Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

532 messages starting Jan 31 05 and ending Feb 26 05
Date index | Thread index | Author index

• SAME LADY, DIFFERENT HAT: REELY http-equiv () excite com (Jan 31)
• [ Security Bulletin] SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service (DoS) Boren, Rich (SSRT) (Feb 01)
• [USN-71-1] PostgreSQL vulnerability Martin Pitt (Feb 01)
• [SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution Martin Schulze (Feb 01)
• [SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities Martin Schulze (Feb 01)
• [ GLSA 200502-01 ] FireHOL: Insecure temporary file creation Matthias Geerdsen (Feb 01)
• Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Trog (Feb 01)
  • Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Dack (Feb 01)
    • Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Darren Bounds (Feb 02)
    • Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Trog (Feb 02)
      • Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues exon (Feb 02)
• Re:WinAmp POC: How to get 900+ shellcodespace!? lists (Feb 02)
  • Re[2]: WinAmp POC: How to get 900+ shellcodespace!? Viktor E Larionov (Feb 02)
• [SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions Martin Schulze (Feb 02)
• MDKSA-2005:028 - Updated ncpfs packages fix vulnerabilities Mandrakelinux Security Team (Feb 02)
• SQL injection in EveryDNS.net Service Calum Power (Feb 02)
• MDKSA-2005:026 - Updated imap packages fix authentication vulnerability Mandrakelinux Security Team (Feb 02)
• MDKSA-2005:027 - Updated chbg packages fix vulnerability Mandrakelinux Security Team (Feb 02)
• Limited buffer-overflow in Painkiller 1.35 Luigi Auriemma (Feb 02)
• 7a69Adv#19 - ZipGenius unpack path disclosure Albert Puigsech Galicia (Feb 02)
• [USN-72-1] Perl vulnerabilities Martin Pitt (Feb 02)
• [ GLSA 200502-03 ] enscript: Multiple vulnerabilities Thierry Carrez (Feb 02)
• [FLSA-2005:2255] Updated zip package fixes security issue Marc Deslauriers (Feb 02)
• [FLSA-2005:2272] Updated unarj package fixes security issue Marc Deslauriers (Feb 02)
• [ GLSA 200502-02 ] UW IMAP: CRAM-MD5 authentication bypass Sune Kloppenborg Jeppesen (Feb 02)
• 7a69Adv#20 - ZipGenius unpack one-folder path disclosure Albert Puigsech Galicia (Feb 02)
• 7a69Adv#21 - WinRAR unpack one-folder path disclosure Albert Puigsech Galicia (Feb 02)
• [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities chewkeong (Feb 02)
• [FLSA-2005:2187] Updated freeradius packages fix security flaws Marc Deslauriers (Feb 02)
• Portcullis Advisory 05-005 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Portcullis Advisory 05-001 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Portcullis Advisory 05-006 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Portcullis Advisory 05-007 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Portcullis Advisory 05-008 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Gallery is still vulnerable to Cross-site Scripting attacks Jon Keating (Feb 02)
• Re: [Full-Disclosure] [ GLSA 200501-40 ] ngIRCd: Buffer overflow qobaiashi (Feb 02)
• Windows Security Checklists - 10 Parts Paul Laudanski (Feb 02)
• Portcullis Advisory 05-009 Update, Webseries Payment Application Paul J Docherty (Feb 02)
• Google getting smarter ?!?! John Madden (Feb 02)
  • RE: Google getting smarter ?!?! Scott Jacobson (Feb 03)
• [ GLSA 200502-04 ] Squid: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Feb 02)
• SV: Zyxel / Netgear and probably other routers leaking information. Jens Kalvik (Feb 02)
• [ GLSA 200502-05 ] Newspost: Buffer overflow vulnerability Luke Macken (Feb 03)
• MDKSA-2005:029 - Updated vim packages fix vulnerabilities Mandrakelinux Security Team (Feb 03)
• New presentation: Advanced SQL Injection in Oracle databases Esteban Martínez Fayó (Feb 03)
• RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT] cybertronic (Feb 03)
• ngIRCd <= v0.8.2 Format String Vulnerability CoKi (Feb 03)
• Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py Guido van Rossum (Feb 03)
• DoS in LANChat Pro Revival 1.666c Donato Ferrante (Feb 03)
• [Linux kernel ipv6_setsockopt integer overflow] qobaiashi (Feb 03)
  • Re: [Linux kernel ipv6_setsockopt integer overflow] Dan Yefimov (Feb 03)
• [USN-73-1] Python vulnerability Martin Pitt (Feb 03)
• [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4 laurent oudot (Feb 03)
  • Re: [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4 Denis Jedig (Feb 04)
• Wireless networks/Default Admin username security problem in Croatia Radoslav Dejanović (Feb 04)
  • Re: Wireless networks/Default Admin username security problem in Croatia Denis Jedig (Feb 05)
• [SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access Martin Schulze (Feb 04)
• Exploit For Savant Web Server 3.1 (tested on win2003) CorryL (Feb 04)
• [SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading Martin Schulze (Feb 04)
• Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12 Jonathan Rockway (Feb 04)
  • Re: Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12 Nicolas Gregoire (Feb 05)
