Bugtraq

• Thread Index

• Re: Ethereal remote buffer overflow
  • From: Diego Giagio
• Re: Ethereal remote buffer overflow
  • From: Gerald Combs
• RE: Ethereal remote buffer overflow - addon
  • From: LSS Security
• [USN-93-1] Squid vulnerability
  • From: Martin Pitt
• [FLSA-2005:2404] Updated less package fixes security issue
  • From: Marc Deslauriers
• Ethereal remote buffer overflow
  • From: LSS Security
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: killer_loop@xxxxxxxx
• Re: houghts and a possible solution on homograph attacks
  • From: Sven Putteneers
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: caldcv
• [SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak
  • From: Martin Schulze
• failles dans ProjectBB v0.4.5.1
  • From: [hacktinium]@securityfocus.com@xxxxxxxxxxxxxxxxxxxxx
• ArGoSoft FTP Server 1.4.2.8 Buffer Overflow
  • From: CorryL
• Multiple vulnerabilities in paFileDB
  • From: sp3x
• [CLA-2005:931] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• Re: thoughts and a possible solution on homograph attacks
  • From: Mike Nice
• Re: thoughts and a possible solution on homograph attacks
  • From: Michael Roitzsch
• Re: thoughts and a possible solution on homograph attacks
  • From: Denis Jedig
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Miroslav Kubik
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Grndahl
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: paul14075
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Patrick Chipman
• Re: Remote Command Execution
  • From: BoI base
• Re: thoughts and a possible solution on homograph attacks
  • From: Dmitry Yu. Bolkhovityanov
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Re: thoughts and a possible solution on homograph attacks
  • From: Dmitry Yu. Bolkhovityanov
• [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation
  • From: pokley
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: Walton, John Michael (John)
• Re: Remote Command Execution
  • From: BoI base
• PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)
  • From: Altrus Wollesen
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Andrey Bayora
• Multiples Vulnerabilities
  • From: Francisco Alisson
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: comsatcat
• Re: Gene6 FTP Server Local Privilege Escalation Vulnerability
  • From: Matthieu
• iDEFENSE Labs Releases IDA RPC Enumerator
  • From: iDEFENSE Labs
• RE: thoughts and a possible solution on homograph attacks
  • From: Scovetta, Michael V
• Re: thoughts and a possible solution on homograph attacks
  • From: Benjamin Franz
• UnixWare 7.1.4 : squid updated package fixes several security issues
  • From: please_reply_to_security
• Re: thoughts and a possible solution on homograph attacks
  • From: Thomas Wana
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: comsatcat
• Re: thoughts and a possible solution on homograph attacks
  • From: James Youngman
• Re: thoughts and a possible solution on homograph attacks
  • From: Kevin Day
• Re: thoughts and a possible solution on homograph attacks
  • From: Michael Silk
• Hosting Controller Multiple Unauthenticated information disclose
  • From: small mouse
• UnixWare 7.1.4 : Samba multiple security issues
  • From: please_reply_to_security
• Re: [ GLSA 200503-12 ] Hashcash: Format string vulnerability
  • From: Hubert Chan
• [ GLSA 200503-14 ] KDE dcopidlng: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• [USN-92-1] LessTif vulnerabilities
  • From: Martin Pitt
• phpWebLog <= 0.5.3 arbitrary file inclusion (VXSfx)
  • From: Filip Groszynski
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Jon O.
• PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)
  • From: Filip Groszynski
• [CLA-2005:930] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• - Argeniss - Oracle Database Server Directory transversal
  • From: Cesar
• See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow
  • From: tal zeltzer
• Re: phpGiftReq SQL Injection
  • From: Ryan Walberg
• drone armies C&C report - Feb/2005
  • From: Gadi Evron
• PHP-FUSION 5.* XSS VULNERABILITY
  • From: FireSt0rm
• phpBB 2.0.13 - user level exploit
  • From: Some one
• vBulletin Worm - perl.Santy variant
  • From: The Prohacker
• PHP Form Mail Script <= 2.3 arbitrary file inclusion exploit exploit
  • From: mozako
• Remote Testing SocialMPN Remote File Inclusion by y3dips
  • From: echo staff
• Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Hongzhen Zhou
• Gene6 FTP Server Local Privilege Escalation Vulnerability
  • From: Sowhat
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED-
  • From: Matthias
• thoughts and a possible solution on homograph attacks
  • From: Michael Roitzsch
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: thephuket
• [USN-91-1] EXIF library vulnerability
  • From: Martin Pitt
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Trog
• CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow
  • From: CIRT Advisory
• [Hat-Squad] Computer-Associates, License Manager POC Exploit
  • From: Hat-Squad Security Team
• Real Realplayer 10 .smil local buffer overflow POC
  • From: nolimit bugtraq
• [FLSA-2005:2344] Updated php packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:1748] Updated subversion packages fix security issues
  • From: Marc Deslauriers
• [ GLSA 200503-12 ] Hashcash: Format string vulnerability
  • From: Thierry Carrez
• [ GLSA 200503-11 ] ImageMagick: Filename handling vulnerability
  • From: Thierry Carrez
• Remote Command Execution
  • From: Francisco Alisson
• [SECURITY] [DSA 691-1] New abuse packages fix local root exploit
  • From: Martin Schulze
• [ GLSA 200503-13 ] mlterm: Integer overflow vulnerability
  • From: Luke Macken
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: Some one
• Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Dejan Levaja
