Bugtraq: by subject

-==phpBB 2.0.12 Full path disclosure==-
- HaCkZaTaN (Feb 26 2005)
3com 3CDaemon FTP "USER" Remote BOverflow POC
- Hat-Squad Security Team (Feb 18 2005)
3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow
- class 101 (Feb 18 2005)
7a69Adv#19 - ZipGenius unpack path disclosure
- Albert Puigsech Galicia (Feb 02 2005)
7a69Adv#20 - ZipGenius unpack one-folder path disclosure
- Albert Puigsech Galicia (Feb 02 2005)
7a69Adv#21 - WinRAR unpack one-folder path disclosure
- Albert Puigsech Galicia (Feb 02 2005)
[ GLSA 200502-01 ] FireHOL: Insecure temporary file creation
- Matthias Geerdsen (Feb 01 2005)
[ GLSA 200502-02 ] UW IMAP: CRAM-MD5 authentication bypass
- Sune Kloppenborg Jeppesen (Feb 02 2005)
[ GLSA 200502-03 ] enscript: Multiple vulnerabilities
- Thierry Carrez (Feb 02 2005)
[ GLSA 200502-04 ] Squid: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Feb 02 2005)
[ GLSA 200502-05 ] Newspost: Buffer overflow vulnerability
- Luke Macken (Feb 02 2005)
[ GLSA 200502-06 ] LessTif: Multiple vulnerabilities in libXpm
- Thierry Carrez (Feb 06 2005)
[ GLSA 200502-07 ] OpenMotif: Multiple vulnerabilities in libXpm
- Thierry Carrez (Feb 07 2005)
[ GLSA 200502-08 ] PostgreSQL: Local privilege escalation
- Luke Macken (Feb 07 2005)
[ GLSA 200502-09 ] Python: Arbitrary code execution through SimpleXMLRPCServer
- Thierry Carrez (Feb 08 2005)
[ GLSA 200502-10 ] pdftohtml: Vulnerabilities in included Xpdf
- Matthias Geerdsen (Feb 09 2005)
[ GLSA 200502-11 ] Mailman: Directory traversal vulnerability
- Sune Kloppenborg Jeppesen (Feb 10 2005)
[ GLSA 200502-12 ] Webmin: Information leak in Gentoo binary package
- Thierry Carrez (Feb 11 2005)
[ GLSA 200502-13 ] Perl: Vulnerabilities in perl-suid wrapper
- Thierry Carrez (Feb 11 2005)
[ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability
- Sune Kloppenborg Jeppesen (Feb 13 2005)
[ GLSA 200502-15 ] PowerDNS: Denial of Service vulnerability
- Matthias Geerdsen (Feb 13 2005)
[ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability
- Luke Macken (Feb 13 2005)
[ GLSA 200502-17 ] Opera: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Feb 14 2005)
[ GLSA 200502-18 ] VMware Workstation: Untrusted library search path
- Thierry Carrez (Feb 14 2005)
[ GLSA 200502-19 ] PostgreSQL: Buffer overflows in PL/PgSQL parser
- Sune Kloppenborg Jeppesen (Feb 14 2005)
[ GLSA 200502-20 ] Emacs, XEmacs: Format string vulnerabilities in movemail
- Thierry Carrez (Feb 15 2005)
[ GLSA 200502-21 ] lighttpd: Script source disclosure
- Thierry Carrez (Feb 15 2005)
[ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability
- Matthias Geerdsen (Feb 16 2005)
[ GLSA 200502-23 ] KStars: Buffer overflow in fliccd
- Sune Kloppenborg Jeppesen (Feb 16 2005)
[ GLSA 200502-24 ] Midnight Commander: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Feb 17 2005)
[ GLSA 200502-25 ] Squid: Denial of Service through DNS responses
- Sune Kloppenborg Jeppesen (Feb 18 2005)
[ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability
- Sune Kloppenborg Jeppesen (Feb 18 2005)
[ GLSA 200502-27 ] gFTP: Directory traversal vulnerability
- Matthias Geerdsen (Feb 19 2005)
[ GLSA 200502-28 ] PuTTY: Remote code execution
- Luke Macken (Feb 21 2005)
[ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities
- Matthias Geerdsen (Feb 23 2005)
[ GLSA 200502-30 ] cmd5checkpw: Local password leak vulnerability
- Thierry Carrez (Feb 25 2005)
[ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4
- Denis Jedig (Feb 03 2005)
- laurent oudot (Feb 03 2005)
[ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie
- Scovetta Labs (Feb 16 2005)
[ Security Bulletin] SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service (DoS)
- Boren, Rich (SSRT) (Feb 01 2005)
[CLA-2005:924] Conectiva Security Announcement - XFree86
- Conectiva Updates (Feb 14 2005)
[CLA-2005:925] Conectiva Security Announcement - evolution
- Conectiva Updates (Feb 16 2005)
[Contact] Motorola broadband appliance team?
