Mailing List Archive For bugtraq@securityfocus.com Oct 2007 By Date

• Wed Oct 31 2007 - 19:18:00 EDT
  • ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 19:14:50 EDT
  • ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 17:28:36 EDT
  • Re: Comments re ISC's announcement on bind9 security Network Protocol Security 
• Wed Oct 31 2007 - 19:14:42 EDT
  • ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 19:21:00 EDT
  • mac trojan in-the-wild Gadi Evron 
• Wed Oct 31 2007 - 19:14:31 EDT
  • ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 19:14:03 EDT
  • ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 19:13:45 EDT
  • ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 19:13:34 EDT
  • ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 31 2007 - 16:49:09 EDT
  • rPSA-2007-0227-1 cups rPath Update Announcements 
• Wed Oct 31 2007 - 16:51:39 EDT
  • (tool announcement) bunny the fuzzer Michal Zalewski 
• Wed Oct 31 2007 - 14:49:00 EDT
  • [security bulletin] HPSBMA02238 SSRT061260 rev.2 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution security-alert(at)hp.com 
• Wed Oct 31 2007 - 14:48:18 EDT
  • [security bulletin] HPSBMA02237 SSRT061260 rev.2 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Code Execution security-alert(at)hp.com 
• Wed Oct 31 2007 - 14:47:20 EDT
  • [security bulletin] HPSBMA02236 SSRT061260 rev.2 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution security-alert(at)hp.com 
• Wed Oct 31 2007 - 14:39:39 EDT
  • iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability iDefense Labs 
• Wed Oct 31 2007 - 14:19:42 EDT
  • iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability iDefense Labs 
• Wed Oct 31 2007 - 09:44:35 EDT
  • Re: Comments re ISC's announcement on bind9 security Shane Kerr 
• Tue Oct 30 2007 - 19:53:00 EDT
  • Re: [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code Steffan Baron 
• Wed Oct 31 2007 - 08:11:37 EDT
  • SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability Bernhard Mueller 
• Wed Oct 31 2007 - 05:00:43 EDT
  • Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow Secunia Research 
• Wed Oct 31 2007 - 05:40:12 EDT
  • Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability Secunia Research 
• Tue Oct 30 2007 - 17:10:58 EDT
  • In Memoriam: Jun-ichiro Hagino Dragos Ruiu 
• Tue Oct 30 2007 - 18:21:28 EDT
  • [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code Pierre-Yves Rofes 
• Tue Oct 30 2007 - 17:14:33 EDT
  • ILIAS <= 3.8.3 Cross Site Scripting L4teral 
• Tue Oct 30 2007 - 16:53:37 EDT
  • [ GLSA 200710-31 ] Opera: Multiple vulnerabilities Raphael Marichez 
• Tue Oct 30 2007 - 16:24:16 EDT
  • Re: Firefox / IE6 crash on javascript nested loops Jan Heisterkamp 
• Tue Oct 30 2007 - 14:38:23 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX bellmail Stack Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:35:40 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:29:39 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX lquerypv Stack Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:15:09 EDT
  • Firefox / IE6 crash on javascript nested loops thabob 
