Vulnerability Development (thread)

[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : A vulnerability in TCP, please_reply_to_security, 2005/02/28
Badblue HTTP Server Exploit, Miguel Tarascó Acuña, 2005/02/28
Firefox Software Update, Kai Howells, 2005/02/28
[SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1, Maksymilian Arciemowicz, 2005/02/28
[SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2, Maksymilian Arciemowicz, 2005/02/28
[SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3, Maksymilian Arciemowicz, 2005/02/28
[Full-Disclosure] [ GLSA 200502-33 ] MediaWiki: Multiple vulnerabilities, Thierry Carrez, 2005/02/28
[Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage, Hat-Squad Security Team, 2005/02/28
[Full-Disclosure] Server termination in Scrapland 1.0, Luigi Auriemma, 2005/02/28
iDEFENSE Security Advisory 02.28.05: KPPP Privileged File Descriptor Leak Vulnerability, iDEFENSE Labs, 2005/02/28
iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error, iDEFENSE Labs, 2005/02/28
- Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error, Miles Beck, 2005/02/28
[Full-Disclosure] [ GLSA 200502-32 ] UnAce: Buffer overflow and directory traversal vulnerabilities, Sune Kloppenborg Jeppesen, 2005/02/28
[Full-Disclosure] [ GLSA 200502-31 ] uim: Privilege escalation vulnerability, Sune Kloppenborg Jeppesen, 2005/02/28
WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein, robert, 2005/02/28
7a69Adv#22 - UNIX unzip keep setuid and setgid files, Albert Puigsech Galicia, 2005/02/28
- Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files, John Simpson, 2005/02/28
[Full-Disclosure] [USN-89-1] XML library vulnerabilities, Martin Pitt, 2005/02/28
[Full-Disclosure] [USN-88-1] reportbug information disclosure, Martin Pitt, 2005/02/28
[Full-Disclosure] [USN-87-1] Cyrus IMAP server vulnerability, Martin Pitt, 2005/02/28
[Full-Disclosure] [USN-86-1] cURL vulnerability, Martin Pitt, 2005/02/28
[Full-Disclosure] [HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit, class 101, 2005/02/28
Google Getting (even) smarter, Josh Zlatin-Amishav, 2005/02/28
- Re: Google Getting (even) smarter, Jordan Wiens, 2005/02/28
Mozilla Firefox 1.0.1 Javascript Images are Draggable, Paul, 2005/02/28
- Re: Mozilla Firefox 1.0.1 Javascript Images are Draggable, Jay D. Dyson, 2005/02/28
Re: Office 10 applications & flashdrives can be used to browse restricted drives, Paul, 2005/02/28
- Re: Office 10 applications & flashdrives can be used to browse restricted drives, Jay D. Dyson, 2005/02/28
  - Re: Office 10 applications & flashdrives can be used to browse restricted drives, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2005/02/28
    - Re: Office 10 applications & flashdrives can be used to browse restricted drives, Jay D. Dyson, 2005/02/28
Knet <= 1.04c Buffer Overflow Bug, CorryL, 2005/02/28
-==phpBB 2.0.12 Full path disclosure==-, HaCkZaTaN, 2005/02/28
[Full-Disclosure] More T-Mobile fall out..., pingywon, 2005/02/28
[Full-Disclosure] [ GLSA 200502-30 ] cmd5checkpw: Local password leak vulnerability, Thierry Carrez, 2005/02/28
CIS WebServer Directory Traversal Bug, CorryL, 2005/02/28
iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability, iDEFENSE Labs, 2005/02/28
- Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability, Stan Bubrouski, 2005/02/28
- Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability, Rainer Schöpf, 2005/02/28
RE: Firescrolling [Firefox 1.0], Beauford, Jason, 2005/02/28
- [Full-Disclosure] Re: Firescrolling [Firefox 1.0], Stan Bubrouski, 2005/02/28
- Re: Firescrolling [Firefox 1.0], btrq, 2005/02/28
[Full-Disclosure] RE: Firescrolling [Firefox 1.0], Eric McCarty, 2005/02/25
- [Full-Disclosure] RE: Firescrolling [Firefox 1.0], Andrade, Leonardo F. Buonsanti de \(BR - IT Brazil\), 2005/02/28
AW: phpWebSite-0.10.0_exploit, webmaster, 2005/02/25
CFP: WORM 2005, David Moore, 2005/02/25
Announce: RSBAC v1.2.4 released, Amon Ott, 2005/02/25
[SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution, Martin Schulze, 2005/02/25
phpWebSite 0.10.0 Full Path disclosure, HaCkZaTaN., 2005/02/25
- phpWebSite 0.10.0 Full Path disclosure, HaCkZaTaN, 2005/02/25
[Full-Disclosure] [USN-85-1] Gaim vulnerabilities, Martin Pitt, 2005/02/25
[Full-Disclosure] Firescrolling [Firefox 1.0], mikx, 2005/02/25
[Full-Disclosure] [FLSA-2005:2336] Updated kernel packages fix security issues, Marc Deslauriers, 2005/02/25
[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4, Maksymilian Arciemowicz, 2005/02/24
- Re: [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion, Calum Power, 2005/02/28
phpWebSite-0.10.0_exploit, tjomka, 2005/02/24
MDKSA-2005:047 - Updated squid packages fix vulnerability, Mandrakelinux Security Team, 2005/02/24
MDKSA-2005:046 - Updated uim packages fix vulnerability, Mandrakelinux Security Team, 2005/02/24
Multiple vulns in punBB, John Gumbel, 2005/02/24
[Security Bulletin] SSRT4694 HP-UX ftpd remote unauthorized access, Boren, Rich (SSRT), 2005/02/24
[Full-Disclosure] In-game cl_guid crash in Soldier of Fortune II 1.03, Luigi Auriemma, 2005/02/24
iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability, iDEFENSE Labs, 2005/02/24
RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability, Walton, John Michael (John), 2005/02/24
- RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability, PASTOR ADRIAN, 2005/02/24
Multiple vulnerabilities found in CSGuestbook by CoolSerlets.com, Josh884, 2005/02/24
RE: Incorrect Classification of iDownload's Product as Spyware..., Roger A. Grimes, 2005/02/24
[Full-Disclosure] Google as Application FireWall, Andrey Bayora, 2005/02/24
[Full-Disclosure] [FLSA-2005:2005] Updated gdk-pixbuf packages fix security flaws, Marc Deslauriers, 2005/02/24
[Full-Disclosure] [FLSA-2005:2343] Updated vim packages fix security issues, Marc Deslauriers, 2005/02/24
[Full-Disclosure] [FLSA-2005:2043] Updated zlib package fixes security issues, Marc Deslauriers, 2005/02/24
Office 10 applications & flashdrives can be used to browse restricted drives, Discini, Sonny, 2005/02/23
- Re: Office 10 applications & flashdrives can be used to browse restricted drives, Denis Jedig, 2005/02/25
