Bugtraq: by thread

Bugtraq: by thread

192 messages starting Jun 04 12 and ending Jun 29 12
Date index | Thread index | Author index

[SECURITY] [DSA 2484-1] nut security update Thijs Kinkhorst (Jun 04)
[SECURITY] [DSA 2481-1] arpwatch security update Yves-Alexis Perez (Jun 04)
[SECURITY] [DSA 2482-1] arpwatch security update Yves-Alexis Perez (Jun 04)
[SECURITY] [DSA 2482-1] libgdata security update Yves-Alexis Perez (Jun 04)
[SECURITY] [DSA 2485-1] imp4 security update Thijs Kinkhorst (Jun 04)
EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15 Dragos Ruiu (Jun 05)
Arbitrary File Upload/Execution in Collabtive Mark Hoopes (Jun 05)
[ MDVSA-2012:087 ] nut security (Jun 05)
Sielco Sistemi Winlog Buffer Overflow <= v2.07.14 devnull (Jun 05)
- <Possible follow-ups>
- Re: Sielco Sistemi Winlog Buffer Overflow <= v2.07.14 devnull (Jun 22)
SQL injection in Bigware shop software rwenzel (Jun 05)
[SECURITY] [DSA 2486-1] bind9 security update Florian Weimer (Jun 06)
SQL injection in Serendipity advisory (Jun 06)
Re: rssh security announcement Derek Martin (Jun 07)
ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution ZDI Disclosures (Jun 07)
ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability Zero Day Initiative (Jun 07)
ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
- Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability Steve Shockley (Jun 12)
ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 07)
Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service Secunia Research (Jun 07)
Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows Secunia Research (Jun 07)
Mybb 1.6.8 Sql Injection Vulnerabilitiy Amir (Jun 07)
- Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy Henri Salo (Jun 08)
- Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy Henri Salo (Jun 08)
ComSndFTP Server Remote Format String Overflow Vulnerability demonalex (Jun 07)
[SECURITY] [DSA 2480-3] request-tracker3.8 regression update Florian Weimer (Jun 07)
CVE-2012-3287: md5crypt is no longer considered safe phk (Jun 08)
- Re: CVE-2012-3287: md5crypt is no longer considered safe Solar Designer (Jun 12)
[SECURITY] [DSA 2487-1] openoffice.org security update Florian Weimer (Jun 08)
[SECURITY] [DSA 2489-1] iceape security update Thijs Kinkhorst (Jun 08)
[SECURITY] [DSA 2490-1] nss security update Thijs Kinkhorst (Jun 08)
[SECURITY] [DSA 2488-1] iceweasel security update Thijs Kinkhorst (Jun 08)
Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont (Jun 08)
- Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont (Jun 08)
- Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks Lee Dilkie (Jun 12)
- Message not available
  - Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont (Jun 12)
ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability ZDI Disclosures (Jun 12)
ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability ZDI Disclosures (Jun 12)
ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 12)
[SECURITY] [DSA 2491-1] postgresql-8.4 security update Florian Weimer (Jun 12)
[ MDVSA-2012:089 ] bind security (Jun 12)
[SECURITY] [DSA 2492-1] php5 security update Florian Weimer (Jun 12)
[MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability Florent Daigniere (Jun 12)
[security bulletin] HPSBMU02790 SSRT100872 rev.1 - HP Server Automation, Remote Execution of Arbitrary Code security-alert (Jun 12)
[security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclosure of Information Denial of Service (DoS) security-alert (Jun 12)
APPLE-SA-2012-06-11-1 iTunes 10.6.3 Apple Product Security (Jun 12)
FreeBSD Security Advisory FreeBSD-SA-12:03.bind FreeBSD Security Advisories (Jun 12)
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret FreeBSD Security Advisories (Jun 12)
[ MDVSA-2012:088 ] mozilla security (Jun 12)
IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE king cope (Jun 12)
[CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability Inshell Security (Jun 12)
[php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation 0x721427D8 0x721427D8 (Jun 12)
[SECURITY] [DSA 2493-1] asterisk security update Florian Weimer (Jun 13)
ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability ZDI Disclosures (Jun 13)
APPLE-SA-2012-06-12-1 Java for OS X 2012-004 and Java for Mac OS X 10.6 Update 9 Apple Product Security (Jun 13)
CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file. Boston Cyber Defense (Jun 13)
[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability Code Audit Labs (Jun 13)
[CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability Code Audit Labs (Jun 13)
[SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE Security Explorations (Jun 13)
Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack moshez (Jun 13)
[Suspected Spam] eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities Research (Jun 15)
Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities Research (Jun 15)
QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Research (Jun 15)
ADICO CMS v1.1 - Blind SQL Injection Vulnerability Research (Jun 15)
iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites Research (Jun 15)
Interspire Shopping Cart v6 - Multiple Web Vulnerabilities Research (Jun 15)
Nuked Klan SP CMS v4.5 - SQL injection Vulnerability Research (Jun 15)
VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues VMware Security Team (Jun 15)
[ MDVSA-2012:090 ] openoffice.org security (Jun 15)
[ MDVSA-2012:091 ] libreoffice security (Jun 15)
- <Possible follow-ups>
- [ MDVSA-2012:091 ] libreoffice security (Jun 15)
[security bulletin] HPSBOV02774 SSRT100684 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Remote Denial of Service (DoS) security-alert (Jun 15)
Re: Bugtraq ID# 53694 is invalid/fake Information Booth (Jun 15)
[SECURITY] [DSA 2494-1] ffmpeg security update Florian Weimer (Jun 15)
[slackware-security] mozilla-firefox (SSA:2012-166-02) Slackware Security Team (Jun 15)
[slackware-security] seamonkey (SSA:2012-166-04) Slackware Security Team (Jun 15)
[slackware-security] bind (SSA:2012-166-01) Slackware Security Team (Jun 15)
[ MDVSA-2012:092 ] postgresql security (Jun 15)
[ MDVSA-2012:093 ] php security (Jun 15)
IObit Protected Folder Authentication Bypass Adam Behnke (Jun 15)
Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Research (Jun 15)
[Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Research (Jun 15)
- <Possible follow-ups>
- [Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Research (Jun 18)
Simple Forum PHP 2.1 - SQL Injection Vulnerabilities Research (Jun 15)
Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites Research (Jun 15)
Cells Blog CMS v1.1 - Multiple Web Vulnerabilites Research (Jun 15)
MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities Research (Jun 15)
[CAL-2012-0015] opera website spoof Code Audit Labs (Jun 15)
- Re: [CAL-2012-0015] opera website spoof Code Audit Labs (Jun 18)
CSNC-2012-004 Generic XSS in AdNovum nevisProxy Cyrill Brunschwiler (Jun 15)
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0 0a29 40 (Jun 15)
AdNovum NevisWeb Security Proxy Vulnerability - Cross-site scripting (XSS) within 302 Redirections Ivan Buetler (Jun 15)
AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability Asterisk Security Team (Jun 15)
nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers nullcon (Jun 15)
News Script PHP v1.2 - Multiple Web Vulnerabilites Research (Jun 18)
Webify Product Series - Multiple Web Vulnerabilities Research (Jun 18)
[SECURITY] [DSA 2495-1] openconnect security update Moritz Muehlenhoff (Jun 18)
QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory Lists (Jun 18)
Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007 Lists (Jun 18)
[ MDVSA-2012:094 ] clamav security (Jun 18)
[ MDVSA-2012:095 ] java-1.6.0-openjdk security (Jun 18)
SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure SEC Consult Vulnerability Lab (Jun 18)
SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass SEC Consult Vulnerability Lab (Jun 18)
DC4420 - London DEFCON - June meet - Tuesday June 19th 2012 Major Malfunction (Jun 18)
Re: SAXoPRESS - directory traversal foo (Jun 18)
[SECURITY] [DSA 2496-1] mysql-5.1 security update Thijs Kinkhorst (Jun 19)
[security bulletin] HPSBUX02789 SSRT100824 rev.1 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges security-alert (Jun 19)
[security bulletin] HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS) security-alert (Jun 19)
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED] FreeBSD Security Advisories (Jun 19)
[security bulletin] HPSBMU02792 SSRT100820 rev.1 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS) security-alert (Jun 19)
VUPEN Security Research - Microsoft Internet Explorer "CollectionCache" Remote Use-after-free (MS12-037) VUPEN Security Research (Jun 19)
VUPEN Security Research - Microsoft Internet Explorer "GetAtomTable" Remote Use-after-free (MS12-037 / CVE-2012-1875) VUPEN Security Research (Jun 19)
VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow (MS12-037 / CVE-2012-1876) VUPEN Security Research (Jun 19)
[Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs Stefan Kanthak (Jun 19)