- Grzegorz Cegielski (Feb 07 2005)
[FLSA-2005:1906] Updated abiword packages fix security issue
- Dominic Hargreaves (Feb 09 2005)
[FLSA-2005:1943] Updated libpng resolves security vulnerabilities
- Dominic Hargreaves (Feb 09 2005)
[FLSA-2005:1944] GNOME VFS updates address extfs vulnerability
- Marc Deslauriers (Feb 20 2005)
[FLSA-2005:1945] Updated sox packages fix buffer overflows
- Marc Deslauriers (Feb 20 2005)
[FLSA-2005:2005] Updated gdk-pixbuf packages fix security flaws
- Marc Deslauriers (Feb 23 2005)
[FLSA-2005:2043] Updated zlib package fixes security issues
- Marc Deslauriers (Feb 23 2005)
[FLSA-2005:2058] Updated cdrtools packages fix a security issue
- Marc Deslauriers (Feb 20 2005)
[FLSA-2005:2137] Updated cyrus-sasl resolves security vulnerabilities
- Dominic Hargreaves (Feb 17 2005)
[FLSA-2005:2187] Updated freeradius packages fix security flaws
- Marc Deslauriers (Feb 01 2005)
[FLSA-2005:2188] Updated gaim package resolves security issues
- Marc Deslauriers (Feb 10 2005)
[FLSA-2005:2252] Updated iptables packages resolve security issues
- Marc Deslauriers (Feb 10 2005)
[FLSA-2005:2255] Updated zip package fixes security issue
- Marc Deslauriers (Feb 01 2005)
[FLSA-2005:2272] Updated unarj package fixes security issue
- Marc Deslauriers (Feb 01 2005)
[FLSA-2005:2336] Updated kernel packages fix security issues
- Marc Deslauriers (Feb 24 2005)
[FLSA-2005:2343] Updated vim packages fix security issues
- Marc Deslauriers (Feb 23 2005)
[FLSA-2005:2352] Updated Xpdf package fixes security issues
- Marc Deslauriers (Feb 10 2005)
[FLSA-2005:2353] Updated gpdf package fixes security issues
- Marc Deslauriers (Feb 10 2005)
[Full Disclosure] Using DHTML XSS to launch HHCTRL exploit
- Valentin Avram (Feb 16 2005)
[Full-Disclosure] [ GLSA 200501-40 ] ngIRCd: Buffer overflow
- qobaiashi (Feb 02 2005)
[Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
- exon (Feb 02 2005)
- Trog (Feb 01 2005)
- Darren Bounds (Feb 02 2005)
- Dack (Feb 01 2005)
- Trog (Feb 01 2005)
[Full-Disclosure] Fireflashing [Firefox 1.0]
- Jelmer Kuperus (Feb 12 2005)
[Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability
- Andres Tarasco (Feb 19 2005)
[Fwd: [arkeia-announce] Release of Arkeia Network Backup 5.3.5 fixes security issue]
- Maciej Bogucki (Feb 23 2005)
[hackgen-2005-#003] - SQL injection bugs in DCP-Portal
- Exoduks (Feb 15 2005)
[Hat-Squad] Findjmp2 Tool
- Hat-Squad Security Team (Feb 19 2005)
[KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi
- Dirk Mueller (Feb 15 2005)
- Dirk Mueller (Feb 15 2005)
[Linux kernel ipv6_setsockopt integer overflow]
- Dan Yefimov (Feb 03 2005)
- qobaiashi (Feb 03 2005)
[lists] Combining Hashes
- Elliott B�ck (Feb 18 2005)
[NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities
- John Cobb (Feb 14 2005)
[NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability
- John Cobb (Feb 15 2005)
[NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection
- John Cobb (Feb 21 2005)
[OSX Finder] DS_Store arbitrary file overwrite vulnerability.
- Vade 79 (Feb 06 2005)
[PersianHacker.NET 200502-05] WWWoard passwd
- Andrew guess (Feb 08 2005)
- Pedram Hayati (Feb 05 2005)
[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability
- PersianHacker Team (Feb 16 2005)
[PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection
- PersianHacker Team (Feb 17 2005)
[SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection
- pokley (Feb 20 2005)
[SCL-2005.002] - IDN Feature Workaround via proxy.pac
- Scovetta, Michael V (Feb 08 2005)
[Security Bulletin] - SSRT4883 HP-UX ftpd remote privileged access
- Boren, Rich (SSRT) (Feb 09 2005)
[Security Bulletin] HP Tru64 Unix Mozilla Application Suite 1.7.3 Remote Denial of Service (DoS)
- Boren, Rich (SSRT) (Feb 07 2005)
[Security Bulletin] SSRT4694 HP-UX ftpd remote unauthorized access
- Boren, Rich (SSRT) (Feb 24 2005)
[Security Bulletin] SSRT4861 rev.0 - HP-UX BIND9.2.0 remote Denial of Service (DoS)
- Boren, Rich (SSRT) (Feb 10 2005)
[Security Bulletin] SSRT5893 rev.0 - HP Web-enabled Management Software Remote Buffer Overflow
- Boren, Rich (SSRT) (Feb 16 2005)
[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities
- Martin Schulze (Feb 01 2005)
[SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution
- Martin Schulze (Feb 01 2005)
[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions
- Martin Schulze (Feb 02 2005)
[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access
- Martin Schulze (Feb 04 2005)
[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading
- Martin Schulze (Feb 04 2005)
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
- Martin Schulze (Feb 04 2005)
[SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities
- Martin Schulze (Feb 07 2005)
[SECURITY] [DSA 670-1] New emacs20 packages fix arbitrary code execution
- Martin Schulze (Feb 08 2005)
[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution
- Martin Schulze (Feb 08 2005)
[SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution
- Martin Schulze (Feb 09 2005)
[SECURITY] [DSA 673-1] New evolution packages fix arbitrary code execution as root
- Martin Schulze (Feb 10 2005)
[SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities
- Martin Schulze (Feb 10 2005)
