Bugtraq

• Thread Index

• [SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200412-14 ] PHP: Multiple vulnerabilities
  • From: Thierry Carrez
• AIX 5.1/5.2/5.3 local root exploits
  • From: cees-bart
• [USN-41-1] Samba vulnerability
  • From: Martin Pitt
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Julian T J Midgley
• Re: Patch available for multiple critical flaws in Oracle
  • From: Marc Bejarano
• MDKSA-2004:151 - Updated php packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MS Windows Media Player 9 Vulns (2)
  • From: Arman Nayyeri
• Multiple Vulnerabilities In Kayako eSupport v2.x
  • From: GulfTech Security
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: D. J. Bernstein
• [ GLSA 200412-13 ] Samba: Integer overflow
  • From: Sune Kloppenborg Jeppesen
• Re: *nix data wipe tools
  • From: George Georgalis
• Bug in Crypt::ECB perl module
  • From: Bennett R. Samowich
• [SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation
  • From: Martin Schulze
• Internet Explorer Code Execution Bypass Vulnerability
  • From: aikon none
• Re: *nix data wipe tools
  • From: Casper . Dik
• [OpenPKG-SA-2004.056] OpenPKG Security Advisory (cvstrac)
  • From: OpenPKG
• 4 Vulnerabilities in GamePort
  • From: amoXi Devilkin
• NetBSD kernel local vulnerabilities
  • From: Evgeny Demidov
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: security curmudgeon
• Re: iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability
  • From: Hideki Yamane
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: cees-bart
• phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit
  • From: bad boy
• Re: *nix data wipe tools
  • From: Thomas C. Greene
• 4 Vulnerabilities in GamePort
  • From: amoXi Devilkin
• Re: *nix data wipe tools
  • From: Wietse Venema
• [ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability
  • From: Luke Macken
• NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code
  • From: NetBSD Security-Officer
• Gadu-Gadu, another two bugs
  • From: Jaroslaw Sajko
• [OpenPKG-SA-2004.054] OpenPKG Security Advisory (samba)
  • From: OpenPKG
• RE: Linux kernel IGMP vulnerabilities
  • From: Jirka Kosina
• Re: DJB's students release 44 *nix software vulnerability advisories
  • From: Crispin Cowan
• Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel
  • From: Katrina Tsipenyuk
• [ GLSA 200412-11 ] Cscope: Insecure creation of temporary files
  • From: Luke Macken
• RE: STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard
  • From: Richard Stanway
• Re: *nix data wipe tools
  • From: David Cannings
• [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities
  • From: chewkeong
• [OpenPKG-SA-2004.053] OpenPKG Security Advisory (php)
  • From: OpenPKG
• Discussion: Microsoft(R) PowerPoint Action Settings feature allows invocation of default browser pointed at arbitrary URL.
  • From: Monte Ratzlaff
• Hotmail Cross-Site Scripting Vulnerability #1
  • From: Rafel Ivgi, The-Insider
• Hotmail Cross-Site Scripting Vulnerability #2
  • From: Rafel Ivgi, The-Insider
• iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability
  • From: iDEFENSE Security Advisory
• Yahoo! Mail Cross-Site Scripting Vulnerability
  • From: Rafel Ivgi, The-Insider
• iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability
  • From: iDEFENSE Security Advisory
• [USN-40-1] PHP vulnerabilities
  • From: Martin Pitt
• [USN-39-1] Linux amd64 kernel vulnerability
  • From: Martin Pitt
• iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability
  • From: iDEFENSE Security Advisory
• iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability
  • From: iDEFENSE Security Advisory
• iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability
  • From: iDEFENSE Security Advisory
• Re: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines
  • From: Alexey I. Froloff
• PHP Input Validation Vulnerabilities
  • From: Daniel Fabian
• DJB's students release 44 *nix software vulnerability advisories
  • From: Thor Larholm
• [MaxPatrol] SQL-injection in Ikonboard 3.1.x
  • From: Alexander Anisimov
• Multiple XSS Vulnerabilities in Wordpress 1.2.1
  • From: Thomas Waldegger
• iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability
  • From: customer service mailbox
• STG Security Advisory: [SSA-20041215-19] Vulnerability of uploading files with multiple extensions in MediaWiki
  • From: advisory
• STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment Mod
  • From: advisory
• STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard
  • From: advisory
• [SAMBA] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9
  • From: Gerald Carter
• Re: php unserialize
  • From: Stefan Esser
• Re: Linux kernel IGMP vulnerabilities
  • From: matthew-bugtraq
• RE: CSS in phpBB 1.4.4
  • From: Paul Owen
• MDKSA-2004:150 - Updated kdelibs and kdebase packages fix vulnerability
  • From: Mandrake Linux Security Team
• Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords
  • From: Cisco Systems Product Security Incident Response Team
• Re: Linux kernel scm_send local DoS
  • From: gadgeteer
• php unserialize
  • From: Martin Eiszner
• Re: Linux kernel IGMP vulnerabilities
  • From: stephen joseph butler
• Re: Linux kernel scm_send local DoS
  • From: even multiplexed
• Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector
  • From: Cisco Systems Product Security Incident Response Team
• CSS in phpBB 1.4.4
  • From: SandI]
• STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki
  • From: advisory
• iwebnegar is vulnerable to all kind of sql injections
  • From: shervin khaleghjou
• Re: Linux kernel IGMP vulnerabilities
  • From: Paul Starzetz
• Advisory 01/2004: Multiple vulnerabilities in PHP 4/5
  • From: Stefan Esser
• Re: RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability
  • From: Hongzhen Zhou
• [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines
  • From: Thierry Carrez
• Security Advisory for CVS Slash
  • From: Jamie McCarthy
• STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability
  • From: advisory
• [OpenPKG-SA-2004.052] OpenPKG Security Advisory (vim)
  • From: OpenPKG
• MSIE DHTML Edit Control Cross Site Scripting Vulnerability
  • From: Paul
• Re: Linux kernel scm_send local DoS
  • From: Paul Starzetz
• 3cdaemon tftp server DOS vulnerability
  • From: Wang Ning
• Re: Linux kernel scm_send local DoS
  • From: even multiplexed
• [ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap
  • From: Thierry Carrez
• Re: rpcl_icmpdos.c
  • From: x90c
• *nix data wipe tools
  • From: Thomas C. Greene
• Yahoo! Mail Cross-Site Scripting Vulnerability
  • From: Rafel Ivgi
• Hotmail Cross Site Scripting Vulnerability #2
  • From: Rafel Ivgi
• HyperTerminal - Buffer Overflow In .ht File
  • From: Brett Moore
• Hotmail Cross-Site Scripting Vulnerability #1
  • From: Rafel Ivgi
• Asante FM2008 10/100 Ethernet switch backdoor login
  • From: Joe Philipps
• Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]
  • From: GulfTech Security
• iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability
  • From: customer service mailbox
• [USN-38-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• ASP-rider is vulnerable to sql injection attack
  • From: shervin khaleghjou
• [Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory
  • From: Secure Network Operations, Inc.