• Tue Oct 30 2007 - 14:14:25 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:25:28 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX lqueryvg Stack Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:21:03 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 14:06:12 EDT
  • iDefense Security Advisory 10.30.07: IBM AIX swcons Local Arbitrary File Access Vulnerability iDefense Labs 
• Tue Oct 30 2007 - 12:01:37 EDT
  • DeepSec 2007 Registration: hurry up, seats are filling fast Stefano Zanero 
• Mon Oct 29 2007 - 20:40:48 EDT
  • Airkiosk/formlib application is XSS vuln skienlab(at)gmail.com 
• Mon Oct 29 2007 - 19:29:36 EDT
  • Django 0.96 (stable) Admin Panel CSRF J. Carlos Nieto 
• Mon Oct 29 2007 - 19:55:28 EDT
  • Re: Holes in the firewall of Mac OS X Leopard Juergen Schmidt 
• Tue Oct 30 2007 - 08:08:05 EDT
  • Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow Secunia Research 
• Mon Oct 29 2007 - 20:14:39 EDT
  • Siebel Security Basics Jonathan Katz 
• Tue Oct 30 2007 - 05:24:03 EDT
  • RFIDIOt release - version 0.1q Adam Laurie 
• Mon Oct 29 2007 - 18:02:44 EDT
  • Re: Holes in the firewall of Mac OS X Leopard Brandon S. Allbery KF8NH 
• Mon Oct 29 2007 - 17:49:18 EDT
  • Holes in the firewall of Mac OS X Leopard Juergen Schmidt 
• Mon Oct 29 2007 - 17:04:53 EDT
  • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak 
• Mon Oct 29 2007 - 17:21:03 EDT
  • Memory overwrites in JVM via malformed TrueType font NGSSoftware Insight Security Research 
• Mon Oct 29 2007 - 17:05:02 EDT
  • Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096) Stefan Kanthak 
• Mon Oct 29 2007 - 17:20:22 EDT
  • Untrusted Java applet can connect to localhost NGSSoftware Insight Security Research 
• Mon Oct 29 2007 - 16:03:14 EDT
  • Heap overflow in RealPlayer ID3 tag parser NGSSoftware Insight Security Research 
• Mon Oct 29 2007 - 15:43:10 EDT
  • Comments re ISC's announcement on bind9 security Network Protocol Security 
• Mon Oct 29 2007 - 14:22:46 EDT
  • rPSA-2007-0225-2 firefox thunderbird rPath Update Announcements 
• Mon Oct 29 2007 - 14:03:32 EDT
  • [SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution Noah Meyerhans 
• Mon Oct 29 2007 - 11:57:09 EDT
  • SAXON version 5.4 SQL Injection Vulnerability securityresearch(at)netvigilance.com 
• Mon Oct 29 2007 - 11:45:10 EDT
  • SAXON version 5.4 Multiple Path Disclosure Vulnerabilities securityresearch(at)netvigilance.com 
• Mon Oct 29 2007 - 11:55:54 EDT
  • SAXON version 5.4 XSS Attack Vulnerability securityresearch(at)netvigilance.com 
• Sat Oct 27 2007 - 08:46:48 EDT
  • Security Briefings angelo(at)rosiello.org 
• Sun Oct 28 2007 - 19:48:55 EDT
  • AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit Guns(at)0x90.com.ar 
• Mon Oct 29 2007 - 06:09:16 EDT
  • Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion Secunia Research 
• Sun Oct 28 2007 - 21:48:05 EDT
  • Omnistar Live Software Cross-Site Scripting Vulrnability DoZ(at)HackersCenter.com 
• Sun Oct 28 2007 - 20:20:18 EDT
  • FLEA-2007-0062-1 firefox Foresight Linux Essential Announcement Service 
• Sun Oct 28 2007 - 20:14:32 EDT
  • FLEA-2007-0061-1 sun-jre sun-jdk Foresight Linux Essential Announcement Service 
• Sun Oct 28 2007 - 13:54:33 EDT
  • How to subvert Oracle Database Vault Joxean Koret 
• Sat Oct 27 2007 - 15:11:40 EDT
  • Final Call for Papers for Security Track at ApacheCon Europe 2008 Lars Eilebrecht 
