Bugtraq: by date

Tuesday, 31 August
- Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jérôme
- Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation Cisco Systems Product Security Incident Response Team
- OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability please_reply_to_security_at_sco.com
- Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd Jérôme
Wednesday, 1 September
- SUSE Security Announcement: kernel (SUSE-SA:2004:028) Thomas Biege
- [ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy Thierry Carrez
Tuesday, 31 August
- Cross-Site Scripting Vulnerability in Newtelligence DasBlog Dominick Baier
- RE: Security Center and Windows XP clients in domain David Webster
- ADVISORY: http response splitting hole in Comersus shopping cart Maestro De-Seguridad
- Re: Security Center and Windows XP clients in domain Thor
Wednesday, 1 September
- New security tools and papers released shadown
Tuesday, 31 August
- [security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow Boren, Rich (SSRT)
Wednesday, 1 September
- RE: Security Center and Windows XP clients in domain, 20040831062712.31317.qmail@www.securityfocus.com Sym Security
- [nisr@nextgenss.com: Patch available for multiple critical flaws in Oracle] David Ahmad
Monday, 30 August
- RE: CuteNews News.txt writable to world Albert Puigsech Galicia
Tuesday, 31 August
- MITKRB5-SA-2004-002: double-free vulnerabilities Tom Yu
Monday, 30 August
- MSInfo Buffer Overflow E.Kellinis
Tuesday, 31 August
- Multiple Vulnerabilities In phpWebsite GulfTech Security
Wednesday, 1 September
- Opera DOS Stevo
Tuesday, 31 August
- SSHD / AnonCVS Nastyness Dragos Ruiu
Wednesday, 1 September
- [ GLSA 200409-01 ] vpopmail: Multiple vulnerabilities Sune Kloppenborg Jeppesen
- Exploit: AIM Exploit (Ignore Previous Post) John Bissell
Tuesday, 31 August
- MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities Mandrake Linux Security Team
Thursday, 2 September
- Re: SUSE Security Announcement: kernel (SUSE-SA:2004:028) Paul Starzetz
- Re: Linux OpenExchange - cleartext rootpw in swap Valdis.Kletnieks_at_vt.edu
Monday, 30 August
- Password Protect XSS and SQL-Injection vulnerabilities. Criolabs
Thursday, 2 September
- [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews Exoduks
- TSL-2004-0045 - kerberos5 Trustix Security Advisor
- [ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo() Thierry Carrez
- [ GLSA 200409-06 ] eGroupWare: Multiple XSS vulnerabilities Sune Kloppenborg Jeppesen
- [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server SHATTER (Application Security, Inc.)
Wednesday, 1 September
- WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code Jérôme
Thursday, 2 September
- [ GLSA 200409-05 ] Gallery: Arbitrary command execution Sune Kloppenborg Jeppesen
- SUSE Security Announcement: zlib (SUSE-SA:2004:029) Thomas Biege
- [ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication Thierry Carrez
- MailWorks Professional - Authentication bypass headpimp_at_pimp-industries.com
Wednesday, 1 September
- Patch available for IBM DB2 Universal Database flaws NGSSoftware Insight Security Research
Thursday, 2 September
- Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration Jérôme
Friday, 3 September
- UPDATE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities Sune Kloppenborg Jeppesen
- [XSS] PHP-Nuke 7.4 Remote Privilege Escalation Pierquinto Manco
Thursday, 2 September
- Dynalink routers backdoor? fabio
- Re: Linux OpenExchange - cleartext rootpw in swap Joshua Goodall
Friday, 3 September
- [ GLSA 200409-07 ] xv: Buffer overflows in image handling Sune Kloppenborg Jeppesen
Thursday, 2 September
- MailWorks Professional - Authentication Bypass headpimp_at_pimp-industries.com
Friday, 3 September
- FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities Thor Larholm
Saturday, 4 September
- Engenio/LSI Logic controllers denial of service/data corruption Jedi/Sector One
- [XSS] PHP-Nuke 7.4 ViewAdmin Bug Pierquinto Manco
Friday, 3 September
- [ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely Sune Kloppenborg Jeppesen
Saturday, 4 September
- [XSS] PHP-Nuke 7.4 DelAdmin Bug Pierquinto Manco
- FUll Path Disclosure in YABBSE Ahmad Muammar
Tuesday, 31 August
