Bugtraq: by subject

[ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation
- Thierry Carrez (Oct 03 2005)
[ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files
- Thierry Carrez (Oct 03 2005)
[ GLSA 200510-03 ] Uim: Privilege escalation vulnerability
- Sune Kloppenborg Jeppesen (Oct 04 2005)
[ GLSA 200510-04 ] Texinfo: Insecure temporary file creation
- Thierry Carrez (Oct 05 2005)
[ GLSA 200510-05 ] Ruby: Security bypass vulnerability
- Sune Kloppenborg Jeppesen (Oct 06 2005)
[ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import
- Sune Kloppenborg Jeppesen (Oct 06 2005)
[ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability
- Thierry Carrez (Oct 07 2005)
[ GLSA 200510-08 ] xine-lib: Format string vulnerability
- Sune Kloppenborg Jeppesen (Oct 08 2005)
[ GLSA 200510-09 ] Weex: Format string vulnerability
- Sune Kloppenborg Jeppesen (Oct 08 2005)
[ GLSA 200510-10 ] uw-imap: Remote buffer overflow
- Thierry Carrez (Oct 11 2005)
[ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback
- Thierry Carrez (Oct 12 2005)
[ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow
- Sune Kloppenborg Jeppesen (Oct 13 2005)
[ GLSA 200510-13 ] SPE: Insecure file permissions
- Thierry Carrez (Oct 15 2005)
[ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues
- Thierry Carrez (Oct 17 2005)
[ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing
- Sune Kloppenborg Jeppesen (Oct 17 2005)
[ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability
- Sune Kloppenborg Jeppesen (Oct 17 2005)
[ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows
- Thierry Carrez (Oct 20 2005)
[ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng
- Thierry Carrez (Oct 20 2005)
[ GLSA 200510-19 ] cURL: NTLM username stack overflow
- Thierry Carrez (Oct 22 2005)
[ GLSA 200510-20 ] Zope: File inclusion through RestructuredText
- Thierry Carrez (Oct 25 2005)
[ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities
- Thierry Carrez (Oct 25 2005)
[ GLSA 200510-22 ] SELinux PAM: Local password guessing attack
- Thierry Carrez (Oct 28 2005)
[ GLSA 200510-23 ] TikiWiki: XSS vulnerability
- dave canuck (Oct 28 2005)
- Thierry Carrez (Oct 28 2005)
- Thierry Carrez (Oct 28 2005)
[ GLSA 200510-24 ] Mantis: Multiple vulnerabilities
- Thierry Carrez (Oct 28 2005)
[ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors
- Sune Kloppenborg Jeppesen (Oct 30 2005)
[ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow
- Sune Kloppenborg Jeppesen (Oct 30 2005)
[Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities)
- Cesar (Oct 20 2005)
[CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection
- CIRT.DK Advisory (Oct 27 2005)
[Dailydave] Security contact for ...
- security curmudgeon (Oct 07 2005)
[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability
- Advisories_at_eeye.com (Oct 11 2005)
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability
- Advisories_at_eeye.com (Oct 11 2005)
[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability
- Advisories_at_eeye.com (Oct 11 2005)
[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability
- Advisories_at_eeye.com (Oct 11 2005)
[Full-disclosure] [USN-208-1] SSH server vulnerability
- Martin Pitt (Oct 18 2005)
[Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted
- Clayton Kossmeyer (Oct 18 2005)
[Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
- Paul Laudanski (Oct 17 2005)
[Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
- Bipin Gautam (Oct 28 2005)
- Eygene A. Ryabinkin (Oct 26 2005)
- Andrey Bayora (Oct 27 2005)
- Debasis Mohanty (Oct 25 2005)
- Andrey Bayora (Oct 25 2005)
[Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
- SEC Consult Research (Oct 27 2005)
- Florian Weimer (Oct 27 2005)
[Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail
- bambenek_at_gmail.com (Sep 30 2005)
[KAPDA::#6] Punbb SQL Injection Vulnerability
- alireza hassani (Oct 19 2005)
- arpen_at_home.se (Oct 18 2005)
- advisory_at_kapda.ir (Oct 14 2005)
[KAPDA::#8] Domain Manager Pro Vulnerability
- advisory_at_securityfocus.com (Oct 21 2005)
[KAPDA::#9] Techno Dreams Scripts Vulnerabilities
- advisory_at_kapda.ir (Oct 26 2005)
[KDE Security Advisory] KOffice/KWord RTF import buffer overflow
- Dirk Mueller (Oct 11 2005)
[OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl)
- OpenPKG (Oct 16 2005)
[SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability
- Gary Oleary-Steele (Oct 12 2005)
[SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow
- Gary Oleary-Steele (Oct 12 2005)
[security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access
- security-alert_at_hp.com (Oct 07 2005)
[security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege
- security-alert_at_hp.com (Oct 06 2005)
[security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
- security-alert_at_hp.com (Oct 04 2005)
[security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access
- security-alert_at_hp.com (Oct 04 2005)
[security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code
- security-alert_at_hp.com (Oct 04 2005)
[security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
- security-alert_at_hp.com (Oct 04 2005)
[security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
- security-alert_at_hp.com (Oct 13 2005)
[security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access
- security-alert_at_hp.com (Oct 07 2005)
[security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
- security-alert_at_hp.com (Oct 19 2005)
[security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
- security-alert_at_hp.com (Oct 21 2005)
[security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005
- security-alert_at_hp.com (Oct 24 2005)
[security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS)
- security-alert_at_hp.com (Oct 06 2005)
[security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code
- security-alert_at_hp.com (Oct 04 2005)
[security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS)
- Security Alert (Oct 13 2005)
[SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution
- Martin Schulze (Oct 25 2005)
[SECURITY] [DSA 833-1] New mysql-dfsg-4.1 packages fix arbitrary code execution
- Martin Schulze (Sep 30 2005)
[SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution
- Martin Schulze (Oct 04 2005)
[SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution
- Martin Schulze (Sep 30 2005)
[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
- Martin Schulze (Oct 01 2005)
[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting
- Martin Schulze (Oct 01 2005)
[SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service
- Martin Schulze (Oct 01 2005)
[SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities
- Michael Stone (Oct 02 2005)
[SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file
- Martin Schulze (Oct 03 2005)
[SECURITY] [DSA 840-1] New drupal packages fix remote command execution
- Martin Schulze (Oct 04 2005)
[SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution
- Martin Schulze (Oct 04 2005)
[SECURITY] [DSA 843-1] New arc packages fix insecure temporary files
- Martin Schulze (Oct 04 2005)
[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
- Martin Schulze (Oct 05 2005)
[SECURITY] [DSA 845-1] New mason packages fix missing init script
- Martin Schulze (Oct 06 2005)
[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities
- Martin Schulze (Oct 07 2005)
[SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution
- Martin Schulze (Oct 07 2005)
[SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities
- Martin Schulze (Oct 08 2005)
[SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass
- Martin Schulze (Oct 08 2005)
[SECURITY] [DSA 850-1] New tcpdump packages fix denial of service
- Martin Schulze (Oct 08 2005)
[SECURITY] [DSA 851-1] New openvpn packages fix denial of service
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 854-1] New tcpdump packages fix denial of service
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
- Martin Schulze (Oct 09 2005)
[SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution
- Martin Schulze (Oct 10 2005)
[SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution
- Martin Schulze (Oct 10 2005)
[SECURITY] [DSA 860-1] New Ruby packages fix safety bypass
- Martin Schulze (Oct 10 2005)
[SECURITY] [DSA 861-1] New uw-imap packages fix arbitrary code execution
- Martin Schulze (Oct 10 2005)
[SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass
- Martin Schulze (Oct 11 2005)
[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
- Martin Schulze (Oct 11 2005)
[SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass
- Martin Schulze (Oct 12 2005)
[SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files
- Martin Schulze (Oct 13 2005)
[SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities
- Martin Schulze (Oct 19 2005)
[SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file
- Martin Schulze (Oct 20 2005)
[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities
- Martin Schulze (Oct 20 2005)
[SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution
- Martin Schulze (Oct 20 2005)
[SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution
- Martin Schulze (Oct 25 2005)
[SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution
- Martin Schulze (Oct 25 2005)
[SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution
- Martin Schulze (Oct 25 2005)
[SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution
- Martin Schulze (Oct 26 2005)
[SECURITY] [DSA 873-1] New net-snmp packages fix denial of service
- Martin Schulze (Oct 26 2005)
[SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution
- Martin Schulze (Oct 27 2005)
[SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness
- Martin Schulze (Oct 27 2005)
[SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution
- Martin Schulze (Oct 27 2005)
[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities
- Martin Schulze (Oct 28 2005)
[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution
- Martin Schulze (Oct 28 2005)
[SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1
- Andreas Zeidler (Oct 12 2005)
- max_at_jestsuper.pl (Oct 10 2005)
[SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability
- snsadv (Oct 21 2005)
[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
- snsadv (Oct 25 2005)
[USN-151-3] zlib vulnerabilities
- Martin Pitt (Oct 28 2005)
[USN-155-3] Fixed mozilla locale packages
- Martin Pitt (Oct 04 2005)
[USN-193-1] dia vulnerability
- Martin Pitt (Oct 04 2005)
[USN-194-1] texinfo vulnerability
- Martin Pitt (Oct 06 2005)
[USN-195-1] Ruby vulnerability
- Martin Pitt (Oct 10 2005)
[USN-196-1] Xine library vulnerability
- Martin Pitt (Oct 10 2005)
[USN-197-1] Shorewall vulnerability
- Martin Pitt (Oct 10 2005)
[USN-198-1] cfengine vulnerabilities
- Martin Pitt (Oct 10 2005)
[USN-199-1] Linux kernel vulnerabilities
- Martin Pitt (Oct 10 2005)
[USN-200-1] Thunderbird vulnerabilities
- Martin Pitt (Oct 10 2005)
[USN-201-1] SqWebmail vulnerabilities
- Martin Pitt (Oct 11 2005)
[USN-202-1] KOffice vulnerability
- Martin Pitt (Oct 12 2005)
[USN-203-1] Abiword vulnerabilities
- Martin Pitt (Oct 13 2005)
[USN-204-1] SSL library vulnerability
- Martin Pitt (Oct 14 2005)
[USN-205-1] Curl and wget vulnerabilities
- Martin Pitt (Oct 14 2005)
[USN-206-1] Lynx vulnerability
- Martin Pitt (Oct 17 2005)
[USN-206-2] Fixed lynx packages for USN-206-1
- Martin Pitt (Oct 28 2005)
[USN-207-1] PHP vulnerability
- Martin Pitt (Oct 17 2005)
[USN-208-1] graphviz vulnerability
- Martin Pitt (Oct 17 2005)
[USN-208-1] SSH server vulnerability
- Martin Pitt (Oct 17 2005)
[USN-210-1] netpbm vulnerability
- Martin Pitt (Oct 18 2005)
[USN-211-1] Enigmail vulnerability
- Martin Pitt (Oct 20 2005)
[USN-212-1] libgda2 vulnerability
- Martin Pitt (Oct 28 2005)
[USN-213-1] sudo vulnerability
- Martin Pitt (Oct 28 2005)
A common researcher diagnosis error: misreading error messages
- Steven M. Christey (Oct 04 2005)
Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability
- Stefan Esser (Oct 22 2005)
Advisory 17/2005: phpBB Multiple Vulnerabilities
- Stefan Esser (Oct 30 2005)
Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()
- Stefan Esser (Oct 31 2005)
Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()
- Stefan Esser (Oct 31 2005)
Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability
- Stefan Esser (Oct 31 2005)
Advisory: WZCS vulnerabilities
- Brian J. Bartlett (Oct 05 2005)
- donctl (Oct 04 2005)
Aenovo Multiple Vulnerabilities
- advisory_at_kapda.ir (Oct 07 2005)
Aenovo Multiple Vulnerabilities (Patch)
- ali202_at_fastermail.com (Oct 16 2005)
Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
- Seth Fogie (Oct 14 2005)
Announcement : Core Banking Application Security List
- Lila Buchalski (Oct 05 2005)
Announcement: The Web Application Firewall Evaluation Criteria v1
- contact_at_webappsec.org (Oct 09 2005)
Antivirus detection bypass by special crafted archive.
