Bugtraq: by subject

@lex Guestbook (PHP) Include file
- Himeur Nourredine (Sep 26 2004)
@stake advisory: Lexar JumpDrive Secure Password Extraction
- Chris Wysopal (Sep 13 2004)
@stake advisory: Pingtel Xpressa Denial of Service
- Advisories (Sep 13 2004)
[ GLSA 200409-01 ] vpopmail: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 01 2004)
[ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy
- Thierry Carrez (Sep 01 2004)
[ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo()
- Thierry Carrez (Sep 02 2004)
[ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication
- Thierry Carrez (Sep 02 2004)
[ GLSA 200409-05 ] Gallery: Arbitrary command execution
- Sune Kloppenborg Jeppesen (Sep 02 2004)
[ GLSA 200409-07 ] xv: Buffer overflows in image handling
- Sune Kloppenborg Jeppesen (Sep 03 2004)
[ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely
- Sune Kloppenborg Jeppesen (Sep 03 2004)
[ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities
- Thierry Carrez (Sep 06 2004)
[ GLSA 200409-10 ] multi-gnome-terminal: Information leak
- Thierry Carrez (Sep 06 2004)
[ GLSA 200409-11 ] star: Suid root vulnerability
- Kurt Lieber (Sep 07 2004)
[ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows
- Thierry Carrez (Sep 08 2004)
[ GLSA 200409-13 ] LHa: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 08 2004)
[ GLSA 200409-14 ] Samba: Remote printing vulnerability
- Sune Kloppenborg Jeppesen (Sep 08 2004)
[ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin
- Dan Margolis (Sep 12 2004)
[ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 13 2004)
[ GLSA 200409-17 ] SUS: Local root vulnerability
- Sune Kloppenborg Jeppesen (Sep 14 2004)
[ GLSA 200409-18 ] cdrtools: Local root vulnerability in cdrecord if set SUID root
- Sune Kloppenborg Jeppesen (Sep 14 2004)
[ GLSA 200409-19 ] Heimdal: ftpd root escalation
- Sune Kloppenborg Jeppesen (Sep 16 2004)
[ GLSA 200409-20 ] mpg123: Buffer overflow vulnerability
- Thierry Carrez (Sep 16 2004)
[ GLSA 200409-21 ] Apache 2, mod_dav: Multiple vulnerabilities
- Thierry Carrez (Sep 16 2004)
[ GLSA 200409-24 ] Foomatic: Arbitrary command execution in foomatic-rip filter
- Joshua J. Berry (Sep 20 2004)
[ GLSA 200409-25 ] CUPS: Denial of service vulnerability
- Thierry Carrez (Sep 20 2004)
[ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities
- Thierry Carrez (Sep 20 2004)
[ GLSA 200409-27 ] glFTPd: Local buffer overflow vulnerability
- Thierry Carrez (Sep 21 2004)
[ GLSA 200409-28 ] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities
- Thierry Carrez (Sep 21 2004)
[ GLSA 200409-29 ] FreeRADIUS: Multiple Denial of Service vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 22 2004)
[ GLSA 200409-30 ] xine-lib: Multiple vulnerabilities
- Thierry Carrez (Sep 22 2004)
[ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability
- Sune Kloppenborg Jeppesen (Sep 23 2004)
[ GLSA 200409-32 ] getmail: Filesystem overwrite vulnerability
- Sune Kloppenborg Jeppesen (Sep 23 2004)
[ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm
- Thierry Carrez (Sep 27 2004)
[ GLSA 200409-35 ] Subversion: Metadata information leak
- Sune Kloppenborg Jeppesen (Sep 29 2004)
[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
- David F. Skoll (Sep 18 2004)
- advisories (Sep 17 2004)
[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
- David Wilson (Sep 27 2004)
- David F. Skoll (Sep 27 2004)
- David F. Skoll (Sep 26 2004)
- advisories (Sep 24 2004)
[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
- advisories (Sep 29 2004)
[ANNOUNCE] Apache HTTP Server 2.0.51 Released
- Sander Striker (Sep 15 2004)
[Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE]
- bashis (Sep 15 2004)
[CLA-2004:860] Conectiva Security Announcement - krb5
- Conectiva Updates (Sep 09 2004)
[CLA-2004:863] Conectiva Security Announcement - wv
- Conectiva Updates (Sep 10 2004)
[CLA-2004:864] Conectiva Security Announcement - kde
- Conectiva Updates (Sep 13 2004)
[CLA-2004:865] Conectiva Security Announcement - zlib
- Conectiva Updates (Sep 13 2004)
[CLA-2004:866] Conectiva Security Announcement - qt3
- Conectiva Updates (Sep 22 2004)