• MDKSA-2005:050 - Updated gftp packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:052 - Updated kdegraphics packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:051 - Updated cyrus-imapd packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:049 - Updated gaim packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:048 - Updated curl packages fix vulnerability
  • From: Mandrakelinux Security Team
• PaX privilege elevation security bug
  • From: pageexec
• LOOKNMEET HTML INJECT EXPLOIT
  • From: Wesley aka PPC
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED-
  • From: Wesley aka PPC
• Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Andrey Bayora
• [ GLSA 200503-10 ] Mozilla Firefox: Various vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200503-09 ] xv: Filename handling vulnerability
  • From: Thierry Carrez
• [ GLSA 200503-08 ] OpenMotif, LessTif: New libXpm buffer overflows
  • From: Thierry Carrez
• -==phpBB 2.0.13 Full path disclosure==-
  • From: HaCkZaTaN
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Karsten Dambekalns
• PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx)
  • From: Filip Groszynski
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Michael Shigorin
• Re: TYPO3 3rd party extension (cmw_linklist) SQL Injection vunerability
  • From: Michael Shigorin
• RE: Microsoft AntiSpyware Beta and Windows Scripting Host
  • From: alex cottle
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Michael Stucki
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Frank Denis (Jedi/Sector One)
• Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)
  • From: Filip Groszynski
• GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Hongzhen Zhou
• RE: TYPO3 SQL Injection vunerabilitie
  • From: GulfTech Security Research
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Sebastian Wolfgarten
• PHP News <= 1.2.4 - Remote File Inclusion Exploit
  • From: mozako
• Re: Microsoft Antispyware Beta window docking issue
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• [ GLSA 200503-07 ] phpMyAdmin: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Dennis Shewmaker
• [ GLSA 200503-06 ] BidWatcher: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: vzmule
• My-forum.org cookies vulnerability - data bug
  • From: Black Angel
• Microsoft Antispyware Beta window docking issue
  • From: Jeroen van Rijn
• TYPO3 SQL Injection vunerabilitie
  • From: Fabian Becker
• [CLA-2005:928] Conectiva Security Announcement - clamav
  • From: Conectiva Updates
• [XSS] paBox 1.6
  • From: Rift
• Microsoft AntiSpyware Beta and Windows Scripting Host
  • From: Joe Stocker
• Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: Paisterist
• Re: SHA-1 broken
  • From: Pavel Machek
• [USN-90-1] Imagemagick vulnerability
  • From: Martin Pitt
• [SECURITY BULLETIN] SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access
  • From: Boren, Rich (SSRT)
• EEYE: Computer Associates License Manager Remote Vulnerabilities
  • From: Karl Lynn
• iDEFENSE Labs Releases IDA Sync
  • From: iDEFENSE Labs
• Re: phpBB <= 2.0.12 UID Exploit
  • From: Nicob
• Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities
  • From: Kristof Philipsen
• Golden Ftp server 1.29 Username remote Buffer Overflow
  • From: Carlos Ulver
• Re: Firefox Software Update
  • From: Gilles DEMARTY
• [ GLSA 200503-05 ] xli, xloadimage: Multiple vulnerabilities
  • From: Thierry Carrez
• Vulnerabilities in Aura CMS
  • From: echo staff
• [FLSA-2005:2314] Updated XFree86 packages fix security flaws
  • From: Dominic Hargreaves
• Foxmail server "USER" command Multiple remote buffer overflow
  • From: Xin Ouyang
• RealOne Player / Real .WAV Heap Overflow File Format Vulnerability
  • From: Mark Litchfield
• [CLA-2005:926] Conectiva Security Announcement - mod_python
  • From: Conectiva Updates
• License Patches Are Now Available To Address Buffer Overflows
  • From: Williams, James K
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow
  • From: iDEFENSE Labs
• [USN-87-1] Cyrus IMAP server vulnerability
  • From: Martin Pitt
• [USN-86-1] cURL vulnerability
  • From: Martin Pitt
• [USN-88-1] reportbug information disclosure
  • From: Martin Pitt
• [USN-89-1] XML library vulnerabilities
  • From: Martin Pitt
• [ GLSA 200502-33 ] MediaWiki: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Firefox Software Update
  • From: Kai Howells
• [ GLSA 200503-02 ] phpBB: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200503-04 ] phpWebSite: Arbitrary PHP execution and path disclosure
  • From: Thierry Carrez
• [ GLSA 200503-03 ] Gaim: Multiple Denial of Service issues
  • From: Sune Kloppenborg Jeppesen
• Re: Firefox Software Update
  • From: Stan Bubrouski
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: exon
• Re: Firefox Software Update
  • From: Rainer Duffner
• PHP News <= 1.2.4 - Remote File Inclusion (VXSfx)
  • From: Filip Groszynski
• iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability
  • From: Michael Sutton
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: devnull
• [ GLSA 200503-01 ] Qt: Untrusted library search path
  • From: Sune Kloppenborg Jeppesen
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: Jose Pedro Andres
• Re: [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: Maksymilian Arciemowicz
• Forumwa search.php xss vulnerability
  • From: Raven
• Software PBLang 4.63 sendpm.php reply file read vulnerability
  • From: Raven
• 427BB profile.php XSS vulnerability.
  • From: Raven
• Re: Firefox Software Update
  • From: Kurt Seifried
• Re: Firefox Software Update
  • From: Adam Kane
• Software PBLang 4.63 delpm.php authentication vulnerability
  • From: Raven
• Re: Firefox Software Update
  • From: Beau Henderson
• Re: Firefox Software Update
  • From: Matt Venzke
• [KDE Security Advisory] kppp Privileged fd Leak Vulnerability
  • From: Dirk Mueller
• 427BB profile.php XSS vulnerability.
