Vulnerability Development (thread)

WHM AutoPilot Security Release [ Plus Upgrade Instructions ], GulfTech Security, 2004/12/31
[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution, Martin Schulze, 2004/12/31
Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge), beniwiedmer, 2004/12/31
Bluetooth: BlueSnarf and BlueBug Full Disclusore, Adam Laurie, 2004/12/31
ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks, steven, 2004/12/31
[EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC, houseofdabus HOD, 2004/12/31
- Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC, Alberto Garcia Hierro, 2004/12/31
  - Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC, Steve Friedl, 2004/12/31
SQL Injection Vulnerability In IBProArcade, mike bailey, 2004/12/31
MDKSA-2004:166 - Updated tetex packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/12/30
MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability, Mandrake Linux Security Team, 2004/12/30
Re: Strange Java Loader (not so strange - Trojan.ByteVerify), K-OTiK Security, 2004/12/30
Strange Java Loader, duffbeer, 2004/12/30
MDKSA-2004:165 - Updated koffice packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/12/30
MDKSA-2004:163 - Updated kdegraphics packages fix buffer overflow vulnerability, Mandrake Linux Security Team, 2004/12/30
MDKSA-2004:159 - Updated glibc packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/30
MDKSA-2004:164 - Updated cups packages fix buffer overflow vulnerability, Mandrake Linux Security Team, 2004/12/30
[SECURITY] [DSA 619-1] New xpdf packages fix arbitrary code execution, Martin Schulze, 2004/12/30
NetCat V 1.11 Multiple Bugs, CorryL, 2004/12/30
KorWeblog php injection Vulnerability, Min-sung Choi, 2004/12/30
MDKSA-2004:161 - Updated xpdf packages fix buffer overflow vulnerability, Mandrake Linux Security Team, 2004/12/30
MDKSA-2004:160 - Updated kdelibs packages fix konqueror email vulnerability, Mandrake Linux Security Team, 2004/12/30
[SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities, Martin Schulze, 2004/12/30
[Full-Disclosure] [ GLSA 200412-27 ] PHProjekt: Remote code execution vulnerability, Thierry Carrez, 2004/12/30
[Full-Disclosure] Re: Fwd: Re: [USN-52-1] vim vulnerability, Ciaran McCreesh, 2004/12/29
[Full-Disclosure] Heap overflow in Mozilla Browser <= 1.7.3 NNTP code., Maurycy Prodeus, 2004/12/29
[ GLSA 200412-24 ] Xpdf, GPdf: New integer overflows, Thierry Carrez, 2004/12/29
Heap overflow in Mozilla Browser <= 1.7.3 NNTP code., Maurycy Prodeus, 2004/12/29
Re: [Full-Disclosure] Again: zone transfers, a spammer's dream?, Jorrit Kronjee, 2004/12/29
- Re: [Full-Disclosure] Again: zone transfers, a spammer's dream?, xyberpix, 2004/12/30
[CLA-2004:909] Conectiva Security Announcement - netpbm, Conectiva Updates, 2004/12/29
php-Calendar File Include Vulnerability [ Command Exec ], GulfTech Security, 2004/12/29
Sanity Worm Concepts, Andy Fewtrell, 2004/12/29
- Re: Sanity Worm Concepts, Paul Laudanski, 2004/12/30
QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004], Julio Cesar Fort, 2004/12/29
[Full-Disclosure] [USN-53-1] imlib vulnerabilities, Martin Pitt, 2004/12/29
[Full-Disclosure] DJB's contest (repost after being moderated on BGTQ), support, 2004/12/29
[Full-Disclosure] AOL website redirection scripts allow for abuse, Michel Blomgren, 2004/12/29
[Full-Disclosure] Re: Windows (XP SP2) Remote code execution with parameters, ShredderSub7, 2004/12/29
KDE Security Advisory: kpdf Buffer Overflow Vulnerability, Dirk Mueller, 2004/12/28
XSA-2004-7: stack overflow in AIFF demultiplexer, Michael Roitzsch, 2004/12/28
Netcat v1.11 For Windows , New fixed version, Hat-Squad Security Team, 2004/12/28
[HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included, Hat-Squad Security Team, 2004/12/28
- Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included, Chris Wysopal, 2004/12/28
Remote code execution with parameters withoutu ser interaction, even with XP SP2, ShredderSub7 SecExpert, 2004/12/28
Did a 16-bit counter overflow shut down Comair?, Richard M. Smith, 2004/12/28
- Re: Did a 16-bit counter overflow shut down Comair?, Mike Nice, 2004/12/29
- Re: Did a 16-bit counter overflow shut down Comair?, Avleen Vig, 2004/12/29
Multiple WHM Autopilot Vulnerabilities, GulfTech Security, 2004/12/28
possible error in latest NGS realplayer advisory, Marc Bejarano, 2004/12/28
MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities, Mandrake Linux Security Team, 2004/12/28
Multiple Vulnerabilities in Moodle, Bartek Nowotarski, 2004/12/28
- Re: Multiple Vulnerabilities in Moodle, Martin Dougiamas, 2004/12/30
[Full-Disclosure] [ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities, Thierry Carrez, 2004/12/28
[Full-Disclosure] [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities, Thierry Carrez, 2004/12/28
[Full-Disclosure] Suggested filters against PHP Attacking Worms, Paul Laudanski, 2004/12/28
[Full-Disclosure] [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside., class 101, 2004/12/27
- [Full-Disclosure] [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside., class 101, 2004/12/27
[Full-Disclosure] Multiple vulnerabilities in AOL and AOL affiliate web sites, Michel Blomgren, 2004/12/27
[Full-Disclosure] (no subject), class 101, 2004/12/26
Re: [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 2004/12/26
- Re: [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 2004/12/29
RE: [Full-Disclosure] YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/26
Microsoft Internet Explorer SP2 Fully Automated Remote Compromise, Paul, 2004/12/25
New Winhlp32.exe vuln, bad_son, 2004/12/25
Re: New Santy-Worm attacks *all* PHP-skripts ( Santy.c ? ), K-OTiK Security, 2004/12/25
New Santy-Worm attacks *all* PHP-skripts, Juergen Schmidt, 2004/12/25
- Message not available
  - [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Juergen Schmidt, 2004/12/26
