Most recent messages
482 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Wed Dec 01 2004 - 10:34:36 CST
Ending: Sat Jan 01 2005 - 16:21:29 CST

• SUSE Security Announcement: various kernel problems (SUSE-SA:2004:042) Marcus Meissner (Wed Dec 01 2004 - 08:31:23 CST)
• Disclosure of file system information in Mozilla Firefox and Opera Browser: Giovanni Delvecchio (Wed Dec 01 2004 - 10:15:25 CST)
  • Re: Disclosure of file system information in Mozilla Firefox and Opera Browser: Liu Die Yu (Wed Dec 01 2004 - 19:49:06 CST)
  • RE: Disclosure of file system information in Mozilla Firefox and Opera Browser: Thor Larholm (Mon Dec 06 2004 - 15:36:57 CST)
• Invision Power Board 'Allow auto login' setting override Hillel Himovich (Tue Nov 30 2004 - 14:38:55 CST)
• Re: Winamp - Buffer Overflow In IN_CDDA.dll Black Dot (Wed Dec 01 2004 - 06:42:36 CST)
• Re: Pi3Web/2.0.0 File-Disclosure/Path Disclosure vuln Holger Zimmermann (Tue Nov 30 2004 - 14:31:42 CST)
• [CLA-2004:904] Conectiva Security Announcement - cyrus-imapd Conectiva Updates (Wed Dec 01 2004 - 14:22:02 CST)
• Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. Reed Arvin (Wed Dec 01 2004 - 15:16:50 CST)
• [SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation Martin Schulze (Wed Dec 01 2004 - 10:50:18 CST)
• [USN-35-1] imagemagick vulnerabilities Martin Pitt (Tue Nov 30 2004 - 15:29:50 CST)
• [USN-36-1] NFS statd vulnerability Martin Pitt (Wed Dec 01 2004 - 08:36:03 CST)
• [USN-33-1] libgd vulnerabilities Martin Pitt (Mon Nov 29 2004 - 16:00:51 CST)
• [ GLSA 200411-37 ] Open DC Hub: Remote code execution Luke Macken (Sun Nov 28 2004 - 14:09:32 CST)
• [CLA-2004:902] Conectiva Security Announcement - abiword Conectiva Updates (Wed Dec 01 2004 - 09:28:58 CST)
• [USN-34-1] OpenSSH information leakage Martin Pitt (Tue Nov 30 2004 - 05:29:32 CST)
• [KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in "proxylog.dat" Kurczaba Associates advisories (Tue Nov 30 2004 - 20:02:54 CST)
• Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Thu Dec 02 2004 - 10:00:00 CST)
• Blog Torrent preview 0.8 - arbitary file download Steve Kemp (Thu Dec 02 2004 - 09:06:41 CST)
• Multiple vulnerabilities in Kreed 1.05 Luigi Auriemma (Thu Dec 02 2004 - 13:44:03 CST)
• [USN-37-1] cyrus21-imapd vulnerability Martin Pitt (Thu Dec 02 2004 - 05:40:07 CST)
• rssh and scponly arbitrary command execution Jason Wies (Thu Dec 02 2004 - 07:51:43 CST)
• Official IFRAME patch - make sure it installs correctly Berend-Jan Wever (Wed Dec 01 2004 - 18:49:52 CST)
• Remote Mercury32 Imap exploit JohnH (Wed Dec 01 2004 - 17:29:17 CST)
• [CLA-2004:905] Conectiva Security Announcement - squirrelmail Conectiva Updates (Thu Dec 02 2004 - 07:23:54 CST)
• FreeBSD Security Advisory FreeBSD-SA-04:17.procfs FreeBSD Security Advisories (Wed Dec 01 2004 - 18:12:26 CST)
• Advanced Guestbook Emile van Elen (Thu Dec 02 2004 - 13:40:21 CST)
  • Re: Advanced Guestbook Spy Hat (Mon Dec 06 2004 - 00:30:15 CST)
• [SECURITY] [DSA 604-1] New hpsockd packages fix denial of service Martin Schulze (Fri Dec 03 2004 - 02:18:54 CST)
• [ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution Thierry Carrez (Fri Dec 03 2004 - 10:47:18 CST)
• Opera 7.54 vulnerabilities again (still unfixed) Marc Schoenefeld (Sat Dec 04 2004 - 12:24:08 CST)
• Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (Mon Dec 06 2004 - 05:40:39 CST)
• [SECURITY] [DSA 605-1] New viewcvs packages fix information leak Martin Schulze (Mon Dec 06 2004 - 04:18:18 CST)
• Winamp - Buffer Overflow In IN_CDDA.dll [ Patch Released ] Brett Moore (Sun Dec 05 2004 - 18:29:50 CST)
• Hosting Controller mouse small (Sun Dec 05 2004 - 11:42:04 CST)
• [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library Luke Macken (Sun Dec 05 2004 - 10:27:47 CST)
• DoS leading to crash of client in Remote Execute 2.30 headpimppimp-industries.com (Sun Dec 05 2004 - 23:45:17 CST)
• Web Application Security Consortium 'Guest Articles' Call for Papers robertwebappsec.org (Sun Dec 05 2004 - 23:02:53 CST)
• Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux) madsys (Mon Dec 06 2004 - 04:53:27 CST)
• Local root exploit on Mac OS X with Adobe Version Cue fintler (Mon Dec 06 2004 - 20:15:32 CST)
  • Re: Local root exploit on Mac OS X with Adobe Version Cue Chet Ramey (Tue Dec 07 2004 - 13:05:14 CST)
• MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service Evgeny Demidov (Tue Dec 07 2004 - 12:18:38 CST)
• [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation Luke Macken (Tue Dec 07 2004 - 06:34:56 CST)
• Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2 Luigi Auriemma (Tue Dec 07 2004 - 11:26:45 CST)
• MDKSA-2004:142 - Updated gzip packages fix temporary file vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:15:48 CST)
• Multiple Vulnerabilities in paFileDB 3.1 Ahmad Muammar (Tue Dec 07 2004 - 01:25:54 CST)
  • Re: Multiple Vulnerabilities in paFileDB 3.1 Rafael San Miguel Carrasco (Thu Dec 09 2004 - 14:19:47 CST)
• Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0 John Bissell (Tue Dec 07 2004 - 21:41:20 CST)
• MD5 To Be Considered Harmful Someday Dan Kaminsky (Mon Dec 06 2004 - 17:29:34 CST)
  • Re: MD5 To Be Considered Harmful Someday Gandalf The White (Tue Dec 07 2004 - 16:54:34 CST)
  • Re: MD5 To Be Considered Harmful Someday Tim (Tue Dec 07 2004 - 18:13:06 CST)
  • Re: MD5 To Be Considered Harmful Someday Joel Maslak (Tue Dec 07 2004 - 19:51:48 CST)
  • RE: MD5 To Be Considered Harmful Someday Rager, Anton (Anton) (Wed Dec 08 2004 - 11:06:19 CST)
  • Re: MD5 To Be Considered Harmful Someday Joel Maslak (Tue Dec 07 2004 - 19:46:20 CST)
  • Re: MD5 To Be Considered Harmful Someday Gandalf The White (Tue Dec 07 2004 - 22:36:27 CST)
  • RE: MD5 To Be Considered Harmful Someday David Schwartz (Tue Dec 07 2004 - 22:01:13 CST)
  • Re: MD5 To Be Considered Harmful Someday Keith Oxenrider (Wed Dec 08 2004 - 15:44:34 CST)
  • Re: MD5 To Be Considered Harmful Someday Jack Lloyd (Wed Dec 08 2004 - 14:43:07 CST)
  • Re: MD5 To Be Considered Harmful Someday Dragos Ruiu (Wed Dec 08 2004 - 15:35:14 CST)
  • Re: MD5 To Be Considered Harmful Someday Jack Lloyd (Wed Dec 08 2004 - 15:19:27 CST)