[Fwd: [arkeia-announce] Release of Arkeia Network Backup 5.3.5 fixes security issue], Maciej Bogucki, 2005/02/23
Release of Arkeia Network Backup 5.3.5 fixes security issue [bugtraq id 12594], Arnaud Spicht, 2005/02/23
[Full-Disclosure] [ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities, Matthias Geerdsen, 2005/02/23
[Full-Disclosure] Robustness patch for TWiki, vulnerability in ImageGalleryPlugin, Florian Weimer, 2005/02/23
[SECURITY] [DSA 689-1] New mod_python packages fix information leak, Martin Schulze, 2005/02/23
[SECURITY] [DSA 688-1] New squid packages fix denial of service, Martin Schulze, 2005/02/23
Re: Knox Arkeia remote root/system exploit, Arnaud Spicht, 2005/02/23
Software PBLang 4.65 pm.php XSS vulnerability, Raven, 2005/02/23
Software PBLang 4.65 pmpshow.php XSS vulnerability, Raven, 2005/02/23
Software PBLang 4.65 search.php XSS vulnerability, Raven, 2005/02/23
[Full-Disclosure] Incorrect Classification of iDownload's Product as Spyware..., Paul Laudanski, 2005/02/23
- [Full-Disclosure] RE: Incorrect Classification of iDownload's Product as Spyware..., Paul Kurczaba, 2005/02/23
- [Full-Disclosure] Re: Incorrect Classification of iDownload's Product as Spyware..., Dave C, 2005/02/24
  - [Full-Disclosure] Re: Incorrect Classification of iDownload's Product as Spyware..., Paul Laudanski, 2005/02/23
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB2 Arbitrary File Unlink Vulnerability, iDEFENSE Labs, 2005/02/22
Cross Site Scripting exploitation via malformed files, Jerome ATHIAS, 2005/02/22
- Re: Cross Site Scripting exploitation via malformed files, http-equiv@excite.com , 2005/02/23
paNews v2.0b4 - PHP Injection, tjomka, 2005/02/22
[SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection, pokley, 2005/02/22
The WebConnect 6.4.4 and 6.5 contains several vulnerabilities, CIRT Advisory, 2005/02/22
[NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection, John Cobb, 2005/02/22
SD Server 4.0.70 Directory Traversal Bug, CorryL, 2005/02/22
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability, iDEFENSE Labs, 2005/02/22
Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability, m123303, 2005/02/22
- Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability, grutz, 2005/02/22
phpBB 2.0.12 released, Snapdragon, 2005/02/22
- Re: phpBB 2.0.12 released, bcl, 2005/02/23
  - Re: phpBB 2.0.12 released, bcl, 2005/02/24
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/02/21
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/02/21
iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities, iDEFENSE Labs, 2005/02/21
[Full-Disclosure] [ GLSA 200502-28 ] PuTTY: Remote code execution, Luke Macken, 2005/02/21
[Full-Disclosure] SD Server 4.0.70 Directory Traversal Bug, CorryL, 2005/02/21
Windows Firewall Has A Backdoor, Jay Calvert, 2005/02/21
- Re: Windows Firewall Has A Backdoor, Chris Wysopal, 2005/02/21
- RE: Windows Firewall Has A Backdoor, Chris Goodwin, 2005/02/21
- Re: Windows Firewall Has A Backdoor, Thor (Hammer of God), 2005/02/22
- RE: Windows Firewall Has A Backdoor, Thor Larholm, 2005/02/22
ADP Elite System Max 9000 Series Login Vulnerability, rootfiend, 2005/02/21
Gigafast/CompUSA router (model EE400-R) vulnerabilities, Gary H. Jones II, 2005/02/21
Arkeia Network Backup Client Remote Access, H D Moore, 2005/02/21
- Re: Arkeia Network Backup Client Remote Access, Vincent Archer, 2005/02/22
- Re: Arkeia Network Backup Client Remote Access, H D Moore, 2005/02/22
- Re: Arkeia Network Backup Client Remote Access, Arnaud Spicht, 2005/02/23
[SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities, Martin Schulze, 2005/02/21
[Full-Disclosure] [USN-84-1] Squid vulnerabilities, Martin Pitt, 2005/02/21
[Full-Disclosure] [FLSA-2005:1945] Updated sox packages fix buffer overflows, Marc Deslauriers, 2005/02/20
[Full-Disclosure] [FLSA-2005:2058] Updated cdrtools packages fix a security issue, Marc Deslauriers, 2005/02/20
[Full-Disclosure] [FLSA-2005:1944] GNOME VFS updates address extfs vulnerability, Marc Deslauriers, 2005/02/20
3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow, class 101, 2005/02/20
cfengine rsa heap remote exploit: part of PTjob project, yan feng, 2005/02/19
webfsd fun. opensource is god .lol windows, yan feng, 2005/02/19
[Hat-Squad] Findjmp2 Tool, Hat-Squad Security Team, 2005/02/19
exwormshoucast part of PTjob project: SHOUTcast v1.9.4 remote exploit, yan feng, 2005/02/19
Multiples vulnerability in ZeroBoard,, albanian haxorz, 2005/02/19
[Full-Disclosure] [ GLSA 200502-27 ] gFTP: Directory traversal vulnerability, Matthias Geerdsen, 2005/02/19
Joint encryption?, John Richard Moser, 2005/02/19
- Re: Joint encryption?, Damian Menscher, 2005/02/19
  - Re: Joint encryption?, John Richard Moser, 2005/02/19
- Re: Joint encryption?, Casper . Dik, 2005/02/19
  - Re: Joint encryption?, John Richard Moser, 2005/02/20
    - Re: Joint encryption?, Robert C. Helling, 2005/02/21
- Re: Joint encryption?, devnull, 2005/02/20
  - Re: Joint encryption?, John Richard Moser, 2005/02/20
    - Re: Joint encryption?, peter zulu, 2005/02/21
- Re: Joint encryption?, Gandalf The White, 2005/02/21
- RE: Joint encryption?, David Schwartz, 2005/02/21
  - Re: Joint encryption?, John Richard Moser, 2005/02/21
- Re: Joint encryption?, Valdis . Kletnieks, 2005/02/21
  - Re: Joint encryption?, John Richard Moser, 2005/02/21
- Re: Joint encryption?, Ruud H.G. van Tol, 2005/02/21
[Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability, MurDoK, 2005/02/19
- Re: [Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability, Andres Tarasco, 2005/02/19
  - Re: [Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability, MurDoK, 2005/02/20
[Full-Disclosure] Thomson TCW690 POST Password Validation Vulnerability, MurDoK, 2005/02/19
Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins, headpimp, 2005/02/19
MDKSA-2005:041 - Updated cups packages fix vulnerabilities on 64 bit platforms, Mandrakelinux Security Team, 2005/02/19
MDKSA-2005:040 - Updated PostgreSQL packages fix multiple vulnerabilities, Mandrakelinux Security Team, 2005/02/19
