Bugtraq

• Thread Index

• Re: [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4
  • From: Denis Jedig
• [SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading
  • From: Martin Schulze
• Wireless networks/Default Admin username security problem in Croatia
  • From: Radoslav Dejanović
• Exploit For Savant Web Server 3.1 (tested on win2003)
  • From: CorryL
• [SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access
  • From: Martin Schulze
• Re: [Linux kernel ipv6_setsockopt integer overflow]
  • From: Dan Yefimov
• [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4
  • From: laurent oudot
• [USN-73-1] Python vulnerability
  • From: Martin Pitt
• [Linux kernel ipv6_setsockopt integer overflow]
  • From: qobaiashi
• DoS in LANChat Pro Revival 1.666c
  • From: Donato Ferrante
• Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py
  • From: Guido van Rossum
• ngIRCd <= v0.8.2 Format String Vulnerability
  • From: CoKi
• RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT]
  • From: cybertronic
• RE: Google getting smarter ?!?!
  • From: Scott Jacobson
• New presentation: Advanced SQL Injection in Oracle databases
  • From: Esteban Martínez Fayó
• MDKSA-2005:029 - Updated vim packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• [ GLSA 200502-05 ] Newspost: Buffer overflow vulnerability
  • From: Luke Macken
• SV: Zyxel / Netgear and probably other routers leaking information.
  • From: Jens Kalvik
• Re: [Full-Disclosure] [ GLSA 200501-40 ] ngIRCd: Buffer overflow
  • From: qobaiashi
• [ GLSA 200502-04 ] Squid: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Google getting smarter ?!?!
  • From: John Madden
• Re[2]: WinAmp POC: How to get 900+ shellcodespace!?
  • From: Viktor E Larionov
• Portcullis Advisory 05-009 Update, Webseries Payment Application
  • From: Paul J Docherty
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: exon
• Windows Security Checklists - 10 Parts
  • From: Paul Laudanski
• Gallery is still vulnerable to Cross-site Scripting attacks
  • From: Jon Keating
• Portcullis Advisory 05-008 Update, Webseries Payment Application
  • From: Paul J Docherty
• Portcullis Advisory 05-007 Update, Webseries Payment Application
  • From: Paul J Docherty
• Portcullis Advisory 05-006 Update, Webseries Payment Application
  • From: Paul J Docherty
• Portcullis Advisory 05-001 Update, Webseries Payment Application
  • From: Paul J Docherty
• Portcullis Advisory 05-005 Update, Webseries Payment Application
  • From: Paul J Docherty
• [FLSA-2005:2187] Updated freeradius packages fix security flaws
  • From: Marc Deslauriers
• [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities
  • From: chewkeong
• 7a69Adv#21 - WinRAR unpack one-folder path disclosure
  • From: Albert Puigsech Galicia
• 7a69Adv#20 - ZipGenius unpack one-folder path disclosure
  • From: Albert Puigsech Galicia
• [ GLSA 200502-02 ] UW IMAP: CRAM-MD5 authentication bypass
  • From: Sune Kloppenborg Jeppesen
• [FLSA-2005:2272] Updated unarj package fixes security issue
  • From: Marc Deslauriers
• [FLSA-2005:2255] Updated zip package fixes security issue
  • From: Marc Deslauriers
• [ GLSA 200502-03 ] enscript: Multiple vulnerabilities
  • From: Thierry Carrez
• [USN-72-1] Perl vulnerabilities
  • From: Martin Pitt
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: Trog
• 7a69Adv#19 - ZipGenius unpack path disclosure
  • From: Albert Puigsech Galicia
• MDKSA-2005:026 - Updated imap packages fix authentication vulnerability
  • From: Mandrakelinux Security Team
• Limited buffer-overflow in Painkiller 1.35
  • From: Luigi Auriemma
• MDKSA-2005:027 - Updated chbg packages fix vulnerability
  • From: Mandrakelinux Security Team
• SQL injection in EveryDNS.net Service
  • From: Calum Power
• MDKSA-2005:028 - Updated ncpfs packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: Darren Bounds
• [SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions
  • From: Martin Schulze
• Re:WinAmp POC: How to get 900+ shellcodespace!?
  • From: lists
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: Dack
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: Trog
• [SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200502-01 ] FireHOL: Insecure temporary file creation
  • From: Matthias Geerdsen
• [SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-71-1] PostgreSQL vulnerability
  • From: Martin Pitt
• [ Security Bulletin] SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• SAME LADY, DIFFERENT HAT: REELY
  • From: http-equiv@xxxxxxxxxx
• [ GLSA 200501-46 ] ClamAV: Multiple issues
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2005:025 - Updated clamav packages fix vulnerability
  • From: Mandrakelinux Security Team
• Re: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability
  • From: Paul Laudanski
• New Whitepaper available on security best practices
  • From: Gunter Ollmann
• Zyxel / Netgear and probably other routers leaking information.
