Vulnwatch: by author

Adam Gray
- NetWare Screensaver Authentication Bypass From The Local Console (Dec 12 2004)
advisories
- Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue (Nov 19 2004)
- Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues (Nov 19 2004)
advisory
- BindView Advisory: Memory Leak and DoS in NT4 RPC server (Oct 12 2004)
Brad Zimmerman
- Veritas BackupExec Agent vulnerability (Dec 17 2004)
Carsten H. Eiram
- Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation (Dec 21 2004)
- Secunia Research: My Firewall Plus Privilege Escalation Vulnerability (Dec 21 2004)
Chris Wysopal
- Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. (Dec 27 2004)
class 101
- [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. (Dec 27 2004)
CORE Security Technologies Advisories
- CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities (Oct 12 2004)
customer service mailbox
- iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability (Dec 21 2004)
- iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability (Dec 21 2004)
- iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability (Dec 21 2004)
- iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability (Dec 21 2004)
- iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability (Dec 21 2004)
- iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability (Dec 21 2004)
Daniel Milisic
- Norton AntiVirus 2004/2005 Scripting Vulnerability Pt.3 (Includes PoC VBScript Code) (Nov 11 2004)
Dragos Ruiu
- pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security (Oct 18 2004)
GreyMagic Security
- Online Script Decoder (Dec 07 2004)
- Regression in IE: Accessing remote/local content in IE (GM#009-IE) (Oct 12 2004)
GuidoZ
- UPDATED: Quick JPEG/GDI test & fix (timesaver) (Oct 07 2004)
- Quick JPEG/GDI test & fix (timesaver) (Oct 06 2004)
Hans Ulrich Niedermann
- TWiki search function allows arbitrary shell command execution (Nov 12 2004)
Jakob Balle
- Secunia Research: Multiple Browsers Tabbed Browsing Vulnerabilities (Oct 20 2004)
Matthias Andree
- bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7 (Oct 30 2004)
Michael Evanchik
- Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 (Dec 27 2004)
- Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 (Dec 26 2004)
- re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (Oct 24 2004)
Microsoft Security Response Center
- New Microsoft Security Response Center PGP Key [pgp] (Oct 05 2004)
NGSSoftware Insight Security Research
- IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L) (Dec 23 2004)
- IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J) (Dec 23 2004)
- Oracle wrapped procedure overflow (#NISR2122004J) (Dec 23 2004)
- Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H) (Dec 23 2004)
- Oracle TNS Listener DoS (#NISR2122004F) (Dec 23 2004)
- Oracle ISQLPlus file access vulnerability (#NISR2122004E) (Dec 23 2004)
- Oracle clear text passwords (#NISR2122004D) (Dec 23 2004)
- Oracle extproc local command execution (#NISR23122004C) (Dec 23 2004)
- Oracle extproc directory traversal (#NISR23122004B) (Dec 23 2004)
- Oracle extproc buffer overflow (#NISR23122004A) (Dec 23 2004)
- Oracle Character Conversion Bugs (#NISR2122004G) (Dec 23 2004)
- Oracle Trigger Abuse (#NISR2122004I) (Dec 23 2004)
- Patch available for high risk flaws in the AtHoc Toolbar (Oct 06 2004)
- Patch available for multiple high risk vulnerabilities in RealPlayer (Oct 06 2004)
- Patch available for critical IBM DB2 Universal Database flaws (Oct 05 2004)
Nicolas Gregoire
- Multiple vulnerabilities in phpMyAdmin (Dec 13 2004)
- Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL (Dec 08 2004)
- Multiple vulnerabilities in w3who ISAPI DLL (Dec 06 2004)
Nicolas Waisman
- Immunity, Inc. Advisor (Nov 27 2004)
NSFOCUS Security Team
- NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability (Oct 20 2004)
Paul Laudanski
- phpBB Attachment Mod Directory Traversal HTTP POST Injection (Dec 14 2004)
Paul Starzetz
- Linux kernel scm_send local DoS (Dec 14 2004)
- Linux kernel IGMP vulnerabilities (Dec 14 2004)
- Addendum, recent Linux <= 2.4.27 vulnerabilities (Nov 19 2004)
Peter Kruse
- Rendering large binary file as HTML makes Mozilla Firefox stop responding or crash (Oct 25 2004)
R00tCr4ck
- Multiple Vulnerabilities in Web Forums Server (Nov 02 2004)
- MS-DOS Device Name Denial Of Service Vulnerability in Abyss Web Server X1 for Windows (Oct 20 2004)
- Multiple Vulnerabilities in CoolPHP (Oct 16 2004)
Rafel Ivgi
- Hotmail Cross Site Scripting Vulnerability #2 (Oct 15 2004)
Rafel Ivgi, The-Insider
- Hotmail Cross-Site Scripting Vulnerability #1 (Oct 14 2004)
- Yahoo! Mail Cross-Site Scripting Vulnerability (Oct 14 2004)
- Cross-Site-Scripting Vulnerability in Microsoft.com (Oct 04 2004)
Secure Computer Group
- [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software (Dec 14 2004)
- [CAN-2004-1022] Insecure Credential Storage on Kerio Software (Dec 14 2004)
Steve Shockley
- Re: Online Script Decoder (Dec 07 2004)
Thomas Kristensen
- [SA12981] Secunia Research: Opera Download Dialog Spoofing Vulnerability (Dec 10 2004)
wirepair
- Re: CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities (Oct 12 2004)