• Re: Linux kernel IGMP vulnerabilities
  • From: Pekka Savola
• Re: NetWare Screensaver Authentication Bypass From The Local Console
  • From: Brad Bendily
• iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability
  • From: customer service mailbox
• [ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities
  • From: Luke Macken
• [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software
  • From: Secure Computer Group
• MDKSA-2004:149 - Updated postgresql packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 608-1] New zgv packages fix arbitrary code execution
  • From: Martin Schulze
• Possible local root vulnerability in Roxio Toast on Mac OS X
  • From: fintler
• STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability
  • From: advisory
• RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability
  • From: Hongzhen Zhou
• Re: Citadel/UX <= v6.27 Remote Format String Vulnerability
  • From: Michael Hampton
• [CAN-2004-1022] Insecure Credential Storage on Kerio Software
  • From: Secure Computer Group
• ASP Calendar Vulnerability <www.ashiyane.com>
  • From: ali reza AcTiOnSpIdEr
• [SECURITY] [DSA 609-1] New atari800 packages fix local root exploit
  • From: Martin Schulze
• MDKSA-2004:148 - Updated iproute2 packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• iDEFENSE Security Advisory 12.14.04 - Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability
  • From: customer service mailbox
• [ZH2004-18SA] Content-Type spoofing in Mozilla Firefox and Opera could allow users to bypass security restrictions
  • From: Giovanni Delvecchio
• phpBB Attachment Mod Directory Traversal HTTP POST Injection
  • From: Paul Laudanski
• Re: [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS
  • From: Dan Margolis
• Linux kernel scm_send local DoS
  • From: Paul Starzetz
• Re: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory
  • From: secure
• Linux kernel IGMP vulnerabilities
  • From: Paul Starzetz
• What's "may have exploitable buffer overflows" mean in tcpdump?
  • From: Dragos Ruiu
• [ GLSA 200412-06 ] PHProjekt: setup.php vulnerability
  • From: Thierry Carrez
• Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory
  • From: Secure Network Operations, Inc.
• NetWare Screensaver Authentication Bypass From The Local Console
  • From: Adam Gray
• [ GLSA 200412-07 ] file: Arbitrary code execution
  • From: Matthias Geerdsen
• RE: zone transfers, a spammer's dream?
  • From: Marcin Pacyna
• Socket unreacheable in the Lithtech engine (new protocol)
  • From: Luigi Auriemma
• Winamp 5.07 (latest version) Remote Crash + other stupid shizle
  • From: b0f www.b0f.net
• [ZH2004-19SA] Possible execution of remote shell commands in Opera with kfmclien
  • From: Giovanni Delvecchio
• iDEFENSE Security Advisory 12.13.04 - Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability
  • From: customer service mailbox
• KDE Security Advisory: Konqueror Window Injection Vulnerability
  • From: Waldo Bastian
• SugarSales Multiple Vulnerabilities
  • From: Daniel Fabian
• MS IE User's Authentication Details (userid/password) Sharing Issue
  • From: Debasis Mohanty
• Gadu-Gadu several vulnerabilities
  • From: Jaroslaw Sajko
• Multiple vulnerabilities in phpMyAdmin
  • From: Nicolas Gregoire
• Re: MD5 To Be Considered Harmful Someday
  • From: Solar Designer
• Citadel/UX <= v6.27 Remote Format String Vulnerability
  • From: CoKi
• Local off-by-one in mtr versions 0.55 to 0.65
  • From: venglin
• HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut !
  • From: http-equiv@xxxxxxxxxx
• [SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities
  • From: Martin Schulze
• In-game buffer-overflow in the Gamespy cd-key validation SDK
  • From: Luigi Auriemma
• wget: Arbitrary file overwriting/appending/creating and other vulnerabilities
  • From: Jan Minar
• CodeCon CFP deadline nearing
  • From: Len Sassaman
• Re: Multiple Vulnerabilities in paFileDB 3.1
  • From: Rafael San Miguel Carrasco
• F-Secure Policy Manager - physical path disclosure
  • From: oliver
• Re: MD5 To Be Considered Harmful Someday
  • From: Pavel Kankovsky
• Re: MD5 To Be Considered Harmful Someday
  • From: Adam Shostack
• KDE Security Advisory: kfax libtiff vulnerabilities
  • From: Dirk Mueller
• KDE Security Advisory: plain text password exposure
  • From: Dirk Mueller
• TSLSA-2004-0064 - nfs-utils
  • From: Trustix Security Advisor
• Re: MD5 To Be Considered Harmful Today
  • From: Dan Kaminsky
• Re: MD5 To Be Considered Harmful Today
  • From: Pavel Machek
• Re: MD5 To Be Considered Harmful Today
  • From: Dan Kaminsky
• Re: MD5 To Be Considered Harmful Someday
  • From: Jack Lloyd
• Re: MD5 To Be Considered Harmful Someday
  • From: David F. Skoll
• Re: IE6 Vulnerability - Local File Detection
  • From: RSnake
• Re: MD5 To Be Considered Harmful Someday
  • From: Steve Friedl
• Re: MD5 To Be Considered Harmful Someday
  • From: Dan Kaminsky
• Re: MD5 To Be Considered Harmful Someday
  • From: Paul Wouters
• Re: MD5 To Be Considered Harmful Someday
  • From: Solar Designer
• Re: MD5 To Be Considered Harmful Someday
  • From: Paul Wouters
• Re: MD5 To Be Considered Harmful Someday
  • From: George Georgalis
• Re: MD5 To Be Considered Harmful Someday
  • From: Dan Kaminsky
• Re: MD5 To Be Considered Harmful Someday
  • From: Ruth A. Kramer
• Re: MD5 To Be Considered Harmful Someday
  • From: Dan Kaminsky
• Re: MD5 To Be Considered Harmful Someday
  • From: Dragos Ruiu
• Re: MD5 To Be Considered Harmful Someday
  • From: Jack Lloyd
• Re: MD5 To Be Considered Harmful Someday
  • From: Keith Oxenrider
• RE: MD5 To Be Considered Harmful Someday
  • From: David Schwartz
• Re: Bypass personal firewall application protection . Again.
  • From: Chris Paget
• Re: MD5 To Be Considered Harmful Someday
  • From: Gandalf The White
• 7a69Adv#15 - Internet Explorer FTP command injection
  • From: Albert Puigsech Galicia
• Re: MD5 To Be Considered Harmful Someday
  • From: Joel Maslak
• RE: MD5 To Be Considered Harmful Someday
  • From: Rager, Anton (Anton)
• Re: MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability
  • From: David F. Skoll
• Re: MD5 To Be Considered Harmful Someday
  • From: Joel Maslak
• Address Bar Spoophing for the Pheeshies: IntotheNet Explorer 6
  • From: http-equiv@xxxxxxxxxx
• Re: 7a69Adv#16 - Konqueror FTP command injection
  • From: Albert Puigsech Galicia
• Re: MD5 To Be Considered Harmful Someday
  • From: Tim
• [SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service
  • From: Martin Schulze
• MD5 To Be Considered Harmful Today
  • From: Pavel Machek
• Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL
  • From: Nicolas Gregoire
• [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding
  • From: Thierry Carrez
• [Advisory] Mozilla Products Remote Crash Vulnerability
  • From: Niek van der Maas
• MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:146 - Updated nfs-utils packages fix remote DoS vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200412-04 ] Perl: Insecure temporary file creation
  • From: Luke Macken
• MDKSA-2004:147 - Updated openssl packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• IE6 Vulnerability - Local File Detection
  • From: ViPeR
• Re: MD5 To Be Considered Harmful Someday
  • From: Gandalf The White
• Re: [Advisory] Mozilla Products Remote Crash Vulnerability
  • From: Berend-Jan Wever
• Re: Online Script Decoder
  • From: Stefan Paletta
• MDKSA-2004:143 - Updated ImageMagick packages fix vulnerability
  • From: Mandrake Linux Security Team
• zone transfers, a spammer's dream?
  • From: Lode Vermeiren
• 7a69Adv#16 - Konqueror FTP command injection
  • From: Albert Puigsech Galicia
• Online Script Decoder
  • From: GreyMagic Security
• Cleartext SMB passwords in Novell Desktop Linux using KDE
  • From: Mike DeMaria
• Bypass personal firewall application protection . Again.
  • From: offtopic
• Re: Local root exploit on Mac OS X with Adobe Version Cue
  • From: Chet Ramey
• MD5 To Be Considered Harmful Someday
  • From: Dan Kaminsky
• Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0
  • From: John Bissell
• Multiple Vulnerabilities in paFileDB 3.1
  • From: Ahmad Muammar
• Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux)
  • From: madsys
• RE: Disclosure of file system information in Mozilla Firefox and Opera Browser:
  • From: Thor Larholm
• MDKSA-2004:142 - Updated gzip packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2
  • From: Luigi Auriemma
• [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation
  • From: Luke Macken
• MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service
  • From: Evgeny Demidov
• Local root exploit on Mac OS X with Adobe Version Cue
  • From: fintler
• Web Application Security Consortium 'Guest Articles' Call for Papers
  • From: robert
• DoS leading to crash of client in Remote Execute 2.30
  • From: headpimp
• Re: Advanced Guestbook
  • From: Spy Hat
• [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library
  • From: Luke Macken
• Multiple vulnerabilities in w3who ISAPI DLL
  • From: Nicolas Gregoire
• [SECURITY] [DSA 605-1] New viewcvs packages fix information leak
  • From: Martin Schulze
• Hosting Controller
  • From: mouse small
• Winamp - Buffer Overflow In IN_CDDA.dll [ Patch Released ]
  • From: Brett Moore
• Opera 7.54 vulnerabilities again (still unfixed)
  • From: Marc Schoenefeld
• [ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution
  • From: Thierry Carrez
• [SECURITY] [DSA 604-1] New hpsockd packages fix denial of service
  • From: Martin Schulze
• Advanced Guestbook
  • From: Emile van Elen
• FreeBSD Security Advisory FreeBSD-SA-04:17.procfs
  • From: FreeBSD Security Advisories
• Re: Disclosure of file system information in Mozilla Firefox and Opera Browser:
  • From: Liu Die Yu
• [CLA-2004:905] Conectiva Security Announcement - squirrelmail
  • From: Conectiva Updates
• Remote Mercury32 Imap exploit
  • From: JohnH
• [USN-37-1] cyrus21-imapd vulnerability
  • From: Martin Pitt
• rssh and scponly arbitrary command execution
  • From: Jason Wies
• Official IFRAME patch - make sure it installs correctly
  • From: Berend-Jan Wever
• Multiple vulnerabilities in Kreed 1.05
  • From: Luigi Auriemma
• Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Blog Torrent preview 0.8 - arbitary file download
  • From: Steve Kemp
• [KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in "proxylog.dat"
  • From: Kurczaba Associates advisories
• [USN-34-1] OpenSSH information leakage
  • From: Martin Pitt
• [CLA-2004:902] Conectiva Security Announcement - abiword
  • From: Conectiva Updates
• [ GLSA 200411-37 ] Open DC Hub: Remote code execution
  • From: Luke Macken
• [USN-33-1] libgd vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation
  • From: Martin Schulze
• [USN-36-1] NFS statd vulnerability
  • From: Martin Pitt
• [USN-35-1] imagemagick vulnerabilities
  • From: Martin Pitt
• Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003.