• Mon Oct 29 2007 - 06:30:25 EDT
  • Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO Team SHATTER 
• Mon Oct 29 2007 - 06:29:00 EDT
  • Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in function MDSYS.SDO_CS.TRANSFORM Team SHATTER 
• Mon Oct 29 2007 - 06:34:16 EDT
  • Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability Stefan Esser 
• Sun Oct 28 2007 - 05:40:24 EDT
  • Webroot Desktop Firewall <=5.5.10.20 DNS recursion komarov(at)itdefence.ru 
• Sat Oct 27 2007 - 15:18:51 EDT
  • [waraxe-2007-SA#059] - XSS in WordPress 2.3 come2waraxe(at)yahoo.com 
• Sun Oct 28 2007 - 13:32:01 EDT
  • teatro 1.6 ( basePath ) Remote File Include Vulnerability alkomandoz-hacker(at)hotmail.com 
• Sun Oct 28 2007 - 00:49:07 EDT
  • Smart-Shop Shopping Cart Cross-Site Scripting Vulrnability DoZ(at)HackersCenter.com 
• Sat Oct 27 2007 - 07:54:56 EDT
  • [SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities Moritz Muehlenhoff 
• Fri Oct 26 2007 - 15:55:54 EDT
  • rPSA-2007-0225-1 firefox rPath Update Announcements 
• Fri Oct 26 2007 - 04:51:32 EDT
  • Re: Novell OpenSUSE SWAMP multiple XSS test(at)aol.com 
• Fri Oct 26 2007 - 04:36:13 EDT
  • FLEA-2007-0060-1 initscripts Foresight Linux Essential Announcement Service 
• Fri Oct 26 2007 - 00:10:23 EDT
  • RealNetworks RealPlayer/RealOne Player/Helix Player Remote Memory Corruption Piotr Bania 
• Fri Oct 26 2007 - 11:24:25 EDT
  • Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability Guns(at)0x90.com.ar 
• Fri Oct 26 2007 - 00:10:24 EDT
  • RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption Piotr Bania 
• Thu Oct 25 2007 - 18:01:46 EDT
  • [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code Raphael Marichez 
• Thu Oct 25 2007 - 17:00:15 EDT
  • [USN-538-1] libpng vulnerabilities Kees Cook 
• Thu Oct 25 2007 - 17:46:24 EDT
  • [ GLSA 200710-28 ] Qt: Buffer overflow Raphael Marichez 
• Thu Oct 25 2007 - 17:32:24 EDT
  • [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure kingoftheworld92(at)fastwebnet.it 
• Thu Oct 25 2007 - 17:31:11 EDT
  • Multi Host Forum Pro phpbb & ipb Multiple Sql Injection kingoftheworld92(at)fastwebnet.it 
• Thu Oct 25 2007 - 15:42:21 EDT
  • TikiWiki <= 1.9.8.1 Cross Site Scripting / Local File Inclusion L4teral 
• Tue Oct 23 2007 - 10:52:39 EDT
  • IRM Discover More Vulnerabilities in Cisco IOS Andy Davis 
• Mon Oct 22 2007 - 18:37:20 EDT
  • usd250 helpdesk XSS vulnerabily. Joseph.giron13(at)gmail.com 
• Thu Oct 25 2007 - 13:46:26 EDT
  • Directory traversal flaw in shttp digineo Advisories 
• Thu Oct 25 2007 - 12:54:02 EDT
  • iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 23 2007 - 03:14:05 EDT
  • i-Gallery 3.4 bug crack password! hackerbinhphuoc(at)yahoo.com 
• Mon Oct 22 2007 - 23:06:27 EDT
  • [PoC] DNS Recursion bandwidth amplification Shadow 
• Thu Oct 25 2007 - 11:58:16 EDT
  • Re: Re: RE: playing for fun with <=IE7 laurent.gaffie(at)gmail.com 
• Thu Oct 25 2007 - 07:44:20 EDT
  • First ever ModSecurity public training at OWASP/WASC conf in SJ Ofer Shezaf 
• Wed Oct 24 2007 - 13:59:48 EDT
  • Re: A-Cart SQL Injection And Cross-Site Scripting laurent.gaffie(at)gmail.com 
• Wed Oct 24 2007 - 12:58:47 EDT
  • rPSA-2007-0221-1 php php-mysql php-pgsql rPath Update Announcements 
