Bugtraq: by author

524 messages starting Jul 19 05 and ending Jul 04 05
Date index | Thread index | Author index


3APA3A

Mozilla cleartext credentials leak bug report to excuse myself (Re[2]: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein) 3APA3A (Jul 19)
SPIDynamics WebInspect Cross-Application Scripting (XAS) 3APA3A (Jul 26)
Re[2]: [Full-disclosure] SPIDynamics WebInspect Cross-ApplicationScripting (XAS) 3APA3A (Jul 29)
Re: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein 3APA3A (Jul 19)

account . throw

Getting round website authentication with Firefox account . throw (Jul 27)

Adam Laurie

Re: Oracle and setting the record straight Adam Laurie (Jul 22)

Adam Shostack

Re: On classifying attacks Adam Shostack (Jul 19)

Adam Wysocki

Re: ekg insecure temporary file creation and arbitrary code execution Adam Wysocki (Jul 06)

advisories

Corsaire Security Advisory: SAP Internet Graphics Server traversal issue advisories (Jul 25)

ak

Advisory: Oracle JDeveloper Plaintext Passwords ak (Jul 13)
Oracle Security Advisory: Read parts of any file via desformat in Oracle Reports ak (Jul 19)
Advisory: Oracle Forms Builder Password in Temp Files ak (Jul 13)
Silently fixed security bugs in Oracle Critical Patch Update July 2005 ak (Jul 15)
Advisory: Oracle JDeveloper passes Plaintext Password ak (Jul 13)
Oracle Security Advisory: Run any OS Command via unauthorized Oracle Reports ak (Jul 19)
Oracle Security Advisory: Various Cross-Site-Scripting Vulnerabilities in Oracle Reports ak (Jul 19)
Advisory: Oracle Forms Insecure Temporary File Handling ak (Jul 13)
Oracle Security Advisory: Read parts of any XML-file via customize parameter in Oracle Reports ak (Jul 19)
Oracle Security Advisory: Run any OS Command via unauthorized Oracle Forms ak (Jul 19)
Oracle Security Advisory: Overwrite any file via desname in Oracle Reports ak (Jul 19)

alex

XSS in nested tag in phpbb 2.0.16 alex (Jul 05)

Alexander Anisimov

[PTsecurity] MaxPatrol Network Security Scanner - Free unlimited version has been released. Alexander Anisimov (Jul 22)

Alexander Hagenah

05_07_14-bitdefender_malicious_content_bypass Alexander Hagenah (Jul 14)

Alexander Klimov

RE: [Full-disclosure] Anonymous Web Attacks via DedicatedMobileServices Alexander Klimov (Jul 30)
Re: Installation of software, and security. . . Alexander Klimov (Jul 19)

Alexander L. Ivanchev

Re: Peter Gutmann data deletion theaory? Alexander L. Ivanchev (Jul 27)

Alexey Toptygin

Re: /dev/random is probably not Alexey Toptygin (Jul 06)

Altheide, Cory B. (IARC)

RE: Any info on potential 0day RDP vuln? Altheide, Cory B. (IARC) (Jul 16)

Amit Klein (AKsecurity)

NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein Amit Klein (AKsecurity) (Jul 18)
Re: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein Amit Klein (AKsecurity) (Jul 19)

anakin

Internet Explorer AJAX Bug anakin (Jul 26)

Andreas Bartelt

Re: A comment on using CPU resources Andreas Bartelt (Jul 09)

Andreas Beck

Re: Peter Gutmann data deletion theaory? Andreas Beck (Jul 27)
Realchat user impersonation - BSA 200506110001 Andreas Beck (Jul 23)

Anonymous

Full Disclosure - XMLRPC Exploit Code written in Python jul 2005 Anonymous (Jul 12)

Anton Ivanov

Re: /dev/random is probably not Anton Ivanov (Jul 05)

Anything But Microsoft

Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.] Anything But Microsoft (Jul 05)

arash_pc0

a new sql injection for aspjar guestbook arash_pc0 (Jul 04)

AsTriXs

McAfee Intrushield IPS Abuse Update is available AsTriXs (Jul 11)

[at]

Chroot Security Group Advisory 2005-07-25 -- ftplocate [at] (Jul 25)
several vulnerabilities present in Belkin wireless routers [at] (Jul 15)
Re: eBay phishing - phishers are getting better [at] (Jul 28)
Re: Re: [HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch [at] (Jul 21)

at

Re: PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities at (Jul 28)

augustusx00

Re: [HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch augustusx00 (Jul 16)

b0fnet

Re: LSS Security Advisory: Winamp remote buffer overflow vulnerability b0fnet (Jul 28)

babarr

Re: Undisclosed Sudo Vulnerability ? babarr (Jul 30)

badpenguin

[ZH2005-16SA] Insecure temporary file creation in Skype for Linux badpenguin (Jul 16)

Barbara Lockwood

RE: Peter Gutmann data deletion theaory? Barbara Lockwood (Jul 21)

Bencsath Boldizsar

Re: /dev/random is probably not (fwd) Bencsath Boldizsar (Jul 08)

berendjanwever

Re: Microsoft Internet Explorer "javaprxy.dll" Code Execution Exploit berendjanwever (Jul 06)

bert . hubert

PowerDNS 2.9.18 fixes two security issues affecting users of LDAP backend or limited recursion bert . hubert (Jul 16)

Black, Michael

RE: On classifying attacks Black, Michael (Jul 27)
RE: On classifying attacks Black, Michael (Jul 19)

blahplok

PNGƒJƒEƒ“ƒ^+—pƒƒO‰ƒXƒNƒŠƒvƒg remote commands execution vulnerability blahplok (Jul 07)
WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability blahplok (Jul 13)

Blyth A J C (Comp)

1st European Conference on Computer Network Defence (EC2ND) Blyth A J C (Comp) (Jul 14)

Bob Beck

Re: ICMP vulnerabilities Bob Beck (Jul 08)

Bojan Zdrnja

RE: [Full-disclosure] Anonymous Web Attacks via DedicatedMobileServices Bojan Zdrnja (Jul 28)

Bret Morey

RE: Peter Gutmann data deletion theaory? Bret Morey (Jul 27)

Bryan McAninch

RE: On classifying attacks Bryan McAninch (Jul 15)

Burton Strauss

RE: Installation of software, and security. . . Burton Strauss (Jul 19)
RE: Installation of software, and security. . . Burton Strauss (Jul 20)
RE: Installation of software, and security. . . Burton Strauss (Jul 19)

c0ntexb

Re: Re: McAfee Intrushield IPS Abuse c0ntexb (Jul 07)
McAfee Intrushield IPS Abuse c0ntexb (Jul 06)
eRoom Multiple Security Issues c0ntexb (Jul 06)
Solaris Socket Hijack c0ntexb (Jul 06)
eRoom Multiple Security Issues c0ntexb (Jul 06)
SiteMinder Multiple Vulnerabilities c0ntexb (Jul 08)

