Bugtraq

• Thread Index

• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Shigorin
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Larry Seltzer
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• Re: debian dhcpd, old format string bug
  • From: infamous41md
• RE: libgd integer overflow
  • From: infamous41md
• Re: libgd integer overflow
  • From: Richard Dawe
• [USN-11-1] libgd2 vulnerabilities
  • From: Martin Pitt
• [ GLSA 200410-31 ] Archive::Zip: Virus detection evasion
  • From: Thierry Carrez
• local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Larry Cashdollar
• Re: Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: Michal Zalewski
• [SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
  • From: Martin Schulze
• [SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities
  • From: Martin Schulze
• [USN-6-1] postgresql contributed script vulnerability
  • From: Martin Pitt
• [USN-3-1] GhostScript utility script vulnerabilities
  • From: Martin Pitt
• Re: Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: Crispin Cowan
• Re: debian dhcpd, old format string bug
  • From: Tarragon Allen
• [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
  • From: Thierry Carrez
• New URL spoofing bug in Microsoft Internet Explorer
  • From: 0-1-2-3
• [USN-8-1] gaim vulnerabilities
  • From: Martin Pitt
• [USN-5-1] gettext vulnerabilities
  • From: Martin Pitt
• [USN-7-1] imagemagick vulnerability
  • From: Martin Pitt
• [FLSA-2004:2089] Updated mozilla packages fix security vulnerabilities
  • From: Dominic Hargreaves
• [ GLSA 200410-28 ] rssh: Format string vulnerability
  • From: Thierry Carrez
• [USN-9-1] tetex-bin vulnerabilities
  • From: Martin Pitt
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• [USN-4-1] Standard C library script vulnerabilities
  • From: Martin Pitt
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: MCMuir
• Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Paul Schmehl
• PHP4 cURL functions bypass open_basedir
  • From: FraMe
• Re: zgv image viewing heap overflows
  • From: Chris Frey
• [SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
  • From: Martin Schulze
• [SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal
  • From: Martin Schulze
• Presentation: Bypassing client application protection techniques with notepad
  • From: 3APA3A
• High Risk Vulnerability in RealPlayer
  • From: NGSSoftware Insight Security Research
• [security bulletin] SSRT3526 Serviceguard potential increase in privilege
  • From: Boren, Rich (SSRT)
• Multiple Vulnerabilites in Quake II Server
  • From: Richard Stanway
• EEYE: RealPlayer Zipped Skin File Buffer Overflow
  • From: Marc Maiffret
• High Risk Vulnerability in Quicktime for Windows
  • From: NGSSoftware Insight Security Research
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• [ GLSA 200410-29 ] PuTTY: Pre-authentication buffer overflow
  • From: Sune Kloppenborg Jeppesen
• MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86
  • From: Ramon de Carvalho Valle
• iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability
  • From: customer service mailbox
• [CLA-2004:880] Conectiva Security Announcement - foomatic-filters
  • From: Conectiva Updates
• [CLA-2004:879] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• PuTTY SSH client vulnerability
  • From: Anatole Shaw
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• Crashs in Master of Orion III 1.2.5
  • From: Luigi Auriemma
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• debian dhcpd, old format string bug
  • From: infamous41md
• PTms04-030
  • From: pigrelax
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• Rendering large binary file as HTML makes Mozilla Firefox stop responding
  • From: Peter Kruse
• zgv image viewing heap overflows
  • From: infamous41md
• [ GLSA 200410-22 ] MySQL: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Valdis . Kletnieks
• wvtfpd remote root heap overflow
  • From: infamous41md
• [ GLSA 200410-23 ] Gaim: Multiple vulnerabilities
  • From: Matthias Geerdsen
• [ GLSA 200410-25 ] Netatalk: Insecure tempfile handling in etc2ps.sh
  • From: Luke Macken
• pppd out of bounds memory access, possible DOS
  • From: infamous41md
• Hawking Technologies HAR11A router considered insecure
  • From: Marcus Garvey
• inetutils tftp client, DNS resolving bofs
  • From: infamous41md
• libgd integer overflow
  • From: infamous41md
• [ GLSA 200410-26 ] socat: Format string vulnerability
  • From: Luke Macken
• [ GLSA 200410-24 ] MIT krb5: Insecure temporary file use in send-pr.sh
  • From: Thierry Carrez
• pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security
  • From: Dragos Ruiu
• OpenSSL 0.9.7e released (fwd from mark@xxxxxxxxxxx)
  • From: je
• MailCarrier 2.51 SMTP server Buffer Overflow [PoC included]
  • From: Jérôme
• libxml2 remote buffer overflows (not in xml parsing code though)
  • From: infamous41md
• SUSE Security Announcement: xpdf, gpdf, kpdf, pdftohtml, cups (SUSE-SA:2004:039)
  • From: Thomas Biege
• Two Vulnerabilities in OpenWFE Web Client
  • From: Joxean Koret
• RE: Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brooks, Shane
• Re: CAN-2004-0814: Linux terminal layer races
  • From: Pavel Kankovsky
• [CLA-2004:878] Conectiva Security Announcement - zlib
  • From: Conectiva Updates
• Bug in hotmail
  • From: security
• Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: michael evanchik
• Fake RedHat - Fedora Security Patch / Trojan Source Code & Analysis
  • From: K-OTiK Security
• Re: [Full-Disclosure] Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Daniel Veditz
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: gabrield89
• Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: ducch apple
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• Re: [Full-Disclosure] python does mangleme (with IE bugs!)
  • From: Berend-Jan Wever
• Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Atom 'Smasher'
• STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
  • From: advisory
• Re: Is Windows up to snuff for running our world?
  • From: Thor
• [BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2
  • From: David Miller
• python does mangleme (with IE bugs!)