[CLA-2004:867] Conectiva Security Announcement - spamassassin
- Conectiva Updates (Sep 22 2004)
[CLA-2004:868] Conectiva Security Announcement - apache
- Conectiva Updates (Sep 23 2004)
[CLA-2004:869] Conectiva Security Announcement - kernel
- Conectiva Updates (Sep 27 2004)
[CLA-2004:870] Conectiva Security Announcement - imlib
- Conectiva Updates (Sep 28 2004)
[exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit
- admin_at_exploitwatch.org (Sep 17 2004)
[FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities
- Dominic Hargreaves (Sep 29 2004)
[FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities
- Dominic Hargreaves (Sep 29 2004)
[hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews
- Exoduks (Sep 02 2004)
[Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS
- Hat-Squad Security Team (Sep 27 2004)
[nisr@nextgenss.com: Patch available for multiple critical flaws in Oracle]
- David Ahmad (Sep 01 2004)
[OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)
- OpenPKG (Sep 13 2004)
[OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba)
- OpenPKG (Sep 15 2004)
[OpenPKG-SA-2004.041] OpenPKG Security Advisory (spamassassin)
- OpenPKG (Sep 15 2004)
[OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell)
- OpenPKG (Sep 15 2004)
[RLSA_01-2004] QNX PPPoEd local root vulnerabilities
- Julio Cesar Fort (Sep 05 2004)
[RLSA_02-2004] QNX Photon multiple buffer overflows
- Julio Cesar Fort (Sep 13 2004)
[RLSA_03-2004] QNX ftp client format string bug
- Julio Cesar Fort (Sep 13 2004)
[RLSA_04-2004] QNX crrtrap possible race condition vulnerability
- Julio Cesar Fort (Sep 13 2004)
[security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow
- Boren, Rich (SSRT) (Aug 31 2004)
[security bulletin] SSRT4739 rev.0 HP WebJetadmin arbitrary command execution
- Boren, Rich (SSRT) (Sep 16 2004)
[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass
- Boren, Rich (SSRT) (Sep 29 2004)
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory
- Martin Schulze (Sep 14 2004)
[SECURITY] [DSA 545-1] New cupsys packages fix denial of service
- Martin Schulze (Sep 15 2004)
[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities
- Martin Schulze (Sep 16 2004)
[SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows
- Martin Schulze (Sep 16 2004)
[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution
- Martin Schulze (Sep 16 2004)
[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution
- Martin Schulze (Sep 20 2004)
[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution
- Martin Schulze (Sep 21 2004)
[SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution
- Martin Schulze (Sep 22 2004)
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
- Martin Schulze (Sep 27 2004)
[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak
- Martin Schulze (Sep 30 2004)
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server
- SHATTER (Application Security, Inc.) (Sep 02 2004)
[SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability
- snsadv (Sep 07 2004)
[sudo-announce] Sudo version 1.6.8p1 now available (fwd)
- je_at_sekure.net (Sep 16 2004)
[Unpatched] Shell and Drag'n'Drop vulnerabilities
- http-equiv_at_excite.com (Sep 09 2004)
- Thor Larholm (Sep 03 2004)
[XSS] PHP-Nuke 7.4 AddMsg Bug
- Pierquinto Manco (Sep 05 2004)
[XSS] PHP-Nuke 7.4 Bugs
- Peter Lowe (Sep 08 2004)
- Blaine Elzey (Sep 05 2004)
[XSS] PHP-Nuke 7.4 DelAdmin Bug
- Pierquinto Manco (Sep 04 2004)
[XSS] PHP-Nuke 7.4 Newsletter Injection Bug
- Pierquinto Manco (Sep 05 2004)
[XSS] PHP-Nuke 7.4 Remote Privilege Escalation
- Pierquinto Manco (Sep 03 2004)
[XSS] PHP-Nuke 7.4 ViewAdmin Bug
- Pierquinto Manco (Sep 04 2004)
[XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug
- bima tampan (Sep 07 2004)
[XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug
- bima tampan (Sep 14 2004)
ADVISORY: http response splitting hole in Comersus shopping cart
- Maestro De-Seguridad (Aug 31 2004)
ADVISORY: http response splitting in snipsnap
- Maestro De-Seguridad (Sep 14 2004)
ADVISORY: security hole (http response splitting) in snitz forums 2000
- Maestro De-Seguridad (Sep 16 2004)
And More Advanced SQL Injection...