  • From: Raven
• Re: Firefox Software Update
  • From: Michael Hampton
• OpenServer 5.0.6 OpenServer 5.0.7 : A vulnerability in TCP
  • From: please_reply_to_security
• phpBB <= 2.0.12 UID Exploit
  • From: federico gonzales
• IObjectSafety and Internet Explorer
  • From: Shane Hird
• Kernelpanik Labs Digest 2005-2
  • From: Kernelpanik Labs - Security Lists
• [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities
  • From: chewkeong
• Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: dveditz
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: Han Boetes
• Re: BizMail 2.1 Spam Exploit
  • From: Jason Frisvold
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: JoCaNoR SeCuRiTy TeaM
• iDEFENSE Security Advisory 02.28.05: KPPP Privileged File Descriptor Leak Vulnerability
  • From: iDEFENSE Labs
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: John Simpson
• Badblue HTTP Server Exploit
  • From: Miguel Tarascó Acuña
• Firefox Software Update
  • From: Kai Howells
• Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: Miles Beck
• [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3
  • From: Maksymilian Arciemowicz
• [Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage
  • From: Hat-Squad Security Team
• iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: iDEFENSE Labs
• WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein
  • From: robert
• Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
  • From: Rainer Schöpf
• 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: Albert Puigsech Galicia
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Jay D. Dyson
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Jay D. Dyson
• Re: Mozilla Firefox 1.0.1 Javascript Images are Draggable
  • From: Jay D. Dyson
• [ GLSA 200502-30 ] cmd5checkpw: Local password leak vulnerability
  • From: Thierry Carrez
• Re: Firescrolling [Firefox 1.0]
  • From: Stan Bubrouski
• Mozilla Firefox 1.0.1 Javascript Images are Draggable
  • From: Paul
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Paul
• Knet <= 1.04c Buffer Overflow Bug
  • From: CorryL
• Re: [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion
  • From: Calum Power
• -==phpBB 2.0.12 Full path disclosure==-
  • From: HaCkZaTaN
• Re: Firescrolling [Firefox 1.0]
  • From: btrq
• Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
  • From: Stan Bubrouski
• CIS WebServer Directory Traversal Bug
  • From: CorryL
• RE: Firescrolling [Firefox 1.0]
  • From: Eric McCarty
• iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
  • From: iDEFENSE Labs
• RE: Firescrolling [Firefox 1.0]
  • From: Beauford, Jason
• [USN-85-1] Gaim vulnerabilities
  • From: Martin Pitt
• [FLSA-2005:2336] Updated kernel packages fix security issues
  • From: Marc Deslauriers
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Denis Jedig
• AW: phpWebSite-0.10.0_exploit
  • From: webmaster
• CFP: WORM 2005
  • From: David Moore
• Announce: RSBAC v1.2.4 released
  • From: Amon Ott
• [SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution
  • From: Martin Schulze
• Firescrolling [Firefox 1.0]
  • From: mikx
• phpWebSite 0.10.0 Full Path disclosure
  • From: HaCkZaTaN
• phpWebSite 0.10.0 Full Path disclosure
  • From: HaCkZaTaN.
• [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4
  • From: Maksymilian Arciemowicz
• [FLSA-2005:2005] Updated gdk-pixbuf packages fix security flaws
  • From: Marc Deslauriers
• [FLSA-2005:2343] Updated vim packages fix security issues
  • From: Marc Deslauriers
• phpWebSite-0.10.0_exploit
  • From: tjomka
• [FLSA-2005:2043] Updated zlib package fixes security issues
  • From: Marc Deslauriers
• MDKSA-2005:047 - Updated squid packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:046 - Updated uim packages fix vulnerability
  • From: Mandrakelinux Security Team
• Multiple vulns in punBB
  • From: John Gumbel
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: PASTOR ADRIAN
• In-game cl_guid crash in Soldier of Fortune II 1.03
  • From: Luigi Auriemma
• [Security Bulletin] SSRT4694 HP-UX ftpd remote unauthorized access
  • From: Boren, Rich (SSRT)
• Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: phpBB 2.0.12 released
  • From: bcl
• iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability
  • From: iDEFENSE Labs
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: Walton, John Michael (John)
• Multiple vulnerabilities found in CSGuestbook by CoolSerlets.com
  • From: Josh884
• RE: Incorrect Classification of iDownload's Product as Spyware...
  • From: Roger A. Grimes
• Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Discini, Sonny
• [Fwd: [arkeia-announce] Release of Arkeia Network Backup 5.3.5 fixes security issue]
  • From: Maciej Bogucki
• Release of Arkeia Network Backup 5.3.5 fixes security issue [bugtraq id 12594]
  • From: Arnaud Spicht
• Robustness patch for TWiki, vulnerability in ImageGalleryPlugin
  • From: Florian Weimer
• [ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities
  • From: Matthias Geerdsen
• Incorrect Classification of iDownload's Product as Spyware...