  • From: ned
• Re: Google Script Insertion Exploit
  • From: Jérôme
• Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michal Zalewski
• rssh: pizzacode security alert
  • From: Derek Martin
• dwc_articles possible sql injection
  • From: Rene
• windows 2000 server terminal server denial of service
  • From: Nick Caramella
• Re: Full path disclosure and sql injection on CubeCart 2.0.1
  • From: sculptex
• Ability FTP Server 2.34 Buffer Overflow Exploit
  • From: Jérôme
• Norton AntiVirus 2004/2005 Script Blocking Redux
  • From: Daniel Milisic
• Windows DoS in certain pGina configurations
  • From: Steven
• AOL Journals BlogID incrementing discloses account names and e-mail
  • From: Steven
• Is Windows up to snuff for running our world?
  • From: Richard M. Smith
• Hack Dot AE
  • From: Spy Hat
• [CLA-2004:877] Conectiva Security Announcement - mozilla
  • From: Conectiva Updates
• Re: avoiding stackguard
  • From: Crispin Cowan
• iDEFENSE Security Advisory XX.XX.04 - Novell SuSe Linux LibTIFF Heap Overflow Vulnerability
  • From: customer service mailbox
• MDKSA-2004:113 - Updated xpdf packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:115 - Updated kdegraphics packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• SuSE Security Announcement: libtiff (SUSE-SA:2004:038)
  • From: Marcus Meissner
• [HV-LOW] Unsafe WAV header handling can cause DoS on Windows
  • From: vuln
• [Fwd: Altiris Carbon Copy Remote Control local SYSTEM exploitation.]
  • From: KF_lists
• J2ME security vulnerabilities
  • From: Adam Gowdiak
• MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• [Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access
  • From: Boren, Rich (SSRT)
• [KDE security advisory] Multiple integer overflows in kpdf
  • From: Dirk Mueller
• [ GLSA 200410-21 ] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
  • From: Kurt Lieber
• MDKSA-2004:112 - Updated squid packages fix SNMP processing vulnerability
  • From: Mandrake Linux Security Team
• Re: Critical Vulnerability in Altiris Deployment Server architecture
  • From: KF_lists
• Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (Risk increased)
  • From: Juan C Calderon
• HTTP Response Splitting in Serendipity 0.7-beta4
  • From: Chaotic Evil
• MDKSA-2004:110 - Updated gaim packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• SQL Injection in UBB.threads 3.4.x
  • From: Florian Rock
• [SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface
  • From: Martin Schulze
• SuSE Security Announcement: kernel (SUSE-SA:2004:037)
  • From: Marcus Meissner
• Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brian Gallagher
• NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability
  • From: NSFOCUS Security Team
• CAN-2004-0814: Linux terminal layer races
  • From: Alan Cox
• MDKSA-2004:107 - Updated mozilla packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• mpg123 "getauthfromurl" buffer overflow
  • From: Carlos Barros
• MDKSA-2004:108 - Updated cvs packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: secure
• [SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 571-1] New libpng3 packages fix several vulnerabilities
  • From: Martin Schulze
• How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: http-equiv@xxxxxxxxxx
• RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: Thor Larholm
• MDKSA-2004:109 - Updated libtiff packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow (PoC)
  • From: houseofdabus HOD
• Buffer-overflow in Age of Sail II 1.04.151
  • From: Luigi Auriemma
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: Chris Norton
• Broadcast crash in Vypress Tonecast 1.3
  • From: Luigi Auriemma
• Multiple AntiVirus Reserved Device Name Handling Vulnerability
  • From: Sowhat .
• Google Script Insertion Exploit
  • From: Jim Ley
• avoiding stackguard
  • From: vallez
• RE: [IE 6 SP2] Possible URL Spoofing
  • From: Dror Shalev
• UnixWare 7.1.4 UnixWare 7.1.3 : The error handling in the inflate and inflateBack functions in ZLib compression library allows local users to cause a denial of service
  • From: please_reply_to_security
• [FLSA-2004:1804] Updated kernel resolves security vulnerabilities
  • From: Dominic Hargreaves
• Re: [IE 6 SP2] Possible URL Spoofing
  • From: Paul Kurczaba
• [CLA-2004:875] Conectiva Security Announcement - gtk+
  • From: Conectiva Updates
• [ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system
  • From: Thierry Carrez
• RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Simon Zuckerbraun
• apexec.pl is still vulnerable against Directory Traversal.
  • From: Zero_X www.lobnan.de Team
• Mutiple AntiVirus Reserved Device Name Handling Vulnerability
  • From: Sowhat .
• Re: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Jay Calvert
• [ GLSA 200410-15 ] Squid: Remote DoS vulnerability
  • From: Luke Macken
• [SECURITY] [DSA 568-1] New cyrus-sasl-mit packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service
  • From: Martin Schulze
• ProFTPD 1.2.x remote users enumeration bug - correction
  • From: LSS Security
• Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS
  • From: Juan C Calderon
• [Powie's PSCRIPT Forum] Multiple SQL-Injection Vulnerabilities
  • From: Christoph Jeschke
• IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS
  • From: Juan C Calderon
• [FLSA-2004:1237] Updated gaim package resolves security issues
  • From: Marc Deslauriers
• [FLSA-2004:2072] Updated CUPS packages fix security vulnerability
  • From: Marc Deslauriers
• [SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service
  • From: Martin Schulze
• Re: EEYE: Windows VDM #UD Local Privilege Escalation
  • From: Jim Hatfield
• Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: secure
• Re: Adobe acrobat / Adobe Reader 6 can read local files
  • From: Shannon Eric Peevey
• Re: Directory traversal in Yak! 2.1.2
  • From: bil
• Re: [IE 6 SP2] Possible URL Spoofing
  • From: http-equiv@xxxxxxxxxx
• iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability
  • From: customer service mailbox
• Multiple vulnerabilities in Sage Saleslogix
  • From: Carl
• cPanel symlink chmod issue
  • From: Karol Więsek
• cPanel hardlink chown issue
  • From: Karol Więsek
• IISShield and ASP.NET canonicalization
  • From: Tiago Halm
• cPanel hardlink backup issue
  • From: Karol Więsek
• Re: 3COM Wireless router (3CRADSL72) information disclosure
  • From: mccauley@xxxxxxx
• Web browsers - a mini-farce
  • From: Michal Zalewski
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: SysAdminKC
• Multiple Vulnerabilities in CoolPHP
  • From: R00tCr4ck
• ms04-031 pre-auth ??
