Mailing List Archive For bugtraq@securityfocus.com Sep 2007 By Author

• 0in.email(at)gmail.com
  • Public Media Manager <= 1.3 Remote File Inclusion Vulnerability (Sat Sep 29 2007 - 02:08:03 EDT)
• 3APA3A
  • Re: [USN-515-1] t1lib vulnerability (Fri Sep 21 2007 - 08:30:31 EDT)
• Aaron Collins
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 17:21:05 EDT)
• Aditya K Sood
  • [Mlabs] Dissecting Internals of Windows XP Svchost : Reverse Engineering Stature (Thu Sep 20 2007 - 19:04:56 EDT)
  • Re: 0day: PDF pwns Windows (Thu Sep 20 2007 - 12:55:05 EDT)
  • [Mlabs] Scrutinising SIP Payloads : Traversing Attack Vectors in VOIP and IM (Thu Sep 20 2007 - 00:18:09 EDT)
  • [Paper] The Anatomy of Third Party Pop Up Attacks. (Sat Sep 01 2007 - 02:04:57 EDT)
• admin(at)gate9.org.uk
  • Re: Multiple vulnerabilities in Joomla 1.5 RC 1 (Tue Sep 04 2007 - 01:32:58 EDT)
• administrator(at)toms-seiten.at
  • Re: Re: Re: Toms Gstebuch 1.00 - XSS (Wed Sep 19 2007 - 13:27:13 EDT)
  • Re: Toms Gstebuch 1.00 - XSS (Fri Sep 07 2007 - 07:28:30 EDT)
• Adrian Griffis
  • Re: defining 0day (Tue Sep 25 2007 - 16:37:44 EDT)
• Adrian P
  • 2 vanilla XSS on Wordpress &#x2018;wp-register.php&#x2019; (Fri Sep 21 2007 - 19:17:25 EDT)
  • Re: Buffalo AirStation WHR-G54S CSRF vulnerability (Fri Sep 07 2007 - 11:27:56 EDT)
• Advisory(at)Aria-security.net
  • [Aria-Security Team] social-networkin SQL Injection (Sun Sep 09 2007 - 00:45:02 EDT)
• ak(at)red-database-security.com
  • Re: Oracle 11g Password algorithm revealed (Mon Sep 24 2007 - 11:35:27 EDT)
• alex.tracer(at)gmail.com
  • Re: LFI On SMF 1.1.3 (Mon Sep 24 2007 - 20:58:35 EDT)
• Andrew Weaver
  • Re: defining 0day (Tue Sep 25 2007 - 17:05:32 EDT)
• Aviram Jenik
  • Wireshark DNP3 Dissector Infinite Loop Vulnerability (Tue Sep 04 2007 - 09:55:36 EDT)
• avivra
  • RE: feedreader3 has XSS vulnerability (Sun Sep 30 2007 - 09:26:44 EDT)
  • RE: CORE-2007-0817: Remote Command execution, HTML and JavaScript injection vulnerabilities in AOL's Instant Messaging software (Tue Sep 25 2007 - 18:48:28 EDT)
  • RE: Next generation malware: Windows Vista's gadget API (Fri Sep 14 2007 - 20:09:28 EDT)
• azizov(at)itdefence.ru
  • WBR3404TX Broadband Router XSS (Wed Sep 19 2007 - 13:37:21 EDT)
  • Safari 3.0.3 (522.15.5) Buffer overflow (Fri Sep 07 2007 - 12:28:06 EDT)
• azurIt
  • Re: PHP <=5.2.4 open_basedir bypass & code exec & denial of service (Mon Sep 10 2007 - 12:22:02 EDT)
• B Potter
  • Announcing ShmooCon 08 and the CFP (Sun Sep 09 2007 - 22:37:00 EDT)
• b14ck1c3(at)hotmail.com
  • NuclearBB Alpha 2 Remote File Inclusion (Tue Sep 11 2007 - 03:12:00 EDT)
• babutski(at)gmail.com
  • Re: Multiple vulnerabilities in rFactor 1.250 (Thu Sep 27 2007 - 18:06:57 EDT)
• Ben Wheeler
  • Re: PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass (Wed Sep 12 2007 - 08:27:01 EDT)
• Blaine Elzey
  • Re: PHP-Nuke add admin ALL Versions (Sat Sep 22 2007 - 08:29:40 EDT)
• bobbyh(at)johnsonpace.com
  • Re: Service Pack 3 for Microsoft Sharepoint Services broken (Thu Sep 27 2007 - 15:30:32 EDT)
• Brian Loe
  • Re: defining 0day (Tue Sep 25 2007 - 16:54:55 EDT)
  • Re: defining 0day (Tue Sep 25 2007 - 16:15:28 EDT)
  • Re: defining 0day (Tue Sep 25 2007 - 15:51:30 EDT)
• Bugsman
  • Re: [waraxe-2007-SA#056] - Another Sql Injection in NukeSentinel 2.5.11 (Thu Sep 27 2007 - 14:01:10 EDT)
• bugtraq(at)cgisecurity.net
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 16:39:51 EDT)
• Casper.Dik(at)Sun.COM
  • Re: 0day: PDF pwns Windows (Fri Sep 21 2007 - 14:34:51 EDT)
• Chad Perrin
  • Re: defining 0day (Thu Sep 27 2007 - 14:34:44 EDT)
  • Re: defining 0day (Wed Sep 26 2007 - 19:10:32 EDT)
  • Re: 0day: PDF pwns Windows (Sun Sep 23 2007 - 19:52:35 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Thu Sep 20 2007 - 14:34:50 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Thu Sep 20 2007 - 14:10:28 EDT)
• Charles Miller
  • Re: defining 0day (Tue Sep 25 2007 - 16:40:52 EDT)
• Chris Clark
  • Ruby Net::HTTPS library does not validate server certificate CN (Thu Sep 27 2007 - 19:01:36 EDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Denial of Service Vulnerabilities in Content Switching Module (Wed Sep 05 2007 - 12:30:00 EDT)
  • Cisco Security Advisory: Cisco Video Surveillance IP Gateway and Services Platform Authentication Vulnerabilities (Wed Sep 05 2007 - 12:17:43 EDT)
• cod3in(at)gmail.com
  • Netjuke 1.0-rc2 - sql injection & XSS (Sat Sep 08 2007 - 11:45:11 EDT)
  • Toms Gstebuch 1.00 - XSS (Sat Sep 01 2007 - 08:27:29 EDT)
• Code Audit Labs
  • CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities (Wed Sep 12 2007 - 12:17:10 EDT)
• coderman
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 01:38:37 EDT)
• Colin Alston
  • Re: [irc-security] Multiple vulnerabilities in ircu (Fri Sep 21 2007 - 01:47:02 EDT)
• come2waraxe(at)yahoo.com
  • [waraxe-2007-SA#058] - Critical Sql Injection in NukeSentinel 2.5.12 (Thu Sep 27 2007 - 11:38:08 EDT)
  • [waraxe-2007-SA#057] - Unauthorized File Upload in SiteX CMS (Thu Sep 27 2007 - 11:24:30 EDT)
