Bugtraq: by author

243 messages starting Sep 16 09 and ending Sep 23 09
Date index | Thread index | Author index


Adam Laurie

ANNOUNCE: RFIDIOt release - v0.z - 16th September, 2009 Adam Laurie (Sep 16)

Adrian P

Multiple Remote Command Execution vulnerabilities on Avaya Intuity Audix LX (plus some client-side bugs) Adrian P (Sep 18)

adv

[ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability adv (Sep 14)

Akita Software Security

yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities Akita Software Security (Sep 08)

Alexandr Polyakov

(edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods Alexandr Polyakov (Sep 28)
[DSECRG-09-043] SAP GUI 7.1 Insecure Method Alexandr Polyakov (Sep 28)

Alex Legler

[ GLSA 200909-05 ] Openswan: Denial of Service Alex Legler (Sep 09)
[ GLSA 200909-10 ] LMBench: Insecure temporary file usage Alex Legler (Sep 09)
[ GLSA 200909-08 ] C* music player: Insecure temporary file usage Alex Legler (Sep 09)
[ GLSA 200909-09 ] Screenie: Insecure temporary file usage Alex Legler (Sep 09)
[ GLSA 200909-12 ] HTMLDOC: User-assisted execution of arbitrary code Alex Legler (Sep 14)
[ GLSA 200909-19 ] Dnsmasq: Multiple vulnerabilities Alex Legler (Sep 21)
[ GLSA 200909-18 ] nginx: Remote execution of arbitrary code Alex Legler (Sep 18)
[ GLSA 200909-07 ] TkMan: Insecure temporary file usage Alex Legler (Sep 09)
[ GLSA 200909-02 ] libvorbis: User-assisted execution of arbitrary code Alex Legler (Sep 08)
[ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage Alex Legler (Sep 09)
[ GLSA 200909-03 ] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code Alex Legler (Sep 09)
[ GLSA 200909-14 ] Horde: Multiple vulnerabilities Alex Legler (Sep 14)
[ GLSA 200909-15 ] Lynx: Arbitrary command execution Alex Legler (Sep 14)
[ GLSA 200909-04 ] Clam AntiVirus: Multiple vulnerabilities Alex Legler (Sep 09)
[ GLSA 200909-01 ] Linux-PAM: Privilege escalation Alex Legler (Sep 08)
[ GLSA 200909-13 ] irssi: Execution of arbitrary code Alex Legler (Sep 14)
[ GLSA 200909-20 ] cURL: Certificate validation error Alex Legler (Sep 25)
[ GLSA 200909-06 ] aMule: Parameter injection Alex Legler (Sep 09)

Alex Roichman

Regular Expression Denial of Service Alex Roichman (Sep 11)

Alfred Huger

Open Beta - New Free AV Software Alfred Huger (Sep 09)

Andrea Barisani

[oCERT-2009-013] yTNEF/Evolution TNEF attachment decoder input sanitization errors Andrea Barisani (Sep 08)

Aras "Russ" Memisyazici

RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Aras "Russ" Memisyazici (Sep 17)
3rd party patch for XP for MS09-048? Aras "Russ" Memisyazici (Sep 15)

Arturo 'Buanzo' Busleiman

[ADVISORY] NetCache URL DoS - Argentinian ISP Arturo 'Buanzo' Busleiman (Sep 02)

Bill Borskey

iphone email client does not validate ssl certificates Bill Borskey (Sep 11)

bob

Re: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago bob (Sep 09)

Bruce Potter

ShmooCon 2010 CFP Bruce Potter (Sep 11)

chr1x

WinRAR v3.80 - ZIP Filename Spoofing chr1x (Sep 29)

Christopher Kruegel

Call for Participation - ACM Conference on Computer and Communications Security (CCS) Christopher Kruegel (Sep 24)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Cisco IOS Software Network Time Protocol Packet Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software Object-group Access Control List Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)

contact . fingers

Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation. contact . fingers (Sep 23)