• Thu Oct 25 2007 - 10:55:50 EDT
  • [SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation Steve Kemp 
• Thu Oct 25 2007 - 09:07:21 EDT
  • HPSBMA02133 SSRT061201 rev.6 - HP Oracle for OpenView (OfO) Critical Patch Update security-alert(at)hp.com 
• Thu Oct 25 2007 - 08:35:08 EDT
  • Flatnuke3 Remote Cookie Manipoulation / Privilege Escalation kingoftheworld92(at)fastwebnet.it 
• Wed Oct 24 2007 - 18:21:34 EDT
  • [SECURITY] [DSA 1389-2] New zoph packages fix SQL injection Thijs Kinkhorst 
• Wed Oct 24 2007 - 18:17:09 EDT
  • [ GLSA 200710-27 ] ImageMagick: Multiple vulnerabilities Raphael Marichez 
• Wed Oct 24 2007 - 17:59:20 EDT
  • [ GLSA 200710-26 ] HPLIP: Privilege escalation Raphael Marichez 
• Wed Oct 24 2007 - 17:43:02 EDT
  • [ GLSA 200710-25 ] MLDonkey: Privilege escalation Raphael Marichez 
• Wed Oct 24 2007 - 12:32:06 EDT
  • iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability iDefense Labs 
• Wed Oct 24 2007 - 13:17:50 EDT
  • iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability iDefense Labs 
• Tue Oct 23 2007 - 17:12:18 EDT
  • OSI CODES - PHP Live! Remote File Inclusion Advisory(at)Aria-Security.Net, 
• Tue Oct 23 2007 - 22:21:19 EDT
  • Bosdev Multiple vulnerabilities Joseph.giron13(at)gmail.com 
• Tue Oct 23 2007 - 19:37:06 EDT
  • rPSA-2007-0222-1 cpio tar rPath Update Announcements 
• Tue Oct 23 2007 - 20:02:01 EDT
  • Novell OpenSUSE SWAMP multiple XSS morin.josh(at)gmail.com 
• Wed Oct 24 2007 - 06:04:28 EDT
  • [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities Fatih Ozavci 
• Tue Oct 23 2007 - 18:43:45 EDT
  • [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection Advisory(at)Aria-Security.Net, 
• Tue Oct 23 2007 - 18:04:48 EDT
  • Aleris Software Systems Web Publisher Calendar SQL injection Joseph.giron13(at)gmail.com 
• Wed Oct 24 2007 - 09:45:55 EDT
  • HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data security-alert(at)hp.com 
• Tue Oct 23 2007 - 18:56:51 EDT
  • Aria-Security.Net [Web based alpha tabbed address book SQL Injection] Advisory(at)Aria-Security.Net, 
• Tue Oct 23 2007 - 17:10:19 EDT
  • [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass Thijs Kinkhorst 
• Tue Oct 23 2007 - 17:09:24 EDT
  • [USN-537-1] gnome-screensaver vulnerability Kees Cook 
• Tue Oct 23 2007 - 17:08:27 EDT
  • [USN-536-1] Thunderbird vulnerabilities Kees Cook 
• Tue Oct 23 2007 - 16:22:26 EDT
  • [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 16:09:13 EDT
  • [USN-531-2] dhcp vulnerability Kees Cook 
• Tue Oct 23 2007 - 14:38:13 EDT
  • [SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal Steve Kemp 
• Tue Oct 23 2007 - 15:08:51 EDT
  • 3proxy 0.5.3j released (bugfix) 3APA3A 
• Tue Oct 23 2007 - 14:48:00 EDT
  • [SECURITY] [DSA 1393-1] New xfce4-terminal packages fix arbitrary command execution Steve Kemp 
• Tue Oct 23 2007 - 11:11:51 EDT
  • SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability research(at)symantec.com 
• Tue Oct 23 2007 - 14:01:58 EDT
  • Korean GHBoard Multiple Vulnerabilities by Xcross87 pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 12:59:28 EDT
  • [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 14:06:58 EDT
  • [ MDKSA-2007:202 ] - Updated Firefox packages fix multiple vulnerabilities security(at)mandriva.com 