  • [waraxe-2007-SA#055] - Sql Injection in SiteX CMS 0.7.3 Beta (Thu Sep 27 2007 - 09:24:20 EDT)
  • [waraxe-2007-SA#056] - Another Sql Injection in NukeSentinel 2.5.11 (Thu Sep 27 2007 - 09:25:16 EDT)
  • [waraxe-2007-SA#054] - Local File Inclusion in Dance Music module for phpNuke (Tue Sep 25 2007 - 10:37:31 EDT)
  • [waraxe-2007-SA#053] - Critical Sql Injection in NukeSentinel 2.5.11 (Tue Sep 25 2007 - 09:28:25 EDT)
  • [waraxe-2007-SA#052] - dBlog CMS Open Source database retrieval (Wed Sep 19 2007 - 09:03:27 EDT)
• Core Security Technologies Advisories
  • CORE-2007-0817: Remote Command execution, HTML and JavaScript injection vulnerabilities in AOL's Instant Messaging software (Tue Sep 25 2007 - 12:20:55 EDT)
• crazy_king(at)eno7.org
  • New Shell For Linux & Windows (Tue Sep 25 2007 - 08:48:12 EDT)
  • CS Guestbook Admin Name & Md5 Security Vuln (Tue Sep 11 2007 - 20:52:24 EDT)
• Crispin Cowan
  • Re: 0day: PDF pwns Windows (Mon Sep 24 2007 - 17:59:21 EDT)
  • Re: 0day: PDF pwns Windows (Sun Sep 23 2007 - 01:34:07 EDT)
  • Re: 0day: PDF pwns Windows (Thu Sep 20 2007 - 19:16:06 EDT)
  • NDSS 2008 CfP Papers Due September 21 (Wed Sep 12 2007 - 21:16:55 EDT)
• dann frazier
  • [SECURITY] [DSA 1378-2] New Linux 2.6.18 packages fix several vulnerabilities (Fri Sep 28 2007 - 19:07:49 EDT)
  • [SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities (Thu Sep 27 2007 - 17:33:05 EDT)
  • [SECURITY] [DSA 1364-2] New vim packages fix several vulnerabilities (Wed Sep 19 2007 - 18:20:43 EDT)
• darkbunny91(at)gmail.com
  • Arbitrary Command Inclusion (Mon Sep 24 2007 - 14:12:36 EDT)
• David Gillett
  • RE: defining 0day (Tue Sep 25 2007 - 17:20:52 EDT)
• David Hulton
  • ToorCon Final Lineup Announcement (Thu Sep 20 2007 - 19:05:38 EDT)
• disclosure(at)contextis.co.uk
  • Sophos Anti-Virus 6.5.4 Vulnerability (Thu Sep 06 2007 - 08:48:05 EDT)
• DoZ(at)HackersCenter.com
  • eGov Content Manager Cross Site Scripting Vulrnability (Sat Sep 29 2007 - 18:18:05 EDT)
  • WebBatch Applications Cross Site Scripting Vulrnability (Wed Sep 19 2007 - 23:39:48 EDT)
  • Boinc Forum Cross Site Scripting Vulrnability (Wed Sep 12 2007 - 00:02:10 EDT)
• Ed Patterson
  • RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Tue Sep 18 2007 - 13:21:34 EDT)
• eEye Advisories
  • EEYE: Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops (Fri Sep 21 2007 - 15:57:10 EDT)
• ekoparty
  • ekoparty 3rd edition CFP (Mon Sep 10 2007 - 13:23:59 EDT)
• ernealizm(at)yahoo.com
  • New bypass shell for linux (Sun Sep 23 2007 - 09:51:24 EDT)
• Florian Weimer
  • [SECURITY] [DSA 1343-2] New file packages fix arbitrary code execution (Wed Sep 26 2007 - 17:15:39 EDT)
  • Re: CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities (Fri Sep 21 2007 - 14:47:42 EDT)
• Foresight Linux Essential Announcement Service
  • FLEA-2007-0056-1 openoffice.org (Wed Sep 19 2007 - 00:11:43 EDT)
  • FLEA-2007-0054-1 lighttpd (Mon Sep 17 2007 - 16:05:46 EDT)
  • FLEA-2007-0055-1 openssh openssh-client openssh-server gnome-ssh-askpass (Mon Sep 17 2007 - 16:06:13 EDT)
  • FLEA-2007-0052-1 gd (Thu Sep 06 2007 - 22:37:46 EDT)
  • FLEA-2007-0051-1 star (Thu Sep 06 2007 - 22:13:49 EDT)
  • FLEA-2007-0050-1 krb5 krb5-workstation (Thu Sep 06 2007 - 21:49:05 EDT)
  • FLEA-2007-0053-1 fetchmail (Fri Sep 07 2007 - 00:40:38 EDT)
• fryxar fryxar
  • Auditing clients program in Oracle (Mon Sep 24 2007 - 17:58:46 EDT)
• fuxxx0rz(at)gmail.com
  • XSS on Obedit v3.03 (Mon Sep 17 2007 - 23:07:37 EDT)
• Gadi Evron
  • Re: defining 0day (Tue Sep 25 2007 - 16:57:23 EDT)
  • Re: defining 0day (Tue Sep 25 2007 - 15:59:59 EDT)
  • defining 0day (Tue Sep 25 2007 - 15:02:27 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Thu Sep 20 2007 - 19:09:00 EDT)
  • Re: 0day: PDF pwns Windows (Thu Sep 20 2007 - 11:29:22 EDT)
• Gavin Hanover
  • Re: Joomla multiple vulerabilities (1.0.X >= ) (Wed Sep 26 2007 - 17:58:59 EDT)
  • Re: file upload vulnerability in joomla media component (Wed Sep 19 2007 - 13:24:52 EDT)
• Gerald (Jerry) Carter
  • [SECURITY] Winbind's rfc2307 & SFU nss_info plugin in Samba 3.0.25[a-c] assigns users a primary gid of 0 by default (Tue Sep 11 2007 - 07:54:31 EDT)
• Glenn.Everhart(at)chase.com
  • RE: 0day: PDF pwns Windows (Tue Sep 25 2007 - 08:53:26 EDT)
• gmdarkfig(at)gmail.com
  • Re: [waraxe-2007-SA#053] - Critical Sql Injection in NukeSentinel 2.5.11 (Fri Sep 28 2007 - 03:20:59 EDT)
• GOODFELLAS SRT
  • [GOODFELLAS-VULN] FileFind class from MFC Library cause heap overflow (Fri Sep 14 2007 - 12:16:42 EDT)
  • [GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow (Fri Sep 14 2007 - 12:17:08 EDT)
• Guy Mizrahi
  • feedreader3 has XSS vulnerability (Fri Sep 28 2007 - 09:02:28 EDT)
• Gynvael Coldwind
  • [HISPASEC] 2K7SEPT6 Magellan Explorer 3.32 build 2305 Remote FTP Client Directory Traversal (Thu Sep 06 2007 - 14:03:43 EDT)
  • [HISPASEC] 2K7SEPT6 X-Diesel Unreal Commander v0.92 (build 573) multiple FTP-based vulnerabilities (Thu Sep 06 2007 - 13:51:06 EDT)