CORE Security Technologies Advisories

CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server CORE Security Technologies Advisories (Sep 09)

crashbrz

Engeman - SQL Injection Vulnerability (vendor url erratum) crashbrz (Sep 24)
Siemens Gigaset SE361 Wlan - Remote Reboot crashbrz (Sep 11)

CrAzY_CrAcKeR

cour supreme 'index.php' SQL Injection & Local File Include Vulnerability CrAzY_CrAcKeR (Sep 23)
rubrique 'rubrique.php' SQL Injection Vulnerability CrAzY_CrAcKeR (Sep 21)

david

[MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues david (Sep 22)

David Vieira-Kurz

[MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure David Vieira-Kurz (Sep 28)
[MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure David Vieira-Kurz (Sep 28)

Dazz . band

Dawaween V 1.03 <<----SQL Injection Exploit Dazz . band (Sep 21)

DokFLeed

[Advisory] ChartDirector Critical File Access DokFLeed (Sep 09)

Dr_IDE

Multiple Vulnerabilities Dr_IDE (Sep 25)

Earnhart, Benjamin J

RE: Re: Multiple RDP Connections BSOD DOS Earnhart, Benjamin J (Sep 09)

Elizabeth . a . greene

Re: Re: 3rd party patch for XP for MS09-048? Elizabeth . a . greene (Sep 16)

Elvedin Trnjanin

Re: Multiple RDP Connections BSOD DOS Elvedin Trnjanin (Sep 09)

Eric C. Lukens

Re: 3rd party patch for XP for MS09-048? Eric C. Lukens (Sep 16)

Eric Kimminau

Re: 3rd party patch for XP for MS09-048? Eric Kimminau (Sep 16)

Eyal Udassin

C4 SCADA Security Advisory - OSISoft PI Server Authentication Weakness Eyal Udassin (Sep 30)

Fabian Yamaguchi

TCP/IP Orphaned Connections Vulnerability Fabian Yamaguchi (Sep 09)

Federico Maggi

COMPENG 2010 - Extended Submission Deadline Federico Maggi (Sep 25)

Florian Weimer

[SECURITY] [DSA 1895-1] New xmltooling packages fix potential code execution Florian Weimer (Sep 24)
[SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution Florian Weimer (Sep 28)
[SECURITY] [DSA 1878-2] New devscripts packages fix regressions Florian Weimer (Sep 11)
[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution Florian Weimer (Sep 01)
[SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution Florian Weimer (Sep 02)

Gadi Evron

Re: Regular Expression Denial of Service Gadi Evron (Sep 11)
Re: Regular Expression Denial of Service Gadi Evron (Sep 11)

Giuseppe Fuggiano

FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution Giuseppe Fuggiano (Sep 29)

Guido Landi

Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Guido Landi (Sep 02)
Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Guido Landi (Sep 02)

h1kari

ToorCon 11 Preliminary Lineup Announced! h1kari (Sep 22)

hackerwebzine

Re: Regular Expression Denial of Service hackerwebzine (Sep 28)

igottabug

SMB SRV2.SYS Denial of Service PoC igottabug (Sep 09)

Inferno

Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more Inferno (Sep 16)
Pwning Opera Unite with Inferno's Eleven Inferno (Sep 01)

info

Various Orion application application server example pages are vulnerable to XSS. info (Sep 08)

Jamie Strandboge

[USN-821-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Sep 10)
[USN-827-1] Dnsmasq vulnerabilities Jamie Strandboge (Sep 02)
[USN-833-1] KDE-Libs vulnerability Jamie Strandboge (Sep 18)
[USN-834-1] PostgreSQL vulnerabilities Jamie Strandboge (Sep 21)
[USN-829-1] Qt vulnerability Jamie Strandboge (Sep 11)

Jarle Aase

War FTP Daemon Remote Denial Of Service Vulnerability Jarle Aase (Sep 14)

Jeff Moss

Black Hat DC Call for Papers is now OPEN Jeff Moss (Sep 24)

