Vulnwatch: by author

ad_at_heapoverflow.com
- 2x 0day Microsoft Windows Excel (Dec 19 2005)
Advisories
- [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability (Dec 13 2005)
Advisories_at_eeye.com
- [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II (Nov 10 2005)
- [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow (Nov 10 2005)
- [EEYEB-20050329] Windows Metafile Multiple Heap Overflows (Nov 08 2005)
- [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) (Nov 08 2005)
- [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability (Nov 04 2005)
- [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability (Oct 11 2005)
- [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability (Oct 11 2005)
- [EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability (Oct 11 2005)
- [EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability (Oct 11 2005)
advisories_at_matasano.com
- Network Appliance iSCSI Authentication Bypass (Oct 25 2005)
alert7_at_xfocus.org
- [xfocus-SD-051202]openMotif libUil Multiple vulnerability (Dec 01 2005)
- [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability (Nov 14 2005)
Cesar
- [Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities) (Oct 19 2005)
Chris Wysopal
- back orifice and snort - two words not to be used together (Oct 18 2005)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability (Dec 01 2005)
- Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation (Nov 29 2005)
- Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone (Nov 16 2005)
- Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite (Nov 14 2005)
- Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers (Nov 02 2005)
- Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access (Nov 02 2005)
- Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability (Nov 01 2005)
- Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability (Oct 19 2005)
H D Moore
- Google Search Appliance proxystylesheet Flaws (Nov 21 2005)
iDEFENSE Labs
- iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability (Nov 04 2005)
- iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability (Nov 04 2005)
- iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability (Oct 28 2005)
- iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability (Oct 24 2005)
- iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability (Oct 24 2005)
- iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability (Oct 24 2005)
- iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation (Oct 20 2005)
- iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation (Oct 20 2005)
- iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability (Oct 20 2005)
- iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability (Oct 13 2005)
- iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability (Oct 13 2005)
- iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability (Oct 11 2005)
- iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability (Oct 11 2005)
- iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability (Oct 10 2005)
- iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability (Oct 10 2005)
- RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (Oct 04 2005)
- iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (Oct 04 2005)
- iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability (Oct 04 2005)
labs-no-reply_at_idefense.com
- iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability (Dec 22 2005)
- iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability (Dec 21 2005)
- iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability (Dec 20 2005)
- iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite (Dec 20 2005)
- iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability (Dec 16 2005)
- iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability (Dec 14 2005)
- iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability (Dec 14 2005)
- iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow (Dec 14 2005)
- iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure (Dec 14 2005)
- iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability (Dec 14 2005)
- iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability (Dec 12 2005)
- iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability (Dec 09 2005)
- iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability (Dec 07 2005)
- iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability (Dec 06 2005)
- iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability (Dec 06 2005)
- iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability (Nov 17 2005)
- iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability (Nov 15 2005)
- iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability (Nov 15 2005)
- iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability (Nov 11 2005)
ma+nomail_at_dt.e-technik.uni-dortmund.de
- fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348) (Dec 21 2005)
- fetchmail security announcement 2005-02 (CVE-2005-3088) (Oct 27 2005)
Mariano Nu�ez Di Croce
- CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution (Dec 15 2005)
Michael M Kemp
- Business Objects WebIntelligence 6.5x Account Lockout and System DoS (Dec 14 2005)
NaPa
- Milliscript 1.4 Multiple Vulnerabilities (Dec 09 2005)
NGSSoftware Insight Security Research
- Patches available for critical flaws in HP Openview (Oct 05 2005)
Nils Ohlmeier
- Replay Attack Vulnerability on Sonys Instant Video Everywhere Service (Dec 30 2005)
Paul Laudanski
- XSS & Header Injection in Drupal and vBulletin (Nov 30 2005)
Security Advisories
- [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others (Dec 20 2005)
shadown
- New site location (Dec 23 2005)
Steve Manzuik
- RE: [VulnDiscuss] new IE bug (confirmed on ALL windows) (Nov 01 2005)
- OOO Troll - Ignore (Oct 11 2005)
vkatalov_at_elcomsoft.com
- Schneier's PasswordSafe password validation flaw (Nov 16 2005)
Watchfire Research
- XSS vulnerabilities in Google.com (Dec 21 2005)
yeah right
- PTnet IRCD heap exhaustion and integer overflow (Dec 30 2005)
ZATAZ Audits
- flexbackup default config insecure temporary file creation (Oct 17 2005)
zdi-disclosures_at_3com.com
- ZDI-05-003: Novell NetMail IMAPD Buffer Overflows (Nov 18 2005)
- ZDI-05-002: Clam Antivirus Remote Code Execution (Nov 04 2005)
- ZDI-05-001: VERITAS NetBackup Remote Code Execution (Oct 12 2005)