  • From: Jens Kalvik
• [PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final
  • From: Pedram hayati
• Re: iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability
  • From: dila
• Re: Winamp Exploit (POC) 5.08 Stack Overflow
  • From: Black Dot
• [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability
  • From: Luke Macken
• Broadcast crash in Xpand Rally 1.0.0.0
  • From: Luigi Auriemma
• Re: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: Casper . Dik
• Re[2]: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: 3APA3A
• drone armies C&C report - Jan/2005
  • From: Gadi Evron
• [ GLSA 200501-41 ] TikiWiki: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Security Bulletin - SSRT4875 rev.1 - HP Tru64 UNIX Java (TM) Technology Software Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• WASC-Articles: "The 80/20 Rule for Web Application Security"
  • From: robert
• [ GLSA 200501-44 ] ncpfs: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200501-43 ] f2c: Insecure temporary file creation
  • From: Thierry Carrez
• [ GLSA 200501-42 ] VDR: Arbitrary file overwriting issue
  • From: Thierry Carrez
• XSS in Infinite Mobile Delivery v2.6 Webmail
  • From: steven
• Re: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: Lee Dilkie
• Re: List of all admin accounts in phpBB
  • From: Paul Laudanski
• SquirrelMail Security Advisory
  • From: Jonathan Angliss
• RE: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: David LeBlanc
• Re: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: Damien Miller
• [ GLSA 200501-40 ] ngIRCd: Buffer overflow
  • From: Thierry Carrez
• Re: Unrestricted I/O access vulnerability in INCA Gameguard
  • From: David Roberts
• RE: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: David LeBlanc
• Winamp Exploit (POC) 5.08 Stack Overflow
  • From: Rojodos
• Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes
  • From: ShineShadow
• Re: UEBIMIAU <= 2.7.2 MULTIPLES VULNERABILITIES
  • From: pokley
• [OpenPKG-SA-2005.004] OpenPKG Security Advisory (sasl)
  • From: OpenPKG
• WebWasher Classic - HTTP CONNECT weakness
  • From: Oliver Karow
• [ GLSA 200501-39 ] SquirrelMail: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2
  • From: David Alonso Pérez
• WarFTPD 1.82 RC9 DoS
  • From: MC.Iglo
• MDKSA-2005:024 - Updated evolution packages fix vulnerability
  • From: Mandrakelinux Security Team
• [SECURITY] [DSA 661-1] New f2c packages fix insecure temporary files
  • From: Martin Schulze
• HKLM locking
  • From: Vladimir Kraljevic
• [ GLSA 200501-37 ] GraphicsMagick: PSD decoding heap overflow
  • From: Thierry Carrez
• [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities
  • From: Thierry Carrez
• Ingate Firewall: Removed PPTP tunnels not deactivated
  • From: Per Cederqvist
• DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid'
  • From: KF (Lists)
• UEBIMIAU <= 2.7.2 MULTIPLES VULNERABILITIES
  • From: Nash Leon
• NOVL-2005-10096251 GroupWise WebAccess Error modules loading (report)
  • From: Ed Reed
• [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities
  • From: chewkeong
• [Contact] Motorola broadband appliance team?
  • From: William A. Rowe, Jr.
• NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name
  • From: NSFOCUS Security Team
• Re: logwatch and logrotate might create a blind spot in reporting
  • From: The Tibetan Traveller
• [CLA-2005:923] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• Re: List of all admin accounts in phpBB
  • From: Aaron Klein
• Multiple Vulnerabilities in Pocket IE
  • From: kers0r
• MDKSA-2005:021 - Updated tetex packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2005:019 - Updated koffice packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2005:018 - Updated cups packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2005:016 - Updated gpdf packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 659-1] New libpam-radius-auth packages fix several vulnerabilities
  • From: Martin Schulze
• Black Hat new content on-line & Registration now open for Asia and Europe.
  • From: Jeff Moss
• iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• Re: [ GLSA 200501-36 ] AWStats: Remote code execution
  • From: Delian Krustev
• [SECURITY] [DSA 660-1] New kdebase packages fix authentication bypass
  • From: Martin Schulze
• UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : x.org possible local socket hijacking
  • From: please_reply_to_security
• Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Crafted IPv6 Packets Cause Reload
  • From: Cisco Systems Product Security Incident Response Team
• MDKSA-2005:017 - Updated xpdf packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• DMA[2005-0125a] - 'berlios gpsd format string vulnerability'
  • From: KF (Lists)
• OpenServer 5.0.6 OpenServer 5.0.7 : wu-ftp local users can bypass access restrictions
  • From: please_reply_to_security
• MDKSA-2005:020 - Updated kdegraphics packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• List of all admin accounts in phpBB
  • From: Predrag Damnjanovic
• MDKSA-2005:022 - Updated cups packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• OpenServer 5.0.6 OpenServer 5.0.7 : scosessoin local privilege elevation
  • From: please_reply_to_security
• wifi AP + broadcoast ping
  • From: Miroslav Kubik
• [ GLSA 200501-36 ] AWStats: Remote code execution
  • From: Luke Macken
• phpEventCalendar HTML injection
  • From: Madelman
• [SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file
  • From: Martin Schulze
• [CLA-2005:921] Conectiva Security Announcement - xpdf
  • From: Conectiva Updates
• [USN-70-1] Perl DBI module vulnerability
  • From: Martin Pitt
• Re: "Local" and "Remote" considered insufficient
  • From: Frank Knobbe
• Re: ADVISORY: security hole (http response splitting) in snitz forums 2000
  • From: Harold Lines
• Re: SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: Michael Hampton
• [ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities
  • From: Thierry Carrez
• [USN-69-1] Evolution vulnerability
  • From: Martin Pitt
• [USN-68-1] enscript vulnerabilities
  • From: Martin Pitt
• MDKSA-2005:014 - Updated squid packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2005:015 - Updated mailman packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• Vulnerabilities in eXponent 0.95
  • From: Ahmad Muammar
• [SECURITY] [DSA 655-1] New zhcon packages fix unauthorised file access
  • From: Martin Schulze
• [SECURITY] [DSA 656-1] New vdr packages fix insecure file access
  • From: Martin Schulze
• logwatch and logrotate might create a blind spot in reporting
  • From: Sami Pitko
• [SECURITY] [DSA 657-1] New xine-lib packages fix arbitrary code execution
  • From: Martin Schulze
• MDKSA-2005:013 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [ GLSA 200501-35 ] Evolution: Integer overflow in camel-lock-helper
  • From: Luke Macken
• iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• English-language version of K-OTik.COM launched today !
  • From: K-OTiK Security
• Multiple vulnerabilities in MercuryBoard 1.1.1
  • From: Alberto Trivero
• MDKSA-2005:012 - Updated zhcon packages fix vulnerability
  • From: Mandrake Linux Security Team
• Portcullis Security Advisory 05-002 Spectrum Cash Receipting System Weak Password Encryption
  • From: Paul J Docherty
• Local buffer-overflow in W32Dasm 8.93
  • From: Luigi Auriemma
• SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow
  • From: 3APA3A
• SUSE Security Announcement: Realplayer 8 (SUSE-SA:2005:004)
  • From: Marcus Meissner
• Re: Internet Explorer URL obfuscation.
  • From: Berend-Jan Wever
• [ GLSA 200501-32 ] KPdf, KOffice: Stack overflow in included Xpdf code
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200501-33 ] MySQL: Insecure temporary file creation
  • From: Luke Macken
• [KDE Security Advisory] kpdf Buffer Overflow Vulnerability
  • From: Dirk Mueller
• Re: Novell GroupWise WebAccess error modules loading
  • From: Jonathan Rockway
• Netscape Overflow.