[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities
- Martin Schulze (Feb 10 2005)
[SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities
- Martin Schulze (Feb 21 2005)
[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit
- Martin Schulze (Feb 10 2005)
[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root
- Martin Schulze (Feb 11 2005)
[SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution
- Martin Schulze (Feb 11 2005)
[SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service
- Martin Schulze (Feb 11 2005)
[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files
- Martin Schulze (Feb 14 2005)
[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability
- Martin Schulze (Feb 14 2005)
[SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access
- Martin Schulze (Feb 14 2005)
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
- Martin Schulze (Feb 14 2005)
[SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution
- Martin Schulze (Feb 15 2005)
[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution
- Martin Schulze (Feb 16 2005)
[SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution
- Martin Schulze (Feb 17 2005)
[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability
- Martin Schulze (Feb 17 2005)
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
- Martin Schulze (Feb 18 2005)
[SECURITY] [DSA 688-1] New squid packages fix denial of service
- Martin Schulze (Feb 23 2005)
[SECURITY] [DSA 689-1] New mod_python packages fix information leak
- Martin Schulze (Feb 23 2005)
[SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution
- Martin Schulze (Feb 25 2005)
[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion
- Calum Power (Feb 25 2005)
[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4
- Maksymilian Arciemowicz (Feb 24 2005)
[SePro Bugtraq] SQL-Injection in PerlDesk 1.x
- deluxe_at_security-project.org (Feb 07 2005)
[SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories
- chewkeong_at_security.org.sg (Feb 07 2005)
[SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities
- chewkeong_at_security.org.sg (Feb 09 2005)
[SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities
- chewkeong_at_security.org.sg (Feb 02 2005)
[USN-66-2] PHP vulnerability
- Martin Pitt (Feb 17 2005)
[USN-71-1] PostgreSQL vulnerability
- Martin Pitt (Feb 01 2005)
[USN-72-1] Perl vulnerabilities
- Martin Pitt (Feb 02 2005)
[USN-73-1] Python vulnerability
- Martin Pitt (Feb 03 2005)
[USN-74-1] Postfix vulnerability
- Wietse Venema (Feb 05 2005)
- Martin Pitt (Feb 04 2005)
[USN-74-2] Fixed Postfix packages for USN-74-1
- Martin Pitt (Feb 04 2005)
[USN-75-1] cpio vulnerability
- Martin Pitt (Feb 04 2005)
[USN-76-1] Emacs vulnerability
- Martin Pitt (Feb 07 2005)
[USN-77-1] Squid vulnerabilities
- Martin Pitt (Feb 07 2005)
[USN-78-1] Mailman vulnerability
- Martin Pitt (Feb 09 2005)
[USN-78-2] Fixed mailman packages for USN-78-1
- Martin Pitt (Feb 17 2005)
[USN-79-1] PostgreSQL vulnerabilities
- Martin Pitt (Feb 10 2005)
[USN-80-1] mod_python vulnerability
- Martin Pitt (Feb 11 2005)
[USN-81-1] iptables vulnerability
- Martin Pitt (Feb 11 2005)
[USN-82-1] Linux kernel vulnerabilities
- Martin Pitt (Feb 15 2005)
[USN-83-1] LessTif 2 vulnerabilities
- Martin Pitt (Feb 16 2005)
[USN-84-1] Squid vulnerabilities
- Martin Pitt (Feb 21 2005)
[USN-85-1] Gaim vulnerabilities
- Martin Pitt (Feb 25 2005)
Adobe Reader invalid root page node Count value DOS
- Hongzhen Zhou (Feb 17 2005)
ADP Elite System Max 9000 Series Login Vulnerability
- rootfiend_at_safe-mail.net (Feb 19 2005)
Advanced Guestbook 2.2 -- SQL Injection Exploit
- mary_at_gmbwebworks.com (Feb 12 2005)
Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software
- Maximillian Dornseif (Feb 14 2005)
Advisory: Multiple Vulnerabilities in BibORB
- Patrick Hof (Feb 17 2005)
Announce: RSBAC v1.2.4 released
- Amon Ott (Feb 25 2005)
AppleFileServer Denial of Service.
- nemo_at_felinemenace.org (Feb 08 2005)
Arkeia Network Backup Client Remote Access
- Arnaud Spicht (Feb 22 2005)
- H D Moore (Feb 21 2005)
- Vincent Archer (Feb 22 2005)
- H D Moore (Feb 20 2005)
ASPjar guestbook (Injection in login page)
- farhad koosha (Feb 10 2005)
ASPjar Guestbook login.asp not official patch
- CorryL (Feb 15 2005)
Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
- PASTOR ADRIAN (Feb 24 2005)
- Walton, John Michael (John) (Feb 23 2005)
- grutz_at_jingojango.net (Feb 22 2005)
- m123303_at_richmond.ac.uk (Feb 22 2005)
AW: phpWebSite-0.10.0_exploit
- webmaster_at_clueless-design.de (Feb 25 2005)
AWStats <= 6.4 Multiple vulnerabilities
- Ondra Holecek (Feb 15 2005)
- GHC_at_www.securityfocus.com, [ru]@securityfocus.com@www.securityfocus.com (Feb 14 2005)
AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
- newbug Tseng (Feb 18 2005)
- Matt Wilder (Feb 17 2005)
- Michael Scheidell (Feb 16 2005)
- Micah Brandon (Feb 16 2005)
- K-OTiK Security (Feb 15 2005)
- Thom Craver (Feb 16 2005)
- Jamie Pratt (Feb 15 2005)
- twebster_at_daksoft.com (Feb 15 2005)
- William Pratt (Feb 15 2005)
- Jeffrey Wilkinson (Feb 15 2005)
- Ondra Holecek (Feb 15 2005)
- Ondra Holecek (Feb 15 2005)
- Herman Sheremetyev (Feb 15 2005)
- Jamie Pratt (Feb 15 2005)
Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders.
