Hosting Provided By

Mailing List Archive For bugtraq@securityfocus.com By Author

Airscanner Corp.
- Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Voice data from victims/users) (29 Jun 2007)
azizov(at)itdefence.ru
- Safari Bookmarks Buffer Overflow Vulnerability (24 Jun 2007)
Calyptix Security
- Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device (26 Jun 2007)
cxib(at)securityreason.com
- PHP 4/5 htaccess safemode and open_basedir Bypass (26 Jun 2007)
darkz.gsa(at)gmail.com
- POWER PHLOGGER v.2.2.5 (username) SQL Injection (25 Jun 2007)
David Thiel
- flac123 0.0.9 - Stack overflow in comment parsing (28 Jun 2007)
Eitan Caspi
- "run as" local denial-of-service enables administrative account processes to be killed (23 Jun 2007)
Emanuele Gentili
- akocomment SQL INJECTION (all version) (29 Jun 2007)
esc6(at)hush.com
- Conti FTP Server v1.0 DoS (26 Jun 2007)
Firewall1954(at)hotmail.com
- XEForum Cookie Modification Privilege Escalation Vulnerability (27 Jun 2007)
Foresight Linux Essential Announcement Service
- FLEA-2007-0030-1: avahi avahi-glib avahi-sharp (28 Jun 2007)
- FLEA-2007-0029-1: krb5 krb5-workstation (27 Jun 2007)
- FLEA-2007-0028-1: libexif (22 Jun 2007)
Francisco Amato
- [ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0 (25 Jun 2007)
Gadi Evron
- CFP: ISOI III (a DA workshop) (26 Jun 2007)
gmdarkfig(at)gmail.com
- Pluxml 0.3.1 Remote Code Execution Exploit (24 Jun 2007)
Goodfellas SRT
- [GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write. (27 Jun 2007)
- [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write (26 Jun 2007)
- [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow (23 Jun 2007)
HASEGAWA Yosuke
- MS07-034: Executing arbitrary script with mhtml: protocol handler (21 Jun 2007)
Henri Lindberg - Louhi Networks Oy
- CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability (26 Jun 2007)
iDefense Labs
- iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability (26 Jun 2007)
- iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability (26 Jun 2007)
- iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities (21 Jun 2007)
imprili(at)gmail.com
- KF Web Server 3.1.0 admin console XSS (23 Jun 2007)
- LiteWEB 2.7 404 Denial of Services (23 Jun 2007)
- SHTTPD V1.38 server source code disclosure (23 Jun 2007)
Ivan Buetler
- SAP Internet Communication Framework (BC-MID-ICF) Vulnerability (27 Jun 2007)
- SAP Web Dynpro Java (BC-WD-JAV) Vulnerability (27 Jun 2007)
James C. Slora Jr.
- RE: "run as" local denial-of-service enables administrative account processes to be killed (26 Jun 2007)
Jerome Athias
- [SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow (28 Jun 2007)
John Smith
- iPhone Security Settings (29 Jun 2007)
john-lindsay(at)ngssoftware.com
- Contact request - nVidia (27 Jun 2007)
kaneda(at)bohater.net
- Re: New Include Redirect Bug XSS All vBulletin v 3.x.x (21 Jun 2007)
Kees Cook
- [USN-479-1] MadWifi vulnerabilities (29 Jun 2007)
- [USN-478-1] libexif vulnerability (26 Jun 2007)
- [USN-477-1] krb5 vulnerabilities (26 Jun 2007)
- [USN-476-1] redhat-cluster-suite vulnerability (22 Jun 2007)
- [USN-475-1] evolution-data-server vulnerability (21 Jun 2007)
Larry Seltzer
- RE: [Full-disclosure] Apple Safari: idn urlbar spoofing (25 Jun 2007)
laurent.gaffie(at)gmail.com
- phpTrafficA < 1.4.2 (24 Jun 2007)
- eNdonesia 8.4 [multiple injection sql] (22 Jun 2007)
- NetClassifieds [multiple vulnerabilities] (21 Jun 2007)
Matousec - Transparent security Research
- Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability (01 Jun 2007)
Michal Zalewski
- Re: [Full-disclosure] Apple Safari: idn urlbar spoofing (25 Jun 2007)
Moritz Muehlenhoff
- [SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution (29 Jun 2007)
- [SECURITY] [DSA 1323-1] New krb5 packages fix several vulnerabilities (28 Jun 2007)
- [SECURITY] [DSA 1322-1] New wireshark packages fix denial of service (27 Jun 2007)
- [SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities (23 Jun 2007)
- [SECURITY] [DSA 1321-1] New evolution-data-server packages fix arbitrary code execution (23 Jun 2007)
- [SECURITY] [DSA 1319-1] New maradns packages fix denial of service (23 Jun 2007)
- [SECURITY] [DSA 1318-1] New ekg packages fix denial of service (22 Jun 2007)
motokochan(at)simplemachines.org
- Re: Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue (25 Jun 2007)
NGSSoftware Insight Security Research
- Ingres wakeup setuid(ingres) file truncation (25 Jun 2007)
- Ingres stack overflow in uuid_from_char function (25 Jun 2007)
- Ingres Unauthenticated Pointer Overwrite 1 (25 Jun 2007)
- Ingres verifydb local stack overflow (25 Jun 2007)
- Ingres Unauthenticated Pointer Overwrite 2 (25 Jun 2007)