  • From: Carlos Ulver
• Internet Explorer URL obfuscation.
  • From: Stewart, Graeme
• RealVNC Contact
  • From: DSGM
• Security Contact within RIM / Blackberry
  • From: Mark Litchfield
• Siteman User Database Line Insertion Vulnerability
  • From: shoalie sefid
• [ GLSA 200501-30 ] CUPS: Stack overflow in included Xpdf code
  • From: Thierry Carrez
• KDE Security Advisory: KOffice PDF Import Filter Vulnerability
  • From: Waldo Bastian
• [ GLSA 200501-28 ] Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2
  • From: Thierry Carrez
• KDE Security Advisory: Multiple vulnerabilities in Konversation
  • From: Waldo Bastian
• ASH Hashing Algorithm
  • From: seasonedpaper
• [SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow
  • From: Martin Schulze
• Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow
  • From: NGSSoftware Insight Security Research
• Arbitrary files overwriting through skins in DivX Player 2.6
  • From: Luigi Auriemma
• [ GLSA 200501-29 ] Mailman: Cross-site scripting vulnerability
  • From: Luke Macken
• Re: Various Buffer Overflows in Oracle 10g Tools
  • From: David Litchfield
• Call for DEFCON Capture the Flag Organizers.
  • From: The Dark Tangent
• PHRACK #63 CALL FOR PAPERS
  • From: rm
• Re: Advanced Guestbook
  • From: Stewart Souter
• (MS05-002) Cursor and Icon Format Handling Vulnerability (PoC for all affected systems)
  • From: houseofdabus HOD
• Mac OS X 10.3 iSync Privilege Escalation
  • From: Braden Thomas
• bug report comersus Back Office Lite 6.0 and 6.0.1
  • From: raf somers
• Various Buffer Overflows in Oracle 10g Tools
  • From: Joxean Koret
• SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2005:003)
  • From: Marcus Meissner
• [ GLSA 200501-27 ] Ethereal: Multiple vulnerabilities
  • From: Luke Macken
• iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability
  • From: iDefense Customer Service
• [SECURITY] [DSA 652-1] New unarj packages fix several vulnerabilities
  • From: Martin Schulze
• UnixWare 7.1.3 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities
  • From: please_reply_to_security
• Multiple vulnerabilities in Konversation
  • From: Wouter Coekaerts
• [USN-67-1] Squid vulnerabilities
  • From: Martin Pitt
• [USN-65-1] Apache utility script vulnerability
  • From: Martin Pitt
• [ GLSA 200501-26 ] ImageMagick: PSD decoding heap overflow
  • From: Sune Kloppenborg Jeppesen
• OpenServer 5.0.6 OpenServer 5.0.7 : bind remote attacker can poison the nameserver cache
  • From: please_reply_to_security
• God Admin Injection Vulnerability in Siteman 1.0.x
  • From: Pedram hayati
• [SECURITY] [DSA 649-1] New xtrlock packages fix authentication bypass
  • From: Martin Schulze
• STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure vulnerability
  • From: advisory
• STG Security Advisory: [SSA-20050120-24] GForge 3.x directory traversal vulnerability
  • From: advisory
• MDKSA-2005:010 - Updated playmidi packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2005:009 - Updated mpg123 packages fix vulnerability
  • From: Mandrake Linux Security Team
• [USN-64-1] xpdf, CUPS vulnerabilities
  • From: Martin Pitt
• Re: Darwin Kernel Vulnerability
  • From: neil
• Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications
  • From: Integrigy Security
• MDKSA-2005:011 - Updated xine packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [CLA-2005:920] Conectiva Security Announcement - libtiff3
  • From: Conectiva Updates
• [USN-66-1] PHP vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution
  • From: Martin Schulze
• [SECURITY] [DSA 651-1] New squid packages fix denial of service
  • From: Martin Schulze
• fkey[v0.0.2]: local/remote file accessibility exploit.
  • From: Vade 79
• Microsoft Internet Explorer HTML Help Control Vulnerability Still Exploitable After Patch
  • From: Valentin Avram
• [SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
  • From: Martin Schulze
• [SECURITY] [DSA 646-1] New ImageMagick packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations
  • From: Markus Kern
• [SECURITY] [DSA 645-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)
  • From: NGSSoftware Insight Security Research
• iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
  • From: Michael Sutton
• RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)
  • From: NGSSoftware Insight Security Research
• Darwin Kernel Vulnerability
  • From: nemo
• Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)
  • From: NGSSoftware Insight Security Research
• RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)
  • From: NGSSoftware Insight Security Research
• MSN Heartbeat Control Buffer Overflow
  • From: NGSSoftware Insight Security Research
• RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)
  • From: NGSSoftware Insight Security Research
• Cisco Security Advisory: Vulnerability in Cisco IOS Embedded Call Processing Solutions
  • From: Cisco Systems Product Security Incident Response Team
• Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations
  • From: Markus Kern
• iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow
  • From: customer service mailbox
• Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations
  • From: Berend-Jan Wever
• PeteFinnigan.com - Oracle security advisory
  • From: Pete Finnigan
• iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability
  • From: customer service mailbox
• Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability
  • From: Rafel Ivgi, The-Insider
• Unrestricted I/O access vulnerability in INCA Gameguard
  • From: Ryu Connor
• [USN-61-1] vim vulnerabilities
  • From: Martin Pitt
• Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations
  • From: Rafel Ivgi, The-Insider
• [USN-63-1] MySQL client vulnerability
  • From: Martin Pitt
• Netegrity SiteMinder smpwservicescgi.exe target specification
  • From: Marc Ruef
• [USN-62-1] imagemagick vulnerability
  • From: Martin Pitt
• Novell GroupWise WebAccess error modules loading
  • From: Marc Ruef
• UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : chroot A known exploit can break a chroot prison.