- Stefano Di Paola (Sep 20 2004)
AOL Groups/AIM Information Disclosure
- Link Linkovich (Sep 14 2004)
Apple, Apple Remote Desktop client
- Adam Shostack (Sep 05 2004)
Apple, Apple Remote Desktop client [Multiple vulnerabilities]
- J�r�me (Sep 07 2004)
aspWebCalendar /aspWebAlbum: SQL injection
- Steven (Sep 25 2004)
- Pedro Sanches (Sep 23 2004)
Axis Network Camera and Video Server Security Advisory
- product-security_at_axis.com (Sep 07 2004)
BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included]
- J�r�me (Sep 09 2004)
Broadcast crash in Chatman 1.5.1 RC1
- Luigi Auriemma (Sep 27 2004)
Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004)
- Luigi Auriemma (Sep 21 2004)
Broadcast shutdown in Call of Duty 1.4
- Luigi Auriemma (Sep 05 2004)
Buffer overflow in Zinf 2.2.1 for Win32
- Luigi Auriemma (Sep 24 2004)
Buffer overflow in Zinf 2.2.1 for Win32+exploit
- iggy popal (Sep 27 2004)
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution [MS04-028]
- J�r�me (Sep 14 2004)
Bug XSS in PsNews 1.1
- Michal Blaszczak (Sep 05 2004)
- Michal Blaszczak (Sep 05 2004)
CA UniCenter Management Portal Username Enumeration Vulnerability
- thomas adams (Sep 21 2004)
CAU-EX-2004-0002: cdrecord-suidshell.sh
- I)ruid (Sep 10 2004)
cdrdao local root exploit
- 3APA3A (Sep 07 2004)
- J�r�me (Sep 05 2004)
cdrecord local root exploit
- Jason T. Miller (Sep 27 2004)
- Dr Andrew C Aitchison (Sep 27 2004)
- Jason T. Miller (Sep 16 2004)
- Coleman (Sep 15 2004)
- Marcus Meissner (Sep 15 2004)
- Volker Kuhlmann (Sep 13 2004)
- Sean Davis (Sep 13 2004)
- Sean Davis (Sep 12 2004)
- newbug Tseng (Sep 09 2004)
Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit
- J�r�me (Sep 07 2004)
CESA-2004-004: libXpm
- chris_at_scary.beasts.org (Sep 15 2004)
CESA-2004-005: gtk+ XPM decoder
- chris_at_scary.beasts.org (Sep 15 2004)
Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation
- Cisco Systems Product Security Incident Response Team (Aug 31 2004)
CoD United Offensive boom boom
- Luigi Auriemma (Sep 18 2004)
Code execution in Icecast 2.0.1
- Luigi Auriemma (Sep 28 2004)
Correction to latest Colsaire advisories
- advisories (Sep 24 2004)
- advisories (Sep 16 2004)
- David Litchfield (Sep 15 2004)
- Andreas Marx (Sep 15 2004)
- advisories (Sep 15 2004)
- 3APA3A (Sep 13 2004)
Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME field quoting issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME field whitespace issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
- Greg A. Woods (Sep 18 2004)
- Borja Marcos (Sep 17 2004)
- David F. Skoll (Sep 15 2004)
- David Covin (Sep 15 2004)
- David F. Skoll (Sep 14 2004)
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue
- advisories (Sep 14 2004)
Corsaire Security Advisory - Multiple vendor MIME separator issue
- advisories (Sep 14 2004)
Crash in Alpha Black Zero 1.04
- Luigi Auriemma (Sep 29 2004)
Cross-Site Scripting Vulnerability in Newtelligence DasBlog
- Dominick Baier (Sep 01 2004)
- Dominick Baier (Aug 31 2004)
CuteNews News.txt writable to world
- Albert Puigsech Galicia (Aug 30 2004)
Debian netkit telnetd vulnerability
- Matt Zimmerman (Sep 26 2004)
- Solar Designer (Sep 20 2004)