- Williams, James K (Oct 14 2005)
- unsecure_at_writeme.com (Oct 07 2005)
APPLE-SA-2005-10-31 Mac OS X v10.4.3
- noreply_at_securityfocus.com (Oct 31 2005)
aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities
- chburchert_at_web.de (Oct 21 2005)
aspReady FAQ - open for SQL-injections
- preben_at_watchcom.no (Oct 06 2005)
cacam_logsecurity_win32 exploit published on 20051018 by Metasploit
- Williams, James K (Oct 19 2005)
CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
- Williams, James K (Oct 19 2005)
- Williams, James K (Oct 14 2005)
Call for Papers - DIMVA 2006
- Thomas Biege (Oct 04 2005)
Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
- Stefano Zanero (Oct 03 2005)
- Neil Dickey (Oct 04 2005)
- dave kleiman (Oct 03 2005)
- L. Adrian Griffis (Oct 03 2005)
- Jason Coombs (Oct 01 2005)
- Lachniet, Mark (Oct 01 2005)
Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability
- Cisco Systems Product Security Incident Response Team (Oct 19 2005)
Ciscos VPN-Client-Passwords can be decrypted
- Thierry Zoller (Oct 16 2005)
CodeCon 2006 Call For Papers
- Len Sassaman (Oct 11 2005)
Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB
- ak_at_red-database-security.com (Oct 07 2005)
Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus
- ak_at_red-database-security.com (Oct 07 2005)
Cross-Site-Scripting Vulnerability in Oracle XMLDB
- ak_at_red-database-security.com (Oct 07 2005)
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
- retrogod_at_aliceposta.it (Oct 07 2005)
DboardGear - uncorrect import themes (SQL-inject)
- poizon_at_securityinfo.ru (Oct 25 2005)
DBoardGear SQL Injection
- almaster_at_hotmail.com (Oct 24 2005)
DCP - portal XSS & SQL attacks
- alex_at_aleksanet.com (Oct 24 2005)
e107 remote commands execution
- retrogod_at_aliceposta.it (Oct 18 2005)
Exploiting Windows Device Drivers Whitepaper
- Piotr Bania (Oct 16 2005)
F.E.A.R. 1.01 likes lithsock
- Luigi Auriemma (Oct 21 2005)
fetchmail security announcement 2005-02 (CVE-2005-3088)
- ma+nomail_at_dt.e-technik.uni-dortmund.de (Oct 27 2005)
File Including In FLAT NUKE
- abducter_minds_at_yahoo.com (Oct 22 2005)
File Including In PBLang
- abducter_minds_at_yahoo.com (Oct 27 2005)
Flat Nuke Cross Site Scripting
- alex_at_aleksanet.com (Oct 23 2005)
flexbackup default config insecure temporary file creation
- ZATAZ Audits (Oct 17 2005)
FreeBSD Security Advisory FreeBSD-SA-05:21.openssl
- FreeBSD Security Advisories (Oct 11 2005)
Gallery 2.x Remote File Access Vulnerability
- Bharat Mediratta (Oct 14 2005)
gnome-pty-helper writes arbitrary utmp records
- Paul Szabo (Oct 07 2005)
Google Talk cleartext proxy credentials vulnerability
- 3APA3A (Oct 15 2005)
- m123303_at_richmond.ac.uk (Oct 14 2005)
High Risk Vulnerability in Sun Directory Server
- NGSSoftware Insight Security Research (Oct 06 2005)
iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 04 2005)
- iDEFENSE Labs (Oct 04 2005)
iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 04 2005)
iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 10 2005)
iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability
- iDEFENSE Labs (Oct 10 2005)
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability
- iDEFENSE Labs (Oct 11 2005)
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability
- iDEFENSE Labs (Oct 11 2005)
iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 13 2005)
iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 13 2005)
iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 20 2005)
iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation
- iDEFENSE Labs (Oct 20 2005)
iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation
- iDEFENSE Labs (Oct 20 2005)
iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 24 2005)
iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 24 2005)
iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 24 2005)
iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability
- iDEFENSE Labs (Oct 28 2005)
ie7 will have more mechanisms
- liudieyu_at_umbrella.name (Oct 17 2005)
Insecure Temporary Files in BMC/Control-M Agent
- Scott Cromar (Oct 22 2005)
Kaspersky Antivirus Remote Heap Overflow
- list_at_rem0te.com (Oct 03 2005)
Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
- Piotr Bania (Oct 13 2005)
Linksys WRT54G/S Directory Traversal
- Shell (Oct 18 2005)
Linux Orinoco drivers information leakage
- Meder Kydyraliev (Oct 11 2005)
Looking for a security contact at Macrovision/InstallShield
- Richard M. Smith (Oct 25 2005)
Looking for security contacts at Sony and Lenovo (FKA IBM)
- Richard M. Smith (Oct 25 2005)
Lynx Remote Buffer Overflow