Jeffrey Walton

Re: Norman Internet Update Deamon sends cleartext license key on update Jeffrey Walton (Sep 01)
Re: Re[2]: Regular Expression Denial of Service Jeffrey Walton (Sep 14)
Re: 3rd party patch for XP for MS09-048? Jeffrey Walton (Sep 15)
Re: 3rd party patch for XP for MS09-048? Jeffrey Walton (Sep 16)

Jerome Athias

Multiple Vulnerabilities Jerome Athias (Sep 28)

Jim Duncan

RE: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago Jim Duncan (Sep 09)

Johannes Greil

SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console Johannes Greil (Sep 01)

John Menerick

Re: Multiple RDP Connections BSOD DOS John Menerick (Sep 09)

John Morrison

Re: [Full-disclosure] 3rd party patch for XP for MS09-048? John Morrison (Sep 17)

Juha-Matti Laurio

MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago Juha-Matti Laurio (Sep 08)

Juliano Rizzo

MD5 hash extension attack breaks API authentication of Flickr and others Juliano Rizzo (Sep 30)

Julien TINNES

Iret #GP on pre-commit handling failure: the NetBSD case (CVE-2009-2793) Julien TINNES (Sep 16)

karakorsankara

Novell eDirectory 8.8 SP5 Dhost Http Server DoS karakorsankara (Sep 08)

Kees Cook

[USN-810-2] NSS regression Kees Cook (Sep 02)
[Suspected Spam][USN-835-1] neon vulnerabilities Kees Cook (Sep 21)
[USN-828-1] PAM vulnerability Kees Cook (Sep 09)

Kingcope

nginx - low risk webdav destination bug Kingcope (Sep 23)

Krakow Labs

4f: The File Format Fuzzing Framework Krakow Labs (Sep 09)

Larry Seltzer

RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Larry Seltzer (Sep 16)
RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Larry Seltzer (Sep 16)

Mailing lists at Core Security Technologies

Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Mailing lists at Core Security Technologies (Sep 23)

Marc Deslauriers

[USN-832-1] FreeRADIUS vulnerability Marc Deslauriers (Sep 16)
[USN-831-1] OpenEXR vulnerabilities Marc Deslauriers (Sep 14)
[USN-837-1] Newt vulnerability Marc Deslauriers (Sep 24)
[USN-836-1] WebKit vulnerabilities Marc Deslauriers (Sep 23)
[USN-830-1] OpenSSL vulnerability Marc Deslauriers (Sep 14)
[USN-838-1] Dovecot vulnerabilities Marc Deslauriers (Sep 28)

Marc Heuse

Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) Marc Heuse (Sep 18)

Marc Ruef

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation Marc Ruef (Sep 08)

Matthew Dempsky

nginx internal DNS cache poisoning Matthew Dempsky (Sep 17)

Matt Riddell

Re: 3rd party patch for XP for MS09-048? Matt Riddell (Sep 16)

Maxim Dounin

Re: nginx internal DNS cache poisoning Maxim Dounin (Sep 17)

Moritz Muehlenhoff

[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures Moritz Muehlenhoff (Sep 16)
[SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff (Sep 14)
[SECURITY] [DSA 1886-1] New iceweasel packages fix several vulnerabilities Moritz Muehlenhoff (Sep 14)
[SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing Moritz Muehlenhoff (Sep 16)

MustLive

Re: DoS vulnerability in Google Chrome MustLive (Sep 09)
Cross-Site Scripting vulnerability in eCaptcha MustLive (Sep 28)
Cross-Site Scripting vulnerability in E107 MustLive (Sep 24)
Vulnerabilities in E107 MustLive (Sep 28)

Nam Nguyen

[BMSA-2009-06] Remote code execution in BKAV eOffice Nam Nguyen (Sep 01)