Nico Leidecker
- Papoo CMS 3.6 - Access Restriction Bypass (24 Jun 2007)
- Papoo CMS 3.6 - SQL Injection (24 Jun 2007)
no-spam(at)brierley.com
- Re: Re: PHPMyDesk Beta Release 1.0b ==> RFI (22 Jun 2007)
pito pito
- phpreactor <===1.2.7 remote file include (01 Jun 2007)
prodigy.zero(at)gmail.com
- Re: Light Blog 4.1 XSS Vulnerability (30 Jun 2007)
RaeD(at)BsdMail.Com
- SQL Injection In Script VBZooM V1.12 (29 Jun 2007)
Raphael Marichez
- [ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities (26 Jun 2007)
- [ GLSA 200706-09 ] libexif: Buffer overflow (26 Jun 2007)
research(at)symantec.com
- SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products (22 Jun 2007)
Richard Moore
- Safari XMLHttpRequest HTTP header injection (25 Jun 2007)
Robert Swiecki
- Re: Apple Safari: idn urlbar spoofing (27 Jun 2007)
- Re: Apple Safari: idn urlbar spoofing (25 Jun 2007)
rPath Update Announcements
- rPSA-2007-0136-1 httpd mod_ssl (27 Jun 2007)
- rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (27 Jun 2007)
- rPSA-2007-0133-1 emacs emacs-leim (25 Jun 2007)
- rPSA-2007-0131-1 libexif (25 Jun 2007)
scott-REMOTE-(at)vbulletin.com
- Re: Re: New Include Redirect Bug XSS All vBulletin v 3.x.x (22 Jun 2007)
scott-REMOVE-(at)vbulletin.com
- Re: Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x (22 Jun 2007)
Secunia Research
- Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability (28 Jun 2007)
- Secunia Research: Symantec Mail Security for SMTP Boundary Errors (28 Jun 2007)
security(at)mandriva.com
- [ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability (26 Jun 2007)
- [ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities (26 Jun 2007)
- [ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability (22 Jun 2007)
- [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue (21 Jun 2007)
- [ MDKSA-2007:133 ] - Updated emacs packages fix DoS vulnerability (21 Jun 2007)
- [ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities (21 Jun 2007)
security-alert(at)hp.com
- [security bulletin] HPSBTU02232 SSRT071429 rev.1 - Secure Web Server for HP Tru64 UNIX Powered by Apache (SWS) or HP Internet Express for Tru64 UNIX running PHP, Remote Arbitrary Code Execution, Unauthorized Disclosure of Information, or Denial of Service (DoS) (28 Jun 2007)
- HPSBTU02207 SSRT061239 rev.2 - HP Tru64 UNIX OpenSSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS) (27 Jun 2007)
- [security bulletin] HPSBUX02225 SSRT071295 rev.1 - HP-UX Running Xserver, Local Denial of Service (DoS) (25 Jun 2007)
- HPSBST02231 SSRT071438 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-030 to MS07-035 (21 Jun 2007)
- [security bulletin] HPSBGN02199 SSRT071312 rev.3 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Executio (21 Jun 2007)
securityresearch(at)netvigilance.com
- eTicket version 1.5.5 XSS Attack Vulnerability (27 Jun 2007)
- eTicket version 1.5.5 Path Disclosure Vulnerability (27 Jun 2007)
- Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities (25 Jun 2007)
- MyNews version 0.10 SQL Injection Vulnerability (25 Jun 2007)
- Calendarix version 0.7. 20070307 Multiple XSS Attacks (25 Jun 2007)
- Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities (25 Jun 2007)
- Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities (25 Jun 2007)
sf(at)hm2k.org
- Re: eTicket version 1.5.5 XSS Attack Vulnerability (29 Jun 2007)
spymeta(at)yahoo.com
- All Of the Mambo & Joomla Script Remote File Inclussion Bugs.. (22 Jun 2007)
Steve Kemp
- [SECURITY] [DSA 1324-1] New hiki packages fix missing input sanitising (28 Jun 2007)
- [SECURITY] [DSA 1317-1] New tinymux packages fix buffer overflow (22 Jun 2007)
Steven M. Christey
- Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x (21 Jun 2007)
support(at)keyfocus.net
- Re: KF Web Server 3.1.0 admin console XSS (26 Jun 2007)
suresync(at)gmail.com
- Re: Re: Progress Webspeed exploit for all releases (29 Jun 2007)
- Openedge _mprosrv buffer overflow (27 Jun 2007)
Tom Yu
- MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow (26 Jun 2007)
- MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities (26 Jun 2007)
Trustix Security Advisor
- TSLSA-2007-0021 - kerberos5 (29 Jun 2007)
underwater(at)itdefence.ru
- WheatBlog 1.1 RFI/SQL Injection (30 Jun 2007)
USprotte(at)web.de
- Juniper SBR V 6.0.1 CRL-Checking problem (27 Jun 2007)
Williams, James K
- [CAID 35450, 35451, 35452, 35453]: CA Products That Embed Ingres Multiple Vulnerabilities (22 Jun 2007)

Last message date: 29 Jun 2007
Archived on: 26 Sep 2008 EDT

110 messages sort by: [ thread ] [ date ] [ subject ] [ attachment ]
Other periods:[ Next, Author view ]

This archive was generated by hypermail 2.1.8 : 26 Sep 2008 EDT