  • From: Paul Laudanski
• [SECURITY] [DSA 689-1] New mod_python packages fix information leak
  • From: Martin Schulze
• [SECURITY] [DSA 688-1] New squid packages fix denial of service
  • From: Martin Schulze
• Re: phpBB 2.0.12 released
  • From: bcl
• Re: Cross Site Scripting exploitation via malformed files
  • From: http-equiv@xxxxxxxxxx
• Re: Knox Arkeia remote root/system exploit
  • From: Arnaud Spicht
• Re: Arkeia Network Backup Client Remote Access
  • From: Arnaud Spicht
• Software PBLang 4.65 pm.php XSS vulnerability
  • From: Raven
• Software PBLang 4.65 pmpshow.php XSS vulnerability
  • From: Raven
• Software PBLang 4.65 search.php XSS vulnerability
  • From: Raven
• iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB2 Arbitrary File Unlink Vulnerability
  • From: iDEFENSE Labs
• Cross Site Scripting exploitation via malformed files
  • From: Jerome ATHIAS
• paNews v2.0b4 - PHP Injection
  • From: tjomka
• [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection
  • From: pokley
• The WebConnect 6.4.4 and 6.5 contains several vulnerabilities
  • From: CIRT Advisory
• Re: Combining Hashes
  • From: Joel Maslak
• RE: Windows Firewall Has A Backdoor
  • From: Thor Larholm
• Re: Windows Firewall Has A Backdoor
  • From: Thor (Hammer of God)
• [NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection
  • From: John Cobb
• SD Server 4.0.70 Directory Traversal Bug
  • From: CorryL
• Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: grutz
• Re: Arkeia Network Backup Client Remote Access
  • From: H D Moore
• iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability
  • From: iDEFENSE Labs
• Re: Arkeia Network Backup Client Remote Access
  • From: Vincent Archer
• Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: m123303
• phpBB 2.0.12 released
  • From: Snapdragon
• Re: SHA-1 broken
  • From: Peter J. Holzer
• Re: SHA-1 broken
  • From: Peter Jeremy
• iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• RE: Windows Firewall Has A Backdoor
  • From: Chris Goodwin
• iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities
  • From: iDEFENSE Labs
• [ GLSA 200502-28 ] PuTTY: Remote code execution
  • From: Luke Macken
• Re: Joint encryption?
  • From: peter zulu
• Re: SHA-1 broken
  • From: Paul Johnston
• Re: Joint encryption?
  • From: John Richard Moser
• Re: SHA-1 broken
  • From: Damian Menscher
• Re: Windows Firewall Has A Backdoor
  • From: Chris Wysopal
• Re: Joint encryption?
  • From: Ruud H.G. van Tol
• Re: SHA-1 broken
  • From: Denis Jedig
• Re: Joint encryption?
  • From: Valdis . Kletnieks
• Re: SHA-1 broken
  • From: peeon+securityfocus
• Re: SHA-1 broken
  • From: exon
• Re: Joint encryption?
  • From: John Richard Moser
• RE: Joint encryption?
  • From: David Schwartz
• Re: Joint encryption?
  • From: Gandalf The White
• RE: SHA-1 broken
  • From: Frank Knobbe
• Re: Joint encryption?
  • From: Robert C. Helling
• Re: Combining Hashes
  • From: Frank Knobbe
• Re: SHA-1 broken
  • From: Michael Silk
• [FLSA-2005:1944] GNOME VFS updates address extfs vulnerability
  • From: Marc Deslauriers
• [FLSA-2005:1945] Updated sox packages fix buffer overflows
  • From: Marc Deslauriers
• Re: Combining Hashes
  • From: Ivan Krstic
• [FLSA-2005:2058] Updated cdrtools packages fix a security issue
  • From: Marc Deslauriers
• [USN-84-1] Squid vulnerabilities
  • From: Martin Pitt
• Windows Firewall Has A Backdoor
  • From: Jay Calvert
• ADP Elite System Max 9000 Series Login Vulnerability
  • From: rootfiend
• Gigafast/CompUSA router (model EE400-R) vulnerabilities
  • From: Gary H. Jones II
• Re: Knox Arkeia remote root/system exploit
  • From: H D Moore
• Arkeia Network Backup Client Remote Access
  • From: H D Moore
• [SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities
  • From: Martin Schulze
• Re: Combining Hashes
  • From: exon
• Re: SHA-1 broken
  • From: Michael Cordover
• Re: Dangers of discarding duplicated messages
  • From: David F. Skoll
• Re: Possible phpBB <=2.0.11 bug or sql injection?
  • From: Giacomo Rizzo
• Re: Dangers of discarding duplicated messages
  • From: Gene Rackow
• Re: [Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability
  • From: Andres Tarasco
• Re: SHA-1 broken
  • From: exon
• Re: SHA-1 broken
  • From: Brian May
• Knox Arkeia remote root/system exploit
  • From: John Doe
• Re: Dangers of discarding duplicated messages
  • From: Jon Keating
• Re: Combining Hashes
  • From: Felix Cuello
• Re: SHA-1 broken
  • From: securityfocus
• Re: SHA-1 broken
  • From: Anatole Shaw
• Re: SHA-1 broken
  • From: Michael Silk
• 3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow
  • From: class 101
• Re: Joint encryption?
  • From: John Richard Moser
• Re: Joint encryption?
  • From: John Richard Moser
• Re: [lists] Combining Hashes
  • From: Elliott Bäck
• Thomson TCW690 POST Password Validation Vulnerability
  • From: MurDoK
• Re: Combining Hashes
  • From: unmanarc
• Re: SHA-1 broken
  • From: Tollef Fog Heen
• Re: Possible phpBB <=2.0.11 bug or sql injection?
  • From: kaosone+[ONE]+
• Re: Joint encryption?
  • From: devnull
• Re: Phishing hole found in IE and OE
  • From: cyberpixl
• Re: Joint encryption?