Casper . Dik

Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 Casper . Dik (Jul 21)
Re: Peter Gutmann data deletion theaory? Casper . Dik (Jul 27)
Re: Peter Gutmann data deletion theaory? Casper . Dik (Jul 27)

Cesar

[Argeniss] Oracle 9R2 Unpatched vulnerability on CWM2_OLAP_AW_AWUTIL package Cesar (Jul 22)
Re: Problems with the Oracle Critical Patch Update for April 2005 Cesar (Jul 12)

Charles M. Hannum

/dev/random is probably not Charles M. Hannum (Jul 01)

ChayoteMu

Re: /dev/random is probably not ChayoteMu (Jul 06)

Chiaki

Re: /dev/random is probably not Chiaki (Jul 02)

Chris Kuethe

Re: /dev/random is probably not Chris Kuethe (Jul 06)

Christian

Re: A comment on using CPU resources Christian (Jul 09)

Christian Boenning

[Fwd: phpBB 2.0.17 released] Christian Boenning (Jul 20)

Christian King

RE: Microsoft Word Protection Bypass Christian King (Jul 07)

Christopher Kunz

Advisory 11/2005: Multiple vulnerabilities in Contrexx Christopher Kunz (Jul 22)
Re: Getting round website authentication with Firefox Christopher Kunz (Jul 28)

Christophe Vandeplas

Re: Imail Cookie Vulnerability (unhashed) Christophe Vandeplas (Jul 06)

CIRT.DK Advisory

[TOOLS] CIRT.DK WebRoot Version v.1.7 CIRT.DK Advisory (Jul 19)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack Cisco Systems Product Security Incident Response Team (Jul 13)
Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability Cisco Systems Product Security Incident Response Team (Jul 13)
Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities Cisco Systems Product Security Incident Response Team (Jul 12)
Cisco Security Advisory: IPv6 Crafted Packet Vulnerability Cisco Systems Product Security Incident Response Team (Jul 29)

coki

GNU Mailutils imap4d v0.6 remote format string exploit coki (Jul 28)

comsatcat

Metasploit exploit for PHP XMLRPC comsatcat (Jul 12)

Conectiva Updates

[Conectiva-updates] [CLA-2005:980] Conectiva Security Announcement - php4 Conectiva Updates (Jul 25)

contact

WASC-Articles: 'DOM Based Cross Site Scripting or XSS of the Third Kind: A look at an overlooked flavor of XSS' contact (Jul 11)

Core Security Technologies Advisories

CORE-2005-0629: MailEnable Buffer Overflow Vulnerability Core Security Technologies Advisories (Jul 13)

Craig Skelton

Re: Anonymous Anonymity - Request For Comments Craig Skelton (Jul 19)

Crispin Cowan

Re: On classifying attacks Crispin Cowan (Jul 19)
Re: On classifying attacks Crispin Cowan (Jul 18)
Re: On classifying attacks Crispin Cowan (Jul 27)
Re: On classifying attacks Crispin Cowan (Jul 28)

D .

ECI router login bypass D . (Jul 25)

dan

Re: Re: Microsoft Word Protection Bypass dan (Jul 07)

Dana Hudes

Re: Peter Gutmann data deletion theaory? Dana Hudes (Jul 22)
Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 Dana Hudes (Jul 22)

DAN MORRILL

RE: [Full-disclosure] SPIDynamics WebInspect Cross-ApplicationScripting (XAS) DAN MORRILL (Jul 28)

Darren Reed

Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 Darren Reed (Jul 22)
Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 Darren Reed (Jul 21)
Re: /dev/random is probably not Darren Reed (Jul 05)
Re: ICMP-based blind performance-degrading attack Darren Reed (Jul 21)
Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 Darren Reed (Jul 21)
Re: /dev/random is probably not Darren Reed (Jul 06)
Re: ICMP-based blind performance-degrading attack Darren Reed (Jul 21)

Dave . Collins

Re: Microsoft Word Protection Bypass Dave . Collins (Jul 06)

dave kleiman

RE: Peter Gutmann data deletion theaory? dave kleiman (Jul 27)

David F. Skoll

Re: Installation of software, and security. . . David F. Skoll (Jul 19)
Pointless discussion (was Re: Installation of software, and security. . .) David F. Skoll (Jul 19)

David Litchfield

Oracle and setting the record straight David Litchfield (Jul 21)
Problems with the Oracle Critical Patch Update for April 2005 David Litchfield (Jul 07)
Re: Problems with the Oracle Critical Patch Update for April 2005 David Litchfield (Jul 12)
Re: Silently fixed security bugs in Oracle Critical Patch Update July 2005 David Litchfield (Jul 15)

David Schwartz

RE: /dev/random is probably not David Schwartz (Jul 05)
RE: /dev/random is probably not David Schwartz (Jul 08)

dcrab

Dragonfly Shopping Cart Multiple vulnerabilities dcrab (Jul 12)
[Bday release] Comersus shopping cart has multiple Sql injection and Cross Site Scripting vulnerabilities dcrab (Jul 07)

Dennis Lubert

Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 - HP-UX TCP/IP Remote Denial of Service (DoS)) Dennis Lubert (Jul 21)

Derek Martin

On classifying attacks Derek Martin (Jul 15)
Re: On classifying attacks Derek Martin (Jul 16)

devnull

Re: /dev/random is probably not devnull (Jul 06)
Re: /dev/random is probably not devnull (Jul 06)
Re: Peter Gutmann data deletion theaory? devnull (Jul 27)

Dim K0r0l

SlimFTPd Server: PoC Exploit Dim K0r0l (Jul 22)

Dirk Mueller

[KDE Security Advisory] Multiple libgadu vulnerabilities Dirk Mueller (Jul 21)
[KDE Security Advisory]: Kate backup file permission leak Dirk Mueller (Jul 18)

Dragos Ruiu

PacSec/core05 Call For Papers Dragos Ruiu (Jul 12)
Re: ICMP Vulnerabilities Dragos Ruiu (Jul 08)

duk3nn

XMLRPC remote commands execute exploit duk3nn (Jul 04)

Dustin D. Trammell

Re: On classifying attacks Dustin D. Trammell (Jul 19)

D. Weiss

RE: Peter Gutmann data deletion theaory? D. Weiss (Jul 22)

Earnhart, Benjamin J

RE: Peter Gutmann data deletion theaory? Earnhart, Benjamin J (Jul 22)

edward11

Internet Explorer / MSN ICC Profiles Crash PoC Exploit edward11 (Jul 16)