  • From: please_reply_to_security
• IE HHCTRL exploit still usable even after patch
  • From: Valentin Avram
• [SECURITY] [DSA 643-1] New queue packages fix buffer overflows
  • From: Martin Schulze
• [SECURITY] [DSA 644-1] New chbg packages fix arbitrary code execution
  • From: Martin Schulze
• Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i
  • From: NGSSoftware Insight Security Research
• Multiple Vulnerabilities in Netgear FVS318 Router
  • From: Paul Kurczaba
• Minis directory traversal vulnerability
  • From: Madelman
• [SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability
  • From: chewkeong
• phpGiftReq SQL Injection
  • From: Madelman
• MDKSA-2005:008 - Updated cups packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• SUSE Security Announcement: php4/mod_php4 (SUSE-SA:2005:002)
  • From: Ludwig Nussel
• [SECURITY] [DSA 642-1] New gallery packages fix several vulnerabilities
  • From: Martin Schulze
• [OpenPKG-SA-2005.003] OpenPKG Security Advisory (a2ps)
  • From: OpenPKG
• [SECURITY] [DSA 641-1] New playmidi packages fix local root exploit
  • From: Martin Schulze
• [OpenPKG-SA-2005.002] OpenPKG Security Advisory (sudo)
  • From: OpenPKG
• [SECURITY] [DSA 640-1] New gatos packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200501-25 ] Squid: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• exim dns_buld_reverse() proof-of-concept
  • From: Rafael San Miguel Carrasco
• Apple Airport WDS DoS
  • From: Dylan Griffiths
• RE: Various Vulnerabilities in SparkleBlog
  • From: Alan W. Rateliff, II
• XSS in the nested BB tag in many forum
  • From: pigrelax
• iDefense iTunes advisory.
  • From: nemo
• Various Vulnerabilities in SparkleBlog
  • From: Kovács László
• [USN-60-0] Linux kernel vulnerabilities
  • From: Martin Pitt
• Re: rssh and scponly arbitrary command execution
  • From: Derek Martin
• [SECURITY] [DSA 639-1] New mc packages fix several vulnerabilities
  • From: Martin Schulze
• iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability
  • From: customer service mailbox
• Re: Multiple Firewall Products Bypass Vulnerability
  • From: Ansgar -59cobalt- Wiechers
• new tool : the first remote PHP vulnerability scanner
  • From: bad boy
• Re: Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack
  • From: shadown
• MDKSA-2005:005 - Updated nfs-utils packages fix 64bit vulnerability
  • From: Mandrake Linux Security Team
• Re: Is DEP easily evadable?
  • From: Ben Pfaff
• Paper: How to exploit overflow vulnerability under Fedora Core 2
  • From: vangelis vangelis
• XSS Vulnerability in Siteman v1.1.9
  • From: Pedram hayati
• Re: Is DEP easily evadable?
  • From: John Richard Moser
• [CLA-2005:918] Conectiva Security Announcement - twiki
  • From: Conectiva Updates
• Internet Explorer valid JavaScript-file successfull load detection local file enumeration
  • From: Berend-Jan Wever
• iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability
  • From: customer service mailbox
• iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability
  • From: customer service mailbox
• STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities
  • From: advisory
• Server crash in Breed patch #1
  • From: Luigi Auriemma
• iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability
  • From: customer service mailbox
• Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack
  • From: Hammud_Saway
• MDKSA-2005:007 - Updated imlib packages fix vulnerability
  • From: Mandrake Linux Security Team
• SB2005002: pron to bypass APF checking uid(0) routine
  • From: x90c
• Re: Is DEP easily evadable?
  • From: Ben Pfaff
• MDKSA-2005:006 - Updated hylafax packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: Is DEP easily evadable?
  • From: John Richard Moser
• Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack
  • From: CIRT Advisory
• InternetExploiter 3.2
  • From: Berend-Jan Wever
• UPDATE: [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Is DEP easily evadable?
  • From: Florian Weimer
• IE issue with percent 20
  • From: RSnake
• TSLSA-2005-0001 - multi
  • From: Trustix Security Advisor
• Cross Site Scripting holes found in Horde 3.0
  • From: Hyperdose Security
• [CLA-2005:917] Conectiva Security Announcement - krb5
  • From: Conectiva Updates
• [SECURITY] [DSA 637-1] New exim-tls packages fix arbitrary code execution
  • From: Martin Schulze
• XSS Vulnerability in ForumKIT
  • From: tom cruise
• [CLA-2005:916] Conectiva Security Announcement - ethereal
  • From: Conectiva Updates
• [CLA-2005:915] Conectiva Security Announcement - php4
  • From: Conectiva Updates
• [SECURITY] [DSA 638-1] New gopher packages fix several vulnerabilities
  • From: Martin Schulze
• [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke
  • From: Janek Vind
• Windows ANI File Parsing Proof Of Concept (MS05-002)
  • From: assaf404
• Is DEP easily evadable?
  • From: John Richard Moser
• [ GLSA 200501-23 ] Exim: Two buffer overflows
  • From: Matthias Geerdsen
• [SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files
  • From: Martin Schulze
• Security Advisory: BiTBOARD xss
  • From: Martin Heistermann
• [SECURITY] [DSA 635-1] New exim packages fix arbitrary code execution
  • From: Martin Schulze
• Arkeia Possible remote root & information leakage
  • From: Maciej Bogucki
• Linux kernel i386 SMP page fault handler privilege escalation
  • From: Paul Starzetz
• Portcullis Security Advisory 05-008
  • From: Paul J Docherty
• WMV (Windows Media Player) trojan in wild
  • From: Marc Bejarano
• Squirrelmail vacation v0.15 local root exploit
  • From: LSS Security
• [USN-59-1] mailman vulnerabilities
  • From: Martin Pitt
• [ GLSA 200501-13 ] pdftohtml: Vulnerabilities in included Xpdf
  • From: Thierry Carrez
• Re: The Misuse of RC4 in Microsoft Word and Excel
  • From: Brendan Dolan-Gavitt
• [ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing
  • From: Thierry Carrez
• [NILESA-20050101]: Denial of Service vulnerability due to the mountd bug
  • From: Jonglim Yun
• Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability
  • From: Danny
• Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability
  • From: Darren Bounds
• Re: DSL- Router Teledat 530 DoS
  • From: Stefan S.