- Sean Sosik-Hamor (Feb 10 2005)
BizMail 2.1 Spam Exploit
- Jason Frisvold (Feb 18 2005)
Blind Sql-Injection in MySQL Databases
- Zeelock (Feb 15 2005)
BrightStor ARCserve Backup buffer overflow PoC
- Williams, James K (Feb 15 2005)
- H D Moore (Feb 12 2005)
- H D Moore (Feb 11 2005)
- cybertronic_at_gmx.net (Feb 11 2005)
BrightStor ARCserve Backup buffer overflow PoC (fix available)
- Williams, James K (Feb 16 2005)
BrightStor ARCserve Backup buffer overflow PoC (fixes available)
- Williams, James K (Feb 17 2005)
cfengine rsa heap remote exploit: part of PTjob project
- yan feng (Feb 19 2005)
CFP for SyScAN'05
- organiser_at_syscan.org (Feb 08 2005)
CFP: WORM 2005
- David Moore (Feb 25 2005)
CIS WebServer Directory Traversal Bug
- CorryL (Feb 25 2005)
Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities
- Cisco Systems Product Security Incident Response Team (Feb 24 2005)
CMS Core SQL injection
- foster GHC (Feb 09 2005)
CodeCon Reminder
- Len Sassaman (Feb 07 2005)
Combining Hashes
- Joel Maslak (Feb 19 2005)
- Frank Knobbe (Feb 20 2005)
- Ivan Krstic (Feb 20 2005)
- exon (Feb 19 2005)
- Felix Cuello (Feb 19 2005)
- unmanarc (Feb 18 2005)
- Kent Borg (Feb 18 2005)
CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability
- CORE Security Technologies Advisories (Feb 08 2005)
Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0
- Luigi Auriemma (Feb 10 2005)
Credit Card Phishing with executable download
- Gandalf The White (Feb 12 2005)
Cross Site Scripting exploitation via malformed files
- http-equiv_at_excite.com (Feb 22 2005)
- Jerome ATHIAS (Feb 21 2005)
Dangers of discarding duplicated messages
- David F. Skoll (Feb 18 2005)
- Gene Rackow (Feb 18 2005)
- Jon Keating (Feb 18 2005)
- Maciej Soltysiak (Feb 18 2005)
- Adrian Bunk (Feb 17 2005)
directory traversal in RaidenHTTPD 1.1.27
- Donato Ferrante (Feb 05 2005)
DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation'
- KF (lists) (Feb 07 2005)
DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG buffer overflow'
- KF (lists) (Feb 07 2005)
DoS in LANChat Pro Revival 1.666c
- Donato Ferrante (Feb 03 2005)
eBay Account Phishing with eBay Redirect
- Israel Torres (Feb 15 2005)
- Jay Calvert (Feb 15 2005)
- Thomas T. Evans, III (Feb 15 2005)
- Jonathan Rockway (Feb 14 2005)
- Nick FitzGerald (Feb 14 2005)
- Josh Tolley (Feb 14 2005)
- Steven (Feb 12 2005)
EEYE: Windows SMB Client Transaction Response Handling Vulnerability
- Marc Maiffret (Feb 08 2005)
exim auth_spa_server() PoC exploit
- Yuri Gushin (Feb 12 2005)
Exploit For Savant Web Server 3.1 (tested on win2003)
- CorryL (Feb 04 2005)
exwormshoucast part of PTjob project: SHOUTcast v1.9.4 remote exploit
- yan feng (Feb 19 2005)
Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability
- Derek Martin (Feb 09 2005)
- Rafel Ivgi (Feb 08 2005)
Firedragging [Firefox 1.0]
- mikx (Feb 07 2005)
Fireflashing [Firefox 1.0]
- mikx (Feb 07 2005)
Firescrolling [Firefox 1.0]
- Stan Bubrouski (Feb 25 2005)
- btrq_at_bob-n.com (Feb 25 2005)
- Eric McCarty (Feb 25 2005)
- Beauford, Jason (Feb 25 2005)
- mikx (Feb 25 2005)
Firetabbing [Firefox 1.0]
- mikx (Feb 07 2005)
Foxmail Server Remote Buffer Overflow Vulnerability
- Xin Ouyang (Feb 04 2005)
Gallery is still vulnerable to Cross-site Scripting attacks
- Jon Keating (Feb 02 2005)
Gigafast/CompUSA router (model EE400-R) vulnerabilities
- Gary H. Jones II (Feb 19 2005)
GMail / Google Groups ESMTP software b0f
- Heather Adkins (Feb 08 2005)
- Michal Zalewski (Feb 07 2005)
Google getting smarter ?!?!