  • Re: MD5 To Be Considered Harmful Someday Dan Kaminsky (Wed Dec 08 2004 - 16:03:56 CST)
  • Re: MD5 To Be Considered Harmful Someday Ruth A. Kramer (Sun Dec 05 2004 - 17:04:43 CST)
  • Re: MD5 To Be Considered Harmful Someday Dan Kaminsky (Wed Dec 08 2004 - 15:44:08 CST)
  • Re: MD5 To Be Considered Harmful Someday George Georgalis (Wed Dec 08 2004 - 15:30:56 CST)
  • Re: MD5 To Be Considered Harmful Someday Paul Wouters (Wed Dec 08 2004 - 15:05:50 CST)
  • Re: MD5 To Be Considered Harmful Someday Solar Designer (Wed Dec 08 2004 - 15:17:57 CST)
  • Re: MD5 To Be Considered Harmful Someday Paul Wouters (Wed Dec 08 2004 - 14:48:00 CST)
  • Re: MD5 To Be Considered Harmful Someday Dan Kaminsky (Wed Dec 08 2004 - 14:52:42 CST)
  • Re: MD5 To Be Considered Harmful Someday Steve Friedl (Wed Dec 08 2004 - 13:22:57 CST)
  • Re: MD5 To Be Considered Harmful Someday David F. Skoll (Wed Dec 08 2004 - 12:52:56 CST)
  • Re: MD5 To Be Considered Harmful Someday Adam Shostack (Wed Dec 08 2004 - 17:23:32 CST)
  • Re: MD5 To Be Considered Harmful Someday Pavel Kankovsky (Wed Dec 08 2004 - 19:47:22 CST)
  • Re: MD5 To Be Considered Harmful Someday Solar Designer (Sat Dec 11 2004 - 13:26:33 CST)
• Bypass personal firewall application protection . Again. offtopic (Tue Dec 07 2004 - 08:50:21 CST)
  • Re: Bypass personal firewall application protection . Again. Chris Paget (Wed Dec 08 2004 - 07:52:31 CST)
• Cleartext SMB passwords in Novell Desktop Linux using KDE Mike DeMaria (Tue Dec 07 2004 - 15:16:09 CST)
• Online Script Decoder GreyMagic Security (Tue Dec 07 2004 - 11:13:30 CST)
  • Re: Online Script Decoder Stefan Paletta (Tue Dec 07 2004 - 16:52:00 CST)
• 7a69Adv#16 - Konqueror FTP command injection Albert Puigsech Galicia (Sun Dec 05 2004 - 03:11:50 CST)
  • Re: 7a69Adv#16 - Konqueror FTP command injection Albert Puigsech Galicia (Mon Dec 06 2004 - 21:37:21 CST)
• zone transfers, a spammer's dream? Lode Vermeiren (Tue Dec 07 2004 - 16:38:58 CST)
  • RE: zone transfers, a spammer's dream? Marcin Pacyna (Mon Dec 13 2004 - 11:01:03 CST)
• MDKSA-2004:143 - Updated ImageMagick packages fix vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:25:26 CST)
• IE6 Vulnerability - Local File Detection ViPeR (Tue Dec 07 2004 - 06:19:35 CST)
  • Re: IE6 Vulnerability - Local File Detection RSnake (Wed Dec 08 2004 - 13:19:38 CST)
• MDKSA-2004:147 - Updated openssl packages fix temporary file vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:49:51 CST)
• [ GLSA 200412-04 ] Perl: Insecure temporary file creation Luke Macken (Mon Dec 06 2004 - 21:48:29 CST)
• MDKSA-2004:146 - Updated nfs-utils packages fix remote DoS vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:41:49 CST)
• MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:36:44 CST)
  • Re: MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability David F. Skoll (Tue Dec 07 2004 - 22:44:57 CST)
• MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability Mandrake Linux Security Team (Mon Dec 06 2004 - 20:30:34 CST)
• [Advisory] Mozilla Products Remote Crash Vulnerability Niek van der Maas (Mon Dec 06 2004 - 08:24:58 CST)
  • Re: [Advisory] Mozilla Products Remote Crash Vulnerability Berend-Jan Wever (Mon Dec 06 2004 - 08:50:16 CST)
• [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding Thierry Carrez (Mon Dec 06 2004 - 09:55:16 CST)
• Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (Wed Dec 08 2004 - 04:07:28 CST)
• MD5 To Be Considered Harmful Today Pavel Machek (Tue Dec 07 2004 - 19:39:41 CST)
  • Re: MD5 To Be Considered Harmful Today Dan Kaminsky (Wed Dec 08 2004 - 16:23:11 CST)
  • Re: MD5 To Be Considered Harmful Today Pavel Machek (Wed Dec 08 2004 - 16:40:19 CST)
  • Re: MD5 To Be Considered Harmful Today Dan Kaminsky (Wed Dec 08 2004 - 16:36:28 CST)
• [SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service Martin Schulze (Wed Dec 08 2004 - 01:54:40 CST)
• Address Bar Spoophing for the Pheeshies: IntotheNet Explorer 6 http-equivexcite.com (Tue Dec 07 2004 - 18:20:20 CST)
• 7a69Adv#15 - Internet Explorer FTP command injection Albert Puigsech Galicia (Mon Dec 06 2004 - 21:19:36 CST)
• TSLSA-2004-0064 - nfs-utils Trustix Security Advisor (Thu Dec 09 2004 - 09:00:35 CST)
• KDE Security Advisory: plain text password exposure Dirk Mueller (Thu Dec 09 2004 - 08:07:19 CST)
• KDE Security Advisory: kfax libtiff vulnerabilities Dirk Mueller (Thu Dec 09 2004 - 08:06:30 CST)
• F-Secure Policy Manager - physical path disclosure olivergreyhat.de (Thu Dec 09 2004 - 14:54:02 CST)
• CodeCon CFP deadline nearing Len Sassaman (Fri Dec 10 2004 - 03:09:44 CST)
• wget: Arbitrary file overwriting/appending/creating and other vulnerabilities Jan Minar (Thu Dec 09 2004 - 03:14:38 CST)
• [SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities Martin Schulze (Fri Dec 10 2004 - 05:50:24 CST)
• In-game buffer-overflow in the Gamespy cd-key validation SDK Luigi Auriemma (Fri Dec 10 2004 - 11:46:11 CST)
• HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! http-equivexcite.com (Fri Dec 10 2004 - 12:37:26 CST)
• Local off-by-one in mtr versions 0.55 to 0.65 venglinfreebsd.lublin.pl (Sat Dec 11 2004 - 11:04:35 CST)
• SugarSales Multiple Vulnerabilities Daniel Fabian (Mon Dec 13 2004 - 07:09:57 CST)
• Citadel/UX <= v6.27 Remote Format String Vulnerability CoKi (Sun Dec 12 2004 - 18:06:42 CST)
  • Re: Citadel/UX <= v6.27 Remote Format String Vulnerability Michael Hampton (Mon Dec 13 2004 - 19:29:44 CST)
• Gadu-Gadu several vulnerabilities Jaroslaw Sajko (Mon Dec 13 2004 - 10:23:23 CST)
• Multiple vulnerabilities in phpMyAdmin Nicolas Gregoire (Mon Dec 13 2004 - 07:02:09 CST)
• MS IE User's Authentication Details (userid/password) Sharing Issue Debasis Mohanty (Sun Dec 12 2004 - 15:48:30 CST)
• KDE Security Advisory: Konqueror Window Injection Vulnerability Waldo Bastian (Mon Dec 13 2004 - 10:36:13 CST)
• iDEFENSE Security Advisory 12.13.04 - Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability customer service mailbox (Mon Dec 13 2004 - 12:30:57 CST)
• [ZH2004-19SA] Possible execution of remote shell commands in Opera with kfmclien Giovanni Delvecchio (Mon Dec 13 2004 - 07:49:23 CST)
