Bugtraq: by subject

"Local" and "Remote" considered insufficient
- Frank Knobbe (Jan 23 2005)
(MS05-002) Cursor and Icon Format Handling Vulnerability (PoC for all affected systems)
- houseofdabus HOD (Jan 22 2005)
3Com 3CDaemon Multiple Vulnerabilities
- Sowhat . (Jan 04 2005)
7a69Adv#17 - Internet Explorer FTP download path disclosure
- Albert Puigsech Galicia (Dec 30 2004)
[ GLSA 200501-01 ] LinPopUp: Buffer overflow in message reply
- Thierry Carrez (Jan 04 2005)
[ GLSA 200501-02 ] a2ps: Insecure temporary files handling
- Thierry Carrez (Jan 04 2005)
[ GLSA 200501-03 ] Mozilla, Firefox, Thunderbird: Various vulnerabilities
- Thierry Carrez (Jan 05 2005)
[ GLSA 200501-04 ] Shoutcast Server: Remote code execution
- Luke Macken (Jan 05 2005)
[ GLSA 200501-05 ] mit-krb5: Heap overflow in libkadm5srv
- Sune Kloppenborg Jeppesen (Jan 05 2005)
[ GLSA 200501-06 ] tiff: New overflows in image decoding
- Thierry Carrez (Jan 05 2005)
[ GLSA 200501-07 ] xine-lib: Multiple overflows
- Thierry Carrez (Jan 06 2005)
[ GLSA 200501-09 ] xzgv: Multiple overflows
- Thierry Carrez (Jan 06 2005)
[ GLSA 200501-10 ] Vilistextum: Buffer overflow vulnerability
- Thierry Carrez (Jan 06 2005)
[ GLSA 200501-11 ] Dillo: Format string vulnerability
- Thierry Carrez (Jan 09 2005)
[ GLSA 200501-12 ] TikiWiki: Arbitrary command execution
- Matthias Geerdsen (Jan 10 2005)
[ GLSA 200501-13 ] pdftohtml: Vulnerabilities in included Xpdf
- Thierry Carrez (Jan 10 2005)
[ GLSA 200501-16 ] Konqueror: Java sandbox vulnerabilities
- Sune Kloppenborg Jeppesen (Jan 11 2005)
[ GLSA 200501-17 ] KPdf, KOffice: More vulnerabilities in included Xpdf
- Sune Kloppenborg Jeppesen (Jan 11 2005)
[ GLSA 200501-18 ] KDE FTP KIOslave: Command injection
- Sune Kloppenborg Jeppesen (Jan 11 2005)
[ GLSA 200501-20 ] o3read: Buffer overflow during file conversion
- Thierry Carrez (Jan 11 2005)
[ GLSA 200501-21 ] HylaFAX: hfaxd unauthorized login vulnerability
- Thierry Carrez (Jan 11 2005)
[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing
- Thierry Carrez (Jan 11 2005)
[ GLSA 200501-23 ] Exim: Two buffer overflows
- Matthias Geerdsen (Jan 12 2005)
[ GLSA 200501-25 ] Squid: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Jan 16 2005)
[ GLSA 200501-26 ] ImageMagick: PSD decoding heap overflow
- Sune Kloppenborg Jeppesen (Jan 20 2005)
[ GLSA 200501-27 ] Ethereal: Multiple vulnerabilities
- Luke Macken (Jan 20 2005)
[ GLSA 200501-28 ] Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2
- Thierry Carrez (Jan 21 2005)
[ GLSA 200501-29 ] Mailman: Cross-site scripting vulnerability
- Luke Macken (Jan 21 2005)
[ GLSA 200501-30 ] CUPS: Stack overflow in included Xpdf code
- Thierry Carrez (Jan 22 2005)
[ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities
- Thierry Carrez (Jan 23 2005)
[ GLSA 200501-32 ] KPdf, KOffice: Stack overflow in included Xpdf code
- Sune Kloppenborg Jeppesen (Jan 23 2005)
[ GLSA 200501-33 ] MySQL: Insecure temporary file creation
- Luke Macken (Jan 23 2005)
[ GLSA 200501-35 ] Evolution: Integer overflow in camel-lock-helper
- Luke Macken (Jan 24 2005)
[ GLSA 200501-36 ] AWStats: Remote code execution
- Delian Krustev (Jan 26 2005)
- Luke Macken (Jan 25 2005)
[ GLSA 200501-37 ] GraphicsMagick: PSD decoding heap overflow
- Thierry Carrez (Jan 26 2005)
[ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities
- Thierry Carrez (Jan 26 2005)
[ GLSA 200501-39 ] SquirrelMail: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Jan 28 2005)
[ GLSA 200501-40 ] ngIRCd: Buffer overflow
- Thierry Carrez (Jan 28 2005)
[ GLSA 200501-41 ] TikiWiki: Arbitrary command execution
- Sune Kloppenborg Jeppesen (Jan 30 2005)
[ GLSA 200501-42 ] VDR: Arbitrary file overwriting issue
- Thierry Carrez (Jan 30 2005)