• Re: Squirrelmail vacation v0.15 local root exploit p dont think (Feb 04)
• [SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities Martin Schulze (Feb 04)
• Webroot Software Resigns from COAST Paul Laudanski (Feb 05)
• Foxmail Server Remote Buffer Overflow Vulnerability Xin Ouyang (Feb 05)
• directory traversal in RaidenHTTPD 1.1.27 Donato Ferrante (Feb 05)
• [PersianHacker.NET 200502-05] WWWoard passwd Pedram Hayati (Feb 05)
  • <Possible follow-ups>
  • [PersianHacker.NET 200502-05] WWWoard passwd Andrew guess (Feb 08)
• [USN-74-1] Postfix vulnerability Martin Pitt (Feb 05)
  • Re: [USN-74-1] Postfix vulnerability Wietse Venema (Feb 07)
• [USN-75-1] cpio vulnerability Martin Pitt (Feb 05)
• [USN-74-2] Fixed Postfix packages for USN-74-1 Martin Pitt (Feb 05)
• [SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities Martin Schulze (Feb 07)
• XSS Vulnerability at thefacebook.com Jonathan Rockway (Feb 07)
• VOIPSEC VoIP Security Aliance (Feb 07)
• New version of ike-scan (IPsec IKE scanner) available - v1.7 Roy Hills (Feb 07)
• [OSX Finder] DS_Store arbitrary file overwrite vulnerability. Vade 79 (Feb 07)
• DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation' KF (lists) (Feb 07)
• Vulnerability in 3Com 3CServer v1.1 mandragore (Feb 07)
• DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG buffer overflow' KF (lists) (Feb 07)
• [USN-76-1] Emacs vulnerability Martin Pitt (Feb 07)
• [ GLSA 200502-07 ] OpenMotif: Multiple vulnerabilities in libXpm Thierry Carrez (Feb 07)
• [USN-77-1] Squid vulnerabilities Martin Pitt (Feb 07)
• Re: [Contact] Motorola broadband appliance team? Grzegorz Cegielski (Feb 07)
• [ GLSA 200502-06 ] LessTif: Multiple vulnerabilities in libXpm Thierry Carrez (Feb 07)
• [Security Bulletin] HP Tru64 Unix Mozilla Application Suite 1.7.3 Remote Denial of Service (DoS) Boren, Rich (SSRT) (Feb 07)
• iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability iDefense Customer Service (Feb 07)
• [ GLSA 200502-08 ] PostgreSQL: Local privilege escalation Luke Macken (Feb 07)
• OpenServer 5.0.6 OpenServer 5.0.7 : Vulnerabilities in long-lived TCP connections / Rose attack please_reply_to_security (Feb 07)
• Firedragging [Firefox 1.0] mikx (Feb 07)
• Fireflashing [Firefox 1.0] mikx (Feb 07)
  • Re: [Full-Disclosure] Fireflashing [Firefox 1.0] Jelmer Kuperus (Feb 12)
• Firetabbing [Firefox 1.0] mikx (Feb 07)
• [SePro Bugtraq] SQL-Injection in PerlDesk 1.x deluxe (Feb 07)
• GMail / Google Groups ESMTP software b0f Michal Zalewski (Feb 07)
  • <Possible follow-ups>
  • Re: GMail / Google Groups ESMTP software b0f Heather Adkins (Feb 09)
• UnixWare 7.1.4 : racoon multilple security issues please_reply_to_security (Feb 07)
• International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Brandon Kovacs (Feb 07)
  • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Simon Østengaard (Feb 09)
  • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Will Kamishlian (Feb 10)
    • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Peter J. Holzer (Feb 10)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Scott Gifford (Feb 11)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Neil W Rickert (Feb 12)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Scott Gifford (Feb 12)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Gwendolynn ferch Elydyr (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Gwendolynn ferch Elydyr (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Gwendolynn ferch Elydyr (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Ron DuFresne (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Seth Breidbart (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. George Capehart (Feb 16)
      • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 14)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Vincent Archer (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Thor (Hammer of God) (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Thor (Hammer of God) (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 16)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Stefan Paletta (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Sebastian (Feb 15)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Stefan Paletta (Feb 17)
      • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 16)
      • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Benjamin Franz (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 17)
      • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Janusz A. Urbanowicz (Feb 12)
      • Message not available
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Janusz A. Urbanowicz (Feb 16)
• CodeCon Reminder Len Sassaman (Feb 07)
• UnixWare 7.1.3 UnixWare 7.1.1 : Vulnerabilities in long-lived TCP connections / Rose attack please_reply_to_security (Feb 07)
• iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability iDefense Customer Service (Feb 08)
  • Re: iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability Shiva Persaud (Feb 10)