PHPBB worm in action, Colin Keith, 2004/12/25
CleanCache v2.19: False Sense of Security, WBG Links, 2004/12/25
[Full-Disclosure] YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/25
- Message not available
  - Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2, Andrew Smith, 2004/12/27
[Full-Disclosure] Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow, flashsky, 2004/12/25
- [Full-Disclosure] Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow, Brett Glass, 2004/12/26
  - Message not available
    - Re: [Full-Disclosure] Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow, Brett Glass, 2004/12/26
- Re: Microsoft Windows LoadImage API IntegerBuffer overflow, Berend-Jan Wever, 2004/12/28
[Full-Disclosure] YEY AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/24
Final Call for Papers & Workshops - BCS Asia 2005, Anthony.zboralski, 2004/12/24
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution, Martin Schulze, 2004/12/24
XSS in yacy 0.31, Donato Ferrante, 2004/12/24
STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard, advisory, 2004/12/24
[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution, Martin Schulze, 2004/12/24
[Full-Disclosure] [ADVISORY] Scripting Vulnerabilities in Indian Email Providers Put Millions At Risk, S G Masood, 2004/12/24
[Full-Disclosure] Cross-Site Scripting - an industry-wide problem, mikx, 2004/12/24
- Re: [Full-Disclosure] Cross-Site Scripting - an industry-wide problem, morning_wood, 2004/12/24
[Full-Disclosure] Plesk 7 Cross-Site Scripting, Andrew Smith, 2004/12/24
[VulnWatch] IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L), NGSSoftware Insight Security Research, 2004/12/24
raptor's xmas pack 2004, Marco Ivaldi, 2004/12/24
[VulnWatch] IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/24
[VulnWatch] Oracle wrapped procedure overflow (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
[Security Bulletin] SSRT4696 rev.0 - HP Tru64 UNIX TCP Stack Remote Denial of Service (DoS), Boren, Rich (SSRT), 2004/12/23
[VulnWatch] Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle TNS Listener DoS (#NISR2122004F), NGSSoftware Insight Security Research, 2004/12/23
[USN-50-1] CUPS vulnerabilities, Martin Pitt, 2004/12/23
[VulnWatch] Oracle ISQLPlus file access vulnerability (#NISR2122004E), NGSSoftware Insight Security Research, 2004/12/23
[Security Bulletin] SSRT4883 rev.3 HP-UX ftp and ftpd remote unauthorized access, Boren, Rich (SSRT), 2004/12/23
Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation, flashsky fangxing, 2004/12/23
[VulnWatch] Oracle clear text passwords (#NISR2122004D), NGSSoftware Insight Security Research, 2004/12/23
WPkontakt message parsing error, Jaroslaw Sajko, 2004/12/23
[Security Bulletin] SSRT4876 rev.0 HP Tru64 UNIX SWS (Apache) Secure Web Server Remote, Boren, Rich (SSRT), 2004/12/23
Microsoft Windows winhlp32.exe Heap Overflow Vulnerability, flashsky fangxing, 2004/12/23
[Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow, Boren, Rich (SSRT), 2004/12/23
[VulnWatch] Oracle extproc local command execution (#NISR23122004C), NGSSoftware Insight Security Research, 2004/12/23
[ Security Bulletin ] SSRT4699 rev.0 HP-UX SAM local privilege increase, Boren, Rich (SSRT), 2004/12/23
[USN-52-1] vim vulnerability, Martin Pitt, 2004/12/23
- [Full-Disclosure] Re: [USN-52-1] vim vulnerability, Liu Die Yu, 2004/12/24
[USN-51-1] teTeX auxiliary script vulnerability, Martin Pitt, 2004/12/23
[VulnWatch] Oracle extproc directory traversal (#NISR23122004B), NGSSoftware Insight Security Research, 2004/12/23
[USN-49-1] debmake vulnerability, Martin Pitt, 2004/12/23
[USN-48-1] xpdf, tetex-bin vulnerabilities, Martin Pitt, 2004/12/23
[VulnWatch] Oracle extproc buffer overflow (#NISR23122004A), NGSSoftware Insight Security Research, 2004/12/23
Inexcusable weakness in Kmail / GnuPG, Thomas C. Greene, 2004/12/23
- Re: Inexcusable weakness in Kmail / GnuPG, Simple Nomad, 2004/12/24
[VulnWatch] Oracle Character Conversion Bugs (#NISR2122004G), NGSSoftware Insight Security Research, 2004/12/23
Re: stick with "anonymous" or "authenticated" when describing, Steven M. Christey, 2004/12/23
Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier, GulfTech Security, 2004/12/23
[USN-47-1] Linux kernel vulnerabilities, Martin Pitt, 2004/12/23
Crystal FTP Pro 2.8 PoC, cybertronic, 2004/12/23
- RE: Crystal FTP Pro 2.8 PoC, cybertronic, 2004/12/23
[VulnWatch] Oracle Trigger Abuse (#NISR2122004I), NGSSoftware Insight Security Research, 2004/12/23
SHOUTcast remote format string vulnerability, Damian Put, 2004/12/23
Microsoft Windows LoadImage API Integer Buffer overflow, flashsky fangxing, 2004/12/23
- Re: Microsoft Windows LoadImage API Integer Buffer overflow, Brett Glass, 2004/12/25
Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability, flashsky fangxing, 2004/12/23
[SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution, Martin Schulze, 2004/12/23
IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
[OpenPKG-SA-2004.055] OpenPKG Security Advisory (gettext), OpenPKG, 2004/12/23
Oracle wrapped procedure overflow (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H), NGSSoftware Insight Security Research, 2004/12/23
Oracle TNS Listener DoS (#NISR2122004F), NGSSoftware Insight Security Research, 2004/12/23
IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc local command execution (#NISR23122004C), NGSSoftware Insight Security Research, 2004/12/23
Oracle clear text passwords (#NISR2122004D), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc directory traversal (#NISR23122004B), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc buffer overflow (#NISR23122004A), NGSSoftware Insight Security Research, 2004/12/23
Oracle Character Conversion Bugs (#NISR2122004G), NGSSoftware Insight Security Research, 2004/12/23