[Announcement] ClubHack Magazine Issue 29, June 2012 Released abhijeet (Jun 20)
Multiple vulnerabilities in web () all advisory (Jun 20)
Commentics 2.0 <= Multiple Vulnerabilities pereira (Jun 20)
[ MDVSA-2012:096 ] python security (Jun 20)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Cisco Systems Product Security Incident Response Team (Jun 20)
Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability Cisco Systems Product Security Incident Response Team (Jun 20)
Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Jun 20)
[ MDVSA-2012:097 ] python security (Jun 20)
[SECURITY] [DSA 2497-1] quagga security update Florian Weimer (Jun 21)
[ MDVSA-2012:098 ] libxml2 security (Jun 21)
Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Amir (Jun 21)
- Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Henri Salo (Jun 22)
  - Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Yaniv Shaked (Jun 26)
    - Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Gianluca Brindisi (Jun 26)
  - Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy coptang (Jun 26)
- <Possible follow-ups>
- Re: Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy nathan (Jun 26)
[ MDVSA-2012:099 ] net-snmp security (Jun 21)
CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow CORE Security Technologies Advisories (Jun 21)
ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability ZDI Disclosures (Jun 22)
[security bulletin] HPSBOV02780 SSRT100766 rev.2 - HP OpenVMS ACMELOGIN, Local Unauthorized Access and Increased Privileges security-alert (Jun 22)
[security bulletin] HPSBOV02793 SSRT100891 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (DoS), Unauthorized Access security-alert (Jun 22)
[ MDVSA-2012:088-1 ] mozilla security (Jun 25)
[SECURITY] [DSA 2499-1] icedove security update Florian Weimer (Jun 25)
[SECURITY] [DSA 2500-1] mantis security update Florian Weimer (Jun 26)
[SECURITY] [DSA 2501-1] xen security update Florian Weimer (Jun 26)
[SECURITY] [DSA 2502-1] python-crypto security update Moritz Muehlenhoff (Jun 26)
hashdays 2012 - Call for Papers (#days CFP) Hashdays CFP (Jun 26)
[ MDVSA-2012:100 ] rsyslog security (Jun 26)
[slackware-security] freetype (SSA:2012-176-01) Slackware Security Team (Jun 26)
Re: The history of a -probably- 13 years old Oracle bug: TNS Poison prpgk1 (Jun 26)
- Re: The history of a -probably- 13 years old Oracle bug: TNS Poison Gary Driggs (Jun 26)
CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability Dave (Jun 26)
CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability Dave (Jun 26)
[SECURITY] [DSA 2498-1] dhcpcd security update Yves-Alexis Perez (Jun 26)
[SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) Security Explorations (Jun 26)
[CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution n0b0d13s (Jun 26)
- <Possible follow-ups>
- [CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution n0b0d13s (Jun 26)
OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components Stefan Kanthak (Jun 26)
SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection SEC Consult Vulnerability Lab (Jun 26)
[security bulletin] HPSBMU02792 SSRT100820 rev.2 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS) security-alert (Jun 26)
[security bulletin] HPSBMU02786 SSRT100877 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code security-alert (Jun 27)
ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities ZDI Disclosures (Jun 27)
ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability ZDI Disclosures (Jun 27)
ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution ZDI Disclosures (Jun 27)
ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability ZDI Disclosures (Jun 27)
ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution ZDI Disclosures (Jun 27)
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player Cisco Systems Product Security Incident Response Team (Jun 27)
[security bulletin] HPSBPI02794 SSRT100542 rev.1 - Certain HP Photosmart Printers, Remote Denial of Service (DoS) security-alert (Jun 28)
ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
[SECURITY] [DSA 2503-1] bcfg2 security update Florian Weimer (Jun 28)
[SECURITY] [DSA 2504-1] libspring-2.5-java security update Florian Weimer (Jun 28)
ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability ZDI Disclosures (Jun 28)
REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability Rewterz - Research Group (Jun 29)
Vulnerabilities in Winlog 2.07.16 Luigi Auriemma (Jun 29)
Irfanview Plugins JLS Decompression Joseph Sheridan (Jun 29)
GIMP FIT File Format DoS Joseph Sheridan (Jun 29)

Previous period

Next period