• Re: Firespoofing [Firefox 1.0]
  • From: Pavel Kankovsky
• IlohaMail Insecure Configuration Files
  • From: wang
• Fwd: APPLE-SA-2005-01-11 iTunes 4.7.1
  • From: David Ahmad
• [ GLSA 200501-20 ] o3read: Buffer overflow during file conversion
  • From: Thierry Carrez
• Security Contact for Nokia Mobile phone softwares
  • From: rohit
• Portcullis Security Advisory 05-009
  • From: Paul J Docherty
• [ GLSA 200501-21 ] HylaFAX: hfaxd unauthorized login vulnerability
  • From: Thierry Carrez
• [USN-58-1] MIT Kerberos server vulnerability
  • From: Martin Pitt
• [ GLSA 200501-11 ] Dillo: Format string vulnerability
  • From: Thierry Carrez
• Apache mod_auth_radius remote integer overflow
  • From: LSS Security
• Metasploit Framework v2.3
  • From: H D Moore
• Woltlab Burning Book addentry.php SQL Injection
  • From: Martin Heistermann
• Portcullis Security Advisory 05-004
  • From: Paul J Docherty
• [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl)
  • From: OpenPKG
• [SECURITY] [DSA 633-1] New bmv package fixes insecure temporary file creation
  • From: Martin Schulze
• Portcullis Security Advisory 05-003
  • From: Paul J Docherty
• Portcullis Security Advisory 05-006
  • From: Paul J Docherty
• Mod_dosevasive symlink and race vulnerability
  • From: LSS Security
• Portcullis Security Advisory 05-007
  • From: Paul J Docherty
• Portcullis Security Advisory 05-001
  • From: Paul J Docherty
• Portcullis Security Advisory 05-005
  • From: Paul J Docherty
• [ GLSA 200501-18 ] KDE FTP KIOslave: Command injection
  • From: Sune Kloppenborg Jeppesen
• Firespoofing [Firefox 1.0]
  • From: mikx
• Portcullis Security Advisory 05-010
  • From: Paul J Docherty
• [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation
  • From: Team SHATTER (Application Security, Inc.)
• VERITAS Backup Exec 8.x/9.x Remote Universal Exploit
  • From: class 101
• [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow
  • From: Team SHATTER (Application Security, Inc.)
• EEYE: Windows ANI File Parsing Buffer Overflow
  • From: Derek Soeder
• applicable exploit for winxp-sp2-uptodate Internet Explorer
  • From: Liu Die Yu
• HylaFAX hfaxd unauthorized login vulnerability
  • From: Lee Howard
• The Misuse of RC4 in Microsoft Word and Excel
  • From: Hongjun Wu
• Multi-vendor AV gateway image inspection bypass vulnerability
  • From: Darren Bounds
• UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG)
  • From: Liu Die Yu
• [SECURITY] [DSA 634-1] New hylafax packages fix unauthorised access
  • From: Martin Schulze
• [ GLSA 200501-16 ] Konqueror: Java sandbox vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200501-17 ] KPdf, KOffice: More vulnerabilities in included Xpdf
  • From: Sune Kloppenborg Jeppesen
• SQL Injection Vulnerability in Invision Community Blog
  • From: darkhawk matrix
• [SECURITY] [DSA 631-1] New kdlibs packages fix arbitrary FTP command execution
  • From: Martin Schulze
• [SECURITY] [DSA 632-1] New linpopup packages fix arbitrary code execution
  • From: Martin Schulze
• SUSE Security Announcement: libtiff/tiff (SUSE-SA:2005:001)
  • From: Thomas Biege
• [SECURITY] [DSA 630-1] New lintian packages fix insecure temporary directory
  • From: Martin Schulze
• [ GLSA 200501-12 ] TikiWiki: Arbitrary command execution
  • From: Matthias Geerdsen
• Security Advisory: Woltlab Burning Board Lite formmail.php XSS
  • From: Martin Heistermann
• iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability
  • From: customer service mailbox
• Troj/Winser-A malware analysis
  • From: Steve Friedl
• iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability
  • From: customer service mailbox
• Linux kernel uselib() privilege elevation, corrected
  • From: Paul Starzetz
• [SECURITY] [DSA 629-1] New kerberos packages fix arbitrary code execution
  • From: Martin Schulze
• Simple PHP Blog directory traversal vulnerability
  • From: Madelman
• Mozilla XBM Image Vulnerability
  • From: Luca Ercoli
• Linux kernel sys_uselib local root vulnerability
  • From: Paul Starzetz
• grsecurity 2.1.0 release / 5 Linux kernel advisories
  • From: Brad Spengler
• grsecurity 2.1.0 release / 5 Linux kernel advisories
  • From: Brad Spengler
• Santy and SSL
  • From: Ofer Shezaf
• WinAc AND WinHKI ZIP File Directory Transversal
  • From: Rafel Ivgi, The-Insider
• [ GLSA 200501-10 ] Vilistextum: Buffer overflow vulnerability
  • From: Thierry Carrez
• [ GLSA 200501-09 ] xzgv: Multiple overflows
  • From: Thierry Carrez
• [ GLSA 200501-08 ] phpGroupWare: Various vulnerabilities
  • From: Luke Macken
• MDKSA-2005:004 - Updated nasm packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2005:003 - Updated vim packages fix modeline vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2005:002 - Updated wxGTK2 packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2005:001 - Updated libtiff packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• re: All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow
  • From: Sym Security
• [CLA-2005:913] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [ GLSA 200501-07 ] xine-lib: Multiple overflows
  • From: Thierry Carrez
• [USN-55-1] imlib2 vulnerabilities
  • From: Martin Pitt
• [USN-54-1] TIFF library tool vulnerability
  • From: Martin Pitt
• Socket unreacheable in Amp II engine
  • From: Luigi Auriemma
• RE: All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow
  • From: Polazzo Justin
• [SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 626-1] New tiff packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 627-1] New namazu2 packages fix cross-site scripting vulnerability
  • From: Martin Schulze
• RE: Paper: SQL Injection Attacks by Example
  • From: Sergey Chernyshev
• All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow
  • From: Rafel Ivgi, The-Insider
• RE: Paper: SQL Injection Attacks by Example
  • From: Scovetta, Michael V
• [ GLSA 200501-06 ] tiff: New overflows in image decoding
  • From: Thierry Carrez
• [ GLSA 200501-05 ] mit-krb5: Heap overflow in libkadm5srv
  • From: Sune Kloppenborg Jeppesen
• RE: Paper: SQL Injection Attacks by Example
  • From: Michael Silk
• RE: Paper: SQL Injection Attacks by Example
  • From: David Litchfield
• Re: Paper: SQL Injection Attacks by Example
  • From: Cory Foy
• Re: Paper: SQL Injection Attacks by Example
  • From: Chip Andrews
• RE: Paper: SQL Injection Attacks by Example
  • From: Scovetta, Michael V
• IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I)
  • From: NGSSoftware Insight Security Research
