Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

289 messages starting Mar 02 09 and ending Mar 31 09
Date index | Thread index | Author index

• [SECURITY] [DSA 1719-2] New GNUTLS packages fix regression Florian Weimer (Mar 02)
• Weekly Web Hacking Incidents update for Feb 25th Ofer Shezaf (Mar 02)
• Re: djbdns misformats some long response packets; patch and example attack Matthew Dempsky (Mar 02)
  • <Possible follow-ups>
  • Re: djbdns misformats some long response packets; patch and example attack Matthew Dempsky (Mar 05)
• Afian Document Manager Local File Inclusion contact (Mar 02)
• Re: Nokia N95-8 browser denial of service MustLive (Mar 02)
• YEKTA WEB Academic Web Tools CMS Multiple XSS mr . faghani (Mar 02)
• BlogMan 0.45 Multiple Vulnerabilities Salvatore "drosophila" Fresta (Mar 02)
• EZ-Blog Beta 1 Multiple SQL Injection Salvatore "drosophila" Fresta (Mar 02)
• Announcing Cap'r Mak'r kowsik (Mar 02)
• [CFP] FRHACK 2nd Call For Papers Jerome Athias (Mar 02)
• [security bulletin] HPSBUX02401 SSRT090005 rev.3 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF) security-alert (Mar 02)
• [SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities Steffen Joeris (Mar 02)
• rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl rPath Update Announcements (Mar 02)
• [ISecAuditors Security Advisories] eXtplorer Remote Code Execution ISecAuditors Security Advisories (Mar 02)
• [SECURITY] [DSA 1730-1] New proftpd-dfsg packages fix SQL injection vulnerabilites Steffen Joeris (Mar 02)
• [ MDVSA-2009:062 ] shadow-utils security (Mar 02)
• Re: Re: Local vulnerability in suexec + FastCGI + PHP configurations security . 432 (Mar 02)
• RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability Salvatore "drosophila" Fresta (Mar 02)
• Blogsa <= 1.0 Beta 3 XSS Vulnerability contact (Mar 02)
• [SECURITY] [DSA 1731-1] New ndiswrapper packages fix arbitrary code execution vulnerability Steffen Joeris (Mar 02)
• [SECURITY] [DSA 1732-1] New squid3 packages fix denial of service Steffen Joeris (Mar 03)
• WARNING - CORRECT: BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) Salvatore "drosophila" Fresta (Mar 03)
• [ MDVSA-2009:063 ] eog security (Mar 03)
• Zabbix 1.6.2 Frontend Multiple Vulnerabilities ascii (Mar 03)
  • Re: [Full-disclosure] Zabbix 1.6.2 Frontend Multiple Vulnerabilities Roberto Muñoz Fernandez (Mar 06)
  • Re: Zabbix 1.6.2 Frontend Multiple Vulnerabilities Eygene Ryabinkin (Mar 09)
• [SECURITY] [DSA 1733-1] New vim packages fix multiple vulnerabilities Steffen Joeris (Mar 03)
• Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability Secunia Research (Mar 03)
• Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability Secunia Research (Mar 03)
• BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) Salvatore "drosophila" Fresta (Mar 03)
• [USN-726-1] curl vulnerability Marc Deslauriers (Mar 03)
• [USN-727-1] network-manager-applet vulnerabilities Marc Deslauriers (Mar 03)
• [USN-727-2] NetworkManager vulnerability Marc Deslauriers (Mar 03)
• [ MDVSA-2009:064 ] imap security (Mar 03)
• NovaBoard <= 1.0.1 / XSS Vulnerability Jose Luis (Mar 03)
• [USN-726-2] curl regression Marc Deslauriers (Mar 04)
• Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Mar 04)
• CelerBB 0.0.2 Multiple Vulnerabilities Salvatore "drosophila" Fresta (Mar 05)
• Re: iDefense COMRaider 'DeleteFile()' Method Arbitrary File Deletion Vulnerability iDefense Labs (Mar 05)
• SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit (IE6/7) nospam (Mar 05)
• libc:fts_*():multiple vendors, Denial-of-service cxib (Mar 05)
• ZDI-09-013: Mozilla Firefox XUL Linked Clones Double Free Vulnerability ZDI Disclosures (Mar 05)
• iDefense COMRaider, ActiveX controls, and browser configuration Steven M. Christey (Mar 05)
  • Re: iDefense COMRaider, ActiveX controls, and browser configuration Vladimir '3APA3A' Dubrovin (Mar 06)
• [ MDVSA-2009:065 ] php4 security (Mar 05)
• [ MDVSA-2009:066 ] php security (Mar 05)
• [USN-729-1] Python Crypto vulnerability Kees Cook (Mar 06)
• [USN-728-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Mar 06)
• [USN-728-2] Firefox vulnerabilities Jamie Strandboge (Mar 06)
• [USN-728-3] Firefox vulnerabilities Jamie Strandboge (Mar 06)
• [ MDVSA-2009:067 ] libsndfile security (Mar 06)
• [USN-730-1] libpng vulnerabilities Jamie Strandboge (Mar 06)
• [Positive Technologies SA:2009-12] UMI.CMS Cross-Site Scripting vulnerability aanisimov (Mar 06)
• Wili-CMS 0.4.0 Multiple Vulnerabilities (Remote/Local File Inclusion - Authentication Bypass) Salvatore "drosophila" Fresta (Mar 06)
• [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application Mark Thomas (Mar 06)
• DEFCON CTF Submissions are in, DC-16 video online! The Dark Tangent (Mar 06)
• WarVOX 1.0.0 Released H D Moore (Mar 06)
• [Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability aanisimov (Mar 06)
• [ MDVSA-2009:068 ] poppler security (Mar 06)
• [ GLSA 200903-01 ] Vinagre: User-assisted execution of arbitrary code Pierre-Yves Rofes (Mar 06)
• nForum 1.5 Multiple SQL Injection Salvatore "drosophila" Fresta (Mar 06)
• [ GLSA 200903-02 ] ZNC: Privilege escalation Tobias Heinlein (Mar 09)
• [ GLSA 200903-03 ] Audacity: User-assisted execution of arbitrary code Tobias Heinlein (Mar 09)
• [ GLSA 200903-04 ] DevIL: User-assisted execution of arbitrary code Tobias Heinlein (Mar 09)
• [ MDVSA-2009:069 ] curl security (Mar 09)
• [ MDVSA-2009:068-1 ] poppler security (Mar 09)
• [ GLSA 200903-05 ] PDFjam: Multiple vulnerabilities Robert Buchholz (Mar 09)
• [ GLSA 200903-06 ] nfs-utils: Access restriction bypass Robert Buchholz (Mar 09)
• [ GLSA 200903-07 ] Samba: Data disclosure Robert Buchholz (Mar 09)
• [ GLSA 200903-08 ] gEDA: Insecure temporary file creation Robert Buchholz (Mar 09)
• [ GLSA 200903-09 ] OpenTTD: Execution of arbitrary code Robert Buchholz (Mar 09)
• phpCommunity 2 2.1.8 Multiple Vulnerabilities (SQL Injection / Directory Traversal / XSS) Salvatore "drosophila" Fresta (Mar 09)
• [ GLSA 200903-10 ] Irrlicht: User-assisted execution of arbitrary code Pierre-Yves Rofes (Mar 09)
• Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system alexchf . fyp (Mar 09)
  • Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system Julien Thomas (Mar 09)
• Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability Secunia Research (Mar 09)
• [ GLSA 200903-11 ] PyCrypto: Execution of arbitrary code Robert Buchholz (Mar 09)
• [ GLSA 200903-12 ] OptiPNG: User-assisted execution of arbitrary code Robert Buchholz (Mar 09)
• [ GLSA 200903-13 ] MPFR: Denial of Service Robert Buchholz (Mar 09)
• [ GLSA 200903-14 ] BIND: Incorrect signature verification Robert Buchholz (Mar 09)
• [ GLSA 200903-15 ] git: Multiple vulnerabilties Robert Buchholz (Mar 09)
• [ GLSA 200903-16 ] Epiphany: Untrusted search path Robert Buchholz (Mar 09)
• [ GLSA 200903-17 ] Real VNC: User-assisted execution of arbitrary code Robert Buchholz (Mar 09)