• Winamp 5.07 (latest version) Remote Crash + other stupid shizle b0f www.b0f.net (Mon Dec 13 2004 - 13:13:03 CST)
• Socket unreacheable in the Lithtech engine (new protocol) Luigi Auriemma (Mon Dec 13 2004 - 12:25:19 CST)
• [ GLSA 200412-07 ] file: Arbitrary code execution Matthias Geerdsen (Mon Dec 13 2004 - 16:42:17 CST)
• NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (Sun Dec 12 2004 - 19:24:10 CST)
  • Re: NetWare Screensaver Authentication Bypass From The Local Console Brad Bendily (Tue Dec 14 2004 - 11:00:57 CST)
• [ GLSA 200412-06 ] PHProjekt: setup.php vulnerability Thierry Carrez (Fri Dec 10 2004 - 15:54:02 CST)
• Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (Mon Dec 13 2004 - 15:28:34 CST)
  • Re: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory securesymantec.com (Mon Dec 13 2004 - 17:54:48 CST)
• What's "may have exploitable buffer overflows" mean in tcpdump? Dragos Ruiu (Mon Dec 13 2004 - 16:14:47 CST)
• Linux kernel IGMP vulnerabilities Paul Starzetz (Tue Dec 14 2004 - 04:31:21 CST)
  • Re: Linux kernel IGMP vulnerabilities Pekka Savola (Tue Dec 14 2004 - 11:16:39 CST)
  • Re: Linux kernel IGMP vulnerabilities Paul Starzetz (Wed Dec 15 2004 - 06:34:33 CST)
  • Re: Linux kernel IGMP vulnerabilities stephen joseph butler (Tue Dec 14 2004 - 23:14:46 CST)
  • Re: Linux kernel IGMP vulnerabilities matthew-bugtraqnewtoncomputing.co.uk (Wed Dec 15 2004 - 16:41:50 CST)
  • RE: Linux kernel IGMP vulnerabilities Jirka Kosina (Thu Dec 16 2004 - 17:13:42 CST)
• Linux kernel scm_send local DoS Paul Starzetz (Tue Dec 14 2004 - 04:32:57 CST)
  • Re: Linux kernel scm_send local DoS even multiplexed (Tue Dec 14 2004 - 21:23:22 CST)
  • Re: Linux kernel scm_send local DoS Paul Starzetz (Wed Dec 15 2004 - 06:31:30 CST)
  • Re: Linux kernel scm_send local DoS even multiplexed (Wed Dec 15 2004 - 06:52:22 CST)
  • Re: Linux kernel scm_send local DoS gadgeteerelegantinnovations.org (Wed Dec 15 2004 - 14:48:28 CST)
  • Re: Linux kernel scm_send local DoS Pavel Kankovsky (Thu Dec 23 2004 - 09:54:39 CST)
• Re: [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS Dan Margolis (Mon Dec 13 2004 - 20:45:36 CST)
• phpBB Attachment Mod Directory Traversal HTTP POST Injection Paul Laudanski (Tue Dec 14 2004 - 03:58:53 CST)
• [ZH2004-18SA] Content-Type spoofing in Mozilla Firefox and Opera could allow users to bypass security restrictions Giovanni Delvecchio (Mon Dec 13 2004 - 17:45:24 CST)
• iDEFENSE Security Advisory 12.14.04 - Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability customer service mailbox (Tue Dec 14 2004 - 09:39:02 CST)
• MDKSA-2004:148 - Updated iproute2 packages fix temporary file vulnerability Mandrake Linux Security Team (Mon Dec 13 2004 - 18:15:54 CST)
• [SECURITY] [DSA 609-1] New atari800 packages fix local root exploit Martin Schulze (Tue Dec 14 2004 - 10:03:01 CST)
• ASP Calendar Vulnerability <www.ashiyane.com> ali reza AcTiOnSpIdEr (Tue Dec 14 2004 - 04:59:57 CST)
• [CAN-2004-1022] Insecure Credential Storage on Kerio Software Secure Computer Group (Tue Dec 14 2004 - 04:00:48 CST)
• RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability Hongzhen Zhou (Tue Dec 14 2004 - 11:34:39 CST)
  • Re: RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability Hongzhen Zhou (Wed Dec 15 2004 - 05:08:47 CST)
• Possible local root vulnerability in Roxio Toast on Mac OS X fintler (Tue Dec 14 2004 - 00:40:17 CST)
• STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability advisorystgsecurity.com (Tue Dec 14 2004 - 00:04:45 CST)
• [SECURITY] [DSA 608-1] New zgv packages fix arbitrary code execution Martin Schulze (Tue Dec 14 2004 - 04:36:45 CST)
• [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software Secure Computer Group (Tue Dec 14 2004 - 04:08:25 CST)
• MDKSA-2004:149 - Updated postgresql packages fix temporary file vulnerability Mandrake Linux Security Team (Mon Dec 13 2004 - 18:24:26 CST)
• [ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities Luke Macken (Mon Dec 13 2004 - 21:54:15 CST)
• iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability customer service mailbox (Tue Dec 14 2004 - 15:07:51 CST)
• [Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (Tue Dec 14 2004 - 11:06:56 CST)
• ASP-rider is vulnerable to sql injection attack shervin khaleghjou (Tue Dec 14 2004 - 21:23:08 CST)
• [USN-38-1] Linux kernel vulnerabilities Martin Pitt (Tue Dec 14 2004 - 13:05:39 CST)
• iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability customer service mailbox (Tue Dec 14 2004 - 13:10:37 CST)
• HyperTerminal - Buffer Overflow In .ht File Brett Moore (Tue Dec 14 2004 - 16:59:45 CST)
• Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ] GulfTech Security (Tue Dec 14 2004 - 21:15:17 CST)
• [Full-Disclosure] [ GLSA 200412-07 ] file: Arbitrary code execution Matthias Geerdsen (Mon Dec 13 2004 - 16:42:17 CST)
• Asante FM2008 10/100 Ethernet switch backdoor login Joe Philipps (Wed Dec 15 2004 - 03:59:45 CST)
• Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi (Fri Oct 15 2004 - 03:55:26 CDT)
• Hotmail Cross Site Scripting Vulnerability #2 Rafel Ivgi (Fri Oct 15 2004 - 05:49:27 CDT)
• Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi (Fri Oct 15 2004 - 03:55:52 CDT)
• *nix data wipe tools Thomas C. Greene (Wed Dec 15 2004 - 01:59:44 CST)
  • Re: *nix data wipe tools David Cannings (Thu Dec 16 2004 - 14:06:07 CST)
  • Re: *nix data wipe tools Wietse Venema (Fri Dec 17 2004 - 12:05:37 CST)
  • Re: *nix data wipe tools Thomas C. Greene (Fri Dec 17 2004 - 03:24:24 CST)
  • Re: *nix data wipe tools Casper.DikSun.COM (Fri Dec 17 2004 - 13:54:13 CST)
  • Re: *nix data wipe tools George Georgalis (Fri Dec 17 2004 - 10:48:33 CST)
• 3cdaemon tftp server DOS vulnerability Wang Ning (Wed Dec 15 2004 - 11:37:18 CST)
• Re: rpcl_icmpdos.c x90c (Wed Dec 15 2004 - 08:52:57 CST)
• [ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap Thierry Carrez (Wed Dec 15 2004 - 03:21:34 CST)
• MSIE DHTML Edit Control Cross Site Scripting Vulnerability Paul (Wed Dec 15 2004 - 02:01:33 CST)
• [OpenPKG-SA-2004.052] OpenPKG Security Advisory (vim) OpenPKG (Wed Dec 15 2004 - 11:17:02 CST)
• STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability advisorystgsecurity.com (Wed Dec 15 2004 - 11:34:33 CST)