• IBM DB2 XML functions overflows (#NISR05012005H)
  • From: NGSSoftware Insight Security Research
• RE: Paper: SQL Injection Attacks by Example
  • From: David Litchfield
• IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G)
  • From: NGSSoftware Insight Security Research
• IBM DB2 Windows Permission Problems (#NISR05012005F)
  • From: NGSSoftware Insight Security Research
• IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E)
  • From: NGSSoftware Insight Security Research
• IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D)
  • From: NGSSoftware Insight Security Research
• IBM DB2 call buffer overflow (#NISR05012005C)
  • From: NGSSoftware Insight Security Research
• IBM DB2 libdb2.so buffer overflow (#NISR05012005B)
  • From: NGSSoftware Insight Security Research
• Paper: SQL Injection Attacks by Example
  • From: Steve Friedl
• IBM DB2 db2fmp buffer overflow (#NISR05012005A)
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 625-1] New pcal packages fix arbitrary code execution
  • From: Martin Schulze
• DMA[2005-0103a] - 'William LeFebvre "top" format string vulnerability'
  • From: KF (Lists)
• [ GLSA 200501-03 ] Mozilla, Firefox, Thunderbird: Various vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200501-02 ] a2ps: Insecure temporary files handling
  • From: Thierry Carrez
• [ GLSA 200501-01 ] LinPopUp: Buffer overflow in message reply
  • From: Thierry Carrez
• [ GLSA 200501-04 ] Shoutcast Server: Remote code execution
  • From: Luke Macken
• [CLA-2005:910] Conectiva Security Announcement - mplayer
  • From: Conectiva Updates
• [SECURITY] [DSA 624-1] New zip packages fix arbitrary code execution
  • From: Martin Schulze
• QWikiwiki directory traversal vulnerability
  • From: Madelman
• Socket termination, format string and XSS in Soldner Secret Wars 30830
  • From: Luigi Auriemma
• MyBB SQL Injection
  • From: scottm
• [KDE Security Advisory] ftp kioslave command injection
  • From: Dirk Mueller
• Multiple PhotoPost Pro Vulnerabilities
  • From: GulfTech Security
• Serious Vulnerabilities In PhotoPost ReviewPost
  • From: GulfTech Security
• [SECURITY] [DSA 623-1] New nasm packages fix arbitrary code execution
  • From: Martin Schulze
• 3Com 3CDaemon Multiple Vulnerabilities
  • From: Sowhat .
• Multiple Firewall Products Bypass Vulnerability
  • From: Ferruh Mavituna
• Multiple Vulnerabilities in FlatNuke
  • From: Pierquinto Manco
• STG Security Advisory: [SSA-20041224-21] File extensions restriction bypass vulnerability in GNUBoard
  • From: advisory
• Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser
  • From: Peter Kruse
• [SECURITY] [DSA 622-1] New htmlheadline package fixes insecure temporary files
  • From: Martin Schulze
• Two Vulnerabilities in ViewCVS
  • From: Joxean Koret
• Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM
  • From: Joxean Koret
• Various Vulnerabilities in OWL Intranet Engine
  • From: Joxean Koret
• 7a69Adv#17 - Internet Explorer FTP download path disclosure
  • From: Albert Puigsech Galicia
• Windows LoadImage API Heapoverflow exploit
  • From: Berend-Jan Wever
• Windows Media files allow opening any url in Internet Explorer
  • From: Berend-Jan Wever
• Jacks FormMail.php remote file access vulnerability
  • From: Hack Hawk
• Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC
  • From: Steve Friedl
• WHM AutoPilot Security Release [ Plus Upgrade Instructions ]
  • From: GulfTech Security
• Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge)
  • From: beniwiedmer
• [SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC
  • From: Alberto Garcia Hierro
• Bluetooth: BlueSnarf and BlueBug Full Disclusore
  • From: Adam Laurie
• [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC
  • From: houseofdabus HOD
• ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks
  • From: steven
• SQL Injection Vulnerability In IBProArcade
  • From: mike bailey
• MDKSA-2004:166 - Updated tetex packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: Sanity Worm Concepts
  • From: Paul Laudanski
• Re: Multiple Vulnerabilities in Moodle
  • From: Martin Dougiamas
• MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• Re: Strange Java Loader (not so strange - Trojan.ByteVerify)
  • From: K-OTiK Security
• Strange Java Loader
  • From: duffbeer
• MDKSA-2004:165 - Updated koffice packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:163 - Updated kdegraphics packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:159 - Updated glibc packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:164 - Updated cups packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 619-1] New xpdf packages fix arbitrary code execution
  • From: Martin Schulze
• NetCat V 1.11 Multiple Bugs
  • From: CorryL
• KorWeblog php injection Vulnerability
  • From: Min-sung Choi
• MDKSA-2004:161 - Updated xpdf packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:160 - Updated kdelibs packages fix konqueror email vulnerability
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200412-24 ] Xpdf, GPdf: New integer overflows
  • From: Thierry Carrez
• Heap overflow in Mozilla Browser <= 1.7.3 NNTP code.
  • From: Maurycy Prodeus
• [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities
  • From: Thierry Carrez
• php-Calendar File Include Vulnerability [ Command Exec ]
  • From: GulfTech Security
• [CLA-2004:909] Conectiva Security Announcement - netpbm
  • From: Conectiva Updates
• Re: Did a 16-bit counter overflow shut down Comair?
  • From: Avleen Vig
• Re: Did a 16-bit counter overflow shut down Comair?
  • From: Mike Nice
• Sanity Worm Concepts
  • From: Andy Fewtrell
• QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004]
  • From: Julio Cesar Fort
• Re: Microsoft Windows LoadImage API IntegerBuffer overflow
  • From: Berend-Jan Wever
• KDE Security Advisory: kpdf Buffer Overflow Vulnerability
  • From: Dirk Mueller
• Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included
  • From: Chris Wysopal
• XSA-2004-7: stack overflow in AIFF demultiplexer
  • From: Michael Roitzsch
• Netcat v1.11 For Windows , New fixed version
  • From: Hat-Squad Security Team
• Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability
  • From: Marcus Meissner
• [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included
  • From: Hat-Squad Security Team
• Multiple WHM Autopilot Vulnerabilities
  • From: GulfTech Security
• Remote code execution with parameters withoutu ser interaction, even with XP SP2
  • From: ShredderSub7 SecExpert
• Did a 16-bit counter overflow shut down Comair?