Oracle ISQLPlus file access vulnerability (#NISR2122004E), NGSSoftware Insight Security Research, 2004/12/23
Oracle Trigger Abuse (#NISR2122004I), NGSSoftware Insight Security Research, 2004/12/23
[Full-Disclosure] Shoe 1.0 - Remote Lace Overflow, announce, 2004/12/23
- Re: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow, Alex V. Lukyanenko, 2004/12/24
- Re: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow, Thomas Sutpen, 2004/12/27
SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2004:046), Marcus Meissner, 2004/12/22
2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability, zib zib, 2004/12/22
Security Advisory for ALL forum services with client-set images, James Bandara, 2004/12/22
- Re: Security Advisory for ALL forum services with client-set images, Stefan Paletta, 2004/12/23
- Re: Security Advisory for ALL forum services with client-set images, Tim Jackson, 2004/12/23
MDKSA-2004:157 - Updated mplayer packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/12/22
MDKSA-2004:155 - Updated logcheck packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/22
Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@012.net.il>, amit sides, 2004/12/22
- Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@012.net.il>, Martin Mewes, 2004/12/23
  - Re: [webmin-l] Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@012.net.il>, Jamie Cameron, 2004/12/23
possible local exploit via sendmail with procmail on solaris, Michael Barnes, 2004/12/22
- Re: possible local exploit via sendmail with procmail on solaris, Jeff Damens, 2004/12/23
[ GLSA 200412-23 ] Zwiki: XSS vulnerability, Luke Macken, 2004/12/22
Realone2.0 "pnxr3260.dll" Lets Remote Users IE Browser Crash, Wei Li, 2004/12/22
[Full-Disclosure] [USN-46-1] TIFF library vulnerability, Martin Pitt, 2004/12/22
PHP v4.3.x exploit for Windows., The Warlock, 2004/12/22
Permission problem in Skype BETA for linux, Peter Conrad, 2004/12/22
[Full-Disclosure] Script Injection in Google Groups Beta, n3td3v, 2004/12/22
- [Full-Disclosure] Re: Script Injection in Google Groups Beta, n3td3v, 2004/12/22
  - [Full-Disclosure] Re: Script Injection in Google Groups Beta, n3td3v, 2004/12/22
- [Full-Disclosure] Script Injection in Google Groups Beta, n3td3v, 2004/12/23
MDKSA-2004:156 - Updated krb5 packages fix buffer overflow vulnerability, Mandrake Linux Security Team, 2004/12/22
malware effecting broadband users in Israel, Gadi Evron, 2004/12/22
Sybase ASE 12.5.2 vulnerabilities, NGSSoftware Insight Security Research, 2004/12/22
MDKSA-2004:154 - Updated kdelibs packages fix multiple vulnerability, Mandrake Linux Security Team, 2004/12/22
Local versus remote security holes, D. J. Bernstein, 2004/12/22
- Re: Local versus remote security holes, Adam Shostack, 2004/12/22
  - stick with "anonymous" or "authenticated" when describing attacks, Jonathan G. Lampe, 2004/12/22
- RE: Local versus remote security holes, David Brodbeck, 2004/12/23
[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories, Martin Schulze, 2004/12/22
[Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability, Marc Schoenefeld, 2004/12/22
- Re: [Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability, James Tucker, 2004/12/22
SUSE Security Announcement: samba (SUSE-SA:2004:045), Sebastian Krahmer, 2004/12/22
[Full-Disclosure] [USN-45-1] nasm vulnerability, Martin Pitt, 2004/12/22
[Full-Disclosure] [ GLSA 200412-22 ] mpg123: Playlist buffer overflow, Thierry Carrez, 2004/12/22
[SECURITY] [DSA 613-1] New ethereal packages fix denial of service, Martin Schulze, 2004/12/22
Re: AIX 5.1/5.2/5.3 local root exploits (paginit issue), Shiva Persaud, 2004/12/22
WebWorm using PHPBB vulnerability in the wild!, Niki Denev, 2004/12/22
- Re: WebWorm using PHPBB vulnerability in the wild!, Nick Johnson, 2004/12/22
Re: Wordpress 1.2.2 is still vulnerable, Thomas Waldegger, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, customer service mailbox, 2004/12/21
- Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, Dmitry V. Levin, 2004/12/22
- Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, Moritz Muehlenhoff, 2004/12/23
- Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, Marcus Meissner, 2004/12/28
iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability, customer service mailbox, 2004/12/21
SUSE Security Announcement: various kernel problems (SUSE-SA:2004:044), Marcus Meissner, 2004/12/21
phpBB Worm, Shannon Lee, 2004/12/21
- Re: phpBB Worm, Raymond Dijkxhoorn, 2004/12/21
  - Re: phpBB Worm, Sebastian Wiesinger, 2004/12/22
    - Re: phpBB Worm, William Geoghegan, 2004/12/23
  - Re: phpBB Worm, Anders Henke, 2004/12/23
- RE: phpBB Worm, Paul Kurczaba, 2004/12/22
- Re: phpBB Worm, Alexander Klimov, 2004/12/22
- Re: phpBB Worm, ycw1bh302, 2004/12/22
  - Re: phpBB Worm, Alvin Packard, 2004/12/23
  - Re: phpBB Worm, Anders Henke, 2004/12/23
- RE: phpBB Worm, Ofer Shezaf, 2004/12/23
  - RE: phpBB Worm, Chris Ess, 2004/12/25
- Re: phpBB Worm, steve, 2004/12/24
  - Re: phpBB Worm, Raymond Dijkxhoorn, 2004/12/24
    - [Full-Disclosure] new phpBB worm affects 2.0.11, Herman Sheremetyev, 2004/12/25
    - [Full-Disclosure] Re: new phpBB worm affects 2.0.11, Adam, 2004/12/25
    - Re: [Full-Disclosure] Re: new phpBB worm affects 2.0.11, Paul Laudanski, 2004/12/29
    - Re: [Full-Disclosure] new phpBB worm affects 2.0.11, Andrew Farmer, 2004/12/27
    - Re: [Full-Disclosure] new phpBB worm affects 2.0.11, Andrew Farmer, 2004/12/27
- Re: phpBB Worm, Zeljko Brajdic, 2004/12/25
Xprobe 0.2.1 Released, bugtraq, 2004/12/21
Re: AIX 5.1/5.2/5.3 local root exploits (diag issue), Shiva Persaud, 2004/12/21
[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution, Martin Schulze, 2004/12/21
TSLSA-2004-0069 - kerberos5, Trustix Security Advisor, 2004/12/21
[Full-Disclosure] [USN-44-1] perl information leak, Martin Pitt, 2004/12/21
[Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer., Berend-Jan Wever, 2004/12/21