  • From: Sinan Eren
• Re: Format String Vulnerability in Valve's CS-Source
  • From: Some One
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: marco correnti
• RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Polazzo Justin
• [IE 6 SP2] Possible URL Spoofing
  • From: Andrew Hunter
• More details on BID 11408 (3com 3cradsl72 wireless router)
  • From: Ivan Casado
• [SECURITY] [DSA 567-1] New libtiff packages fix remote code execution
  • From: Martin Schulze
• Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
  • From: wirepair
• Clientexec Billing Software
  • From: bugtraq
• Eudora 6.2.0.7 attachment spoof
  • From: Paul Szabo
• Directory traversal in Yak! 2.1.2
  • From: Luigi Auriemma
• Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: Daniel Milisic
• Microsoft Windows NetDDE Service Buffer Overflow
  • From: NGSSoftware Insight Security Research
• ProFTPD 1.2.x remote users enumeration bug
  • From: LSS Security
• Re: Format String Vulnerability in Valve's CS-Source
  • From: Luigi Auriemma
• Multiple Cross Site Scripting Vulnerabilities in FuseTalk
  • From: steven
• Re: Insecure Default Service DACL's in Windows 2003
  • From: Jean-Baptiste Marchand
• a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3
  • From: keitel andres ortega
• Bypass of Antivirus software with GDI+ bug exploit Mutations
  • From: Andrey Bayora
• Re: EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
  • From: Bipin Gautam
• TSLSA-2004-0054 - multi
  • From: Trustix Security Advisor
• Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: americanidiot
• [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl)
  • From: OpenPKG
• [FLSA-2004:2102] Updated samba packages fix security vulnerability [updated]
  • From: Dominic Hargreaves
• [ GLSA 200410-13 ] BNC: Input validation flaw
  • From: Thierry Carrez
• [ GLSA 200410-10 ] gettext: Insecure temporary file handling
  • From: Luke Macken
• Format String Vulnerability in Valve's CS-Source
  • From: Some One
• Re: Adobe acrobat / Adobe Reader 6 can read local files
  • From: Nick Leoncavallo
• [OpenPKG-SA-2004.043] OpenPKG Security Advisory (tiff)
  • From: OpenPKG
• UPDATE: Format String Vulnerability in Valve's CS-Source
  • From: Some One
• ACROS Security: Session Fixation in JRun Management Console
  • From: ACROS Security
• ACROS Security: HTML Injection in JRun Management Console
  • From: ACROS Security
• ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response
  • From: ACROS Security
• New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: John Bissell
• 3COM Wireless router (3CRADSL72) information disclosure
  • From: Karb0nOxyde -
• CESA-2004-006: libtiff
  • From: chris
• [FLSA-2004:1737] Updated httpd packages fix a mod_proxy security vulnerability
  • From: Marc Deslauriers
• Buffer-overflow in ShixxNOTE 6.net
  • From: Luigi Auriemma
• [FLSA-2004:1888] Updated mod_ssl package fixes Apache security vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 566-1] New CUPS packages fix information leak
  • From: Martin Schulze
• [HV-MED] UPDATE: RIM Blackberry DoS, data loss
  • From: vuln
• [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities
  • From: Luke Macken
• [SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm
  • From: Martin Schulze
• [FLSA-2004:1833] Updated lha resolves security vulnerabilities
  • From: Marc Deslauriers
• [CLA-2004:873] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [CLA-2004:872] Conectiva Security Announcement - cups
  • From: Conectiva Updates
• SetWindowLong Shatter Attacks
  • From: Brett Moore
• Buffer Overflow In Microsoft Excel
  • From: Brett Moore
• [ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm
  • From: Luke Macken
• MSN Gaming Heartbeat Component Buffer Overflow
  • From: NGSSoftware Insight Security Research
• [ GLSA 200410-11 ] tiff: Buffer overflows in image decoding
  • From: Thierry Carrez
• EEYE: Windows VDM #UD Local Privilege Escalation
  • From: Derek Soeder
• [ GLSA 200410-10 ] gettext: Insecure temporary file handling
  • From: Luke Macken
• Adobe acrobat / Adobe Reader 6 can read local files
  • From: Jelmer
• IT Underground Talks
  • From: Dave Aitel
• EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
  • From: Derek Soeder
• [SECURITY] [DSA 565-1] New sox packages fix buffer overflow
  • From: Martin Schulze
• ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer
  • From: ACROS Security
• BindView Advisory: Memory Leak and DoS in NT4 RPC server
  • From: advisory
• [FLSA-2004:2102] Updated samba packages fix security vulnerability
  • From: Dominic Hargreaves
• [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss
  • From: vuln
• XXS in SCT email client
  • From: Matthew Oyer
• XXS in fusetalk forum
  • From: Matthew Oyer
• [SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
  • From: Martin Schulze
• [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3.