• Security Advisory for CVS Slash Jamie McCarthy (Wed Dec 15 2004 - 10:03:56 CST)
• [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines Thierry Carrez (Wed Dec 15 2004 - 08:02:42 CST)
  • Re: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines Alexey I. Froloff (Wed Dec 15 2004 - 23:40:54 CST)
• Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 Stefan Esser (Wed Dec 15 2004 - 12:46:20 CST)
• iwebnegar is vulnerable to all kind of sql injections shervin khaleghjou (Wed Dec 15 2004 - 09:28:53 CST)
• Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords Cisco Systems Product Security Incident Response Team (Wed Dec 15 2004 - 10:45:00 CST)
• STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki advisorystgsecurity.com (Wed Dec 15 2004 - 12:13:01 CST)
• CSS in phpBB 1.4.4 SandI] (Wed Dec 15 2004 - 13:23:55 CST)
  • RE: CSS in phpBB 1.4.4 Paul Owen (Wed Dec 15 2004 - 16:15:33 CST)
• Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector Cisco Systems Product Security Incident Response Team (Wed Dec 15 2004 - 14:01:00 CST)
• php unserialize Martin Eiszner (Wed Dec 15 2004 - 15:32:54 CST)
  • Re: php unserialize Stefan Esser (Wed Dec 15 2004 - 17:32:20 CST)
• MDKSA-2004:150 - Updated kdelibs and kdebase packages fix vulnerability Mandrake Linux Security Team (Wed Dec 15 2004 - 16:02:29 CST)
• [SAMBA] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9 Gerald Carter (Thu Dec 16 2004 - 06:17:29 CST)
• STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard advisorystgsecurity.com (Wed Dec 15 2004 - 20:41:41 CST)
• iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability customer service mailbox (Wed Dec 15 2004 - 17:43:36 CST)
• STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment Mod advisorystgsecurity.com (Wed Dec 15 2004 - 20:42:37 CST)
• [MaxPatrol] SQL-injection in Ikonboard 3.1.x Alexander Anisimov (Thu Dec 16 2004 - 16:51:08 CST)
• STG Security Advisory: [SSA-20041215-19] Vulnerability of uploading files with multiple extensions in MediaWiki advisorystgsecurity.com (Wed Dec 15 2004 - 20:43:12 CST)
• Multiple XSS Vulnerabilities in Wordpress 1.2.1 Thomas Waldegger (Thu Dec 16 2004 - 00:21:19 CST)
• DJB's students release 44 *nix software vulnerability advisories Thor Larholm (Thu Dec 16 2004 - 03:47:12 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Crispin Cowan (Thu Dec 16 2004 - 17:01:23 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories cees-bart (Fri Dec 17 2004 - 06:16:44 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories security curmudgeon (Fri Dec 17 2004 - 01:40:58 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories D. J. Bernstein (Fri Dec 17 2004 - 22:25:11 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Julian T J Midgley (Fri Dec 17 2004 - 17:35:03 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Marcin Owsiany (Fri Dec 17 2004 - 17:28:02 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Jonathan T Rockway (Mon Dec 20 2004 - 17:14:22 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories milw0rm Inc. (Tue Dec 21 2004 - 14:34:20 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Artem Chuprina (Tue Dec 21 2004 - 10:53:35 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Dave Holland (Tue Dec 21 2004 - 14:50:36 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Antoine Martin (Tue Dec 21 2004 - 15:30:25 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Thor (Tue Dec 21 2004 - 15:11:48 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Stephen Samuel (Tue Dec 21 2004 - 13:39:49 CST)
  • RE: DJB's students release 44 *nix software vulnerability advisories Devin Ganger (Tue Dec 21 2004 - 15:20:09 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories David F. Skoll (Tue Dec 21 2004 - 13:59:15 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Stephen Harris (Tue Dec 21 2004 - 14:22:21 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories laffer1 (Tue Dec 21 2004 - 15:22:08 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Raymond M. Reskusich (Tue Dec 21 2004 - 14:14:59 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories D. J. Bernstein (Wed Dec 22 2004 - 01:05:12 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Jonathan Rockway (Tue Dec 21 2004 - 21:50:46 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Jonathan Rockway (Wed Dec 22 2004 - 00:06:15 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Valdis.Kletnieksvt.edu (Tue Dec 21 2004 - 22:58:39 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Steven M. Christey (Tue Dec 21 2004 - 15:48:01 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories David Eisner (Wed Dec 22 2004 - 12:32:30 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Steven M. Christey (Tue Dec 21 2004 - 15:25:02 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Casper.DikSun.COM (Wed Dec 22 2004 - 11:56:18 CST)
  • RE: DJB's students release 44 *nix software vulnerability advisories Manning, Robert (Mission Systems) (Tue Dec 21 2004 - 16:31:16 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Crispin Cowan (Wed Dec 22 2004 - 12:26:41 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Jack Lloyd (Tue Dec 21 2004 - 17:58:48 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories sean (Tue Dec 21 2004 - 15:55:57 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Michal Zalewski (Thu Dec 23 2004 - 10:49:55 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories D. J. Bernstein (Thu Dec 23 2004 - 00:39:55 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Crispin Cowan (Thu Dec 23 2004 - 02:16:55 CST)
  • RE: DJB's students release 44 *nix software vulnerability advisories Palmer, Paul (ISSAtlanta) (Thu Dec 23 2004 - 13:06:27 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Crispin Cowan (Wed Dec 22 2004 - 17:08:36 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories Crispin Cowan (Fri Dec 24 2004 - 03:29:32 CST)
  • Re: DJB's students release 44 *nix software vulnerability advisories David Wagner (Thu Dec 23 2004 - 23:35:46 CST)
• PHP Input Validation Vulnerabilities Daniel Fabian (Thu Dec 16 2004 - 08:09:55 CST)
• iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability iDEFENSE Security Advisory (Thu Dec 16 2004 - 12:42:07 CST)
• iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability iDEFENSE Security Advisory (Thu Dec 16 2004 - 12:51:55 CST)
• iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability iDEFENSE Security Advisory (Thu Dec 16 2004 - 12:45:21 CST)
• [USN-39-1] Linux amd64 kernel vulnerability Martin Pitt (Thu Dec 16 2004 - 11:08:30 CST)
• [USN-40-1] PHP vulnerabilities Martin Pitt (Thu Dec 16 2004 - 11:26:55 CST)
• iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability iDEFENSE Security Advisory (Thu Dec 16 2004 - 12:48:01 CST)
  • Re: iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability Hideki Yamane (Thu Dec 16 2004 - 23:23:47 CST)
• Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi, The-Insider (Thu Dec 16 2004 - 11:38:48 CST)
• iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability iDEFENSE Security Advisory (Thu Dec 16 2004 - 12:49:31 CST)
• Hotmail Cross-Site Scripting Vulnerability #2 Rafel Ivgi, The-Insider (Thu Dec 16 2004 - 11:37:36 CST)
• Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi, The-Insider (Thu Dec 16 2004 - 11:38:19 CST)
• Discussion: Microsoft(R) PowerPoint “Action Settings” feature allows invocation of default browser pointed at arbitrary URL. Monte Ratzlaff (Thu Dec 16 2004 - 09:01:28 CST)
• [OpenPKG-SA-2004.053] OpenPKG Security Advisory (php) OpenPKG (Thu Dec 16 2004 - 15:23:13 CST)
• [ GLSA 200412-11 ] Cscope: Insecure creation of temporary files Luke Macken (Thu Dec 16 2004 - 14:31:21 CST)
• [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities chewkeongsecurity.org.sg (Thu Dec 16 2004 - 18:19:59 CST)
• RE: STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard Richard Stanway (Thu Dec 16 2004 - 11:21:07 CST)
• Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel Katrina Tsipenyuk (Thu Dec 16 2004 - 21:11:19 CST)
• [OpenPKG-SA-2004.054] OpenPKG Security Advisory (samba) OpenPKG (Fri Dec 17 2004 - 10:11:17 CST)
• Gadu-Gadu, another two bugs Jaroslaw Sajko (Fri Dec 17 2004 - 04:23:38 CST)
  • Re: Gadu-Gadu, another two bugs Przemyslaw Frasunek (Mon Dec 20 2004 - 11:20:37 CST)
• NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code NetBSD Security-Officer (Thu Dec 16 2004 - 23:30:29 CST)
• [ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability Luke Macken (Thu Dec 16 2004 - 17:50:30 CST)
• phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit bad boy (Fri Dec 17 2004 - 11:20:23 CST)
• 4 Vulnerabilities in GamePort amoXi Devilkin (Fri Dec 17 2004 - 10:34:45 CST)
• [Full-Disclosure] Re: Linux kernel scm_send local DoS gadgeteerelegantinnovations.org (Wed Dec 15 2004 - 14:48:28 CST)
  • Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS Valdis.Kletnieksvt.edu (Wed Dec 22 2004 - 21:59:12 CST)
• NetBSD kernel local vulnerabilities Evgeny Demidov (Fri Dec 17 2004 - 14:45:33 CST)
• 4 Vulnerabilities in GamePort amoXi Devilkin (Fri Dec 17 2004 - 13:40:21 CST)
• [OpenPKG-SA-2004.056] OpenPKG Security Advisory (cvstrac) OpenPKG (Fri Dec 17 2004 - 11:59:06 CST)
• Internet Explorer Code Execution Bypass Vulnerability aikon none (Fri Dec 17 2004 - 11:03:37 CST)
  • Re: Internet Explorer Code Execution Bypass Vulnerability cmthemcyahoo.com (Sun Dec 19 2004 - 14:47:06 CST)
• [SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation Martin Schulze (Fri Dec 17 2004 - 03:08:36 CST)
• Bug in Crypt::ECB perl module Bennett R. Samowich (Fri Dec 17 2004 - 09:08:10 CST)
• [ GLSA 200412-13 ] Samba: Integer overflow Sune Kloppenborg Jeppesen (Fri Dec 17 2004 - 14:08:10 CST)
• Multiple Vulnerabilities In Kayako eSupport v2.x GulfTech Security (Sat Dec 18 2004 - 12:33:00 CST)
• MS Windows Media Player 9 Vulns (2) Arman Nayyeri (Sat Dec 18 2004 - 01:43:55 CST)
• MDKSA-2004:151 - Updated php packages fix multiple vulnerabilities Mandrake Linux Security Team (Fri Dec 17 2004 - 19:25:27 CST)
• Re: Patch available for multiple critical flaws in Oracle Marc Bejarano (Sat Dec 18 2004 - 11:26:15 CST)
• [USN-41-1] Samba vulnerability Martin Pitt (Fri Dec 17 2004 - 09:57:50 CST)
• [SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution Martin Schulze (Mon Dec 20 2004 - 03:55:39 CST)
• Security Bulletin SSRT4687 rev.0 HP-UX newgrp(1) local privilege elevation Boren, Rich (SSRT) (Mon Dec 20 2004 - 04:03:55 CST)
• AIX 5.1/5.2/5.3 local root exploits cees-bart (Mon Dec 20 2004 - 05:10:41 CST)
• [ GLSA 200412-14 ] PHP: Multiple vulnerabilities Thierry Carrez (Sun Dec 19 2004 - 07:58:02 CST)
• PHP shmop.c module permits write of arbitrary memory. Stefano Di Paola (Sun Dec 19 2004 - 12:40:54 CST)
• TSLSA-2004-0068 - kernel Trustix Security Advisor (Mon Dec 20 2004 - 04:32:17 CST)
• [ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sun Dec 19 2004 - 08:29:34 CST)
• Crystal FTP Pro Client Buffer Overflow Luca Ercoli (Sun Dec 19 2004 - 18:21:36 CST)
• TSLSA-2004-0066 - multi Trustix Security Advisor (Mon Dec 20 2004 - 04:30:32 CST)
• Windows Explorer TGA Crash Bill (Sat Dec 18 2004 - 17:57:20 CST)
• KDE Security Advisory: Konqueror Java Vulnerability Waldo Bastian (Mon Dec 20 2004 - 07:49:05 CST)
• UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities Luke Macken (Sun Dec 19 2004 - 15:59:11 CST)
• Exploit for Ultrix 4.5 dxterm Kristoffer Brånemyr (Sun Dec 19 2004 - 07:47:01 CST)
• [ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sun Dec 19 2004 - 08:37:43 CST)
• Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated) Paul (Sun Dec 19 2004 - 11:18:30 CST)
• [ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library Sune Kloppenborg Jeppesen (Sun Dec 19 2004 - 13:15:53 CST)
• [ GLSA 200412-20 ] NASM: Buffer overflow vulnerability Luke Macken (Mon Dec 20 2004 - 07:46:24 CST)
• [ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability Luke Macken (Sun Dec 19 2004 - 13:48:37 CST)
• [ GLSA 200412-21 ] MPlayer: Multiple overflows Thierry Carrez (Mon Dec 20 2004 - 08:06:31 CST)
• [USN-42-1] Xine library vulnerabilities Martin Pitt (Mon Dec 20 2004 - 09:34:37 CST)
• [Full-Disclosure] [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sun Dec 19 2004 - 14:00:44 CST)