• php-fusion 4.x vuln thegreatone2176 (Feb 08)
• UnixWare 7.1.4 : vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands please_reply_to_security (Feb 08)
• RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN) Scovetta, Michael V (Feb 08)
  • RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN) R Dicaire (Feb 09)
• AppleFileServer Denial of Service. nemo (Feb 08)
• OpenServer 5.0.6 OpenServer 5.0.7 : enable command line buffer overflows please_reply_to_security (Feb 08)
• CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability CORE Security Technologies Advisories (Feb 08)
• iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability iDefense Customer Service (Feb 08)
  • Re: iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability Shiva Persaud (Feb 10)
• [SECURITY] [DSA 670-1] New emacs20 packages fix arbitrary code execution Martin Schulze (Feb 08)
• [SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution Martin Schulze (Feb 08)
• mailman email harvester Bernhard Kuemel (Feb 08)
  • secure-roster script to address mailman email harvester Neal McBurnett (Feb 10)
• Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Jerome ATHIAS (Feb 08)
• SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory Roy Hills (Feb 08)
• EEYE: Windows SMB Client Transaction Response Handling Vulnerability Marc Maiffret (Feb 08)
• Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994 Luigi Auriemma (Feb 08)
• [SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories chewkeong (Feb 08)
• [SCL-2005.002] - IDN Feature Workaround via proxy.pac Scovetta, Michael V (Feb 08)
• GREENAPPLE Release Dave Aitel (Feb 09)
• Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability Rafel Ivgi (Feb 09)
  • Re: Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability Derek Martin (Feb 10)
• MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit ATmaCA ATmaCA (Feb 09)
  • RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Andrew Hunter (Feb 09)
    • RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Color Inc. (Feb 10)
  • RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Andrew Hunter (Feb 10)
  • <Possible follow-ups>
  • RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Thor Larholm (Feb 10)
• Internet Explorer zone spoofing with encoded URLs Jouko Pynnonen (Feb 09)
• MDKSA-2005:031 - Updated perl packages fix multiple vulnerabilities Mandrakelinux Security Team (Feb 09)
• [SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities chewkeong (Feb 09)
• [Security Bulletin] - SSRT4883 HP-UX ftpd remote privileged access Boren, Rich (SSRT) (Feb 09)
• Mercuryboard <= 1.1.1 Working Sql Injection Zeelock (Feb 09)
• [ GLSA 200502-09 ] Python: Arbitrary code execution through SimpleXMLRPCServer Thierry Carrez (Feb 09)
• [ GLSA 200502-10 ] pdftohtml: Vulnerabilities in included Xpdf Matthias Geerdsen (Feb 09)
• Several SQL injection bugs in myPHP Forum v.1.0 foster GHC (Feb 09)
• Some details about MS05-007 security bulletin Jean-Baptiste Marchand (Feb 09)
• RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs. Randal, Phil (Feb 09)
  • Re: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs. Marcin Sochacki (Feb 10)
  • <Possible follow-ups>
  • RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs. Michael Wojcik (Feb 14)
• Patch available for high risk IBM DB2 Universal Database flaw NGSSoftware Insight Security Research (Feb 09)
• CFP for SyScAN'05 organiser () syscan org (Feb 09)
• [SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution Martin Schulze (Feb 10)
• SQL injection in Chipmunk forums foster GHC (Feb 10)
• Paper: Solution to Red Hat PIE Protection Zarul Shahrin (Feb 10)
• CMS Core SQL injection foster GHC (Feb 10)
• yet another DSL modem backdoor - Mentor (Conexant) Adam Laurie (Feb 10)
  • Re: yet another DSL modem backdoor - Mentor (Conexant) Philip Barnham (Feb 10)
• [Security Bulletin] SSRT4861 rev.0 - HP-UX BIND9.2.0 remote Denial of Service (DoS) Boren, Rich (SSRT) (Feb 10)
• SUSE Security Announcement: squid (SUSE-SA:2005:006) Thomas Biege (Feb 10)
• [SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities Martin Schulze (Feb 10)
• iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability iDefense Customer Service (Feb 10)
  • Re: iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability Shiva Persaud (Feb 10)
• [SECURITY] [DSA 673-1] New evolution packages fix arbitrary code execution as root Martin Schulze (Feb 10)
• iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability iDefense Customer Service (Feb 10)
  • Re: iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability Shiva Persaud (Feb 10)
• Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders. Sean Sosik-Hamor (Feb 10)
• iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability iDefense Customer Service (Feb 10)
  • Re:iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability Shiva Persaud (Feb 11)
• [ GLSA 200502-11 ] Mailman: Directory traversal vulnerability Sune Kloppenborg Jeppesen (Feb 10)