MITKRB5-SA-2004-004: heap overflow in libkadm5srv, Tom Yu, 2004/12/20
[USN-43-1] groff utility vulnerabilities, Martin Pitt, 2004/12/20
Updated: TSLSA-2004-0068 - kernel, Trustix Security Advisor, 2004/12/20
[SECURITY] [DSA 612-1] New a2ps packages fix arbitrary command execution, Martin Schulze, 2004/12/20
MDKSA-2004:152 - Updated ethereal packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/12/20
MDKSA-2004:153 - Updated aspell packages fix vulnerability, Mandrake Linux Security Team, 2004/12/20
Gadu-Gadu Remote DoS (all versions), Maciej Soltysiak, 2004/12/20
[ GLSA 200412-21 ] MPlayer: Multiple overflows, Thierry Carrez, 2004/12/20
[ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library, Sune Kloppenborg Jeppesen, 2004/12/20
Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated), Paul, 2004/12/20
[Full-Disclosure] [ GLSA 200412-20 ] NASM: Buffer overflow vulnerability, Luke Macken, 2004/12/20
[ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2004/12/20
Exploit for Ultrix 4.5 dxterm, Kristoffer Brånemyr, 2004/12/20
TSLSA-2004-0066 - multi, Trustix Security Advisor, 2004/12/20
KDE Security Advisory: Konqueror Java Vulnerability, Waldo Bastian, 2004/12/20
Windows Explorer TGA Crash, Bill, 2004/12/20
- [Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer., Berend-Jan Wever, 2004/12/21
Crystal FTP Pro Client Buffer Overflow, Luca Ercoli, 2004/12/20
[ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2004/12/20
Security Bulletin SSRT4687 rev.0 HP-UX newgrp(1) local privilege elevation, Boren, Rich (SSRT), 2004/12/20
TSLSA-2004-0068 - kernel, Trustix Security Advisor, 2004/12/20
PHP shmop.c module permits write of arbitrary memory., Stefano Di Paola, 2004/12/20
[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution, Martin Schulze, 2004/12/20
AIX 5.1/5.2/5.3 local root exploits, cees-bart, 2004/12/20
[ GLSA 200412-14 ] PHP: Multiple vulnerabilities, Thierry Carrez, 2004/12/20
[Full-Disclosure] [USN-42-1] Xine library vulnerabilities, Martin Pitt, 2004/12/20
[Full-Disclosure] [ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability, Luke Macken, 2004/12/20
[Full-Disclosure] [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2004/12/20
[Full-Disclosure] Tlen.pl, remote script execution, Jaroslaw Sajko, 2004/12/20
[USN-41-1] Samba vulnerability, Martin Pitt, 2004/12/20
[Full-Disclosure] UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities, Luke Macken, 2004/12/20
Re: Patch available for multiple critical flaws in Oracle, Marc Bejarano, 2004/12/20
MDKSA-2004:151 - Updated php packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/12/20
MS Windows Media Player 9 Vulns (2), Arman Nayyeri, 2004/12/20
Multiple Vulnerabilities In Kayako eSupport v2.x, GulfTech Security, 2004/12/20
[ GLSA 200412-13 ] Samba: Integer overflow, Sune Kloppenborg Jeppesen, 2004/12/18
Bug in Crypt::ECB perl module, Bennett R. Samowich, 2004/12/17
[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation, Martin Schulze, 2004/12/17
Internet Explorer Code Execution Bypass Vulnerability, aikon none, 2004/12/17
- Re: Internet Explorer Code Execution Bypass Vulnerability, cmthemc, 2004/12/20
[OpenPKG-SA-2004.056] OpenPKG Security Advisory (cvstrac), OpenPKG, 2004/12/17
NetBSD kernel local vulnerabilities, Evgeny Demidov, 2004/12/17
[Full-Disclosure] Re: Linux kernel IGMP vulnerabilities, Timothy Hall, 2004/12/17
4 Vulnerabilities in GamePort, amoXi Devilkin, 2004/12/17
- 4 Vulnerabilities in GamePort, amoXi Devilkin, 2004/12/17
phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit, bad boy, 2004/12/17
[ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability, Luke Macken, 2004/12/17
NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code, NetBSD Security-Officer, 2004/12/17
Gadu-Gadu, another two bugs, Jaroslaw Sajko, 2004/12/17
- [Full-Disclosure] Re: Gadu-Gadu, another two bugs, Przemyslaw Frasunek, 2004/12/20
  - Re: [Full-Disclosure] Re: Gadu-Gadu, another two bugs, Maciej Soltysiak, 2004/12/20
- [Full-Disclosure] Re: Gadu-Gadu, another two bugs, lazy, 2004/12/22
[OpenPKG-SA-2004.054] OpenPKG Security Advisory (samba), OpenPKG, 2004/12/17
Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel, Katrina Tsipenyuk, 2004/12/17
[Full-Disclosure] OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability, dila, 2004/12/17
[SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities, chewkeong, 2004/12/16
[ GLSA 200412-11 ] Cscope: Insecure creation of temporary files, Luke Macken, 2004/12/16
Discussion: Microsoft(R) PowerPoint Action Settings feature allows invocation of default browser pointed at arbitrary URL., Monte Ratzlaff, 2004/12/16
[OpenPKG-SA-2004.053] OpenPKG Security Advisory (php), OpenPKG, 2004/12/16
Hotmail Cross-Site Scripting Vulnerability #2, Rafel Ivgi, The-Insider, 2004/12/16
iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability, iDEFENSE Security Advisory, 2004/12/16
iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability, iDEFENSE Security Advisory, 2004/12/16
- Re: iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability, Hideki Yamane, 2004/12/17
[USN-40-1] PHP vulnerabilities, Martin Pitt, 2004/12/16
[USN-39-1] Linux amd64 kernel vulnerability, Martin Pitt, 2004/12/16
iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability, iDEFENSE Security Advisory, 2004/12/16
iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability, iDEFENSE Security Advisory, 2004/12/16
iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability, iDEFENSE Security Advisory, 2004/12/16
PHP Input Validation Vulnerabilities, Daniel Fabian, 2004/12/16
DJB's students release 44 *nix software vulnerability advisories, Thor Larholm, 2004/12/16
- Re: DJB's students release 44 *nix software vulnerability advisories, Crispin Cowan, 2004/12/17
- Re: DJB's students release 44 *nix software vulnerability advisories, cees-bart, 2004/12/17