- Patch available for multiple critical flaws in Oracle NGSSoftware Insight Security Research
Wednesday, 1 September
- Cross-Site Scripting Vulnerability in Newtelligence DasBlog Dominick Baier
Monday, 6 September
- OpenCA Security Advisory: Cross Site Scripting vulnerability Martin Bartosch
- SUSE Security Announcement: apache2 (SUSE-SA:2004:030) Sebastian Krahmer
- [ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities Thierry Carrez
Sunday, 5 September
- Broadcast shutdown in Call of Duty 1.4 Luigi Auriemma
Monday, 6 September
- serverview 3.0 - insecure file permissions Rene
Sunday, 5 September
- Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) Jedi/Sector One
- [RLSA_01-2004] QNX PPPoEd local root vulnerabilities Julio Cesar Fort
- cdrdao local root exploit Jérôme
- Apple, Apple Remote Desktop client Adam Shostack
Monday, 6 September
- [ GLSA 200409-10 ] multi-gnome-terminal: Information leak Thierry Carrez
Sunday, 5 September
- [XSS] PHP-Nuke 7.4 Newsletter Injection Bug Pierquinto Manco
Monday, 6 September
- Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4 Pierquinto Manco
Sunday, 5 September
- [XSS] PHP-Nuke 7.4 AddMsg Bug Pierquinto Manco
- PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch Pierquinto Manco
- Bug XSS in PsNews 1.1 Michal Blaszczak
- Site News Authentication Error May Let Local Users Add Messages Jérôme
Monday, 6 September
- mpg123 buffer overflow vulnerability Davide Del Vecchio
Tuesday, 7 September
- [SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability snsadv
- Re: cdrdao local root exploit 3APA3A
Sunday, 5 September
- Re: [XSS] PHP-Nuke 7.4 Bugs Blaine Elzey
Tuesday, 7 September
- [ GLSA 200409-11 ] star: Suid root vulnerability Kurt Lieber
- MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability Mandrake Linux Security Team
- Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit Jérôme
- Insecure Temporary File Creation Vulnerability in Net-Acct Jérôme
- Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities] Jérôme
Wednesday, 8 September
- Re: [XSS] PHP-Nuke 7.4 Bugs Peter Lowe
Tuesday, 7 September
- [XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug bima tampan
- MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability Mandrake Linux Security Team
- MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability Mandrake Linux Security Team
Wednesday, 8 September
- [ GLSA 200409-13 ] LHa: Multiple vulnerabilities Sune Kloppenborg Jeppesen
- [ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows Thierry Carrez
- [ GLSA 200409-14 ] Samba: Remote printing vulnerability Sune Kloppenborg Jeppesen
- Multiple vulnerabilities 1n BBS E-Market Professional Ahmad Muammar
Thursday, 9 September
- Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities http-equiv_at_excite.com
- Off-by-one bug in Halo 1.04 Luigi Auriemma
- SQL-Injection in Subjects 2.0 for Postnuke Criolabs
- F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE] Jérôme
Friday, 10 September
- OpenOffice World-Readable Temporary Files Disclose Files to Local Users Jérôme
Thursday, 9 September
- BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included] Jérôme
Wednesday, 8 September
- New Data Wipe Tools Thomas C. Greene
Sunday, 5 September
- Bug XSS in PsNews 1.1 Michal Blaszczak
Thursday, 9 September
- [CLA-2004:860] Conectiva Security Announcement - krb5 Conectiva Updates
Friday, 10 September
- ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability Sune Kloppenborg Jeppesen
Tuesday, 7 September
- Axis Network Camera and Video Server Security Advisory product-security_at_axis.com
Friday, 10 September
- Multiple vulnerabilities in Icewarp Web Mail 5.2.7 ShineShadow
Thursday, 9 September
- cdrecord local root exploit newbug Tseng
Friday, 10 September
- [CLA-2004:863] Conectiva Security Announcement - wv Conectiva Updates
Saturday, 11 September
- Serv-U up to 5.2 Denial of Service Patrick
Friday, 10 September
- Re: New Data Wipe Tools Thomas C. Greene
- Re: New Data Wipe Tools Jake Appelbaum
- Re: New Data Wipe Tools Brendan Murray
- Remote buffer overflow in Apache mod_ssl when reverse proxying SSL Jérôme
- CAU-EX-2004-0002: cdrecord-suidshell.sh I)ruid
Saturday, 11 September
- problem in voip environment Pasquiet Loic (M.)
- Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service David S. Miller
- Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Wolfpaw - Dale Corse
Monday, 13 September
- [CLA-2004:864] Conectiva Security Announcement - kde Conectiva Updates
Sunday, 12 September
- Gadu-Gadu (all versions with image-send feature) Heap Overflow Sec-Labs Team
Monday, 13 September
- [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) OpenPKG
Saturday, 11 September
- Re: New Data Wipe Tools Derek Martin
- RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Wolfpaw - Dale Corse
Monday, 13 September
- Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL 3APA3A
- [CLA-2004:865] Conectiva Security Announcement - zlib Conectiva Updates
Sunday, 12 September
- Posible Inclusion File in Perl Desk Nikyt0x Argentina
- [ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin Dan Margolis
Saturday, 11 September
- Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service David S. Miller
Sunday, 12 September
- Re: cdrecord local root exploit Sean Davis
- Directory Traversal Vulnerability in TwinFTP Server allows overwriting Jérôme
Monday, 13 September
- [ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities Sune Kloppenborg Jeppesen
- Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) Gerald (Jerry) Carter
- @stake advisory: Lexar JumpDrive Secure Password Extraction Chris Wysopal
- Insecure file permissions in the Firefox browser for Linux >= v0.9 Max
- [RLSA_02-2004] QNX Photon multiple buffer overflows Julio Cesar Fort
- Samba nmbd Invalid Length Denial of Service Vulnerability [iDEFENSE] Jérôme
- Zyxel Prestige 681 SDSL router information leak Przemyslaw Frasunek
- RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Ron DuFresne
- [RLSA_03-2004] QNX ftp client format string bug Julio Cesar Fort
- [RLSA_04-2004] QNX crrtrap possible race condition vulnerability Julio Cesar Fort
- QNX crrtrap possible race condition vulnerability Jérôme
- RE: New Data Wipe Tools Altheide, Cory B. (IARC)
- @stake advisory: Pingtel Xpressa Denial of Service Advisories
- MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities Mandrake Linux Security Team
- Re: cdrecord local root exploit Sean Davis
- The ArpSucker is b0rn! Be yourself, be the net. Alpt
Tuesday, 14 September
- TSL-2004-0046 - multi Trustix Security Advisor
Monday, 13 September
- Re: cdrecord local root exploit Volker Kuhlmann
- Inkra 1504GX DoS vulnerability in conducting IP protocol felix zhou
Tuesday, 14 September
- Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue advisories
- [SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory Martin Schulze
- Corsaire Security Advisory - Multiple vendor MIME separator issue advisories
- Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue advisories
- SUS 2.0.2 local root vulnerability LSS Security
- Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue advisories
- [XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug bima tampan
Monday, 13 September
- Correction to latest Colsaire advisories 3APA3A
Tuesday, 14 September
- Rainbow tables for LM/NTLMv1 authentication Hidenobu Seki
- ADVISORY: http response splitting in snipsnap Maestro De-Seguridad
- Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution [MS04-028] Jérôme
- [ GLSA 200409-17 ] SUS: Local root vulnerability Sune Kloppenborg Jeppesen
- Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability Jérôme
- Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories
- Corsaire Security Advisory - Multiple vendor MIME field quoting issue advisories
- [ GLSA 200409-18 ] cdrtools: Local root vulnerability in cdrecord if set SUID root Sune Kloppenborg Jeppesen
- Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Nick D.
- Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue advisories
- Corsaire Security Advisory - Multiple vendor MIME field whitespace issue advisories
- Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll
Wednesday, 15 September
- Re: Correction to latest Colsaire advisories advisories
- New Mozilla, Firefox and Thunderbird releases fix critical security issues Gaël Delalleau
- SMC7004VWBR / SMC7008ABR "spoofing" vulnerability. Jimmy Scott
- [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) OpenPKG
Tuesday, 14 September
- McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] Jérôme
Wednesday, 15 September
- [OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell) OpenPKG
- SA04-002 - Apache config file env variable buffer overflow jonas.thambert_at_pts.se
- MDKSA-2004:093 - Updated squid packages fix DoS vulnerability Mandrake Linux Security Team
- SUSE Security Announcement: apache2 (SUSE-SA:2004:032) Ludwig Nussel
- MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic Mandrake Linux Security Team
- MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities Mandrake Linux Security Team
- PHP Vulnerability N. 1 Stefano Di Paola
- [SECURITY] [DSA 545-1] New cupsys packages fix denial of service Martin Schulze
- SUSE Security Announcement: cups (SUSE-SA:2004:031) Sebastian Krahmer
- Re: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] bashis
- MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities Mandrake Linux Security Team
- Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David Covin
- CESA-2004-005: gtk+ XPM decoder chris_at_scary.beasts.org
- [ANNOUNCE] Apache HTTP Server 2.0.51 Released Sander Striker
- Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Michael Scheidell
- Re: Correction to latest Colsaire advisories Andreas Marx
- CESA-2004-004: libXpm chris_at_scary.beasts.org
- RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin
- RE: Correction to latest Colsaire advisories David Litchfield
- iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability customer service mailbox
- Re: cdrecord local root exploit Marcus Meissner
- Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll
- Php Vulnerability N. 2 Stefano Di Paola
- MDKSA-2004:097 - Updated cups packages fix DoS vulnerability Mandrake Linux Security Team
- Re: cdrecord local root exploit Coleman
- [OpenPKG-SA-2004.041] OpenPKG Security Advisory (spamassassin) OpenPKG
Thursday, 16 September
- RE: Correction to latest Colsaire advisories advisories
- wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities Paul Johnston
- Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow sheep explode
Wednesday, 15 September
- www.proboards.com / YaBB XSS Vuln admin_at_leetflash.com
Thursday, 16 September
- [SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities Martin Schulze
- RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin
- [SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution Martin Schulze
- TSLSA-2004-0047 - multi Trustix Security Advisor
- RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Angelidis, Fotis(NSASOUDABAY)
- [SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows Martin Schulze
- Re: cdrecord local root exploit Jason T. Miller
Wednesday, 15 September
- MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities Mandrake Linux Security Team
- Fwd: Theo's presentation on exploit prevention Bas Alberts
Thursday, 16 September
- ADVISORY: security hole (http response splitting) in snitz forums 2000 Maestro De-Seguridad
- JPEG Processing BOF Proof Of Concept GulfTech Security
- Microsoft WordPerfect 5.x Converter Heap Overflow NGSSoftware Insight Security Research
- Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Gary Warner
- [sudo-announce] Sudo version 1.6.8p1 now available (fwd) je_at_sekure.net
- [ GLSA 200409-19 ] Heimdal: ftpd root escalation Sune Kloppenborg Jeppesen
- RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Parks, Matt
- iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability customer service mailbox
Wednesday, 15 September
- MDKSA-2004:099 - Updated XFree86 packages fix libXpm overflow vulnerabilities Mandrake Linux Security Team
Monday, 6 September
- XSA-2004-5: heap overflow in DVD subpicture decoder Michael Roitzsch
Tuesday, 7 September
- XSA-2004-4: multiple string overflows Michael Roitzsch
Wednesday, 15 September
- IE6 + XP SP2 Vulnerability cns
Thursday, 16 September
- [ GLSA 200409-20 ] mpg123: Buffer overflow vulnerability Thierry Carrez
- RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin
- [ GLSA 200409-21 ] Apache 2, mod_dav: Multiple vulnerabilities Thierry Carrez
- Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Harrison Gladden
- Freeze in Pigeon Server 3.02.0143 Luigi Auriemma
- [security bulletin] SSRT4739 rev.0 HP WebJetadmin arbitrary command execution Boren, Rich (SSRT)
Friday, 17 September
- Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue Borja Marcos
- RsyncX vulnerabilities Matt Johnston
- Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Chris Norton
- Re: www.proboards.com / YaBB XSS Vuln Patrick Clinger
- RE: JPEG Processing BOF Proof Of Concept Cassidy Macfarlane
Thursday, 16 September
- RE: www.proboards.com / YaBB XSS Vuln GulfTech Security
Friday, 17 September
- GoogleToolbar:About -- Allows Script Injection ViPeR
Thursday, 16 September
- FreeBSD kernel buffer overflow gerarra_at_tin.it
Friday, 17 September
- MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities Mandrake Linux Security Team
- [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit admin_at_exploitwatch.org
- RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Michael Wilson, Contractor
- Important message to Bugtraq Subscribers! Daniel Bertrand
- Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories
- Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. khoaimi
- Re: Multiple Vulnerabilities in phpScheduleIt Nick Korbel
- Re: FreeBSD kernel buffer overflow Tim Newsham
Saturday, 18 September
- Sudo Exploit by Rosiello Security Angelo Rosiello
Friday, 17 September
- Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code) kers0r
Saturday, 18 September
- RhinoSoft DNS4ME HTTP Server Vulnerabilities GulfTech Security
- Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll
- Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue Greg A. Woods
- Re: GoogleToolbar:About -- Allows Script Injection Rafel Ivgi, The-Insider
Tuesday, 14 September
- Microsoft WordPerfect 5.x Converter Heap Overflow NGSSoftware Insight Security Research Advisory
Friday, 17 September
- Re: FreeBSD kernel buffer overflow Wesley Shields
Wednesday, 15 September
- wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities Paul Johnston
Tuesday, 14 September
- AOL Groups/AIM Information Disclosure Link Linkovich
Sunday, 19 September
- Tool announcement: fakebust Michal Zalewski
Saturday, 18 September
- Debian netkit telnetd vulnerability Michal Zalewski
- Vulnerabilities in TUTOS Joxean Koret
Monday, 20 September
- Default username/password pairs in ON Command CCM 5.x database backend Jonas Olsson
- FreeBSD Security Advisory FreeBSD-SA-04:14.cvs FreeBSD Security Advisories
Saturday, 18 September
- CoD United Offensive boom boom Luigi Auriemma
Sunday, 19 September
- Serious Security Issue in Windows XP SP2's Firewall Andreas Marx
Monday, 20 September
- [SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution Martin Schulze
Saturday, 18 September
- Vulnerabilities in TUTOS Joxean Koret
Sunday, 19 September
- Local root compromise possible with getmail David Watson
Saturday, 18 September
- glFTPd local stack buffer overflow CoKi
Monday, 20 September
- Re: Posible security bug in phpMyWebhosting Udo Mueller
- [ GLSA 200409-25 ] CUPS: Denial of service vulnerability Thierry Carrez
- [ GLSA 200409-24 ] Foomatic: Arbitrary command execution in foomatic-rip filter Joshua J. Berry
Sunday, 19 September
- Multiple Full Disclosure Path in postnuke 0.750 phoenix Jérôme
Monday, 20 September
- [ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities Thierry Carrez
Sunday, 19 September
- Re: Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. Tim Broeker
Saturday, 18 September
- Multiple Full Disclosure Path in postnuke 0.750 phoenix FAiN182
Monday, 20 September
- Re: Debian netkit telnetd vulnerability Solar Designer
- Multiple Vulnerabilities In EmuLive Server4 GulfTech Security
Tuesday, 21 September
- CA UniCenter Management Portal Username Enumeration Vulnerability thomas adams
- Re: glFTPd local stack buffer overflow Bloody_A
- [ GLSA 200409-28 ] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities Thierry Carrez
- [SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution Martin Schulze
- ICMP spoofed source tunneling Max Tulyev
- Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004) Luigi Auriemma
- Netscape NSS Library Vulnerability Affects Sun Java Enterprise System Jérôme
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes pressinfo_at_diebold.com
Monday, 20 September
- Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0 Matthias Wimmer
- And More Advanced SQL Injection... Stefano Di Paola
Tuesday, 21 September
- [ GLSA 200409-27 ] glFTPd: Local buffer overflow vulnerability Thierry Carrez