  • From: Reed Arvin
• [CLA-2004:904] Conectiva Security Announcement - cyrus-imapd
  • From: Conectiva Updates
• Re: Pi3Web/2.0.0 File-Disclosure/Path Disclosure vuln
  • From: Holger Zimmermann
• Invision Power Board 'Allow auto login' setting override
  • From: Hillel Himovich
• Disclosure of file system information in Mozilla Firefox and Opera Browser:
  • From: Giovanni Delvecchio
• SUSE Security Announcement: various kernel problems (SUSE-SA:2004:042)
  • From: Marcus Meissner
• Re: Winamp - Buffer Overflow In IN_CDDA.dll
  • From: Black Dot
• Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4
  • From: Luigi Auriemma
• CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability
  • From: Hongzhen Zhou
• Re: Privilege escalation flaw in MDaemon 7.2.
  • From: kf_lists
• MDKSA-2004:137-1 - Updated libxpm4 packages correct issues with previous update
  • From: Mandrake Linux Security Team
• [SHK-001]Payflow Link Default Config may lead to Hidden Field Modification
  • From: M. Shirk
• Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)
  • From: Luigi Auriemma
• Linux Netwosix NEPOTE Updated!
  • From: Vincenzo Ciaglia
• TSL-2004-0063 - multi
  • From: Trustix Security Advisor
• Password Disclosure for SMB Shares in KDE's Konqueror
  • From: Daniel Fabian
• Privilege escalation flaw in MDaemon 7.2.
  • From: Reed Arvin
• [SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution
  • From: Martin Schulze
• Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038
  • From: Liu Die Yu
• Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.
  • From: Reed Arvin
• [ GLSA 200411-38 ] Sun and Blackdown Java: Applet privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Buffer-overflow in Orbz 2.10
  • From: Luigi Auriemma
• [SECURITY] [DSA 601-1] New libgd1 packages fix arbitrary code execution
  • From: Martin Schulze
• ncpfs buffer overflow
  • From: Karol Więsek
• Macromedia provided wrong "Solution" in mpsb02-08
  • From: Liu Die Yu
• [OpenPKG-SA-2004.051] OpenPKG Security Advisory (imapd)
  • From: OpenPKG
• Microsoft Help ActiveX Control Related Topics Local Content Accessing Vulnerability
  • From: Paul
• Setiri + Invisible browsers != browsers
  • From: Haroon Meer
• [ GLSA 200411-36 ] phpMyAdmin: Multiple XSS vulnerabilities
  • From: Luke Macken
• [CLA-2004:900] Conectiva Security Announcement - sun-jre
  • From: Conectiva Updates
• [ GLSA 200411-35 ] phpWebSite: HTTP response splitting vulnerability
  • From: Matthias Geerdsen
• Immunity, Inc Advisor
  • From: Nicolas Waisman
• Phpbb id: 10701 update and Attachmodule add-on Directory Traversal
  • From: zee
• Java version downgrading proof-of-concept
  • From: auto333584
• Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: K-OTiK Security
• PnTresMailer code browser 6.03 Vulnerabilities
  • From: John Cobb
• FluxBox crash vulnerability
  • From: Quith
• php 4.3.7 memory limit POC exploit
  • From: Gyan chawdhary
• Re: Atari800 - local root. (fwd)
  • From: Petr Stehlik
• RE: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: alex cottle
• phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure
  • From: Cyrille Barthelemy
• Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability
  • From: Chris Withers
• Re: MSIE flaws: nested array sort() loop Stack overflow exception
  • From: isno
• MDKSA-2004:141 - Updated zip packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:140 - Updated a2ps packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:139 - Updated cyrus-imapd packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: Brett Moore
• [SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution
  • From: Martin Schulze
• [CLA-2004:899] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• Buffer Overflow in Open Dc Hub 0.7.14
  • From: Donato Ferrante
• Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows
  • From: icbm
• [ GLSA 200411-32 ] phpBB: Remote command execution
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
  • From: Martin Schulze
• Atari800 - local root.
  • From: Adam Zabrocki
• Rumours about Opera
  • From: Marc Schoenefeld
• Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory]
  • From: Jerome ATHIAS
• Re: [Full-Disclosure] FIREFOX flaws: nested array sort() loop Stack overflow exception
  • From: Heikki Toivonen
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Ken S
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Alla Bezroutchko
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Peter Greenwood
• EZshopper is still vulnerable against Directory Traversal.
  • From: Zero_X www.lobnan.de Team
• Re: Liferay Cross Site Scripting Flaw
  • From: michael young
• Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Exchange
• [USN-32-1] mysql vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 598-1] New yardradius packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200411-34 ] Cyrus IMAP Server: Multiple remote vulnerabilities
  • From: Thierry Carrez
• FIREFOX flaws: nested array sort() loop Stack overflow exception
  • From: Berend-Jan Wever
• MSIE flaws: nested array sort() loop Stack overflow exception
  • From: Berend-Jan Wever
• XSS in Brazilian Insite products
  • From: Carlos Ulver
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability
  • From: advisory
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Laurent Papier
• Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: Ralph Harvey
• [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities
  • From: chewkeong
• [ GLSA 200411-33 ] TWiki: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Prozilla Remote Exploit
  • From: Serkan Akpolat
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Steve Clement
• Re: Changes to the filesystem while find is running - comments?