- Scott Jacobson (Feb 02 2005)
- John Madden (Feb 02 2005)
GREENAPPLE Release
- Dave Aitel (Feb 08 2005)
HACKING WITH JAVASCRIPT
- Jim Halfpenny (Feb 11 2005)
- Cleiton Martins (Feb 11 2005)
- hictor ertd (Feb 09 2005)
hpm_guestbook.cgi JavaScript-Injection
- Christoph Burchert (Feb 17 2005)
iDEFENSE Labs Website Launch
- iDEFENSE Labs (Feb 17 2005)
iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability
- Shiva Persaud (Feb 09 2005)
- iDefense Customer Service (Feb 07 2005)
iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability
- iDefense Customer Service (Feb 07 2005)
iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability
- Shiva Persaud (Feb 09 2005)
- iDefense Customer Service (Feb 08 2005)
iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow
- iDefense Customer Service (Feb 09 2005)
iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability
- Shiva Persaud (Feb 10 2005)
- iDefense Customer Service (Feb 10 2005)
iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability
- Shiva Persaud (Feb 10 2005)
- iDefense Customer Service (Feb 10 2005)
iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability
- Shiva Persaud (Feb 10 2005)
- iDefense Customer Service (Feb 10 2005)
iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability
- iDefense Customer Service (Feb 11 2005)
iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities
- iDEFENSE Labs (Feb 21 2005)
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability
- iDEFENSE Labs (Feb 21 2005)
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability
- iDEFENSE Labs (Feb 21 2005)
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability
- iDEFENSE Labs (Feb 22 2005)
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB2 Arbitrary File Unlink Vulnerability
- iDEFENSE Labs (Feb 22 2005)
iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability
- iDEFENSE Labs (Feb 23 2005)
iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
- Stan Bubrouski (Feb 25 2005)
- iDEFENSE Labs (Feb 25 2005)
IE6 SP1 - Click N Crash
- Robert ONeal (Feb 17 2005)
- ViPeR (Feb 15 2005)
IE6 SP1 - Click N Crash is old news
- Berend-Jan Wever (Feb 15 2005)
In-game cl_guid crash in Soldier of Fortune II 1.03
- Luigi Auriemma (Feb 24 2005)
Incorrect Classification of iDownload's Product as Spyware...
- Roger A. Grimes (Feb 24 2005)
- Paul Laudanski (Feb 23 2005)
Infostring crash and shutdown in the Quake 3 engine
- Luigi Auriemma (Feb 12 2005)
Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12
- Nicolas Gregoire (Feb 05 2005)
- Jonathan Rockway (Feb 04 2005)
insecure temporary file creation in kdelibs 3.3.2
- Davide Madrisan (Feb 11 2005)
Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994
- Luigi Auriemma (Feb 08 2005)
International Domain Name [IDN] - browser-level fix (not network.enableIDN)
- R Dicaire (Feb 09 2005)
- Scovetta, Michael V (Feb 08 2005)
International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs.
- Michael Wojcik (Feb 14 2005)
- Marcin Sochacki (Feb 09 2005)
- Randal, Phil (Feb 09 2005)
International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
- Riccardo Murri (Feb 18 2005)
- Rainer Duffner (Feb 17 2005)
- bkfsec (Feb 17 2005)
- David Schwartz (Feb 17 2005)
- bkfsec (Feb 17 2005)
- David Schwartz (Feb 17 2005)
- bkfsec (Feb 17 2005)
- bkfsec (Feb 17 2005)
- Tosoni (Feb 17 2005)
- Vincent Archer (Feb 17 2005)
- Thor (Hammer of God) (Feb 17 2005)
- Ron DuFresne (Feb 16 2005)
- bkfsec (Feb 17 2005)
- David Schwartz (Feb 16 2005)
- Nick FitzGerald (Feb 16 2005)
- Stefan Paletta (Feb 16 2005)
- Stefan Paletta (Feb 16 2005)
- Benjamin Franz (Feb 16 2005)
- Seth Breidbart (Feb 16 2005)
- lyal.collins (Feb 15 2005)
- bkfsec (Feb 16 2005)
- Bill Brown (Feb 13 2005)
- David Schwartz (Feb 16 2005)
- David Schwartz (Feb 16 2005)
- Gwendolynn ferch Elydyr (Feb 16 2005)
- bkfsec (Feb 16 2005)
- Gwendolynn ferch Elydyr (Feb 16 2005)
- bkfsec (Feb 16 2005)
- Janusz A. Urbanowicz (Feb 16 2005)
- George Capehart (Feb 15 2005)
- Thor (Hammer of God) (Feb 15 2005)
- Sebastian (Feb 15 2005)
- bkfsec (Feb 15 2005)
- bkfsec (Feb 15 2005)
- Thor (Hammer of God) (Feb 15 2005)
- Gwendolynn ferch Elydyr (Feb 15 2005)
- bkfsec (Feb 15 2005)
- Vincent Archer (Feb 15 2005)
- David Schwartz (Feb 12 2005)
- Janusz A. Urbanowicz (Feb 12 2005)
- Scott Gifford (Feb 11 2005)
- Neil W Rickert (Feb 11 2005)
- Scott Gifford (Feb 11 2005)
- Peter J. Holzer (Feb 10 2005)
- Will Kamishlian (Feb 09 2005)
- Simon Østengaard (Feb 09 2005)
- Jerome ATHIAS (Feb 08 2005)
- Brandon Kovacs (Feb 07 2005)
Internet Explorer zone spoofing with encoded URLs
- Jouko Pynnonen (Feb 09 2005)
Invision Power Boards 1.3.1 FINAL XSS Exploit
- Daniel A. (Feb 17 2005)
Joint encryption?