  • From: Casper . Dik
• cfengine rsa heap remote exploit: part of PTjob project
  • From: yan feng
• [FLSA-2005:2137] Updated cyrus-sasl resolves security vulnerabilities
  • From: Dominic Hargreaves
• webfsd fun. opensource is god .lol windows
  • From: yan feng
• [Hat-Squad] Findjmp2 Tool
  • From: Hat-Squad Security Team
• exwormshoucast part of PTjob project: SHOUTcast v1.9.4 remote exploit
  • From: yan feng
• Re: Joint encryption?
  • From: Damian Menscher
• [ GLSA 200502-27 ] gFTP: Directory traversal vulnerability
  • From: Matthias Geerdsen
• Re: Joint encryption?
  • From: John Richard Moser
• Multiples vulnerability in ZeroBoard,
  • From: albanian haxorz
• Re: SHA-1 broken
  • From: Darren Reed
• Re: SHA-1 broken
  • From: dullien
• Joint encryption?
  • From: John Richard Moser
• Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins
  • From: headpimp
• MDKSA-2005:041 - Updated cups packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• MDKSA-2005:040 - Updated PostgreSQL packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• [ GLSA 200502-25 ] Squid: Denial of Service through DNS responses
  • From: Sune Kloppenborg Jeppesen
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: newbug Tseng
• MDKSA-2005:044 - Updated tetex packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• Re: SHA-1 broken
  • From: Dan Harkless
• Multiple vulnerabilities in TrackerCam 5.12
  • From: Luigi Auriemma
• Adobe Reader invalid root page node Count value DOS
  • From: Hongzhen Zhou
• Re: SHA-1 broken
  • From: Michael Silk
• Combining Hashes
  • From: Kent Borg
• MDKSA-2005:045 - Updated kdelibs packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• Re: Phishing hole found in IE and OE
  • From: David Nichols
• RE: Possible phpBB <=2.0.11 bug or sql injection?
  • From: Miguel Angel Rodríguez Jódar
• Re: SHA-1 broken
  • From: D.J. Capelis
• Re: Phishing hole found in IE and OE
  • From: Greg Merideth
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Rainer Duffner
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Riccardo Murri
• 3com 3CDaemon FTP "USER" Remote BOverflow POC
  • From: Hat-Squad Security Team
• [ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2005:042 - Updated gpdf packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• [SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
  • From: Martin Schulze
• MDKSA-2005:043 - Updated xpdf packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• Re: Possible phpBB <=2.0.11 bug or sql injection?
  • From: Exoduks
• Re: Dangers of discarding duplicated messages
  • From: Maciej Soltysiak
• RE: SHA-1 broken
  • From: Michael Silk
• BizMail 2.1 Spam Exploit
  • From: Jason Frisvold
• Re: SHA-1 broken
  • From: dullien
• Re: SHA-1 broken
  • From: dullien
• Re: NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
  • From: Vade 79
• [USN-66-2] PHP vulnerability
  • From: Martin Pitt
• [USN-78-2] Fixed mailman packages for USN-78-1
  • From: Martin Pitt
• RE: SHA-1 broken
  • From: Scovetta, Michael V
• Phishing hole found in IE and OE
  • From: Jay Calvert
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: IE6 SP1 - Click N Crash
  • From: Robert ONeal
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• iDEFENSE Labs Website Launch
  • From: iDEFENSE Labs
• hpm_guestbook.cgi JavaScript-Injection
  • From: Christoph Burchert
• [SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability
  • From: Martin Schulze
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: SHA-1 broken
  • From: Jonathan G. Lampe
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Advisory: Multiple Vulnerabilities in BibORB
  • From: Patrick Hof
• [SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution
  • From: Martin Schulze
• Possible phpBB <=2.0.11 bug or sql injection?
  • From: jtm297
• [PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection
  • From: PersianHacker Team
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Tosoni
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Vincent Archer
• Remote Windows Kernel Exploitation - Step Into the Ring 0
  • From: Marc Maiffret
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Thor (Hammer of God)
• Re: Permission problem in Skype BETA for linux
  • From: Peter Conrad
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Ron DuFresne
• [ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie
  • From: Scovetta Labs
• RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)
  • From: Williams, James K
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Matt Wilder
• Dangers of discarding duplicated messages
  • From: Adrian Bunk
• Invision Power Boards 1.3.1 FINAL XSS Exploit
  • From: Daniel A.