[ GLSA 200501-43 ] f2c: Insecure temporary file creation
- Thierry Carrez (Jan 30 2005)
[ GLSA 200501-44 ] ncpfs: Multiple vulnerabilities
- Thierry Carrez (Jan 30 2005)
[ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability
- Paul Laudanski (Jan 30 2005)
- Luke Macken (Jan 30 2005)
[ GLSA 200501-46 ] ClamAV: Multiple issues
- Sune Kloppenborg Jeppesen (Jan 31 2005)
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation
- Team SHATTER (Application Security, Inc.) (Jan 10 2005)
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow
- Team SHATTER (Application Security, Inc.) (Jan 10 2005)
[CLA-2005:910] Conectiva Security Announcement - mplayer
- Conectiva Updates (Jan 05 2005)
[CLA-2005:913] Conectiva Security Announcement - samba
- Conectiva Updates (Jan 06 2005)
[CLA-2005:915] Conectiva Security Announcement - php4
- Conectiva Updates (Jan 13 2005)
[CLA-2005:916] Conectiva Security Announcement - ethereal
- Conectiva Updates (Jan 13 2005)
[CLA-2005:917] Conectiva Security Announcement - krb5
- Conectiva Updates (Jan 13 2005)
[CLA-2005:918] Conectiva Security Announcement - twiki
- Conectiva Updates (Jan 14 2005)
[CLA-2005:920] Conectiva Security Announcement - libtiff3
- Conectiva Updates (Jan 20 2005)
[CLA-2005:921] Conectiva Security Announcement - xpdf
- Conectiva Updates (Jan 25 2005)
[CLA-2005:923] Conectiva Security Announcement - squid
- Conectiva Updates (Jan 26 2005)
[Contact] Motorola broadband appliance team?
- William A. Rowe, Jr. (Jan 27 2005)
[Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability
- Danny (Jan 11 2005)
- Darren Bounds (Jan 11 2005)
[KDE Security Advisory] ftp kioslave command injection
- Dirk Mueller (Jan 04 2005)
[KDE Security Advisory] kpdf Buffer Overflow Vulnerability
- Dirk Mueller (Jan 24 2005)
[NILESA-20050101]: Denial of Service vulnerability due to the mountd bug
- Jonglim Yun (Jan 11 2005)
[OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl)
- OpenPKG (Jan 11 2005)
[OpenPKG-SA-2005.002] OpenPKG Security Advisory (sudo)
- OpenPKG (Jan 17 2005)
[OpenPKG-SA-2005.003] OpenPKG Security Advisory (a2ps)
- OpenPKG (Jan 17 2005)
[OpenPKG-SA-2005.004] OpenPKG Security Advisory (sasl)
- OpenPKG (Jan 27 2005)
[PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final
- Pedram hayati (Jan 30 2005)
[SECURITY] [DSA 622-1] New htmlheadline package fixes insecure temporary files
- Martin Schulze (Jan 03 2005)
[SECURITY] [DSA 623-1] New nasm packages fix arbitrary code execution
- Martin Schulze (Jan 04 2005)
[SECURITY] [DSA 624-1] New zip packages fix arbitrary code execution
- Martin Schulze (Jan 05 2005)
[SECURITY] [DSA 625-1] New pcal packages fix arbitrary code execution
- Martin Schulze (Jan 05 2005)
[SECURITY] [DSA 626-1] New tiff packages fix denial of service
- Martin Schulze (Jan 06 2005)
[SECURITY] [DSA 627-1] New namazu2 packages fix cross-site scripting vulnerability
- Martin Schulze (Jan 06 2005)
[SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution
- Martin Schulze (Jan 06 2005)
[SECURITY] [DSA 629-1] New kerberos packages fix arbitrary code execution
- Martin Schulze (Jan 07 2005)
[SECURITY] [DSA 630-1] New lintian packages fix insecure temporary directory
- Martin Schulze (Jan 10 2005)
[SECURITY] [DSA 631-1] New kdlibs packages fix arbitrary FTP command execution
- Martin Schulze (Jan 10 2005)
[SECURITY] [DSA 632-1] New linpopup packages fix arbitrary code execution
- Martin Schulze (Jan 10 2005)
[SECURITY] [DSA 633-1] New bmv package fixes insecure temporary file creation
- Martin Schulze (Jan 11 2005)
[SECURITY] [DSA 634-1] New hylafax packages fix unauthorised access
- Martin Schulze (Jan 11 2005)
[SECURITY] [DSA 635-1] New exim packages fix arbitrary code execution
- Martin Schulze (Jan 11 2005)
[SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files
- Martin Schulze (Jan 12 2005)
[SECURITY] [DSA 637-1] New exim-tls packages fix arbitrary code execution
- Martin Schulze (Jan 12 2005)
[SECURITY] [DSA 638-1] New gopher packages fix several vulnerabilities
- Martin Schulze (Jan 13 2005)
[SECURITY] [DSA 639-1] New mc packages fix several vulnerabilities
- Martin Schulze (Jan 14 2005)
[SECURITY] [DSA 640-1] New gatos packages fix arbitrary code execution
- Martin Schulze (Jan 16 2005)
[SECURITY] [DSA 641-1] New playmidi packages fix local root exploit
- Martin Schulze (Jan 17 2005)
[SECURITY] [DSA 642-1] New gallery packages fix several vulnerabilities
- Martin Schulze (Jan 17 2005)
[SECURITY] [DSA 643-1] New queue packages fix buffer overflows
- Martin Schulze (Jan 18 2005)
[SECURITY] [DSA 644-1] New chbg packages fix arbitrary code execution
- Martin Schulze (Jan 18 2005)
[SECURITY] [DSA 645-1] New CUPS packages fix arbitrary code execution
- Martin Schulze (Jan 18 2005)
[SECURITY] [DSA 646-1] New ImageMagick packages fix arbitrary code execution
- Martin Schulze (Jan 19 2005)
[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
- Martin Schulze (Jan 19 2005)
[SECURITY] [DSA 649-1] New xtrlock packages fix authentication bypass
- Martin Schulze (Jan 20 2005)
[SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution
- Martin Schulze (Jan 20 2005)
[SECURITY] [DSA 651-1] New squid packages fix denial of service
- Martin Schulze (Jan 20 2005)
[SECURITY] [DSA 652-1] New unarj packages fix several vulnerabilities
- Martin Schulze (Jan 21 2005)
[SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow
- Martin Schulze (Jan 21 2005)
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
- Martin Schulze (Jan 21 2005)
[SECURITY] [DSA 655-1] New zhcon packages fix unauthorised file access
- Martin Schulze (Jan 25 2005)
[SECURITY] [DSA 656-1] New vdr packages fix insecure file access
- Martin Schulze (Jan 25 2005)
[SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
- Martin Schulze (Jan 25 2005)
[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file
- Martin Schulze (Jan 25 2005)
[SECURITY] [DSA 659-1] New libpam-radius-auth packages fix several vulnerabilities
- Martin Schulze (Jan 26 2005)
[SECURITY] [DSA 660-1] New kdebase packages fix authentication bypass
- Martin Schulze (Jan 26 2005)
[SECURITY] [DSA 661-1] New f2c packages fix insecure temporary files
- Martin Schulze (Jan 27 2005)
[SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities
- chewkeong_at_security.org.sg (Jan 27 2005)
[SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability
- chewkeong_at_security.org.sg (Jan 17 2005)
[USN-54-1] TIFF library tool vulnerability
- Martin Pitt (Jan 06 2005)
[USN-55-1] imlib2 vulnerabilities
- Martin Pitt (Jan 06 2005)
[USN-58-1] MIT Kerberos server vulnerability
- Martin Pitt (Jan 10 2005)
[USN-59-1] mailman vulnerabilities
- Martin Pitt (Jan 10 2005)
[USN-60-0] Linux kernel vulnerabilities
- Martin Pitt (Jan 14 2005)
[USN-61-1] vim vulnerabilities
- Martin Pitt (Jan 18 2005)
[USN-62-1] imagemagick vulnerability
- Martin Pitt (Jan 18 2005)
[USN-63-1] MySQL client vulnerability
- Martin Pitt (Jan 18 2005)
[USN-64-1] xpdf, CUPS vulnerabilities
- Martin Pitt (Jan 19 2005)
[USN-65-1] Apache utility script vulnerability
- Martin Pitt (Jan 19 2005)
[USN-66-1] PHP vulnerabilities
- Martin Pitt (Jan 20 2005)
[USN-67-1] Squid vulnerabilities
- Martin Pitt (Jan 20 2005)
[USN-68-1] enscript vulnerabilities
- Martin Pitt (Jan 24 2005)
[USN-69-1] Evolution vulnerability
- Martin Pitt (Jan 24 2005)
[USN-70-1] Perl DBI module vulnerability
- Martin Pitt (Jan 25 2005)
[waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke
- Janek Vind (Jan 12 2005)
Advanced Guestbook