- John Richard Moser (Feb 20 2005)
- Ruud H.G. van Tol (Feb 20 2005)
- peter zulu (Feb 21 2005)
- Valdis.Kletnieks_at_vt.edu (Feb 19 2005)
- John Richard Moser (Feb 19 2005)
- David Schwartz (Feb 19 2005)
- Gandalf The White (Feb 19 2005)
- Robert C. Helling (Feb 21 2005)
- John Richard Moser (Feb 19 2005)
- John Richard Moser (Feb 19 2005)
- devnull_at_Rodents.Montreal.QC.CA (Feb 19 2005)
- Casper.Dik_at_Sun.COM (Feb 19 2005)
- Damian Menscher (Feb 19 2005)
- John Richard Moser (Feb 19 2005)
- John Richard Moser (Feb 17 2005)
Knet <= 1.04c Buffer Overflow Bug
- CorryL (Feb 25 2005)
Knox Arkeia remote root/system exploit
- Arnaud Spicht (Feb 22 2005)
- H D Moore (Feb 20 2005)
- John Doe (Feb 18 2005)
Limited buffer-overflow in Painkiller 1.35
- Luigi Auriemma (Feb 02 2005)
mailman email harvester
- Bernhard Kuemel (Feb 07 2005)
MDKSA-2005:026 - Updated imap packages fix authentication vulnerability
- Mandrakelinux Security Team (Feb 01 2005)
MDKSA-2005:027 - Updated chbg packages fix vulnerability
- Mandrakelinux Security Team (Feb 01 2005)
MDKSA-2005:028 - Updated ncpfs packages fix vulnerabilities
- Mandrakelinux Security Team (Feb 01 2005)
MDKSA-2005:029 - Updated vim packages fix vulnerabilities
- Mandrakelinux Security Team (Feb 02 2005)
MDKSA-2005:031 - Updated perl packages fix multiple vulnerabilities
- Mandrakelinux Security Team (Feb 08 2005)
MDKSA-2005:032 - Updated cpio packages fix vulnerability
- Mandrakelinux Security Team (Feb 10 2005)
MDKSA-2005:032-1 - Updated cpio packages fix vulnerability
- Mandrakelinux Security Team (Feb 11 2005)
MDKSA-2005:033 - Updated enscript packages fix multiple vulnerabilities
- Mandrakelinux Security Team (Feb 10 2005)
MDKSA-2005:034 - Updated squid packages fix multiple vulnerabilities
- Mandrakelinux Security Team (Feb 10 2005)
MDKSA-2005:035 - Updated python packages fix vulnerability
- Mandrakelinux Security Team (Feb 10 2005)
MDKSA-2005:036 - Updated MySQL packages fix temporary file vulnerability
- Mandrakelinux Security Team (Feb 10 2005)
MDKSA-2005:037 - Updated mailman packages fix directory traversal vulnerability
- Mandrakelinux Security Team (Feb 14 2005)
MDKSA-2005:038 - Updated emacs/xemacs packages fix vulnerability
- Mandrakelinux Security Team (Feb 15 2005)
MDKSA-2005:039 - Updated rwho packages fix vulnerability
- Mandrakelinux Security Team (Feb 16 2005)
MDKSA-2005:040 - Updated PostgreSQL packages fix multiple vulnerabilities
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:041 - Updated cups packages fix vulnerabilities on 64 bit platforms
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:042 - Updated gpdf packages fix vulnerabilities on 64 bit platforms
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:043 - Updated xpdf packages fix vulnerabilities on 64 bit platforms
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:044 - Updated tetex packages fix vulnerabilities on 64 bit platforms
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:045 - Updated kdelibs packages fix vulnerabilities
- Mandrakelinux Security Team (Feb 17 2005)
MDKSA-2005:046 - Updated uim packages fix vulnerability
- Mandrakelinux Security Team (Feb 24 2005)
MDKSA-2005:047 - Updated squid packages fix vulnerability
- Mandrakelinux Security Team (Feb 24 2005)
Mercuryboard <= 1.1.1 Working Sql Injection
- Zeelock (Feb 09 2005)
Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185
- Randal, Phil (Feb 15 2005)
Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185
- James Lay (Feb 14 2005)
Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction
- Threlkeld, Richard (Feb 15 2005)
- Joe Granto (Feb 16 2005)
- James Lay (Feb 15 2005)
Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185
- Thor (Hammer of God) (Feb 15 2005)
- Threlkeld, Richard (Feb 14 2005)
Mozilla Firefox 1.0.1 Javascript Images are Draggable
- Jay D. Dyson (Feb 26 2005)
- Paul (Feb 25 2005)
MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
- Andrew Hunter (Feb 10 2005)
- Color Inc. (Feb 10 2005)
- Thor Larholm (Feb 10 2005)