MDKSA-2005:044 - Updated tetex packages fix vulnerabilities on 64 bit platforms, Mandrakelinux Security Team, 2005/02/19
Adobe Reader invalid root page node Count value DOS, Hongzhen Zhou, 2005/02/19
Combining Hashes, Kent Borg, 2005/02/19
- Re: Combining Hashes, unmanarc, 2005/02/20
  - Re: Combining Hashes, Ivan Krstic, 2005/02/21
  - Re: Combining Hashes, Frank Knobbe, 2005/02/21
- Re: [lists] Combining Hashes, Elliott Bäck, 2005/02/20
- Re: Combining Hashes, Felix Cuello, 2005/02/20
  - Re: Combining Hashes, Joel Maslak, 2005/02/22
- Re: Combining Hashes, exon, 2005/02/20
MDKSA-2005:045 - Updated kdelibs packages fix vulnerabilities, Mandrakelinux Security Team, 2005/02/19
3com 3CDaemon FTP "USER" Remote BOverflow POC, Hat-Squad Security Team, 2005/02/18
MDKSA-2005:042 - Updated gpdf packages fix vulnerabilities on 64 bit platforms, Mandrakelinux Security Team, 2005/02/18
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability, Martin Schulze, 2005/02/18
MDKSA-2005:043 - Updated xpdf packages fix vulnerabilities on 64 bit platforms, Mandrakelinux Security Team, 2005/02/18
BizMail 2.1 Spam Exploit, Jason Frisvold, 2005/02/18
[Full-Disclosure] Knox Arkeia remote root/system exploit, John Doe, 2005/02/18
- Re: Knox Arkeia remote root/system exploit, H D Moore, 2005/02/21
[Full-Disclosure] Multiple vulnerabilities in TrackerCam 5.12, Luigi Auriemma, 2005/02/18
- Re: [Full-Disclosure] Multiple vulnerabilities in TrackerCam 5.12, morning_wood, 2005/02/18
[Full-Disclosure] [ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability, Sune Kloppenborg Jeppesen, 2005/02/18
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-25 ] Squid: Denial of Service through DNS responses, Sune Kloppenborg Jeppesen, 2005/02/18
Re: NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+, Vade 79, 2005/02/18
Phishing hole found in IE and OE, Jay Calvert, 2005/02/18
- Re: Phishing hole found in IE and OE, Greg Merideth, 2005/02/18
- Re: Phishing hole found in IE and OE, David Nichols, 2005/02/19
  - Re: Phishing hole found in IE and OE, cyberpixl, 2005/02/20
hpm_guestbook.cgi JavaScript-Injection, Christoph Burchert, 2005/02/17
[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability, Martin Schulze, 2005/02/17
[SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution, Martin Schulze, 2005/02/17
Possible phpBB <=2.0.11 bug or sql injection?, jtm297, 2005/02/17
- RE: Possible phpBB <=2.0.11 bug or sql injection?, Miguel Angel Rodríguez Jódar, 2005/02/19
- Re: Possible phpBB <=2.0.11 bug or sql injection?, kaosone+[ONE]+, 2005/02/20
- Re: Possible phpBB <=2.0.11 bug or sql injection?, Giacomo Rizzo, 2005/02/20
- Re: Possible phpBB <=2.0.11 bug or sql injection?, Exoduks, 2005/02/18
[PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection, PersianHacker Team, 2005/02/17
Remote Windows Kernel Exploitation - Step Into the Ring 0, Marc Maiffret, 2005/02/17
Re: Permission problem in Skype BETA for linux, Peter Conrad, 2005/02/17
[ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie, Scovetta Labs, 2005/02/17
RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available), Williams, James K, 2005/02/17
Dangers of discarding duplicated messages, Adrian Bunk, 2005/02/17
- Re: Dangers of discarding duplicated messages, Maciej Soltysiak, 2005/02/18
  - Re: Dangers of discarding duplicated messages, Jon Keating, 2005/02/20
  - Re: Dangers of discarding duplicated messages, Gene Rackow, 2005/02/20
  - Re: Dangers of discarding duplicated messages, David F. Skoll, 2005/02/20
Invision Power Boards 1.3.1 FINAL XSS Exploit, Daniel A., 2005/02/17
[Full-Disclosure] [FLSA-2005:2137] Updated cyrus-sasl resolves security vulnerabilities, Dominic Hargreaves, 2005/02/17
RECON 2005 CFP [Montreal, Canada], dataworm, 2005/02/17
MDKSA-2005:039 - Updated rwho packages fix vulnerability, Mandrakelinux Security Team, 2005/02/17
XSS vulnerabilty in ASP.Net [with details], Andir Andir, 2005/02/17
RE: BrightStor ARCserve Backup buffer overflow PoC (fix available), Williams, James K, 2005/02/17
[Full-Disclosure] [ GLSA 200502-24 ] Midnight Commander: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/02/17
[Full-Disclosure] iDEFENSE Labs Website Launch, iDEFENSE Labs, 2005/02/17
[Full-Disclosure] Advisory: Multiple Vulnerabilities in BibORB, Patrick Hof, 2005/02/17
[Full-Disclosure] [USN-66-2] PHP vulnerability, Martin Pitt, 2005/02/17
[Full-Disclosure] [USN-78-2] Fixed mailman packages for USN-78-1, Martin Pitt, 2005/02/17
NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+, TAC, 2005/02/17
[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability, PersianHacker Team, 2005/02/17
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction, Threlkeld, Richard, 2005/02/17
[Security Bulletin] SSRT5893 rev.0 - HP Web-enabled Management Software Remote Buffer Overflow, Boren, Rich (SSRT), 2005/02/17
SHA-1 broken, Gadi Evron, 2005/02/16
- Re: SHA-1 broken, Kent Borg, 2005/02/17
- Re: SHA-1 broken, Michael Cordover, 2005/02/17
  - Re: SHA-1 broken, dullien, 2005/02/18
  - Re: SHA-1 broken, D.J. Capelis, 2005/02/18
    - Re: SHA-1 broken, Michael Cordover, 2005/02/20
  - Re: SHA-1 broken, Dan Harkless, 2005/02/19
- Re: SHA-1 broken, Robert Sussland, 2005/02/17
  - Re: SHA-1 broken, dullien, 2005/02/18
    - Re: SHA-1 broken, Darren Reed, 2005/02/19
    - Re: SHA-1 broken, dullien, 2005/02/19
    - Re: SHA-1 broken, Tollef Fog Heen, 2005/02/20
    - Re: SHA-1 broken, Denis Jedig, 2005/02/21
- Re: SHA-1 broken, Steve Friedl, 2005/02/17
- Re: SHA-1 broken, Jonathan G. Lampe, 2005/02/17
- RE: SHA-1 broken, Scovetta, Michael V, 2005/02/18
  - RE: SHA-1 broken, Frank Knobbe, 2005/02/21
- RE: SHA-1 broken, Michael Silk, 2005/02/18
  - Re: SHA-1 broken, Brian May, 2005/02/20
  - Re: SHA-1 broken, exon, 2005/02/20
    - Re: SHA-1 broken, Peter J. Holzer, 2005/02/21
- Re: SHA-1 broken, Michael Silk, 2005/02/19
  - Re: SHA-1 broken, Anatole Shaw, 2005/02/20
    - Re: SHA-1 broken, Michael Silk, 2005/02/20
    - Re: SHA-1 broken, peeon+securityfocus, 2005/02/21
    - Re: SHA-1 broken, Peter Jeremy, 2005/02/21
- Re: SHA-1 broken, securityfocus, 2005/02/20
  - Re: SHA-1 broken, Damian Menscher, 2005/02/21
  - Re: SHA-1 broken, Paul Johnston, 2005/02/21