E. Kellinis

Re: several vulnerabilities present in Belkin wireless routers E. Kellinis (Jul 28)
Re: several vulnerabilities present in Belkin wireless routers E. Kellinis (Jul 28)

Emanuele Gentili

blogtorrent remote/local user password disclosure Emanuele Gentili (Jul 11)

Esler, Joel - Contractor

Undisclosed Sudo Vulnerability ? Esler, Joel - Contractor (Jul 30)

exon

Re: /dev/random is probably not exon (Jul 04)

Fernando Gont

ICMP-based blind performance-degrading attack Fernando Gont (Jul 20)
Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 Fernando Gont (Jul 21)
Re: [Full-disclosure] ICMP Security Vulnerabilities - NEW (cough) Fernando Gont (Jul 14)
Trivial BGP attacks (ICMP-based blind throughput-reduction attack) Fernando Gont (Jul 20)
(ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 - HP-UX TCP/IP Remote Denial of Service (DoS)) Fernando Gont (Jul 20)
ICMP-based blind connection-reset attack Fernando Gont (Jul 22)
Re: ICMP-based blind performance-degrading attack Fernando Gont (Jul 21)

fjlj

RO CP root exploit fjlj (Jul 30)

Florian Weimer

Detecting vulnerable zlib versions (CAN-2005-2096) Florian Weimer (Jul 12)

foster

Re: PHPNews SQL injection vulnerability foster (Jul 21)

Francesco Messineo

Re: /dev/random is probably not Francesco Messineo (Jul 12)

Francisco Amato

[ISR] - Novell GroupWise Client Remote Buffer Overflow Francisco Amato (Jul 27)
[ISR] - Novell Groupwise WebAccess Cross-Site Scripting Francisco Amato (Jul 19)

FreeBSD Security Advisories

FreeBSD Security Advisory FreeBSD-SA-05:17.devfs FreeBSD Security Advisories (Jul 20)
FreeBSD Security Advisory FreeBSD-SA-05:19.ipsec FreeBSD Security Advisories (Jul 27)
FreeBSD Security Advisory FreeBSD-SA-05:16.zlib FreeBSD Security Advisories (Jul 06)
FreeBSD Security Advisory FreeBSD-SA-05:18.zlib FreeBSD Security Advisories (Jul 27)

gandalf

Re: Anonymous Anonymity - Request For Comments gandalf (Jul 19)

Gandalf The White

Anonymous Anonymity - Request For Comments Gandalf The White (Jul 18)
A comment on using CPU resources Gandalf The White (Jul 09)

gary madsen

Fwd: [VOIPSEC] VoIP-Phones: Weakness in proccessing SIP-Notify-Messages gary madsen (Jul 08)

gb . network

PHP FirstPost remote file include vulnerability gb . network (Jul 25)

Ghaith Nasrawi

3Com launches vulnerability-buying program Ghaith Nasrawi (Jul 26)

ghc

PHPNews SQL injection vulnerability ghc (Jul 20)
[SECURITY ALERT] osTicket bugs ghc (Jul 01)

give_credit

Re: Microsoft Internet Explorer "javaprxy.dll" Code Execution Exploit give_credit (Jul 05)

Glenn.Everhart

RE: Peter Gutmann data deletion theaory? Glenn.Everhart (Jul 21)
RE: Installation of software, and security. . . Glenn.Everhart (Jul 20)

Glynn Clements

Re: /dev/random is probably not Glynn Clements (Jul 05)

Godwin Stewart

Re: On classifying attacks Godwin Stewart (Jul 18)

gr0up . pclabs

Atomic Photo Album (APA) apa_phpinclude.inc.php remote file include gr0up . pclabs (Jul 25)

group () soulblack com ar

MyGuestbook Remote File Inclusion. group () soulblack com ar (Jul 05)
Kshout Data Disclosure group () soulblack com ar (Jul 30)

GulfTech Security Research

Re: [HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch GulfTech Security Research (Jul 18)
PEAR XML_RPC Remote Code Execution Vulnerability GulfTech Security Research (Jul 01)
Three More Vulnerable to PHPXMLRPC code injection GulfTech Security Research (Jul 04)
PHPXMLRPC Remote Code Execution GulfTech Security Research (Jul 01)
SquirrelMail Arbitrary Variable Overwriting Vulnerability GulfTech Security Research (Jul 14)
Kayako liveResponse Multiple Vulnerabilities GulfTech Security Research (Jul 30)
Mozilla XPCOM Library Race Condition GulfTech Security Research (Jul 21)

h1kari () toorcon org

ToorCon 2005 Call for Papers h1kari () toorcon org (Jul 08)

Hans Wolters

[covide] possible sql injection Hans Wolters (Jul 05)

Holden Caulfield

Vocera IP Phones Holden Caulfield (Jul 08)

Ian Clelland

Re: several vulnerabilities present in Belkin wireless routers Ian Clelland (Jul 16)

ian . latter

Re: several vulnerabilities present in Belkin wireless routers ian . latter (Jul 18)

iDEFENSE Labs

iDEFENSE Security Advisory 07.12.05: Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability iDEFENSE Labs (Jul 12)
iDEFENSE Security Advisory 07.14.05: Sophos Anti-Virus Zip File Handling DoS Vulnerability iDEFENSE Labs (Jul 14)
iDEFENSE Security Advisory 07.05.05: Adobe Acrobat Reader UnixAppOpenFilePerform() Buffer Overflow Vulnerability iDEFENSE Labs (Jul 05)

Indigo Haze

Re: On classifying attacks Indigo Haze (Jul 16)

Integrigy Security

Multiple High Risk Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update July 2005 Integrigy Security (Jul 12)

Ivaylo Zashev

Re: eBay phishing - phishers are getting better Ivaylo Zashev (Jul 28)

Jack Lloyd

Re: /dev/random is probably not Jack Lloyd (Jul 05)

Jake Appelbaum

Re: Peter Gutmann data deletion theaory? Jake Appelbaum (Jul 27)

James Longstreet

Re: On classifying attacks James Longstreet (Jul 18)
Re: On classifying attacks James Longstreet (Jul 16)

James Tait

Re: Getting round website authentication with Firefox James Tait (Jul 28)

Jared Johnson

Peter Gutmann data deletion theaory? Jared Johnson (Jul 21)
RE: Peter Gutmann data deletion theaory? Jared Johnson (Jul 22)

Jason Coombs

Re: [Full-disclosure] Why Vulnerability Databases can't do everything Jason Coombs (Jul 16)
Re: Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.] Jason Coombs (Jul 06)
Re: Installation of software, and security. . . Jason Coombs (Jul 19)

Javor Ninov

Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages Javor Ninov (Jul 18)