- Stewart Souter (Jan 22 2005)
ADVISORY: security hole (http response splitting) in snitz forums 2000
- Harold Lines (Jan 25 2005)
All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow
- Sym Security (Jan 06 2005)
- Polazzo Justin (Jan 06 2005)
- Rafel Ivgi, The-Insider (Jan 05 2005)
Apache mod_auth_radius remote integer overflow
- LSS Security (Jan 11 2005)
Apple Airport WDS DoS
- Dylan Griffiths (Jan 15 2005)
applicable exploit for winxp-sp2-uptodate Internet Explorer
- Liu Die Yu (Jan 11 2005)
Arbitrary files overwriting through skins in DivX Player 2.6
- Luigi Auriemma (Jan 21 2005)
Arkeia Possible remote root & information leakage
- Maciej Bogucki (Jan 12 2005)
ASH Hashing Algorithm
- seasonedpaper_at_djc.people.inodetech.com (Jan 19 2005)
Black Hat new content on-line & Registration now open for Asia and Europe.
- Jeff Moss (Jan 25 2005)
Broadcast crash in Xpand Rally 1.0.0.0
- Luigi Auriemma (Jan 30 2005)
bug report comersus Back Office Lite 6.0 and 6.0.1
- raf somers (Jan 21 2005)
Call for DEFCON Capture the Flag Organizers.
- The Dark Tangent (Jan 21 2005)
Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload
- Cisco Systems Product Security Incident Response Team (Jan 26 2005)
Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers
- Cisco Systems Product Security Incident Response Team (Jan 26 2005)
Cisco Security Advisory: Multiple Crafted IPv6 Packets Cause Reload
- Cisco Systems Product Security Incident Response Team (Jan 26 2005)
Cisco Security Advisory: Vulnerability in Cisco IOS Embedded Call Processing Solutions
- Cisco Systems Product Security Incident Response Team (Jan 19 2005)
Cross Site Scripting holes found in Horde 3.0
- Hyperdose Security (Jan 12 2005)
Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM
- Joxean Koret (Jan 01 2005)
Darwin Kernel Vulnerability
- neil_at_darkridge.org (Jan 19 2005)
- nemo_at_felinemenace.org (Jan 19 2005)
DMA[2005-0103a] - 'William LeFebvre "top" format string vulnerability'
- KF (Lists) (Jan 04 2005)
DMA[2005-0125a] - 'berlios gpsd format string vulnerability'
- KF (Lists) (Jan 25 2005)
DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid'
- KF (Lists) (Jan 26 2005)
drone armies C&C report - Jan/2005
- Gadi Evron (Jan 30 2005)
DSL- Router Teledat 530 DoS
- Stefan S. (Jan 11 2005)
EEYE: Windows ANI File Parsing Buffer Overflow
- Derek Soeder (Jan 11 2005)
English-language version of K-OTik.COM launched today !
- K-OTiK Security (Jan 24 2005)
exim dns_buld_reverse() proof-of-concept
- Rafael San Miguel Carrasco (Jan 15 2005)
Firespoofing [Firefox 1.0]
- Pavel Kankovsky (Jan 11 2005)
- mikx (Jan 10 2005)
fkey[v0.0.2]: local/remote file accessibility exploit.
- Vade 79 (Jan 20 2005)
Fwd: APPLE-SA-2005-01-11 iTunes 4.7.1
- David Ahmad (Jan 11 2005)
Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability
- Rafel Ivgi, The-Insider (Jan 17 2005)
God Admin Injection Vulnerability in Siteman 1.0.x
- Pedram hayati (Jan 20 2005)
grsecurity 2.1.0 release / 5 Linux kernel advisories
- Brad Spengler (Jan 07 2005)
- Brad Spengler (Jan 07 2005)
HKLM locking
- Vladimir Kraljevic (Jan 27 2005)
HylaFAX hfaxd unauthorized login vulnerability
- Lee Howard (Jan 11 2005)
IBM DB2 call buffer overflow (#NISR05012005C)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 db2fmp buffer overflow (#NISR05012005A)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 libdb2.so buffer overflow (#NISR05012005B)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 Windows Permission Problems (#NISR05012005F)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I)
- NGSSoftware Insight Security Research (Jan 05 2005)
IBM DB2 XML functions overflows (#NISR05012005H)
- NGSSoftware Insight Security Research (Jan 05 2005)
iDefense iTunes advisory.