- Re: SHA-1 broken, Michael Silk, 2005/02/21
  - Re: SHA-1 broken, exon, 2005/02/21
Update Your Bookmarks, Amit Klein (AKsecurity), 2005/02/16
[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution, Martin Schulze, 2005/02/16
RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/16
- Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
  - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Vincent Archer, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Rainer Duffner, 2005/02/18
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
    - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
  - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Thor (Hammer of God), 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
- RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Nick FitzGerald, 2005/02/17
- Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Bill Brown, 2005/02/16
- Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., lyal.collins, 2005/02/17
- RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Tosoni, 2005/02/17
  - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Riccardo Murri, 2005/02/18
Blind Sql-Injection in MySQL Databases, Zeelock, 2005/02/16
xprobe2 v0.2.2 released, Ofir Arkin, 2005/02/16
- Re: xprobe2 v0.2.2 released, Stan Bubrouski, 2005/02/17
[Full-Disclosure] [ GLSA 200502-23 ] KStars: Buffer overflow in fliccd, Sune Kloppenborg Jeppesen, 2005/02/16
[hackgen-2005-#003] - SQL injection bugs in DCP-Portal, Exoduks, 2005/02/16
[KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi, Dirk Mueller, 2005/02/16
- [KDE Security Advisory] Buffer overflow in fliccd of kdeedu/kstars/indi, Dirk Mueller, 2005/02/16
MDKSA-2005:038 - Updated emacs/xemacs packages fix vulnerability, Mandrakelinux Security Team, 2005/02/16
[Full-Disclosure] [ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability, Matthias Geerdsen, 2005/02/16
[CLA-2005:925] Conectiva Security Announcement - evolution, Conectiva Updates, 2005/02/16
[Full Disclosure] Using DHTML XSS to launch HHCTRL exploit, Valentin Avram, 2005/02/16
[Full-Disclosure] [USN-83-1] LessTif 2 vulnerabilities, Martin Pitt, 2005/02/16
[Full-Disclosure] [NORTHSHOREINTERNET.COM.AU: #1] amihotornot.com.au vulnerability, North Shore Internet, 2005/02/16
XSS in MySpace.com RuWeb.net and Primus.com, Chris, 2005/02/16
Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Jeffrey Wilkinson, 2005/02/16
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction, James Lay, 2005/02/15
- [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction, Joe Granto, 2005/02/16
RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, William Pratt, 2005/02/15
- Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, K-OTiK Security, 2005/02/16
- RE: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Michael Scheidell, 2005/02/17
- Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, newbug Tseng, 2005/02/19
[NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability, John Cobb, 2005/02/15
Scottsave.com Trade History Exploit, Ben Efros, 2005/02/15
Scottrader Application Exploit, Ben Efros, 2005/02/15
[Full-Disclosure] [ GLSA 200502-21 ] lighttpd: Script source disclosure, Thierry Carrez, 2005/02/15
[Full-Disclosure] [ GLSA 200502-20 ] Emacs, XEmacs: Format string vulnerabilities in movemail, Thierry Carrez, 2005/02/15
IE6 SP1 - Click N Crash, ViPeR, 2005/02/15
- Re: IE6 SP1 - Click N Crash is old news, Berend-Jan Wever, 2005/02/15
- Re: IE6 SP1 - Click N Crash, Robert ONeal, 2005/02/17
MDKSA-2005:037 - Updated mailman packages fix directory traversal vulnerability, Mandrakelinux Security Team, 2005/02/15
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution, Martin Schulze, 2005/02/15
[SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution, Martin Schulze, 2005/02/15
[Full-Disclosure] ASPjar Guestbook login.asp not official patch, CorryL, 2005/02/15
RE: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185, Randal, Phil, 2005/02/15
- Re: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2005/02/16
- Re: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185, Thor \(Hammer of God\), 2005/02/16
[Full-Disclosure] [USN-82-1] Linux kernel vulnerabilities, Martin Pitt, 2005/02/15
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability, Seth Alan Woolley, 2005/02/15
[Full-Disclosure] SecurityForest - Public Release no.2, loni@securityforest.com, 2005/02/14
[Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185, Threlkeld, Richard, 2005/02/14
- [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185, STANESCU Ionut, 2005/02/15
- RE: [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185, Threlkeld, Richard, 2005/02/16
- [Full-Disclosure] RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185, Harshad, 2005/02/16
RE: Exploit on tcp/4128?, Butterworth, Jim, 2005/02/14
- RE: Exploit on tcp/4128?, Lawrence Baldwin, 2005/02/14
- RE: Exploit on tcp/4128?, Mueller, Lance, 2005/02/15
[NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities, John Cobb, 2005/02/14
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-19 ] PostgreSQL: Buffer overflows in PL/PgSQL parser, Sune Kloppenborg Jeppesen, 2005/02/14
[Full-Disclosure] [ GLSA 200502-18 ] VMware Workstation: Untrusted library search path, Thierry Carrez, 2005/02/14
[Full-Disclosure] UPDATE: [ GLSA 200501-36 ] AWStats: Remote code execution, Thierry Carrez, 2005/02/14
[Full-Disclosure] Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software, Maximillian Dornseif, 2005/02/14
[Full-Disclosure] [ GLSA 200502-17 ] Opera: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/02/14
vbulletin 3.0.x PHP code execution, AL3NDALEEB, 2005/02/14
- Re: vbulletin 3.0.x PHP code execution, pokley, 2005/02/15
- Re: vbulletin 3.0.x PHP code execution, pokley, 2005/02/16
- Re: vbulletin 3.0.x PHP code execution, AL3NDALEEB., 2005/02/16
eBay Account Phishing with eBay Redirect, Steven, 2005/02/14
- Exploit on tcp/4128?, Lawrence Baldwin, 2005/02/14
  - RE: Exploit on tcp/4128?, David Gillett, 2005/02/14
    - RE: Exploit on tcp/4128?, Jeff Mickey, 2005/02/14
  - Re: Exploit on tcp/4128?, James Eaton-Lee, 2005/02/14