Jay D. Dyson

Re: Peter Gutmann data deletion theaory? Jay D. Dyson (Jul 21)

Jean-Baptiste Marchand

NULL sessions vulnerabilities using alternate named pipes Jean-Baptiste Marchand (Jul 07)

Jeremy Epstein

RE: Peter Gutmann data deletion theaory? Jeremy Epstein (Jul 21)

Jeroen van Rijn

A comment on using CPU resources, addendum. Jeroen van Rijn (Jul 09)
Re: A comment on using CPU resources Jeroen van Rijn (Jul 09)

Joachim Schipper

Re: A comment on using CPU resources Joachim Schipper (Jul 09)
Re: ICMP Vulnerabilities Joachim Schipper (Jul 09)

Joel Maslak

Re: [Full-disclosure] Why Vulnerability Databases can't do everything Joel Maslak (Jul 16)

Johan De Meersman

Re: Microsoft Word Protection Bypass Johan De Meersman (Jul 13)

John Gateley

eBay phishing - phishers are getting better John Gateley (Jul 22)

John Richard Moser

Re: Installation of software, and security. . . John Richard Moser (Jul 18)
Re: Installation of software, and security. . . John Richard Moser (Jul 20)
Installation of software, and security. . . John Richard Moser (Jul 16)

Jonathan Angliss

[SM-ANNOUNCE] SquirrelMail 1.4.5 Released Jonathan Angliss (Jul 13)
[SM-ANNOUNCE] Patch available for CAN-2005-2095 Jonathan Angliss (Jul 14)

Jonglim Yun

[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability Jonglim Yun (Jul 27)

joop gerritse

Re: Installation of software, and security. . . joop gerritse (Jul 20)

J. Oquendo

Re: ICMP vulnerabilities J. Oquendo (Jul 07)

Joseph Finley

RE: A comment on using CPU resources Joseph Finley (Jul 09)

Joxean Koret

Cross Site Scripting vulnerabilities in GForge Joxean Koret (Jul 28)

Juergen Schmidt

Re: [Full-disclosure] [ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition Juergen Schmidt (Jul 11)

Kai Howells

Re: /dev/random is probably not Kai Howells (Jul 08)

kehieuhoc

Bug Hosting Controller New (v6.1 - Hotfix 2.1) kehieuhoc (Jul 11)

Kerry Thompson

Re: Installation of software, and security. . . Kerry Thompson (Jul 19)

KF (lists)

Re: [Full-disclosure] Solaris 9/10 ld.so fun KF (lists) (Jul 04)
MA[2005-0712b] - 'Nokia Affix Bluetooth btsrv/btobex poor use of system()' KF (lists) (Jul 12)
DMA[2005-0712a] - 'Nokia Affix Bluetooth btftp client buffer overflow' KF (lists) (Jul 12)

Klaus Schwenk

Re: Installation of software, and security. . . Klaus Schwenk (Jul 18)

Kornbrust, Alexander

AW: Silently fixed security bugs in Oracle Critical Patch Update July 2005 Kornbrust, Alexander (Jul 15)

kozan

Ares FileShare 1.1 'Long Searched String' Buffer Overflow Vulnerability kozan (Jul 26)

Kurt Seifried

Re: Undisclosed Sudo Vulnerability ? Kurt Seifried (Jul 30)

Leandro Meiners

CYBSEC - Security Advisory: Default Configuration Information Disclosure in Lotus Domino Leandro Meiners (Jul 26)

Leon Juranic

LSS Security Advisory: Winamp remote buffer overflow vulnerability Leon Juranic (Jul 15)

list

ClamAV Multiple Rem0te Buffer Overflows list (Jul 25)

l--s

uguestbook exploit l--s (Jul 28)
Kent's Guestbook database exploit l--s (Jul 30)

luca . carettoni

Siemens SANTIS 50 Authentication Vulnerability luca . carettoni (Jul 25)

Ludwig Nussel

SUSE Security Announcement: zlib denial of service (SUSE-SA:2005:043) Ludwig Nussel (Jul 28)

Luigi Auriemma

Broadcast format string and buffer-overflow in Race Driver 1.20 Luigi Auriemma (Jul 18)
Endless loop in NetPanzer 0.8 Luigi Auriemma (Jul 13)

Mandriva Security Team

MDKSA-2005:121 - Updated nss_ldap/pam_ldap packages fix vulnerabilities Mandriva Security Team (Jul 19)
MDKSA-2005:117 - Updated dhcpcd packages fix vulnerabilities Mandriva Security Team (Jul 13)
MDKSA-2005:111 - Updated 2.4 kernel packages fix multiple vulnerabilities Mandriva Security Team (Jul 01)
MDKSA-2005:126 - Updated fetchmail packages fix vulnerability Mandriva Security Team (Jul 29)
MDKSA-2005:110 - Updated 2.6 kernel packages fix multiple vulnerabilities Mandriva Security Team (Jul 01)
MDKSA-2005:120 - Updated mozilla-firefox packages fix multiple vulnerabilities Mandriva Security Team (Jul 14)
MDKSA-2005:113 - Updated clamav packages fix vulnerability Mandriva Security Team (Jul 12)
MDKSA-2005:123 - Updated shorewall packages fix vulnerability Mandriva Security Team (Jul 21)
MDKSA-2005:116 - Updated cpio packages fix vulnerabilities Mandriva Security Team (Jul 12)
MDKSA-2005:119 - Updated krb5 packages fix multiple vulnerabilities Mandriva Security Team (Jul 14)
MDKSA-2005:127 - Updated mozilla-thunderbird packages fix multiple vulnerabilities Mandriva Security Team (Jul 29)
MDKSA-2005:109 - Updated php-pear packages fix remotely exploitable vulnerability Mandriva Security Team (Jul 01)
MDKSA-2005:114 - Updated leafnode packages fix multiple vulnerabilities Mandriva Security Team (Jul 12)
MDKSA-2005:118 - Updated ruby packages fix vulnerabilities Mandriva Security Team (Jul 13)
MDKSA-2005:122 - Updated kdelibs packages fix vulnerability in kate and kwrite Mandriva Security Team (Jul 21)
MDKSA-2005:112 - Updated zlib packages fix vulnerability Mandriva Security Team (Jul 07)
MDKSA-2005:124 - Updated zlib packages fix vulnerability Mandriva Security Team (Jul 23)
MDKSA-2005:115 - Updated mplayer packages fix vulnerabilities Mandriva Security Team (Jul 12)
MDKSA-2005:125 - Updated clamav packages fix more vulnerabilities Mandriva Security Team (Jul 28)
MDKSA-2005:108 - Updated squirrelmail packages fix XSS vulnerabilities Mandriva Security Team (Jul 01)