Wednesday, 22 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin
- New whitepaper "The Phishing Guide" Gunter Ollmann (NGS)
Tuesday, 21 September
- Pinnacle ShowCenter Skin Denial of Service Marc Ruef
Wednesday, 22 September
- [SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution Martin Schulze
- iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability customer service mailbox
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Craig Paterson
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jaeson Schultz
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Gene Cronk
- Re: ICMP spoofed source tunneling fenfire_at_abwesend.de
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes steve menard
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Gene Cronk
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jay Hennigan
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Homer
- Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products Mike Sues
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Lorne J. Leitman
- [CLA-2004:867] Conectiva Security Announcement - spamassassin Conectiva Updates
Tuesday, 21 September
- Pinnacle ShowCenter 1.51 possible DoS Jérôme
Wednesday, 22 September
- [ GLSA 200409-29 ] FreeRADIUS: Multiple Denial of Service vulnerabilities Sune Kloppenborg Jeppesen
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Hollis Johnson
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Rainer Duffner
- [CLA-2004:866] Conectiva Security Announcement - qt3 Conectiva Updates
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Mike Ely
- Macromedia Products Not Affected by MS JPEG/GDIPlus Issue Macromedia Security Zone
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Marvin Bellamy
- Remote buffer overflow in MDaemon IMAP and SMTP server pigrelax
- MDKSA-2004:101 - Updated webmin packages fix vulnerabilities Mandrake Linux Security Team
- Re: ICMP spoofed source tunneling Tim Newsham
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jacob Appelbaum
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jaeson Schultz
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Barry Fitzgerald
- [ GLSA 200409-30 ] xine-lib: Multiple vulnerabilities Thierry Carrez
- Re: ICMP spoofed source tunneling Dave Paris
- MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities Mandrake Linux Security Team
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Querin
Thursday, 23 September
- Re: ICMP spoofed source tunneling sin
Wednesday, 22 September
- Re: ICMP spoofed source tunneling fenfire_at_abwesend.de
- Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Sym Security
- MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities Mandrake Linux Security Team
Thursday, 23 September
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic
- [CLA-2004:868] Conectiva Security Announcement - apache Conectiva Updates
- Multiple vulnerabilities in ActivePost Standard 3.1 Luigi Auriemma
Wednesday, 22 September
- Example of JPG Exploit & Shellcode javier falbo
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Atom 'Smasher'
Thursday, 23 September
- Promiscuous email printing in Canon imageRunner Andrew Daviel
- [ GLSA 200409-32 ] getmail: Filesystem overwrite vulnerability Sune Kloppenborg Jeppesen
- aspWebCalendar /aspWebAlbum: SQL injection Pedro Sanches
- TSLSA-2004-0049 - apache Trustix Security Advisor
- Re: New whitepaper "The Phishing Guide" Seth Arnold
Friday, 24 September
- Buffer overflow in Zinf 2.2.1 for Win32 Luigi Auriemma
- Microsoft's GDI Detetection Tool faults albatross_at_tim.it
Thursday, 23 September
- [ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability Sune Kloppenborg Jeppesen
Wednesday, 22 September
- NEW GDI+ JPEG Remote Exploit John Bissell
Thursday, 23 September
- New Macromedia Security Zone Bulletins Postede Macromedia Security Zone
Friday, 24 September
- Re: Microsoft's GDI Detetection Tool faults John Bissell
- RE: Correction to latest Colsaire advisories advisories
- Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Heikki Korpela
Saturday, 25 September
- New XSS vulnerabilities in paFileDB 3.1 final alireza hassani
Friday, 24 September
- Re: ICMP spoofed source tunneling raiblehugo_at_hotmail.com
Saturday, 25 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jose Rey
Thursday, 23 September
- Motorola Wireless Router WR850G Authentication Circumvention Daniel Fabian
Saturday, 25 September
- Re: Microsoft's GDI Detetection Tool faults Gadi Evron
Thursday, 23 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jeremy Epstein
Friday, 24 September
- RE: New whitepaper "The Phishing Guide" Dehner, Benjamin T.
