Bugtraq: by subject

2. Code execution in Icecast 2.0.1(exploit with shellcode)
- me_at_delikon.de (Oct 02 2004)
3COM Wireless router (3CRADSL72) information disclosure
- mccauley_at_gmx.net (Oct 15 2004)
- Karb0nOxyde - (Oct 13 2004)
[ GLSA 200410-01 ] sharutils: Buffer overflows in shar.c and unshar.c
- Thierry Carrez (Oct 01 2004)
[ GLSA 200410-02 ] Netpbm: Multiple temporary file issues
- Thierry Carrez (Oct 04 2004)
[ GLSA 200410-04 ] PHP: Memory disclosure and arbitrary location file upload
- Dan Margolis (Oct 05 2004)
[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
- Kurt Lieber (Oct 07 2004)
[ GLSA 200410-06 ] CUPS: Leakage of sensitive information
- Kurt Lieber (Oct 09 2004)
[ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm
- Luke Macken (Oct 13 2004)
[ GLSA 200410-10 ] gettext: Insecure temporary file handling
- Luke Macken (Oct 10 2004)
- Luke Macken (Oct 13 2004)
[ GLSA 200410-11 ] tiff: Buffer overflows in image decoding
- Thierry Carrez (Oct 13 2004)
[ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities
- Luke Macken (Oct 14 2004)
[ GLSA 200410-13 ] BNC: Input validation flaw
- Thierry Carrez (Oct 15 2004)
[ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system
- Thierry Carrez (Oct 18 2004)
[ GLSA 200410-15 ] Squid: Remote DoS vulnerability
- Luke Macken (Oct 18 2004)
[ GLSA 200410-21 ] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
- Kurt Lieber (Oct 21 2004)
[ GLSA 200410-22 ] MySQL: Multiple vulnerabilities
- Thierry Carrez (Oct 24 2004)
[ GLSA 200410-23 ] Gaim: Multiple vulnerabilities
- Matthias Geerdsen (Oct 24 2004)
[ GLSA 200410-24 ] MIT krb5: Insecure temporary file use in send-pr.sh
- Thierry Carrez (Oct 25 2004)
[ GLSA 200410-25 ] Netatalk: Insecure tempfile handling in etc2ps.sh
- Luke Macken (Oct 25 2004)
[ GLSA 200410-26 ] socat: Format string vulnerability
- Luke Macken (Oct 25 2004)
[ GLSA 200410-28 ] rssh: Format string vulnerability
- Thierry Carrez (Oct 27 2004)
[ GLSA 200410-29 ] PuTTY: Pre-authentication buffer overflow
- Sune Kloppenborg Jeppesen (Oct 27 2004)
[ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
- Thierry Carrez (Oct 28 2004)
[ GLSA 200410-31 ] Archive::Zip: Virus detection evasion
- Thierry Carrez (Oct 29 2004)
[BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2
- David Miller (Oct 25 2004)
[CLA-2004:872] Conectiva Security Announcement - cups
- Conectiva Updates (Oct 14 2004)
[CLA-2004:873] Conectiva Security Announcement - samba
- Conectiva Updates (Oct 14 2004)
[CLA-2004:875] Conectiva Security Announcement - gtk+
- Conectiva Updates (Oct 18 2004)
[CLA-2004:877] Conectiva Security Announcement - mozilla
- Conectiva Updates (Oct 22 2004)
[CLA-2004:878] Conectiva Security Announcement - zlib
- Conectiva Updates (Oct 25 2004)
[CLA-2004:879] Conectiva Security Announcement - kernel
- Conectiva Updates (Oct 26 2004)
[CLA-2004:880] Conectiva Security Announcement - foomatic-filters
- Conectiva Updates (Oct 27 2004)
[EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow (PoC)
- houseofdabus HOD (Oct 19 2004)
[FLSA-2004:1237] Updated gaim package resolves security issues
- Marc Deslauriers (Oct 16 2004)
[FLSA-2004:1324] Updated libxml2 resolves security vulnerability
- Marc Deslauriers (Oct 04 2004)
[FLSA-2004:1325] Updated mod_python packages fix security vulnerability
- Dominic Hargreaves (Oct 03 2004)
[FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities
- Marc Deslauriers (Oct 02 2004)
[FLSA-2004:1733] Updated squirrelmail resolves security vulnerabilities
- Dominic Hargreaves (Oct 02 2004)
[FLSA-2004:1737] Updated httpd packages fix a mod_proxy security vulnerability
- Marc Deslauriers (Oct 13 2004)