Marc Deslauriers

[FLSA-2005:152895] Updated mailman package fixes security issue Marc Deslauriers (Jul 12)
[FLSA-2005:155505] Updated php packages fix security issues Marc Deslauriers (Jul 12)
[FLSA-2005:123014] Updated openssh packages fix a security issue Marc Deslauriers (Jul 12)
[FLSA-2005:154991] Updated sharutils package fixes security issue Marc Deslauriers (Jul 12)
[FLSA-2005:152908] Updated gftp package fixes security issue Marc Deslauriers (Jul 12)
[FLSA-2005:152842] Updated lvm package fixes security issue Marc Deslauriers (Jul 25)
[FLSA-2005:163559] Updated php packages fix security issues Marc Deslauriers (Jul 29)
[FLSA-2005:152777] Updated ImageMagick packages fix security issues Marc Deslauriers (Jul 13)
[FLSA-2005:152835] Updated dhcp package fixes security issue Marc Deslauriers (Jul 12)
[FLSA-2005:152583] Updated telnet packages fix security issues Marc Deslauriers (Jul 12)
[FLSA-2005:154276] Updated krb5 packages fix security issues Marc Deslauriers (Jul 25)

Marc Schoenefeld

JBoss jBPM 2.0: Remote code execution and classloader covert channel Marc Schoenefeld (Jul 04)

Marcus Meissner

SUSE Security Announcement: php/pear XML RPC remote code execution (SUSE-SA:2005:041) Marcus Meissner (Jul 08)
SUSE Security Announcement: heimdal telnetd remote buffer overflow (SUSE-SA:2005:040) Marcus Meissner (Jul 06)
SUSE Security Announcement: zlib denial of service attack (SUSE-SA:2005:039) Marcus Meissner (Jul 06)

Mark

Any info on potential 0day RDP vuln? Mark (Jul 15)

mark . handy

Re: Internet Explorer / MSN ICC Profiles Crash PoC Exploit mark . handy (Jul 19)

Martin Konold

RE: A comment on using CPU resources Martin Konold (Jul 09)

Martin Pitt

[USN-148-1] zlib vulnerability Martin Pitt (Jul 07)
[USN-155-1] Mozilla vulnerabilities Martin Pitt (Jul 27)
[USN-155-2] Updated Epiphany packages to match Mozilla security update Martin Pitt (Jul 28)
[USN-149-2] Fixed Firefox packages for USN-149-1 Martin Pitt (Jul 26)
[USN-147-1] PHP XMLRPC vulnerability Martin Pitt (Jul 05)
[USN-149-1] Firefox vulnerabilities Martin Pitt (Jul 21)
[USN-151-2] zlib vulnerabilities Martin Pitt (Jul 22)
[USN-152-1] PAM/NSS LDAP vulnerabilitiy Martin Pitt (Jul 21)
[USN-156-1] TIFF vulnerability Martin Pitt (Jul 29)
[USN-153-1] fetchmail vulnerability Martin Pitt (Jul 26)
[USN-149-3] Ubuntu 4.10 update for Firefox vulnerabilities Martin Pitt (Jul 28)
[USN-147-2] Fixed php4-pear packages for USN-147-1 Martin Pitt (Jul 07)
[USN-150-1] KDE library vulnerability Martin Pitt (Jul 21)
[USN-154-1] vim vulnerability Martin Pitt (Jul 26)
[USN-151-1] zlib vulnerability Martin Pitt (Jul 21)

Martin Schulze

[SECURITY] [DSA 768-1] New phpbb2 packages fix cross-site scripting Martin Schulze (Jul 27)
[SECURITY] [DSA 769-1] New gaim packages fix denial of service Martin Schulze (Jul 29)
[SECURITY] [DSA 744-1] New fuse packages fix information disclosure Martin Schulze (Jul 08)
[SECURITY] [DSA 743-1] New ht packages fix arbitrary code execution Martin Schulze (Jul 08)
[SECURITY] [DSA 753-1] New gedit packages fix denial of service Martin Schulze (Jul 12)
[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability Martin Schulze (Jul 11)
[SECURITY] [DSA 739-1] New trac package fixes upload/download vulnerability Martin Schulze (Jul 06)
[SECURITY] [DSA 725-2] New ppxp packages fix local root exploit Martin Schulze (Jul 04)
[SECURITY] [DSA 756-1] New squirrelmail packages fix several vulnerabilities Martin Schulze (Jul 13)
[SECURITY] [DSA 734-1] New gaim packages fix denial of service Martin Schulze (Jul 05)
[SECURITY] [DSA 752-1] New gzip packages fix several vulnerabilities Martin Schulze (Jul 11)
[SECURITY] [DSA 764-1] New cacti packages fix several vulnerabilities Martin Schulze (Jul 21)
[SECURITY] [DSA 762-1] New affix packages fix arbitrary command and code execution Martin Schulze (Jul 19)
[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure Martin Schulze (Jul 27)
[SECURITY] [DSA 754-1] New centericq packages fix insecure temporary file creation Martin Schulze (Jul 13)
[SECURITY] [DSA 741-1] New bzip2 packages prevent decompression bomb Martin Schulze (Jul 07)
[SECURITY] [DSA 755-1] New tiff packages fix arbitrary code execution Martin Schulze (Jul 13)
[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service Martin Schulze (Jul 11)
[SECURITY] [DSA 770-1] New gopher packages fix insecure temporary file creation Martin Schulze (Jul 29)
[SECURITY] [DSA 761-1] New heartbeat packages fix insecure temporary files Martin Schulze (Jul 19)
[SECURITY] [DSA 758-1] New heimdal packages fix arbitrary code execution Martin Schulze (Jul 18)
[SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability Martin Schulze (Jul 18)
[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities Martin Schulze (Jul 18)
[SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution Martin Schulze (Jul 08)
[SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution Martin Schulze (Jul 27)
[SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution Martin Schulze (Jul 27)

Matt Beaumont

Re: Installation of software, and security. . . Matt Beaumont (Jul 19)

Matthias Andree

fetchmail security announcement fetchmail-SA-2005-01 Matthias Andree (Jul 26)

Matthias Geerdsen

[ GLSA 200507-07 ] phpWebSite: Multiple vulnerabilities Matthias Geerdsen (Jul 11)
[ GLSA 200507-08 ] phpGroupWare, eGroupWare: PHP script injection vulnerability Matthias Geerdsen (Jul 11)
[ GLSA 200507-09 ] Adobe Acrobat Reader: Buffer overflow vulnerability Matthias Geerdsen (Jul 11)

Matt Palmer

Re: 3Com launches vulnerability-buying program Matt Palmer (Jul 28)