- nemo_at_felinemenace.org (Jan 15 2005)
iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability
- customer service mailbox (Jan 13 2005)
iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability
- customer service mailbox (Jan 13 2005)
iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability
- customer service mailbox (Jan 13 2005)
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability
- customer service mailbox (Jan 14 2005)
iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability
- customer service mailbox (Jan 17 2005)
iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow
- customer service mailbox (Jan 18 2005)
iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
- Michael Sutton (Jan 19 2005)
iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability
- iDefense Customer Service (Jan 20 2005)
iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability
- dila (Jan 30 2005)
- iDefense Customer Service (Jan 24 2005)
iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability
- iDefense Customer Service (Jan 26 2005)
iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability
- customer service mailbox (Jan 07 2005)
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability
- customer service mailbox (Jan 07 2005)
IE HHCTRL exploit still usable even after patch
- Valentin Avram (Jan 18 2005)
IE issue with percent 20
- RSnake (Jan 12 2005)
IlohaMail Insecure Configuration Files
- wang_at_readyresponse.org (Jan 10 2005)
Ingate Firewall: Removed PPTP tunnels not deactivated
- Per Cederqvist (Jan 27 2005)
Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications
- Integrigy Security (Jan 19 2005)
Internet Explorer URL obfuscation.
- Berend-Jan Wever (Jan 22 2005)
- Stewart, Graeme (Jan 21 2005)
Internet Explorer valid JavaScript-file successfull load detection local file enumeration
- Berend-Jan Wever (Jan 14 2005)
InternetExploiter 3.2
- Berend-Jan Wever (Jan 12 2005)
Is DEP easily evadable?
- Ben Pfaff (Jan 13 2005)
- John Richard Moser (Jan 13 2005)
- Ben Pfaff (Jan 13 2005)
- John Richard Moser (Jan 13 2005)
- Florian Weimer (Jan 13 2005)
- John Richard Moser (Jan 12 2005)
Jacks FormMail.php remote file access vulnerability
- Hack Hawk (Dec 31 2004)
Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations
- Markus Kern (Jan 19 2005)
- Markus Kern (Jan 18 2005)
- Berend-Jan Wever (Jan 18 2005)
- Rafel Ivgi, The-Insider (Jan 17 2005)
KDE Security Advisory: KOffice PDF Import Filter Vulnerability
- Waldo Bastian (Jan 20 2005)
KDE Security Advisory: Multiple vulnerabilities in Konversation
- Waldo Bastian (Jan 21 2005)
Linux kernel i386 SMP page fault handler privilege escalation
- Paul Starzetz (Jan 12 2005)
Linux kernel sys_uselib local root vulnerability
- Paul Starzetz (Jan 07 2005)
Linux kernel uselib() privilege elevation, corrected
- Paul Starzetz (Jan 07 2005)
List of all admin accounts in phpBB
- Paul Laudanski (Jan 28 2005)
- Aaron Klein (Jan 26 2005)
- Predrag Damnjanovic (Jan 25 2005)
Local buffer-overflow in W32Dasm 8.93
- Luigi Auriemma (Jan 24 2005)
logwatch and logrotate might create a blind spot in reporting
- The Tibetan Traveller (Jan 25 2005)
- Sami Pitko (Jan 25 2005)
Mac OS X 10.3 iSync Privilege Escalation
- Braden Thomas (Jan 22 2005)
MDKSA-2005:001 - Updated libtiff packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 06 2005)
MDKSA-2005:002 - Updated wxGTK2 packages fix vulnerabilities
- Mandrake Linux Security Team (Jan 06 2005)
MDKSA-2005:003 - Updated vim packages fix modeline vulnerabilities
- Mandrake Linux Security Team (Jan 06 2005)
MDKSA-2005:004 - Updated nasm packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 06 2005)
MDKSA-2005:005 - Updated nfs-utils packages fix 64bit vulnerability
