Network Security Archives

April 30, 2007

Re: [VulnWatch] AFFLIB(TM): Time-of-Check-Time-of-Use File Race, VSR Advisories, 16:36
[Full-disclosure] iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability, iDefense Labs, 14:27

April 27, 2007

AFFLIB(TM): Multiple Shell Metacharacter Injections, VSR Advisories, 17:47
AFFLIB(TM): Multiple Format String Injections, VSR Advisories, 17:35
AFFLIB(TM): Time-of-Check-Time-of-Use File Race, VSR Advisories, 17:25
AFFLIB(TM): Multiple Buffer Overflows, VSR Advisories, 16:52
[Full-disclosure] iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability, iDefense Labs, 14:06
[Full-disclosure] iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability, iDefense Labs, 14:06

April 26, 2007

[Full-disclosure] iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability, iDefense Labs, 17:45

April 24, 2007

[VulnWatch] Syhunt: Flixster Cross-Site Scripting Vulnerabilities, Alec Storm, 21:58
[VulnWatch] Syhunt: Google Talk (gTalk) HTML Injection Technique, Alec Storm, 20:45
[VulnWatch] Syhunt: MyCyberTwin Multiple Cross-Site Scripting Vulnerabilities, Alec Storm, 19:09
[Full-disclosure] Apache Illegal Request Handling Possible XSS Vulnerability, Michal Majchrowicz, 06:56
Re: [Full-disclosure] Apache Illegal Request Handling Possible XSS Vulnerability, Richard Moore, 06:45

April 23, 2007

[Full-disclosure] Apache/PHP REQUEST_METHOD XSS Vulnerability, Michal Majchrowicz, 19:11

April 20, 2007

[Full-disclosure] iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability, iDefense Labs, 16:21
Re: [Full-disclosure] [VulnWatch] Cross Domain XMLHttpRequest, anurag . agarwal, 11:05

April 18, 2007

[Full-disclosure] Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL, Team SHATTER, 16:02

April 17, 2007

[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability, iDefense Labs, 22:02
[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow, iDefense Labs, 21:51

April 16, 2007

[Full-disclosure] iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability, iDefense Labs, 20:57
[Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability, iDefense Labs, 14:12

April 15, 2007

Re: [Full-disclosure] Cross Domain XMLHttpRequest, ascii, 17:54
[Full-disclosure] Cross Domain XMLHttpRequest, Michal Majchrowicz, 16:51

April 12, 2007

[Full-disclosure] iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability, iDefense Labs, 17:59
[Full-disclosure] Cross site scripting in mephisto 0.7.3, Hanno BÃck, 13:23
[Full-disclosure] CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3, Hanno BÃck, 13:12
[Full-disclosure] CVE-2007-1871: Cross site scripting in chcounter 3.1.3, Hanno BÃck, 13:12

April 11, 2007

[Full-disclosure] iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities, iDefense Labs, 18:33
[Full-disclosure] Cosign SSO Authentication Bypass, Jon Oberheide, 12:50

April 10, 2007

[VulnWatch] EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation, eEye Advisories, 18:49
[VulnWatch] EEYE: Windows VDM Zero Page Race Condition Privilege Escalation, eEye Advisories, 17:24
[Full-disclosure] iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability, iDefense Labs, 16:41

April 09, 2007

[Full-disclosure] iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability, iDefense Labs, 19:13

April 08, 2007

Re: [VulnWatch] Latinchat Denial Of Service, d4rksoft, 16:23

April 05, 2007

[Full-disclosure] iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability, iDefense Labs, 14:59
[Full-disclosure] iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability, iDefense Labs, 14:58
[Full-disclosure] iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability, iDefense Labs, 14:58