McLain Causey

Re: /dev/random is probably not McLain Causey (Jul 04)

Michael Gnau

Re: /dev/random is probably not Michael Gnau (Jul 06)

Michael Stone

[SECURITY] [DSA 747-1] New egroupware packages fix remote command execution Michael Stone (Jul 11)
[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS Michael Stone (Jul 08)
[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow Michael Stone (Jul 21)
[SECURITY] [DSA 738-1] New razor packages fix potential DOS Michael Stone (Jul 06)
[SECURITY] [DSA 737-1] New clamav packages fix potential DOS Michael Stone (Jul 06)
[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race Michael Stone (Jul 08)
[SECURITY] [DSA 757-1] New krb5 packages fix multiple vulnerabilities Michael Stone (Jul 18)
[SECURITY] [DSA 735-1] New sudo packages fix pathname validation race Michael Stone (Jul 01)
[SECURITY] [DSA 749-1] New ettercap packages fix arbitrary code execution Michael Stone (Jul 11)
[SECURITY] [DSA 745-1] New drupal package fixes multiple vulnerabilities Michael Stone (Jul 11)
[SECURITY] [DSA 746-1] New packages fix remote command execution in phpgroupware Michael Stone (Jul 14)
[SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS Michael Stone (Jul 01)
[SECURITY] [DSA 748-1] New ruby1.8 packages fix arbitrary command execution Michael Stone (Jul 11)
[SECURITY] [DSA 740-1] New zlib packages fix denial of service Michael Stone (Jul 06)

Michal Zalewski

Compromising pictures of Microsoft Internet Explorer! Michal Zalewski (Jul 15)

Mihai Amarandei-Stavila

Re: On classifying attacks Mihai Amarandei-Stavila (Jul 18)

milw0rm Inc.

Re: [HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch milw0rm Inc. (Jul 16)

mkanat

Security Advisory for Bugzilla 2.18.1 and 2.19.3 mkanat (Jul 08)

Moritz Naumann

Re: Anonymous Anonymity - Request For Comments Moritz Naumann (Jul 20)

mozako

[badroot security] probe.cgi: Remote Command Execution mozako (Jul 05)
Re: [badroot security] AutoIndex PHP Script: XSS vulnerability mozako (Jul 05)

Nate Smith

Re: Getting round website authentication with Firefox Nate Smith (Jul 28)

Nestor Burma

WindowsUpdate sending unsigned ActiveX ? Nestor Burma (Jul 08)

NGSSoftware Insight Security Research

HP OpenView Radia Management Agent remote command execution via directory traversal NGSSoftware Insight Security Research (Jul 28)

nick

Re: ClamAV Multiple Rem0te Buffer Overflows nick (Jul 26)

Nick Simicich

Vulnerability in Linksys Router access Nick Simicich (Jul 28)

nicolas.ruff () gmail com

Re: several vulnerabilities present in Belkin wireless routers nicolas.ruff () gmail com (Jul 16)

Ofir Arkin

Tool release: Xprobe2 v0.3 Ofir Arkin (Jul 30)

OpenPKG

[OpenPKG-SA-2005.015] OpenPKG Security Advisory (spamassassin) OpenPKG (Jul 28)
[OpenPKG-SA-2005.013] OpenPKG Security Advisory (zlib) OpenPKG (Jul 07)
[OpenPKG-SA-2005.016] OpenPKG Security Advisory (fetchmail) OpenPKG (Jul 28)
[OpenPKG-SA-2005.014] OpenPKG Security Advisory (zlib) OpenPKG (Jul 28)

Patrick Blitz

Shorewall MACLIST Problem Patrick Blitz (Jul 18)

Paul Laudanski

Spyware database lists Paul Laudanski (Jul 27)

Paul Schmehl

Re: 3Com launches vulnerability-buying program Paul Schmehl (Jul 28)

petefran

Solaris Runtime Linker - Exploit Detection petefran (Jul 16)

Peter Keel

Re: Installation of software, and security. . . Peter Keel (Jul 20)

Peter Mui

USENIX Security Symposium, July 31, Baltimore, Maryland, USA Peter Mui (Jul 08)

Petko Petkov

Re: [Full-disclosure] Anonymous Web Attacks via DedicatedMobileServices Petko Petkov (Jul 28)
Anonymous Web Attacks via Dedicated Mobile Services Petko Petkov (Jul 20)

pi3ki31ny

GNATS - gen-index pi3ki31ny (Jul 06)

pjphem

SimplePHPBlog 0.4.0 <= Remote Password Disclosure pjphem (Jul 07)

please_reply_to_security

UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : RPCBind updated to prevent remote Denial of Service attack please_reply_to_security (Jul 28)
UnixWare 7.1.4 : Mozilla updated to 1.7.8 fixes security issues please_reply_to_security (Jul 02)

priestmaster

YaBBSe 1.5.5c Path disclosure problem priestmaster (Jul 14)
Path Disclosure and XSS problem in PHP Counter 7.2 priestmaster (Jul 13)

Raghu Chinthoju

Re: A comment on using CPU resources Raghu Chinthoju (Jul 09)

Raphaël Rigo

Arbitrary code execution in SlimFTPd v3.16 Raphaël Rigo (Jul 21)
GoodTech SMTP server 5.16 RCPT TO command remote buffer overflow Raphaël Rigo (Jul 23)

rat

PC-EXPERIENCE/TOPPE CMS Security Advisory rat (Jul 30)

redsand

Arbitrary code execution in SlimFTPd v3.16 - Exploit redsand (Jul 25)

Reed Arvin

Denial of service vulnerability in FTPshell Server Version 3.38 Reed Arvin (Jul 26)

rgod

Re: UPB: Discussion Board/Web-Site Takeover rgod (Jul 20)

rift13

Vulnerability in Whatpulse.Org profiles allows XSS and session hijacking rift13 (Jul 07)

r_i_t_b_15

SQL Injection in Chinese ASP Webcounter r_i_t_b_15 (Jul 20)

Robert Foxworth

Re: /dev/random is probably not Robert Foxworth (Jul 05)

Robert Thompson Jr.