- Michal Zalewski (Sep 18 2004)
Default username/password pairs in ON Command CCM 5.x database backend
- Jonas Olsson (Sep 20 2004)
Default username/password pairs in ON Command CCM 5.x database backend, Sep 20 2004 2:24PM
- Sym Security (Sep 29 2004)
Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)
- Jedi/Sector One (Sep 05 2004)
Diebold Global Election Management System (GEMS) Backdoor
- Geoff Vass (Sep 27 2004)
- Adam Shostack (Sep 27 2004)
- Crispin Cowan (Sep 27 2004)
- Paul Wouters (Sep 27 2004)
Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
- Hugo van der Kooij (Sep 27 2004)
- David Brodbeck (Sep 28 2004)
- Aleksandar Milivojevic (Sep 28 2004)
- Craig Paterson (Sep 28 2004)
- David F. Skoll (Sep 28 2004)
- Adam Jacob Muller (Sep 28 2004)
- Jeremy Epstein (Sep 27 2004)
- David Brodbeck (Sep 27 2004)
Diebold Global Election Management System (GEMS) Backdoor Account
- Brian Kirkbride (Sep 27 2004)
Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to
- Gareth Humphries (Sep 28 2004)
Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
- David F. Skoll (Sep 28 2004)
- trh (Sep 28 2004)
- Polazzo Justin (Sep 28 2004)
- float_at_lefant.net (Sep 29 2004)
- Reed, Phillip C. (LNG-DAY) (Sep 28 2004)
- David Schwartz (Sep 28 2004)
- Bruce Barnett (Sep 28 2004)
- Casper Dik (Sep 29 2004)
- Seth Breidbart (Sep 28 2004)
- Colm MacCarthaigh (Sep 27 2004)
- Adam Shostack (Sep 28 2004)
- David F. Skoll (Sep 28 2004)
- Colm Buckley (Sep 29 2004)
- Jason T. Miller (Sep 28 2004)
- Dana Hudes (Sep 28 2004)
- Casper Dik (Sep 28 2004)
- Matthew Keller (Sep 27 2004)
- Simon (Sep 28 2004)
- David Schwartz (Sep 28 2004)
- Coleman (Sep 28 2004)
- Patrick J. Kobly (Sep 27 2004)
- Enrique A. Chaparro (Sep 27 2004)
- Marco S Hyman (Sep 27 2004)
- gandalf_at_digital.net (Sep 28 2004)
- Tracy Bost (Sep 28 2004)
- Kurt Seifried (Sep 25 2004)
- Bob Toxen (Sep 27 2004)
- ERACC (Sep 26 2004)
- Nicholas Knight (Sep 26 2004)
- Ryan_Ward_at_Dell.com (Sep 27 2004)
- Greg A. Woods (Sep 27 2004)
- Seth Breidbart (Sep 26 2004)
- Yoav Nir (Sep 26 2004)
- Nick Knouf (Sep 26 2004)
- Mike Healan (Sep 26 2004)
- Polazzo Justin (Sep 23 2004)
- Claudius Li (Sep 24 2004)
- Jeremy Epstein (Sep 23 2004)
- Jose Rey (Sep 25 2004)
- Heikki Korpela (Sep 24 2004)
- Atom 'Smasher' (Sep 22 2004)
- David Querin (Sep 22 2004)
- Barry Fitzgerald (Sep 22 2004)
- Jaeson Schultz (Sep 22 2004)
- Jacob Appelbaum (Sep 22 2004)
- Marvin Bellamy (Sep 22 2004)
- Mike Ely (Sep 22 2004)
- Rainer Duffner (Sep 22 2004)
- Hollis Johnson (Sep 22 2004)
- Lorne J. Leitman (Sep 22 2004)
- Homer (Sep 22 2004)
- Jay Hennigan (Sep 22 2004)
- Gene Cronk (Sep 22 2004)
- steve menard (Sep 22 2004)
- Gene Cronk (Sep 22 2004)
- Jaeson Schultz (Sep 22 2004)
- Craig Paterson (Sep 22 2004)
- Polazzo Justin (Sep 22 2004)
- Polazzo Justin (Sep 22 2004)
- pressinfo_at_diebold.com (Sep 21 2004)
- J�r�me (Aug 31 2004)
directory traversal in ParaChat Server 5.5
- Donato Ferrante (Sep 30 2004)
- Donato Ferrante (Sep 28 2004)
- Donato Ferrante (Sep 29 2004)
Directory Traversal Vulnerability in TwinFTP Server allows overwriting
- J�r�me (Sep 12 2004)
Dynalink routers backdoor?