• Gadu-Gadu Remote DoS (all versions) Maciej Soltysiak (Mon Dec 20 2004 - 09:32:58 CST)
• [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sun Dec 19 2004 - 14:00:44 CST)
• MDKSA-2004:153 - Updated aspell packages fix vulnerability Mandrake Linux Security Team (Mon Dec 20 2004 - 15:19:30 CST)
• MDKSA-2004:152 - Updated ethereal packages fix multiple vulnerabilities Mandrake Linux Security Team (Mon Dec 20 2004 - 15:16:16 CST)
• [SECURITY] [DSA 612-1] New a2ps packages fix arbitrary command execution Martin Schulze (Mon Dec 20 2004 - 05:29:57 CST)
• Updated: TSLSA-2004-0068 - kernel Trustix Security Advisor (Mon Dec 20 2004 - 15:35:52 CST)
• [USN-43-1] groff utility vulnerabilities Martin Pitt (Mon Dec 20 2004 - 12:23:20 CST)
• Re: [Full-Disclosure] Re: Gadu-Gadu, another two bugs Maciej Soltysiak (Mon Dec 20 2004 - 15:43:07 CST)
• MITKRB5-SA-2004-004: heap overflow in libkadm5srv Tom Yu (Mon Dec 20 2004 - 16:58:43 CST)
• TSLSA-2004-0069 - kerberos5 Trustix Security Advisor (Tue Dec 21 2004 - 04:44:56 CST)
• [SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution Martin Schulze (Tue Dec 21 2004 - 05:52:10 CST)
• Re: AIX 5.1/5.2/5.3 local root exploits (diag issue) Shiva Persaud (Mon Dec 20 2004 - 19:57:25 CST)
• Xprobe 0.2.1 Released bugtraqsys-security.com (Tue Dec 21 2004 - 02:31:23 CST)
• phpBB Worm Shannon Lee (Mon Dec 20 2004 - 17:51:13 CST)
  • Re: phpBB Worm Raymond Dijkxhoorn (Tue Dec 21 2004 - 16:28:42 CST)
  • RE: phpBB Worm Paul Kurczaba (Tue Dec 21 2004 - 14:11:27 CST)
  • Re: phpBB Worm Sebastian Wiesinger (Wed Dec 22 2004 - 05:22:15 CST)
  • Re: phpBB Worm Alexander Klimov (Wed Dec 22 2004 - 09:21:22 CST)
  • Re: phpBB Worm ycw1bh302sneakemail.com (Tue Dec 21 2004 - 22:34:59 CST)
  • Re: phpBB Worm Alvin Packard (Wed Dec 22 2004 - 21:28:01 CST)
  • Re: phpBB Worm Anders Henke (Thu Dec 23 2004 - 06:31:09 CST)
  • Re: phpBB Worm William Geoghegan (Wed Dec 22 2004 - 17:34:12 CST)
  • RE: phpBB Worm Ofer Shezaf (Thu Dec 23 2004 - 14:28:11 CST)
  • Re: phpBB Worm Anders Henke (Thu Dec 23 2004 - 06:59:00 CST)
  • Re: phpBB Worm steveuptime.org.uk (Fri Dec 24 2004 - 10:10:26 CST)
  • Re: phpBB Worm Raymond Dijkxhoorn (Fri Dec 24 2004 - 12:12:22 CST)
  • Re: phpBB Worm Zeljko Brajdic (Sat Dec 25 2004 - 05:25:43 CST)
  • RE: phpBB Worm Chris Ess (Fri Dec 24 2004 - 22:49:47 CST)
• SUSE Security Announcement: various kernel problems (SUSE-SA:2004:044) Marcus Meissner (Tue Dec 21 2004 - 13:37:48 CST)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:09 CST)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:13 CST)
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:19 CST)
• iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:26 CST)
• iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:30 CST)
  • Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability Dmitry V. Levin (Wed Dec 22 2004 - 05:45:45 CST)
  • Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability Moritz Muehlenhoff (Thu Dec 23 2004 - 05:58:50 CST)
  • Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability Marcus Meissner (Mon Dec 27 2004 - 04:37:02 CST)
• iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability customer service mailbox (Tue Dec 21 2004 - 16:09:22 CST)
• Re: Wordpress 1.2.2 is still vulnerable Thomas Waldegger (Tue Dec 21 2004 - 15:56:51 CST)
• Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (Mon Dec 20 2004 - 19:20:56 CST)
  • Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (Mon Dec 20 2004 - 19:37:25 CST)
• WebWorm using PHPBB vulnerability in the wild! Niki Denev (Mon Dec 20 2004 - 17:42:22 CST)
  • Re: WebWorm using PHPBB vulnerability in the wild! Nick Johnson (Wed Dec 22 2004 - 03:52:53 CST)
• Re: AIX 5.1/5.2/5.3 local root exploits (paginit issue) Shiva Persaud (Mon Dec 20 2004 - 19:56:55 CST)
• [SECURITY] [DSA 613-1] New ethereal packages fix denial of service Martin Schulze (Tue Dec 21 2004 - 01:48:54 CST)
• SUSE Security Announcement: samba (SUSE-SA:2004:045) Sebastian Krahmer (Wed Dec 22 2004 - 08:32:24 CST)
• [SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories Martin Schulze (Wed Dec 22 2004 - 08:46:38 CST)
• Local versus remote security holes D. J. Bernstein (Wed Dec 22 2004 - 01:40:42 CST)
  • Re: Local versus remote security holes Adam Shostack (Wed Dec 22 2004 - 11:27:55 CST)
  • RE: Local versus remote security holes David Brodbeck (Wed Dec 22 2004 - 14:59:12 CST)
• MDKSA-2004:154 - Updated kdelibs packages fix multiple vulnerability Mandrake Linux Security Team (Wed Dec 22 2004 - 09:50:39 CST)
• Sybase ASE 12.5.2 vulnerabilities NGSSoftware Insight Security Research (Wed Dec 22 2004 - 09:52:50 CST)
• Re: DJB's students release 44 *nix software vulnerability advisories Chris Paget (Wed Dec 22 2004 - 06:23:34 CST)
• malware effecting broadband users in Israel Gadi Evron (Wed Dec 22 2004 - 05:19:27 CST)
• Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability Marc Schoenefeld (Wed Dec 22 2004 - 05:42:04 CST)
• MDKSA-2004:156 - Updated krb5 packages fix buffer overflow vulnerability Mandrake Linux Security Team (Wed Dec 22 2004 - 10:04:11 CST)
• Permission problem in Skype BETA for linux Peter Conrad (Wed Dec 22 2004 - 11:12:36 CST)
• PHP v4.3.x exploit for Windows. The Warlock (Wed Dec 22 2004 - 09:19:17 CST)
• Realone2.0 "pnxr3260.dll" Lets Remote Users IE Browser Crash Wei Li (Wed Dec 22 2004 - 12:30:58 CST)
• [ GLSA 200412-23 ] Zwiki: XSS vulnerability Luke Macken (Tue Dec 21 2004 - 17:24:54 CST)
• stick with "anonymous" or "authenticated" when describing attacks Jonathan G. Lampe (Wed Dec 22 2004 - 13:39:52 CST)
• possible local exploit via sendmail with procmail on solaris Michael Barnes (Tue Dec 21 2004 - 15:30:03 CST)
  • Re: possible local exploit via sendmail with procmail on solaris Jeff Damens (Wed Dec 22 2004 - 16:24:56 CST)
• Webmin BruteForce + Command execution - By Di42lo <DiAblo_2<img src="/imgs/at.gif" border=0 align=middle>012.net.il> amit sides (Wed Dec 22 2004 - 21:05:03 CST)
  • Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2<img src="/imgs/at.gif" border=0 align=middle>012.net.il> Martin Mewes (Thu Dec 23 2004 - 03:34:59 CST)
• MDKSA-2004:155 - Updated logcheck packages fix temporary file vulnerability Mandrake Linux Security Team (Wed Dec 22 2004 - 09:58:38 CST)