  • [HISPASEC] 2K7SEPT6 Total Commander 7.01 Remote FTP Client Directory Traversal (Thu Sep 06 2007 - 13:01:22 EDT)
• h3llcode(at)hotmail.it
  • phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion (Sun Sep 30 2007 - 18:50:47 EDT)
  • sk.log v0.5.3 Remote File Inclusion (Mon Sep 24 2007 - 17:09:41 EDT)
  • Nuke Mobile Entartainment Local File Inclusion (Sun Sep 23 2007 - 17:41:11 EDT)
  • Re: Re: PHP-Nuke add admin ALL Versions (Fri Sep 21 2007 - 17:40:02 EDT)
  • Neuron News 1.0 Local file inclusion (index.php) (Fri Sep 21 2007 - 08:41:24 EDT)
  • PHP-Nuke add admin ALL Versions (Thu Sep 20 2007 - 12:46:41 EDT)
  • WebED-0.8999 Multiple Remote File Inclusion Vulnerability (Thu Sep 20 2007 - 12:38:27 EDT)
  • PhpBB Xs 2 profile.php Permanent Xss Vulnerability (Thu Sep 20 2007 - 12:35:14 EDT)
• hack2prison(at)yahoo.com
  • Affiliate Network Pro Multiple Input Validation and Local file inclusion (Sat Sep 29 2007 - 12:23:23 EDT)
• hd1979(at)gmail.com
  • Re: Re: Toms Gstebuch 1.00 - XSS (Sat Sep 08 2007 - 09:54:16 EDT)
• Henri Lindberg - Smilehouse Oy
  • Buffalo AirStation WHR-G54S CSRF vulnerability (Fri Sep 07 2007 - 07:23:00 EDT)
• Hernan Ochoa
  • WifiZoo v1.1 (Tue Sep 18 2007 - 12:01:59 EDT)
  • New version of Pass-The-Hash Toolkit v1.1 (Tue Sep 04 2007 - 13:30:02 EDT)
• iDefense Labs
  • iDefense Security Advisory 09.27.07: Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities (Thu Sep 27 2007 - 15:38:48 EDT)
  • iDefense Security Advisory 09.25.07: Linux Kernel ALSA snd_mem_proc_read Information Disclosure Vulnerability (Tue Sep 25 2007 - 11:43:23 EDT)
  • iDefense Security Advisory 09.20.07: CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow Vulnerabilities (Fri Sep 21 2007 - 19:06:14 EDT)
  • iDefense Security Advisory 09.20.07: CA ARCserve Backup for Laptops and Desktops Authentication Bypass Vulnerability (Fri Sep 21 2007 - 18:04:46 EDT)
  • iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Sign Extension Vulnerability (Fri Sep 21 2007 - 15:33:20 EDT)
  • iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Denial of Service Vulnerabilities (Fri Sep 21 2007 - 15:28:30 EDT)
  • iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Off-By-One Vulnerability (Fri Sep 21 2007 - 15:25:37 EDT)
  • iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities (Fri Sep 21 2007 - 15:20:15 EDT)
  • iDefense Security Advisory 09.17.07: Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities (Mon Sep 17 2007 - 16:38:27 EDT)
  • iDefense Security Advisory 09.11.07: Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability (Tue Sep 11 2007 - 15:30:43 EDT)
• Iggy E
  • Re: 0day: PDF pwns Windows (Tue Sep 25 2007 - 12:15:57 EDT)
• info(at)digitalarmaments.com
  • Digital Armaments 2007 September-October Hacking Challenge: Symbian (Tue Sep 04 2007 - 05:50:13 EDT)
• info(at)hack.lu
  • hack.lu 2007 18-20 October, Luxembourg (Fri Sep 07 2007 - 15:22:01 EDT)
• Integrigy Alerts
  • Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information (Wed Sep 12 2007 - 09:29:57 EDT)
• Ismail Dönmez
  • Re: [Full-disclosure] [USN-515-1] t1lib vulnerability (Fri Sep 21 2007 - 09:21:00 EDT)
• ISR-noreply
  • [ISR] - Barracuda Spam Firewall. Cross-Site Scripting (Fri Sep 21 2007 - 09:12:37 EDT)
• J. Oquendo
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Tue Sep 25 2007 - 09:39:29 EDT)
  • Re: 0day: PDF pwns Windows (Fri Sep 21 2007 - 15:24:08 EDT)
  • Re: [Mlabs] Dissecting Internals of Windows XP Svchost : Reverse Engineering Stature (Fri Sep 21 2007 - 13:32:21 EDT)
• j00ru.vx(at)gmail.com
  • A little advisory content correction. (Tue Sep 18 2007 - 16:05:05 EDT)
  • WinImage 8.10 vulnerabilities (Sat Sep 15 2007 - 14:22:54 EDT)
• Jan Münther
  • Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (Mon Sep 03 2007 - 10:43:23 EDT)
• Jason Kratzer
  • JSPWiki Multiple Vulnerabilities (Mon Sep 24 2007 - 20:42:40 EDT)
• Jeff Wells (jmwells)
  • RE: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 12:46:38 EDT)
• jf
  • Re: security notice: Backdooring Windows Media Files (Tue Sep 18 2007 - 19:45:07 EDT)
• jimbob1(at)atack.fr
  • Service Pack 3 for Microsoft Sharepoint Services broken (Mon Sep 24 2007 - 07:37:35 EDT)
• Joey Mengele
  • Re: New Zeroday published (Mon Sep 24 2007 - 12:46:54 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Thu Sep 20 2007 - 18:34:03 EDT)
• johanfunsale(at)yahoo.com
  • Re: Re: 0day: PDF pwns Windows (Sat Sep 22 2007 - 12:35:33 EDT)
• John Hammond
  • Re: Sony: The Return Of The Rootkit (Sat Sep 01 2007 - 12:16:22 EDT)
• Jonathan Yu
  • Re: PHP < 5.2.3 glob() denial of service (Wed Sep 05 2007 - 19:05:15 EDT)
• jose(at)eyeos.org
  • Re: eyeOS checksum prediction (Tue Sep 18 2007 - 23:59:40 EDT)
• joseph.giron13(at)gmail.com
  • ASP-CMS version 1 default password location. (Sat Sep 29 2007 - 22:29:21 EDT)
  • ASP Product catalog SQL injection vulnerability (Sat Sep 29 2007 - 22:25:14 EDT)
• Kees Cook
  • [USN-522-1] OpenSSL vulnerabilities (Fri Sep 28 2007 - 21:32:42 EDT)