- fabio (Sep 02 2004)
Engenio/LSI Logic controllers denial of service/data corruption
- Jedi/Sector One (Sep 04 2004)
ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability
- Sune Kloppenborg Jeppesen (Sep 10 2004)
Example of JPG Exploit & Shellcode
- javier falbo (Sep 22 2004)
Exploit: AIM Exploit (Ignore Previous Post)
- John Bissell (Sep 01 2004)
F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE]
- J�r�me (Sep 09 2004)
FreeBSD kernel buffer overflow
- Wesley Shields (Sep 17 2004)
- Tim Newsham (Sep 17 2004)
- gerarra_at_tin.it (Sep 16 2004)
FreeBSD Security Advisory FreeBSD-SA-04:14.cvs
- FreeBSD Security Advisories (Sep 20 2004)
Freeze in Pigeon Server 3.02.0143
- Luigi Auriemma (Sep 16 2004)
FUll Path Disclosure in YABBSE
- Ahmad Muammar (Sep 04 2004)
Fwd: Theo's presentation on exploit prevention
- Bas Alberts (Sep 15 2004)
Gadu-Gadu (all versions with image-send feature) Heap Overflow
- Sec-Labs Team (Sep 12 2004)
GDI Virus in the wild.
- GuidoZ (Sep 28 2004)
- Gerry Eisenhaur (Sep 27 2004)
- Ben (Sep 26 2004)
glFTPd local stack buffer overflow
- Bloody_A (Sep 21 2004)
- CoKi (Sep 18 2004)
Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4
- Pierquinto Manco (Sep 06 2004)
GoogleToolbar:About -- Allows Script Injection
- Rafel Ivgi, The-Insider (Sep 18 2004)
- ViPeR (Sep 17 2004)
HTTP Response Splitting and SQL injection in megabbs forum
- PD9 Software (Sep 26 2004)
ICMP spoofed source tunneling
- Calum (Sep 28 2004)
- raiblehugo_at_hotmail.com (Sep 24 2004)
- fenfire_at_abwesend.de (Sep 22 2004)
- sin (Sep 23 2004)
- Dave Paris (Sep 22 2004)
- Tim Newsham (Sep 22 2004)
- fenfire_at_abwesend.de (Sep 22 2004)
- Max Tulyev (Sep 21 2004)
iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability
- customer service mailbox (Sep 15 2004)
iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability
- customer service mailbox (Sep 16 2004)
iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D
- Lise Moorveld (Sep 29 2004)
iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability
- customer service mailbox (Sep 22 2004)
iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability
- customer service mailbox (Sep 27 2004)
iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability
- customer service mailbox (Sep 30 2004)
IE6 + XP SP2 Vulnerability
- cns (Sep 15 2004)
Important message to Bugtraq Subscribers!
- Daniel Bertrand (Sep 17 2004)
Inkra 1504GX DoS vulnerability in conducting IP protocol
- felix zhou (Sep 13 2004)
Insecure file permissions in the Firefox browser for Linux >= v0.9
- Max (Sep 13 2004)
Insecure Temporary File Creation Vulnerability in Net-Acct
- J�r�me (Sep 07 2004)
IPv4 fragmentation --> The Rose Attack
- Gandalf The White (Sep 26 2004)
JPEG Processing BOF Proof Of Concept
- Cassidy Macfarlane (Sep 17 2004)
- GulfTech Security (Sep 16 2004)
Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration
- J�r�me (Sep 02 2004)
Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
- Ron DuFresne (Sep 13 2004)
- David S. Miller (Sep 11 2004)
- Wolfpaw - Dale Corse (Sep 11 2004)
- Wolfpaw - Dale Corse (Sep 11 2004)
- David S. Miller (Sep 11 2004)
Linux OpenExchange - cleartext rootpw in swap
- Joshua Goodall (Sep 02 2004)
- Valdis.Kletnieks_at_vt.edu (Sep 02 2004)
Local root compromise possible with getmail
- David Watson (Sep 19 2004)
Macromedia Products Not Affected by MS JPEG/GDIPlus Issue
- Macromedia Security Zone (Sep 22 2004)
MailWorks Professional - Authentication Bypass
- headpimp_at_pimp-industries.com (Sep 02 2004)
- headpimp_at_pimp-industries.com (Sep 02 2004)
Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability.
- Tim Broeker (Sep 19 2004)
- khoaimi (Sep 17 2004)
McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE]
- J�r�me (Sep 14 2004)
MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs.
