Vulnwatch: by date

81 messages starting Oct 05 05 and ending Dec 30 05
Date index | Thread index | Author index


Wednesday, 05 October

iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability iDEFENSE Labs
RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability iDEFENSE Labs
Patches available for critical flaws in HP Openview NGSSoftware Insight Security Research

Monday, 10 October

iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability iDEFENSE Labs

Tuesday, 11 October

iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability iDEFENSE Labs
[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability Advisories
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Advisories
[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability Advisories
[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Advisories
OOO Troll - Ignore Steve Manzuik

Wednesday, 12 October

ZDI-05-001: VERITAS NetBackup Remote Code Execution zdi-disclosures

Thursday, 13 October

iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability iDEFENSE Labs

Monday, 17 October

flexbackup default config insecure temporary file creation ZATAZ Audits

Tuesday, 18 October

back orifice and snort - two words not to be used together Chris Wysopal

Wednesday, 19 October

Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability Cisco Systems Product Security Incident Response Team
[Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities) Cesar

Thursday, 20 October

iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation iDEFENSE Labs
iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation iDEFENSE Labs

Monday, 24 October

iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Labs

Tuesday, 25 October

Network Appliance iSCSI Authentication Bypass advisories

Thursday, 27 October

fetchmail security announcement 2005-02 (CVE-2005-3088) ma+nomail

Sunday, 30 October

iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability iDEFENSE Labs

Tuesday, 01 November

RE: [VulnDiscuss] new IE bug (confirmed on ALL windows) Steve Manzuik
Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability Cisco Systems Product Security Incident Response Team

Wednesday, 02 November

Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers Cisco Systems Product Security Incident Response Team

Friday, 04 November

ZDI-05-002: Clam Antivirus Remote Code Execution zdi-disclosures
iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability iDEFENSE Labs
iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability iDEFENSE Labs
[EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability Advisories

Tuesday, 08 November

[EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) Advisories
[EEYEB-20050329] Windows Metafile Multiple Heap Overflows Advisories

Thursday, 10 November

[EEYEB-20050510] - RealPlayer Data Packet Stack Overflow Advisories
[EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II Advisories

Friday, 11 November

iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability labs-no-reply () idefense com

Monday, 14 November

Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite Cisco Systems Product Security Incident Response Team

Tuesday, 15 November

[xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability alert7 () xfocus org

Wednesday, 16 November

iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability labs-no-reply () idefense com
iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability labs-no-reply () idefense com
Schneier's PasswordSafe password validation flaw vkatalov
Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone Cisco Systems Product Security Incident Response Team

Thursday, 17 November

iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability labs-no-reply () idefense com

Friday, 18 November

ZDI-05-003: Novell NetMail IMAPD Buffer Overflows zdi-disclosures

Monday, 21 November

Google Search Appliance proxystylesheet Flaws H D Moore

Tuesday, 29 November

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation Cisco Systems Product Security Incident Response Team

Wednesday, 30 November

XSS & Header Injection in Drupal and vBulletin Paul Laudanski

Thursday, 01 December

Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability Cisco Systems Product Security Incident Response Team
[xfocus-SD-051202]openMotif libUil Multiple vulnerability alert7 () xfocus org

Tuesday, 06 December

iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability labs-no-reply () idefense com
iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability labs-no-reply () idefense com

Wednesday, 07 December

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability labs-no-reply () idefense com

Friday, 09 December

Milliscript 1.4 Multiple Vulnerabilities NaPa
iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability labs-no-reply () idefense com

Monday, 12 December

iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability labs-no-reply () idefense com

Tuesday, 13 December

[EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Advisories

Wednesday, 14 December

Business Objects WebIntelligence 6.5x Account Lockout and System DoS Michael M Kemp
iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability labs-no-reply () idefense com
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure labs-no-reply () idefense com
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow labs-no-reply () idefense com
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability labs-no-reply () idefense com
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability labs-no-reply () idefense com

Thursday, 15 December

CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution Mariano Nuñez Di Croce

Friday, 16 December

iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability labs-no-reply () idefense com

Monday, 19 December

2x 0day Microsoft Windows Excel ad () heapoverflow com

Tuesday, 20 December

iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite labs-no-reply () idefense com
iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability labs-no-reply () idefense com

Wednesday, 21 December

[ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others Security Advisories
XSS vulnerabilities in Google.com Watchfire Research
iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability labs-no-reply () idefense com
fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348) ma+nomail

Thursday, 22 December

iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability labs-no-reply () idefense com

Friday, 23 December

New site location shadown

Friday, 30 December

PTnet IRCD heap exhaustion and integer overflow yeah right
Replay Attack Vulnerability on Sonys Instant Video Everywhere Service Nils Ohlmeier