[FLSA-2004:1804] Updated kernel resolves security vulnerabilities
- Dominic Hargreaves (Oct 18 2004)
[FLSA-2004:1833] Updated lha resolves security vulnerabilities
- Marc Deslauriers (Oct 13 2004)
[FLSA-2004:1888] Updated mod_ssl package fixes Apache security vulnerabilities
- Marc Deslauriers (Oct 13 2004)
[FLSA-2004:2072] Updated CUPS packages fix security vulnerability
- Marc Deslauriers (Oct 16 2004)
[FLSA-2004:2089] Updated mozilla packages fix security vulnerabilities
- Dominic Hargreaves (Oct 27 2004)
[FLSA-2004:2102] Updated samba packages fix security vulnerability
- Dominic Hargreaves (Oct 13 2004)
[FLSA-2004:2102] Updated samba packages fix security vulnerability [updated]
- Dominic Hargreaves (Oct 14 2004)
[Full-Disclosure] iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability
- 3APA3A (Oct 06 2004)
[Full-Disclosure] python does mangleme (with IE bugs!)
- Berend-Jan Wever (Oct 24 2004)
[Full-Disclosure] Update: Web browsers - a mini-farce (MSIE gives in)
- Daniel Veditz (Oct 24 2004)
[Fwd: Altiris Carbon Copy Remote Control local SYSTEM exploitation.]
- KF_lists (Oct 22 2004)
[Gosecure Adivsory] Neoteris IVE Vulnerability
- Jian Hui Wang (Oct 06 2004)
[GoSecure Advisory] Neoteris IVE Vulnerability
- Jian Hui Wang (Oct 06 2004)
[hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3.
- Exoduks (Oct 12 2004)
[HV-HIGH] MS Word multiple exceptions, at least one exploitable
- vuln_at_hexview.com (Oct 06 2004)
[HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss
- vuln_at_hexview.com (Oct 12 2004)
[HV-LOW] Unsafe WAV header handling can cause DoS on Windows
- vuln_at_hexview.com (Oct 21 2004)
[HV-MED] UPDATE: RIM Blackberry DoS, data loss
- vuln_at_hexview.com (Oct 14 2004)
[IE 6 SP2] Possible URL Spoofing
- Dror Shalev (Oct 19 2004)
- Paul Kurczaba (Oct 15 2004)
- http-equiv_at_excite.com (Oct 16 2004)
- Andrew Hunter (Oct 15 2004)
[KDE security advisory] Multiple integer overflows in kpdf
- Dirk Mueller (Oct 22 2004)
[LoWNOISE] IPSWITCH WhatsUp Gold 8.03 Remote fr33 exploit
- ET LoWNOISE (Oct 03 2004)
[MAXPATROL Security Advisories] Cross site scripting in Invision Power Board
- Alexander Antipov (Oct 05 2004)
[Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal
- Alexander Antipov (Oct 06 2004)
[MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board
- Alexander Antipov (Oct 11 2004)
[OpenPKG-SA-2004.043] OpenPKG Security Advisory (tiff)
- OpenPKG (Oct 14 2004)
[OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl)
- OpenPKG (Oct 15 2004)
[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
- OpenPKG (Oct 29 2004)
[OpenPKG-SA-2004.047] OpenPKG Security Advisory (apache)
- OpenPKG (Oct 29 2004)
[OpenPKG-SA-2004.048] OpenPKG Security Advisory (squid)
- OpenPKG (Oct 29 2004)
[Powie's PSCRIPT Forum] Multiple SQL-Injection Vulnerabilities
- Christoph Jeschke (Oct 15 2004)
[security bulletin] SSRT3526 Serviceguard potential increase in privilege
- Boren, Rich (SSRT) (Oct 26 2004)
[Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access
- Boren, Rich (SSRT) (Oct 22 2004)
[security bulletin]SSRT4826 rev.0 Mozilla Application Suite for HP Tru64 UNIX Multiple Potential Security Vulnerabilities
- Boren, Rich (SSRT) (Oct 04 2004)
[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality
- Martin Schulze (Oct 10 2004)
[SECURITY] [DSA 553-1] New getmail packages fix root compromise
- Martin Schulze (Sep 27 2004)
[SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free
- Matt Zimmerman (Oct 02 2004)
[SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service
- Martin Schulze (Oct 18 2004)
[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