  • From: Exoduks
• [SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution
  • From: Martin Schulze
• Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS
  • From: Amit Klein (AKsecurity)
• MS October Security bulletins
  • From: albatross
• Reverse Engineering the First Pocket PC Trojan
  • From: kers0r
• RE: Insecure Default Service DACL's in Windows 2003
  • From: Kurt Dillard
• Re: Regression in IE: Accessing remote/local content in IE (GM#009-IE)
  • From: Nick FitzGerald
• CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
  • From: CORE Security Technologies Advisories
• Insecure Default Service DACL's in Windows 2003
  • From: Ziots, Edward
• UnixWare 7.1.4 : Multiple Vulnerabilities in libpng
  • From: please_reply_to_security
• [SECURITY] [DSA 563-2] New cyrus-sasl packages really fix arbitrary code execution
  • From: Martin Schulze
• Micronet wireless broadband router SP916BM admin password reset when power off
  • From: MrJoe
• Microsoft Internet Explorer Install Engine Control Buffer Overflow
  • From: NGSSoftware Insight Security Research
• UnixWare 7.1.3up UnixWare 7.1.4 : CUPS before 1.1.21 allows remote attackers to cause a denial of service
  • From: please_reply_to_security
• Regression in IE: Accessing remote/local content in IE (GM#009-IE)
  • From: GreyMagic Security
• MonkeyShell: using XML-RPC for access to a remote shell
  • From: Abe Usher
• Microsoft cabarc directory traversal
  • From: Jelmer
• FW: problem in voip environment
  • From: Walton, John Michael (John)
• [SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality
  • From: Martin Schulze
• Multiple vulnerabilities in ZanfiCmsLite
  • From: Lin Xiaofeng
• [SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities
  • From: Martin Schulze
• [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board
  • From: Alexander Antipov
• [ GLSA 200410-06 ] CUPS: Leakage of sensitive information
  • From: Kurt Lieber
• Limited \secure\ buffer-overflow in some old Monolith games
  • From: Luigi Auriemma
• ASP.NET cannonicalization issue
  • From: Evans, Arian
• MDKSA-2004:106 - Updated cyrus-sasl packages fix local vulnerability
  • From: Mandrake Linux Security Team
• TSLSA-2004-0053 - cyrus-sasl
  • From: Trustix Security Advisor
• Server crash in Flash Messaging 5.2.0g
  • From: Luigi Auriemma
• [ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
  • From: Kurt Lieber
• [SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 600-1] New samba packages fix arbitrary file access
  • From: Martin Schulze
• HTTP Response Splitting Vulnerability in Wordpress 1.2
  • From: Chaotic Evil
• [HV-HIGH] MS Word multiple exceptions, at least one exploitable
  • From: vuln
• Full path disclosure and sql injection on CubeCart 2.0.1
  • From: Pedro Sanches
• Re: Buffer Overflow in Spider game
  • From: Matt Zimmerman
• Hi
  • From: webhelp
• New Microsoft Security Response Center PGP Key [pgp]
  • From: Microsoft Security Response Center
• [Gosecure Adivsory] Neoteris IVE Vulnerability
  • From: Jian Hui Wang
• Patch available for high risk flaws in the AtHoc Toolbar
  • From: NGSSoftware Insight Security Research
• Re: Multiple vulnerabilities in BlackBoard
  • From: Yves Goergen
• [SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service
  • From: Martin Schulze
• MDKSA-2004:105 - Updated xine-lib packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [GoSecure Advisory] Neoteris IVE Vulnerability
  • From: Jian Hui Wang
• CodeCon 2005 Call for Papers
  • From: Len Sassaman
• Latest Apple Sec update
  • From: Michael Bartosh
• [Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal
  • From: Alexander Antipov
• Directory traversal in Tridcomm 1.3
  • From: Luigi Auriemma
• [ GLSA 200410-04 ] PHP: Memory disclosure and arbitrary location file upload
  • From: Dan Margolis
• [SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation
  • From: Martin Schulze
• Re: [Full-Disclosure] iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability
  • From: 3APA3A
• SUSE Security Announcement: mozilla (SUSE-SA:2004:036)
  • From: Sebastian Krahmer
• GDI+ JPEG exploit
  • From: albatross
• Patch available for multiple high risk vulnerabilities in RealPlayer
  • From: NGSSoftware Insight Security Research
• Multiple vulnerabilities in BlackBoard
  • From: Lin Xiaofeng
• Re: Full path disclosure in PHP Links - more
  • From: LSS Security
• Re: Buffer Overflow in Spider game
  • From: van Helsing
• ERRATA: Potential Arbitrary File Access (CAN-2004-0815)
  • From: Gerald (Jerry) Carter
• [MAXPATROL Security Advisories] Cross site scripting in Invision Power Board
  • From: Alexander Antipov
• Re: Full path disclosure in PHP Links
  • From: Scott T. Cameron
• Test your windows OS
  • From: Berend-Jan Wever
• Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug
  • From: Bipin Gautam
• Re: EEYE: RealPlayer pnen3260.dll Heap Overflow
  • From: Chenghuai Lu
• SUSE Security Announcement: samba (SUSE-SA:2004:035)
  • From: Thomas Biege
• [security bulletin]SSRT4826 rev.0 Mozilla Application Suite for HP Tru64 UNIX Multiple Potential Security Vulnerabilities
  • From: Boren, Rich (SSRT)
• Patch available for critical IBM DB2 Universal Database flaws
  • From: NGSSoftware Insight Security Research
• Re: Buffer Overflow in Spider game
  • From: Steve Kemp
• [ GLSA 200410-02 ] Netpbm: Multiple temporary file issues
  • From: Thierry Carrez
• [FLSA-2004:1324] Updated libxml2 resolves security vulnerability
  • From: Marc Deslauriers
• Full path disclosure in PHP Links
  • From: Nikyt0x Argentina
• FreeBSD Security Advisory FreeBSD-SA-04:15.syscons
  • From: FreeBSD Security Advisories
• [FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities
  • From: Marc Deslauriers
• [FLSA-2004:1325] Updated mod_python packages fix security vulnerability
  • From: Dominic Hargreaves
• [SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
  • From: Martin Schulze
• [LoWNOISE] IPSWITCH WhatsUp Gold 8.03 Remote fr33 exploit
  • From: ET LoWNOISE
• Re: Oracle 9i Union Flaw
  • From: Peter J. Holzer
• Buffer Overflow in Spider game
  • From: Security Team
• [SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free
  • From: Matt Zimmerman
• Re: cdrecord local root exploit
  • From: Solar Designer
• Re:2. Code execution in Icecast 2.0.1(exploit with shellcode)
  • From: me
• In-game format string in Judge Dredd vs. Death 1.01
  • From: Luigi Auriemma
• [FLSA-2004:1733] Updated squirrelmail resolves security vulnerabilities
  • From: Dominic Hargreaves
• Security advisory - Xerces-C++ 2.5.0: Attribute blowup
  • From: Amit Klein (AKsecurity)
• On Polymorphic Evasion
  • From: Phantasmal Phantasmagoria
• dbPowerAmp Buffer Overflow And Dos Vulnerabilities
  • From: GulfTech Security