  • From: Richard M. Smith
• possible error in latest NGS realplayer advisory
  • From: Marc Bejarano
• MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities
  • From: Mandrake Linux Security Team
• Multiple Vulnerabilities in Moodle
  • From: Bartek Nowotarski
• Microsoft Internet Explorer SP2 Fully Automated Remote Compromise
  • From: Paul
• New Winhlp32.exe vuln
  • From: bad_son
• Re: Microsoft Windows LoadImage API Integer Buffer overflow
  • From: Brett Glass
• Re: New Santy-Worm attacks *all* PHP-skripts ( Santy.c ? )
  • From: K-OTiK Security
• New Santy-Worm attacks *all* PHP-skripts
  • From: Juergen Schmidt
• RE: phpBB Worm
  • From: Chris Ess
• PHPBB worm in action
  • From: Colin Keith
• CleanCache v2.19: False Sense of Security
  • From: WBG Links
• new phpBB worm affects 2.0.11
  • From: Herman Sheremetyev
• Re: phpBB Worm
  • From: Zeljko Brajdic
• Re: phpBB Worm
  • From: Raymond Dijkxhoorn
• Final Call for Papers & Workshops - BCS Asia 2005
  • From: Anthony.zboralski
• [SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
  • From: Martin Schulze
• XSS in yacy 0.31
  • From: Donato Ferrante
• Re: phpBB Worm
  • From: steve
• Re: Inexcusable weakness in Kmail / GnuPG
  • From: Simple Nomad
• STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard
  • From: advisory
• Re: [USN-52-1] vim vulnerability
  • From: Liu Die Yu
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: David Wagner
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Crispin Cowan
• [SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution
  • From: Martin Schulze
• raptor's xmas pack 2004
  • From: Marco Ivaldi
• Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@xxxxxxxxxx>
  • From: Martin Mewes
• Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS
  • From: Valdis . Kletnieks
• Re: possible local exploit via sendmail with procmail on solaris
  • From: Jeff Damens
• [Security Bulletin] SSRT4696 rev.0 - HP Tru64 UNIX TCP Stack Remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• [USN-50-1] CUPS vulnerabilities
  • From: Martin Pitt
• Re: phpBB Worm
  • From: Anders Henke
• [Security Bulletin] SSRT4883 rev.3 HP-UX ftp and ftpd remote unauthorized access
  • From: Boren, Rich (SSRT)
• Re: Security Advisory for ALL forum services with client-set images
  • From: Tim Jackson
• Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
  • From: flashsky fangxing
• WPkontakt message parsing error
  • From: Jaroslaw Sajko
• [Security Bulletin] SSRT4876 rev.0 HP Tru64 UNIX SWS (Apache) Secure Web Server Remote
  • From: Boren, Rich (SSRT)
• Microsoft Windows winhlp32.exe Heap Overflow Vulnerability
  • From: flashsky fangxing
• [Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow
  • From: Boren, Rich (SSRT)
• [ Security Bulletin ] SSRT4699 rev.0 HP-UX SAM local privilege increase
  • From: Boren, Rich (SSRT)
• RE: phpBB Worm
  • From: Ofer Shezaf
• [USN-52-1] vim vulnerability
  • From: Martin Pitt
• [USN-51-1] teTeX auxiliary script vulnerability
  • From: Martin Pitt
• [USN-49-1] debmake vulnerability
  • From: Martin Pitt
• [USN-48-1] xpdf, tetex-bin vulnerabilities
  • From: Martin Pitt
• RE: Crystal FTP Pro 2.8 PoC
  • From: cybertronic
• RE: Local versus remote security holes
  • From: David Brodbeck
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Crispin Cowan
• Re: [webmin-l] Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@xxxxxxxxxx>
  • From: Jamie Cameron
• Re: phpBB Worm
  • From: William Geoghegan
• Inexcusable weakness in Kmail / GnuPG
  • From: Thomas C. Greene
• RE: DJB's students release 44 *nix software vulnerability advisories
  • From: Palmer, Paul (ISSAtlanta)
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Crispin Cowan
• Re: Security Advisory for ALL forum services with client-set images
  • From: Stefan Paletta
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: D. J. Bernstein
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Michal Zalewski
• Re: Linux kernel scm_send local DoS
  • From: Pavel Kankovsky
• [USN-47-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Re: stick with "anonymous" or "authenticated" when describing
  • From: Steven M. Christey
• Re: phpBB Worm
  • From: Anders Henke
• Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier
  • From: GulfTech Security
• Crystal FTP Pro 2.8 PoC
  • From: cybertronic
• Re: phpBB Worm
  • From: Alvin Packard
• SHOUTcast remote format string vulnerability
  • From: Damian Put
• Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability
  • From: Moritz Muehlenhoff
• Microsoft Windows LoadImage API Integer Buffer overflow
  • From: flashsky fangxing
• Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability
  • From: flashsky fangxing
• [SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J)
  • From: NGSSoftware Insight Security Research
• [OpenPKG-SA-2004.055] OpenPKG Security Advisory (gettext)
  • From: OpenPKG
• Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H)
  • From: NGSSoftware Insight Security Research
• Oracle wrapped procedure overflow (#NISR2122004J)
  • From: NGSSoftware Insight Security Research
• Oracle TNS Listener DoS (#NISR2122004F)
  • From: NGSSoftware Insight Security Research
• IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L)
  • From: NGSSoftware Insight Security Research
• Oracle extproc local command execution (#NISR23122004C)
  • From: NGSSoftware Insight Security Research
• Oracle extproc directory traversal (#NISR23122004B)
  • From: NGSSoftware Insight Security Research
• Oracle clear text passwords (#NISR2122004D)
  • From: NGSSoftware Insight Security Research
• Oracle extproc buffer overflow (#NISR23122004A)
  • From: NGSSoftware Insight Security Research
• Oracle Character Conversion Bugs (#NISR2122004G)
  • From: NGSSoftware Insight Security Research
• Oracle ISQLPlus file access vulnerability (#NISR2122004E)
  • From: NGSSoftware Insight Security Research
• Oracle Trigger Abuse (#NISR2122004I)
  • From: NGSSoftware Insight Security Research
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: sean
• Re: WebWorm using PHPBB vulnerability in the wild!