- Re: eBay Account Phishing with eBay Redirect, Josh Tolley, 2005/02/14
  - Re: eBay Account Phishing with eBay Redirect, Nick FitzGerald, 2005/02/15
  - Re: eBay Account Phishing with eBay Redirect, Jonathan Rockway, 2005/02/15
    - RE: eBay Account Phishing with eBay Redirect, Thomas T. Evans, III, 2005/02/15
- Re: eBay Account Phishing with eBay Redirect, Jay Calvert, 2005/02/15
- RE: eBay Account Phishing with eBay Redirect, Israel Torres, 2005/02/15
[SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access, Martin Schulze, 2005/02/14
Credit Card Phishing with executable download, Gandalf The White, 2005/02/14
[Full-Disclosure] Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185, James Lay, 2005/02/14
- Re: [Full-Disclosure] Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185, Vincent Archer, 2005/02/15
AWStats <= 6.4 Multiple vulnerabilities, [ru]@securityfocus.com@www.securityfocus.com, 2005/02/14
- Re: AWStats <= 6.4 Multiple vulnerabilities, Ondra Holecek, 2005/02/15
  - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Jamie Pratt, 2005/02/15
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Ondra Holecek, 2005/02/15
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Herman Sheremetyev, 2005/02/15
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Jamie Pratt, 2005/02/16
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Thom Craver, 2005/02/16
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Micah Brandon, 2005/02/16
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Matt Wilder, 2005/02/17
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, Ondra Holecek, 2005/02/15
    - Re: AWStats <= 6.4 Multiple vulnerabilities - can't reproduce in 6.3?, twebster, 2005/02/16
[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability, Martin Schulze, 2005/02/14
[Full-Disclosure] ASPjar Guestbook login.asp not official patch, CorryL, 2005/02/14
[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files, Martin Schulze, 2005/02/14
[CLA-2005:924] Conectiva Security Announcement - XFree86, Conectiva Updates, 2005/02/14
[Full-Disclosure] The ultimate solution to phising, Stian Øvrevåge, 2005/02/14
[Full-Disclosure] [ GLSA 200502-15 ] PowerDNS: Denial of Service vulnerability, Matthias Geerdsen, 2005/02/14
[Full-Disclosure] [ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability, Luke Macken, 2005/02/14
[Full-Disclosure] [ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability, Sune Kloppenborg Jeppesen, 2005/02/14
Re: Advanced Guestbook 2.2 -- SQL Injection Exploit, mary, 2005/02/14
Symantec UPX issue solution, Roger A. Grimes, 2005/02/14
MDKSA-2005:032-1 - Updated cpio packages fix vulnerability, Mandrakelinux Security Team, 2005/02/12
[Full-Disclosure] Infostring crash and shutdown in the Quake 3 engine, Luigi Auriemma, 2005/02/12
[Full-Disclosure] exim auth_spa_server() PoC exploit, Yuri Gushin, 2005/02/12
Zone Labs Security Alert ZL05-01: Zone Labs IPC Instability, Zone Labs Product Security, 2005/02/11
[VulnWatch] iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability, iDefense Customer Service, 2005/02/11
SYM05-003 Symantec UPX Parsing Engine Heap Overflow, secure, 2005/02/11
[Full-Disclosure] [ GLSA 200502-12 ] Webmin: Information leak in Gentoo binary package, Thierry Carrez, 2005/02/11
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-13 ] Perl: Vulnerabilities in perl-suid wrapper, Thierry Carrez, 2005/02/11
BrightStor ARCserve Backup buffer overflow PoC, cybertronic, 2005/02/11
- Re: BrightStor ARCserve Backup buffer overflow PoC, H D Moore, 2005/02/14
- Re: BrightStor ARCserve Backup buffer overflow PoC, H D Moore, 2005/02/14
- Re: BrightStor ARCserve Backup buffer overflow PoC, Williams, James K, 2005/02/16
[SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution, Martin Schulze, 2005/02/11
[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root, Martin Schulze, 2005/02/11
insecure temporary file creation in kdelibs 3.3.2, Davide Madrisan, 2005/02/11
[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities, Martin Schulze, 2005/02/11
Remotely Controlling XSS Attacks - Announcing XSS-Proxy, Rager, Anton (Anton), 2005/02/11
MDKSA-2005:036 - Updated MySQL packages fix temporary file vulnerability, Mandrakelinux Security Team, 2005/02/11
MDKSA-2005:035 - Updated python packages fix vulnerability, Mandrakelinux Security Team, 2005/02/11
MDKSA-2005:034 - Updated squid packages fix multiple vulnerabilities, Mandrakelinux Security Team, 2005/02/11
MDKSA-2005:033 - Updated enscript packages fix multiple vulnerabilities, Mandrakelinux Security Team, 2005/02/11
MDKSA-2005:032 - Updated cpio packages fix vulnerability, Mandrakelinux Security Team, 2005/02/11
[SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service, Martin Schulze, 2005/02/11
TSLSA-2005-0003 - multi, Trustix Security Advisor, 2005/02/11
[Full-Disclosure] [USN-81-1] iptables vulnerability, Martin Pitt, 2005/02/11
[Full-Disclosure] [USN-80-1] mod_python vulnerability, Martin Pitt, 2005/02/11
ASPjar guestbook (Injection in login page), farhad koosha, 2005/02/11
Symantec UPX Parsing Engine Heap Overflow, Neil Watson, 2005/02/11
- Re: Symantec UPX Parsing Engine Heap Overflow, James Riden, 2005/02/11
HACKING WITH JAVASCRIPT, hictor ertd, 2005/02/11
- Re: HACKING WITH JAVASCRIPT, Cleiton Martins, 2005/02/11
- Re: HACKING WITH JAVASCRIPT, Jim Halfpenny, 2005/02/11
[VulnWatch] iDEFENSE Security Advisory 02.10.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability, iDefense Customer Service, 2005/02/10
[Full-Disclosure] [FLSA-2005:2352] Updated Xpdf package fixes security issues, Marc Deslauriers, 2005/02/10
[Full-Disclosure] [FLSA-2005:2252] Updated iptables packages resolve security issues, Marc Deslauriers, 2005/02/10
[Full-Disclosure] [FLSA-2005:2188] Updated gaim package resolves security issues, Marc Deslauriers, 2005/02/10
[Full-Disclosure] [FLSA-2005:2353] Updated gpdf package fixes security issues, Marc Deslauriers, 2005/02/10
[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit, Martin Schulze, 2005/02/10
[Full-Disclosure] Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0, Luigi Auriemma, 2005/02/10