  • [USN-521-1] libmodplug vulnerability (Thu Sep 27 2007 - 20:08:03 EDT)
  • [USN-520-1] fetchmail vulnerabilities (Tue Sep 25 2007 - 22:15:13 EDT)
  • [USN-519-1] elinks vulnerability (Tue Sep 25 2007 - 17:51:37 EDT)
  • [USN-517-1] kdm vulnerability (Mon Sep 24 2007 - 16:45:57 EDT)
  • Re: [USN-515-1] t1lib vulnerability (Fri Sep 21 2007 - 11:19:07 EDT)
  • [USN-516-1] xfsdump vulnerability (Thu Sep 20 2007 - 19:29:12 EDT)
  • [USN-515-1] t1lib vulnerability (Wed Sep 19 2007 - 16:18:02 EDT)
  • [USN-514-1] X.org vulnerability (Tue Sep 18 2007 - 21:03:23 EDT)
  • [USN-513-1] Qt vulnerability (Tue Sep 18 2007 - 16:10:24 EDT)
  • [USN-512-1] Quagga vulnerability (Sat Sep 15 2007 - 01:23:02 EDT)
  • [USN-511-2] Kerberos vulnerability (Fri Sep 07 2007 - 14:01:45 EDT)
  • [USN-511-1] Kerberos vulnerability (Tue Sep 04 2007 - 19:41:04 EDT)
• Kender.Security(at)gmail.com
  • WinSCP < 4.04 url protocol handler flaw (Thu Sep 13 2007 - 07:22:32 EDT)
• Kevin Finisterre (lists)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 17:21:04 EDT)
• L4teral
  • Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion (Mon Sep 17 2007 - 16:31:13 EDT)
• Lamont Granquist
  • Re: 0day: PDF pwns Windows (Mon Sep 24 2007 - 18:57:41 EDT)
  • Re: Re: 0day: PDF pwns Windows (Mon Sep 24 2007 - 14:11:33 EDT)
• laurent.gaffie(at)gmail.com
  • greensql firewall permanent xss (Fri Sep 21 2007 - 15:24:11 EDT)
  • Re Re: PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass (Wed Sep 12 2007 - 05:31:18 EDT)
  • PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass (Tue Sep 11 2007 - 00:38:47 EDT)
  • /* PHP <=5.2.4 open_basedir bypass & code exec & denial of service errata ... working on windows too .. */ (Sun Sep 09 2007 - 22:50:28 EDT)
  • PHP <=5.2.4 open_basedir bypass & code exec & denial of service (Sun Sep 09 2007 - 22:36:21 EDT)
  • PHP <= 5.2.4 multiple Iconv functions denial of service (Wed Sep 05 2007 - 20:05:56 EDT)
  • PHP <=5.2.4 iconv_substr() denial of service (Wed Sep 05 2007 - 13:05:02 EDT)
  • PHP < 5.2.3 fnmatch() denial of service (Tue Sep 04 2007 - 17:19:51 EDT)
  • PHP < 5.2.4 setlocale() denial of service (Tue Sep 04 2007 - 17:09:56 EDT)
  • PHP < 5.2.3 glob() denial of service (Tue Sep 04 2007 - 17:05:51 EDT)
• lcat
  • Re: Olate Download 3.4.2 ~ userupload.php ~ Upload Executable Files (Wed Sep 05 2007 - 10:34:15 EDT)
• Lopez Bran
  • 212cafeBoard Sql injection (Tue Sep 04 2007 - 09:34:12 EDT)
• luca.carettoni(at)ikkisoft.com
  • Re: SimplePHPBlog Hacking (Fri Sep 21 2007 - 16:53:10 EDT)
• luca.carettoni(at)securenetwork.it
  • Simple PHP Blog Multiple Vulnerabilities (Tue Sep 25 2007 - 08:51:20 EDT)
  • GCALDaemon Remote DoS (Tue Sep 18 2007 - 09:22:17 EDT)
  • Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass (Thu Sep 13 2007 - 19:04:15 EDT)
• Luigi Auriemma
  • Multiple vulnerabilities in the gMotor2 engine (Wed Sep 19 2007 - 15:13:48 EDT)
  • Format string and clients disconnection in Alien Arena 2007 6.10 (Wed Sep 05 2007 - 17:24:57 EDT)
• Major Malfunction
  • DEFCON London DC4420 meet - Monday 24th September (Fri Sep 21 2007 - 15:28:36 EDT)
• malibu.r(at)hotmail.com
  • b1gmail Cross Site Scripting (Mon Sep 17 2007 - 16:36:10 EDT)
• Mark Thomas
  • Re: Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability (Tue Sep 04 2007 - 20:30:31 EDT)
• Martin Schulze
  • [SECURITY] [DSA 1375-1] New OpenOffice.org packages fix arbitrary code execution (Mon Sep 17 2007 - 09:22:48 EDT)
• Marvin Simkin
  • RE: defining 0day (Thu Sep 27 2007 - 20:20:35 EDT)
• Matousec - Transparent security Research
  • Plague in (security) software drivers & BSDOhook utility (Tue Sep 18 2007 - 12:26:12 EDT)
• matteo(at)gray-world.net
  • New Whitepaper : g00gle CrewBots (Sat Sep 08 2007 - 04:07:44 EDT)
• Matthias Geerdsen
  • [ GLSA 200709-08 ] id3lib: Insecure temporary file creation (Sat Sep 15 2007 - 11:41:56 EDT)
  • [ GLSA 200709-07 ] Eggdrop: Buffer overflow (Sat Sep 15 2007 - 11:30:29 EDT)
  • [ GLSA 200709-01 ] MIT Kerberos 5: Multiple vulnerabilities (Tue Sep 11 2007 - 15:31:22 EDT)
• Mehrad1989(at)gmail.com
  • PHPBBPLUS 1.5.3 RFI BUG (Wed Sep 19 2007 - 15:07:48 EDT)
• Memisyazici, Aras
  • RE: security notice: Backdooring Windows Media Files (Tue Sep 18 2007 - 15:08:46 EDT)
  • RE: security notice: Backdooring Windows Media Files (Tue Sep 18 2007 - 14:56:34 EDT)
• Michael Bitow
  • RE: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 12:25:59 EDT)
• Michael Scheidell
  • Update? Question on BID 19000 (Sat Sep 15 2007 - 09:21:49 EDT)
• mkanat(at)bugzilla.org
  • Security Advisory for Bugzilla 3.0.1 and 3.1.1 (Wed Sep 19 2007 - 18:15:29 EDT)
• Moritz Jodeit
  • OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (Thu Sep 27 2007 - 12:21:40 EDT)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1365-2] New id3lib3.8.3 packages fix denial of service (Sun Sep 09 2007 - 17:28:34 EDT)
  • [SECURITY] [DSA 1369-1] New gforge packages fix SQL injection (Thu Sep 06 2007 - 17:26:20 EDT)