- Re: Promiscuous email printing in Canon imageRunner Chip Mefford
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Claudius Li
Thursday, 23 September
- Motorola Wireless Router WR850G Authentication Circumvention Daniel Fabian
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin
- New Macromedia Security Zone Bulletins Posted Macromedia Security Zone
Friday, 24 September
- Re: New whitepaper "The Phishing Guide" Daniel Veditz
Monday, 27 September
- [CLA-2004:869] Conectiva Security Announcement - kernel Conectiva Updates
Saturday, 25 September
- RE: Microsoft's GDI Detetection Tool faults Dowling, Gabrielle
Sunday, 26 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Mike Healan
- MyWebServer 1.0.3 nekd0
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Nick Knouf
- Re: Debian netkit telnetd vulnerability Matt Zimmerman
Monday, 27 September
- Re: cdrecord local root exploit Dr Andrew C Aitchison
Sunday, 26 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Yoav Nir
- IPv4 fragmentation --> The Rose Attack Gandalf The White
Monday, 27 September
- [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS Hat-Squad Security Team
Sunday, 26 September
- SQL injection in BroadBoard Instant ASP Message Board pigrelax
Monday, 27 September
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic
Sunday, 26 September
- Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll
Monday, 27 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Paul Wouters
Sunday, 26 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart
- GDI Virus in the wild. Ben
- Re: HTTP Response Splitting and SQL injection in megabbs forum PD9 Software
Monday, 27 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Greg A. Woods
- Re: New whitepaper "The Phishing Guide" Greg A. Woods
- [SECURITY] [DSA 554-1] New sendmail packages fix potential open relay Martin Schulze
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Ryan_Ward_at_Dell.com
Sunday, 26 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Nicholas Knight
Monday, 27 September
- Broadcast crash in Chatman 1.5.1 RC1 Luigi Auriemma
- Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll
Saturday, 25 September
- Re: aspWebCalendar /aspWebAlbum: SQL injection Steven
Monday, 27 September
- iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability customer service mailbox
Sunday, 26 September
- Re: Microsoft's GDI Detetection Tool faults Andreas Marx
Monday, 27 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David Brodbeck
- Re: New whitepaper "The Phishing Guide" Chip Andrews
- Re: GDI Virus in the wild. Gerry Eisenhaur
- Re: Microsoft's GDI Detetection Tool faults albatross_at_tim.it
- Re: New whitepaper "The Phishing Guide" Juraj Bednar
Sunday, 26 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ERACC
Monday, 27 September
- [ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm Thierry Carrez
Sunday, 26 September
- @lex Guestbook (PHP) Include file Himeur Nourredine
Monday, 27 September
- RE: Promiscuous email printing in Canon imageRunner Matthew E. Lauterbach
- Re: New whitepaper "The Phishing Guide" Brian Dessent
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Bob Toxen
- RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Jeremy Epstein
Saturday, 25 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Kurt Seifried
Monday, 27 September
- Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit iggy popal
Tuesday, 28 September
- Re: ICMP spoofed source tunneling Calum
- Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Adam Jacob Muller
Sunday, 26 September
- Re[2]: New whitepaper "The Phishing Guide" Karsten Heidrich
Monday, 27 September
- Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David Wilson
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Tracy Bost
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes gandalf_at_digital.net
- Code execution in Icecast 2.0.1 Luigi Auriemma
Monday, 27 September
- Re: New whitepaper "The Phishing Guide" Crispin Cowan
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Marco S Hyman
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Enrique A. Chaparro
- MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities Mandrake Linux Security Team
Tuesday, 28 September
- Re: Microsoft's GDI Detetection Tool faults the rxmr
- Vignette Application Portal Unauthenticated Diagnostics Advisories
Monday, 27 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Crispin Cowan
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Patrick J. Kobly
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David F. Skoll