• MDKSA-2004:157 - Updated mplayer packages fix multiple vulnerabilities Mandrake Linux Security Team (Wed Dec 22 2004 - 10:50:33 CST)
• 2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability zib zib (Wed Dec 22 2004 - 01:49:19 CST)
• Security Advisory for ALL forum services with client-set images James Bandara (Wed Dec 22 2004 - 04:03:44 CST)
  • Re: Security Advisory for ALL forum services with client-set images Stefan Paletta (Thu Dec 23 2004 - 02:50:40 CST)
  • Re: Security Advisory for ALL forum services with client-set images Tim Jackson (Wed Dec 22 2004 - 18:52:08 CST)
• SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2004:046) Marcus Meissner (Wed Dec 22 2004 - 09:01:26 CST)
• Oracle ISQLPlus file access vulnerability (#NISR2122004E) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:35:28 CST)
• Oracle Trigger Abuse (#NISR2122004I) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:29:32 CST)
• Oracle clear text passwords (#NISR2122004D) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:34:40 CST)
• Oracle Character Conversion Bugs (#NISR2122004G) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:31:16 CST)
• Oracle extproc buffer overflow (#NISR23122004A) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:32:09 CST)
• Oracle extproc directory traversal (#NISR23122004B) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:32:57 CST)
• Oracle extproc local command execution (#NISR23122004C) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:33:51 CST)
• IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 11:05:53 CST)
• Oracle TNS Listener DoS (#NISR2122004F) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:36:09 CST)
• Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:37:24 CST)
• Oracle wrapped procedure overflow (#NISR2122004J) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 10:38:29 CST)
• [OpenPKG-SA-2004.055] OpenPKG Security Advisory (gettext) OpenPKG (Thu Dec 23 2004 - 08:37:48 CST)
• IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J) NGSSoftware Insight Security Research (Thu Dec 23 2004 - 11:01:16 CST)
• [SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution Martin Schulze (Thu Dec 23 2004 - 08:30:28 CST)
• Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability flashsky fangxing (Thu Dec 23 2004 - 08:59:14 CST)
• Microsoft Windows LoadImage API Integer Buffer overflow flashsky fangxing (Thu Dec 23 2004 - 08:58:01 CST)
  • Re: Microsoft Windows LoadImage API Integer Buffer overflow Brett Glass (Fri Dec 24 2004 - 18:18:56 CST)
• SHOUTcast remote format string vulnerability Damian Put (Thu Dec 23 2004 - 12:24:04 CST)
• Crystal FTP Pro 2.8 PoC cybertronicgmx.net (Thu Dec 23 2004 - 01:27:10 CST)
  • RE: Crystal FTP Pro 2.8 PoC cybertronicgmx.net (Thu Dec 23 2004 - 21:39:11 CST)
• [USN-47-1] Linux kernel vulnerabilities Martin Pitt (Thu Dec 23 2004 - 01:54:49 CST)
• Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier GulfTech Security (Wed Dec 22 2004 - 18:50:51 CST)
• Re: stick with "anonymous" or "authenticated" when describing Steven M. Christey (Thu Dec 23 2004 - 12:25:36 CST)
• Inexcusable weakness in Kmail / GnuPG Thomas C. Greene (Thu Dec 23 2004 - 01:58:30 CST)
  • Re: Inexcusable weakness in Kmail / GnuPG Simple Nomad (Fri Dec 24 2004 - 00:30:24 CST)
• Re: [webmin-l] Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2<img src="/imgs/at.gif" border=0 align=middle>012.net.il> Jamie Cameron (Thu Dec 23 2004 - 05:17:35 CST)
• [USN-48-1] xpdf, tetex-bin vulnerabilities Martin Pitt (Thu Dec 23 2004 - 02:14:57 CST)
• [USN-49-1] debmake vulnerability Martin Pitt (Thu Dec 23 2004 - 05:35:34 CST)
• [USN-51-1] teTeX auxiliary script vulnerability Martin Pitt (Thu Dec 23 2004 - 07:09:14 CST)
• [USN-52-1] vim vulnerability Martin Pitt (Thu Dec 23 2004 - 07:54:06 CST)
  • Re: [USN-52-1] vim vulnerability Liu Die Yu (Thu Dec 23 2004 - 22:31:12 CST)
• [ Security Bulletin ] SSRT4699 rev.0 HP-UX SAM local privilege increase Boren, Rich (SSRT) (Thu Dec 23 2004 - 14:16:15 CST)
• [Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow Boren, Rich (SSRT) (Thu Dec 23 2004 - 14:18:53 CST)
• Microsoft Windows winhlp32.exe Heap Overflow Vulnerability flashsky fangxing (Thu Dec 23 2004 - 09:00:42 CST)
• [Security Bulletin] SSRT4876 rev.0 HP Tru64 UNIX SWS (Apache) Secure Web Server Remote Boren, Rich (SSRT) (Thu Dec 23 2004 - 14:20:18 CST)
• WPkontakt message parsing error Jaroslaw Sajko (Thu Dec 23 2004 - 05:54:55 CST)
• Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation flashsky fangxing (Thu Dec 23 2004 - 08:57:01 CST)
• [Security Bulletin] SSRT4883 rev.3 HP-UX ftp and ftpd remote unauthorized access Boren, Rich (SSRT) (Thu Dec 23 2004 - 14:21:44 CST)
• [USN-50-1] CUPS vulnerabilities Martin Pitt (Thu Dec 23 2004 - 05:45:00 CST)
• [Security Bulletin] SSRT4696 rev.0 - HP Tru64 UNIX TCP Stack Remote Denial of Service (DoS) Boren, Rich (SSRT) (Thu Dec 23 2004 - 13:33:26 CST)
• raptor's xmas pack 2004 Marco Ivaldi (Wed Dec 22 2004 - 14:53:31 CST)
• [SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution Martin Schulze (Fri Dec 24 2004 - 10:40:42 CST)
• [SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution Martin Schulze (Fri Dec 24 2004 - 08:15:44 CST)
• STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard advisorystgsecurity.com (Thu Dec 23 2004 - 19:02:33 CST)
• XSS in yacy 0.31 Donato Ferrante (Fri Dec 24 2004 - 08:52:36 CST)
• [Full-Disclosure] [ GLSA 200412-21 ] MPlayer: Multiple overflows Thierry Carrez (Mon Dec 20 2004 - 08:06:31 CST)
• Final Call for Papers & Workshops - BCS Asia 2005 Anthony.zboralski (Fri Dec 24 2004 - 11:25:41 CST)
• CleanCache v2.19: False Sense of Security WBG Links (Sat Dec 25 2004 - 10:34:47 CST)
• New Santy-Worm attacks *all* PHP-skripts Juergen Schmidt (Sat Dec 25 2004 - 11:12:21 CST)
• new phpBB worm affects 2.0.11 Herman Sheremetyev (Fri Dec 24 2004 - 16:06:30 CST)
• PHPBB worm in action Colin Keith (Fri Dec 24 2004 - 21:04:23 CST)
• Re: New Santy-Worm attacks *all* PHP-skripts ( Santy.c ? ) K-OTiK Security (Sat Dec 25 2004 - 20:37:52 CST)
• New Winhlp32.exe vuln bad_sonpimp.it (Fri Dec 24 2004 - 17:53:52 CST)