[VulnWatch] iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability, iDefense Customer Service, 2005/02/10
- [VulnWatch] Re:iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability, Shiva Persaud, 2005/02/10
iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability, iDefense Customer Service, 2005/02/10
- [VulnWatch] Re: iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability, Shiva Persaud, 2005/02/10
[Full-Disclosure] UPDATE: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability, Luke Macken, 2005/02/10
[Full-Disclosure] [ GLSA 200502-11 ] Mailman: Directory traversal vulnerability, Sune Kloppenborg Jeppesen, 2005/02/10
iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability, iDefense Customer Service, 2005/02/10
- [VulnWatch] Re: iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability, Shiva Persaud, 2005/02/10
Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders., Sean Sosik-Hamor, 2005/02/10
[SECURITY] [DSA 673-1] New evolution packages fix arbitrary code execution as root, Martin Schulze, 2005/02/10
[SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities, Martin Schulze, 2005/02/10
[Full-Disclosure] [USN-79-1] PostgreSQL vulnerabilities, Martin Pitt, 2005/02/10
SUSE Security Announcement: squid (SUSE-SA:2005:006), Thomas Biege, 2005/02/10
[Security Bulletin] SSRT4861 rev.0 - HP-UX BIND9.2.0 remote Denial of Service (DoS), Boren, Rich (SSRT), 2005/02/10
[VulnWatch] iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow, iDefense Customer Service, 2005/02/10
CMS Core SQL injection, foster GHC, 2005/02/10
SQL injection in Chipmunk forums, foster GHC, 2005/02/10
Paper: Solution to Red Hat PIE Protection, Zarul Shahrin, 2005/02/10
[SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution, Martin Schulze, 2005/02/10
CFP for SyScAN'05, organiser@syscan.org, 2005/02/10
RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs., Randal, Phil, 2005/02/10
- Re: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs., Marcin Sochacki, 2005/02/11
- RE: International Domain Name [IDN] support in modern browsers al lows attackers to spoof domain name URLs + SSL certs., Michael Wojcik, 2005/02/14
Data Mining for PIX Firewall Logs, Carey Heck, 2005/02/09
- Re: Data Mining for PIX Firewall Logs, jkowall, 2005/02/11
- RE: Data Mining for PIX Firewall Logs, mhuston, 2005/02/11
- RE: Data Mining for PIX Firewall Logs, Todd Towles, 2005/02/11
- RE: Data Mining for PIX Firewall Logs, Hill, Keith (Contractor), 2005/02/11
[Full-Disclosure] [FLSA-2005:1943] Updated libpng resolves security vulnerabilities, Dominic Hargreaves, 2005/02/09
[Full-Disclosure] [FLSA-2005:1906] Updated abiword packages fix security issue, Dominic Hargreaves, 2005/02/09
Some details about MS05-007 security bulletin, Jean-Baptiste Marchand, 2005/02/09
[VulnWatch] Patch available for high risk IBM DB2 Universal Database flaw, NGSSoftware Insight Security Research, 2005/02/09
[Full-Disclosure] yet another DSL modem backdoor - Mentor (Conexant), Adam Laurie, 2005/02/09
- [Full-Disclosure] Re: yet another DSL modem backdoor - Mentor (Conexant), Philip Barnham, 2005/02/10
Several SQL injection bugs in myPHP Forum v.1.0, foster GHC, 2005/02/09
[Full-Disclosure] [USN-78-1] Mailman vulnerability, Martin Pitt, 2005/02/09
MDKSA-2005:031 - Updated perl packages fix multiple vulnerabilities, Mandrakelinux Security Team, 2005/02/09
Mercuryboard <= 1.1.1 Working Sql Injection, Zeelock, 2005/02/09
[Security Bulletin] - SSRT4883 HP-UX ftpd remote privileged access, Boren, Rich (SSRT), 2005/02/09
[SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities, chewkeong, 2005/02/09
Internet Explorer zone spoofing with encoded URLs, Jouko Pynnonen, 2005/02/09
MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit, ATmaCA ATmaCA, 2005/02/09
- RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit, Andrew Hunter, 2005/02/09
  - RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit, Color Inc., 2005/02/10
- RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit, Andrew Hunter, 2005/02/11
- RE: MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit, Thor Larholm, 2005/02/10
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-10 ] pdftohtml: Vulnerabilities in included Xpdf, Matthias Geerdsen, 2005/02/09
GREENAPPLE Release, Dave Aitel, 2005/02/09
[SCL-2005.002] - IDN Feature Workaround via proxy.pac, Scovetta, Michael V, 2005/02/09
[SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories, chewkeong, 2005/02/09
EEYE: Windows SMB Client Transaction Response Handling Vulnerability, Marc Maiffret, 2005/02/09
[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution, Martin Schulze, 2005/02/09
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Jerome ATHIAS, 2005/02/09
[SECURITY] [DSA 670-1] New emacs20 packages fix arbitrary code execution, Martin Schulze, 2005/02/09
SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory, Roy Hills, 2005/02/09
AppleFileServer Denial of Service., nemo, 2005/02/08
RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN), Scovetta, Michael V, 2005/02/08
- RE: International Domain Name [IDN] - browser-level fix (not network.enableIDN), R Dicaire, 2005/02/09
[Full-Disclosure] Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability, Rafel Ivgi, 2005/02/08
- Re: Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability, Derek Martin, 2005/02/10
[VulnWatch] iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability, iDefense Customer Service, 2005/02/08
- Re: [VulnWatch] iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability, Shiva Persaud, 2005/02/09
- Re: iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability, Shiva Persaud, 2005/02/10
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-09 ] Python: Arbitrary code execution through SimpleXMLRPCServer, Thierry Carrez, 2005/02/08
[VulnWatch] CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability, CORE Security Technologies Advisories, 2005/02/08
[Full-Disclosure] Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994, Luigi Auriemma, 2005/02/08
php-fusion 4.x vuln, thegreatone2176, 2005/02/08
