Network Security Archives

Vulnerability Wathcer Newsletter (date)

[Thread Index] [Top] [All Lists]

January 31, 2005

Re: iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, dila, 17:28

January 28, 2005

[Full-Disclosure] Winamp Exploit (POC) 5.08 Stack Overflow, Rojodos, 10:20

January 27, 2005

NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name, NSFOCUS Security Team, 13:19

January 26, 2005

[VulnWatch] iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability, iDefense Customer Service, 16:29

January 24, 2005

[VulnWatch] iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, iDefense Customer Service, 19:26

January 22, 2005

Security Contact within RIM / Blackberry, Mark Litchfield, 20:05

January 21, 2005

[VulnWatch] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow, NGSSoftware Insight Security Research, 13:31

January 20, 2005

[VulnWatch] iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability, iDefense Customer Service, 21:12
[VulnWatch] Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications, Integrigy Security, 02:34

January 19, 2005

iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities, Michael Sutton, 18:51
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e), NGSSoftware Insight Security Research, 18:41
Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a), NGSSoftware Insight Security Research, 18:41
RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g), NGSSoftware Insight Security Research, 18:41
RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f), NGSSoftware Insight Security Research, 18:41
[VulnWatch] MSN Heartbeat Control Buffer Overflow, NGSSoftware Insight Security Research, 18:40
[VulnWatch] Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c), NGSSoftware Insight Security Research, 18:40
[Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 18:40
Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 18:40
[VulnWatch] iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow, customer service mailbox, 18:39
[Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Berend-Jan Wever, 18:39
[VulnWatch] Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 18:39
Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 18:39
[Full-Disclosure] Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Rafel Ivgi, The-Insider, 18:38
[Full-Disclosure] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 18:38
[VulnWatch] iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability, customer service mailbox, 18:38
iDefense iTunes advisory., nemo, 18:37
Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Trog, 18:36
[VulnWatch] iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability, customer service mailbox, 18:36
[VulnWatch] iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability, customer service mailbox, 18:35
[VulnWatch] iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability, customer service mailbox, 18:35
iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability, customer service mailbox, 18:35
[Full-Disclosure] (no subject), The Insider, 18:34
RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, ALD, Aditya, Aditya Lalit Deshmukh, 18:34
RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Paul Kurczaba, 18:34
Linux kernel i386 SMP page fault handler privilege escalation, Paul Starzetz, 18:33
RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, ALD, Aditya, Aditya Lalit Deshmukh, 18:33
RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Paul Kurczaba, 18:32
Re: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Andrew Farmer, 18:32
[Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Team Pwnge, 18:32

January 11, 2005

[VulnWatch] EEYE: Windows ANI File Parsing Buffer Overflow, Derek Soeder, 16:45
Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Danny, 16:34
[VulnWatch] VERITAS Backup Exec 8.x/9.x Remote Universal Exploit, class 101, 15:44

January 10, 2005

[Full-Disclosure] Windows Improper Token Validation -Exploit-, Cesar, 20:26
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow, Team SHATTER (Application Security, Inc.), 19:55
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation, Team SHATTER (Application Security, Inc.), 19:55
[Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Darren Bounds, 18:15

January 07, 2005

iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability, customer service mailbox, 22:02
iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability, customer service mailbox, 19:51
[Full-Disclosure] Linux kernel uselib() privilege elevation, corrected, Paul Starzetz, 14:07
[Full-Disclosure] Linux kernel sys_uselib local root vulnerability, Paul Starzetz, 13:06
RE: [Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, ALD, Aditya, Aditya Lalit Deshmukh, 12:16
[Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%, Rafel Ivgi, The-Insider, 02:22

January 06, 2005

[Full-Disclosure] Re: *nix data wipe tools, Pavel Machek, 23:00
[Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, Rafel Ivgi, The-Insider, 20:59
WinAc AND WinHKI ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 20:19
[VulnWatch] WinAce - GZIP File Directory Transversal, Rafel Ivgi, The-Insider, 18:07
Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2, Berend-Jan Wever, 17:47
[VulnWatch] WinHKI - CAB File Directory Transversal, Rafel Ivgi, The-Insider, 15:26
[VulnWatch] WinHKI - BH File Directory Transversal, Rafel Ivgi, The-Insider, 14:05
[VulnWatch] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow, Rafel Ivgi, The-Insider, 12:44
[Full-Disclosure] WinAce & WinHKI - ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 08:21
[Full-Disclosure] All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow, Rafel Ivgi, The-Insider, 07:00

January 05, 2005

[VulnWatch] IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 23:44
[VulnWatch] IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 22:54
[VulnWatch] IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 22:04
[VulnWatch] IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 21:23
[VulnWatch] IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 20:13
[VulnWatch] IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 19:12
[VulnWatch] IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 18:11
IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 17:21
[VulnWatch] IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 17:21
IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 17:11
IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 17:01
IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 16:51
IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 16:40
IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 16:20
[VulnWatch] IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 16:20
IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 16:10
IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 16:00
IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 15:49
[Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 03:23

January 04, 2005

[VulnWatch] Secunia Research: Mozilla / Mozilla Firefox Download Dialog Source Spoofing, Jakob Balle, 12:36

January 03, 2005

[VulnWatch] Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser, Peter Kruse, 13:37
[Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 06:23
[Full-Disclosure] BUG FIX Remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 06:23

January 01, 2005

[Full-Disclosure] AOL's Online Password Reset feature does not fully validate user information, Steven, 16:30
[Full-Disclosure] ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks, Steven, 05:51