- Martin Schulze (Oct 04 2004)
[SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service
- Martin Schulze (Oct 06 2004)
[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation
- Martin Schulze (Oct 06 2004)
[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities
- Martin Schulze (Oct 07 2004)
[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities
- Martin Schulze (Oct 11 2004)
[SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution
- Martin Schulze (Oct 12 2004)
[SECURITY] [DSA 563-2] New cyrus-sasl packages really fix arbitrary code execution
- Martin Schulze (Oct 12 2004)
[SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm
- Martin Schulze (Oct 14 2004)
[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
- Martin Schulze (Oct 13 2004)
[SECURITY] [DSA 565-1] New sox packages fix buffer overflow
- Martin Schulze (Oct 13 2004)
[SECURITY] [DSA 566-1] New CUPS packages fix information leak
- Martin Schulze (Oct 14 2004)
[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution
- Martin Schulze (Oct 15 2004)
[SECURITY] [DSA 568-1] New cyrus-sasl-mit packages fix arbitrary code execution
- Martin Schulze (Oct 16 2004)
[SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service
- Martin Schulze (Oct 18 2004)
[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities
- Martin Schulze (Oct 20 2004)
[SECURITY] [DSA 571-1] New libpng3 packages fix several vulnerabilities
- Martin Schulze (Oct 20 2004)
[SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface
- Martin Schulze (Oct 21 2004)
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
- Martin Schulze (Oct 21 2004)
[SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal
- Martin Schulze (Oct 27 2004)
[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
- Martin Schulze (Oct 28 2004)
[SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities
- Martin Schulze (Oct 28 2004)
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
- Martin Schulze (Oct 29 2004)
[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access
- Martin Schulze (Oct 07 2004)
[USN-11-1] libgd2 vulnerabilities
- Martin Pitt (Oct 29 2004)
[USN-12-1] ppp Denial of Service
- Martin Pitt (Oct 29 2004)
[USN-3-1] GhostScript utility script vulnerabilities
- Martin Pitt (Oct 26 2004)
[USN-4-1] Standard C library script vulnerabilities
- Martin Pitt (Oct 27 2004)
[USN-5-1] gettext vulnerabilities
- Martin Pitt (Oct 26 2004)
[USN-6-1] postgresql contributed script vulnerability
- Martin Pitt (Oct 26 2004)
[USN-7-1] imagemagick vulnerability
- Martin Pitt (Oct 26 2004)
[USN-8-1] gaim vulnerabilities
- Martin Pitt (Oct 26 2004)
[USN-9-1] tetex-bin vulnerabilities
- Martin Pitt (Oct 27 2004)
[VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
- wirepair (Oct 12 2004)
a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3
- keitel andres ortega (Oct 15 2004)
Ability FTP Server 2.34 Buffer Overflow Exploit
- J�r�me (Oct 22 2004)
ACROS Security: HTML Injection in JRun Management Console
- ACROS Security (Oct 14 2004)
ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer
- ACROS Security (Oct 13 2004)
ACROS Security: Session Fixation in JRun Management Console
- ACROS Security (Oct 14 2004)
ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response
- ACROS Security (Oct 14 2004)
Adobe acrobat / Adobe Reader 6 can read local files
- Shannon Eric Peevey (Oct 15 2004)
- Nick Leoncavallo (Oct 14 2004)
- Jelmer (Oct 12 2004)
Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug
- Bipin Gautam (Oct 05 2004)
AOL Journals BlogID incrementing discloses account names and e-mail
- Steven (Oct 22 2004)
apexec.pl is still vulnerable against Directory Traversal.