- Mandrake Linux Security Team (Jan 11 2005)
MDKSA-2005:006 - Updated hylafax packages fix vulnerability
- Mandrake Linux Security Team (Jan 12 2005)
MDKSA-2005:007 - Updated imlib packages fix vulnerability
- Mandrake Linux Security Team (Jan 12 2005)
MDKSA-2005:008 - Updated cups packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 17 2005)
MDKSA-2005:009 - Updated mpg123 packages fix vulnerability
- Mandrake Linux Security Team (Jan 19 2005)
MDKSA-2005:010 - Updated playmidi packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 19 2005)
MDKSA-2005:011 - Updated xine packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 19 2005)
MDKSA-2005:012 - Updated zhcon packages fix vulnerability
- Mandrake Linux Security Team (Jan 24 2005)
MDKSA-2005:013 - Updated ethereal packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 24 2005)
MDKSA-2005:014 - Updated squid packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 24 2005)
MDKSA-2005:015 - Updated mailman packages fix vulnerabilities
- Mandrake Linux Security Team (Jan 24 2005)
MDKSA-2005:016 - Updated gpdf packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:017 - Updated xpdf packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:018 - Updated cups packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:019 - Updated koffice packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:020 - Updated kdegraphics packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:021 - Updated tetex packages fix buffer overflow vulnerability
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:022 - Updated cups packages fix multiple vulnerabilities
- Mandrake Linux Security Team (Jan 25 2005)
MDKSA-2005:024 - Updated evolution packages fix vulnerability
- Mandrakelinux Security Team (Jan 27 2005)
MDKSA-2005:025 - Updated clamav packages fix vulnerability
- Mandrakelinux Security Team (Jan 31 2005)
Metasploit Framework v2.3
- H D Moore (Jan 11 2005)
Microsoft Internet Explorer HTML Help Control Vulnerability Still Exploitable After Patch
- Valentin Avram (Jan 20 2005)
Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)
- NGSSoftware Insight Security Research (Jan 19 2005)
Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow
- NGSSoftware Insight Security Research (Jan 21 2005)
Minis directory traversal vulnerability
- Madelman (Jan 16 2005)
Mod_dosevasive symlink and race vulnerability
- LSS Security (Jan 11 2005)
Mozilla XBM Image Vulnerability
- Luca Ercoli (Jan 07 2005)
MSN Heartbeat Control Buffer Overflow
- NGSSoftware Insight Security Research (Jan 19 2005)
Multi-vendor AV gateway image inspection bypass vulnerability
- Darren Bounds (Jan 11 2005)
Multiple Firewall Products Bypass Vulnerability
- Ansgar -59cobalt- Wiechers (Jan 08 2005)
- Ferruh Mavituna (Jan 03 2005)
Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i
- NGSSoftware Insight Security Research (Jan 18 2005)
Multiple PhotoPost Pro Vulnerabilities
- GulfTech Security (Jan 03 2005)
Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2
- David Alonso P�rez (Jan 28 2005)
Multiple Vulnerabilities in FlatNuke
- Pierquinto Manco (Jan 02 2005)
Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes
- ShineShadow (Jan 28 2005)
Multiple vulnerabilities in Konversation
- Wouter Coekaerts (Jan 19 2005)
Multiple vulnerabilities in MercuryBoard 1.1.1
- Alberto Trivero (Jan 24 2005)
Multiple Vulnerabilities in Netgear FVS318 Router
- Paul Kurczaba (Jan 16 2005)
Multiple Vulnerabilities in Pocket IE
- kers0r (Jan 26 2005)
Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)
- NGSSoftware Insight Security Research (Jan 19 2005)
MyBB SQL Injection
- scottm_at_spamcop.net (Jan 04 2005)
Netegrity SiteMinder smpwservicescgi.exe target specification
- Marc Ruef (Jan 17 2005)
Netscape Overflow.