  • [SECURITY] [DSA 1367-2] New krb5 packages fix arbitrary code execution (Thu Sep 06 2007 - 17:25:28 EDT)
  • [SECURITY] [DSA 1368-1] New librpcsecgss packages fix arbitrary code execution (Tue Sep 04 2007 - 14:34:21 EDT)
  • [SECURITY] [DSA 1367-1] New krb5 packages fix arbitrary code execution (Tue Sep 04 2007 - 14:30:50 EDT)
  • [SECURITY] [DSA 1288-2] New pptpd packages fix regression (Sun Sep 02 2007 - 17:01:08 EDT)
  • [SECURITY] [DSA 1364-1] New vim packages fix several vulnerabilities (Sat Sep 01 2007 - 07:30:35 EDT)
  • [SECURITY] [DSA 1366-1] New clamav packages fix several vulnerabilities (Sat Sep 01 2007 - 07:53:51 EDT)
  • [SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service (Sat Sep 01 2007 - 07:48:26 EDT)
• mozilla(at)ids-guide.de
  • ERNW Tool Release: CVSS Calculator (Fri Sep 21 2007 - 06:53:50 EDT)
• n0de(at)kich0t.com
  • Re: PHP-Nuke add admin ALL Versions (Fri Sep 21 2007 - 14:54:37 EDT)
• Nick Merritt
  • RE: ScanAlert Security Advisory (Tue Sep 11 2007 - 19:45:07 EDT)
• nnc(at)chilloutzone.eu
  • TxxCMS_Multiple File inclusion Vulnerabilies (Sat Sep 08 2007 - 11:39:52 EDT)
• none(at)none.com
  • Re: Possible Windows Explorer bad PNG file preview integer overflow handling (Thu Sep 27 2007 - 11:09:33 EDT)
  • Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling (Thu Sep 27 2007 - 11:47:56 EDT)
  • Re: New bypass shell for linux (Mon Sep 24 2007 - 14:19:38 EDT)
• nospam(at)fusedcoding.com
  • Re: MkPortal "All Guests are Admin" Exploit (Sun Sep 02 2007 - 13:14:51 EDT)
• Oliver Goebel
  • IMF 2007 - 2nd Call for Participation (Sat Sep 08 2007 - 07:22:02 EDT)
• Omid
  • Multiple vulnerabilities in Joomla 1.5 RC 1 (Mon Sep 03 2007 - 13:23:42 EDT)
• OS2A BTO
  • RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability (Tue Sep 11 2007 - 05:31:41 EDT)
• packet(at)packetstormsecurity.org
  • Re: Joomla multiple vulerabilities (1.0.X >= ) (Wed Sep 26 2007 - 22:50:47 EDT)
• pagvac
  • Google Urchin password theft madness (Mon Sep 24 2007 - 14:20:17 EDT)
• Panda Security Response
  • RE: Re[2]: [Full-disclosure] Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) (Mon Sep 24 2007 - 03:48:19 EDT)
  • RE: Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) (Wed Sep 19 2007 - 16:58:42 EDT)
• Paul Böhm
  • DeepSec IDSC 2007 Vienna Registration Now Open (Mon Sep 03 2007 - 05:23:09 EDT)
• pdp (architect)
  • Re: 0day: PDF pwns Windows (Fri Sep 21 2007 - 03:37:32 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 03:35:54 EDT)
  • Re: 0day: PDF pwns Windows (Thu Sep 20 2007 - 12:28:35 EDT)
  • 0day: PDF pwns Windows (Thu Sep 20 2007 - 09:21:33 EDT)
  • Re: security notice: Backdooring Windows Media Files (Tue Sep 18 2007 - 15:00:29 EDT)
  • security notice: Backdooring Windows Media Files (Tue Sep 18 2007 - 11:57:43 EDT)
  • IE (Internet Explorer) pwns SecondLife (Sun Sep 16 2007 - 06:52:22 EDT)
  • 0DAY: QuickTime pwns Firefox (Wed Sep 12 2007 - 08:13:00 EDT)
• pete(at)petefinnigan.com
  • Re: Re: Oracle 11g Password algorithm revealed (Mon Sep 24 2007 - 12:16:24 EDT)
  • Oracle 11g Password algorithm revealed (Sat Sep 22 2007 - 15:45:03 EDT)
• Peter Gutmann
  • RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Tue Sep 18 2007 - 09:29:55 EDT)
  • Re: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Mon Sep 17 2007 - 02:47:38 EDT)
  • RE: Next generation malware: Windows Vista's gadget API (Sat Sep 15 2007 - 08:55:24 EDT)
• Pierre-Yves Rofes
  • [ GLSA 200709-16 ] Lighttpd: Buffer overflow (Thu Sep 27 2007 - 17:01:46 EDT)
  • [ GLSA 200709-14 ] ClamAV: Multiple vulnerabilities (Thu Sep 20 2007 - 17:51:35 EDT)
• Praburaajan
  • HITBSecConf2007 - Malaysia Materials & Photos are up ! (Sat Sep 22 2007 - 06:46:36 EDT)
• Raphael Marichez
  • [ GLSA 200709-18 ] Bugzilla: Multiple vulnerabilities (Sun Sep 30 2007 - 16:23:17 EDT)
  • [ GLSA 200709-17 ] teTeX: Multiple buffer overflows (Thu Sep 27 2007 - 17:50:34 EDT)
  • [ GLSA 200709-15 ] BEA JRockit: Multiple vulnerabilities (Sun Sep 23 2007 - 18:03:37 EDT)
  • [ GLSA 200709-13 ] rsync: Two buffer overflows (Thu Sep 20 2007 - 16:17:40 EDT)
  • [ GLSA 200709-12 ] Poppler: Two buffer overflow vulnerabilities (Wed Sep 19 2007 - 17:48:19 EDT)
  • [ GLSA 200709-10 ] PhpWiki: Authentication bypass (Tue Sep 18 2007 - 17:23:44 EDT)
  • [ GLSA 200709-11 ] GDM: Local Denial of Service (Tue Sep 18 2007 - 17:33:55 EDT)
  • [ GLSA 200709-09 ] GNU Tar: Directory traversal vulnerability (Sat Sep 15 2007 - 18:21:35 EDT)
  • [ GLSA 200709-06 ] flac123: Buffer overflow (Fri Sep 14 2007 - 17:44:48 EDT)
  • [ GLSA 200709-05 ] RealPlayer: Buffer overflow (Fri Sep 14 2007 - 17:17:37 EDT)
  • [ GLSA 200709-03 ] Streamripper: Buffer overflow (Thu Sep 13 2007 - 15:06:01 EDT)
  • [ GLSA 200709-04 ] po4a: Insecure temporary file creation (Thu Sep 13 2007 - 16:18:36 EDT)
  • [ GLSA 200709-02 ] KVIrc: Remote arbitrary code execution (Thu Sep 13 2007 - 14:56:35 EDT)
• RedTeam Pentesting GmbH
  • Alcatel-Lucent OmniPCX Remote Command Execution (Mon Sep 17 2007 - 05:00:13 EDT)
• research(at)procheckup.com