• [USN-78-1] Mailman vulnerability Martin Pitt (Feb 10)
• [FLSA-2005:1943] Updated libpng resolves security vulnerabilities Dominic Hargreaves (Feb 10)
• [FLSA-2005:1906] Updated abiword packages fix security issue Dominic Hargreaves (Feb 10)
• [USN-79-1] PostgreSQL vulnerabilities Martin Pitt (Feb 10)
• [SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit Martin Schulze (Feb 10)
• HACKING WITH JAVASCRIPT hictor ertd (Feb 10)
  • Re: HACKING WITH JAVASCRIPT Cleiton Martins (Feb 11)
  • Re: HACKING WITH JAVASCRIPT Jim Halfpenny (Feb 11)
• Symantec UPX Parsing Engine Heap Overflow Neil Watson (Feb 10)
  • Re: Symantec UPX Parsing Engine Heap Overflow James Riden (Feb 11)
• ASPjar guestbook (Injection in login page) farhad koosha (Feb 10)
• iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow iDefense Customer Service (Feb 10)
• Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0 Luigi Auriemma (Feb 11)
• UPDATE: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability Luke Macken (Feb 11)
• TSLSA-2005-0003 - multi Trustix Security Advisor (Feb 11)
• [SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service Martin Schulze (Feb 11)
• MDKSA-2005:032 - Updated cpio packages fix vulnerability Mandrakelinux Security Team (Feb 11)
• MDKSA-2005:033 - Updated enscript packages fix multiple vulnerabilities Mandrakelinux Security Team (Feb 11)
• MDKSA-2005:034 - Updated squid packages fix multiple vulnerabilities Mandrakelinux Security Team (Feb 11)
• MDKSA-2005:035 - Updated python packages fix vulnerability Mandrakelinux Security Team (Feb 11)
• MDKSA-2005:036 - Updated MySQL packages fix temporary file vulnerability Mandrakelinux Security Team (Feb 11)
• Remotely Controlling XSS Attacks - Announcing XSS-Proxy Rager, Anton (Anton) (Feb 11)
• [SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities Martin Schulze (Feb 11)
• insecure temporary file creation in kdelibs 3.3.2 Davide Madrisan (Feb 11)
• [SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root Martin Schulze (Feb 11)
• [SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution Martin Schulze (Feb 11)
• [FLSA-2005:2188] Updated gaim package resolves security issues Marc Deslauriers (Feb 11)
• [USN-81-1] iptables vulnerability Martin Pitt (Feb 11)
• [USN-80-1] mod_python vulnerability Martin Pitt (Feb 11)
• [FLSA-2005:2352] Updated Xpdf package fixes security issues Marc Deslauriers (Feb 11)
• [FLSA-2005:2252] Updated iptables packages resolve security issues Marc Deslauriers (Feb 11)
• [FLSA-2005:2353] Updated gpdf package fixes security issues Marc Deslauriers (Feb 11)
• BrightStor ARCserve Backup buffer overflow PoC cybertronic (Feb 11)
  • Re: BrightStor ARCserve Backup buffer overflow PoC H D Moore (Feb 12)
  • Re: BrightStor ARCserve Backup buffer overflow PoC H D Moore (Feb 14)
  • <Possible follow-ups>
  • Re: BrightStor ARCserve Backup buffer overflow PoC Williams, James K (Feb 16)
• Zone Labs Security Alert ZL05-01: Zone Labs IPC Instability Zone Labs Product Security (Feb 11)
• SYM05-003 Symantec UPX Parsing Engine Heap Overflow secure (Feb 11)
• [ GLSA 200502-13 ] Perl: Vulnerabilities in perl-suid wrapper Thierry Carrez (Feb 11)
• [ GLSA 200502-12 ] Webmin: Information leak in Gentoo binary package Thierry Carrez (Feb 11)
• iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability iDefense Customer Service (Feb 11)
• MDKSA-2005:032-1 - Updated cpio packages fix vulnerability Mandrakelinux Security Team (Feb 12)
• Symantec UPX issue solution Roger A. Grimes (Feb 12)
• Re: Advanced Guestbook 2.2 -- SQL Injection Exploit mary (Feb 12)
• Infostring crash and shutdown in the Quake 3 engine Luigi Auriemma (Feb 12)
• exim auth_spa_server() PoC exploit Yuri Gushin (Feb 12)
• [CLA-2005:924] Conectiva Security Announcement - XFree86 Conectiva Updates (Feb 14)
• [SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files Martin Schulze (Feb 14)
• [SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability Martin Schulze (Feb 14)
• [ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability Sune Kloppenborg Jeppesen (Feb 14)
• [ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability Luke Macken (Feb 14)
• [ GLSA 200502-15 ] PowerDNS: Denial of Service vulnerability Matthias Geerdsen (Feb 14)
• AWStats <= 6.4 Multiple vulnerabilities GHC (Feb 14)
  • Re: AWStats <= 6.4 Multiple vulnerabilities Ondra Holecek (Feb 15)
    • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Jamie Pratt (Feb 15)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Ondra Holecek (Feb 15)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Herman Sheremetyev (Feb 15)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Jamie Pratt (Feb 15)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Thom Craver (Feb 16)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Micah Brandon (Feb 16)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Matt Wilder (Feb 17)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Ondra Holecek (Feb 15)
      • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? twebster (Feb 15)