- Zero_X www.lobnan.de Team (Oct 17 2004)
ASP.NET cannonicalization issue
- Evans, Arian (Oct 07 2004)
avoiding stackguard
- Crispin Cowan (Oct 21 2004)
- vallez_at_gmail.com (Oct 18 2004)
BindView Advisory: Memory Leak and DoS in NT4 RPC server
- advisory (Oct 12 2004)
Broadcast buffer-overflow in Vypress Messenger 3.5.1
- Luigi Auriemma (Oct 01 2004)
Broadcast crash in Vypress Tonecast 1.3
- Luigi Auriemma (Oct 19 2004)
Buffer Overflow In Microsoft Excel
- Brett Moore (Oct 13 2004)
Buffer Overflow in Spider game
- Matt Zimmerman (Oct 05 2004)
- van Helsing (Oct 04 2004)
- Steve Kemp (Oct 04 2004)
- Security Team (Oct 03 2004)
Buffer-overflow in Age of Sail II 1.04.151
- Luigi Auriemma (Oct 20 2004)
Buffer-overflow in ShixxNOTE 6.net
- Luigi Auriemma (Oct 13 2004)
Bug in hotmail
- security (Oct 24 2004)
Bypass of Antivirus software with GDI+ bug exploit Mutations
- Andrey Bayora (Oct 13 2004)
CAN-2004-0814: Linux terminal layer races
- Pavel Kankovsky (Oct 23 2004)
- Alan Cox (Oct 20 2004)
cdrdao local root exploit
- newbug Tseng (Oct 01 2004)
cdrecord local root exploit
- Solar Designer (Oct 02 2004)
- Jason T. Miller (Oct 01 2004)
- Greg A. Woods (Oct 01 2004)
CESA-2004-006: libtiff
- chris_at_scary.beasts.org (Oct 13 2004)
CFMX vulnerability
- Eric Lackey (Sep 30 2004)
Clientexec Billing Software
- bugtraq_at_rloxy.com (Oct 11 2004)
CodeCon 2005 Call for Papers
- Len Sassaman (Oct 06 2004)
CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
- CORE Security Technologies Advisories (Oct 12 2004)
cPanel hardlink backup issue
- Karol Wi�sek (Oct 18 2004)
cPanel hardlink chown issue
- Karol Wi�sek (Oct 18 2004)
cPanel symlink chmod issue
- Karol Wi�sek (Oct 18 2004)
Crashs in Master of Orion III 1.2.5
- Luigi Auriemma (Oct 27 2004)
Critical Vulnerability in Altiris Deployment Server architecture
- Brooks, Shane (Oct 25 2004)
- KF_lists (Oct 21 2004)
- Brian Gallagher (Oct 21 2004)
dbPowerAmp Buffer Overflow And Dos Vulnerabilities
- GulfTech Security (Sep 30 2004)
debian dhcpd, old format string bug
- infamous41md_at_hotpop.com (Oct 28 2004)
- Tarragon Allen (Oct 27 2004)
- infamous41md_at_hotpop.com (Oct 25 2004)
Diebold Global Election Management System (GEMS) Backdoor
- David Schwartz (Sep 29 2004)
Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
- Shawn McMahon (Sep 28 2004)
Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
- Chris Paget (Sep 27 2004)
Directory traversal in Tridcomm 1.3
- Luigi Auriemma (Oct 06 2004)
Directory traversal in Yak! 2.1.2
- bil (Oct 16 2004)
- Luigi Auriemma (Oct 15 2004)
dwc_articles possible sql injection
- Rene (Oct 23 2004)
EEYE: RealPlayer pnen3260.dll Heap Overflow
- Chenghuai Lu (Oct 05 2004)
- Marc Maiffret (Oct 01 2004)
EEYE: RealPlayer Zipped Skin File Buffer Overflow
- Marc Maiffret (Oct 27 2004)
EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