• Re: cdrecord local root exploit
  • From: Jason T. Miller
• Re: Promiscuous email printing in Canon imageRunner
  • From: Marco Ivaldi
• [ GLSA 200410-01 ] sharutils: Buffer overflows in shar.c and unshar.c
  • From: Thierry Carrez
• Re: Oracle 9i Union Flaw
  • From: Brandon Petty
• Oracle 9i Union Flaw
  • From: Brandon Petty
• Re: cdrdao local root exploit
  • From: newbug Tseng
• MDKSA-2004:104 - Updated samba packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: cdrecord local root exploit
  • From: Greg A. Woods
• Re: Possible GDI Exploit Vector
  • From: Babar Shafiq Nazmi
• Broadcast buffer-overflow in Vypress Messenger 3.5.1
  • From: Luigi Auriemma
• EEYE: RealPlayer pnen3260.dll Heap Overflow
  • From: Marc Maiffret
• SQL Injection vulnerability in bBlog 0.7.3
  • From: James McGlinn
• Multiple Vulnerabilities in AJ-Fork
  • From: Ahmad Muammar
• TSLSA-2004-0051 - samba
  • From: Trustix Security Advisor
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Shawn McMahon
• RE: Diebold Global Election Management System (GEMS) Backdoor
  • From: David Schwartz
• CFMX vulnerability
  • From: Eric Lackey
• [SECURITY] [DSA 553-1] New getmail packages fix root compromise
  • From: Martin Schulze
• RE: Promiscuous email printing in Canon imageRunner
  • From: Jeff Bates
• iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability
  • From: customer service mailbox
• iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability
  • From: customer service mailbox
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Chris Paget
• Re: New whitepaper "The Phishing Guide"
  • From: Aleksandar Milivojevic
• RE: Diebold Global Election Management System (GEMS) Backdoor
  • From: Geoff Vass
• Re:[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: advisories
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Hugo van der Kooij
• Re: directory traversal in ParaChat Server 5.5
  • From: Donato Ferrante
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David F. Skoll
• Re: cdrecord local root exploit
  • From: Jason T. Miller
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Yoav Nir
• Samba Security Announcement -- Potential Arbitrary File Access
  • From: Gerald (Jerry) Carter
• Unicornscan 0.4.2
  • From: robert
• Multiple Vulnerabilities in Silent Storm Portal
  • From: R00tCr4ck
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: David Brodbeck
• TSL-2004-0050 - multi
  • From: Trustix Security Advisor
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Mike Healan
• [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak
  • From: Martin Schulze
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Nick Knouf
• Multiple vulnerabilities in w-agora forum
  • From: Alexander Antipov
• Re: Promiscuous email printing in Canon imageRunner
  • From: Felix Lindner
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: trh
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Polazzo Justin
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: float
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Reed, Phillip C. (LNG-DAY)
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Aleksandar Milivojevic
• [FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities
  • From: Dominic Hargreaves
• directory traversal in ParaChat Server 5.5
  • From: Donato Ferrante
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Bruce Barnett
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: ERACC
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David Schwartz
• Re: New whitepaper "The Phishing Guide"
  • From: Juraj Bednar
• @lex Guestbook (PHP) Include file
  • From: Himeur Nourredine
• [ GLSA 200409-35 ] Subversion: Metadata information leak
  • From: Sune Kloppenborg Jeppesen
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Casper Dik
• Php RFC1867 Upload Vuln. POC Released
  • From: Stefano Di Paola
• Crash in Alpha Black Zero 1.04
  • From: Luigi Auriemma
• Re: Default username/password pairs in ON Command CCM 5.x database backend, Sep 20 2004 2:24PM
  • From: Sym Security
• MSSQL 7.0 DoS
  • From: securma
• Re: Debian netkit telnetd vulnerability
  • From: Matt Zimmerman
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Casper Dik
• RE: Microsoft's GDI Detetection Tool faults
  • From: mgotts
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Colm MacCarthaigh
• Re: New whitepaper "The Phishing Guide"
  • From: Philip Stoev
• Re: Diebold Global Election Management System (GEMS) Backdoor
  • From: Adam Shostack
• MyWebServer 1.0.3
  • From: nekd0
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Seth Breidbart
• RE: Promiscuous email printing in Canon imageRunner
  • From: Eric McCarty
• [FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities
  • From: Dominic Hargreaves
• Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David Wilson
• Re[2]: New whitepaper "The Phishing Guide"
  • From: Karsten Heidrich
• Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit
  • From: iggy popal
• Possible GDI Exploit Vector
  • From: james_love
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Kurt Seifried
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Adam Shostack
• [CLA-2004:870] Conectiva Security Announcement - imlib
  • From: Conectiva Updates
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to
  • From: Gareth Humphries
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David F. Skoll
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Colm Buckley
• Php RFC1867 Upload Vuln. POC Released
  • From: Stefano Di Paola
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jason T. Miller
• directory traversal in ParaChat Server 5.5
  • From: Donato Ferrante
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Jeremy Epstein
• Re: Diebold Global Election Management System (GEMS) Backdoor Account
  • From: Brian Kirkbride
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Dana Hudes
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Matthew Keller
• [security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass
  • From: Boren, Rich (SSRT)
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Craig Paterson
• RE: Promiscuous email printing in Canon imageRunner
  • From: Matthew E. Lauterbach
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Bob Toxen
• Re: New whitepaper "The Phishing Guide"
  • From: Brian Dessent
• RE: Microsoft's GDI Detetection Tool faults
  • From: Scott Jacobson
• [ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm
  • From: Thierry Carrez
• Re: iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D
  • From: Lise Moorveld
• Re: Microsoft's GDI Detetection Tool faults
  • From: albatross
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: David Brodbeck
• Re: GDI Virus in the wild.
