Vulnerability Wathcer Newsletter (thread)

[Full-Disclosure] Suggested filters against PHP Attacking Worms, Paul Laudanski, 2004/12/28
[VulnWatch] [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside., class 101, 2004/12/27
- [VulnWatch] Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside., Chris Wysopal, 2004/12/27
[VulnWatch] Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/27
- [VulnWatch] Re: YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/27
[Full-Disclosure] YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2004/12/25
- Message not available
  - Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2, Andrew Smith, 2004/12/27
[VulnWatch] IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L), NGSSoftware Insight Security Research, 2004/12/24
[VulnWatch] IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/24
[VulnWatch] Oracle wrapped procedure overflow (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle TNS Listener DoS (#NISR2122004F), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle ISQLPlus file access vulnerability (#NISR2122004E), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle clear text passwords (#NISR2122004D), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle extproc local command execution (#NISR23122004C), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle extproc directory traversal (#NISR23122004B), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle extproc buffer overflow (#NISR23122004A), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle Character Conversion Bugs (#NISR2122004G), NGSSoftware Insight Security Research, 2004/12/23
[VulnWatch] Oracle Trigger Abuse (#NISR2122004I), NGSSoftware Insight Security Research, 2004/12/23
IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
Oracle wrapped procedure overflow (#NISR2122004J), NGSSoftware Insight Security Research, 2004/12/23
Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H), NGSSoftware Insight Security Research, 2004/12/23
Oracle TNS Listener DoS (#NISR2122004F), NGSSoftware Insight Security Research, 2004/12/23
IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc local command execution (#NISR23122004C), NGSSoftware Insight Security Research, 2004/12/23
Oracle clear text passwords (#NISR2122004D), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc directory traversal (#NISR23122004B), NGSSoftware Insight Security Research, 2004/12/23
Oracle extproc buffer overflow (#NISR23122004A), NGSSoftware Insight Security Research, 2004/12/23
Oracle Character Conversion Bugs (#NISR2122004G), NGSSoftware Insight Security Research, 2004/12/23
Oracle ISQLPlus file access vulnerability (#NISR2122004E), NGSSoftware Insight Security Research, 2004/12/23
Oracle Trigger Abuse (#NISR2122004I), NGSSoftware Insight Security Research, 2004/12/23
[Full-Disclosure] Regarding Secunia Advisory SA13040., Xavier Beaudouin, 2004/12/22
- [Full-Disclosure] [SECUNIA] Regarding Secunia Advisory SA13040, Thomas Kristensen, 2004/12/22
  - [Full-Disclosure] Re: [caudium-devel] [SECUNIA] Regarding Secunia Advisory SA13040, Marek Habersack, 2004/12/23
[VulnWatch] iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, customer service mailbox, 2004/12/22
[VulnWatch] iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability, customer service mailbox, 2004/12/22
[VulnWatch] iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability, customer service mailbox, 2004/12/22
[VulnWatch] iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability, customer service mailbox, 2004/12/22
Sybase ASE 12.5.2 vulnerabilities, NGSSoftware Insight Security Research, 2004/12/22
[VulnWatch] iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability, customer service mailbox, 2004/12/22
[VulnWatch] iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability, customer service mailbox, 2004/12/22
iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, customer service mailbox, 2004/12/21
- Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, Dmitry V. Levin, 2004/12/22
- Re: iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability, Marcus Meissner, 2004/12/28
iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability, customer service mailbox, 2004/12/21
iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability, customer service mailbox, 2004/12/21
[Full-Disclosure] Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation, Carsten H. Eiram, 2004/12/21
[Full-Disclosure] Secunia Research: My Firewall Plus Privilege Escalation Vulnerability, Carsten H. Eiram, 2004/12/21
[Full-Disclosure] Re: Linux kernel IGMP vulnerabilities, Timothy Hall, 2004/12/17
[VulnWatch] Veritas BackupExec Agent vulnerability, Brad Zimmerman, 2004/12/17
iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability, customer service mailbox, 2004/12/16
[Full-Disclosure] Re: NetWare Screensaver Authentication Bypass From The Local Console, Roger McLaren, 2004/12/16
[Full-Disclosure] Hotmail Cross-Site Scripting Vulnerability #2, Rafel Ivgi, The-Insider, 2004/12/16
[Full-Disclosure] RE: Linux kernel scm_send local DoS, Leif Sawyer, 2004/12/16
- [Full-Disclosure] RE: Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
*nix data wipe tools, Thomas C. Greene, 2004/12/16
Yahoo! Mail Cross-Site Scripting Vulnerability, Rafel Ivgi, 2004/12/16
Hotmail Cross-Site Scripting Vulnerability #1, Rafel Ivgi, 2004/12/16
[VulnWatch] Hotmail Cross Site Scripting Vulnerability #2, Rafel Ivgi, 2004/12/16
[VulnWatch] Hotmail Cross-Site Scripting Vulnerability #1, Rafel Ivgi, The-Insider, 2004/12/16
[VulnWatch] Yahoo! Mail Cross-Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 2004/12/16
iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability, customer service mailbox, 2004/12/16
iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability, customer service mailbox, 2004/12/16
[VulnWatch] [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software, Secure Computer Group, 2004/12/16
[VulnWatch] [CAN-2004-1022] Insecure Credential Storage on Kerio Software, Secure Computer Group, 2004/12/16
iDEFENSE Security Advisory 12.14.04 - Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability, customer service mailbox, 2004/12/16
[VulnWatch] phpBB Attachment Mod Directory Traversal HTTP POST Injection, Paul Laudanski, 2004/12/16
Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
- Re: Linux kernel scm_send local DoS, even multiplexed, 2004/12/16
  - Re: Linux kernel scm_send local DoS, Paul Starzetz, 2004/12/16
    - Re: Linux kernel scm_send local DoS, even multiplexed, 2004/12/16
    - Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS, Valdis . Kletnieks, 2004/12/23
- Re: Linux kernel scm_send local DoS, Pavel Kankovsky, 2004/12/23
Linux kernel IGMP vulnerabilities, Paul Starzetz, 2004/12/16
- Re: Linux kernel IGMP vulnerabilities, Pekka Savola, 2004/12/16
- Re: Linux kernel IGMP vulnerabilities, stephen joseph butler, 2004/12/16
  - Re: Linux kernel IGMP vulnerabilities, Paul Starzetz, 2004/12/16
iDEFENSE Security Advisory 12.13.04 - Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability, customer service mailbox, 2004/12/02
[VulnWatch] Multiple vulnerabilities in phpMyAdmin, Nicolas Gregoire, 2004/12/02
[Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console, Adam Gray, 2004/12/02
- Re: NetWare Screensaver Authentication Bypass From The Local Console, Brad Bendily, 2004/12/16
[VulnWatch] [SA12981] Secunia Research: Opera Download Dialog Spoofing Vulnerability, Thomas Kristensen, 2004/12/02
[VulnWatch] Online Script Decoder, GreyMagic Security, 2004/12/02
- [VulnWatch] Re: Online Script Decoder, Steve Shockley, 2004/12/02
[Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL, Nicolas Gregoire, 2004/12/02
- [VulnWatch] Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL, Nicolas Gregoire, 2004/12/02