- Bipin Gautam (Oct 14 2004)
- Derek Soeder (Oct 12 2004)
EEYE: Windows VDM #UD Local Privilege Escalation
- Jim Hatfield (Oct 14 2004)
- Derek Soeder (Oct 12 2004)
ERRATA: Potential Arbitrary File Access (CAN-2004-0815)
- Gerald (Jerry) Carter (Oct 05 2004)
Eudora 6.2.0.7 attachment spoof
- Paul Szabo (Oct 10 2004)
Fake RedHat - Fedora Security Patch / Trojan Source Code & Analysis
- K-OTiK Security (Oct 25 2004)
Format String Vulnerability in Valve's CS-Source
- Some One (Oct 15 2004)
- Luigi Auriemma (Oct 14 2004)
- Some One (Oct 13 2004)
FreeBSD Security Advisory FreeBSD-SA-04:15.syscons
- FreeBSD Security Advisories (Oct 04 2004)
Full path disclosure and sql injection on CubeCart 2.0.1
- sculptex_at_sculptex.co.uk (Oct 21 2004)
- Pedro Sanches (Oct 06 2004)
Full path disclosure in PHP Links
- Scott T. Cameron (Oct 04 2004)
- Nikyt0x Argentina (Oct 03 2004)
Full path disclosure in PHP Links - more
- LSS Security (Oct 04 2004)
GDI+ JPEG exploit
- albatross_at_tim.it (Oct 06 2004)
Google Script Insertion Exploit
- J�r�me (Oct 23 2004)
- Jim Ley (Oct 19 2004)
Hack Dot AE
- Spy Hat (Oct 22 2004)
Hawking Technologies HAR11A router considered insecure
- Marcus Garvey (Oct 26 2004)
Hi
- webhelp_at_iht.com (Oct 06 2004)
High Risk Vulnerability in Quicktime for Windows
- NGSSoftware Insight Security Research (Oct 27 2004)
High Risk Vulnerability in RealPlayer
- NGSSoftware Insight Security Research (Oct 26 2004)
How to Break Windows XP SP2 + Internet Explorer 6 SP2
- michael evanchik (Oct 24 2004)
- http-equiv_at_excite.com (Oct 19 2004)
- Thor Larholm (Oct 20 2004)
HTTP Response Splitting in Serendipity 0.7-beta4
- Chaotic Evil (Oct 21 2004)
HTTP Response Splitting Vulnerability in Wordpress 1.2
- Chaotic Evil (Oct 06 2004)
IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS
- Juan C Calderon (Oct 18 2004)
- Juan C Calderon (Oct 18 2004)
IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (Risk increased)
- Juan C Calderon (Oct 21 2004)
iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability
- customer service mailbox (Sep 29 2004)
iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability
- customer service mailbox (Oct 18 2004)
iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability
- customer service mailbox (Oct 27 2004)
iDEFENSE Security Advisory XX.XX.04 - Novell SuSe Linux LibTIFF Heap Overflow Vulnerability
- customer service mailbox (Oct 22 2004)
IISShield and ASP.NET canonicalization
- Tiago Halm (Oct 13 2004)
In-game format string in Judge Dredd vs. Death 1.01
- Luigi Auriemma (Oct 02 2004)
inetutils tftp client, DNS resolving bofs
- infamous41md_at_hotpop.com (Oct 25 2004)
Insecure Default Service DACL's in Windows 2003
- Jean-Baptiste Marchand (Oct 13 2004)
- Kurt Dillard (Oct 12 2004)
- Ziots, Edward (Oct 11 2004)
Is Windows up to snuff for running our world?
