Vulnwatch: by author

ad_at_heapoverflow.com
- Critical excel vulnerability for sale, read inside. (Jan 11 2006)
Advisories
- Updated Advisories - Incorrect CVE Information (Jan 11 2006)
- [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow (Jan 11 2006)
- [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow (Jan 11 2006)
- [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow (Jan 11 2006)
- [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow (Jan 11 2006)
- [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability (Jan 10 2006)
ascii
- Milkeyway Multiple Vulnerabilities (Mar 15 2006)
Cesar
- WLSI - Windows Local Shellcode Injection - Paper (Mar 14 2006)
- [Argeniss] Oracle Database Buffer overflows vulnerabilities in public procedures of XDB.DBMS_XMLSCHEMA{_INT} (Jan 26 2006)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products (Feb 15 2006)
- Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (Jan 26 2006)
- Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS (Jan 18 2006)
- Cisco Security Advisory: Cisco Call Manager Denial of Service (Jan 18 2006)
- Cisco Security Advisory: Cisco Call Manager Privilege Escalation (Jan 18 2006)
- Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks (Jan 12 2006)
- Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS) (Jan 11 2006)
CORE Security Technologies Advisories
- CORE-2006-0124: Cross-Site Scripting in Verisign’s haydn.exe CGI script (Mar 20 2006)
D.Snezhkov
- Remote access to NeuSecure/Netcool backend database via web interface credentials leakage (Mar 08 2006)
- Password disclosure and remote access in Netcool/NeuSecure Security information management platform (Feb 16 2006)
Digital Armaments
- Digital Armaments: Gallery web-based photo gallery remote file execution (Feb 16 2006)
- Digital Armaments: CMU SNMP utilities snmptrad Format String Vulnerability (Feb 07 2006)
- Digital Armaments: Apache auth_ldap module Multiple Format Strings Vulnerability (Jan 30 2006)
dong-hun you
- [INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability (Mar 11 2006)
- [INetCop Security Advisory] Global Hauri Virobot cookie exploit (Feb 21 2006)
eEye Advisories
- [EEYEB-20051017] Windows Media Player BMP Heap Overflow (Feb 14 2006)
Eldon Sprickerhoff
- Re: Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (Jan 31 2006)
Fortinet Research
- Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability (Jan 18 2006)
- Fortinet Advisory: Apple QuickTime Player Color Map Entry Size Buffer Overflow (Jan 12 2006)
- Fortinet Advisory: "Apple QuickTime Player ImageWidth Integer Overflow Vulnerability" (Jan 12 2006)
- Fortinet Security Advisory: "Apple QuickTime Player Improper Memory Access Vulnerability" (Jan 12 2006)
- Fortinet Advisory: Apple Quick Time Player ImageWidth Denial of Service Vulnerability (Jan 12 2006)
- Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Acces (Jan 12 2006)
- Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability (Jan 12 2006)
Infratech Research
- [ Secuobs - Advisory ] Another kind of DoS on Nokia cell phones (Feb 15 2006)
- [ Secuobs - Advisory ] Bluetooth : DoS on Nokia cell phones (Feb 10 2006)
Jean-Sébastien Guay-Leroux
- zoo contains exploitable buffer overflows (Feb 22 2006)
Ken Pfeil
- FW: failure notice (Mar 28 2006)
Konstantine
- Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Mar 17 2006)
labs-no-reply
- iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability (Mar 23 2006)
- iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability (Mar 23 2006)
- iDefense Security Advisory 02.24.06: SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability (Feb 24 2006)
labs-no-reply_at_idefense.com
- iDefense Security Advisory 03.02.06: EMC Dantz Retrospect 7 Backup client DoS Vulnerability (Mar 02 2006)
- iDefense Security Advisory 03.02.06: Apple Mac OS X passwd Arbitrary Binary File Creation/Modification (Mar 02 2006)
- iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability (Mar 02 2006)
- iDefense Security Advisory 02.14.06: Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability (Feb 14 2006)
- iDEFENSE Security Advisory 02.10.06: IBM Lotus Domino Server LDAP DoS Vulnerability (Feb 10 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability (Feb 08 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability (Feb 08 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability (Feb 08 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS passwd Command Buffer Overflow (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phgrafx Command Buffer Overflow (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability (Feb 07 2006)
- iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libph PHOTON_PATH Buffer Overflow Vulnerability (Feb 07 2006)
- iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability (Feb 01 2006)
- iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability (Feb 01 2006)
- iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability (Jan 23 2006)
- iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability (Jan 17 2006)
- iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability (Jan 17 2006)
- iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe Heap Overflow Vulnerability (Jan 17 2006)
- iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability (Jan 17 2006)
- iDefense Security Advisory 01.13.06: Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow (Jan 13 2006)
- iDefense Security Advisory 01.10.06: Sun Solaris uustat Buffer Overflow Vulnerability (Jan 10 2006)
- iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability (Jan 09 2006)
- iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability (Jan 05 2006)
- iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability (Jan 05 2006)
- iDefense Security Advisory 01.05.06: Blue Coat WinProxy Remote DoS Vulnerability (Jan 05 2006)
ma+nomail_at_dt.e-technik.uni-dortmund.de
- fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321) (Jan 22 2006)
Matthew Murphy
- Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd) (Feb 13 2006)
- Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd) (Feb 13 2006)
Michael Evanchik
- Re: FW: failure notice (Mar 28 2006)
Michal Zalewski
- Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Mar 16 2006)
- Re: Remote overflow in MSIE script action handlers (mshtml.dll) (Mar 16 2006)
- Remote overflow in MSIE script action handlers (mshtml.dll) (Mar 16 2006)
Mike Iglesias
- Re: Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (Jan 31 2006)
NaPa
- RE: Download Accelerator Plus can be tricked to download malicious file (Jan 05 2006)
NGSSoftware Insight Security Research
- Microsoft Outlook Critical Vulnerability (Jan 10 2006)
- Microsoft Exchange Critical Vulnerability (Jan 10 2006)
NSFOCUS Security Team
- NSFOCUS SA2006-01 : Winamp m3u File Processing Buffer Overflow Vulnerability (Feb 22 2006)
Research Infratech
- [ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer (Feb 06 2006)
- [ Secuobs - Advisory ] Bluetooth : DoS on hcidump 1.29 + PoC (Feb 06 2006)
- [ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones (Feb 06 2006)
Roman Medina-Heigl Hernandez
- RS-2006-1: Multiple flaws in VHCS 2.x (Feb 11 2006)
Steve Manzuik
- EEYE: Temporary workaround for IE createTextRange vulnerability (Mar 28 2006)
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- Re: FW: failure notice (Mar 28 2006)
Thierry Zoller
- [ TZO-012006 ] Checkpoint VPN-1 SecureClient insecure usage of CreateProcess() (Jan 17 2006)
vkatalov_at_elcomsoft.com
- PasswordSafe 3.0 weak random number generator allows key recovery attack (Mar 23 2006)
XFOCUS Security Team
- [xfocus-SD-060329]MPlayer: Multiple integer overflows (Mar 28 2006)
- [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (Mar 14 2006)
- Re: [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability (Feb 06 2006)
- [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability (Feb 06 2006)
- [xfocus-SD-060101]AIX getCommand&getShell two vulnerabilities (Jan 01 2006)