  • Owning Big Brother: How to Crack into Axis IP cameras (Fri Sep 28 2007 - 07:21:53 EDT)
• research(at)symantec.com
  • SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure (Mon Sep 17 2007 - 12:34:16 EDT)
  • SYMSA-2007-008: Autodesk Backburner 3.0.2 System Backdoor (Mon Sep 10 2007 - 21:29:47 EDT)
• retrog(at)alice.it
  • Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc (Fri Sep 07 2007 - 14:08:45 EDT)
  • Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll (v.1) remote arbitrary registry key manipulation (Mon Sep 03 2007 - 09:10:30 EDT)
• rmk115(at)mailandnews.com
  • Re: Re: 0day: PDF pwns Windows (Fri Sep 21 2007 - 14:59:42 EDT)
• Rob Thompson
  • Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling (Thu Sep 27 2007 - 13:53:36 EDT)
• Robert Swiecki
  • Re: COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability (Wed Sep 26 2007 - 09:44:57 EDT)
• rocheml(at)httrack.com
  • Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling (Thu Sep 27 2007 - 12:38:18 EDT)
  • Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling (Thu Sep 27 2007 - 03:59:00 EDT)
  • Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling (Wed Sep 26 2007 - 08:27:58 EDT)
  • Possible Windows Explorer bad PNG file preview integer overflow handling (Tue Sep 25 2007 - 05:32:37 EDT)
• Roger A. Grimes
  • RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Mon Sep 17 2007 - 08:26:36 EDT)
  • RE: Next generation malware: Windows Vista's gadget API (Fri Sep 14 2007 - 15:56:19 EDT)
• Rohit Srivastwa
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 03:00:10 EDT)
• Roland Kuhn
  • Re: 0day: PDF pwns Windows (Tue Sep 25 2007 - 13:57:59 EDT)
• Ronald Chmara
  • Re: PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass (Wed Sep 12 2007 - 01:59:36 EDT)
• root(at)hanicker.it
  • new XSS vulnerability in php-stats -tracking.php (Fri Sep 14 2007 - 07:07:57 EDT)
• rPath Update Announcements
  • rPSA-2007-0202-1 kernel (Thu Sep 27 2007 - 18:11:19 EDT)
  • rPSA-2007-0199-1 openssl openssl-scripts (Tue Sep 25 2007 - 11:22:25 EDT)
  • rPSA-2007-0198-1 kernel (Mon Sep 24 2007 - 16:27:56 EDT)
  • rPSA-2007-0194-1 kdebase (Thu Sep 20 2007 - 17:02:43 EDT)
  • rPSA-2007-0193-1 gdm (Wed Sep 19 2007 - 16:33:14 EDT)
  • rPSA-2007-0189-1 openoffice.org (Tue Sep 18 2007 - 19:45:11 EDT)
  • rPSA-2007-0190-1 kdebase (Tue Sep 18 2007 - 19:45:46 EDT)
  • rPSA-2007-0188-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (Mon Sep 17 2007 - 15:55:54 EDT)
  • rPSA-2007-0187-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Fri Sep 14 2007 - 19:49:22 EDT)
  • rPSA-2007-0184-1 samba samba-swat (Fri Sep 14 2007 - 15:42:42 EDT)
  • rPSA-2007-0182-1 httpd mod_ssl (Fri Sep 14 2007 - 12:08:43 EDT)
  • rPSA-2007-0181-1 gnome-ssh-askpass openssh openssh-client openssh-server (Mon Sep 10 2007 - 22:06:05 EDT)
  • rPSA-2007-0179-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Thu Sep 06 2007 - 14:31:25 EDT)
  • rPSA-2007-0177-1 kdebase kdelibs (Wed Sep 05 2007 - 16:50:15 EDT)
  • rPSA-2007-0178-1 fetchmail (Wed Sep 05 2007 - 16:51:22 EDT)
  • rPSA-2007-0176-1 gd php php-mysql php-pgsql php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (Wed Sep 05 2007 - 12:09:11 EDT)
• S. Vandersee
  • Marshal MailMarshal TAR Unpacking Vulnerability (Tue Sep 04 2007 - 07:42:35 EDT)
• s0cratex(at)hotmail.com
  • Gelato SQL Injection exploit (Fri Sep 14 2007 - 14:31:16 EDT)
• S21sec Labs
  • S21SEC-036-EN Ekiga <= 2.0.5 Denial of service (Wed Sep 12 2007 - 05:37:01 EDT)
• scoutt_42(at)yahoo.com
  • Re: Built2Go_PHP_Link_Portal_v1.79 >> RFI (Mon Sep 03 2007 - 16:13:42 EDT)
• secure(at)symantec.com
  • Symantec Product Security: Symantec Device Driver Local Elevation of Privilege (Mon Sep 10 2007 - 11:12:28 EDT)
• security(at)mandriva.com
  • [ MDKSA-2007:190 ] - Updated kdebase packages fix KDM vulnerability (Thu Sep 27 2007 - 20:26:59 EDT)
  • [ MDKSA-2007:189 ] - Updated t1lib packages fix vulnerability (Thu Sep 27 2007 - 17:22:39 EDT)
  • [ MDKSA-2007:188 ] - Updated postgresql packages prevent access abuse using dblink (Tue Sep 25 2007 - 13:53:25 EDT)
  • [ MDKSA-2007:187 ] - Updated PHP packages fix numerous vulnerabilities (Fri Sep 21 2007 - 19:17:14 EDT)
  • [ MDKSA-2007:186 ] - Updated openoffice.org packages fix TIFF parser vulnerability (Thu Sep 20 2007 - 16:11:51 EDT)
  • [ MDKSA-2007:185 ] - Updated avahi packages fix vulnerability (Mon Sep 17 2007 - 18:30:49 EDT)
  • [ MDKSA-2007:184 ] - Updated cacti packages fix vulnerability (Mon Sep 17 2007 - 18:19:21 EDT)
  • [ MDKSA-2007:183 ] - Updated qt3/qt4 packages fix vulnerability (Fri Sep 14 2007 - 02:04:21 EDT)
  • [ MDKSA-2007:182 ] - Updated quagga packages fix vulnerability and bugs (Thu Sep 13 2007 - 15:43:01 EDT)
  • [ MDKSA-2007:180 ] - Updated id3lib packages fix vulnerability (Wed Sep 12 2007 - 19:33:19 EDT)
  • [ MDKSA-2007:181 ] - Updated librpcsecgss packages fix vulnerabilities (Wed Sep 12 2007 - 19:43:51 EDT)
  • [ MDKSA-2007:179 ] - Updated fetchmail packages fix DoS vulnerability (Tue Sep 11 2007 - 21:36:22 EDT)