- Thor (Oct 25 2004)
- Richard M. Smith (Oct 22 2004)
IT Underground Talks
- Dave Aitel (Oct 13 2004)
J2ME security vulnerabilities
- Adam Gowdiak (Oct 22 2004)
Latest Apple Sec update
- Michael Bartosh (Oct 06 2004)
libgd integer overflow
- infamous41md_at_hotpop.com (Oct 29 2004)
- Richard Dawe (Oct 29 2004)
- infamous41md_at_hotpop.com (Oct 25 2004)
libxml2 remote buffer overflows (not in xml parsing code though)
- infamous41md_at_hotpop.com (Oct 25 2004)
Limited \secure\ buffer-overflow in some old Monolith games
- Luigi Auriemma (Oct 08 2004)
local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
- Michael Engert (Oct 29 2004)
- Andr� Malo (Oct 29 2004)
- Larry Cashdollar (Oct 29 2004)
MailCarrier 2.51 SMTP server Buffer Overflow [PoC included]
- J�r�me (Oct 26 2004)
MDKSA-2004:104 - Updated samba packages fix vulnerability
- Mandrake Linux Security Team (Oct 01 2004)
MDKSA-2004:105 - Updated xine-lib packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Oct 06 2004)
MDKSA-2004:106 - Updated cyrus-sasl packages fix local vulnerability
- Mandrake Linux Security Team (Oct 07 2004)
MDKSA-2004:107 - Updated mozilla packages fix vulnerabilities
- Mandrake Linux Security Team (Oct 19 2004)
MDKSA-2004:108 - Updated cvs packages fix vulnerability
- Mandrake Linux Security Team (Oct 19 2004)
MDKSA-2004:109 - Updated libtiff packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Oct 19 2004)
MDKSA-2004:110 - Updated gaim packages fix vulnerabilities
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:112 - Updated squid packages fix SNMP processing vulnerability
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:113 - Updated xpdf packages fix vulnerabilities
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:115 - Updated kdegraphics packages fix DoS vulnerability
- Mandrake Linux Security Team (Oct 21 2004)
MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities
- Mandrake Linux Security Team (Oct 21 2004)
Micronet wireless broadband router SP916BM admin password reset when power off
- MrJoe (Oct 12 2004)
Microsoft cabarc directory traversal
- Jelmer (Oct 12 2004)
Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS
- Amit Klein (AKsecurity) (Oct 12 2004)
Microsoft Internet Explorer Install Engine Control Buffer Overflow
- NGSSoftware Insight Security Research (Oct 19 2004)
Microsoft Windows NetDDE Service Buffer Overflow
- NGSSoftware Insight Security Research (Oct 13 2004)
MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86
- Ramon de Carvalho Valle (Oct 27 2004)
MonkeyShell: using XML-RPC for access to a remote shell
- Abe Usher (Oct 10 2004)
More details on BID 11408 (3com 3cradsl72 wireless router)
- Ivan Casado (Oct 15 2004)
Mozilla Firefox (tested on 0.9.3) html-code crash.
- Michal Zalewski (Oct 29 2004)
- Crispin Cowan (Oct 27 2004)
- ducch apple (Oct 25 2004)
mpg123 "getauthfromurl" buffer overflow
- Carlos Barros (Oct 19 2004)
MS October Security bulletins
- albatross_at_tim.it (Oct 12 2004)
ms04-031 pre-auth ??
- Sinan Eren (Oct 18 2004)
MSN Gaming Heartbeat Component Buffer Overflow
- NGSSoftware Insight Security Research (Oct 13 2004)
