now open to public participation Gadi Evron (Nov 18)
CORE-2009-1027: IBM SolidDB invalid error code vulnerability CORE Security Technologies Advisories (Nov 18)
[USN-860-1] Apache vulnerabilities Jamie Strandboge (Nov 19)
[security bulletin] HPSBPI02472 SSRT090196 rev.1 - Certain HP Color LaserJet Printers, Remote Unauthorized Access to Data, Denial of Service security-alert (Nov 19)
[security bulletin] HPSBMA02477 SSRT090177 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) security-alert (Nov 19)
Auto Manager admin.cgi Multiple Field XSS Bugs NotHugs (Nov 19)
AssetsSoSimple supplier_admin.php Supplier Field XSS Bugs NotHugs (Nov 19)
NSA Iraqi Computer Attacks And U.S. Defense Gadi Evron (Nov 19)
Opera 10.01 Remote Array Overrun (Arbitrary code execution) cxib (Nov 20)
SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution) cxib (Nov 20)
K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution) cxib (Nov 20)
KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution) cxib (Nov 20)
Firefox 3.5.3 Remote Array Overrun (UPDATE) cxib (Nov 20)
PHP "multipart/form-data" denial of service Bogdan Calin (Nov 20)
[security bulletin] HPSBMA02478 SSRT090251 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Access security-alert (Nov 20)
IE7 info (Nov 20)
VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components VMware Security Team (Nov 20)
ZDI-09-085: Hewlett-Packard Operations Manager Server Backdoor Account Code Execution Vulnerability ZDI Disclosures (Nov 23)
[ MDVSA-2009:301 ] kernel security (Nov 23)
[Bkis-13-2009] e107 Multiple Vulnerabilities Bkis (Nov 23)
[ MDVSA-2009:302 ] php security (Nov 23)
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting Steffen Joeris (Nov 23)
Vulnerabilities in plugins for WordPress MustLive (Nov 23)
[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising Steffen Joeris (Nov 23)
Code to mitigate IE STYLE zero-day ds . adv . pub (Nov 23)
Millions of PDF invisibly embedded with your internal disk paths Inferno (Nov 23)
- RE: Millions of PDF invisibly embedded with your internal disk paths Thor (Hammer of God) (Nov 24)
  - Re: Millions of PDF invisibly embedded with your internal disk paths Patrick Webster (Nov 25)
CORE-2009-0908: Autodesk SoftImage Scene TOC Arbitrary Command Execution CORE Security Technologies Advisories (Nov 23)
CORE-2009-0909: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution CORE Security Technologies Advisories (Nov 23)
CORE-2009-0910: Autodesk Maya Script Nodes Arbitrary Command Execution CORE Security Technologies Advisories (Nov 23)
TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote DoS Vulnerabilities leinakesi (Nov 24)
XM Easy Personal FTP Server Remote DoS Vulnerability leinakesi (Nov 24)
Executing arbitrary PHP code on OpenX <= 2.8.1 Moritz Naumann (Nov 24)
New Paper: MitM Attacks against the chipTAN comfort Online Banking System RedTeam Pentesting GmbH (Nov 24)
[USN-861-1] libvorbis vulnerabilities Marc Deslauriers (Nov 24)
[security bulletin] HPSBMA02417 SSRT090031 rev.2 - HP Data Protector Express and HP Data Protector Express Single Server security-alert (Nov 25)
Vulnerabilities in WP-Cumulus for WordPress MustLive (Nov 25)
[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities Giuseppe Iuculano (Nov 25)
rPSA-2009-0154-1 httpd mod_ssl rPath Update Announcements (Nov 25)
rPSA-2009-0155-1 httpd mod_ssl rPath Update Announcements (Nov 25)
rPSA-2009-0156-1 sun-jdk sun-jre rPath Update Announcements (Nov 25)
[ GLSA 200911-03 ] UW IMAP toolkit: Multiple vulnerabilities Robert Buchholz (Nov 25)
[resent] [ GLSA 200911-04 ] dstat: Untrusted search path Robert Buchholz (Nov 25)
[ GLSA 200911-05 ] Wireshark: Multiple vulnerabilities Alex Legler (Nov 25)
[SECURITY] [DSA-1940-1] New php5 packages fix several issues Stefan Fritsch (Nov 30)
[ MDVSA-2009:303 ] php security (Nov 30)
[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities Moritz Muehlenhoff (Nov 30)
[security bulletin] HPSBUX02482 SSRT090249 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of security-alert (Nov 30)
[USN-862-1] PHP vulnerabilities Marc Deslauriers (Nov 30)
[ MDVSA-2009:306 ] dovecot security (Nov 30)
Remote Command Execution in dotDefender Site Management John Dos (Nov 30)
Cacti 0.8.7e: Multiple security issues Moritz Naumann (Nov 30)
Some more details on IE STYLE zero-day ds . adv . pub (Nov 30)
[BMSA-2009-07] Backdoor in PyForum Nam Nguyen (Nov 30)
Xxasp v3.3.2 Sql injection secu_lab_ir (Nov 30)
TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) Thierry Zoller (Nov 30)
Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition k4mr4n_St (Nov 30)
Announce: RFIDIOt-1.0a released - November 2009 Adam Laurie (Nov 30)
Windows packages for BIND9 contain vulnerable MSVC runtime components Stefan Kanthak (Nov 30)
[ MDVSA-2009:304 ] php security (Nov 30)
[ GLSA 200911-06 ] PEAR Net_Traceroute: Command injection Alex Legler (Nov 30)
Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others Andrea Purificato (Nov 30)
[ MDVSA-2009:304 ] bind security (Nov 30)
Eshopbuilde CMS SQL Injection Vulnerability faghani (Nov 30)
[SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities Moritz Muehlenhoff (Nov 30)
[ MDVSA-2009:305 ] php security (Dec 01)

Previous period

Next period