- Carlos Ulver (Jan 21 2005)
new tool : the first remote PHP vulnerability scanner
- bad boy (Jan 14 2005)
New Whitepaper available on security best practices
- Gunter Ollmann (Jan 31 2005)
Novell GroupWise WebAccess error modules loading
- Jonathan Rockway (Jan 18 2005)
- Marc Ruef (Jan 17 2005)
NOVL-2005-10096251 GroupWise WebAccess Error modules loading (report)
- Ed Reed (Jan 26 2005)
NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name
- NSFOCUS Security Team (Jan 27 2005)
OpenServer 5.0.6 OpenServer 5.0.7 : bind remote attacker can poison the nameserver cache
- please_reply_to_security_at_sco.com (Jan 20 2005)
OpenServer 5.0.6 OpenServer 5.0.7 : scosessoin local privilege elevation
- please_reply_to_security_at_sco.com (Jan 25 2005)
OpenServer 5.0.6 OpenServer 5.0.7 : wu-ftp local users can bypass access restrictions
- please_reply_to_security_at_sco.com (Jan 25 2005)
Paper: How to exploit overflow vulnerability under Fedora Core 2
- vangelis vangelis (Jan 13 2005)
Paper: SQL Injection Attacks by Example
- Sergey Chernyshev (Jan 05 2005)
- Scovetta, Michael V (Jan 05 2005)
- David Litchfield (Jan 05 2005)
- Cory Foy (Jan 05 2005)
- Michael Silk (Jan 05 2005)
- Chip Andrews (Jan 05 2005)
- Scovetta, Michael V (Jan 05 2005)
- David Litchfield (Jan 05 2005)
- Steve Friedl (Jan 05 2005)
PeteFinnigan.com - Oracle security advisory
- Pete Finnigan (Jan 18 2005)
phpEventCalendar HTML injection
- Madelman (Jan 25 2005)
phpGiftReq SQL Injection
- Madelman (Jan 16 2005)
PHRACK #63 CALL FOR PAPERS
- rm_at_phrack.org (Jan 22 2005)
Portcullis Security Advisory 05-001
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-002 Spectrum Cash Receipting System Weak Password Encryption
- Paul J Docherty (Jan 24 2005)
Portcullis Security Advisory 05-003
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-004
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-005
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-006
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-007
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-008
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-009
- Paul J Docherty (Jan 10 2005)
Portcullis Security Advisory 05-010
- Paul J Docherty (Jan 10 2005)
QWikiwiki directory traversal vulnerability
- Madelman (Jan 04 2005)
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)
- NGSSoftware Insight Security Research (Jan 19 2005)
RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)
- NGSSoftware Insight Security Research (Jan 19 2005)
RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)
- NGSSoftware Insight Security Research (Jan 19 2005)
RealVNC Contact
- DSGM (Jan 21 2005)
Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser
- Peter Kruse (Jan 03 2005)
rssh and scponly arbitrary command execution
- Derek Martin (Jan 14 2005)
Santy and SSL
- Ofer Shezaf (Jan 06 2005)
SB2005002: pron to bypass APF checking uid(0) routine
- x90c (Jan 12 2005)
Security Advisory: BiTBOARD xss
- Martin Heistermann (Jan 12 2005)
Security Advisory: Woltlab Burning Board Lite formmail.php XSS
- Martin Heistermann (Jan 08 2005)
Security Bulletin - SSRT4875 rev.1 - HP Tru64 UNIX Java (TM) Technology Software Denial of Service (DoS)
- Boren, Rich (SSRT) (Jan 31 2005)
Security Contact for Nokia Mobile phone softwares
- rohit_at_kritikalsolutions.com (Jan 10 2005)
Security Contact within RIM / Blackberry
- Mark Litchfield (Jan 20 2005)
SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
- Casper.Dik_at_Sun.COM (Jan 30 2005)
- 3APA3A (Jan 30 2005)
- Lee Dilkie (Jan 29 2005)
- David LeBlanc (Jan 28 2005)
- Damien Miller (Jan 28 2005)
- David LeBlanc (Jan 28 2005)
- Michael Hampton (Jan 25 2005)
- 3APA3A (Jan 24 2005)
Serious Vulnerabilities In PhotoPost ReviewPost
- GulfTech Security (Jan 03 2005)
Server crash in Breed patch #1
- Luigi Auriemma (Jan 13 2005)
Simple PHP Blog directory traversal vulnerability
- Madelman (Jan 07 2005)
Siteman User Database Line Insertion Vulnerability
- shoalie sefid (Jan 22 2005)
Socket termination, format string and XSS in Soldner Secret Wars 30830
- Luigi Auriemma (Jan 04 2005)
Socket unreacheable in Amp II engine