Nico Golde

[SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting Nico Golde (Sep 09)
[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution Nico Golde (Sep 14)
[SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution Nico Golde (Sep 08)
[SECURITY] [DSA 1897-1] New horde3 packages fix arbitrary code execution Nico Golde (Sep 28)

nitrØus

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure nitrØus (Sep 25)

nobody

Re: Re: Multiple RDP Connections BSOD DOS nobody (Sep 09)

noloader

Re: [TZO-08-2009] Bitdefender generic bypass/evasion noloader (Sep 08)

nospam

Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges nospam (Sep 29)

nullcon nullcon

nullcon Goa 2010 Call For Papers nullcon nullcon (Sep 14)

Pavel Kankovsky

Re: Regular Expression Denial of Service Pavel Kankovsky (Sep 14)
Re: Regular Expression Denial of Service Pavel Kankovsky (Sep 14)

Pavel Machek

Re: iphone email client does not validate ssl certificates Pavel Machek (Sep 28)

Paweł Łaskarzewski

Mambo 4.6.3 arbitrary file upload Paweł Łaskarzewski (Sep 21)

pocadm

International Hacking & Security Conference "POC2009" and Call for Paper pocadm (Sep 02)

Przemyslaw Frasunek

Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference Przemyslaw Frasunek (Sep 14)

research

[DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities research (Sep 23)

Reversemode

Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD Reversemode (Sep 08)

Rob Thompson

Re: 3rd party patch for XP for MS09-048? Rob Thompson (Sep 16)

Salvatore Fresta aka Drosophila

Nullam Blog Multiple Remote Vulnerabilities Salvatore Fresta aka Drosophila (Sep 10)
T-HTB Manager Mutiple Blind SQL Injection Salvatore Fresta aka Drosophila (Sep 10)

Sebastian Wolfgarten

Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit Sebastian Wolfgarten (Sep 17)

Sebastien Delafond

[SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution Sebastien Delafond (Sep 02)

Secunia Research

Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow Secunia Research (Sep 08)
Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow Secunia Research (Sep 01)
Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow Secunia Research (Sep 01)

security

[ MDVSA-2009:238 ] openssl security (Sep 21)
[ MDVSA-2009:237 ] openssl security (Sep 21)
[ MDVSA-2009:225 ] qt4 security (Sep 08)
[ MDVSA-2009:232 ] libsamplerate security (Sep 11)
[ MDVSA-2009:243 ] freetype2 security (Sep 23)
[ MDVSA-2009:235 ] silc-toolkit security (Sep 15)
[ MDVSA-2009:228 ] libneon security (Sep 11)
[ MDVSA-2009:177 ] postgresql security (Sep 30)
[ MDVSA-2009:245 ] glib2.0 security (Sep 24)
[ MDVSA-2009:197-2 ] nss security (Sep 11)
[ MDVSA-2009:197 ] nss security (Sep 01)
[ MDVSA-2009:234-1 ] silc-toolkit security (Sep 15)
[ MDVSA-2009:242 ] dovecot security (Sep 22)
[ MDVSA-2009:231 ] htmldoc security (Sep 11)
[ MDVSA-2009:241 ] squid security (Sep 22)
[ MDVSA-2009:234 ] silc-toolkit security (Sep 15)
[ MDVSA-2009:242-1 ] dovecot security (Sep 22)
[ MDVSA-2009:230 ] pidgin security (Sep 11)
[ MDVSA-2009:229 ] cyrus-imapd security (Sep 11)
[ MDVSA-2009:248 ] php security (Sep 25)
[ MDVSA-2009:226 ] aria2 security (Sep 09)
[ MDVSA-2009:249 ] newt security (Sep 28)
[ MDVSA-2009:176 ] postgresql security (Sep 30)
[ MDVSA-2009:226 ] freeradius security (Sep 10)
[ MDVSA-2009:247 ] php security (Sep 25)
[ MDVSA-2009:243-1 ] freetype2 security (Sep 24)
[ MDVSA-2009:244 ] xfig security (Sep 23)
[ MDVSA-2009:239 ] openssl security (Sep 22)
[ MDVSA-2009:246 ] php security (Sep 25)
[ MDVSA-2009:236 ] firefox security (Sep 21)
[ MDVSA-2009:233 ] kernel security (Sep 15)
[ MDVSA-2009:240 ] apache security (Sep 22)