• [ GLSA 200502-24 ] Midnight Commander: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• RECON 2005 CFP [Montreal, Canada]
  • From: dataworm
• Re: xprobe2 v0.2.2 released
  • From: Stan Bubrouski
• MDKSA-2005:039 - Updated rwho packages fix vulnerability
  • From: Mandrakelinux Security Team
• RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Michael Scheidell
• XSS vulnerabilty in ASP.Net [with details]
  • From: Andir Andir
• Re: SHA-1 broken
  • From: Steve Friedl
• Re: SHA-1 broken
  • From: Robert Sussland
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Nick FitzGerald
• Re: SHA-1 broken
  • From: Michael Cordover
• RE: BrightStor ARCserve Backup buffer overflow PoC (fix available)
  • From: Williams, James K
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Stefan Paletta
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Stefan Paletta
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Benjamin Franz
• Re: SHA-1 broken
  • From: Kent Borg
• NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
  • From: TAC
• [PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability
  • From: PersianHacker Team
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Seth Breidbart
• [USN-83-1] LessTif 2 vulnerabilities
  • From: Martin Pitt
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction
  • From: Threlkeld, Richard
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: lyal.collins
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• [Security Bulletin] SSRT5893 rev.0 - HP Web-enabled Management Software Remote Buffer Overflow
  • From: Boren, Rich (SSRT)
• Re: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185
  • From: Thor (Hammer of God)
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction
  • From: Joe Granto
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• SHA-1 broken
  • From: Gadi Evron
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Micah Brandon
• Update Your Bookmarks
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution
  • From: Martin Schulze
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Bill Brown
• Re: vbulletin 3.0.x PHP code execution
  • From: pokley
• [ GLSA 200502-21 ] lighttpd: Script source disclosure
  • From: Thierry Carrez
• [ GLSA 200502-20 ] Emacs, XEmacs: Format string vulnerabilities in movemail
  • From: Thierry Carrez
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• [USN-82-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Blind Sql-Injection in MySQL Databases
  • From: Zeelock
• Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software
  • From: Maximillian Dornseif
• [ GLSA 200502-18 ] VMware Workstation: Untrusted library search path
  • From: Thierry Carrez
• UPDATE: [ GLSA 200501-36 ] AWStats: Remote code execution
  • From: Thierry Carrez
• [ GLSA 200502-23 ] KStars: Buffer overflow in fliccd
  • From: Sune Kloppenborg Jeppesen
• xprobe2 v0.2.2 released
  • From: Ofir Arkin
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Gwendolynn ferch Elydyr
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Gwendolynn ferch Elydyr
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Janusz A. Urbanowicz
• [ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability
  • From: Matthias Geerdsen
• [KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi
  • From: Dirk Mueller
• [hackgen-2005-#003] - SQL injection bugs in DCP-Portal
  • From: Exoduks
• [KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi
  • From: Dirk Mueller
• MDKSA-2005:038 - Updated emacs/xemacs packages fix vulnerability
  • From: Mandrakelinux Security Team
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: K-OTiK Security
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: George Capehart
• Re: BrightStor ARCserve Backup buffer overflow PoC
  • From: Williams, James K
• Re: vbulletin 3.0.x PHP code execution
  • From: AL3NDALEEB.
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Thor (Hammer of God)
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Thom Craver
• [CLA-2005:925] Conectiva Security Announcement - evolution
  • From: Conectiva Updates
• [Full Disclosure] Using DHTML XSS to launch HHCTRL exploit
  • From: Valentin Avram
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Jamie Pratt
• RE: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185
  • From: Randal, Phil
• XSS in MySpace.com RuWeb.net and Primus.com
  • From: Chris
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: twebster
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185
  • From: Threlkeld, Richard
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Jeffrey Wilkinson
• RE: eBay Account Phishing with eBay Redirect
  • From: Israel Torres
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction
  • From: James Lay
• RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: William Pratt
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Ondra Holecek
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Herman Sheremetyev
• Re: eBay Account Phishing with eBay Redirect
  • From: Jay Calvert
• [NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability
  • From: John Cobb
• RE: eBay Account Phishing with eBay Redirect
  • From: Thomas T. Evans, III
• Scottsave.com Trade History Exploit
  • From: Ben Efros
• Scottrader Application Exploit
  • From: Ben Efros
• Re: IE6 SP1 - Click N Crash is old news
  • From: Berend-Jan Wever
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Sebastian
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• IE6 SP1 - Click N Crash
  • From: ViPeR
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Thor (Hammer of God)
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Gwendolynn ferch Elydyr
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Ondra Holecek
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?
  • From: Jamie Pratt
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: bkfsec
• Re: eBay Account Phishing with eBay Redirect
  • From: Jonathan Rockway
• MDKSA-2005:037 - Updated mailman packages fix directory traversal vulnerability
  • From: Mandrakelinux Security Team
• Re: vbulletin 3.0.x PHP code execution
  • From: pokley
• Re: eBay Account Phishing with eBay Redirect
  • From: Nick FitzGerald
• [SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Vincent Archer
• Re: AWStats <= 6.4 Multiple vulnerabilities
  • From: Ondra Holecek
• ASPjar Guestbook login.asp not official patch
  • From: CorryL
• [SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200502-19 ] PostgreSQL: Buffer overflows in PL/PgSQL parser
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200502-17 ] Opera: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: eBay Account Phishing with eBay Redirect
  • From: Josh Tolley
• [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities
  • From: John Cobb
• Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185
  • From: James Lay
• Re: BrightStor ARCserve Backup buffer overflow PoC
  • From: H D Moore
• [ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability
  • From: Sune Kloppenborg Jeppesen
• vbulletin 3.0.x PHP code execution
  • From: AL3NDALEEB
• eBay Account Phishing with eBay Redirect
  • From: Steven
• [SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access
  • From: Martin Schulze
• Credit Card Phishing with executable download
  • From: Gandalf The White
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: David Schwartz
• AWStats <= 6.4 Multiple vulnerabilities
  • From: [ru]@securityfocus.com@xxxxxxxxxxxxxxxxxxxxx
• [ GLSA 200502-15 ] PowerDNS: Denial of Service vulnerability
  • From: Matthias Geerdsen
• [ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability
  • From: Luke Macken
• RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs.