Multiple AntiVirus Reserved Device Name Handling Vulnerability
- Sowhat . (Oct 18 2004)
Multiple Cross Site Scripting Vulnerabilities in FuseTalk
- steven (Oct 13 2004)
Multiple Vulnerabilites in Quake II Server
- Richard Stanway (Oct 27 2004)
Multiple Vulnerabilities in AJ-Fork
- Ahmad Muammar (Sep 30 2004)
Multiple vulnerabilities in BlackBoard
- Yves Goergen (Oct 06 2004)
- Lin Xiaofeng (Oct 06 2004)
Multiple Vulnerabilities in CoolPHP
- R00tCr4ck (Oct 16 2004)
Multiple vulnerabilities in Sage Saleslogix
- Carl (Oct 18 2004)
Multiple vulnerabilities in ZanfiCmsLite
- Lin Xiaofeng (Oct 11 2004)
Mutiple AntiVirus Reserved Device Name Handling Vulnerability
- Sowhat . (Oct 18 2004)
New Microsoft Security Response Center PGP Key [pgp]
- Microsoft Security Response Center (Oct 05 2004)
New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
- Chris Norton (Oct 18 2004)
- marco correnti (Oct 15 2004)
- SysAdminKC (Oct 15 2004)
- John Bissell (Oct 14 2004)
New URL spoofing bug in Microsoft Internet Explorer
- http-equiv_at_excite.com (Oct 30 2004)
- Larry Seltzer (Oct 29 2004)
- 0-1-2-3_at_gmx.de (Oct 29 2004)
- GuidoZ (Oct 28 2004)
- GuidoZ (Oct 28 2004)
- J�r�me (Oct 29 2004)
- Christopher J. Pilkington (Oct 28 2004)
- GuidoZ (Oct 29 2004)
- Larry Seltzer (Oct 28 2004)
- 0-1-2-3_at_gmx.de (Oct 28 2004)
Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
- secure_at_symantec.com (Oct 19 2004)
- secure_at_symantec.com (Oct 18 2004)
- Daniel Milisic (Oct 15 2004)
Norton AntiVirus 2004/2005 Script Blocking Redux
- Daniel Milisic (Oct 21 2004)
NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability
- NSFOCUS Security Team (Oct 20 2004)
On Polymorphic Evasion
- Phantasmal Phantasmagoria (Oct 01 2004)
OpenSSL 0.9.7e released (fwd from mark@openssl.org)
- je_at_sekure.net (Oct 25 2004)
Oracle 9i Union Flaw
- Peter J. Holzer (Oct 04 2004)
- Brandon Petty (Oct 01 2004)
- Brandon Petty (Sep 30 2004)
pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security
- Dragos Ruiu (Oct 26 2004)
Patch available for critical IBM DB2 Universal Database flaws
- NGSSoftware Insight Security Research (Oct 05 2004)
Patch available for high risk flaws in the AtHoc Toolbar
- NGSSoftware Insight Security Research (Oct 06 2004)
Patch available for multiple high risk vulnerabilities in RealPlayer
- NGSSoftware Insight Security Research (Oct 06 2004)
PHP4 cURL functions bypass open_basedir
- FraMe (Oct 27 2004)
Possible GDI Exploit Vector
- Babar Shafiq Nazmi (Oct 01 2004)
pppd out of bounds memory access, possible DOS
- infamous41md_at_hotpop.com (Oct 25 2004)
Presentation: Bypassing client application protection techniques with notepad
- 3APA3A (Oct 28 2004)
problem in voip environment
- Walton, John Michael (John) (Oct 11 2004)
ProFTPD 1.2.x remote users enumeration bug
- LSS Security (Oct 15 2004)
ProFTPD 1.2.x remote users enumeration bug - correction
- LSS Security (Oct 17 2004)
Promiscuous email printing in Canon imageRunner
- Marco Ivaldi (Oct 01 2004)
- Jeff Bates (Sep 30 2004)
PTms04-030
- pigrelax (Oct 26 2004)
PuTTY SSH client vulnerability
- Anatole Shaw (Oct 26 2004)
python does mangleme (with IE bugs!)