• [ GLSA 200903-18 ] Openswan: Insecure temporary file creation Robert Buchholz (Mar 09)
  • Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation Paul Wouters (Mar 09)
    • Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation Robert Buchholz (Mar 10)
• [ GLSA 200903-19 ] Xerces-C++: Denial of Service Robert Buchholz (Mar 09)
• [ GLSA 200903-20 ] WebSVN: Multiple vulnerabilities Robert Buchholz (Mar 09)
• DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability ddivulnalert (Mar 09)
• DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability ddivulnalert (Mar 09)
• Belkin BullDog Plus UPS-Service Buffer Overflow Vulnerability Elazar Broad (Mar 09)
• [ GLSA 200903-21 ] cURL: Arbitrary file access Tobias Heinlein (Mar 09)
• Foxit Reader Multiple Vulnerabilities (CORE-2009-0218) Core Security Technologies Advisories (Mar 09)
• SEC Consult SA-20090305-1 :: IBM Director CIM Server Remote Denial of Service Vulnerability Bernhard Mueller (Mar 10)
• SEC Consult SA-20090305-2 :: IBM Director CIM Server Local Privilege Escalation Vulnerability Bernhard Mueller (Mar 10)
• SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability Bernhard Mueller (Mar 10)
• Aryanic HighCMS and HighPortal multiple Vulnerabilities mr . faghani (Mar 10)
• [ GLSA 200903-22 ] Ganglia: Execution of arbitrary code Robert Buchholz (Mar 10)
• Multiple Vulnerabilities in iAntiVirus Carsten Eilers (Mar 10)
• [ MDVSA-2009:070 ] openoffice.org security (Mar 10)
• FINAL: Call for Papers on Cyber Warfare k g (Mar 10)
• Paper: Socket Capable Browser Plugins Result In Transparent Proxy Abuse robert (Mar 10)
• Addonics NAS Adapter Post-Auth DoS mcyr2 (Mar 10)
• [USN-731-1] Apache vulnerabilities Marc Deslauriers (Mar 10)
• [USN-732-1] dash vulnerability Marc Deslauriers (Mar 10)
• AST-2009-002: Remote Crash Vulnerability in SIP channel driver Asterisk Security Team (Mar 10)
• [ECHO_ADV_104$2009] WeBid <= 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities vuln (Mar 10)
• [ MDVSA-2009:071 ] kernel security (Mar 10)
• [ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability ISecAuditors Security Advisories (Mar 10)
• [SECURITY] [DSA 1735-1] New znc packages fix privilege escalation Florian Weimer (Mar 10)
• Sun Java System Communications Express [HTML Injection] sosoblood (Mar 11)
  • <Possible follow-ups>
  • Re: Sun Java System Communications Express [HTML Injection] sosoblood (Mar 12)
• [ GLSA 200903-24 ] Shadow: Privilege escalation Pierre-Yves Rofes (Mar 11)
• [ GLSA 200903-23 ] Adobe Flash Player: Multiple vulnerabilities Pierre-Yves Rofes (Mar 11)
• [SECURITY] [DSA 1736-1] New mahara packages fix cross-site scripting Steffen Joeris (Mar 11)
• [security bulletin] HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities security-alert (Mar 11)
• [security bulletin] HPSBMA02412 SSRT080040 rev.1 - WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access security-alert (Mar 11)
• Re: Adobe Flash Player plug-in null pointer dereference and browser crash Matthew Dempsky (Mar 11)
  • Re: Adobe Flash Player plug-in null pointer dereference and browser crash Alex Legler (Mar 12)
• [SECURITY] [DSA 1738-1] New curl packages fix arbitrary file access Nico Golde (Mar 11)
• Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team (Mar 11)
• TOORCAMP 2009 CALL FOR PARTICIPATION h1kari (Mar 12)
• TikiWiki 2.2 XSS Vulnerability in URI iliz-z (Mar 12)
  • <Possible follow-ups>