  - Re: DJB's students release 44 *nix software vulnerability advisories, Marcin Owsiany, 2004/12/20
- Re: DJB's students release 44 *nix software vulnerability advisories, security curmudgeon, 2004/12/17
  - Re: DJB's students release 44 *nix software vulnerability advisories, Julian T J Midgley, 2004/12/20
- Re: DJB's students release 44 *nix software vulnerability advisories, D. J. Bernstein, 2004/12/20
  - Re: DJB's students release 44 *nix software vulnerability advisories, Artem Chuprina, 2004/12/21
  - Re: DJB's students release 44 *nix software vulnerability advisories, Stephen Samuel, 2004/12/21
    - Re: DJB's students release 44 *nix software vulnerability advisories, D. J. Bernstein, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, David Eisner, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Crispin Cowan, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, D. J. Bernstein, 2004/12/23
    - Re: DJB's students release 44 *nix software vulnerability advisories, Crispin Cowan, 2004/12/24
    - Message not available
    - Re: DJB's students release 44 *nix software vulnerability advisories, Crispin Cowan, 2004/12/23
- Re: DJB's students release 44 *nix software vulnerability advisories, Jonathan T Rockway, 2004/12/21
  - Re: DJB's students release 44 *nix software vulnerability advisories, Dave Holland, 2004/12/21
    - Re: DJB's students release 44 *nix software vulnerability advisories, sean, 2004/12/23
  - Re: DJB's students release 44 *nix software vulnerability advisories, milw0rm Inc., 2004/12/21
    - Re: DJB's students release 44 *nix software vulnerability advisories, Antoine Martin, 2004/12/21
    - Re: DJB's students release 44 *nix software vulnerability advisories, Chris Paget, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Jack Lloyd, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, Thor, 2004/12/21
  - Re: DJB's students release 44 *nix software vulnerability advisories, David F. Skoll, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Jonathan Rockway, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Casper . Dik, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Michal Zalewski, 2004/12/23
    - Re: DJB's students release 44 *nix software vulnerability advisories, Valdis . Kletnieks, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, Stephen Harris, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, laffer1, 2004/12/22
    - Re: DJB's students release 44 *nix software vulnerability advisories, Jonathan Rockway, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, Raymond M. Reskusich, 2004/12/22
- RE: DJB's students release 44 *nix software vulnerability advisories, Devin Ganger, 2004/12/21
- Re: DJB's students release 44 *nix software vulnerability advisories, Steven M. Christey, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, David Wagner, 2004/12/24
- Re: DJB's students release 44 *nix software vulnerability advisories, Steven M. Christey, 2004/12/22
  - Re: DJB's students release 44 *nix software vulnerability advisories, Crispin Cowan, 2004/12/23
- RE: DJB's students release 44 *nix software vulnerability advisories, Manning, Robert (Mission Systems), 2004/12/22
- RE: DJB's students release 44 *nix software vulnerability advisories, Palmer, Paul (ISSAtlanta), 2004/12/23
[MaxPatrol] SQL-injection in Ikonboard 3.1.x, Alexander Anisimov, 2004/12/16
Multiple XSS Vulnerabilities in Wordpress 1.2.1, Thomas Waldegger, 2004/12/16
iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability, customer service mailbox, 2004/12/16
[Full-Disclosure] Re: NetWare Screensaver Authentication Bypass From The Local Console, Roger McLaren, 2004/12/16
STG Security Advisory: [SSA-20041215-19] Vulnerability of uploading files with multiple extensions in MediaWiki, advisory, 2004/12/16
STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment Mod, advisory, 2004/12/16
STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard, advisory, 2004/12/16
- RE: STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard, Richard Stanway, 2004/12/16
[SAMBA] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9, Gerald Carter, 2004/12/16
[Full-Disclosure] Hotmail Cross-Site Scripting Vulnerability #2, Rafel Ivgi, The-Insider, 2004/12/16
MDKSA-2004:150 - Updated kdelibs and kdebase packages fix vulnerability, Mandrake Linux Security Team, 2004/12/16
Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords, Cisco Systems Product Security Incident Response Team, 2004/12/16
php unserialize, Martin Eiszner, 2004/12/16
- Re: php unserialize, Stefan Esser, 2004/12/16
[Full-Disclosure] RE: Linux kernel scm_send local DoS, Leif Sawyer, 2004/12/16
- [Full-Disclosure] RE: Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
CSS in phpBB 1.4.4, SandI], 2004/12/16
- RE: CSS in phpBB 1.4.4, Paul Owen, 2004/12/16
Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector, Cisco Systems Product Security Incident Response Team, 2004/12/16
STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki, advisory, 2004/12/16
iwebnegar is vulnerable to all kind of sql injections, shervin khaleghjou, 2004/12/16
Advisory 01/2004: Multiple vulnerabilities in PHP 4/5, Stefan Esser, 2004/12/16
[ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines, Thierry Carrez, 2004/12/16
- Re: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines, Alexey I. Froloff, 2004/12/16
Security Advisory for CVS Slash, Jamie McCarthy, 2004/12/16
HyperTerminal - Buffer Overflow In .ht File, Brett Moore, 2004/12/16
STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability, advisory, 2004/12/16
[OpenPKG-SA-2004.052] OpenPKG Security Advisory (vim), OpenPKG, 2004/12/16
MSIE DHTML Edit Control Cross Site Scripting Vulnerability, Paul, 2004/12/16
[ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap, Thierry Carrez, 2004/12/16
Re: rpcl_icmpdos.c, x90c, 2004/12/16