- ned (Oct 23 2004)
Regression in IE: Accessing remote/local content in IE (GM#009-IE)
- Nick FitzGerald (Oct 12 2004)
- GreyMagic Security (Oct 12 2004)
Rendering large binary file as HTML makes Mozilla Firefox stop responding
- Peter Kruse (Oct 26 2004)
Reverse Engineering the First Pocket PC Trojan
- kers0r (Oct 11 2004)
rssh: pizzacode security alert
- Derek Martin (Oct 23 2004)
Security advisory - Xerces-C++ 2.5.0: Attribute blowup
- Amit Klein (AKsecurity) (Oct 02 2004)
Server crash in Flash Messaging 5.2.0g
- Luigi Auriemma (Oct 07 2004)
SetWindowLong Shatter Attacks
- Brett Moore (Oct 13 2004)
Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
- Paul Schmehl (Oct 27 2004)
- Valdis.Kletnieks_at_vt.edu (Oct 25 2004)
- Atom 'Smasher' (Oct 24 2004)
SQL Injection in UBB.threads 3.4.x
- Florian Rock (Oct 21 2004)
SQL Injection vulnerability in bBlog 0.7.3
- James McGlinn (Sep 30 2004)
STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
- advisory_at_stgsecurity.com (Oct 24 2004)
SuSE Security Announcement: kernel (SUSE-SA:2004:037)
- Marcus Meissner (Oct 21 2004)
SuSE Security Announcement: libtiff (SUSE-SA:2004:038)
- Marcus Meissner (Oct 22 2004)
SUSE Security Announcement: mozilla (SUSE-SA:2004:036)
- Sebastian Krahmer (Oct 06 2004)
SUSE Security Announcement: samba (SUSE-SA:2004:035)
- Thomas Biege (Oct 05 2004)
SUSE Security Announcement: xpdf, gpdf, kpdf, pdftohtml, cups (SUSE-SA:2004:039)
- Thomas Biege (Oct 26 2004)
Test your windows OS
- Berend-Jan Wever (Oct 04 2004)
TSLSA-2004-0051 - samba
- Trustix Security Advisor (Oct 01 2004)
TSLSA-2004-0053 - cyrus-sasl
- Trustix Security Advisor (Oct 08 2004)
TSLSA-2004-0054 - multi
- Trustix Security Advisor (Oct 15 2004)
Two Vulnerabilities in OpenWFE Web Client
- Joxean Koret (Oct 24 2004)
UnixWare 7.1.3up UnixWare 7.1.4 : CUPS before 1.1.21 allows remote attackers to cause a denial of service
- please_reply_to_security_at_sco.com (Oct 12 2004)
UnixWare 7.1.4 : Multiple Vulnerabilities in libpng
- please_reply_to_security_at_sco.com (Oct 12 2004)
UnixWare 7.1.4 UnixWare 7.1.3 : The error handling in the inflate and inflateBack functions in ZLib compression library allows local users to cause a denial of service
- please_reply_to_security_at_sco.com (Oct 18 2004)
UPDATE: Format String Vulnerability in Valve's CS-Source
- Some One (Oct 14 2004)
Update: Web browsers - a mini-farce (MSIE gives in)
- Chris Paget (Oct 29 2004)
- infamous41md_at_hotpop.com (Oct 29 2004)
- Michael Shigorin (Oct 29 2004)
- David Brodbeck (Oct 29 2004)
- Tim Newsham (Oct 29 2004)
- Valdis.Kletnieks_at_vt.edu (Oct 29 2004)
- Tim Newsham (Oct 29 2004)
- Valdis.Kletnieks_at_vt.edu (Oct 28 2004)
- Michael Wojcik (Oct 28 2004)
- David Brodbeck (Oct 27 2004)
- MCMuir_at_dstoutput.com (Oct 27 2004)
- Michael Wojcik (Oct 27 2004)
- Valdis.Kletnieks_at_vt.edu (Oct 27 2004)
- Michael Wojcik (Oct 27 2004)
- Valdis.Kletnieks_at_vt.edu (Oct 25 2004)
- gabrield89_at_hotmail.com (Oct 25 2004)
- David Brodbeck (Oct 25 2004)
- Michal Zalewski (Oct 22 2004)
Web browsers - a mini-farce
- Michal Zalewski (Oct 18 2004)
windows 2000 server terminal server denial of service
- Nick Caramella (Oct 21 2004)
Windows DoS in certain pGina configurations
- Steven (Oct 22 2004)
Writing Trojans that bypass Windows XP Service Pack 2 Firewall
- Simon Zuckerbraun (Oct 17 2004)
- Jay Calvert (Oct 15 2004)
- Polazzo Justin (Oct 15 2004)
- americanidiot_at_hushmail.com (Oct 11 2004)
wvtfpd remote root heap overflow
- infamous41md_at_hotpop.com (Oct 25 2004)
XXS in fusetalk forum
- Matthew Oyer (Oct 12 2004)
XXS in SCT email client
- Matthew Oyer (Oct 12 2004)
zgv image viewing heap overflows
- Chris Frey (Oct 27 2004)
- infamous41md_at_hotpop.com (Oct 25 2004)