RE: Peter Gutmann data deletion theaory? Robert Thompson Jr. (Jul 22)

Rob Holland

pam_ldap/nss_ldap password leak in a master+slave+start_tls LDAP setup Rob Holland (Jul 04)

Robin Whittle

Re: [BugTraq] Peter Gutmann data deletion theaory? Robin Whittle (Jul 22)

Roman Daszczyszak

Re: several vulnerabilities present in Belkin wireless routers Roman Daszczyszak (Jul 22)

Ron van Daal

Re: RE: Peter Gutmann data deletion theaory? Ron van Daal (Jul 27)

ronvdaal

Possible security issue with FreeBSD 5.4 jailing and BPF ronvdaal (Jul 12)

saintlinu

HAURI live update. Arbitrary remote file download and execute vulnerability saintlinu (Jul 28)

Scott Marburger

RE: A comment on using CPU resources Scott Marburger (Jul 09)

S_Dorn/CIB

Re: Anonymous Anonymity - Request For Comments S_Dorn/CIB (Jul 20)

Sec-Tec Lists

RE: ClamAV Multiple Rem0te Buffer Overflows Sec-Tec Lists (Jul 26)

security

Re: PHPXMAIL - Authentication Bypass security (Jul 06)
Re: A comment on using CPU resources Security (Jul 09)

Security Alert

HPSBUX01137 SSRT5954 rev.4 - HP-UX TCP/IP Remote Denial of Service (DoS) Security Alert (Jul 19)
HPSBUX01164 SSRT4884 rev.4 - HP-UX TCP/IP Remote Denial of Service (DoS) Security Alert (Jul 19)
HPSBTU01210 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) Security Alert (Jul 18)

security-alert

[security bulletin] SSRT4884 rev.5 - HP-UX TCP/IP Remote Denial of Service (DoS) security-alert (Jul 25)
SPIDynamics WebInspect Cross-ApplicationScripting (XAS) Security-Alert (Jul 29)
[security bulletin] SSRT5954 rev.5 - HP-UX TCP/IP Remote Denial of Service (DoS) security-alert (Jul 25)

security curmudgeon

Re: a new sql injection for aspjar guestbook security curmudgeon (Jul 12)

securityfocus

Re: Re: A comment on using CPU resources securityfocus (Jul 09)

securityfocus . 5 . stele

Re: Local privilege escalation using runasp V3.5.1 securityfocus . 5 . stele (Jul 26)
Re: Re: Local privilege escalation using runasp V3.5.1 securityfocus . 5 . stele (Jul 26)

shalom

Cross site scripting in Lotus Notes web mail shalom (Jul 06)

Shalom Carmel

Re: Getting round website authentication with Firefox Shalom Carmel (Jul 27)

shs_bulldog

Re: McAfee Intrushield IPS Abuse shs_bulldog (Jul 06)

Simple Nomad

Re: RE: Peter Gutmann data deletion theaory? Simple Nomad (Jul 28)
Re: Peter Gutmann data deletion theaory? Simple Nomad (Jul 21)

Sintigan

Imail Cookie Vulnerability (unhashed) Sintigan (Jul 05)

Sowhat .

PeanutHull Local Privilege Escalation Vulnerability Sowhat . (Jul 20)
APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce Sowhat . (Jul 13)

spam

Multiple vulnerabilities in Lantronix SLC console server spam (Jul 07)
Re: Access right escalation / severe permission problems on Raritan Console Servers spam (Jul 04)
MRV In-Reach console server: Port Access Control Bypass Vulnerability spam (Jul 18)

SPI Labs

Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2 SPI Labs (Jul 15)

Stefan Bethke

Re: /dev/random is probably not Stefan Bethke (Jul 08)

Stefan Esser

Advisory 12/2005: UseBB Multiple Vulnerabilities Stefan Esser (Jul 29)
Advisory 03/2005: Cacti Multiple SQL Injection Vulnerabilities [FIXED] Stefan Esser (Jul 02)
Advisory 10/2005: Yawp/YaWiki Remote URL Include Vulnerability Stefan Esser (Jul 12)
Advisory 09/2005: PunBB arbitrary PHP code inclusion vulnerability Stefan Esser (Jul 08)
Advisory 07/2005: Jaws Multiple Remote Code Execution Vulnerabilities Stefan Esser (Jul 06)
Advisory 08/2005: PunBB SQL Injection Vulnerability Stefan Esser (Jul 08)
Advisory 05/2005: Cacti Authentification/Addslashes Bypass Vulnerability Stefan Esser (Jul 02)
Advisory 04/2005: Cacti Remote Command Execution Vulnerability Stefan Esser (Jul 02)

Stefan Kelm

Re: Compromising pictures of Microsoft Internet Explorer! Stefan Kelm (Jul 18)

Steve

PHPXMAIL - Authentication Bypass Steve (Jul 06)
PHPsFTPd - Admin password leak Steve (Jul 13)

Steve Kemp

Re: several vulnerabilities present in Belkin wireless routers Steve Kemp (Jul 15)
Re: Compromising pictures of Microsoft Internet Explorer! Steve Kemp (Jul 15)

Steven Champeon

Re: A comment on using CPU resources Steven Champeon (Jul 09)
Re: A comment on using CPU resources Steven Champeon (Jul 09)

Steven M. Christey

Re: On classifying attacks Steven M. Christey (Jul 18)
Why Vulnerability Databases can't do everything Steven M. Christey (Jul 15)

steven . salaets

Re: Re: several vulnerabilities present in Belkin wireless routers steven . salaets (Jul 20)

stormhacker

XSS in forums Simple Message Board Version 2.0 Beta 1 stormhacker (Jul 14)

stupidfrenchdudes

Re: Microsoft Internet Explorer "javaprxy.dll" Code Execution Exploit stupidfrenchdudes (Jul 04)

Sune Kloppenborg Jeppesen

[ GLSA 200507-20 ] Shorewall: Security policy bypass Sune Kloppenborg Jeppesen (Jul 22)
[ GLSA 200507-23 ] Kopete: Vulnerability in included Gadu library Sune Kloppenborg Jeppesen (Jul 25)
[ GLSA 200507-27 ] Ethereal: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jul 28)
[ GLSA 200507-25 ] Clam AntiVirus: Integer overflows Sune Kloppenborg Jeppesen (Jul 27)
[ GLSA 200507-21 ] fetchmail: Buffer Overflow Sune Kloppenborg Jeppesen (Jul 25)
UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability Sune Kloppenborg Jeppesen (Jul 04)
[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library Sune Kloppenborg Jeppesen (Jul 27)
[ GLSA 200507-06 ] TikiWiki: Arbitrary command execution through XML-RPC Sune Kloppenborg Jeppesen (Jul 06)
[ GLSA 200507-11 ] MIT Kerberos 5: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jul 12)
[ GLSA 200507-19 ] zlib: Buffer overflow Sune Kloppenborg Jeppesen (Jul 22)
[ GLSA 200507-24 ] Mozilla Suite: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jul 27)
[ GLSA 200507-22 ] sandbox: Insecure temporary file handling Sune Kloppenborg Jeppesen (Jul 25)

sunos5 . 8

User privilege escalation exploit. sunos5 . 8 (Jul 22)

Suramya Tomar

Trillian Ver 3.1 saves password's in plain Text Suramya Tomar (Jul 30)