  • From: Gerry Eisenhaur
• Re: New whitepaper "The Phishing Guide"
  • From: Chip Andrews
• Yahoo! Store Security Advisory
  • From: Stuart Moore
• MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs.
  • From: Mandrake Linux Security Team
• Multiple XSS Vulnerabilities in Wordpress 1.2
  • From: Thomas Waldegger
• Re: GDI Virus in the wild.
  • From: GuidoZ
• Re: ICMP spoofed source tunneling
  • From: Calum
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Simon
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Coleman
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Patrick J. Kobly
• Vignette Application Portal Unauthenticated Diagnostics
  • From: Advisories
• Re: Diebold Global Election Management System (GEMS) Backdoor
  • From: Crispin Cowan
• MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities
  • From: Mandrake Linux Security Team
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Enrique A. Chaparro
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David Schwartz
• Re: New whitepaper "The Phishing Guide"
  • From: Crispin Cowan
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: David F. Skoll
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Adam Jacob Muller
• Code execution in Icecast 2.0.1
  • From: Luigi Auriemma
• Re: Microsoft's GDI Detetection Tool faults
  • From: the rxmr
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Marco S Hyman
• RE: Microsoft's GDI Detetection Tool faults
  • From: Dowling, Gabrielle
• Re: Microsoft's GDI Detetection Tool faults
  • From: Andreas Marx
• Re: aspWebCalendar /aspWebAlbum: SQL injection
  • From: Steven
• [SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
  • From: Martin Schulze
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Nicholas Knight
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Ryan_Ward
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Greg A. Woods
• Re: New whitepaper "The Phishing Guide"
  • From: Greg A. Woods
• GDI Virus in the wild.
  • From: Ben
• Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David F. Skoll
• iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability
  • From: customer service mailbox
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Seth Breidbart
• Broadcast crash in Chatman 1.5.1 RC1
  • From: Luigi Auriemma
• RE: Diebold Global Election Management System (GEMS) Backdoor
  • From: Paul Wouters
• SQL injection in BroadBoard Instant ASP Message Board
  • From: pigrelax
• [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS
  • From: Hat-Squad Security Team
• [CLA-2004:869] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• Re: HTTP Response Splitting and SQL injection in megabbs forum
  • From: PD9 Software
• Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David F. Skoll
• IPv4 fragmentation --> The Rose Attack
  • From: Gandalf The White
• Re: cdrecord local root exploit
  • From: Dr Andrew C Aitchison
• Re: New whitepaper "The Phishing Guide"
  • From: Daniel Veditz
• New Macromedia Security Zone Bulletins Posted
  • From: Macromedia Security Zone
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Polazzo Justin
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Claudius Li
• RE: New whitepaper "The Phishing Guide"
  • From: Dehner, Benjamin T.