- Andrew Hunter (Feb 09 2005)
- ATmaCA ATmaCA (Feb 09 2005)
Multiple vulnerabilities found in CSGuestbook by CoolSerlets.com
- Josh884_at_hotmail.com (Feb 23 2005)
Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins
- headpimp_at_pimp-industries.com (Feb 17 2005)
Multiple vulnerabilities in TrackerCam 5.12
- Luigi Auriemma (Feb 18 2005)
Multiple vulns in punBB
- John Gumbel (Feb 24 2005)
Multiples vulnerability in ZeroBoard,
- albanian haxorz (Feb 19 2005)
NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
- Vade 79 (Feb 17 2005)
- TAC (Feb 16 2005)
New presentation: Advanced SQL Injection in Oracle databases
- Esteban Mart�nez Fay� (Feb 03 2005)
New version of ike-scan (IPsec IKE scanner) available - v1.7
- Roy Hills (Feb 07 2005)
ngIRCd <= v0.8.2 Format String Vulnerability
- CoKi (Feb 02 2005)
Office 10 applications & flashdrives can be used to browse restricted drives
- Jay D. Dyson (Feb 26 2005)
- Paul (Feb 25 2005)
- Denis Jedig (Feb 25 2005)
- Discini, Sonny (Feb 23 2005)
OpenServer 5.0.6 OpenServer 5.0.7 : enable command line buffer overflows
- please_reply_to_security_at_sco.com (Feb 07 2005)
OpenServer 5.0.6 OpenServer 5.0.7 : Vulnerabilities in long-lived TCP connections / Rose attack
- please_reply_to_security_at_sco.com (Feb 07 2005)
paNews v2.0b4 - PHP Injection
- tjomka (Feb 20 2005)
Paper: Solution to Red Hat PIE Protection
- Zarul Shahrin (Feb 09 2005)
Patch available for high risk IBM DB2 Universal Database flaw
- NGSSoftware Insight Security Research (Feb 09 2005)
Permission problem in Skype BETA for linux
- Peter Conrad (Feb 16 2005)
Phishing hole found in IE and OE
- cyberpixl (Feb 19 2005)
- David Nichols (Feb 18 2005)
- Greg Merideth (Feb 17 2005)
- Jay Calvert (Feb 17 2005)
php-fusion 4.x vuln
- thegreatone2176_at_yahoo.com (Feb 08 2005)
phpBB 2.0.12 released
- bcl_at_brianlane.com (Feb 23 2005)
- bcl_at_brianlane.com (Feb 22 2005)
- Snapdragon (Feb 21 2005)
phpWebSite 0.10.0 Full Path disclosure
- HaCkZaTaN (Feb 24 2005)
- HaCkZaTaN. (Feb 24 2005)
phpWebSite-0.10.0_exploit
- tjomka (Feb 24 2005)
Portcullis Advisory 05-001 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Portcullis Advisory 05-005 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Portcullis Advisory 05-006 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Portcullis Advisory 05-007 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Portcullis Advisory 05-008 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Portcullis Advisory 05-009 Update, Webseries Payment Application
- Paul J Docherty (Feb 02 2005)
Possible phpBB <=2.0.11 bug or sql injection?
- Giacomo Rizzo (Feb 18 2005)
- kaosone+[ONE]+ (Feb 19 2005)
- Miguel Angel Rodr�guez J�dar (Feb 17 2005)
- Exoduks (Feb 18 2005)
- jtm297_at_optonline.net (Feb 17 2005)
Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py
- Guido van Rossum (Feb 03 2005)
RECON 2005 CFP [Montreal, Canada]
- dataworm (Feb 16 2005)
Release of Arkeia Network Backup 5.3.5 fixes security issue [bugtraq id 12594]
- Arnaud Spicht (Feb 23 2005)
Remote Windows Kernel Exploitation - Step Into the Ring 0
- Marc Maiffret (Feb 17 2005)
Remotely Controlling XSS Attacks - Announcing XSS-Proxy
- Rager, Anton (Anton) (Feb 10 2005)
Robustness patch for TWiki, vulnerability in ImageGalleryPlugin
- Florian Weimer (Feb 23 2005)
SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory
- Roy Hills (Feb 08 2005)
SAME LADY, DIFFERENT HAT: REELY
- http-equiv_at_excite.com (Jan 31 2005)
Scottrader Application Exploit
- Ben Efros (Feb 15 2005)
Scottsave.com Trade History Exploit
- Ben Efros (Feb 15 2005)
SD Server 4.0.70 Directory Traversal Bug
- CorryL (Feb 22 2005)
secure-roster script to address mailman email harvester
- Neal McBurnett (Feb 09 2005)
SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT]
- cybertronic_at_gmx.net (Feb 02 2005)
Several SQL injection bugs in myPHP Forum v.1.0
- foster GHC (Feb 09 2005)
SHA-1 broken
- Peter Jeremy (Feb 20 2005)
- Peter J. Holzer (Feb 20 2005)
- Paul Johnston (Feb 21 2005)