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Coleman
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz
Monday, 27 September
- Multiple XSS Vulnerabilities in Wordpress 1.2 Thomas Waldegger
- MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs. Mandrake Linux Security Team
- Yahoo! Store Security Advisory Stuart Moore
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Simon
- Re: GDI Virus in the wild. GuidoZ
Monday, 27 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Matthew Keller
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Brian Kirkbride
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Casper Dik
Wednesday, 29 September
- Re: iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D Lise Moorveld
Tuesday, 28 September
- RE: Microsoft's GDI Detetection Tool faults Scott Jacobson
Wednesday, 29 September
- directory traversal in ParaChat Server 5.5 Donato Ferrante
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Dana Hudes
Wednesday, 29 September
- [security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass Boren, Rich (SSRT)
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Craig Paterson
- [CLA-2004:870] Conectiva Security Announcement - imlib Conectiva Updates
Wednesday, 29 September
- Php RFC1867 Upload Vuln. POC Released Stefano Di Paola
Tuesday, 28 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jason T. Miller
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Gareth Humphries
Wednesday, 29 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Colm Buckley
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David F. Skoll
Wednesday, 29 September
- RE: Promiscuous email printing in Canon imageRunner Eric McCarty
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Adam Shostack
Wednesday, 29 September
- Possible GDI Exploit Vector james_love_at_agilent.com
Monday, 27 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Adam Shostack
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Colm MacCarthaigh
Wednesday, 29 September
- [FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities Dominic Hargreaves
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart
Wednesday, 29 September
- Re: New whitepaper "The Phishing Guide" Philip Stoev
Monday, 27 September
- MSSQL 7.0 DoS securma_at_caramail.com
- Php RFC1867 Upload Vuln. POC Released Stefano Di Paola
Tuesday, 28 September
- RE: Microsoft's GDI Detetection Tool faults mgotts_at_2roads.com
Wednesday, 29 September
- [ GLSA 200409-35 ] Subversion: Metadata information leak Sune Kloppenborg Jeppesen
- Re: Default username/password pairs in ON Command CCM 5.x database backend, Sep 20 2004 2:24PM Sym Security
- Crash in Alpha Black Zero 1.04 Luigi Auriemma
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Casper Dik
Tuesday, 28 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Bruce Barnett
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Reed, Phillip C. (LNG-DAY)
- Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Aleksandar Milivojevic
- directory traversal in ParaChat Server 5.5 Donato Ferrante
Wednesday, 29 September
- [FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities Dominic Hargreaves
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes float_at_lefant.net
Tuesday, 28 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes trh
Thursday, 30 September
- Re: Promiscuous email printing in Canon imageRunner Felix Lindner
- Multiple vulnerabilities in w-agora forum Alexander Antipov
- [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak Martin Schulze
- TSL-2004-0050 - multi Trustix Security Advisor
- Multiple Vulnerabilities in Silent Storm Portal R00tCr4ck
- Unicornscan 0.4.2 robert_at_dyadsecurity.com
- Samba Security Announcement -- Potential Arbitrary File Access Gerald (Jerry) Carter
Tuesday, 28 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David Brodbeck
Thursday, 30 September
- Re: directory traversal in ParaChat Server 5.5 Donato Ferrante
Monday, 27 September
- Re: cdrecord local root exploit Jason T. Miller
Tuesday, 28 September
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David F. Skoll
Monday, 27 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Hugo van der Kooij
Wednesday, 29 September
- Re:[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories
Thursday, 30 September
- iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability customer service mailbox
Monday, 27 September
- RE: Diebold Global Election Management System (GEMS) Backdoor Geoff Vass

Last message date: Sep 30 2004
Archived on: Oct 05 2008 PDT