[VulnWatch] iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability, iDefense Customer Service, 2005/02/08
- Re: iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability, Shiva Persaud, 2005/02/10
[Full-Disclosure] UnixWare 7.1.4 : vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands, please_reply_to_security, 2005/02/08
[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : enable command line buffer overflows, please_reply_to_security, 2005/02/07
CodeCon Reminder, Len Sassaman, 2005/02/07
International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Brandon Kovacs, 2005/02/07
- Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Simon Ãstengaard, 2005/02/10
- Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Will Kamishlian, 2005/02/10
  - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Peter J. Holzer, 2005/02/11
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Scott Gifford, 2005/02/11
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Neil W Rickert, 2005/02/12
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Scott Gifford, 2005/02/12
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Gwendolynn ferch Elydyr, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Gwendolynn ferch Elydyr, 2005/02/16
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/16
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Gwendolynn ferch Elydyr, 2005/02/16
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Ron DuFresne, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Seth Breidbart, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., George Capehart, 2005/02/16
    - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/14
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Vincent Archer, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Thor (Hammer of God), 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Thor (Hammer of God), 2005/02/16
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/16
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Stefan Paletta, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Sebastian, 2005/02/15
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Stefan Paletta, 2005/02/17
    - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/16
    - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Benjamin Franz, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
    - RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., David Schwartz, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., bkfsec, 2005/02/17
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Janusz A. Urbanowicz, 2005/02/14
    - Message not available
    - Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs., Janusz A. Urbanowicz, 2005/02/16
[SePro Bugtraq] SQL-Injection in PerlDesk 1.x, deluxe, 2005/02/07
[Full-Disclosure] mailman email harvester, Bernhard Kuemel, 2005/02/07
- [Full-Disclosure] Re: mailman email harvester, Dave Korn, 2005/02/08
  - Re: [Full-Disclosure] Re: mailman email harvester, James Longstreet, 2005/02/08
    - [Full-Disclosure] Re: Re: mailman email harvester, Dave Korn, 2005/02/09
- secure-roster script to address mailman email harvester, Neal McBurnett, 2005/02/10
GMail / Google Groups ESMTP software b0f, Michal Zalewski, 2005/02/07
- Re: GMail / Google Groups ESMTP software b0f, Heather Adkins, 2005/02/10
[Full-Disclosure] UnixWare 7.1.4 : racoon multilple security issues, please_reply_to_security, 2005/02/07
iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability, iDefense Customer Service, 2005/02/07
[Full-Disclosure] [ GLSA 200502-08 ] PostgreSQL: Local privilege escalation, Luke Macken, 2005/02/07
[Security Bulletin] HP Tru64 Unix Mozilla Application Suite 1.7.3 Remote Denial of Service (DoS), Boren, Rich (SSRT), 2005/02/07
Re: [Contact] Motorola broadband appliance team?, Grzegorz Cegielski, 2005/02/07
[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : Vulnerabilities in long-lived TCP connections / Rose attack, please_reply_to_security, 2005/02/07
DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG buffer overflow', KF (lists), 2005/02/07
[Full-Disclosure] UnixWare 7.1.3 UnixWare 7.1.1 : Vulnerabilities in long-lived TCP connections / Rose attack, please_reply_to_security, 2005/02/07
Vulnerability in 3Com 3CServer v1.1, mandragore, 2005/02/07
DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation', KF (lists), 2005/02/07
[Full-Disclosure] Fireflashing [Firefox 1.0], mikx, 2005/02/07
- Re: [Full-Disclosure] Fireflashing [Firefox 1.0], Jelmer Kuperus, 2005/02/12
[OSX Finder] DS_Store arbitrary file overwrite vulnerability., Vade 79, 2005/02/07
[Full-Disclosure] Firetabbing [Firefox 1.0], mikx, 2005/02/07
[Full-Disclosure] Firedragging [Firefox 1.0], mikx, 2005/02/07
New version of ike-scan (IPsec IKE scanner) available - v1.7, Roy Hills, 2005/02/07
VOIPSEC, VoIP Security Aliance, 2005/02/07
XSS Vulnerability at thefacebook.com, Jonathan Rockway, 2005/02/07
[SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities, Martin Schulze, 2005/02/07
[Full-Disclosure] [USN-77-1] Squid vulnerabilities, Martin Pitt, 2005/02/07
[Full-Disclosure] [gentoo-announce] [ GLSA 200502-07 ] OpenMotif: Multiple vulnerabilities in libXpm, Thierry Carrez, 2005/02/07
[Full-Disclosure] [USN-76-1] Emacs vulnerability, Martin Pitt, 2005/02/07
[Full-Disclosure] [ GLSA 200502-06 ] LessTif: Multiple vulnerabilities in libXpm, Thierry Carrez, 2005/02/06
[Full-Disclosure] Multiple SQL injection in Chipmunk forum, GHC vision, 2005/02/05
[PersianHacker.NET 200502-05] WWWoard passwd, Pedram Hayati, 2005/02/05
- [PersianHacker.NET 200502-05] WWWoard passwd, Andrew guess, 2005/02/08
Foxmail Server Remote Buffer Overflow Vulnerability, Xin Ouyang, 2005/02/05
[Full-Disclosure] NGircd <= 0.8.1 Remote DoS (exploit), CorryL, 2005/02/05
[Full-Disclosure] directory traversal in RaidenHTTPD 1.1.27, Donato Ferrante, 2005/02/05
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities, Martin Schulze, 2005/02/05
[Full-Disclosure] Webroot Software Resigns from COAST, Paul Laudanski, 2005/02/05
Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12, Jonathan Rockway, 2005/02/04