- Ulf Harnhammar (Oct 16 2005)
MailEnable W3C Logging Remote Buffer Overflow Proof of Concept
- advisory_at_wirecom.org (Oct 06 2005)
MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities
- Mandriva Security Team (Oct 03 2005)
MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability
- Mandriva Security Team (Oct 06 2005)
MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities
- Mandriva Security Team (Oct 06 2005)
MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities
- Mandriva Security Team (Oct 06 2005)
MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability
- Mandriva Security Team (Oct 06 2005)
MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability
- Mandriva Security Team (Oct 07 2005)
MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability
- Mandriva Security Team (Oct 07 2005)
MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability
- Mandriva Security Team (Oct 11 2005)
MDKSA-2005:179 - Updated openssl packages fix vulnerabilities
- Mandriva Security Team (Oct 11 2005)
MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability
- Mandriva Security Team (Oct 11 2005)
MDKSA-2005:181 - Updated squid packages fix vulnerabilities
- Mandriva Security Team (Oct 11 2005)
MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability
- Mandriva Security Team (Oct 13 2005)
MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability
- Mandriva Security Team (Oct 13 2005)
MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities
- Mandriva Security Team (Oct 13 2005)
MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability
- Mandriva Security Team (Oct 14 2005)
MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow
- Mandriva Security Team (Oct 18 2005)
MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability.
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability.
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities.
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities.
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities.
- Mandriva Security Team (Oct 20 2005)
MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities
- Mandriva Security Team (Oct 25 2005)
MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities.
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:195 - Updated squid packages fix vulnerabilities
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities.
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities.
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities
- Mandriva Security Team (Oct 26 2005)
MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues.
- Mandriva Security Team (Oct 27 2005)
MDKSA-2005:201 - Updated sudo packages fix vulnerability
- Mandriva Security Team (Oct 27 2005)
Metasploit Framework v2.5
- H D Moore (Oct 18 2005)
Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit
- atmaca_at_icqmail.com (Oct 29 2005)
Mozilla Thunderbird SMTP down-negotiation weakness
- Jason Haar (Oct 26 2005)
- Bob Beck (Oct 26 2005)
- Tony Finch (Oct 26 2005)
- Jason Haar (Oct 26 2005)
- Thomas Henlich (Oct 25 2005)
Multiple Critical and High Vulnerabilities in Oracle Database Server
- NGSSoftware Insight Security Research (Oct 18 2005)
Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
- Andrey Bayora (Oct 28 2005)
- mgotts_at_2roads.com (Oct 28 2005)
- Dave English (Oct 26 2005)
- Andreas Marx (Oct 26 2005)
- Andrey Bayora (Oct 26 2005)
- Andrey Bayora (Oct 25 2005)
Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte
- Williams, James K (Oct 27 2005)
Multiple vulnerabilities within RockLiffe MailSite Express WebMail
- Paul Craig (Oct 27 2005)
mwcollect v3.0.0 Release
- Georg Wicherski (Oct 30 2005)
MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass
- retrogod_at_aliceposta.it (Oct 01 2005)
NetFlow Analyzer 4 XSS Vulnerability
- why_at_nsfocus.com (Oct 17 2005)
Network Appliance iSCSI Authentication Bypass
- steve.shockley_at_shockley.net (Oct 28 2005)
- Steve Shockley (Oct 27 2005)
- advisories_at_matasano.com (Oct 25 2005)
New List
- David Ahmad (Oct 31 2005)
Nuked klan 1.7: Bypassed level admin on forum(corrected)
- papipsycho_at_hotmail.com (Oct 23 2005)
Nuked klan 1.7: Remote Exploit
- papipsycho_at_hotmail.com (Oct 24 2005)
Nuked klan 1.7: SQL vulnerability
- papipsycho_at_hotmail.com (Oct 22 2005)
Nuked klan 1.7: XSS vulnerability
- papipsycho_at_hotmail.com (Oct 21 2005)
Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability
- security_at_aewebworks.com (Oct 02 2005)
OpenServer 5.0.7 : authsh and backupsh buffer overflow
- please_reply_to_security_at_sco.com (Oct 20 2005)
OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.