security-alert

[security bulletin] HPSBST02459 SSRT080134 rev.2 - HP StorageWorks Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders, Denial of Service (DoS) security-alert (Sep 18)
[security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access security-alert (Sep 22)
[security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access security-alert (Sep 22)
[security bulletin] HPSBUX02458 SSRT090104 rev.1 - HP-UX Running bootpd, Remote Denial of Service (DoS) security-alert (Sep 16)
[security bulletin] HPSBMA02461 SSRT090187 rev.1 - HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access security-alert (Sep 28)

snip3r ir4Q

vBulletin 3.8.2 Denial of Service Exploit snip3r ir4Q (Sep 14)

ss_contacts

Local privilege escalation vulnerability in Protector Plus Antivirus (Proland Software) ss_contacts (Sep 15)
Local privilege escalation vulnerability in Trustport security software ss_contacts (Sep 28)

Stefan Bauer

Norman Internet Update Deamon sends cleartext license key on update Stefan Bauer (Sep 01)

Stefan Esser

Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability Stefan Esser (Sep 18)

Stefan Friedli

[scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability Stefan Friedli (Sep 21)

Stefano Zanero

SeacureIT Preview Conference 2009 Stefano Zanero (Sep 09)

Stefan Streichsbier

SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities Stefan Streichsbier (Sep 17)

Steffen Joeris

[SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings Steffen Joeris (Sep 10)
[SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting Steffen Joeris (Sep 15)
[SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution Steffen Joeris (Sep 24)
[SECURITY] [DSA 1883-2] New nagios2 packages fix regression Steffen Joeris (Sep 14)
[SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution Steffen Joeris (Sep 23)
[SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution Steffen Joeris (Sep 23)
[SECURITY] [DSA 1891-1] New changetrack packages fix arbitrary code execution Steffen Joeris (Sep 22)
[SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution Steffen Joeris (Sep 21)

Steve Shockley

Re: iphone email client does not validate ssl certificates Steve Shockley (Sep 29)

Susan Bradley

Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 17)
Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 17)
Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)

The Sp3ctacle

Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief The Sp3ctacle (Sep 17)

Thierry Zoller

Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Thierry Zoller (Sep 08)
Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Thierry Zoller (Sep 02)
Re[2]: Regular Expression Denial of Service Thierry Zoller (Sep 11)

Thor (Hammer of God)

RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)

Tim Medin

Multiple RDP Connections BSOD DOS Tim Medin (Sep 09)
Re: Multiple RDP Connections BSOD DOS Tim Medin (Sep 10)

Tobias Heinlein

[ GLSA 200909-16 ] Wireshark: Denial of Service Tobias Heinlein (Sep 14)
[ GLSA 200909-17 ] ZNC: Directory traversal Tobias Heinlein (Sep 14)

Tobias Klein

[TKADV2009-007] Apple iPhone OS AudioCodecs Heap Buffer Overflow Tobias Klein (Sep 14)

Tom Grace

Re: 3rd party patch for XP for MS09-048? Tom Grace (Sep 16)

Tom Neaves

Re: Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point Tom Neaves (Sep 16)

Ubuntu Privacy Remix Team

[UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues Ubuntu Privacy Remix Team (Sep 21)

Vivek Ramachandran

SecurityTubeCon CFP, Venue: Cyberspace! Vivek Ramachandran (Sep 10)

Vladimir '3APA3A' Dubrovin

Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Vladimir '3APA3A' Dubrovin (Sep 02)
Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Vladimir '3APA3A' Dubrovin (Sep 02)

VMware Security team

VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues. VMware Security team (Sep 08)
VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security team (Sep 01)

Yossi Yakubov

Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point Yossi Yakubov (Sep 15)

ZDI Disclosures

ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability ZDI Disclosures (Sep 10)
ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability ZDI Disclosures (Sep 08)
ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability ZDI Disclosures (Sep 10)
ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability ZDI Disclosures (Sep 10)
ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability ZDI Disclosures (Sep 23)