Vulnerability Wathcer Newsletter (thread)

[Full-Disclosure] Winamp Exploit (POC) 5.08 Stack Overflow, Rojodos, 2005/01/28
NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name, NSFOCUS Security Team, 2005/01/27
[VulnWatch] iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability, iDefense Customer Service, 2005/01/26
[VulnWatch] iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, iDefense Customer Service, 2005/01/24
- Re: iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, dila, 2005/01/31
Security Contact within RIM / Blackberry, Mark Litchfield, 2005/01/22
[VulnWatch] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow, NGSSoftware Insight Security Research, 2005/01/21
[VulnWatch] iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability, iDefense Customer Service, 2005/01/20
[VulnWatch] Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications, Integrigy Security, 2005/01/20
iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities, Michael Sutton, 2005/01/19
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e), NGSSoftware Insight Security Research, 2005/01/19
Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a), NGSSoftware Insight Security Research, 2005/01/19
RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g), NGSSoftware Insight Security Research, 2005/01/19
RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f), NGSSoftware Insight Security Research, 2005/01/19
[VulnWatch] MSN Heartbeat Control Buffer Overflow, NGSSoftware Insight Security Research, 2005/01/19
[VulnWatch] Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c), NGSSoftware Insight Security Research, 2005/01/19
[VulnWatch] iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow, customer service mailbox, 2005/01/19
[VulnWatch] Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 2005/01/19
Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i, NGSSoftware Insight Security Research, 2005/01/19
[Full-Disclosure] Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Rafel Ivgi, The-Insider, 2005/01/19
- [Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Berend-Jan Wever, 2005/01/19
- Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 2005/01/19
  - [Full-Disclosure] Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations, Markus Kern, 2005/01/19
[Full-Disclosure] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability, Rafel Ivgi, The-Insider, 2005/01/19
[VulnWatch] iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability, customer service mailbox, 2005/01/19
iDefense iTunes advisory., nemo, 2005/01/19
Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Trog, 2005/01/19
[VulnWatch] iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability, customer service mailbox, 2005/01/19
[VulnWatch] iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability, customer service mailbox, 2005/01/19
[VulnWatch] iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability, customer service mailbox, 2005/01/19
iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability, customer service mailbox, 2005/01/19
[Full-Disclosure] (no subject), The Insider, 2005/01/19
Linux kernel i386 SMP page fault handler privilege escalation, Paul Starzetz, 2005/01/19
[Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Team Pwnge, 2005/01/19
- Re: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Andrew Farmer, 2005/01/19
- RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Paul Kurczaba, 2005/01/19
  - RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, ALD, Aditya, Aditya Lalit Deshmukh, 2005/01/19
- RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, Paul Kurczaba, 2005/01/19
  - RE: [Full-Disclosure] MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER, ALD, Aditya, Aditya Lalit Deshmukh, 2005/01/19
[VulnWatch] EEYE: Windows ANI File Parsing Buffer Overflow, Derek Soeder, 2005/01/11
[VulnWatch] VERITAS Backup Exec 8.x/9.x Remote Universal Exploit, class 101, 2005/01/11
[Full-Disclosure] Windows Improper Token Validation -Exploit-, Cesar, 2005/01/10
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow, Team SHATTER (Application Security, Inc.), 2005/01/10
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation, Team SHATTER (Application Security, Inc.), 2005/01/10
[Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Darren Bounds, 2005/01/10
- Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Danny, 2005/01/11
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability, customer service mailbox, 2005/01/07
iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability, customer service mailbox, 2005/01/07
[Full-Disclosure] Linux kernel uselib() privilege elevation, corrected, Paul Starzetz, 2005/01/07
[Full-Disclosure] Linux kernel sys_uselib local root vulnerability, Paul Starzetz, 2005/01/07
[Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%, Rafel Ivgi, The-Insider, 2005/01/07
[Full-Disclosure] Re: *nix data wipe tools, Pavel Machek, 2005/01/06
[Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, Rafel Ivgi, The-Insider, 2005/01/06
- RE: [Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB, ALD, Aditya, Aditya Lalit Deshmukh, 2005/01/07
WinAc AND WinHKI ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 2005/01/06
[VulnWatch] WinAce - GZIP File Directory Transversal, Rafel Ivgi, The-Insider, 2005/01/06
Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2, Berend-Jan Wever, 2005/01/06
[VulnWatch] WinHKI - CAB File Directory Transversal, Rafel Ivgi, The-Insider, 2005/01/06
[VulnWatch] WinHKI - BH File Directory Transversal, Rafel Ivgi, The-Insider, 2005/01/06
[VulnWatch] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow, Rafel Ivgi, The-Insider, 2005/01/06
[Full-Disclosure] WinAce & WinHKI - ZIP File Directory Transversal, Rafel Ivgi, The-Insider, 2005/01/06
[Full-Disclosure] All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow, Rafel Ivgi, The-Insider, 2005/01/06
[VulnWatch] IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 XML functions overflows (#NISR05012005H), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 Windows Permission Problems (#NISR05012005F), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 call buffer overflow (#NISR05012005C), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 libdb2.so buffer overflow (#NISR05012005B), NGSSoftware Insight Security Research, 2005/01/05
IBM DB2 db2fmp buffer overflow (#NISR05012005A), NGSSoftware Insight Security Research, 2005/01/05
[VulnWatch] Secunia Research: Mozilla / Mozilla Firefox Download Dialog Source Spoofing, Jakob Balle, 2005/01/04
[VulnWatch] Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser, Peter Kruse, 2005/01/03
[Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 2005/01/03
- [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts, Paul Laudanski, 2005/01/05
[Full-Disclosure] BUG FIX Remote compromise of Internet Explorer Service Pack 2 XP SP2, Michael Evanchik, 2005/01/03
[Full-Disclosure] AOL's Online Password Reset feature does not fully validate user information, Steven, 2005/01/01
[Full-Disclosure] ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks, Steven, 2005/01/01