- Re: Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12, Nicolas Gregoire, 2005/02/05
Re: Squirrelmail vacation v0.15 local root exploit, p dont think, 2005/02/04
[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading, Martin Schulze, 2005/02/04
Wireless networks/Default Admin username security problem in Croatia, Radoslav Dejanović, 2005/02/04
- Re: Wireless networks/Default Admin username security problem in Croatia, Denis Jedig, 2005/02/05
[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access, Martin Schulze, 2005/02/04
[Full-Disclosure] Exploit For Savant Web Server 3.1 (tested on win2003), CorryL, 2005/02/04
[Full-Disclosure] [USN-74-2] Fixed Postfix packages for USN-74-1, Martin Pitt, 2005/02/04
[Full-Disclosure] [USN-75-1] cpio vulnerability, Martin Pitt, 2005/02/04
[Full-Disclosure] [USN-74-1] Postfix vulnerability, Martin Pitt, 2005/02/04
- [Full-Disclosure] Re: [USN-74-1] Postfix vulnerability, Wietse Venema, 2005/02/05
  - Re: [Full-Disclosure] Re: [USN-74-1] Postfix vulnerability, FRLinux, 2005/02/05
[ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4, laurent oudot, 2005/02/03
- Re: [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4, Denis Jedig, 2005/02/04
Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py, Guido van Rossum, 2005/02/03
ngIRCd <= v0.8.2 Format String Vulnerability, CoKi, 2005/02/03
RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT], cybertronic, 2005/02/03
New presentation: Advanced SQL Injection in Oracle databases, Esteban Martínez Fayó, 2005/02/03
MDKSA-2005:029 - Updated vim packages fix vulnerabilities, Mandrakelinux Security Team, 2005/02/03
[Full-Disclosure] DoS in LANChat Pro Revival 1.666c, Donato Ferrante, 2005/02/03
[Full-Disclosure] [Linux kernel ipv6_setsockopt integer overflow], qobaiashi, 2005/02/03
- Re: [Linux kernel ipv6_setsockopt integer overflow], Dan Yefimov, 2005/02/03
  - [Full-Disclosure] Re: [Linux kernel ipv6_setsockopt integer overflow], qobaiashi, 2005/02/04
[Full-Disclosure] [USN-73-1] Python vulnerability, Martin Pitt, 2005/02/03
SV: Zyxel / Netgear and probably other routers leaking information., Jens Kalvik, 2005/02/03
[Full-Disclosure] [ GLSA 200502-05 ] Newspost: Buffer overflow vulnerability, Luke Macken, 2005/02/02
Re: [Full-Disclosure] [ GLSA 200501-40 ] ngIRCd: Buffer overflow, qobaiashi, 2005/02/02
[Full-Disclosure] PayPal /webscr currency substitution exploit?, 2600hz, 2005/02/02
Google getting smarter ?!?!, John Madden, 2005/02/02
- RE: Google getting smarter ?!?!, Scott Jacobson, 2005/02/03
Portcullis Advisory 05-009 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
Windows Security Checklists - 10 Parts, Paul Laudanski, 2005/02/02
Gallery is still vulnerable to Cross-site Scripting attacks, Jon Keating, 2005/02/02
Portcullis Advisory 05-008 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
Portcullis Advisory 05-007 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
[VulnWatch] High Risk Vulnerabilities in Eudora Mail Client, NGSSoftware Insight Security Research, 2005/02/02
Portcullis Advisory 05-006 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
[Full-Disclosure] UNIX Tar Security Advisory from TEAM PWN4GE, Team Pwnge, 2005/02/02
Portcullis Advisory 05-001 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
Portcullis Advisory 05-005 Update, Webseries Payment Application, Paul J Docherty, 2005/02/02
[Full-Disclosure] [ GLSA 200502-04 ] Squid: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/02/02
[SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities, chewkeong, 2005/02/02
7a69Adv#21 - WinRAR unpack one-folder path disclosure, Albert Puigsech Galicia, 2005/02/02
7a69Adv#20 - ZipGenius unpack one-folder path disclosure, Albert Puigsech Galicia, 2005/02/02
7a69Adv#19 - ZipGenius unpack path disclosure, Albert Puigsech Galicia, 2005/02/02
MDKSA-2005:026 - Updated imap packages fix authentication vulnerability, Mandrakelinux Security Team, 2005/02/02
MDKSA-2005:027 - Updated chbg packages fix vulnerability, Mandrakelinux Security Team, 2005/02/02
MDKSA-2005:028 - Updated ncpfs packages fix vulnerabilities, Mandrakelinux Security Team, 2005/02/02
[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions, Martin Schulze, 2005/02/02
Re:WinAmp POC: How to get 900+ shellcodespace!?, lists, 2005/02/02
- Re[2]: WinAmp POC: How to get 900+ shellcodespace!?, Viktor E Larionov, 2005/02/02
[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35, Luigi Auriemma, 2005/02/02
[Full-Disclosure] [USN-72-1] Perl vulnerabilities, Martin Pitt, 2005/02/02
[Full-Disclosure] [ GLSA 200502-03 ] enscript: Multiple vulnerabilities, Thierry Carrez, 2005/02/02
[Full-Disclosure] [ GLSA 200502-02 ] UW IMAP: CRAM-MD5 authentication bypass, Sune Kloppenborg Jeppesen, 2005/02/02
[Full-Disclosure] SQL injection in EveryDNS.net Service, Calum Power, 2005/02/02
[Full-Disclosure] [FLSA-2005:2272] Updated unarj package fixes security issue, Marc Deslauriers, 2005/02/01
[Full-Disclosure] [FLSA-2005:2187] Updated freeradius packages fix security flaws, Marc Deslauriers, 2005/02/01
[Full-Disclosure] [FLSA-2005:2255] Updated zip package fixes security issue, Marc Deslauriers, 2005/02/01
[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities, Martin Schulze, 2005/02/01
[ GLSA 200502-01 ] FireHOL: Insecure temporary file creation, Matthias Geerdsen, 2005/02/01
[SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution, Martin Schulze, 2005/02/01
[ Security Bulletin] SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service (DoS), Boren, Rich (SSRT), 2005/02/01
[Full-Disclosure] [USN-71-1] PostgreSQL vulnerability, Martin Pitt, 2005/02/01
Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues, Trog, 2005/02/01
- Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues, Dack, 2005/02/01
  - Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues, Darren Bounds, 2005/02/02
  - Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues, Trog, 2005/02/02
    - Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues, exon, 2005/02/02
[Full-Disclosure] University of Phoenix - Outlook Express Unauthorized Configuration Manipulation, Adam Baldwin, 2005/02/01