• [SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access Martin Schulze (Feb 14)
• Credit Card Phishing with executable download Gandalf The White (Feb 14)
• eBay Account Phishing with eBay Redirect Steven (Feb 14)
  • Re: eBay Account Phishing with eBay Redirect Josh Tolley (Feb 14)
    • Re: eBay Account Phishing with eBay Redirect Nick FitzGerald (Feb 15)
    • Re: eBay Account Phishing with eBay Redirect Jonathan Rockway (Feb 15)
      • RE: eBay Account Phishing with eBay Redirect Thomas T. Evans, III (Feb 15)
  • <Possible follow-ups>
  • Re: eBay Account Phishing with eBay Redirect Jay Calvert (Feb 15)
  • RE: eBay Account Phishing with eBay Redirect Israel Torres (Feb 15)
• vbulletin 3.0.x PHP code execution AL3NDALEEB (Feb 14)
  • Re: vbulletin 3.0.x PHP code execution pokley (Feb 15)
  • Re: vbulletin 3.0.x PHP code execution pokley (Feb 16)
  • <Possible follow-ups>
  • Re: vbulletin 3.0.x PHP code execution AL3NDALEEB . (Feb 16)
• Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 James Lay (Feb 14)
• [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities John Cobb (Feb 14)
• [ GLSA 200502-17 ] Opera: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Feb 14)
• [ GLSA 200502-19 ] PostgreSQL: Buffer overflows in PL/PgSQL parser Sune Kloppenborg Jeppesen (Feb 14)
• [SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution Martin Schulze (Feb 15)
• ASPjar Guestbook login.asp not official patch CorryL (Feb 15)
• [SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution Martin Schulze (Feb 15)
• MDKSA-2005:037 - Updated mailman packages fix directory traversal vulnerability Mandrakelinux Security Team (Feb 15)
• IE6 SP1 - Click N Crash ViPeR (Feb 15)
  • Re: IE6 SP1 - Click N Crash is old news Berend-Jan Wever (Feb 15)
  • <Possible follow-ups>
  • Re: IE6 SP1 - Click N Crash Robert ONeal (Feb 17)
• Scottrader Application Exploit Ben Efros (Feb 15)
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction James Lay (Feb 15)
  • RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction Joe Granto (Feb 16)
• Scottsave.com Trade History Exploit Ben Efros (Feb 15)
• [NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability John Cobb (Feb 15)
• Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Jeffrey Wilkinson (Feb 15)
• RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? William Pratt (Feb 15)
  • <Possible follow-ups>
  • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? K-OTiK Security (Feb 16)
  • RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? Michael Scheidell (Feb 17)
  • Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3? newbug Tseng (Feb 19)
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 Threlkeld, Richard (Feb 15)
• RE: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185 Randal, Phil (Feb 15)
  • Re: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 Thor (Hammer of God) (Feb 16)
• XSS in MySpace.com RuWeb.net and Primus.com Chris (Feb 15)
• [Full Disclosure] Using DHTML XSS to launch HHCTRL exploit Valentin Avram (Feb 16)
• [CLA-2005:925] Conectiva Security Announcement - evolution Conectiva Updates (Feb 16)
• MDKSA-2005:038 - Updated emacs/xemacs packages fix vulnerability Mandrakelinux Security Team (Feb 16)
• [KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi Dirk Mueller (Feb 16)
  • <Possible follow-ups>
  • [KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi Dirk Mueller (Feb 16)
• [hackgen-2005-#003] - SQL injection bugs in DCP-Portal Exoduks (Feb 16)
• [ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability Matthias Geerdsen (Feb 16)
• xprobe2 v0.2.2 released Ofir Arkin (Feb 16)
  • Re: xprobe2 v0.2.2 released Stan Bubrouski (Feb 17)
• [ GLSA 200502-23 ] KStars: Buffer overflow in fliccd Sune Kloppenborg Jeppesen (Feb 16)
• UPDATE: [ GLSA 200501-36 ] AWStats: Remote code execution Thierry Carrez (Feb 16)
• [ GLSA 200502-18 ] VMware Workstation: Untrusted library search path Thierry Carrez (Feb 16)
• Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software Maximillian Dornseif (Feb 16)
• Blind Sql-Injection in MySQL Databases Zeelock (Feb 16)
• RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 16)
  • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 16)
    • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Vincent Archer (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Rainer Duffner (Feb 19)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 17)
      • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. David Schwartz (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 17)
    • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Thor (Hammer of God) (Feb 17)
      • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. bkfsec (Feb 17)
  • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Nick FitzGerald (Feb 17)
  • <Possible follow-ups>
  • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Bill Brown (Feb 16)
  • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. lyal.collins (Feb 16)
  • RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Tosoni (Feb 17)
    • Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Riccardo Murri (Feb 19)
• [USN-82-1] Linux kernel vulnerabilities Martin Pitt (Feb 16)
• [ GLSA 200502-20 ] Emacs, XEmacs: Format string vulnerabilities in movemail Thierry Carrez (Feb 16)
• [ GLSA 200502-21 ] lighttpd: Script source disclosure Thierry Carrez (Feb 16)
• [SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution Martin Schulze (Feb 16)
• [USN-83-1] LessTif 2 vulnerabilities Martin Pitt (Feb 16)
• SHA-1 broken Gadi Evron (Feb 16)
  • Re: SHA-1 broken Kent Borg (Feb 17)
  • Re: SHA-1 broken Michael Cordover (Feb 17)
    • Re: SHA-1 broken dullien (Feb 19)
    • Re: SHA-1 broken D.J. Capelis (Feb 19)
      • Re: SHA-1 broken Michael Cordover (Feb 20)
    • Re: SHA-1 broken Dan Harkless (Feb 19)
  • Re: SHA-1 broken Robert Sussland (Feb 17)
    • Re: SHA-1 broken dullien (Feb 19)
      • Re: SHA-1 broken Darren Reed (Feb 19)
      • Re: SHA-1 broken dullien (Feb 19)
      • Re: SHA-1 broken Tollef Fog Heen (Feb 19)
      • Re: SHA-1 broken Denis Jedig (Feb 21)
  • Re: SHA-1 broken Steve Friedl (Feb 17)
  • Re: SHA-1 broken Jonathan G. Lampe (Feb 17)
  • <Possible follow-ups>
  • RE: SHA-1 broken Scovetta, Michael V (Feb 17)
    • RE: SHA-1 broken Frank Knobbe (Feb 21)
  • RE: SHA-1 broken Michael Silk (Feb 19)
    • Re: SHA-1 broken exon (Feb 19)
      • Re: SHA-1 broken Peter J. Holzer (Feb 21)
    • Re: SHA-1 broken Brian May (Feb 19)
  • Re: SHA-1 broken Michael Silk (Feb 19)
    • Re: SHA-1 broken Anatole Shaw (Feb 19)
      • Re: SHA-1 broken Michael Silk (Feb 19)
      • Re: SHA-1 broken peeon+securityfocus (Feb 21)
      • Re: SHA-1 broken Peter Jeremy (Feb 21)
  • Re: SHA-1 broken securityfocus (Feb 19)
    • Re: SHA-1 broken Damian Menscher (Feb 21)
    • Re: SHA-1 broken Paul Johnston (Feb 21)
  • Re: SHA-1 broken Michael Silk (Feb 21)
    • Re: SHA-1 broken exon (Feb 21)
• Update Your Bookmarks Amit Klein (AKsecurity) (Feb 16)
• [Security Bulletin] SSRT5893 rev.0 - HP Web-enabled Management Software Remote Buffer Overflow Boren, Rich (SSRT) (Feb 16)
• RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction Threlkeld, Richard (Feb 16)
• [PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability PersianHacker Team (Feb 16)
• NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+ TAC (Feb 16)
• RE: BrightStor ARCserve Backup buffer overflow PoC (fix available) Williams, James K (Feb 17)
• XSS vulnerabilty in ASP.Net [with details] Andir Andir (Feb 17)
• MDKSA-2005:039 - Updated rwho packages fix vulnerability Mandrakelinux Security Team (Feb 17)
• RECON 2005 CFP [Montreal, Canada] dataworm (Feb 17)
• [ GLSA 200502-24 ] Midnight Commander: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Feb 17)
• Invision Power Boards 1.3.1 FINAL XSS Exploit Daniel A . (Feb 17)
• Dangers of discarding duplicated messages Adrian Bunk (Feb 17)
  • Re: Dangers of discarding duplicated messages Maciej Soltysiak (Feb 19)
    • Re: Dangers of discarding duplicated messages Jon Keating (Feb 19)
    • Re: Dangers of discarding duplicated messages Gene Rackow (Feb 19)
    • Re: Dangers of discarding duplicated messages David F. Skoll (Feb 20)
• RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available) Williams, James K (Feb 17)
• [ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie Scovetta Labs (Feb 17)
• Re: Permission problem in Skype BETA for linux Peter Conrad (Feb 17)
• Remote Windows Kernel Exploitation - Step Into the Ring 0 Marc Maiffret (Feb 17)
• [PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection PersianHacker Team (Feb 17)
• Possible phpBB <=2.0.11 bug or sql injection? jtm297 (Feb 17)
  • RE: Possible phpBB <=2.0.11 bug or sql injection? Miguel Angel Rodríguez Jódar (Feb 19)
  • Re: Possible phpBB <=2.0.11 bug or sql injection? kaosone+[ONE]+ (Feb 19)
  • Re: Possible phpBB <=2.0.11 bug or sql injection? Giacomo Rizzo (Feb 19)
  • <Possible follow-ups>
  • Re: Possible phpBB <=2.0.11 bug or sql injection? Exoduks (Feb 19)
• [SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution Martin Schulze (Feb 17)
• Advisory: Multiple Vulnerabilities in BibORB Patrick Hof (Feb 17)
• [SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability Martin Schulze (Feb 17)
• hpm_guestbook.cgi JavaScript-Injection Christoph Burchert (Feb 17)
• iDEFENSE Labs Website Launch iDEFENSE Labs (Feb 17)
• Phishing hole found in IE and OE Jay Calvert (Feb 17)
  • Re: Phishing hole found in IE and OE Greg Merideth (Feb 19)
  • Re: Phishing hole found in IE and OE David Nichols (Feb 19)
    • Re: Phishing hole found in IE and OE cyberpixl (Feb 19)
• [USN-78-2] Fixed mailman packages for USN-78-1 Martin Pitt (Feb 17)
• [USN-66-2] PHP vulnerability Martin Pitt (Feb 17)
• Re: NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+ Vade 79 (Feb 17)
• BizMail 2.1 Spam Exploit Jason Frisvold (Feb 19)
• MDKSA-2005:042 - Updated gpdf packages fix vulnerabilities on 64 bit platforms Mandrakelinux Security Team (Feb 19)