- Luigi Auriemma (Jan 06 2005)
SQL Injection Vulnerability in Invision Community Blog
- darkhawk matrix (Jan 08 2005)
SquirrelMail Security Advisory
- Jonathan Angliss (Jan 28 2005)
Squirrelmail vacation v0.15 local root exploit
- LSS Security (Jan 11 2005)
STG Security Advisory: [SSA-20041224-21] File extensions restriction bypass vulnerability in GNUBoard
- advisory_at_stgsecurity.com (Jan 02 2005)
STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities
- advisory_at_stgsecurity.com (Jan 12 2005)
STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure vulnerability
- advisory_at_stgsecurity.com (Jan 19 2005)
STG Security Advisory: [SSA-20050120-24] GForge 3.x directory traversal vulnerability
- advisory_at_stgsecurity.com (Jan 19 2005)
SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2005:003)
- Marcus Meissner (Jan 21 2005)
SUSE Security Announcement: libtiff/tiff (SUSE-SA:2005:001)
- Thomas Biege (Jan 10 2005)
SUSE Security Announcement: php4/mod_php4 (SUSE-SA:2005:002)
- Ludwig Nussel (Jan 17 2005)
SUSE Security Announcement: Realplayer 8 (SUSE-SA:2005:004)
- Marcus Meissner (Jan 24 2005)
The Misuse of RC4 in Microsoft Word and Excel
- Brendan Dolan-Gavitt (Jan 11 2005)
- Hongjun Wu (Jan 11 2005)
Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack
- shadown (Jan 14 2005)
- Hammud_Saway_at_premium.trendmicro.com (Jan 13 2005)
- CIRT Advisory (Jan 13 2005)
Troj/Winser-A malware analysis
- Steve Friedl (Jan 07 2005)
TSLSA-2005-0001 - multi
- Trustix Security Advisor (Jan 13 2005)
Two Vulnerabilities in ViewCVS
- Joxean Koret (Jan 01 2005)
UEBIMIAU <= 2.7.2 MULTIPLES VULNERABILITIES
- pokley (Jan 27 2005)
- Nash Leon (Jan 27 2005)
UnixWare 7.1.3 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities
- please_reply_to_security_at_sco.com (Jan 20 2005)
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : chroot A known exploit can break a chroot prison.
- please_reply_to_security_at_sco.com (Jan 18 2005)
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : x.org possible local socket hijacking
- please_reply_to_security_at_sco.com (Jan 26 2005)
Unrestricted I/O access vulnerability in INCA Gameguard
- David Roberts (Jan 28 2005)
- Ryu Connor (Jan 16 2005)
UPDATE: [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
- Thierry Carrez (Jan 12 2005)
UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG)
- Liu Die Yu (Jan 11 2005)
Various Buffer Overflows in Oracle 10g Tools
- David Litchfield (Jan 21 2005)
- Joxean Koret (Jan 20 2005)
Various vulnerabilities
- Luke Macken (Jan 06 2005)
Various Vulnerabilities in OWL Intranet Engine
- Joxean Koret (Jan 01 2005)
Various Vulnerabilities in SparkleBlog
- Alan W. Rateliff, II (Jan 15 2005)
- Kov�cs L�szl� (Jan 15 2005)
VERITAS Backup Exec 8.x/9.x Remote Universal Exploit
- class 101 (Jan 11 2005)
Vulnerabilities in eXponent 0.95
- Ahmad Muammar (Jan 25 2005)
WarFTPD 1.82 RC9 DoS
- MC.Iglo (Jan 27 2005)
WASC-Articles: "The 80/20 Rule for Web Application Security"
- robert_at_webappsec.org (Jan 31 2005)
WebWasher Classic - HTTP CONNECT weakness
- Oliver Karow (Jan 28 2005)
wifi AP + broadcoast ping
- Miroslav Kubik (Jan 25 2005)
WinAc AND WinHKI ZIP File Directory Transversal
- Rafel Ivgi, The-Insider (Jan 06 2005)
Winamp Exploit (POC) 5.08 Stack Overflow
- Black Dot (Jan 30 2005)
- Rojodos (Jan 28 2005)
Windows ANI File Parsing Proof Of Concept (MS05-002)
- assaf404_at_yahoo.com (Jan 12 2005)
Windows LoadImage API Heapoverflow exploit
- Berend-Jan Wever (Jan 01 2005)
Windows Media files allow opening any url in Internet Explorer
- Berend-Jan Wever (Jan 01 2005)
WMV (Windows Media Player) trojan in wild
- Marc Bejarano (Jan 11 2005)
Woltlab Burning Book addentry.php SQL Injection
- Martin Heistermann (Jan 10 2005)
XSS in Infinite Mobile Delivery v2.6 Webmail
- steven_at_lovebug.org (Jan 29 2005)
XSS in the nested BB tag in many forum
- pigrelax (Jan 15 2005)
XSS Vulnerability in ForumKIT
- tom cruise (Jan 13 2005)
XSS Vulnerability in Siteman v1.1.9
- Pedram hayati (Jan 14 2005)
Zyxel / Netgear and probably other routers leaking information.
- Jens Kalvik (Jan 31 2005)