  • [ MDKSA-2007:178 ] - Updated x11-server packages fix vulnerability (Tue Sep 11 2007 - 21:29:13 EDT)
  • [ MDKSA-2007:174-1 ] - Updated krb5 packages fix vulnerabilities (Fri Sep 07 2007 - 16:08:08 EDT)
  • [ MDKSA-2007:177 ] - Updated MySQL packages fix vulnerabilities (Thu Sep 06 2007 - 20:40:36 EDT)
  • [ MDKSA-2007:176 ] - Updated kdebase and kdelibs packages fix location bar spoofing issues (Thu Sep 06 2007 - 17:48:12 EDT)
  • [ MDKSA-2007:174 ] - Updated krb5 packages fix vulnerabilities (Thu Sep 06 2007 - 16:03:58 EDT)
  • [ MDKSA-2007:175 ] - Updated eggdrop package fix remote buffer overflow (Thu Sep 06 2007 - 16:24:12 EDT)
  • [ MDKSA-2007:173 ] - Updated tar packages fix vulnerabilities (Tue Sep 04 2007 - 22:12:44 EDT)
• security(at)soqor.net
  • Joomla multiple vulerabilities (1.0.X >= ) (Wed Sep 26 2007 - 15:09:17 EDT)
• security-alert(at)hp.com
  • [security bulletin] HPSBOV02261 SSRT071449 rev.1 - HP OpenVMS running BIND, Remote DNS Cache Poisoning (Mon Sep 24 2007 - 09:08:16 EDT)
  • [security bulletin] HPSBUX02249 SSRT071442 rev.2 - HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unqualified Configuration Change (Thu Sep 20 2007 - 10:31:45 EDT)
  • [security bulletin] HPSBUX02251 SSRT071449 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning (Thu Sep 20 2007 - 09:35:26 EDT)
  • [security bulletin] HPSBUX02259 SSRT071439 rev.1 - HP-UX Running logins(1M), Remote Unauthorized Access (Wed Sep 19 2007 - 11:12:32 EDT)
  • [security bulletin] HPSBST02260 SSRT071471 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-051 to MS07-054 (Wed Sep 19 2007 - 11:11:43 EDT)
  • [security bulletin] HPSBUX02153 SSRT061181 rev.6 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) (Tue Sep 18 2007 - 09:50:02 EDT)
  • [security bulletin] HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage (SMH) for Windows, Incomplete Update Installation (Fri Sep 14 2007 - 09:08:46 EDT)
  • [security bulletin] HPSBUX02153 SSRT061181 rev.5 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) (Tue Sep 04 2007 - 10:19:14 EDT)
  • [security bulletin] HPSBUX02156 SSRT061236 rev.3 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) (Tue Sep 04 2007 - 10:20:26 EDT)
• securityresearch(at)netvigilance.com
  • SimpNews version 2.41.03 File Content Disclosure Vulnerability (Tue Sep 25 2007 - 12:21:39 EDT)
  • SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities (Tue Sep 25 2007 - 12:18:36 EDT)
  • SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities (Tue Sep 25 2007 - 12:14:50 EDT)
  • SimpGB version 1.46.02 File Content Disclosure Vulnerability (Tue Sep 25 2007 - 12:18:12 EDT)
  • SimpGB version 1.46.02 Multiple XSS Attack Vulnerabilities (Tue Sep 25 2007 - 12:14:31 EDT)
  • SimpGB version 1.46.02 Multiple Path Disclosure Vulnerabilities (Tue Sep 25 2007 - 12:20:52 EDT)
  • SimpGB version 1.46.02 Information Disclosure Vulnerability (Tue Sep 25 2007 - 12:21:17 EDT)
• Sergio Alvarez
  • Re: n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (Mon Sep 03 2007 - 07:39:40 EDT)
• Seth Fogie
  • Axis 207W Wireless Camera Web Interface - Multiple Vulnerabilities (Sat Sep 15 2007 - 10:13:14 EDT)
• shell(at)dotshell.net
  • AIM Local File Display in Notification Window (Fri Sep 14 2007 - 11:51:33 EDT)
  • AIM Arbitrary HTML Display in Notification Window (Tue Sep 11 2007 - 21:16:38 EDT)
• Stelios Tigkas
  • RSA EnVision Reflected XSS Hole (Wed Sep 12 2007 - 05:21:55 EDT)
• Steve Kemp
  • [SECURITY] [DSA 1377-2] New fetchmail packages fix denial of service (Fri Sep 21 2007 - 12:43:46 EDT)
  • [SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service (Fri Sep 21 2007 - 07:28:16 EDT)
  • [SECURITY] [DSA 1376-1] New kdebase packages fix authentication bypass (Fri Sep 21 2007 - 07:27:29 EDT)
  • [SECURITY] [DSA 1374-1] New jffnms packages fix several vulnerabilities (Tue Sep 11 2007 - 14:57:54 EDT)
  • [SECURITY] [DSA 1372-1] New ktorrent packages fix directory traversal (Tue Sep 11 2007 - 14:36:11 EDT)
• Steve Shockley
  • Re: 0day: PDF pwns Windows (Tue Sep 25 2007 - 17:03:09 EDT)
• Steven Adair
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 10:24:40 EDT)
• Strykar
  • RE: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Mon Sep 17 2007 - 13:34:28 EDT)
• superfreak(at)freestart.hu
  • Re: Multiple vulnerabilities in rFactor 1.250 (Tue Sep 25 2007 - 11:38:22 EDT)
• Sven Vetsch / Disenchant
  • XSIO - Cross Site Image Overlaying (Mon Sep 10 2007 - 15:30:07 EDT)
• the.tiger100(at)gmail.com
  • Re: ePersonnel_RC_2004 Remote File Bug (Sat Sep 01 2007 - 14:23:20 EDT)
• Thierry Zoller
  • n.runs AG puts §202 law to the test - Tools back online (Tue Sep 25 2007 - 10:48:31 EDT)
  • Re: Oracle 11g Password algorithm revealed (Mon Sep 24 2007 - 11:18:26 EDT)
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 15:53:11 EDT)
  • Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Sun Sep 16 2007 - 08:34:32 EDT)