Asante FM2008 10/100 Ethernet switch backdoor login, Joe Philipps, 2004/12/16
3cdaemon tftp server DOS vulnerability, Wang Ning, 2004/12/16
*nix data wipe tools, Thomas C. Greene, 2004/12/16
- Re: *nix data wipe tools, David Cannings, 2004/12/16
  - Re: *nix data wipe tools, Wietse Venema, 2004/12/17
    - Re: *nix data wipe tools, Casper . Dik, 2004/12/17
  - Re: *nix data wipe tools, Thomas C. Greene, 2004/12/17
  - Re: *nix data wipe tools, George Georgalis, 2004/12/17
Yahoo! Mail Cross-Site Scripting Vulnerability, Rafel Ivgi, 2004/12/16
- Yahoo! Mail Cross-Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 2004/12/16
Hotmail Cross-Site Scripting Vulnerability #1, Rafel Ivgi, 2004/12/16
- Hotmail Cross-Site Scripting Vulnerability #1, Rafel Ivgi, The-Insider, 2004/12/16
Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ], GulfTech Security, 2004/12/16
[VulnWatch] Hotmail Cross Site Scripting Vulnerability #2, Rafel Ivgi, 2004/12/16
[VulnWatch] Hotmail Cross-Site Scripting Vulnerability #1, Rafel Ivgi, The-Insider, 2004/12/16
[VulnWatch] Yahoo! Mail Cross-Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 2004/12/16
iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability, customer service mailbox, 2004/12/16
[USN-38-1] Linux kernel vulnerabilities, Martin Pitt, 2004/12/16
ASP-rider is vulnerable to sql injection attack, shervin khaleghjou, 2004/12/16
[Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory, Secure Network Operations, Inc., 2004/12/16
[ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities, Luke Macken, 2004/12/16
iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability, customer service mailbox, 2004/12/16
[CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software, Secure Computer Group, 2004/12/16
MDKSA-2004:149 - Updated postgresql packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/16
[SECURITY] [DSA 608-1] New zgv packages fix arbitrary code execution, Martin Schulze, 2004/12/16
Possible local root vulnerability in Roxio Toast on Mac OS X, fintler, 2004/12/16
STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability, advisory, 2004/12/16
RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability, Hongzhen Zhou, 2004/12/16
- Re: RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability, Hongzhen Zhou, 2004/12/16
[CAN-2004-1022] Insecure Credential Storage on Kerio Software, Secure Computer Group, 2004/12/16
ASP Calendar Vulnerability <www.ashiyane.com>, ali reza AcTiOnSpIdEr, 2004/12/16
MDKSA-2004:148 - Updated iproute2 packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/16
[SECURITY] [DSA 609-1] New atari800 packages fix local root exploit, Martin Schulze, 2004/12/16
iDEFENSE Security Advisory 12.14.04 - Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability, customer service mailbox, 2004/12/16
[ZH2004-18SA] Content-Type spoofing in Mozilla Firefox and Opera could allow users to bypass security restrictions, Giovanni Delvecchio, 2004/12/16
[VulnWatch] phpBB Attachment Mod Directory Traversal HTTP POST Injection, Paul Laudanski, 2004/12/16
Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
- Re: Linux kernel scm_send local DoS, even multiplexed, 2004/12/16
  - Re: Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
    - Re: Linux kernel scm_send local DoS, even multiplexed, 2004/12/16
    - Re: Linux kernel scm_send local DoS, gadgeteer, 2004/12/16
    - Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS, Valdis . Kletnieks, 2004/12/23
- Re: Linux kernel scm_send local DoS, Pavel Kankovsky, 2004/12/23
Re: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory, secure, 2004/12/16
Linux kernel IGMP vulnerabilities, Paul Starzetz, 2004/12/16
- Re: Linux kernel IGMP vulnerabilities, Pekka Savola, 2004/12/16
- Re: Linux kernel IGMP vulnerabilities, stephen joseph butler, 2004/12/16
  - Re: Linux kernel IGMP vulnerabilities, Paul Starzetz, 2004/12/16
    - Re: Linux kernel IGMP vulnerabilities, matthew-bugtraq, 2004/12/16
- RE: Linux kernel IGMP vulnerabilities, Jirka Kosina, 2004/12/17
[Full-Disclosure] Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities, Stefan Esser, 2004/12/02
[Full-Disclosure] Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities, Stefan Esser, 2004/12/02
[Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS, vuln, 2004/12/02
- Re: [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS, Dan Margolis, 2004/12/16
[Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow, vuln, 2004/12/02
What's "may have exploitable buffer overflows" mean in tcpdump?, Dragos Ruiu, 2004/12/02
Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory, Secure Network Operations, Inc., 2004/12/02
Socket unreacheable in the Lithtech engine (new protocol), Luigi Auriemma, 2004/12/02
[ GLSA 200412-07 ] file: Arbitrary code execution, Matthias Geerdsen, 2004/12/02
Winamp 5.07 (latest version) Remote Crash + other stupid shizle, b0f www.b0f.net, 2004/12/02
[ZH2004-19SA] Possible execution of remote shell commands in Opera with kfmclien, Giovanni Delvecchio, 2004/12/02
iDEFENSE Security Advisory 12.13.04 - Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability, customer service mailbox, 2004/12/02
KDE Security Advisory: Konqueror Window Injection Vulnerability, Waldo Bastian, 2004/12/02
MS IE User's Authentication Details (userid/password) Sharing Issue, Debasis Mohanty, 2004/12/02
Citadel/UX <= v6.27 Remote Format String Vulnerability, CoKi, 2004/12/02
- Re: Citadel/UX <= v6.27 Remote Format String Vulnerability, Michael Hampton, 2004/12/16
Gadu-Gadu several vulnerabilities, Jaroslaw Sajko, 2004/12/02
[VulnWatch] Multiple vulnerabilities in phpMyAdmin, Nicolas Gregoire, 2004/12/02
[Full-Disclosure] SugarSales Multiple Vulnerabilities, Daniel Fabian, 2004/12/02
[Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console, Adam Gray, 2004/12/02