• Microsoft Internet Explorer SP2 Fully Automated Remote Compromise Paul (Sat Dec 25 2004 - 14:31:25 CST)
• Multiple Vulnerabilities in Moodle Bartek Nowotarski (Mon Dec 27 2004 - 13:45:44 CST)
  • Re: Multiple Vulnerabilities in Moodle Martin Dougiamas (Thu Dec 30 2004 - 09:25:07 CST)
• MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities Mandrake Linux Security Team (Mon Dec 27 2004 - 17:48:58 CST)
• possible error in latest NGS realplayer advisory Marc Bejarano (Mon Dec 27 2004 - 18:17:41 CST)
• Did a 16-bit counter overflow shut down Comair? Richard M. Smith (Tue Dec 28 2004 - 11:44:20 CST)
  • Re: Did a 16-bit counter overflow shut down Comair? Mike Nice (Tue Dec 28 2004 - 21:27:45 CST)
  • Re: Did a 16-bit counter overflow shut down Comair? Avleen Vig (Wed Dec 29 2004 - 02:41:12 CST)
• Multiple WHM Autopilot Vulnerabilities GulfTech Security (Tue Dec 28 2004 - 06:33:47 CST)
• Remote code execution with parameters withoutu ser interaction, even with XP SP2 ShredderSub7 SecExpert (Tue Dec 28 2004 - 05:20:05 CST)
• [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included Hat-Squad Security Team (Mon Dec 27 2004 - 11:57:12 CST)
  • Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included Chris Wysopal (Tue Dec 28 2004 - 15:59:32 CST)
• Netcat v1.11 For Windows , New fixed version Hat-Squad Security Team (Tue Dec 28 2004 - 20:42:16 CST)
• [Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability Marc Schoenefeld (Wed Dec 22 2004 - 05:42:04 CST)
• XSA-2004-7: stack overflow in AIFF demultiplexer Michael Roitzsch (Sun Dec 26 2004 - 09:56:07 CST)
• KDE Security Advisory: kpdf Buffer Overflow Vulnerability Dirk Mueller (Tue Dec 28 2004 - 15:17:38 CST)
• Re: Microsoft Windows LoadImage API IntegerBuffer overflow Berend-Jan Wever (Sat Dec 25 2004 - 13:57:41 CST)
• php-Calendar File Include Vulnerability [ Command Exec ] GulfTech Security (Wed Dec 29 2004 - 08:43:37 CST)
• QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004] Julio Cesar Fort (Tue Dec 28 2004 - 20:30:59 CST)
• Sanity Worm Concepts Andy Fewtrell (Wed Dec 29 2004 - 05:52:42 CST)
  • Re: Sanity Worm Concepts Paul Laudanski (Wed Dec 29 2004 - 19:03:42 CST)
• [CLA-2004:909] Conectiva Security Announcement - netpbm Conectiva Updates (Wed Dec 29 2004 - 11:23:11 CST)
• [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities Thierry Carrez (Tue Dec 28 2004 - 07:11:56 CST)
• [ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities Thierry Carrez (Tue Dec 28 2004 - 08:25:29 CST)
• [ GLSA 200412-24 ] Xpdf, GPdf: New integer overflows Thierry Carrez (Tue Dec 28 2004 - 07:07:00 CST)
• Heap overflow in Mozilla Browser <= 1.7.3 NNTP code. Maurycy Prodeus (Wed Dec 29 2004 - 15:29:27 CST)
• KorWeblog php injection Vulnerability Min-sung Choi (Thu Dec 30 2004 - 15:53:17 CST)
• [SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities Martin Schulze (Thu Dec 30 2004 - 10:50:22 CST)
• MDKSA-2004:160 - Updated kdelibs packages fix konqueror email vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 21:54:02 CST)
• MDKSA-2004:161 - Updated xpdf packages fix buffer overflow vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 21:58:10 CST)
• NetCat V 1.11 Multiple Bugs CorryL (Thu Dec 30 2004 - 09:36:43 CST)
• [SECURITY] [DSA 619-1] New xpdf packages fix arbitrary code execution Martin Schulze (Thu Dec 30 2004 - 09:39:10 CST)
• MDKSA-2004:164 - Updated cups packages fix buffer overflow vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 22:09:59 CST)
• MDKSA-2004:159 - Updated glibc packages fix temporary file vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 21:24:38 CST)
• MDKSA-2004:163 - Updated kdegraphics packages fix buffer overflow vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 22:07:13 CST)
• Strange Java Loader duffbeer (Thu Dec 30 2004 - 00:34:23 CST)
• MDKSA-2004:165 - Updated koffice packages fix multiple vulnerabilities Mandrake Linux Security Team (Wed Dec 29 2004 - 22:16:29 CST)
• Re: Strange Java Loader (not so strange - Trojan.ByteVerify) K-OTiK Security (Thu Dec 30 2004 - 19:58:02 CST)
• MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability Mandrake Linux Security Team (Wed Dec 29 2004 - 22:02:48 CST)
• MDKSA-2004:166 - Updated tetex packages fix multiple vulnerabilities Mandrake Linux Security Team (Wed Dec 29 2004 - 22:20:51 CST)
• SQL Injection Vulnerability In IBProArcade mike bailey (Fri Dec 31 2004 - 07:19:01 CST)
• [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC houseofdabus HOD (Thu Dec 30 2004 - 17:39:21 CST)
  • Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC Alberto Garcia Hierro (Fri Dec 31 2004 - 12:09:02 CST)
  • Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC Steve Friedl (Fri Dec 31 2004 - 12:52:27 CST)
• ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks stevenlovebug.org (Fri Dec 31 2004 - 04:06:32 CST)
• Bluetooth: BlueSnarf and BlueBug Full Disclusore Adam Laurie (Fri Dec 31 2004 - 03:53:09 CST)
• [SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution Martin Schulze (Fri Dec 31 2004 - 05:20:58 CST)
• Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge) beniwiedmertiscali.ch (Fri Dec 31 2004 - 10:47:14 CST)
• WHM AutoPilot Security Release [ Plus Upgrade Instructions ] GulfTech Security (Fri Dec 31 2004 - 06:34:24 CST)
• Jacks FormMail.php remote file access vulnerability Hack Hawk (Fri Dec 31 2004 - 17:06:38 CST)
• Windows Media files allow opening any url in Internet Explorer Berend-Jan Wever (Sat Jan 01 2005 - 12:40:21 CST)
• Windows LoadImage API Heapoverflow exploit Berend-Jan Wever (Sat Jan 01 2005 - 12:57:32 CST)
• 7a69Adv#17 - Internet Explorer FTP download path disclosure Albert Puigsech Galicia (Thu Dec 30 2004 - 08:56:41 CST)
• Various Vulnerabilities in OWL Intranet Engine Joxean Koret (Sat Jan 01 2005 - 13:52:48 CST)
• Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM Joxean Koret (Sat Jan 01 2005 - 13:58:44 CST)
• Two Vulnerabilities in ViewCVS Joxean Koret (Sat Jan 01 2005 - 14:03:05 CST)

Last message date: Sat Jan 01 2005 - 16:21:29 CST
Archived on: Sat Jan 01 2005 - 16:21:29 CST

482 messages sorted by: [ author ] [ date ] [ subject ]