April 04, 2007

High Risk Vulnerability in OpenOffice, NGSSoftware Insight Security Research, 16:09
Re: [Full-disclosure] Mozilla Firefox Insecure Element Stealth Injection Vulnerability, 3APA3A, 15:26
[Full-disclosure] Mozilla Firefox Insecure Element Stealth Injection Vulnerability, Michal Majchrowicz, 15:25
[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability, iDefense Labs, 15:25
[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability, iDefense Labs, 15:25
[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability, iDefense Labs, 15:25
[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability, iDefense Labs, 15:25
[Full-disclosure] iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability, iDefense Labs, 15:24
[Full-disclosure] iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities, iDefense Labs, 15:24
[Full-disclosure] iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability, iDefense Labs, 15:24
[Full-disclosure] iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities, iDefense Labs, 15:24
[Full-disclosure] iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability, iDefense Labs, 15:22
Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability, 3APA3A, 15:22
[VulnWatch] Libero.it (italian ISP) XSS vulnerability, Rosario Valotta, 15:22
[VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability, Michał Majchrowicz, 15:22
[Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability, iDefense Labs, 15:21
[Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability, iDefense Labs, 15:21
iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability, iDefense Labs, 15:19
[Full-disclosure] iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability, iDefense Labs, 15:19
RE: Your Opinion, Neale Green, 15:18
RE: Your Opinion, jay.tomas, 15:17
RE: Your Opinion, Jim Harrison, 15:17
RE: Your Opinion, Jim Harrison, 15:17
Re: Your Opinion, Paul Stepowski, 15:17
Re: Conflict of Interest - My summary, crazy frog crazy frog, 15:17
Re: Your Opinion, Andrew Kramer, 15:17
[VulnWatch] cftp 0.12 (readrc) Local buffer overflow vulnerability, starcadi, 15:17
[VulnWatch] dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability, starcadi, 15:17
Re: Your Opinion +, Alex Belits, 15:16
Conflict of Interest - My summary, Mark Litchfield, 15:16
RE: Your Opinion, Alex Eckelberry, 15:16
Re: Your Opinion, Forrest J. Cavalier III, 15:16
[VulnWatch] Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability, starcadi, 15:16
Re: Your Opinion, Casper . Dik, 15:16
RE: Your Opinion, Jim Harrison, 15:16
Your Opinion +, Mark Litchfield, 15:16
Re: Your Opinion, The Fungi, 15:16
[Full-disclosure] Call For Papers - IT Underground Dublin, Marcin Tkaczyk, 15:16
Re: Your Opinion, William A. Rowe, Jr., 15:16
RE: Your Opinion, Scott Blake, 15:16
Re: Your Opinion, Neil Dickey, 15:16
Re: Your Opinion, Crispin Cowan, 15:16
RE: Your Opinion, Mario Contestabile, 15:16
Re: Your Opinion, Jonathan Glass (GM), 15:16
Re: Your Opinion, bugtraq, 15:16
Your Opinion, Mark Litchfield, 15:16
iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities, iDefense Labs, 15:16
Call For Papers - IT Underground Dublin, Marcin Tkaczyk, 15:16
RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability, Topolski, Leo, 15:15
[VulnWatch] LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow, starcadi starcadi, 15:15
[VulnWatch] QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow, starcadi starcadi, 15:15
[Full-disclosure] iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability, iDefense Labs, 15:15
Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:14
iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability, iDefense Labs, 15:14
Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:14
CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow, CORE Security Technologies Advisories, 15:13
[VulnWatch] Unrarlib 0.4.0 (urarlib_get) Local buffer overflow, starcadi, 15:13
[VulnWatch] Windows Multimedia mmioRead Denial of Service Vulnerability, Michał Majchrowicz, 15:12
Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:12
Re: [Full-disclosure] Php Nuke POST XSS on steroids, ascii, 15:12
[Full-disclosure] Php Nuke POST XSS on steroids, ascii, 15:10
[VulnWatch] ANNOUNCE: Security OPUS San Francisco, CA - March 19-21, 2007, Steve Manzuik, 15:08
[Full-disclosure] iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities, iDefense Labs, 15:08
iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability, iDefense Labs, 15:06
CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability, CORE Security Technologies Advisories, 15:06
[Full-disclosure] iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability, iDefense Labs, 15:05
[Full-disclosure] iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability, iDefense Labs, 15:02
[Full-disclosure] iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability, iDefense Labs, 15:00
[VulnWatch] Overtaking Google Desktop, Yair Amit, 15:00
[Full-disclosure] iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability, iDefense Labs, 15:00
[Full-disclosure] iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability, iDefense Labs, 15:00
[Full-disclosure] iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities, iDefense Labs, 14:59
[Full-disclosure] iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability, iDefense Labs, 14:59
[Full-disclosure] iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability, iDefense Labs, 14:59
[Full-disclosure] iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability, iDefense Labs, 14:58