  • From: Michael Wojcik
• [SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability
  • From: Martin Schulze
• [SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files
  • From: Martin Schulze
• [CLA-2005:924] Conectiva Security Announcement - XFree86
  • From: Conectiva Updates
• Re: BrightStor ARCserve Backup buffer overflow PoC
  • From: H D Moore
• exim auth_spa_server() PoC exploit
  • From: Yuri Gushin
• Infostring crash and shutdown in the Quake 3 engine
  • From: Luigi Auriemma
• Re: Advanced Guestbook 2.2 -- SQL Injection Exploit
  • From: mary
• Re: [Full-Disclosure] Fireflashing [Firefox 1.0]
  • From: Jelmer Kuperus
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Janusz A. Urbanowicz
• Symantec UPX issue solution
  • From: Roger A. Grimes
• MDKSA-2005:032-1 - Updated cpio packages fix vulnerability
  • From: Mandrakelinux Security Team
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Scott Gifford
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Neil W Rickert
• iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability
  • From: iDefense Customer Service
• [ GLSA 200502-12 ] Webmin: Information leak in Gentoo binary package
  • From: Thierry Carrez
• Zone Labs Security Alert ZL05-01: Zone Labs IPC Instability
  • From: Zone Labs Product Security
• [ GLSA 200502-13 ] Perl: Vulnerabilities in perl-suid wrapper
  • From: Thierry Carrez
• SYM05-003 Symantec UPX Parsing Engine Heap Overflow
  • From: secure
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Scott Gifford
• Re: HACKING WITH JAVASCRIPT
  • From: Jim Halfpenny
• Re: HACKING WITH JAVASCRIPT
  • From: Cleiton Martins
• BrightStor ARCserve Backup buffer overflow PoC
  • From: cybertronic
• [FLSA-2005:2353] Updated gpdf package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:2252] Updated iptables packages resolve security issues
  • From: Marc Deslauriers
• [FLSA-2005:2352] Updated Xpdf package fixes security issues
  • From: Marc Deslauriers
• [USN-80-1] mod_python vulnerability
  • From: Martin Pitt
• [USN-81-1] iptables vulnerability
  • From: Martin Pitt
• [FLSA-2005:2188] Updated gaim package resolves security issues
  • From: Marc Deslauriers
• [SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root
  • From: Martin Schulze
• Re: Symantec UPX Parsing Engine Heap Overflow
  • From: James Riden
• insecure temporary file creation in kdelibs 3.3.2
  • From: Davide Madrisan
• [SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities
  • From: Martin Schulze
• Remotely Controlling XSS Attacks - Announcing XSS-Proxy
  • From: Rager, Anton (Anton)
• MDKSA-2005:036 - Updated MySQL packages fix temporary file vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:035 - Updated python packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:034 - Updated squid packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:033 - Updated enscript packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:032 - Updated cpio packages fix vulnerability
  • From: Mandrakelinux Security Team
• [SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service
  • From: Martin Schulze
• TSLSA-2005-0003 - multi
  • From: Trustix Security Advisor
• UPDATE: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability
  • From: Luke Macken
• Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0
  • From: Luigi Auriemma
• Re:iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability
  • From: Shiva Persaud
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Peter J. Holzer
• iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow
  • From: iDefense Customer Service
• Re: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs.
  • From: Marcin Sochacki
• RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
  • From: Andrew Hunter
• ASPjar guestbook (Injection in login page)
  • From: farhad koosha
• Symantec UPX Parsing Engine Heap Overflow
  • From: Neil Watson
• HACKING WITH JAVASCRIPT
  • From: hictor ertd
• iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• Re: iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability
  • From: Shiva Persaud
• Re: iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability
  • From: Shiva Persaud
• Re: Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability
  • From: Derek Martin
• secure-roster script to address mailman email harvester
  • From: Neal McBurnett
• [SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit
  • From: Martin Schulze
• RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
  • From: Color Inc.
• RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
  • From: Thor Larholm
• [ GLSA 200502-11 ] Mailman: Directory traversal vulnerability
  • From: Sune Kloppenborg Jeppesen
• [USN-79-1] PostgreSQL vulnerabilities
  • From: Martin Pitt
• [FLSA-2005:1906] Updated abiword packages fix security issue
  • From: Dominic Hargreaves
• [FLSA-2005:1943] Updated libpng resolves security vulnerabilities
  • From: Dominic Hargreaves
• iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• [USN-78-1] Mailman vulnerability
  • From: Martin Pitt
• Re: iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability
  • From: Shiva Persaud
• Re: iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability
  • From: Shiva Persaud
• Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders.
  • From: Sean Sosik-Hamor
• iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability
  • From: iDefense Customer Service
• [SECURITY] [DSA 673-1] New evolution packages fix arbitrary code execution as root
  • From: Martin Schulze
• [SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities
  • From: Martin Schulze
• Re: yet another DSL modem backdoor - Mentor (Conexant)
  • From: Philip Barnham
• SUSE Security Announcement: squid (SUSE-SA:2005:006)
  • From: Thomas Biege
• [Security Bulletin] SSRT4861 rev.0 - HP-UX BIND9.2.0 remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• yet another DSL modem backdoor - Mentor (Conexant)
  • From: Adam Laurie
• CMS Core SQL injection
  • From: foster GHC
• SQL injection in Chipmunk forums
  • From: foster GHC
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Will Kamishlian
• Paper: Solution to Red Hat PIE Protection
  • From: Zarul Shahrin
• [SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution
  • From: Martin Schulze
• Re: GMail / Google Groups ESMTP software b0f
  • From: Heather Adkins
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Simon Østengaard
• Patch available for high risk IBM DB2 Universal Database flaw
  • From: NGSSoftware Insight Security Research
• CFP for SyScAN'05
  • From: organiser@xxxxxxxxxx
• RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs.