  • Re: [Sec] Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory (Mon Sep 03 2007 - 13:09:16 EDT)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1371-1] New phpwiki packages fix several vulnerabilities (Tue Sep 11 2007 - 14:46:30 EDT)
  • [SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities (Mon Sep 10 2007 - 19:38:37 EDT)
  • [SECURITY] [DSA 1370-1] New phpmyadmin packages fix several vulnerabilities (Sun Sep 09 2007 - 17:42:15 EDT)
• Thor (Hammer of God)
  • RE: 0day: PDF pwns Windows (Tue Sep 25 2007 - 14:39:24 EDT)
• Tim Brown
  • Re: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Sun Sep 16 2007 - 11:09:26 EDT)
  • Re: [Full-disclosure] Next generation malware: Windows Vista's gadget API (Mon Sep 17 2007 - 08:43:35 EDT)
  • Re: Next generation malware: Windows Vista's gadget API (Sat Sep 15 2007 - 21:30:41 EDT)
  • Next generation malware: Windows Vista's gadget API (Thu Sep 13 2007 - 05:16:37 EDT)
  • Tutorial on Fuzzled (Tue Sep 04 2007 - 14:36:27 EDT)
• tkevans(at)tkevans.com
  • Re: Security Advisory for Bugzilla 3.0.1 and 3.1.1 (Thu Sep 20 2007 - 11:52:24 EDT)
• Tod Beardsley
  • Re: XSIO - Cross Site Image Overlaying (Mon Sep 10 2007 - 17:01:27 EDT)
• Todd Manning
  • Re: Next generation malware: Windows Vista's gadget API (Thu Sep 13 2007 - 13:46:35 EDT)
• Tom Laermans
  • Re: [irc-security] Multiple vulnerabilities in ircu (Fri Sep 21 2007 - 03:51:23 EDT)
• Tom Yu
  • updated patch: MITKRB5-SA-2007-006: kadmind RPC lib buffer overflow, uninitialized pointer (Wed Sep 05 2007 - 16:47:11 EDT)
  • MITKRB5-SA-2007-006: kadmind RPC lib buffer overflow, uninitialized pointer (Tue Sep 04 2007 - 14:16:53 EDT)
• Tony Rall
  • Re: 0trace - traceroute on established connections (Fri Sep 28 2007 - 14:19:20 EDT)
• Tor Houghton
  • Promise NAS NS4300N GUI bug (Thu Sep 27 2007 - 17:19:27 EDT)
• Trustix Security Advisor
  • TSLSA-2007-0028 - multi (Fri Sep 21 2007 - 10:08:01 EDT)
  • TSLSA-2007-0026 - multi (Mon Sep 17 2007 - 10:44:47 EDT)
• TSRT(at)3com.com
  • TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability (Tue Sep 18 2007 - 14:33:29 EDT)
• tusharvartak(at)hotmail.com
  • Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability (Mon Sep 03 2007 - 23:00:44 EDT)
• Tyler Reguly
  • Re: Sony: The Return Of The Rootkit (Sat Sep 01 2007 - 12:01:29 EDT)
• tyter9(at)gmail.com
  • Re: 0trace - traceroute on established connections (Fri Sep 28 2007 - 07:43:59 EDT)
• Uninformed Staff
  • Uninformed Journal Release Announcement: Volume 8 (Tue Sep 18 2007 - 15:54:17 EDT)
• vinodsharma.mmit(at)gmail.com
  • file upload vulnerability in joomla media component (Wed Sep 19 2007 - 06:10:34 EDT)
• Vladimir Vitkov
  • Re: New Shell For Linux & Windows (Wed Sep 26 2007 - 04:04:04 EDT)
• VMware Security team
  • VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player (Wed Sep 19 2007 - 22:15:23 EDT)
• vnn95(at)yahoo.com
  • List all the comment + entry belong to the Yahoo 360 public blog and more... (Thu Sep 20 2007 - 23:55:15 EDT)
• VR-Subscription-noreply(at)assurent.com
  • Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow (Tue Sep 11 2007 - 13:38:33 EDT)
• VulnerabilityResearch(at)DigitalDefense.net
  • DDIVRT-2007-04 NetSupport Manager Authentication Bypass (Fri Sep 21 2007 - 09:31:04 EDT)
• Wayne D. Hoxsie Jr.
  • Re: [Full-disclosure] 0day: PDF pwns Windows (Fri Sep 21 2007 - 14:37:57 EDT)
• webmaster666(at)email.it
  • SimplePHPBlog Hacking (Thu Sep 20 2007 - 10:31:31 EDT)
• Williams, James K
  • [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities (Wed Sep 26 2007 - 22:37:58 EDT)
  • [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities (Fri Sep 21 2007 - 14:46:22 EDT)
• Wojciech Purczynski
  • COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability (Mon Sep 24 2007 - 05:17:48 EDT)
• x0kster(at)gmail.com
  • xcms all version arbitrary code execution (Sat Sep 22 2007 - 06:17:36 EDT)
  • Vigile CMS v1.8 Multiple Remote XSS Vulnerability (Thu Sep 20 2007 - 14:18:48 EDT)
• yeikos(at)gmail.com
  • Media Player Classic Denial of Service (Sun Sep 16 2007 - 09:59:22 EDT)
• yollubunlar(at)yollubunlar.org
  • Husrev Forums v2.0.1:PoWerBoard Sql (Sat Sep 08 2007 - 22:08:27 EDT)
  • Proxy Anket v3.0.1 Sql injection Vulnerable (Sat Sep 08 2007 - 21:58:48 EDT)
  • phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities (Sat Sep 08 2007 - 21:26:56 EDT)
• zdi-disclosures(at)3com.com
  • ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability (Mon Sep 24 2007 - 18:17:55 EDT)
  • ZDI-07-053: Microsoft ISA Server SOCKS4 Proxy Connection Leakage (Fri Sep 21 2007 - 12:43:12 EDT)
  • ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability (Wed Sep 12 2007 - 17:25:51 EDT)
  • ZDI-07-051: Trend Micro ServerProtect TMregChange() Stack Overflow Vulnerability (Fri Sep 07 2007 - 19:57:34 EDT)
  • ZDI-07-050: Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability (Fri Sep 07 2007 - 19:55:59 EDT)
• Zow
  • Re: defining 0day (Wed Sep 26 2007 - 19:25:30 EDT)

  This archive was generated by hypermail 2.1.8 : Sun Oct 28 2007 - 06:19:42 EDT