  • From: Casper . Dik
• STG Security Advisory: [SSA-20041122-11] JSPWiki XSS vulnerability
  • From: advisory
• Re: Changes to the filesystem while find is running - comments?
  • From: devnull
• STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability
  • From: advisory
• [USN-31-1] cyrus21-imapd vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 595-1] New bnc packages arbitrary code execution
  • From: Martin Schulze
• STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability
  • From: advisory
• [SECURITY] [DSA 596-1] New sudo packages fix privilege escalation
  • From: Martin Schulze
• [SECURITY] [DSA 596-2] New sudo packages removes debug output
  • From: Martin Schulze
• Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11
  • From: Luigi Auriemma
• Re: Changes to the filesystem while find is running - comments?
  • From: Casper . Dik
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• Re: Incorrect reporting of the Bofra/The Register exploit
  • From: Florian Laws
• Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: dullien
• [CLA-2004:896] Conectiva Security Announcement - bugzilla
  • From: Conectiva Updates
• MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• SecureCRT - Remote Command Execution
  • From: Brett Moore
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Hugo van der Kooij
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Incorrect reporting of the Bofra/The Register exploit
  • From: matt
• Windows Mobile Pocket PC Security
  • From: kers0r
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Ken S
• [CLA-2004:894] Conectiva Security Announcement - shadow-utils
  • From: Conectiva Updates
• Sun Java Plugin arbitrary package access vulnerability
  • From: Jouko Pynnonen
• RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability
  • From: Randal, Phil
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• Broadcast memory corruption in Soldier of Fortune II 1.03
  • From: Luigi Auriemma
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Fotolog.net cross-site scripting vulnerabilities [RLSA_05-2004]
  • From: Jerome ATHIAS
• RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability
  • From: Sherlock, Nathan
• IPFront - Release
  • From: Hernan Racciatti
• echalk vuln
  • From: kevin anonymous
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• [ GLSA 200411-31 ] ProZilla: Multiple vulnerabilities
  • From: Thierry Carrez
• Winamp - Buffer Overflow In IN_CDDA.dll
  • From: Brett Moore
• [ GLSA 200411-30 ] pdftohtml: Vulnerabilities in included Xpdf
  • From: Thierry Carrez
• MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities
  • From: Stefan Esser
• Hardware support for XP SP2 DEP not enabled by default ?
  • From: Nicolas RUFF
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: chewkeong
• PHPKIT SQL Injection, XSS
  • From: Steve
• iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrary Package Access Vulnerability
  • From: customer service mailbox
• Router ZyXEL Prestige 650 HW http remote admin.
  • From: José
• Re: Changes to the filesystem while find is running - comments?
  • From: Dmitry V. Levin
• GFHost PHP GMail remote command execution exploit that achieves webserver id privileges
  • From: Jerome ATHIAS
• Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Broadcast client crash in Halo 1.05
  • From: Luigi Auriemma
• WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability
  • From: Komrade
• CoffeeCup FTP Clients Buffer Overflow Vulnerability
  • From: Komrade
• TSLSA-2004-0061 - multi
  • From: Trustix Security Advisor
• [ECL] WCI TC-IDE embedded linux vulnerabilities
  • From: ECL team
• Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: Jerome ATHIAS
• IpbProArace 2.5.x SQL injection.
  • From: axl daivy
• Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: security curmudgeon
• TWiki exploit (search.pm / CAN-2004-1037)
  • From: Roman Medina-Heigl Hernandez
• [ GLSA 200411-29 ] unarj: Long filenames buffer overflow and a path traversal vulnerability
  • From: Thierry Carrez
• Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity...
  • From: K-OTiK Security
• [ GLSA 200411-28 ] X.Org, XFree86: libXpm vulnerabilities
  • From: Thierry Carrez
• Addendum, recent Linux <= 2.4.27 vulnerabilities
  • From: Paul Starzetz
• Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue
  • From: advisories
• FreeBSD Security Advisory FreeBSD-SA-04:16.fetch
  • From: security-advisories
• SecurityForest - Public Release #1
  • From: loni
• Java Vulnerabilities in Opera 7.54
  • From: Marc Schoenefeld
• MDKSA-2004:136 - Updated samba packages fix remote vulnerability
  • From: Mandrake Linux Security Team
• Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues
  • From: advisories
• Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).
  • From: Reed Arvin
• EXEC exploit in phpBB - new release
  • From: Paul S. Owen
• Zone Labs Security Advisory: Ad-Blocking Instability
  • From: Zone Labs Product Security
• Zone Labs Ad-Blocking Instability
  • From: Nicolas Robillard
• SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: Jérôme ATHIAS
• Privilege escalation in Mailtraq Version 2.6.1.1677.
  • From: Reed Arvin
• Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: rexolab
• Inofficial updates to 758884/NISCC/DNS
  • From: Roy Arends
• Apache 2.0.52 DoS Exploit v2
  • From: Daniel Guido
• [CLA-2004:892] Conectiva Security Announcement - MySQL
  • From: Conectiva Updates
• A Brief Analysis of Bofra/MyDoom.AG/AH
  • From: Bryan Burns
• [CLA-2004:890] Conectiva Security Announcement - libxml2
  • From: Conectiva Updates
• RE: EXEC exploit in phpBB - fix
  • From: Ron Brinker
• [USN-30-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [ GLSA 200411-27 ] Fcron: Multiple vulnerabilities
  • From: Luke Macken
• Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Robert Hetzler
• [USN-29-1] samba vulnerability
  • From: Martin Pitt
• Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.