- Re: NetWare Screensaver Authentication Bypass From The Local Console, Brad Bendily, 2004/12/16
Local off-by-one in mtr versions 0.55 to 0.65, venglin, 2004/12/02
[Full-Disclosure] [ GLSA 200412-06 ] PHProjekt: setup.php vulnerability, Thierry Carrez, 2004/12/02
[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities, Martin Schulze, 2004/12/02
In-game buffer-overflow in the Gamespy cd-key validation SDK, Luigi Auriemma, 2004/12/02
wget: Arbitrary file overwriting/appending/creating and other vulnerabilities, Jan Minar, 2004/12/02
CodeCon CFP deadline nearing, Len Sassaman, 2004/12/02
F-Secure Policy Manager - physical path disclosure, oliver, 2004/12/02
KDE Security Advisory: kfax libtiff vulnerabilities, Dirk Mueller, 2004/12/02
KDE Security Advisory: plain text password exposure, Dirk Mueller, 2004/12/02
TSLSA-2004-0064 - nfs-utils, Trustix Security Advisor, 2004/12/02
7a69Adv#15 - Internet Explorer FTP command injection, Albert Puigsech Galicia, 2004/12/02
[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service, Martin Schulze, 2004/12/02
MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/02
MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability, Mandrake Linux Security Team, 2004/12/02
- Re: MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability, David F. Skoll, 2004/12/02
MDKSA-2004:146 - Updated nfs-utils packages fix remote DoS vulnerability, Mandrake Linux Security Team, 2004/12/02
MDKSA-2004:147 - Updated openssl packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/02
IE6 Vulnerability - Local File Detection, ViPeR, 2004/12/02
- Re: IE6 Vulnerability - Local File Detection, RSnake, 2004/12/02
MDKSA-2004:143 - Updated ImageMagick packages fix vulnerability, Mandrake Linux Security Team, 2004/12/02
zone transfers, a spammer's dream?, Lode Vermeiren, 2004/12/02
- RE: zone transfers, a spammer's dream?, Marcin Pacyna, 2004/12/02
7a69Adv#16 - Konqueror FTP command injection, Albert Puigsech Galicia, 2004/12/02
- Re: 7a69Adv#16 - Konqueror FTP command injection, Albert Puigsech Galicia, 2004/12/02
Online Script Decoder, GreyMagic Security, 2004/12/02
- Re: Online Script Decoder, Stefan Paletta, 2004/12/02
Cleartext SMB passwords in Novell Desktop Linux using KDE, Mike DeMaria, 2004/12/02
MD5 To Be Considered Harmful Someday, Dan Kaminsky, 2004/12/02
- Re: MD5 To Be Considered Harmful Someday, Gandalf The White, 2004/12/02
  - Re: MD5 To Be Considered Harmful Someday, Tim, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Dragos Ruiu, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, David F. Skoll, 2004/12/02
  - Re: MD5 To Be Considered Harmful Someday, Joel Maslak, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Steve Friedl, 2004/12/02
  - RE: MD5 To Be Considered Harmful Someday, David Schwartz, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Gandalf The White, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Keith Oxenrider, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Paul Wouters, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Dan Kaminsky, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Paul Wouters, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Adam Shostack, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Solar Designer, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Dan Kaminsky, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Pavel Kankovsky, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Solar Designer, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, George Georgalis, 2004/12/02
    - Re: MD5 To Be Considered Harmful Someday, Dan Kaminsky, 2004/12/02
  - Re: MD5 To Be Considered Harmful Someday, Ruth A. Kramer, 2004/12/02
- MD5 To Be Considered Harmful Today, Pavel Machek, 2004/12/02
  - Re: MD5 To Be Considered Harmful Today, Dan Kaminsky, 2004/12/02
    - Re: MD5 To Be Considered Harmful Today, Pavel Machek, 2004/12/02
    - Re: MD5 To Be Considered Harmful Today, Dan Kaminsky, 2004/12/02
- Re: MD5 To Be Considered Harmful Someday, Joel Maslak, 2004/12/02
  - Re: MD5 To Be Considered Harmful Someday, Jack Lloyd, 2004/12/02
  - Re: MD5 To Be Considered Harmful Someday, Jack Lloyd, 2004/12/02
- RE: MD5 To Be Considered Harmful Someday, Rager, Anton (Anton), 2004/12/02
Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0, John Bissell, 2004/12/02
Multiple Vulnerabilities in paFileDB 3.1, Ahmad Muammar, 2004/12/02
- Re: Multiple Vulnerabilities in paFileDB 3.1, Rafael San Miguel Carrasco, 2004/12/02
Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux), madsys, 2004/12/02
[Full-Disclosure] VA Appliance Deployment White Paper, Martin Mkrtchian, 2004/12/02
MDKSA-2004:142 - Updated gzip packages fix temporary file vulnerability, Mandrake Linux Security Team, 2004/12/02
Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2, Luigi Auriemma, 2004/12/02
MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service, Evgeny Demidov, 2004/12/02
Local root exploit on Mac OS X with Adobe Version Cue, fintler, 2004/12/02
- Re: Local root exploit on Mac OS X with Adobe Version Cue, Chet Ramey, 2004/12/02
[Full-Disclosure] Bypass personal firewall application protection . Again., offtopic, 2004/12/02
- Re: Bypass personal firewall application protection . Again., Chris Paget, 2004/12/02
[Full-Disclosure] [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation, Luke Macken, 2004/12/02
Web Application Security Consortium 'Guest Articles' Call for Papers, robert, 2004/12/02
[Full-Disclosure] [ GLSA 200412-04 ] Perl: Insecure temporary file creation, Luke Macken, 2004/12/02
DoS leading to crash of client in Remote Execute 2.30, headpimp, 2004/12/02
Hosting Controller, mouse small, 2004/12/02
Winamp - Buffer Overflow In IN_CDDA.dll [ Patch Released ], Brett Moore, 2004/12/02
[Full-Disclosure] DoS protection in N-Tiered Web Apps?, Lachniet, Mark, 2004/12/02
[Full-Disclosure] [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding, Thierry Carrez, 2004/12/02