- v9 (Oct 30 2005)
Opinion: Complete failure of Oracle security response and utter neglect of t
- Silent / Saracoth (Oct 10 2005)
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
- Kurt Seifried (Oct 07 2005)
- Tony Jambu (Oct 07 2005)
- Radoslav Dejanovi� (Oct 07 2005)
- Ivan . (Oct 06 2005)
- ak_at_red-database-security.com (Oct 07 2005)
- David Litchfield (Oct 07 2005)
- Gadi Evron (Oct 07 2005)
- David Litchfield (Oct 07 2005)
- Gadi Evron (Oct 07 2005)
- Rainer Duffner (Oct 06 2005)
- Cesar (Oct 06 2005)
- David Litchfield (Oct 06 2005)
- Rainer Duffner (Oct 06 2005)
- David Litchfield (Jan 06 2005)
Oracle 10g - emagent.exe Stack-Based Overflow
- SPI Labs (Oct 19 2005)
Oracle Workflow CSS Vulnerability wf_monitor
- ak_at_red-database-security.com (Oct 19 2005)
Oracle Workflow CSS Vulnerability wf_route
- ak_at_red-database-security.com (Oct 19 2005)
PAKCON II: Call for Paper (CfP), Final Call!
- Ayaz Ahmed Khan (Oct 05 2005)
Patches available for critical flaws in HP Openview
- NGSSoftware Insight Security Research (Oct 05 2005)
php < 4.4.1 htaccess apache dos
- Eric Romang / ZATAZ.com (Oct 24 2005)
PHP iCalendar CSS
- ascii (Oct 25 2005)
PHP local safedir restriction bypass
- slythers_at_gmail.com (Oct 17 2005)
PHP-Nuke Cross-Site Scripting Vulnerability
- bhfh01_at_gmail.com (Oct 25 2005)
phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
- Nicob (Oct 27 2005)
- Tatercrispies (Oct 27 2005)
- Paul Laudanski (Oct 25 2005)
- Paul Laudanski (Oct 25 2005)
- alphakgen_at_gmail.com (Oct 22 2005)
PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution
- retrogod_at_aliceposta.it (Oct 23 2005)
Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB
- ak_at_red-database-security.com (Oct 07 2005)
Planet Technology Corp FGSW2402RS switch default password / "backdoor"
- lms_at_fe.up.pt (Oct 05 2005)
Possible Bug in PHP-Fusion 6.0.204
- Paul (Oct 24 2005)
- peanut_at_black-rat.no-ip.com (Oct 24 2005)
PullThePlug Contest: Call For Papers
- announcements_at_pulltheplug.org (Oct 10 2005)
Remote File Inclusion in forum PunBB
- arpen_at_securityfocus.com (Oct 29 2005)
- rod hedor (Oct 23 2005)
Remote File Inclusion in vCard :)
- X_at_securityfocus.com, (Oct 25 2005)
Remote MySQL User on Cpanel Default installation with blank password
- sup3r_linux_at_hotmail.com (Oct 25 2005)
Require many large corporate emails for contact regarding vulnerability.
- dcrab_at_hackerscenter.com (Oct 17 2005)
Research for network security news article
- lgreenem_at_cmp.com (Oct 12 2005)
Revised draft on ICMP attacks
- Fernando Gont (Oct 24 2005)
Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server
- David Litchfield (Oct 18 2005)
RTasarim WebAdmin modul SQL injection
- khc_at_bsdmail.org (Oct 13 2005)
SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
- Bernhard Mueller (Oct 25 2005)
SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS
- Bernhard Mueller (Oct 25 2005)
SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS
- Bernhard Mueller (Oct 21 2005)
Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow
- Secunia Research (Oct 13 2005)
Secunia Research: ALZip Multiple Archive Handling Buffer Overflow
- Secunia Research (Oct 05 2005)
Secunia Research: ATutor Multiple Vulnerabilities
- Secunia Research (Oct 27 2005)
Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability
- Secunia Research (Oct 26 2005)
Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
- Secunia Research (Oct 18 2005)
Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability
- Secunia Research (Oct 12 2005)
Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities
- Secunia Research (Oct 06 2005)
Secunia Research: Webroot Desktop Firewall Two Vulnerabilities
- Secunia Research (Oct 06 2005)
Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities
- Secunia Research (Oct 11 2005)
Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow
- Secunia Research (Oct 21 2005)
SECURECon 2006 Call for papers!
- Will Belcher (Oct 18 2005)
Security Advisory for Bugzilla 2.18.3, 2.20rc2, and 2.21
- mkanat_at_bugzilla.org (Sep 30 2005)
Security Contacr for Mycall
- Fixer (Oct 14 2005)
Security contact for ...