  • From: Reed Arvin
• [MaxPatrol] SQL-injection in Invision Power Board 2.x
  • From: Alexander Anisimov
• Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Rafael San Miguel Carrasco
• FreeBSD Security Advisory FreeBSD-SA-04:16.fetch
  • From: FreeBSD Security Advisories
• Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: Hans-Bernhard Broeker
• EXEC exploit in phpBB - fix
  • From: Paul S. Owen
• AppServ 2.5.x and Prior Exploit
  • From: saudi linux
• Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Jerome ATHIAS
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Michael Silk
• SUSE Security Announcement: xshared, XFree86-libs, xorg-x11-libs (SUSE-SA:2004:041)
  • From: Thomas Biege
• MDKSA-2004:133 - Updated sudo packages fix vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200411-26 ] GIMPS, SETI@home, ChessBrain: Insecure installation
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2004:134 - Updated apache packages fix buffer overflow in mod_include
  • From: Mandrake Linux Security Team
• [USN-28-1] sudo vulnerability
  • From: Martin Pitt
• RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: rexolab
• MDKSA-2004:132 - Updated gd packages fix integer overflows
  • From: Mandrake Linux Security Team
• Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities
  • From: Stefan Esser
• [USN-27-1] libxpm4 vulnerability
  • From: Martin Pitt
• MDKSA-2004:135 - Updated apache2 packages fix request DoS
  • From: Mandrake Linux Security Team
• [USN-26-1] bogofilter vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution
  • From: Martin Schulze
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• [ GLSA 200411-25 ] SquirrelMail: Encoded text XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200411-23 ] Ruby: Denial of Service issue
  • From: Thierry Carrez
• Airport x-ray software creating images of phantom weapons?
  • From: Jason Coombs
• Re: Skype callto:// BoF technical details
  • From: Berend-Jan Wever
• [ GLSA 200411-24 ] BNC: Buffer overflow vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Skype callto:// BoF technical details
  • From: Fabian Becker
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: q q
• TSLSA-2004-0058 - multi
  • From: Trustix Security Advisor
• [waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]
  • From: Janek Vind
• Flaws in SP2 security features, part II
  • From: Juergen Schmidt
• Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution
  • From: Florian Weimer
• [SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution
  • From: Martin Schulze
• Skype callto:// BoF technical details
  • From: Berend-Jan Wever
• Google Desktop Search ignores Preferences
  • From: Elliott Bäck
• Format string bug in Army Men RTS
  • From: Luigi Auriemma
• Re: Crash in Secure Network Messenger 1.4.2
  • From: r`Futile
• SUSE Security Announcement: samba (SUSE-SA:2004:040)
  • From: Marcus Meissner
• [USN-25-1] libgd2 vulnerability
  • From: Martin Pitt
• [SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd
  • From: Gerald (Jerry) Carter
• iDEFENSE Security Advisory 11.15.04: Multiple Security Vulnerabilities in Fcron
  • From: customer service mailbox
• [SNS Advisory No.79] A Possibility of Cookie Overwrite in Microsoft Internet Explorer
  • From: Jérôme
• Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow
  • From: Stefan Esser
• XSS in TheFaceBook round 2
  • From: Alex Lanstein
• Re: 04WebServer Three Vulnerabilities
  • From: chewkeong
• Multiple vulnerabilities in Hired Team: Trial (Shine engine)
  • From: Luigi Auriemma
• Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: Gregory Duchemin
• Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: 3APA3A
• Multiple XSS holes in TheFaceBook
  • From: Alex Lanstein
• SQL Injection in phpBT (bug.php) add project
  • From: jessica soules
• SQL Injection in phpBT (bug.php - Add)
  • From: Jérôme
• IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command
  • From: Jérôme
• TWiki search function allows arbitrary shell command execution
  • From: Hans Ulrich Niedermann
• Eudora 6.2 attachment spoof
  • From: Paul Szabo
• [ GLSA 200411-21 ] Samba: Remote Denial of Service
  • From: Matthias Geerdsen
• [USN-24-1] openssl script vulnerability
  • From: Martin Pitt
• phpBB Code EXEC (v2.0.10)
  • From: jessica soules
• SQL Injection in phpBT (bug.php)
  • From: jessica soules
• Crash in Secure Network Messenger 1.4.2
  • From: Luigi Auriemma
• Sudo version 1.6.8p2 now available (fwd)
  • From: je
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: KF_lists
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: KF_lists
• [USN-23-1] apache2 vulnerability
  • From: Martin Pitt
• Vulnerability not with vBulletin
  • From: Kier Darby
• Re: Linux ELF loader vulnerabilities
  • From: Jirka Kosina
• [SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability
  • From: Martin Schulze
• Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: Gregory Duchemin
• Unofficial Internet Explorer FRAME/IFRAME fix
  • From: Thomas Rogg
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Contact in HP related to OpenView / Coda
  • From: Noam Rathaus
• Re: Linux ELF loader vulnerabilities
  • From: Pavel Kankovsky
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jake Appelbaum
• [ GLSA 200411-20 ] ez-ipupdate: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [CLA-2004:889] Conectiva Security Announcement - sasl2
  • From: Conectiva Updates
• [USN-22-1] samba vulnerability
  • From: Martin Pitt
• RE: Norton AntiVirus Script Blocking Exploit -- Symantec's response
  • From: Daniel Milisic
• RE: Evidence Mounts that the Vote Was Hacked
  • From: David Hayden
• security hole (http response splitting) in phpwebsite
  • From: Maestro De-Seguridad
• [ GLSA 200411-18 ] Apache 2.0: Denial of Service by memory consumption
  • From: Matthias Geerdsen
• [USN-21-1] libgd vulnerabilities
  • From: Martin Pitt
• [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]
  • From: Janek Vind
• [ GLSA 200411-19 ] Pavuk: Multiple buffer overflows
  • From: Luke Macken
• [ GLSA 200411-22 ] Davfs2, lvm-user: Insecure tempfile handling
  • From: Sune Kloppenborg Jeppesen
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: http-equiv@xxxxxxxxxx
• Zone Labs IMsecure Active Link Filter Bypass
  • From: Kurczaba Associates advisories
• Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections
  • From: Cisco Systems Product Security Incident Response Team
• Re: [Full-Disclosure] Re: Linux ELF loader vulnerabilities
  • From: Jirka Kosina
• SQL injection in vBulletin forums (last10.php)
  • From: Dr. Death
• Re: Linux ELF loader vulnerabilities
  • From: Ted Percival
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Peter Conrad
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Atom 'Smasher'
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Rick Crelia
• Hotfoon Ver 4.0 Highv Risk
  • From: saudi linux
• [SquirrelMail Security Advisory] Cross Site Scripting in encoded text
  • From: Jonathan Angliss
• Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service
  • From: Cisco Systems Product Security Incident Response Team
• Re: Evidence Mounts that the Vote Was Hacked
  • From: bkfsec
• 04WebServer Three Vulnerabilities
  • From: Jérôme
• Re: Nortel Networks Contivity VPN Client information leakage vulnerability
  • From: Quincy Jackson
• Security Contact Info for IPSWITCH
  • From: Tom
• Unsecure Ftpd on HP PSC 2510 Printer
  • From: Justin Rush
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jei
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jay D. Dyson
• Re: BoF in Windows 2000: ddeshare.exe
  • From: J. S. Connell
• BNC 2.8.9 remote buffer overflow
  • From: LSS Security
• Nortel Networks Contivity VPN Client information leakage vulnerability
  • From: Network Intelligence (I) Pvt. Ltd.