  • Re: TikiWiki 2.2 XSS Vulnerability in URI danny (Mar 13)
• [ MDVSA-2009:072 ] perl-MDK-Common security (Mar 12)
• POP Peeper 3.4.0.0 Date Remote Buffer Overflow Vulnerability Krakow Labs (Mar 12)
• [ MDVSA-2009:073 ] sarg security (Mar 12)
• [USN-724-1] Squid vulnerability Jamie Strandboge (Mar 12)
• [SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities Steffen Joeris (Mar 12)
• [ GLSA 200903-25 ] Courier Authentication Library: SQL Injection vulnerability Pierre-Yves Rofes (Mar 12)
• [ GLSA 200903-26 ] TMSNC: Execution of arbitrary code Robert Buchholz (Mar 12)
• Trellis Desk v1.0 XSS Vulnerability larry (Mar 12)
• [ MDVSA-2009:074 ] libneon0.27 security (Mar 12)
• flv2mpeg4: Malformed parameters Denial of Service Anon (Mar 12)
• [security bulletin] HPSBMA02413 SSRT080040 rev.1 - HP WMI Mapper for Windows Server 2003 and Windows Server 2008 for Itanium-based Servers, Remote Unauthorized Access to Data, Local Unauthorized Access security-alert (Mar 12)
• [Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service Valery Marchuk (Mar 12)
• [oCERT-2008-015] glib and glib-predecessor heap overflows Will Drewry (Mar 12)
• rPSA-2009-0042-1 curl rPath Update Announcements (Mar 13)
• rPSA-2009-0041-1 dhclient dhcp libdhcp4client rPath Update Announcements (Mar 13)
• [ GLSA 200903-27 ] ProFTPD: Multiple vulnerabilities Pierre-Yves Rofes (Mar 13)
• rPSA-2009-0040-1 tshark wireshark rPath Update Announcements (Mar 13)
• Apple iTunes DAAP Messages Handling Denial of Service Vulnerability  secresearch () fortinet com (Mar 13)
• rPSA-2009-0046-1 libpng rPath Update Announcements (Mar 13)
• rPSA-2009-0045-1 glib rPath Update Announcements (Mar 13)
• GeoVision LiveAudio ActiveX Control GetAudioPlayingTime() remote freed-memory access exploit nospam (Mar 13)
• [Positive Technologies SA:2009-15] Living CMS Cross-Site Scripting vulnerability aanisimov (Mar 13)
• [Positive Technologies SA:2009-14] BLOG CMS Cross-Site Scripting vulnerability aanisimov (Mar 13)
• [Positive Technologies SA:2009-20] A.CMS Multiple Vulnerabilities aanisimov (Mar 13)
• [ MDVSA-2009:075 ] firefox security (Mar 13)
• [SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure Florian Weimer (Mar 13)
• Infopop UBB.Threads Admin Credentials via SQL Injection swhite (Mar 13)
• [SECURITY] [DSA 1740-1] New yaws packages fix denial of service Steffen Joeris (Mar 16)
• [ MDVSA-2009:076 ] avahi security (Mar 16)
• [SECURITY] [DSA 1741-1] New psi packages fix denial of service Moritz Muehlenhoff (Mar 16)
• [ GLSA 200903-28 ] libpng: Multiple vulnerabilities Pierre-Yves Rofes (Mar 16)
• [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36 Bkis (Mar 16)
• rosoft media player local BOF exploit multi tagets maroc-anti-connexion (Mar 16)
• [Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow Bkis (Mar 16)
• [SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution Nico Golde (Mar 16)
• NGENUITY-2009-005 OpenCart Order By Blind SQL Injection Adam Baldwin (Mar 16)
• reporting CVE rahimeh . khodadadi (Mar 16)
• [USN-734-1] FFmpeg vulnerabilities Marc Deslauriers (Mar 17)
• [USN-738-1] GLib vulnerability Jamie Strandboge (Mar 17)
• [USN-733-1] evolution-data-server vulnerability Marc Deslauriers (Mar 17)
• CPANEL File Manager XSS Vulnerability rizki . wicaksono (Mar 17)
• [USN-736-1] GStreamer Good Plugins vulnerabilities Marc Deslauriers (Mar 17)
• [ GLSA 200903-29 ] BlueZ: Arbitrary code execution Pierre-Yves Rofes (Mar 17)
• HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration Henri Lindberg (Mar 17)
• PHPRunner SQL Injection admin (Mar 17)
• [SECURITY] [DSA 1743-1] New libtk-img packages fix arbitrary code execution Steffen Joeris (Mar 17)
• [USN-735-1] GStreamer Base Plugins vulnerability Marc Deslauriers (Mar 17)
• [ GLSA 200903-30 ] Opera: Multiple vulnerabilities Tobias Heinlein (Mar 17)
• [USN-737-1] libsoup vulnerability Marc Deslauriers (Mar 17)
• [ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability vuln (Mar 17)
• [USN-739-1] Amarok vulnerabilities Marc Deslauriers (Mar 17)
• DEFCON London DC4420 March meeting - Thursday 19th March Major Malfunction (Mar 17)
• [ECHO_ADV_106$2009] FireAnt <= 1.3 Critical File Disclosure Vulnerability vuln (Mar 17)
• [ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability vuln (Mar 17)
• [ GLSA 200903-31 ] libcdaudio: User-assisted execution of arbitrary code Pierre-Yves Rofes (Mar 17)
• iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability iDefense Labs (Mar 18)
  • Re: iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability iDefense Labs (Mar 18)
• Sitecore .NET 5.3.x - web service information disclosure security . assurance (Mar 18)
• Layered Defense Research Advisory: Format String Vulnerablity in Symantec PcAnywhere v10-12.5 dh (Mar 18)
• [USN-740-1] NSS vulnerability Jamie Strandboge (Mar 18)
• [SECURITY] [DSA 1744-1] New weechat packages fix denial of service Nico Golde (Mar 18)
• CDex v1.70b2 (.ogg) local buffer overflow exploit poc nospam (Mar 18)
• [ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service (DoS) ISecAuditors Security Advisories (Mar 19)
• [ GLSA 200903-32 ] phpMyAdmin: Multiple vulnerabilities Pierre-Yves Rofes (Mar 19)
• Command Execution in Hannon Hill Cascade Server Elliot Kendall (Mar 19)
• [USN-742-1] JasPer vulnerabilities Marc Deslauriers (Mar 19)
• rPSA-2009-0050-1 ghostscript rPath Update Announcements (Mar 19)
• Slides from uCon Security Conference 2009 available online uCon Security Conference (Mar 19)
• [ MDVSA-2009:060-1 ] nfs-utils security (Mar 20)
• [USN-741-1] Thunderbird vulnerabilities Jamie Strandboge (Mar 20)
• [SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution Steffen Joeris (Mar 20)
• LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted) Chris Evans (Mar 20)
• [ GLSA 200903-33 ] FFmpeg: Multiple vulnerabilities Pierre-Yves Rofes (Mar 20)
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert (Mar 20)
• [SECURITY] [DSA 1746-1] New ghostscript packages fix arbitrary code execution Steffen Joeris (Mar 20)
• [SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution Steffen Joeris (Mar 20)
• Bs.Player <= 2.34 Build 980 (.bsl) local buffer overflow 0day exploit (seh) nospam (Mar 20)
• [SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution Steffen Joeris (Mar 20)
• [oCERT-2009-003] LittleCMS integer errors Andrea Barisani (Mar 20)
• [ GLSA 200903-34 ] Amarok: User-assisted execution of arbitrary code Tobias Heinlein (Mar 20)
• [SECURITY] [DSA 1749-1] New Linux 2.6.26 packages fix several vulnerabilities dann frazier (Mar 21)
• [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff (Mar 23)
• ExpressionEngine Persistent Cross-Site Scripting Adam Baldwin (Mar 23)
• Rittal CMC-TC Processing Unit II multiple vulnerabilities Henri Lindberg - Smilehouse Oy (Mar 23)
• [ MDVSA-2009:077 ] pam security (Mar 23)
• [SECURITY] [DSA 1750-1] New libpng packages fix several vulnerabilities Florian Weimer (Mar 23)