- Damian Menscher (Feb 20 2005)
- Denis Jedig (Feb 20 2005)
- peeon+securityfocus_at_peeon.net (Feb 19 2005)
- Frank Knobbe (Feb 20 2005)
- exon (Feb 21 2005)
- Michael Silk (Feb 20 2005)
- Michael Cordover (Feb 18 2005)
- Brian May (Feb 18 2005)
- exon (Feb 19 2005)
- securityfocus_at_microtechnical.co.uk (Feb 19 2005)
- Anatole Shaw (Feb 18 2005)
- Michael Silk (Feb 18 2005)
- Tollef Fog Heen (Feb 19 2005)
- Darren Reed (Feb 19 2005)
- dullien_at_gmx.de (Feb 19 2005)
- Dan Harkless (Feb 17 2005)
- Michael Silk (Feb 17 2005)
- D.J. Capelis (Feb 17 2005)
- Michael Silk (Feb 17 2005)
- dullien_at_gmx.de (Feb 17 2005)
- dullien_at_gmx.de (Feb 17 2005)
- Scovetta, Michael V (Feb 17 2005)
- Jonathan G. Lampe (Feb 17 2005)
- Steve Friedl (Feb 16 2005)
- Robert Sussland (Feb 16 2005)
- Michael Cordover (Feb 16 2005)
- Kent Borg (Feb 16 2005)
- Gadi Evron (Feb 16 2005)
Software PBLang 4.65 pm.php XSS vulnerability
- Raven (Feb 22 2005)
Software PBLang 4.65 pmpshow.php XSS vulnerability
- Raven (Feb 22 2005)
Software PBLang 4.65 search.php XSS vulnerability
- Raven (Feb 22 2005)
Some details about MS05-007 security bulletin
- Jean-Baptiste Marchand (Feb 09 2005)
SQL injection in Chipmunk forums
- foster GHC (Feb 08 2005)
SQL injection in EveryDNS.net Service
- Calum Power (Feb 01 2005)
Squirrelmail vacation v0.15 local root exploit
- p dont think (Feb 03 2005)
SUSE Security Announcement: squid (SUSE-SA:2005:006)
- Thomas Biege (Feb 10 2005)
SV: Zyxel / Netgear and probably other routers leaking information.
- Jens Kalvik (Jan 31 2005)
SYM05-003 Symantec UPX Parsing Engine Heap Overflow
- secure_at_symantec.com (Feb 11 2005)
Symantec UPX issue solution
- Roger A. Grimes (Feb 11 2005)
Symantec UPX Parsing Engine Heap Overflow
- James Riden (Feb 11 2005)
- Neil Watson (Feb 10 2005)
The WebConnect 6.4.4 and 6.5 contains several vulnerabilities
- CIRT Advisory (Feb 20 2005)
Thomson TCW690 POST Password Validation Vulnerability
- MurDoK (Feb 19 2005)
TSLSA-2005-0003 - multi
- Trustix Security Advisor (Feb 11 2005)
UnixWare 7.1.3 UnixWare 7.1.1 : Vulnerabilities in long-lived TCP connections / Rose attack
- please_reply_to_security_at_sco.com (Feb 07 2005)
UnixWare 7.1.4 : racoon multilple security issues
- please_reply_to_security_at_sco.com (Feb 07 2005)
UnixWare 7.1.4 : vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands
- please_reply_to_security_at_sco.com (Feb 07 2005)
Update Your Bookmarks
- Amit Klein (AKsecurity) (Feb 16 2005)
UPDATE: [ GLSA 200501-36 ] AWStats: Remote code execution
- Thierry Carrez (Feb 14 2005)
UPDATE: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability
- Luke Macken (Feb 10 2005)
vbulletin 3.0.x PHP code execution
- pokley (Feb 15 2005)
- AL3NDALEEB. (Feb 15 2005)
- pokley (Feb 14 2005)
- AL3NDALEEB (Feb 13 2005)
VOIPSEC
- VoIP Security Aliance (Feb 07 2005)
Vulnerability in 3Com 3CServer v1.1
- mandragore (Feb 07 2005)
webfsd fun. opensource is god .lol windows
- yan feng (Feb 19 2005)
Webroot Software Resigns from COAST
- Paul Laudanski (Feb 04 2005)
WinAmp POC: How to get 900+ shellcodespace!?
- Viktor E Larionov (Feb 02 2005)
- lists_at_bluemail.ch (Feb 01 2005)
Windows Firewall Has A Backdoor
- Thor Larholm (Feb 21 2005)
- Thor (Hammer of God) (Feb 21 2005)
- Chris Goodwin (Feb 21 2005)
- Chris Wysopal (Feb 21 2005)
- Jay Calvert (Feb 19 2005)
Windows Security Checklists - 10 Parts
- Paul Laudanski (Jan 31 2005)
Wireless networks/Default Admin username security problem in Croatia
- Denis Jedig (Feb 05 2005)
- Radoslav Dejanovi� (Feb 04 2005)
xprobe2 v0.2.2 released
- Stan Bubrouski (Feb 16 2005)
- Ofir Arkin (Feb 16 2005)
XSS in MySpace.com RuWeb.net and Primus.com
- Chris (Feb 15 2005)
XSS Vulnerability at thefacebook.com
- Jonathan Rockway (Feb 07 2005)
XSS vulnerabilty in ASP.Net [with details]
- Andir Andir (Feb 16 2005)
yet another DSL modem backdoor - Mentor (Conexant)
- Philip Barnham (Feb 10 2005)
- Adam Laurie (Feb 09 2005)
Zone Labs Security Alert ZL05-01: Zone Labs IPC Instability
- Zone Labs Product Security (Feb 11 2005)