• Multiple Vulnerabilities in WebCalendar
  • From: Joxean Koret
• Linux ELF loader vulnerabilities
  • From: Paul Starzetz
• [ GLSA 200411-16 ] zip: Path name buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Re: BoF in Windows 2000: ddeshare.exe
  • From: Valdis . Kletnieks
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jay D. Dyson
• [ GLSA 200411-17 ] mtink: Insecure tempfile handling
  • From: Sune Kloppenborg Jeppesen
• EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service
  • From: Marc Maiffret
• Vulnerabilities in JAF CMS
  • From: [ echo|staff ]@securityfocus.com@xxxxxxxxxxxxxxxxxxxxx
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Heikki Kortti
• [SECURITY] [DSA 591-1] New libgd2 packages fix arbitrary code execution
  • From: Martin Schulze
• BoF in Windows 2000: ddeshare.exe
  • From: Jack C
• Security Contact for T-Mobile?
  • From: Jake Appelbaum
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: roozbeh afrasiabi
• [USN-20-1] Ruby CGI module vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 589-1] New libgd1 packages fix arbitrary code execution
  • From: Martin Schulze
• Re: BoF in Windows 2000: ddeshare.exe
  • From: Berend-Jan Wever
• Re: [HV-LOW] Symantec LiveUpdate issues may cause DoS
  • From: secure
• [SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution
  • From: Martin Schulze
• MDKSA-2004:128 - Updated ruby packages fix remote DoS vulnerability
  • From: Mandrake Linux Security Team
• Evidence Mounts that the Vote Was Hacked
  • From: Atom 'Smasher'
• [CLA-2004:886] Conectiva Security Announcement - xpdf
  • From: Conectiva Updates
• [CLA-2004:888] Conectiva Security Announcement - libtiff3
  • From: Conectiva Updates
• Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: Menashe Eliezer
• [SECURITY] [DSA 586-1] New ruby packages fix denial of service
  • From: Martin Schulze
• [HV-LOW] Symantec LiveUpdate issues may cause DoS
  • From: vuln
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Michal Zalewski
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Dave Aitel
• [ GLSA 200411-14 ] Kaffeine, gxine: Remotely exploitable buffer overflow
  • From: Luke Macken
• [SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files
  • From: Martin Schulze
• [ GLSA 200411-12 ] zgv: Multiple buffer overflows
  • From: Luke Macken
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Paul Schmehl
• up-imapproxy DoS vulnerabilities
  • From: Timo Sirainen
• Offline WPA-PSK auditing tool (coWPAtty)
  • From: Joshua Wright
• [ GLSA 200411-15 ] OpenSSL, Groff: Insecure tempfile handling
  • From: Thierry Carrez
• [SECURITY] [DSA 587-1] New freeam packages fix arbitrary code execution
  • From: Martin Schulze
• DOS against Java JNDI/DNS
  • From: Kurt Huwig
• Microsoft Internet Explorer permits to examine the existence of local files
  • From: Benjamin Tobias Franz
• MSIE src&name property disclosure
  • From: Berend-Jan Wever
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Michal Zalewski
• [ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7
  • From: Gerald (Jerry) Carter
• [USN-19-1] squid vulnerabilities
  • From: Martin Pitt
• [ GLSA 200411-11 ] ImageMagick: EXIF buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Resources consumption in 602 Lan Suite 2004.0.04.0909
  • From: Luigi Auriemma
• [ GLSA 200411-10 ] Gallery: Cross-site scripting vulnerability
  • From: Luke Macken
• UPDATE: [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
  • From: Thierry Carrez
• UPDATE: [ GLSA 200410-20 ] Xpdf, CUPS: Multiple integer overflows
  • From: Thierry Carrez
• [SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour
  • From: Martin Schulze
• Making distinctions between similar-looking vulnerabilities
  • From: Steven M. Christey
• In-game format string bug in the Lithtech engine
  • From: Luigi Auriemma
• TSLSA-2004-0056 - apache
  • From: Trustix Security Advisor
• Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow
  • From: Josh Bressers
• Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems.