Suresec Advisories

[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition Suresec Advisories (Jul 11)

sylvain . roger

Shared section vulnerability when opening microsoft office document resulting in DoS sylvain . roger (Jul 27)
Vulnerability in IBM access sylvain . roger (Jul 26)
Re : [Firefox Bug 302187] New: Shared section vulnerability when opening microsoft office document resulting in DoS sylvain . roger (Jul 27)
Re: Re : [Firefox Bug 302187] New: Shared section vulnerability when opening microsoft office document resulting in DoS sylvain . roger (Jul 28)

team

Microsoft Internet Explorer "javaprxy.dll" Code Execution Exploit team (Jul 02)

Technica Forensis

Re: On classifying attacks Technica Forensis (Jul 20)

Tero Hänninen

Re: SiteMinder Multiple Vulnerabilities Tero Hänninen (Jul 11)

thegreatone2176

PhpList Sql Injection and Path Disclosure thegreatone2176 (Jul 28)
Website Baker Project Multiple Vulnerabilities thegreatone2176 (Jul 28)
Beehive Forum Multiple Vulnerabilities thegreatone2176 (Jul 25)
Multiple Vulnerabilities in PHP Surveyor thegreatone2176 (Jul 20)

Theo de Raadt

ICMP vulnerabilities Theo de Raadt (Jul 07)

Thierry Carrez

[ GLSA 200507-04 ] RealPlayer: Heap overflow vulnerability Thierry Carrez (Jul 07)
[ GLSA 200507-17 ] Mozilla Thunderbird: Multiple vulnerabilities Thierry Carrez (Jul 18)
[ GLSA 200507-15 ] PHP: Script injection through XML-RPC Thierry Carrez (Jul 15)
[ GLSA 200507-18 ] MediaWiki: Cross-site scripting vulnerability Thierry Carrez (Jul 20)
[ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability Thierry Carrez (Jul 04)
[ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure Thierry Carrez (Jul 13)
[ GLSA 200507-14 ] Mozilla Firefox: Multiple vulnerabilities Thierry Carrez (Jul 15)
[ GLSA 200507-10 ] Ruby: Arbitrary command execution through XML-RPC Thierry Carrez (Jul 12)
[ GLSA 200507-13 ] pam_ldap and nss_ldap: Plain text authentication leak Thierry Carrez (Jul 14)
[ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability Thierry Carrez (Jul 15)
[ GLSA 200507-05 ] zlib: Buffer overflow Thierry Carrez (Jul 07)
UPDATE: [ GLSA 200506-20 ] Cacti: Several vulnerabilities Thierry Carrez (Jul 08)

Thomas

Re: /dev/random is probably not Thomas (Jul 06)
Re: /dev/random is probably not Thomas (Jul 06)
Re: /dev/random is probably not Thomas (Jul 06)

Thomas Wana

Re: /dev/random is probably not Thomas Wana (Jul 02)

Thor (Hammer of God)

Re: Peter Gutmann data deletion theaory? Thor (Hammer of God) (Jul 22)

Tiago Halm

RE: Peter Gutmann data deletion theaory? Tiago Halm (Jul 22)

Tim Nelson

Re: Installation of software, and security. . . Tim Nelson (Jul 19)

Tino Wildenhain

Re: Installation of software, and security. . . Tino Wildenhain (Jul 19)

Tobias Glemser

VoIP-Phones: Weakness in proccessing SIP-Notify-Messages Tobias Glemser (Jul 06)

tobozo

Re: phpSlash account hijacking vulnerability tobozo (Jul 07)
phpSlash account hijacking vulnerability tobozo (Jul 07)

Tom Yu

Re: MITKRB5-SA-2005-003: double-free in krb5_recvauth Tom Yu (Jul 12)
MITKRB5-SA-2005-003: double-free in krb5_recvauth Tom Yu (Jul 12)
MITKRB5-SA-2005-002: buffer overflow, heap corruption in KDC Tom Yu (Jul 12)

trashtrash

Re: blogtorrent remote/local user password disclosure trashtrash (Jul 14)

Trustix Security Advisor

TSLSA-2005-0034 - multi Trustix Security Advisor (Jul 08)
TSLSA-2005-0031 - multi Trustix Security Advisor (Jul 01)
TSLSA-2005-0036 - multi Trustix Security Advisor (Jul 14)

unbelievable

Critical Patch Update April 2005 for Database 9.2 and 10.1 Update - Correction unbelievable (Jul 22)

underwood-de

Re: RE: Peter Gutmann data deletion theaory? underwood-de (Jul 22)

unsecure

PlanetFileServer v2.0.1.3 - Denial Of Service unsecure (Jul 04)
SoftiaCom MailServer - Local Password Disclosure Vulnerability unsecure (Jul 12)
SoftiaCom MailServer v2.0 - Denial Of Service unsecure (Jul 12)

Valentin Vorovenci

Update Your Bookmarks Valentin Vorovenci (Jul 19)

vames

PatchAdvisor Vulnerability Alert - Cisco CallManager Remote Denial of Service Vulnerability vames (Jul 20)

Vincent DUVERNET (Nolmë Informatique)

Re: Peter Gutmann data deletion theaory? Vincent DUVERNET (Nolmë Informatique) (Jul 22)

Volker Kuhlmann

Re: [BugTraq] Peter Gutmann data deletion theaory? Volker Kuhlmann (Jul 27)

Volker Tanger

Re: Peter Gutmann data deletion theaory? Volker Tanger (Jul 22)

walter . sobchak

Thomson Web Skill Vantage Manager walter . sobchak (Jul 28)

Walter Wickersham

RE: Microsoft Word Protection Bypass Walter Wickersham (Jul 07)

Walton, John Michael (John)

RE: [VOIPSEC] VoIP-Phones: Weakness in proccessing SIP-Notify-Messages Walton, John Michael (John) (Jul 30)
RE: [VOIPSEC] VoIP-Phones: Weakness in proccessing SIP-Notify-Messages Walton, John Michael (John) (Jul 09)

Williams, James K

Re: SiteMinder Multiple Vulnerabilities (solution) Williams, James K (Jul 19)
Re: SiteMinder Multiple Vulnerabilities Williams, James K (Jul 19)

Wojtek Kaniewski

Multiple vulnerabilities in libgadu and ekg package Wojtek Kaniewski (Jul 21)

ZATAZ Audits

ekg insecure temporary file creation and arbitrary code execution ZATAZ Audits (Jul 05)

zinho

[HSC Security Group] XSS in CartWiz zinho (Jul 26)
[HSC Security Group] SQL Injection in Product Cart 2.6 zinho (Jul 30)
[HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch zinho (Jul 16)

Zow

Re: /dev/random is probably not Zow (Jul 04)