• FreeBSD Security Advisory FreeBSD-SA-09:06.ktimer FreeBSD Security Advisories (Mar 23)
• CORE-2009-0122: HP OpenView Buffer Overflows CORE Security Technologies Advisories (Mar 23)
• [SECURITY] [DSA 1752-1] New webcit packages fix potential remote code execution Florian Weimer (Mar 23)
• [ MDVSA-2009:078 ] evolution-data-server security (Mar 23)
• [ MDVSA-2009:079 ] postgresql security (Mar 23)
• [USN-743-1] Ghostscript vulnerabilities Marc Deslauriers (Mar 23)
• [USN-744-1] LittleCMS vulnerabilities Marc Deslauriers (Mar 23)
• [ GLSA 200903-35 ] Muttprint: Insecure temporary file usage Pierre-Yves Rofes (Mar 24)
• [ GLSA 200903-36 ] MLDonkey: Information disclosure Pierre-Yves Rofes (Mar 24)
• [ GLSA 200903-37 ] Ghostscript: User-assisted execution of arbitrary code Pierre-Yves Rofes (Mar 24)
• [security bulletin] HPSBMA02416 SSRT090008 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code security-alert (Mar 24)
• PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation (php.ini independent) nospam (Mar 24)
• ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability ZDI Disclosures (Mar 24)
• [security bulletin] HPSBUX02409 SSRT080171 rev.1 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege security-alert (Mar 24)
• [SECURITY] [DSA 1753-1] End-of-life announcement for Iceweasel in oldstable Moritz Muehlenhoff (Mar 24)
• iDefense Security Advisory 03.24.09: Adobe Reader and Acrobat JBIG2 Encoded Stream Heap Overflow Vulnerability iDefense Labs (Mar 24)
• [ GLSA 200903-38 ] Squid: Multiple Denial of Service vulnerabilities Pierre-Yves Rofes (Mar 25)
• Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow Secunia Research (Mar 25)
  • Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow Florian Weimer (Mar 25)
    • Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow Eric C. Lukens (Mar 25)
      • Re[2]: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow Vladimir '3APA3A' Dubrovin (Mar 25)
• [SECURITY] [DSA 1745-2] New lcms packages fix regression Steffen Joeris (Mar 25)
• Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team (Mar 25)
• Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Mar 25)
• Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities Cisco Systems Product Security Incident Response Team (Mar 25)
• Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability Cisco Systems Product Security Incident Response Team (Mar 25)
• Cisco Security Advisory: Cisco IOS Software WebVPN and SSLVPN Vulnerabilities Cisco Systems Product Security Incident Response Team (Mar 25)
• [SECURITY] [DSA 1755-1] New systemtap packages fix local privilege escalation Moritz Muehlenhoff (Mar 25)
• CFP RAID 2009 Corrado Leita (Mar 25)
• [ GLSA 200903-39 ] pam_krb5: Privilege escalation Pierre-Yves Rofes (Mar 26)
• [Bkis-05-2009] PowerCHM Stack-based Buffer Overflow Bkis (Mar 26)
• ICAP adaptation: missing data flow control to client side Martin Huter (Mar 27)
• iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) Type1 Font Parsing Integer Signedness Vulnerability iDefense Labs (Mar 27)
• [USN-746-1] xine-lib vulnerability Marc Deslauriers (Mar 27)
• [USN-747-1] ICU vulnerability Marc Deslauriers (Mar 27)
• iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) GIF Decoding Heap Corruption Vulnerability iDefense Labs (Mar 27)
• [ MDVSA-2009:080 ] glib2.0 security (Mar 27)
• [USN-748-1] OpenJDK vulnerabilities Kees Cook (Mar 27)