  • From: Nick Johnson
• SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2004:046)
  • From: Marcus Meissner
• 2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability
  • From: zib zib
• Security Advisory for ALL forum services with client-set images
  • From: James Bandara
• Local versus remote security holes
  • From: D. J. Bernstein
• MDKSA-2004:157 - Updated mplayer packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Jack Lloyd
• MDKSA-2004:155 - Updated logcheck packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@xxxxxxxxxx>
  • From: amit sides
• possible local exploit via sendmail with procmail on solaris
  • From: Michael Barnes
• stick with "anonymous" or "authenticated" when describing attacks
  • From: Jonathan G. Lampe
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Crispin Cowan
• RE: DJB's students release 44 *nix software vulnerability advisories
  • From: Manning, Robert (Mission Systems)
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Casper . Dik
• [ GLSA 200412-23 ] Zwiki: XSS vulnerability
  • From: Luke Macken
• Realone2.0 "pnxr3260.dll" Lets Remote Users IE Browser Crash
  • From: Wei Li
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Steven M. Christey
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: David Eisner
• PHP v4.3.x exploit for Windows.
  • From: The Warlock
• Permission problem in Skype BETA for linux
  • From: Peter Conrad
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Steven M. Christey
• Re: Local versus remote security holes
  • From: Adam Shostack
• Re: phpBB Worm
  • From: ycw1bh302
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Valdis . Kletnieks
• MDKSA-2004:156 - Updated krb5 packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability
  • From: Marc Schoenefeld
• malware effecting broadband users in Israel
  • From: Gadi Evron
• Re: phpBB Worm
  • From: Alexander Klimov
• Re: phpBB Worm
  • From: Sebastian Wiesinger
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Jonathan Rockway
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Chris Paget
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Jonathan Rockway
• Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability
  • From: Dmitry V. Levin
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: D. J. Bernstein
• Sybase ASE 12.5.2 vulnerabilities
  • From: NGSSoftware Insight Security Research
• MDKSA-2004:154 - Updated kdelibs packages fix multiple vulnerability
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories
  • From: Martin Schulze
• SUSE Security Announcement: samba (SUSE-SA:2004:045)
  • From: Sebastian Krahmer
• Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer.
  • From: Berend-Jan Wever
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Raymond M. Reskusich
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: laffer1
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Stephen Harris
• [SECURITY] [DSA 613-1] New ethereal packages fix denial of service
  • From: Martin Schulze
• Re: AIX 5.1/5.2/5.3 local root exploits (paginit issue)
  • From: Shiva Persaud
• RE: phpBB Worm
  • From: Paul Kurczaba
• WebWorm using PHPBB vulnerability in the wild!
  • From: Niki Denev
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: David F. Skoll
• Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer.
  • From: Berend-Jan Wever
• RE: DJB's students release 44 *nix software vulnerability advisories
  • From: Devin Ganger
• Re: Wordpress 1.2.2 is still vulnerable
  • From: Thomas Waldegger
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Stephen Samuel
• iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability
  • From: customer service mailbox
• iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability
  • From: customer service mailbox
• iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability
  • From: customer service mailbox
• SUSE Security Announcement: various kernel problems (SUSE-SA:2004:044)
  • From: Marcus Meissner
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability
  • From: customer service mailbox
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability
  • From: customer service mailbox
• Re: phpBB Worm
  • From: Raymond Dijkxhoorn
• iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability
  • From: customer service mailbox
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Thor
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Antoine Martin
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Dave Holland
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: milw0rm Inc.
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Artem Chuprina
• phpBB Worm
  • From: Shannon Lee
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Jonathan T Rockway
• Xprobe 0.2.1 Released
  • From: bugtraq
• Re: AIX 5.1/5.2/5.3 local root exploits (diag issue)
  • From: Shiva Persaud
• [SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution
  • From: Martin Schulze
• TSLSA-2004-0069 - kerberos5
  • From: Trustix Security Advisor
• MITKRB5-SA-2004-004: heap overflow in libkadm5srv
  • From: Tom Yu
• Re: [Full-Disclosure] Re: Gadu-Gadu, another two bugs
  • From: Maciej Soltysiak
• [USN-43-1] groff utility vulnerabilities
  • From: Martin Pitt
• Updated: TSLSA-2004-0068 - kernel
  • From: Trustix Security Advisor
• [SECURITY] [DSA 612-1] New a2ps packages fix arbitrary command execution
  • From: Martin Schulze
• MDKSA-2004:152 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:153 - Updated aspell packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Marcin Owsiany
• Gadu-Gadu Remote DoS (all versions)
  • From: Maciej Soltysiak
• Re: Gadu-Gadu, another two bugs
  • From: Przemyslaw Frasunek
• [Full-Disclosure] [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200412-21 ] MPlayer: Multiple overflows
  • From: Thierry Carrez
• [USN-42-1] Xine library vulnerabilities
  • From: Martin Pitt
• [ GLSA 200412-20 ] NASM: Buffer overflow vulnerability
  • From: Luke Macken
• [ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability
  • From: Luke Macken
• Crystal FTP Pro Client Buffer Overflow
  • From: Luca Ercoli
• [ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library
  • From: Sune Kloppenborg Jeppesen
• Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated)
  • From: Paul
• UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities
  • From: Luke Macken
• [ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Exploit for Ultrix 4.5 dxterm
  • From: Kristoffer Brånemyr
• TSLSA-2004-0066 - multi
  • From: Trustix Security Advisor
• Re: Internet Explorer Code Execution Bypass Vulnerability
  • From: cmthemc
• KDE Security Advisory: Konqueror Java Vulnerability
  • From: Waldo Bastian
• Windows Explorer TGA Crash
  • From: Bill
• [ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Security Bulletin SSRT4687 rev.0 HP-UX newgrp(1) local privilege elevation
  • From: Boren, Rich (SSRT)
• TSLSA-2004-0068 - kernel
  • From: Trustix Security Advisor
• PHP shmop.c module permits write of arbitrary memory.
  • From: Stefano Di Paola