  • From: ShineShadow
• SSC Advisory TSA-053 (Ureach.com)
  • From: Secure Science Corporation Advisory Notice
• [USN-17-1] passwd vulnerability
  • From: Martin Pitt
• FW: Hacker Group back again, this time claiming to have source code to Cisco PIX firewall
  • From: Graham, Brian
• [FLSA-2004:2076] Updated foomatic package fixes security vulnerability
  • From: Marc Deslauriers
• Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow
  • From: Martin Pitt
• [USN-18-1] zip vulnerability
  • From: Martin Pitt
• Re: debian dhcpd, old format string bug
  • From: Martin Schulze
• RE: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann (NGS)
• MDKSA-2004:127 - Updated libxml and libxml2 packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:126 - Updated shadow-utils packages fix security bypass vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:125 - Updated iptables packages fix vulnerability
  • From: Mandrake Linux Security Team
• SSC Advisory TSA-052 (Callwave.com)
  • From: Secure Science Corporation Advisory Notice
• MDKSA-2004:124 - Updated xorg-x11 packages fix libXpm overflow vulnerabilities
  • From: Mandrake Linux Security Team
• Re: [ GLSA 200411-09 ] shadow: Unauthorized modification of account information
  • From: Solar Designer
• [ GLSA 200411-09 ] shadow: Unauthorized modification of account information
  • From: Matthias Geerdsen
• [ GLSA 200411-08 ] GD: Integer overflow
  • From: Thierry Carrez
• SSC Advisory TSA-052 (Callwave.com)
  • From: Secure Science Corporation Advisory Notice
• [SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability
  • From: Martin Schulze
• [HV-MED] Zip/Linux long path buffer overflow
  • From: vuln
• [CLA-2004:883] Conectiva Security Announcement - subversion
  • From: Conectiva Updates
• [CLA-2004:884] Conectiva Security Announcement - gaim
  • From: Conectiva Updates
• [CLA-2004:885] Conectiva Security Announcement - apache
  • From: Conectiva Updates
• ERRATA: [ GLSA 200411-01 ] ppp: No denial of service vulnerability
  • From: Luke Macken
• [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability
  • From: Thierry Carrez
• [ GLSA 200411-05 ] libxml2: Remotely exploitable buffer overflow
  • From: Thierry Carrez
• [CLA-2004:882] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• [SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory
  • From: Martin Schulze
• [ GLSA 200411-06 ] MIME-tools: Virus detection evasion
  • From: Thierry Carrez
• [USN-16-1] perl vulnerabilities
  • From: Martin Pitt
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Nicolas Gregoire
• RE: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann (NGS)
• [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM
  • From: Hat-Squad Security Team
• URL spoofing bug (with iframes) in Microsoft Internet Explorer (11/02/2004)
  • From: Benjamin Tobias Franz
• Microsoft ISA Server Authentication Bypassing
  • From: Jérôme
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Jeff Williams
• Multiple Vulnerabilities in Web Forums Server
  • From: R00tCr4ck
• Re: debian dhcpd, old format string bug
  • From: Javier Fernandez-Sanguino
• [SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution
  • From: Martin Schulze
• Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: Elia Florio
• Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: morning_wood
• MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (fwd)
  • From: Michal Zalewski
• zlib 1.2.2 released
  • From: Mark Adler
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Crispin Cowan
• MDKSA-2004:123 - Updated perl-MIME-tools packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:122 - Updated mod_ssl packages fix information disclosure vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200411-04 ] Speedtouch USB driver: Privilege escalation vulnerability
  • From: Luke Macken
• MDKSA-2004:121 - Updated netatalk packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:120 - Updated mpg123 packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:119 - Updated MySQL packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication
  • From: Cisco Systems Product Security Incident Response Team
• MDKSA-2004:118 - Updated perl-Archive-Zip packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:117 - Updated gaim packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability
  • From: Paul Mackerras
• zlib 1.2.2 released
  • From: Mark Adler
• Exploiting default exception handler to increase exploit stability on win32
  • From: tal zeltzer
• [SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200411-03 ] Apache 1.3: Buffer overflow vulnerability in mod_include
  • From: Matthias Geerdsen
• Medium Risk Vulnerability in WinRAR
  • From: NGSSoftware Insight Security Research
• [USN-15-1] lvm10 vulnerability
  • From: Martin Pitt
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Henning Brauer
• [CLA-2004:881] Conectiva Security Announcement - rsync
  • From: Conectiva Updates
• [ GLSA 200411-02 ] Cherokee: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities
  • From: roozbeh afrasiabi
• Safari vulnerable to URL spoofing
  • From: Gilbert Verdian
• [OpenPKG-SA-2004.049] OpenPKG Security Advisory (gd)
  • From: OpenPKG
• [OpenPKG-SA-2004.050] OpenPKG Security Advisory (libxml)
  • From: OpenPKG
• [SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
  • From: Martin Schulze
• TSLSA-2004-0055 - multi
  • From: Trustix Security Advisor
• [OpenPKG-SA-2004.045] OpenPKG Security Advisory (mysql)
  • From: OpenPKG
• [USN-10-1] XML library vulnerabilities
  • From: Martin Pitt
• p h i s h i n g p h o r p h u n p h o r p h u q u e s a k e
  • From: http-equiv@xxxxxxxxxx
• [USN-14-1] xpdf vulnerabilities
  • From: Martin Pitt
• [USN-13-1] groff utility vulnerability
  • From: Martin Pitt
• [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability
  • From: Luke Macken
• Re: Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brian Gallagher
• [SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution
  • From: Martin Schulze
• XDICT Buffer OverRun Vulnerability,funny :-)
  • From: Sowhat .
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Anton R Ivanov
• New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: http-equiv@xxxxxxxxxx
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Larry Seltzer
• [OpenPKG-SA-2004.048] OpenPKG Security Advisory (squid)
  • From: OpenPKG
• [USN-12-1] ppp Denial of Service
  • From: Martin Pitt
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: 0-1-2-3
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Michael Engert
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Chris Paget
• [OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
  • From: OpenPKG
• [OpenPKG-SA-2004.047] OpenPKG Security Advisory (apache)
  • From: OpenPKG
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: André Malo
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: Jérôme
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: Christopher J. Pilkington
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: infamous41md
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Tim Newsham
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Tim Newsham
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