  • From: Randal, Phil
• [ GLSA 200502-10 ] pdftohtml: Vulnerabilities in included Xpdf
  • From: Matthias Geerdsen
• RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN)
  • From: R Dicaire
• Some details about MS05-007 security bulletin
  • From: Jean-Baptiste Marchand
• RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
  • From: Andrew Hunter
• [ GLSA 200502-09 ] Python: Arbitrary code execution through SimpleXMLRPCServer
  • From: Thierry Carrez
• Several SQL injection bugs in myPHP Forum v.1.0
  • From: foster GHC
• MDKSA-2005:031 - Updated perl packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• Mercuryboard <= 1.1.1 Working Sql Injection
  • From: Zeelock
• [Security Bulletin] - SSRT4883 HP-UX ftpd remote privileged access
  • From: Boren, Rich (SSRT)
• [SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities
  • From: chewkeong
• Internet Explorer zone spoofing with encoded URLs
  • From: Jouko Pynnonen
• MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit
  • From: ATmaCA ATmaCA
• GREENAPPLE Release
  • From: Dave Aitel
• Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability
  • From: Rafel Ivgi
• [SCL-2005.002] - IDN Feature Workaround via proxy.pac
  • From: Scovetta, Michael V
• [SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories
  • From: chewkeong
• Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994
  • From: Luigi Auriemma
• EEYE: Windows SMB Client Transaction Response Handling Vulnerability
  • From: Marc Maiffret
• [SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution
  • From: Martin Schulze
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Jerome ATHIAS
• [SECURITY] [DSA 670-1] New emacs20 packages fix arbitrary code execution
  • From: Martin Schulze
• SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory
  • From: Roy Hills
• mailman email harvester
  • From: Bernhard Kuemel
• [PersianHacker.NET 200502-05] WWWoard passwd
  • From: Andrew guess
• CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability
  • From: CORE Security Technologies Advisories
• AppleFileServer Denial of Service.
  • From: nemo
• iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability
  • From: iDefense Customer Service
• RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN)
  • From: Scovetta, Michael V
• OpenServer 5.0.6 OpenServer 5.0.7 : enable command line buffer overflows
  • From: please_reply_to_security
• UnixWare 7.1.4 : vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands
  • From: please_reply_to_security
• php-fusion 4.x vuln
  • From: thegreatone2176
• iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability
  • From: iDefense Customer Service
• UnixWare 7.1.3 UnixWare 7.1.1 : Vulnerabilities in long-lived TCP connections / Rose attack
  • From: please_reply_to_security
• CodeCon Reminder
  • From: Len Sassaman
• International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
  • From: Brandon Kovacs
• UnixWare 7.1.4 : racoon multilple security issues
  • From: please_reply_to_security
• [SePro Bugtraq] SQL-Injection in PerlDesk 1.x
  • From: deluxe
• GMail / Google Groups ESMTP software b0f
  • From: Michal Zalewski
• Firetabbing [Firefox 1.0]
  • From: mikx
• OpenServer 5.0.6 OpenServer 5.0.7 : Vulnerabilities in long-lived TCP connections / Rose attack
  • From: please_reply_to_security
• [ GLSA 200502-08 ] PostgreSQL: Local privilege escalation
  • From: Luke Macken
• Fireflashing [Firefox 1.0]
  • From: mikx
• iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability
  • From: iDefense Customer Service
• Firedragging [Firefox 1.0]
  • From: mikx
• [Security Bulletin] HP Tru64 Unix Mozilla Application Suite 1.7.3 Remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• [ GLSA 200502-06 ] LessTif: Multiple vulnerabilities in libXpm
  • From: Thierry Carrez
• Re: [Contact] Motorola broadband appliance team?
  • From: Grzegorz Cegielski
• [USN-77-1] Squid vulnerabilities
  • From: Martin Pitt
• [ GLSA 200502-07 ] OpenMotif: Multiple vulnerabilities in libXpm
  • From: Thierry Carrez
• [USN-76-1] Emacs vulnerability
  • From: Martin Pitt
• DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG buffer overflow'
  • From: KF (lists)
• Vulnerability in 3Com 3CServer v1.1
  • From: mandragore
• DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation'
  • From: KF (lists)
• [OSX Finder] DS_Store arbitrary file overwrite vulnerability.
  • From: Vade 79
• New version of ike-scan (IPsec IKE scanner) available - v1.7
  • From: Roy Hills
• VOIPSEC
  • From: VoIP Security Aliance
• XSS Vulnerability at thefacebook.com
  • From: Jonathan Rockway
• [SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities
  • From: Martin Schulze
• Re: [USN-74-1] Postfix vulnerability
  • From: Wietse Venema
• [USN-74-2] Fixed Postfix packages for USN-74-1
  • From: Martin Pitt
• [USN-75-1] cpio vulnerability
  • From: Martin Pitt
• [USN-74-1] Postfix vulnerability
  • From: Martin Pitt
• [PersianHacker.NET 200502-05] WWWoard passwd
  • From: Pedram Hayati
• directory traversal in RaidenHTTPD 1.1.27
  • From: Donato Ferrante
• Foxmail Server Remote Buffer Overflow Vulnerability
  • From: Xin Ouyang
• Re: Wireless networks/Default Admin username security problem in Croatia
  • From: Denis Jedig
• Re: Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12
  • From: Nicolas Gregoire
• Webroot Software Resigns from COAST
  • From: Paul Laudanski
• [SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
  • From: Martin Schulze
• Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12
  • From: Jonathan Rockway
• Re: Squirrelmail vacation v0.15 local root exploit
  • From: p dont think