- Mandrake Linux Security Team (Sep 27 2004)
MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Aug 31 2004)
MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability
- Mandrake Linux Security Team (Sep 07 2004)
MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability
- Mandrake Linux Security Team (Sep 07 2004)
MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability
- Mandrake Linux Security Team (Sep 07 2004)
MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Sep 13 2004)
MDKSA-2004:093 - Updated squid packages fix DoS vulnerability
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities
- Mandrake Linux Security Team (Sep 17 2004)
MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:097 - Updated cups packages fix DoS vulnerability
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:099 - Updated XFree86 packages fix libXpm overflow vulnerabilities
- Mandrake Linux Security Team (Sep 15 2004)
MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities
- Mandrake Linux Security Team (Sep 22 2004)
MDKSA-2004:101 - Updated webmin packages fix vulnerabilities
- Mandrake Linux Security Team (Sep 22 2004)
MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities
- Mandrake Linux Security Team (Sep 22 2004)
MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities
- Mandrake Linux Security Team (Sep 27 2004)
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
- Polazzo Justin (Sep 16 2004)
- Parks, Matt (Sep 16 2004)
- Gary Warner (Sep 16 2004)
- Angelidis, Fotis(NSASOUDABAY) (Sep 16 2004)
- Polazzo Justin (Sep 16 2004)
- sheep explode (Sep 16 2004)
- Polazzo Justin (Sep 15 2004)
- Nick D. (Sep 14 2004)
Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability
- J�r�me (Sep 14 2004)
Microsoft WordPerfect 5.x Converter Heap Overflow
- NGSSoftware Insight Security Research Advisory (Sep 14 2004)
- NGSSoftware Insight Security Research (Sep 16 2004)
Microsoft's GDI Detetection Tool faults
- mgotts_at_2roads.com (Sep 28 2004)
- Scott Jacobson (Sep 28 2004)
- the rxmr (Sep 28 2004)
- albatross_at_tim.it (Sep 27 2004)
- Andreas Marx (Sep 26 2004)
- Dowling, Gabrielle (Sep 25 2004)
- Gadi Evron (Sep 25 2004)
- John Bissell (Sep 24 2004)
- albatross_at_tim.it (Sep 24 2004)
MITKRB5-SA-2004-002: double-free vulnerabilities
- Tom Yu (Aug 31 2004)
Motorola Wireless Router WR850G Authentication Circumvention
- Daniel Fabian (Sep 23 2004)
- Daniel Fabian (Sep 23 2004)
mpg123 buffer overflow vulnerability
- Davide Del Vecchio (Sep 06 2004)
MSInfo Buffer Overflow
- E.Kellinis (Aug 30 2004)
MSSQL 7.0 DoS
- securma_at_caramail.com (Sep 27 2004)
Multiple Full Disclosure Path in postnuke 0.750 phoenix
- FAiN182 (Sep 18 2004)
- J�r�me (Sep 19 2004)
Multiple vulnerabilities 1n BBS E-Market Professional
- Ahmad Muammar (Sep 08 2004)
Multiple vulnerabilities in ActivePost Standard 3.1
- Luigi Auriemma (Sep 23 2004)
Multiple Vulnerabilities In EmuLive Server4
- GulfTech Security (Sep 20 2004)
Multiple vulnerabilities in Icewarp Web Mail 5.2.7
- ShineShadow (Sep 10 2004)
Multiple Vulnerabilities in phpScheduleIt
- Nick Korbel (Sep 17 2004)
Multiple Vulnerabilities In phpWebsite
- GulfTech Security (Aug 31 2004)
Multiple Vulnerabilities in Silent Storm Portal
- R00tCr4ck (Sep 30 2004)
Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products
- Mike Sues (Sep 22 2004)
Multiple vulnerabilities in w-agora forum
- Alexander Antipov (Sep 30 2004)
Multiple XSS vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 02 2004)
Multiple XSS Vulnerabilities in Wordpress 1.2
- Thomas Waldegger (Sep 27 2004)
MyWebServer 1.0.3
- nekd0 (Sep 26 2004)
Netscape NSS Library Vulnerability Affects Sun Java Enterprise System
- J�r�me (Sep 21 2004)
New Data Wipe Tools
- Altheide, Cory B. (IARC) (Sep 13 2004)
- Derek Martin (Sep 11 2004)
- Brendan Murray (Sep 10 2004)
- Jake Appelbaum (Sep 10 2004)
- Thomas C. Greene (Sep 10 2004)
- Thomas C. Greene (Sep 08 2004)
NEW GDI+ JPEG Remote Exploit
- John Bissell (Sep 22 2004)
New Macromedia Security Zone Bulletins Posted