[Full-Disclosure] Re: [Advisory] Mozilla Products Remote Crash Vulnerability, Berend-Jan Wever, 2004/12/02
[Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability, Niek van der Maas, 2004/12/02
- Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability, Kevin Finisterre, 2004/12/02
  - Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability, Heikki Toivonen, 2004/12/02
    - Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability, Juergen Schmidt, 2004/12/02
    - Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability, Heikki Toivonen, 2004/12/02
[Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL, Nicolas Gregoire, 2004/12/02
- [VulnWatch] Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL, Nicolas Gregoire, 2004/12/02
[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library, Luke Macken, 2004/12/02
Opera 7.54 vulnerabilities again (still unfixed), Marc Schoenefeld, 2004/12/02
[Full-Disclosure] [FLSA-2004:2148] Updated httpd, apache and mod_ssl packages fix security issues, Marc Deslauriers, 2004/12/02
[Full-Disclosure] [ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution, Thierry Carrez, 2004/12/02
[Full-Disclosure] RE: Official IFRAME patch - make sure it installs correctly, Rivera Alonso, David, 2004/12/01
[Full-Disclosure] Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux), madsys, 2004/12/01
[Full-Disclosure] RE: Remote Mercury32 Imap exploit, Randal, Phil, 2004/12/01
Advanced Guestbook, Emile van Elen, 2004/12/01
- Re: Advanced Guestbook, Spy Hat, 2004/12/02
FreeBSD Security Advisory FreeBSD-SA-04:17.procfs, FreeBSD Security Advisories, 2004/12/01
[CLA-2004:905] Conectiva Security Announcement - squirrelmail, Conectiva Updates, 2004/12/01
RE: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Todd Towles, 2004/12/01
rssh and scponly arbitrary command execution, Jason Wies, 2004/12/01
Multiple vulnerabilities in Kreed 1.05, Luigi Auriemma, 2004/12/01
Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability, Cisco Systems Product Security Incident Response Team, 2004/12/01
Blog Torrent preview 0.8 - arbitary file download, Steve Kemp, 2004/12/01
RE: [Full-Disclosure] Official IFRAME patch - make sure it instal ls correctly, Randal, Phil, 2004/12/01
[Full-Disclosure] [USN-37-1] cyrus21-imapd vulnerability, Martin Pitt, 2004/12/01
[KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in "proxylog.dat", Kurczaba Associates advisories, 2004/12/01
[CLA-2004:902] Conectiva Security Announcement - abiword, Conectiva Updates, 2004/12/01
[ GLSA 200411-37 ] Open DC Hub: Remote code execution, Luke Macken, 2004/12/01
[USN-33-1] libgd vulnerabilities, Martin Pitt, 2004/12/01
[Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Berend-Jan Wever, 2004/12/01
- Re: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Kevin, 2004/12/01
- Re: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, BillyBob, 2004/12/01
  - Re: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, daniel uriah clemens, 2004/12/01
- RE: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Todd Towles, 2004/12/01
  - RE: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Nick FitzGerald, 2004/12/01
- Re: [Full-Disclosure] Official IFRAME patch - make sure it installs correctly, Des Ward, 2004/12/01
Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003., Reed Arvin, 2004/12/01
- [Full-Disclosure] Re: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003., Laurent Saplairoles, 2004/12/01
[CLA-2004:904] Conectiva Security Announcement - cyrus-imapd, Conectiva Updates, 2004/12/01
Re: Pi3Web/2.0.0 File-Disclosure/Path Disclosure vuln, Holger Zimmermann, 2004/12/01
Invision Power Board 'Allow auto login' setting override, Hillel Himovich, 2004/12/01
SUSE Security Announcement: various kernel problems (SUSE-SA:2004:042), Marcus Meissner, 2004/12/01
Disclosure of file system information in Mozilla Firefox and Opera Browser:, Giovanni Delvecchio, 2004/12/01
- Re: Disclosure of file system information in Mozilla Firefox and Opera Browser:, Liu Die Yu, 2004/12/01
- RE: Disclosure of file system information in Mozilla Firefox and Opera Browser:, Thor Larholm, 2004/12/02
Re: Winamp - Buffer Overflow In IN_CDDA.dll, Black Dot, 2004/12/01
[Full-Disclosure] [USN-36-1] NFS statd vulnerability, Martin Pitt, 2004/12/01
[Full-Disclosure] [USN-35-1] imagemagick vulnerabilities, Martin Pitt, 2004/12/01
[Fwd: RE: [Full-Disclosure] Remote Mercury32 Imap exploit], John, 2004/12/01
[Full-Disclosure] Web Application DoS, kcope, 2004/12/01
- Re: [Full-Disclosure] Web Application DoS, Goetz Von Berlichingen, 2004/12/01
- RE: [Full-Disclosure] Web Application DoS, David Taylor, 2004/12/01
- RE: [Full-Disclosure] Web Application DoS, Lachniet, Mark, 2004/12/01
Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4, Luigi Auriemma, 2004/12/01
CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability, Hongzhen Zhou, 2004/12/01
MDKSA-2004:137-1 - Updated libxpm4 packages correct issues with previous update, Mandrake Linux Security Team, 2004/12/01
[Full-Disclosure] Remote Mercury32 Imap exploit, JohnH, 2004/12/01
- RE: [Full-Disclosure] Remote Mercury32 Imap exploit, John, 2004/12/01
- [Full-Disclosure] Remote Mercury32 Imap exploit, JohnH, 2004/12/01
  - [Full-Disclosure] Re: Remote Mercury32 Imap exploit, class 101, 2004/12/01
[Full-Disclosure] [USN-34-1] OpenSSH information leakage, Martin Pitt, 2004/12/01
[SHK-001]Payflow Link Default Config may lead to Hidden Field Modification, M. Shirk, 2004/12/01
Linux Netwosix NEPOTE Updated!, Vincenzo Ciaglia, 2004/12/01
TSL-2004-0063 - multi, Trustix Security Advisor, 2004/12/01
Password Disclosure for SMB Shares in KDE's Konqueror, Daniel Fabian, 2004/12/01
Privilege escalation flaw in MDaemon 7.2., Reed Arvin, 2004/12/01
- Re: Privilege escalation flaw in MDaemon 7.2., kf_lists, 2004/12/01