• Motorola Wireless Router WR850G Authentication Circumvention
  • From: Daniel Fabian
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jeremy Epstein
• Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: advisories
• RE: Correction to latest Colsaire advisories
  • From: advisories
• Re: Promiscuous email printing in Canon imageRunner
  • From: Chip Mefford
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jose Rey
• New XSS vulnerabilities in paFileDB 3.1 final
  • From: alireza hassani
• Motorola Wireless Router WR850G Authentication Circumvention
  • From: Daniel Fabian
• [ GLSA 200409-29 ] FreeRADIUS: Multiple Denial of Service vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Heikki Korpela
• NEW GDI+ JPEG Remote Exploit
  • From: John Bissell
• New Macromedia Security Zone Bulletins Postede
  • From: Macromedia Security Zone
• [ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• Microsoft's GDI Detetection Tool faults
  • From: albatross
• Buffer overflow in Zinf 2.2.1 for Win32
  • From: Luigi Auriemma
• Re: New whitepaper "The Phishing Guide"
  • From: Seth Arnold
• TSLSA-2004-0049 - apache
  • From: Trustix Security Advisor
• Re: Microsoft's GDI Detetection Tool faults
  • From: Gadi Evron
• aspWebCalendar /aspWebAlbum: SQL injection
  • From: Pedro Sanches
• Re: ICMP spoofed source tunneling
  • From: raiblehugo
• Re: Microsoft's GDI Detetection Tool faults
  • From: John Bissell
• [ GLSA 200409-32 ] getmail: Filesystem overwrite vulnerability
  • From: Sune Kloppenborg Jeppesen
• Promiscuous email printing in Canon imageRunner
  • From: Andrew Daviel
• Re: ICMP spoofed source tunneling
  • From: Tim Newsham
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Atom 'Smasher'
• Example of JPG Exploit & Shellcode
  • From: javier falbo
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jaeson Schultz
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jacob Appelbaum
• MDKSA-2004:101 - Updated webmin packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• Remote buffer overflow in MDaemon IMAP and SMTP server
  • From: pigrelax
• Macromedia Products Not Affected by MS JPEG/GDIPlus Issue
  • From: Macromedia Security Zone
• Pinnacle ShowCenter Skin Denial of Service
  • From: Marc Ruef
• MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities
  • From: Mandrake Linux Security Team
• Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues
  • From: Sym Security
• Multiple vulnerabilities in ActivePost Standard 3.1
  • From: Luigi Auriemma
• [CLA-2004:868] Conectiva Security Announcement - apache
  • From: Conectiva Updates
• Re: New whitepaper "The Phishing Guide"
  • From: Aleksandar Milivojevic
• Re: ICMP spoofed source tunneling
  • From: fenfire
• Re: ICMP spoofed source tunneling
  • From: sin
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David Querin
• MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• Re: ICMP spoofed source tunneling
  • From: Dave Paris
• [ GLSA 200409-30 ] xine-lib: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Barry Fitzgerald
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Marvin Bellamy
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Mike Ely
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Craig Paterson
• [CLA-2004:866] Conectiva Security Announcement - qt3
  • From: Conectiva Updates
• And More Advanced SQL Injection...
  • From: Stefano Di Paola
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Hollis Johnson
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Rainer Duffner
• Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0
  • From: Matthias Wimmer
• New whitepaper "The Phishing Guide"
  • From: Gunter Ollmann (NGS)
• iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability
  • From: customer service mailbox
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Polazzo Justin
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Lorne J. Leitman
• [SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution
  • From: Martin Schulze
• Pinnacle ShowCenter 1.51 possible DoS
  • From: Jérôme
• [ GLSA 200409-28 ] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities
  • From: Thierry Carrez
• [CLA-2004:867] Conectiva Security Announcement - spamassassin
  • From: Conectiva Updates
• Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products
  • From: Mike Sues
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Homer
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jay Hennigan
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Gene Cronk
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: steve menard
• Re: ICMP spoofed source tunneling
  • From: fenfire
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Gene Cronk
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jaeson Schultz
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Polazzo Justin
• Re: glFTPd local stack buffer overflow
  • From: Bloody_A
• [ GLSA 200409-27 ] glFTPd: Local buffer overflow vulnerability
  • From: Thierry Carrez
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: pressinfo
• Netscape NSS Library Vulnerability Affects Sun Java Enterprise System
  • From: Jérôme
• ICMP spoofed source tunneling
  • From: Max Tulyev
• Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004)
  • From: Luigi Auriemma
• [SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution
  • From: Martin Schulze
• CA UniCenter Management Portal Username Enumeration Vulnerability
  • From: thomas adams
• Multiple Vulnerabilities In EmuLive Server4
  • From: GulfTech Security
• Re: Debian netkit telnetd vulnerability
  • From: Solar Designer
• Re: Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability.
  • From: Tim Broeker
• [ GLSA 200409-24 ] Foomatic: Arbitrary command execution in foomatic-rip filter
  • From: Joshua J. Berry
• Re: Posible security bug in phpMyWebhosting
  • From: Udo Mueller
• Local root compromise possible with getmail
  • From: David Watson
• Vulnerabilities in TUTOS
  • From: Joxean Koret
• [SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution
  • From: Martin Schulze
• Multiple Full Disclosure Path in postnuke 0.750 phoenix
  • From: FAiN182
• Multiple Full Disclosure Path in postnuke 0.750 phoenix
  • From: Jérôme
• FreeBSD Security Advisory FreeBSD-SA-04:14.cvs
  • From: FreeBSD Security Advisories
• Default username/password pairs in ON Command CCM 5.x database backend
  • From: Jonas Olsson
• Vulnerabilities in TUTOS
  • From: Joxean Koret
• [ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities
  • From: Thierry Carrez
• Serious Security Issue in Windows XP SP2's Firewall
  • From: Andreas Marx
• CoD United Offensive boom boom
  • From: Luigi Auriemma
• [ GLSA 200409-25 ] CUPS: Denial of service vulnerability
  • From: Thierry Carrez
• glFTPd local stack buffer overflow
  • From: CoKi
• Debian netkit telnetd vulnerability
  • From: Michal Zalewski
• Tool announcement: fakebust
  • From: Michal Zalewski
• AOL Groups/AIM Information Disclosure
  • From: Link Linkovich
• wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities
  • From: Paul Johnston
• Microsoft WordPerfect 5.x Converter Heap Overflow
  • From: NGSSoftware Insight Security Research Advisory
• Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: advisories
• ADVISORY: security hole (http response splitting) in snitz forums 2000
  • From: Maestro De-Seguridad
• RE: www.proboards.com / YaBB XSS Vuln
  • From: GulfTech Security
• GoogleToolbar:About -- Allows Script Injection
  • From: ViPeR
• RE: JPEG Processing BOF Proof Of Concept
  • From: Cassidy Macfarlane
• Re: www.proboards.com / YaBB XSS Vuln
  • From: Patrick Clinger
• MDKSA-2004:097 - Updated cups packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• Php Vulnerability N. 2
  • From: Stefano Di Paola
• Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David F. Skoll
• Re: GoogleToolbar:About -- Allows Script Injection
  • From: Rafel Ivgi, The-Insider
• Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: Greg A. Woods
• Important message to Bugtraq Subscribers!