- Macromedia Security Zone (Sep 23 2004)
New Macromedia Security Zone Bulletins Postede
- Macromedia Security Zone (Sep 23 2004)
New Mozilla, Firefox and Thunderbird releases fix critical security issues
- Ga�l Delalleau (Sep 15 2004)
New security tools and papers released
- shadown (Sep 01 2004)
New whitepaper "The Phishing Guide"
- Philip Stoev (Sep 29 2004)
- Crispin Cowan (Sep 27 2004)
- Karsten Heidrich (Sep 26 2004)
- Brian Dessent (Sep 27 2004)
- Juraj Bednar (Sep 27 2004)
- Chip Andrews (Sep 27 2004)
- Greg A. Woods (Sep 27 2004)
- Aleksandar Milivojevic (Sep 27 2004)
- Daniel Veditz (Sep 24 2004)
- Dehner, Benjamin T. (Sep 24 2004)
- Seth Arnold (Sep 23 2004)
- Aleksandar Milivojevic (Sep 23 2004)
- Gunter Ollmann (NGS) (Sep 22 2004)
New XSS vulnerabilities in paFileDB 3.1 final
- alireza hassani (Sep 25 2004)
Off-by-one bug in Halo 1.04
- Luigi Auriemma (Sep 09 2004)
OpenCA Security Advisory: Cross Site Scripting vulnerability
- Martin Bartosch (Sep 06 2004)
OpenOffice World-Readable Temporary Files Disclose Files to Local Users
- J�r�me (Sep 10 2004)
OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability
- please_reply_to_security_at_sco.com (Aug 31 2004)
Opera DOS
- Stevo (Sep 01 2004)
Password Protect XSS and SQL-Injection vulnerabilities.
- Criolabs (Aug 30 2004)
Patch available for IBM DB2 Universal Database flaws
- NGSSoftware Insight Security Research (Sep 01 2004)
Patch available for multiple critical flaws in Oracle
- NGSSoftware Insight Security Research (Aug 31 2004)
Php RFC1867 Upload Vuln. POC Released
- Stefano Di Paola (Sep 27 2004)
- Stefano Di Paola (Sep 29 2004)
PHP Vulnerability N. 1
- Stefano Di Paola (Sep 15 2004)
Php Vulnerability N. 2
- Stefano Di Paola (Sep 15 2004)
PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch
- Pierquinto Manco (Sep 05 2004)
Pinnacle ShowCenter 1.51 possible DoS
- J�r�me (Sep 21 2004)
Pinnacle ShowCenter Skin Denial of Service
- Marc Ruef (Sep 21 2004)
Posible Inclusion File in Perl Desk
- Nikyt0x Argentina (Sep 12 2004)
Posible security bug in phpMyWebhosting
- Udo Mueller (Sep 20 2004)
Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0
- Matthias Wimmer (Sep 20 2004)
Possible GDI Exploit Vector
- james_love_at_agilent.com (Sep 29 2004)
problem in voip environment
- Pasquiet Loic (M.) (Sep 11 2004)
Promiscuous email printing in Canon imageRunner
- Felix Lindner (Sep 30 2004)
- Eric McCarty (Sep 29 2004)
- Matthew E. Lauterbach (Sep 27 2004)
- Chip Mefford (Sep 24 2004)
- Andrew Daviel (Sep 23 2004)
QNX crrtrap possible race condition vulnerability
- J�r�me (Sep 13 2004)
Rainbow tables for LM/NTLMv1 authentication
- Hidenobu Seki (Sep 14 2004)
Remote buffer overflow in Apache mod_ssl when reverse proxying SSL
- 3APA3A (Sep 13 2004)
- J�r�me (Sep 10 2004)
Remote buffer overflow in MDaemon IMAP and SMTP server
- pigrelax (Sep 22 2004)
RhinoSoft DNS4ME HTTP Server Vulnerabilities
- GulfTech Security (Sep 18 2004)
RsyncX vulnerabilities
- Matt Johnston (Sep 17 2004)
SA04-002 - Apache config file env variable buffer overflow
- jonas.thambert_at_pts.se (Sep 15 2004)
Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808)
- Gerald (Jerry) Carter (Sep 13 2004)
Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd
- J�r�me (Aug 31 2004)
Samba nmbd Invalid Length Denial of Service Vulnerability [iDEFENSE]
- J�r�me (Sep 13 2004)
Samba Security Announcement -- Potential Arbitrary File Access
- Gerald (Jerry) Carter (Sep 30 2004)
Security Center and Windows XP clients in domain
- Thor (Aug 31 2004)
- David Webster (Aug 31 2004)
Security Center and Windows XP clients in domain, 20040831062712.31317.qmail@www.securityfocus.com
- Sym Security (Sep 01 2004)
Serious Security Issue in Windows XP SP2's Firewall
- Andreas Marx (Sep 19 2004)
Serv-U up to 5.2 Denial of Service
- Patrick (Sep 11 2004)
serverview 3.0 - insecure file permissions
- Rene (Sep 06 2004)
Site News Authentication Error May Let Local Users Add Messages
- J�r�me (Sep 05 2004)
SMC7004VWBR / SMC7008ABR "spoofing" vulnerability.