• MDKSA-2005:043 - Updated xpdf packages fix vulnerabilities on 64 bit platforms Mandrakelinux Security Team (Feb 19)
• [SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability Martin Schulze (Feb 19)
• [ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability Sune Kloppenborg Jeppesen (Feb 19)
• 3com 3CDaemon FTP "USER" Remote BOverflow POC Hat-Squad Security Team (Feb 19)
• Combining Hashes Kent Borg (Feb 19)
  • Re: Combining Hashes unmanarc (Feb 19)
    • Re: Combining Hashes Ivan Krstic (Feb 21)
    • Re: Combining Hashes Frank Knobbe (Feb 21)
  • Re: [lists] Combining Hashes Elliott Bäck (Feb 19)
  • Re: Combining Hashes Felix Cuello (Feb 19)
    • Re: Combining Hashes Joel Maslak (Feb 22)
  • Re: Combining Hashes exon (Feb 20)
• MDKSA-2005:045 - Updated kdelibs packages fix vulnerabilities Mandrakelinux Security Team (Feb 19)
• Adobe Reader invalid root page node Count value DOS Hongzhen Zhou (Feb 19)
• Multiple vulnerabilities in TrackerCam 5.12 Luigi Auriemma (Feb 19)
• MDKSA-2005:044 - Updated tetex packages fix vulnerabilities on 64 bit platforms Mandrakelinux Security Team (Feb 19)
• [ GLSA 200502-25 ] Squid: Denial of Service through DNS responses Sune Kloppenborg Jeppesen (Feb 19)
• Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins headpimp (Feb 19)
• MDKSA-2005:041 - Updated cups packages fix vulnerabilities on 64 bit platforms Mandrakelinux Security Team (Feb 19)
• MDKSA-2005:040 - Updated PostgreSQL packages fix multiple vulnerabilities Mandrakelinux Security Team (Feb 19)
• Joint encryption? John Richard Moser (Feb 19)
  • Re: Joint encryption? Damian Menscher (Feb 19)
    • Re: Joint encryption? John Richard Moser (Feb 19)
  • Re: Joint encryption? Casper . Dik (Feb 19)
    • Re: Joint encryption? John Richard Moser (Feb 19)
      • Re: Joint encryption? Robert C. Helling (Feb 21)
  • Re: Joint encryption? devnull (Feb 19)
    • Re: Joint encryption? John Richard Moser (Feb 19)
      • Re: Joint encryption? peter zulu (Feb 21)
  • Re: Joint encryption? Gandalf The White (Feb 21)
  • RE: Joint encryption? David Schwartz (Feb 21)
    • Re: Joint encryption? John Richard Moser (Feb 21)
  • Re: Joint encryption? Valdis . Kletnieks (Feb 21)
    • Re: Joint encryption? John Richard Moser (Feb 21)
  • Re: Joint encryption? Ruud H.G. van Tol (Feb 21)
• Multiples vulnerability in ZeroBoard, albanian haxorz (Feb 19)
• [ GLSA 200502-27 ] gFTP: Directory traversal vulnerability Matthias Geerdsen (Feb 19)
• exwormshoucast part of PTjob project: SHOUTcast v1.9.4 remote exploit yan feng (Feb 19)
• [FLSA-2005:2137] Updated cyrus-sasl resolves security vulnerabilities Dominic Hargreaves (Feb 19)
• [Hat-Squad] Findjmp2 Tool Hat-Squad Security Team (Feb 19)
• Thomson TCW690 POST Password Validation Vulnerability MurDoK (Feb 19)
• 3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow class 101 (Feb 19)
• webfsd fun. opensource is god .lol windows yan feng (Feb 19)
• cfengine rsa heap remote exploit: part of PTjob project yan feng (Feb 19)
• Knox Arkeia remote root/system exploit John Doe (Feb 19)
  • Re: Knox Arkeia remote root/system exploit H D Moore (Feb 21)
  • <Possible follow-ups>
  • Re: Knox Arkeia remote root/system exploit Arnaud Spicht (Feb 23)
• Re: [Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability Andres Tarasco (Feb 19)
• [SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities Martin Schulze (Feb 21)
• Arkeia Network Backup Client Remote Access H D Moore (Feb 21)
  • Re: Arkeia Network Backup Client Remote Access Vincent Archer (Feb 22)
  • Re: Arkeia Network Backup Client Remote Access H D Moore (Feb 22)
  • <Possible follow-ups>
  • Re: Arkeia Network Backup Client Remote Access Arnaud Spicht (Feb 23)
• Gigafast/CompUSA router (model EE400-R) vulnerabilities Gary H. Jones II (Feb 21)
• ADP Elite System Max 9000 Series Login Vulnerability rootfiend (Feb 21)
• Windows Firewall Has A Backdoor Jay Calvert (Feb 21)
  • Re: Windows Firewall Has A Backdoor Chris Wysopal (Feb 21)
  • RE: Windows Firewall Has A Backdoor Chris Goodwin (Feb 21)
  • Re: Windows Firewall Has A Backdoor Thor (Hammer of God) (Feb 22)
  • <Possible follow-ups>
  • RE: Windows Firewall Has A Backdoor Thor Larholm (Feb 22)
• [USN-84-1] Squid vulnerabilities Martin Pitt (Feb 21)
• [FLSA-2005:2058] Updated cdrtools packages fix a security issue Marc Deslauriers (Feb 21)
• [FLSA-2005:1945] Updated sox packages fix buffer overflows Marc Deslauriers (Feb 21)
• [FLSA-2005:1944] GNOME VFS updates address extfs vulnerability Marc Deslauriers (Feb 21)
• [ GLSA 200502-28 ] PuTTY: Remote code execution Luke Macken (Feb 21)
• iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities iDEFENSE Labs (Feb 21)
• iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability iDEFENSE Labs (Feb 21)
• iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability iDEFENSE Labs (Feb 21)
• phpBB 2.0.12 released Snapdragon (Feb 22)
  • Re: phpBB 2.0.12 released bcl (Feb 23)
    • Re: phpBB 2.0.12 released bcl (Feb 24)
• Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability m123303 (Feb 22)
  • Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability grutz (Feb 22)
• iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability iDEFENSE Labs (Feb 22)
• SD Server 4.0.70 Directory Traversal Bug CorryL (Feb 22)
• [NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection John Cobb (Feb 22)
• The WebConnect 6.4.4 and 6.5 contains several vulnerabilities CIRT Advisory (Feb 22)
• [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection pokley (Feb 22)
• paNews v2.0b4 - PHP Injection tjomka (Feb 22)
• Cross Site Scripting exploitation via malformed files Jerome ATHIAS (Feb 22)
  • <Possible follow-ups>
  • Re: Cross Site Scripting exploitation via malformed files http-equiv () excite com (Feb 23)
• iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB2 Arbitrary File Unlink Vulnerability iDEFENSE Labs (Feb 22)
• Software PBLang 4.65 search.php XSS vulnerability Raven (Feb 23)
• Software PBLang 4.65 pmpshow.php XSS vulnerability Raven (Feb 23)
• Software PBLang 4.65 pm.php XSS vulnerability Raven (Feb 23)
• [SECURITY] [DSA 688-1] New squid packages fix denial of service Martin Schulze (Feb 23)
• [SECURITY] [DSA 689-1] New mod_python packages fix information leak Martin Schulze (Feb 23)
• Incorrect Classification of iDownload's Product as Spyware... Paul Laudanski (Feb 23)
  • <Possible follow-ups>
  • RE: Incorrect Classification of iDownload's Product as Spyware... Roger A. Grimes (Feb 24)
• [ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities Matthias Geerdsen (Feb 23)
• Robustness patch for TWiki, vulnerability in ImageGalleryPlugin Florian Weimer (Feb 23)
• Release of Arkeia Network Backup 5.3.5 fixes security issue [bugtraq id 12594] Arnaud Spicht (Feb 23)
• [Fwd: [arkeia-announce] Release of Arkeia Network Backup 5.3.5 fixes security issue] Maciej Bogucki (Feb 23)
• Office 10 applications & flashdrives can be used to browse restricted drives Discini, Sonny (Feb 23)
  • Re: Office 10 applications & flashdrives can be used to browse restricted drives Denis Jedig (Feb 25)
• Multiple vulnerabilities found in CSGuestbook by CoolSerlets.com Josh884 (Feb 24)
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability Walton, John Michael (John) (Feb 24)
  • <Possible follow-ups>
  • RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability PASTOR ADRIAN (Feb 24)
• iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability iDEFENSE Labs (Feb 24)
• Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities Cisco Systems Product Security Incident Response Team (Feb 24)
• [Security Bulletin] SSRT4694 HP-UX ftpd remote unauthorized access Boren, Rich (SSRT) (Feb 24)
• In-game cl_guid crash in Soldier of Fortune II 1.03 Luigi Auriemma (Feb 24)
• Multiple vulns in punBB John Gumbel (Feb 24)
• MDKSA-2005:047 - Updated squid packages fix vulnerability Mandrakelinux Security Team (Feb 24)
• [FLSA-2005:2043] Updated zlib package fixes security issues Marc Deslauriers (Feb 24)
• MDKSA-2005:046 - Updated uim packages fix vulnerability Mandrakelinux Security Team (Feb 24)
• [FLSA-2005:2343] Updated vim packages fix security issues Marc Deslauriers (Feb 24)
• phpWebSite-0.10.0_exploit tjomka (Feb 24)
• [FLSA-2005:2005] Updated gdk-pixbuf packages fix security flaws Marc Deslauriers (Feb 24)
• [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Maksymilian Arciemowicz (Feb 24)
  • Re: [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion Calum Power (Feb 26)
• phpWebSite 0.10.0 Full Path disclosure HaCkZaTaN . (Feb 25)
  • <Possible follow-ups>
  • phpWebSite 0.10.0 Full Path disclosure HaCkZaTaN (Feb 25)
• Firescrolling [Firefox 1.0] mikx (Feb 25)
  • <Possible follow-ups>
  • RE: Firescrolling [Firefox 1.0] Beauford, Jason (Feb 25)
    • Re: Firescrolling [Firefox 1.0] btrq (Feb 26)
    • Re: Firescrolling [Firefox 1.0] Stan Bubrouski (Feb 26)
  • RE: Firescrolling [Firefox 1.0] Eric McCarty (Feb 25)
• [SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution Martin Schulze (Feb 25)
• Announce: RSBAC v1.2.4 released Amon Ott (Feb 25)
• CFP: WORM 2005 David Moore (Feb 25)
• AW: phpWebSite-0.10.0_exploit webmaster (Feb 25)
• [FLSA-2005:2336] Updated kernel packages fix security issues Marc Deslauriers (Feb 25)
• [USN-85-1] Gaim vulnerabilities Martin Pitt (Feb 25)
• iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability iDEFENSE Labs (Feb 25)
  • Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability Stan Bubrouski (Feb 25)
• CIS WebServer Directory Traversal Bug CorryL (Feb 25)
• -==phpBB 2.0.12 Full path disclosure==- HaCkZaTaN (Feb 26)
• Knet <= 1.04c Buffer Overflow Bug CorryL (Feb 26)
• Re: Office 10 applications & flashdrives can be used to browse restricted drives Paul (Feb 26)
  • Re: Office 10 applications & flashdrives can be used to browse restricted drives Jay D. Dyson (Feb 26)
• Mozilla Firefox 1.0.1 Javascript Images are Draggable Paul (Feb 26)
  • Re: Mozilla Firefox 1.0.1 Javascript Images are Draggable Jay D. Dyson (Feb 26)
• [ GLSA 200502-30 ] cmd5checkpw: Local password leak vulnerability Thierry Carrez (Feb 26)

Previous period

Next period