NTBugtraq (date)
January 19, 2005
- RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e), NGSSoftware Insight Security Research, 18:41
- Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a), NGSSoftware Insight Security Research, 18:41
- RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g), NGSSoftware Insight Security Research, 18:41
- RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f), NGSSoftware Insight Security Research, 18:41
- [VulnWatch] MSN Heartbeat Control Buffer Overflow, NGSSoftware Insight Security Research, 18:40
- [VulnWatch] Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c), NGSSoftware Insight Security Research, 18:40
- [Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 18:40
- Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 18:40
- [Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Berend-Jan Wever, 18:39
- [Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Thierry Zoller, 18:39
- [VulnWatch] Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 18:39
- Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 18:39
- Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 18:39
- BCS 2005 Asia - Final Speakers list and Call for Posters, Anthony Zboralski, 18:39
- [Full-Disclosure] Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Rafel Ivgi, The-Insider, 18:38
- [Full-Disclosure] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 18:38
- FW: Running IE with decreased privileges, Russ, 18:37
- FW: NAI ftp server is case sensitive - GroupShield 5.2 stops updating, Russ, 18:37
- NAI ftp server is case sensitive - GroupShield 5.2 stops updating, Richard Carde, 18:35
- Running IE with decreased privileges, Ivan Jones, 18:35
- [Full-Disclosure] (no subject), The Insider, 18:34
- Windows ANI File Parsing Proof Of Concept (MS05-002), Assaf, 18:34
- Administrivia #29414 - Virus/Exploit detected in NTBugtraq messages, Russ, 18:34
- Re: Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser, Bill Royds, 18:34
- Veritas Backup Exec Name Service Remote Universal Exploit, Keif Gwinn, 18:34
- Re: Firespoofing [Firefox 1.0], Matthias Fichtner, 18:34
- IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 18:33
- IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 18:33
- IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 18:33
- IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 18:33
- IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 18:33
- IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 18:33
- IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 18:33
- IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 18:33
- IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 18:33
- Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 18:33
- YEY AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 18:33
- Administrivia #29444 - Apologies for the deluge, Russ, 18:33
- EEYE: Windows ANI File Parsing Buffer Overflow, Derek Soeder, 18:33
- Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser, Peter Kruse, 18:33
January 11, 2005
- [Full-Disclosure] Re: Firespoofing [Firefox 1.0], Pavel Kankovsky, 17:25
- Alert: Microsoft Security Bulletin MS05-003 - Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250), Russ Cooper, 16:24
- Alert: Microsoft Security Bulletin MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711), Russ Cooper, 16:24
- Alert: Microsoft Security Bulletin MS05-001 - Vulnerability in HTML Help Could Allow Code Execution (890175), Russ Cooper, 16:24
- RE: [Full-Disclosure] Firespoofing [Firefox 1.0], Soderland, Craig, 12:22
- RE: [Full-Disclosure] UPDATED: the insider exploit( = the latest ie0day which involves SHOWMODALDIALOG), Ferruh Mavituna, 08:21
- RE: [Full-Disclosure] UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG), Rafel Ivgi, The-Insider, 06:20
January 10, 2005
- [Full-Disclosure] Firespoofing [Firefox 1.0], mikx, 20:56
- [Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow, Team SHATTER (Application Security, Inc.), 19:55
- [Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation, Team SHATTER (Application Security, Inc.), 19:55
- [Full-Disclosure] UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG), Liu Die Yu, 15:33
- [Full-Disclosure] applicable exploit for winxp-sp2-uptodate Internet Explorer, Liu Die Yu, 15:13
- Re: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS), xyberpix, 00:18
January 07, 2005
- RE: [Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, ALD, Aditya, Aditya Lalit Deshmukh, 12:16
- [Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%, Rafel Ivgi, The-Insider, 02:22
- Re: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRIS and SecureIIS), Frederic Charpentier, 00:51
- [Full-Disclosure] Multiple Backdoors found in eEye Products (IRIS and SecureIIS), Lance Gusto, 00:01
January 06, 2005
- [Full-Disclosure] (no subject), Michael Evanchik, 23:21
- [Full-Disclosure] Re: *nix data wipe tools, Pavel Machek, 23:00
- [Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, Rafel Ivgi, The-Insider, 20:59
- WinAc AND WinHKI ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 20:19
- [VulnWatch] WinAce - GZIP File Directory Transversal, Rafel Ivgi, The-Insider, 18:07
- Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2, Berend-Jan Wever, 17:47
- [VulnWatch] WinHKI - CAB File Directory Transversal, Rafel Ivgi, The-Insider, 15:26
- [VulnWatch] WinHKI - BH File Directory Transversal, Rafel Ivgi, The-Insider, 14:05
- [VulnWatch] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow, Rafel Ivgi, The-Insider, 12:44
- [Full-Disclosure] WinAce & WinHKI - ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 08:21
- [Full-Disclosure] All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow, Rafel Ivgi, The-Insider, 07:00
January 05, 2005
- [VulnWatch] IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 23:44
- [VulnWatch] IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 22:54
- [VulnWatch] IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 22:04
- [VulnWatch] IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 21:23
- [VulnWatch] IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 20:13
- [VulnWatch] IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 19:12
- [VulnWatch] IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 18:11
- IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 17:21
- [VulnWatch] IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 17:21
- IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 17:11
- IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 17:01
- IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 16:51
- IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 16:40
- IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 16:20
- [VulnWatch] IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 16:20
- IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 16:10
- IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 16:00
- IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 15:49