- Jimmy Scott (Sep 15 2004)
SQL injection in BroadBoard Instant ASP Message Board
- pigrelax (Sep 26 2004)
SQL-Injection in Subjects 2.0 for Postnuke
- Criolabs (Sep 09 2004)
SSHD / AnonCVS Nastyness
- Dragos Ruiu (Aug 31 2004)
Sudo Exploit by Rosiello Security
- Angelo Rosiello (Sep 18 2004)
SUS 2.0.2 local root vulnerability
- LSS Security (Sep 14 2004)
SUSE Security Announcement: apache2 (SUSE-SA:2004:030)
- Sebastian Krahmer (Sep 06 2004)
SUSE Security Announcement: apache2 (SUSE-SA:2004:032)
- Ludwig Nussel (Sep 15 2004)
SUSE Security Announcement: cups (SUSE-SA:2004:031)
- Sebastian Krahmer (Sep 15 2004)
SUSE Security Announcement: kernel (SUSE-SA:2004:028)
- Paul Starzetz (Sep 02 2004)
- Thomas Biege (Sep 01 2004)
SUSE Security Announcement: zlib (SUSE-SA:2004:029)
- Thomas Biege (Sep 02 2004)
Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues
- Sym Security (Sep 22 2004)
The ArpSucker is b0rn! Be yourself, be the net.
- Alpt (Sep 13 2004)
Tool announcement: fakebust
- Michal Zalewski (Sep 19 2004)
TSL-2004-0045 - kerberos5
- Trustix Security Advisor (Sep 02 2004)
TSL-2004-0046 - multi
- Trustix Security Advisor (Sep 14 2004)
TSL-2004-0050 - multi
- Trustix Security Advisor (Sep 30 2004)
TSLSA-2004-0047 - multi
- Trustix Security Advisor (Sep 16 2004)
TSLSA-2004-0049 - apache
- Trustix Security Advisor (Sep 23 2004)
Unicornscan 0.4.2
- robert_at_dyadsecurity.com (Sep 30 2004)
UPDATE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities
- Sune Kloppenborg Jeppesen (Sep 03 2004)
Vignette Application Portal Unauthenticated Diagnostics
- Advisories (Sep 28 2004)
Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code)
- kers0r (Sep 17 2004)
Vulnerabilities in TUTOS
- Joxean Koret (Sep 18 2004)
- Joxean Koret (Sep 18 2004)
Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
- Michael Wilson, Contractor (Sep 17 2004)
- Chris Norton (Sep 17 2004)
- Harrison Gladden (Sep 16 2004)
- Michael Scheidell (Sep 15 2004)
WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code
- J�r�me (Sep 01 2004)
wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities
- Paul Johnston (Sep 15 2004)
- Paul Johnston (Sep 16 2004)
www.proboards.com / YaBB XSS Vuln
- GulfTech Security (Sep 16 2004)
- Patrick Clinger (Sep 17 2004)
- admin_at_leetflash.com (Sep 15 2004)
XSA-2004-4: multiple string overflows
- Michael Roitzsch (Sep 07 2004)
XSA-2004-5: heap overflow in DVD subpicture decoder
- Michael Roitzsch (Sep 06 2004)
Yahoo! Store Security Advisory
- Stuart Moore (Sep 27 2004)
Zyxel Prestige 681 SDSL router information leak
- Przemyslaw Frasunek (Sep 13 2004)