• Aurora Nutritive Analysis Module Multiple XSS Bugs NotHugs (Mar 27)
• Moodle: Sensitive File Disclosure Christian Eibl (Mar 27)
• iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) GIF Decoding Heap Corruption Vulnerability iDefense Labs (Mar 27)
• iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) PNG Decoding Integer Overflow Vulnerability iDefense Labs (Mar 27)
• iDefense Security Advisory 03.26.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability iDefense Labs (Mar 27)
• Novell Netstorage Multiple Vulnerabilities Bugs NotHugs (Mar 27)
• [USN-745-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Mar 30)
• [SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities Noah Meyerhans (Mar 30)
• [tool release] Watcher v1.0.0 - passive Web-app security testing and compliance auditing Chris Weber (Mar 30)
• [ GLSA 200903-40 ] Analog: Denial of Service Pierre-Yves Rofes (Mar 30)
• glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit nospam (Mar 30)
• [ MDVSA-2009:081 ] libsoup security (Mar 30)
• Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow Bugs NotHugs (Mar 30)
• [SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection Steffen Joeris (Mar 30)
• CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec Paul Wouters (Mar 30)
• Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3 Positron Security (Mar 30)
• [ MDVSA-2009:082 ] krb5 security (Mar 30)
• Family Connections 1.8.1 Multiple Remote Vulnerabilities Salvatore "drosophila" Fresta (Mar 30)
  • <Possible follow-ups>
  • Re: Family Connections 1.8.1 Multiple Remote Vulnerabilities r_haudenschilt (Mar 31)
• DeepSec 2009 - Call for Papers is open DeepSec Conference (Mar 30)
• [USN-749-1] libsndfile vulnerability Marc Deslauriers (Mar 30)
• Community CMS 0.5 Multiple SQL Injection Vulnerabilities Salvatore "drosophila" Fresta (Mar 30)
• [ GLSA 200903-41 ] gedit: Untrusted search path Pierre-Yves Rofes (Mar 31)
• [SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure Moritz Muehlenhoff (Mar 31)
• ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability ZDI Disclosures (Mar 31)
• Zabbix Multiple Frontend CSRF (Password reset & command execution) Adam Baldwin (Mar 31)
• [ECHO_ADV_108$2009] JobHut <= 1.2 (pk) Remote Sql Injection Vulnerability vuln (Mar 31)
• [USN-750-1] OpenSSL vulnerability Jamie Strandboge (Mar 31)
• [SECURITY] [DSA 1759-1] New strongswan packages fix denial of service Steffen Joeris (Mar 31)
• [SECURITY] [DSA 1760-1] New openswan packages fix denial of service Steffen Joeris (Mar 31)
• aspWebCalendar Free Edition bug joseph . giron13 (Mar 31)
• Re: [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability tiha (Mar 31)
• Cisco ASA5520 Web VPN Host Header XSS Bugs NotHugs (Mar 31)
• [Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities Valery Marchuk (Mar 31)
• webEdition 6.0.0.4 Local File Inclusion Salvatore "drosophila" Fresta (Mar 31)
• [DSECRG-09-013] IBM WebSphere Application Server 7.0 Multiple XSS Vulnerabilities DSecRG (Mar 31)
• [security bulletin] HPSBMA02416 SSRT090008 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code security-alert (Mar 31)
• [DSECRG-09-016] SAP SAPDB Multiple XSS Alexandr Polyakov (Mar 31)
• [DSECRG-09-030] PrecisionID Datamatrix ActiveX control - Arbitrary File overwriting DSecRG (Mar 31)
• CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server CORE Security Technologies Advisories (Mar 31)

Previous period

Next period