  • From: Daniel Bertrand
• Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code)
  • From: kers0r
• Freeze in Pigeon Server 3.02.0143
  • From: Luigi Auriemma
• Sudo Exploit by Rosiello Security
  • From: Angelo Rosiello
• Re: Multiple Vulnerabilities in phpScheduleIt
  • From: Nick Korbel
• Corsaire Security Advisory - Multiple vendor MIME field whitespace issue
  • From: advisories
• Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability.
  • From: khoaimi
• Re: FreeBSD kernel buffer overflow
  • From: Tim Newsham
• Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David F. Skoll
• RhinoSoft DNS4ME HTTP Server Vulnerabilities
  • From: GulfTech Security
• Re: FreeBSD kernel buffer overflow
  • From: Wesley Shields
• Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue
  • From: advisories
• RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
  • From: Michael Wilson, Contractor
• MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities
  • From: Mandrake Linux Security Team
• [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit
  • From: admin
• RsyncX vulnerabilities
  • From: Matt Johnston
• Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Gary Warner
• Microsoft WordPerfect 5.x Converter Heap Overflow
  • From: NGSSoftware Insight Security Research
• FreeBSD kernel buffer overflow
  • From: gerarra
• Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
  • From: Chris Norton
• Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: Borja Marcos
• iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability
  • From: customer service mailbox
• wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities
  • From: Paul Johnston
• iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability
  • From: customer service mailbox
• RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Parks, Matt
• [ GLSA 200409-19 ] Heimdal: ftpd root escalation
  • From: Sune Kloppenborg Jeppesen
• RE: Correction to latest Colsaire advisories
  • From: David Litchfield
• CESA-2004-004: libXpm
  • From: chris
• [sudo-announce] Sudo version 1.6.8p1 now available (fwd)
  • From: je
• MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities
  • From: Mandrake Linux Security Team
• JPEG Processing BOF Proof Of Concept
  • From: GulfTech Security
• Fwd: Theo's presentation on exploit prevention
  • From: Bas Alberts
• XSA-2004-4: multiple string overflows
  • From: Michael Roitzsch
• Re: cdrecord local root exploit
  • From: Jason T. Miller
• XSA-2004-5: heap overflow in DVD subpicture decoder
  • From: Michael Roitzsch
• www.proboards.com / YaBB XSS Vuln
  • From: admin
• RE: Correction to latest Colsaire advisories
  • From: advisories
• TSLSA-2004-0047 - multi
  • From: Trustix Security Advisor
• [SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities
  • From: Martin Schulze
• RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Angelidis, Fotis(NSASOUDABAY)
• Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: sheep explode
• RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Polazzo Justin
• PHP Vulnerability N. 1
  • From: Stefano Di Paola
• MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE]
  • From: bashis
• [SECURITY] [DSA 545-1] New cupsys packages fix denial of service
  • From: Martin Schulze
• [RLSA_04-2004] QNX crrtrap possible race condition vulnerability
  • From: Julio Cesar Fort
• Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David F. Skoll
• RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Polazzo Justin
• Re: Correction to latest Colsaire advisories
  • From: Andreas Marx
• Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
  • From: Michael Scheidell
• Re: cdrecord local root exploit
  • From: Volker Kuhlmann
• Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: David Covin
• SUSE Security Announcement: cups (SUSE-SA:2004:031)
  • From: Sebastian Krahmer
• Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow
  • From: Nick D.
• SA04-002 - Apache config file env variable buffer overflow
  • From: jonas . thambert
• CESA-2004-005: gtk+ XPM decoder
  • From: chris
• [ANNOUNCE] Apache HTTP Server 2.0.51 Released
  • From: Sander Striker
• MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities
  • From: Mandrake Linux Security Team
• [OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell)
  • From: OpenPKG
• [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba)
  • From: OpenPKG
• McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE]
  • From: Jérôme
• MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic
  • From: Mandrake Linux Security Team
• SUSE Security Announcement: apache2 (SUSE-SA:2004:032)
  • From: Ludwig Nussel
• MDKSA-2004:093 - Updated squid packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• New Mozilla, Firefox and Thunderbird releases fix critical security issues
  • From: Gaël Delalleau
• SMC7004VWBR / SMC7008ABR "spoofing" vulnerability.
  • From: Jimmy Scott
• ADVISORY: http response splitting in snipsnap
  • From: Maestro De-Seguridad
• Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution [MS04-028]
  • From: Jérôme
• Corsaire Security Advisory - Multiple vendor MIME field quoting issue
  • From: advisories
• Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: advisories
• Rainbow tables for LM/NTLMv1 authentication
  • From: Hidenobu Seki
• [ GLSA 200409-18 ] cdrtools: Local root vulnerability in cdrecord if set SUID root
  • From: Sune Kloppenborg Jeppesen
• Correction to latest Colsaire advisories
  • From: 3APA3A
• Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability
  • From: Jérôme
• Inkra 1504GX DoS vulnerability in conducting IP protocol
  • From: felix zhou
• [RLSA_02-2004] QNX Photon multiple buffer overflows
  • From: Julio Cesar Fort
• [ GLSA 200409-17 ] SUS: Local root vulnerability
  • From: Sune Kloppenborg Jeppesen
• Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue
  • From: advisories
• Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue
  • From: advisories
• [RLSA_03-2004] QNX ftp client format string bug
  • From: Julio Cesar Fort
• [XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug
  • From: bima tampan
• [SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory
  • From: Martin Schulze
• SUS 2.0.2 local root vulnerability
  • From: LSS Security
• Corsaire Security Advisory - Multiple vendor MIME separator issue
  • From: advisories
• QNX crrtrap possible race condition vulnerability
  • From: Jérôme