Previous period

Next period

66 messages starting Oct 05 04 and ending Dec 27 04
Date index | Thread index | Author index

• Patch available for critical IBM DB2 Universal Database flaws NGSSoftware Insight Security Research (Oct 05)
• New Microsoft Security Response Center PGP Key [pgp] Microsoft Security Response Center (Oct 05)
• Patch available for multiple high risk vulnerabilities in RealPlayer NGSSoftware Insight Security Research (Oct 06)
• Patch available for high risk flaws in the AtHoc Toolbar NGSSoftware Insight Security Research (Oct 06)
• Quick JPEG/GDI test & fix (timesaver) GuidoZ (Oct 06)
• UPDATED: Quick JPEG/GDI test & fix (timesaver) GuidoZ (Oct 07)
• Regression in IE: Accessing remote/local content in IE (GM#009-IE) GreyMagic Security (Oct 12)
• CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities CORE Security Technologies Advisories (Oct 12)
  • Re: CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities wirepair (Oct 12)
• BindView Advisory: Memory Leak and DoS in NT4 RPC server advisory (Oct 13)
• Multiple Vulnerabilities in CoolPHP R00tCr4ck (Oct 17)
• pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security Dragos Ruiu (Oct 18)
• Secunia Research: Multiple Browsers Tabbed Browsing Vulnerabilities Jakob Balle (Oct 20)
• MS-DOS Device Name Denial Of Service Vulnerability in Abyss Web Server X1 for Windows R00tCr4ck (Oct 20)
• NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability NSFOCUS Security Team (Oct 21)
• re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 Michael Evanchik (Oct 25)
• Rendering large binary file as HTML makes Mozilla Firefox stop responding or crash Peter Kruse (Oct 25)
• bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7 Matthias Andree (Oct 30)
• Multiple Vulnerabilities in Web Forums Server R00tCr4ck (Nov 02)
• Cross-Site-Scripting Vulnerability in Microsoft.com Rafel Ivgi, The-Insider (Nov 04)
• Norton AntiVirus 2004/2005 Scripting Vulnerability Pt.3 (Includes PoC VBScript Code) Daniel Milisic (Nov 11)
• TWiki search function allows arbitrary shell command execution Hans Ulrich Niedermann (Nov 12)
• Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues advisories (Nov 19)
• Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue advisories (Nov 19)
• Addendum, recent Linux <= 2.4.27 vulnerabilities Paul Starzetz (Nov 19)
• Immunity, Inc. Advisor Nicolas Waisman (Nov 29)
• Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (Dec 06)
  • Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (Dec 08)
• Online Script Decoder GreyMagic Security (Dec 07)
  • Re: Online Script Decoder Steve Shockley (Dec 07)
• [SA12981] Secunia Research: Opera Download Dialog Spoofing Vulnerability Thomas Kristensen (Dec 12)
• NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (Dec 13)
• Multiple vulnerabilities in phpMyAdmin Nicolas Gregoire (Dec 13)
• phpBB Attachment Mod Directory Traversal HTTP POST Injection Paul Laudanski (Dec 14)
• [CAN-2004-1022] Insecure Credential Storage on Kerio Software Secure Computer Group (Dec 14)
• [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software Secure Computer Group (Dec 14)
• Linux kernel IGMP vulnerabilities Paul Starzetz (Dec 14)
• Linux kernel scm_send local DoS Paul Starzetz (Dec 14)
• Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi, The-Insider (Dec 15)
• Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi, The-Insider (Dec 15)
• Hotmail Cross Site Scripting Vulnerability #2 Rafel Ivgi (Dec 15)
• Veritas BackupExec Agent vulnerability Brad Zimmerman (Dec 17)
• Secunia Research: My Firewall Plus Privilege Escalation Vulnerability Carsten H. Eiram (Dec 21)
• Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation Carsten H. Eiram (Dec 21)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability customer service mailbox (Dec 22)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability customer service mailbox (Dec 22)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability customer service mailbox (Dec 22)
• iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability customer service mailbox (Dec 22)
• iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability customer service mailbox (Dec 22)
• iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability customer service mailbox (Dec 22)
• Oracle Trigger Abuse (#NISR2122004I) NGSSoftware Insight Security Research (Dec 23)
• Oracle Character Conversion Bugs (#NISR2122004G) NGSSoftware Insight Security Research (Dec 23)
• Oracle extproc buffer overflow (#NISR23122004A) NGSSoftware Insight Security Research (Dec 23)
• Oracle extproc directory traversal (#NISR23122004B) NGSSoftware Insight Security Research (Dec 23)
• Oracle extproc local command execution (#NISR23122004C) NGSSoftware Insight Security Research (Dec 23)
• Oracle clear text passwords (#NISR2122004D) NGSSoftware Insight Security Research (Dec 23)
• Oracle ISQLPlus file access vulnerability (#NISR2122004E) NGSSoftware Insight Security Research (Dec 23)
• Oracle TNS Listener DoS (#NISR2122004F) NGSSoftware Insight Security Research (Dec 23)
• Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H) NGSSoftware Insight Security Research (Dec 23)
• Oracle wrapped procedure overflow (#NISR2122004J) NGSSoftware Insight Security Research (Dec 23)
• IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J) NGSSoftware Insight Security Research (Dec 23)
• IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L) NGSSoftware Insight Security Research (Dec 23)
• Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 Michael Evanchik (Dec 27)
  • <Possible follow-ups>
  • Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 Michael Evanchik (Dec 27)
• [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. class 101 (Dec 27)
  • Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. Chris Wysopal (Dec 27)

Previous period

Next period