- Williams, James K (Oct 06 2005)
SecurityAlert SA025 : PHPNuke Remote Directory Traversal
- sp3x_at_securityreason.com (Oct 19 2005)
Shutdown TNS Listener via Oracle Forms Servlet
- ak_at_red-database-security.com (Oct 07 2005)
Shutdown TNS Listener via Oracle iSQL*Plus
- ak_at_red-database-security.com (Oct 07 2005)
Skype security advisory
- . EADS CCR DCR/STI/C (Oct 25 2005)
Some new whitepapers ...
- Jerome Athias (Oct 05 2005)
- Lila Buchalski (Oct 05 2005)
- David Litchfield (Oct 05 2005)
SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable)
- sikikmail_at_gmail.com (Oct 25 2005)
SQL IN FORUM.PHP
- ABDUCTER_MINDS_at_YAHOO.COM (Oct 30 2005)
SQL In Invision Gallery 2.0.3
- almaster_at_hotmail.com (Oct 30 2005)
SQL saphp Lesson
- almaster_at_hotmail.com (Oct 24 2005)
SQL-Injection in MyBulletinBoard allows attacker to become a board admin.
- Animal (Oct 26 2005)
SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061)
- Marcus Meissner (Oct 19 2005)
SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060)
- Sebastian Krahmer (Oct 17 2005)
SUSE Security Announcement: permissions (SUSE-SA:2005:062)
- Ludwig Nussel (Oct 24 2005)
The Malloc Maleficarum
- Phantasmal Phantasmagoria (Oct 11 2005)
Trend Micro's Response to the Magic Byte Bug
- Auri Rahimzadeh (Oct 29 2005)
Trillian remote crashable
- philipp_at_kolmann.at (Oct 03 2005)
Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability
- none_at_securityfocus.com (Oct 13 2005)
TSLSA-2005-0059 - multi
- Trustix Security Advisor (Oct 24 2005)
UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow
- please_reply_to_security_at_sco.com (Oct 20 2005)
Update for the magic byte bug
- Andrey Bayora (Oct 26 2005)
uplod phpshell in PHP Advanced Transfer Manager
- D_BuG (Oct 29 2005)
- sQl_at_hotmail.com (Oct 29 2005)
using php local file include vulnerabilities for command execution
- Andreas Zeidler (Oct 11 2005)
- Andreas Zeidler (Oct 11 2005)
Utopia News Pro 1.1.3 SQL Injection / cross site scripting
- retrogod_at_aliceposta.it (Oct 06 2005)
VERITAS NetBackup: Java User-Interface, format string vulnerability
- secure_at_symantec.com (Oct 12 2005)
versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover
- rgod_at_aliceposta.it (Oct 10 2005)
VoIP-Phones: Weakness in proccessing SIP-Notify-Messages
- Tobias Glemser (Oct 12 2005)
Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005
- Integrigy Security (Oct 19 2005)
Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
- preben_at_watchcom.no (Oct 28 2005)
WASC Threat Classification in 4 languages
- contact_at_webappsec.org (Oct 05 2005)
Windows host based firewall tester
- Morten Torstensen (Oct 18 2005)
- Tim (Oct 18 2005)
Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC
- ppwd25_at_hotmail.com (Oct 21 2005)
winrar 3.50 Exploit
- edward11_at_postmaster.co.uk (Oct 15 2005)
Woltlab Burning Board info_db.php multiple SQL injection
- admin_at_batznet.com (Oct 26 2005)
xloadimage buffer overflow.
- Ariel Berkman (Oct 05 2005)
XSS & Path Disclosure in Chipmunk's products
- alireza hassani (Oct 20 2005)
XSS vulnerability in Zeroblog
- alireza hassani (Oct 11 2005)
Yahoo RSS XSS Vulnerability
- alljer_at_gmail.com (Oct 17 2005)
Yahoo RSS XSS Vulnerability (Correction)
- alljer_at_gmail.com (Oct 17 2005)
Yapig: XSS / Code Injection Vulnerability
- enji_at_infosys.tuwien.ac.at (Oct 13 2005)
ZDI-05-001: VERITAS NetBackup Remote Code Execution
- zdi-disclosures_at_3com.com (Oct 12 2005)
Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable)
- sikikmail_at_gmail.com (Oct 22 2005)