• Tue Oct 23 2007 - 13:26:33 EDT
  • [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87 pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 13:01:28 EDT
  • [Vulz] Japanese PHP Gallery Hosting File Upload Vulz pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 13:03:48 EDT
  • [Vulz] eLouai's Download Script Remote File Download Vulnerability pete.houston.17187(at)gmail.com 
• Tue Oct 23 2007 - 12:55:39 EDT
  • [Vulz] Seeblick 1.0 Beta File Upload Vulz pete.houston.17187(at)gmail.com 
• Mon Oct 22 2007 - 21:03:35 EDT
  • SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service research(at)symantec.com 
• Tue Oct 23 2007 - 10:38:21 EDT
  • [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities vulnpost-remove(at)vuln.sg 
• Tue Oct 23 2007 - 10:06:06 EDT
  • Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection Seth Fogie 
• Tue Oct 23 2007 - 03:13:49 EDT
  • [ GLSA 200710-24 ] OpenOffice.org: Heap-based buffer overflow Raphael Marichez 
• Tue Oct 23 2007 - 02:21:40 EDT
  • CFP for HITBSecConf2008 - Dubai now open Praburaajan 
• Tue Oct 23 2007 - 00:35:29 EDT
  • [USN-535-1] Firefox vulnerabilities Kees Cook 
• Mon Oct 22 2007 - 21:52:25 EDT
  • [ MDKSA-2007:201 ] - Updated hplip packages fix vulnerabilities security(at)mandriva.com 
• Mon Oct 22 2007 - 18:23:26 EDT
  • [USN-501-2] Ghostscript vulnerability Kees Cook 
• Mon Oct 22 2007 - 17:33:24 EDT
  • Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue advisories 
• Mon Oct 22 2007 - 17:38:14 EDT
  • [ GLSA 200710-23 ] Star: Directory traversal vulnerability Raphael Marichez 
• Mon Oct 22 2007 - 16:14:34 EDT
  • Camino release 1.5.2 fixes several vulnerabilities Juha-Matti Laurio 
• Mon Oct 22 2007 - 11:26:07 EDT
  • Jeebles Directory Local File Inclusion hack2prison(at)yahoo.com 
• Sun Oct 21 2007 - 14:10:29 EDT
  • Hackish XSS in shoutbox/blocco.php deme(at)hackish.eu 
• Thu Oct 18 2007 - 19:40:26 EDT
  • [TOOL] w3af - Web Application Attack and Audit Framework Andres Riancho 
• Mon Oct 22 2007 - 14:24:30 EDT
  • [USN-531-1] dhcp vulnerability Kees Cook 
• Mon Oct 22 2007 - 14:05:06 EDT
  • simple dns rebinding protection with dnsmasq Collin R. Mulliner 
• Mon Oct 22 2007 - 12:47:23 EDT
  • Folder Access bypass hack2prison(at)yahoo.com 
• Mon Oct 22 2007 - 14:36:58 EDT
  • [USN-533-1] util-linux vulnerability Kees Cook 
• Mon Oct 22 2007 - 13:57:13 EDT
  • Cracking the iPhone (5 article series) H D Moore 
• Mon Oct 22 2007 - 14:38:29 EDT
  • [USN-534-1] OpenSSL vulnerability Kees Cook 
• Mon Oct 22 2007 - 14:33:54 EDT
  • [USN-532-1] nagios-plugins vulnerability Kees Cook 
• Sat Oct 20 2007 - 12:52:27 EDT
  • [ELEYTT] Public Advisory 20-10-2007 Michal Bucko 
• Sun Oct 21 2007 - 14:04:09 EDT
  • Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities gmdarkfig(at)gmail.com 
• Sun Oct 21 2007 - 13:27:49 EDT
  • [Aria-Security.Net] dmcms.0.7.0 SQL Injection Advisory(at)Aria-Security.net, 
• Sat Oct 20 2007 - 16:55:06 EDT
  • [ GLSA 200710-22 ] TRAMP: Insecure temporary file creation Raphael Marichez 
• Mon Oct 22 2007 - 00:30:49 EDT
  • PacSec 2007 Agenda (Tokyo 11-29/30) Dragos Ruiu 
• Sun Oct 21 2007 - 08:18:43 EDT
  • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak 
• Sat Oct 20 2007 - 16:36:30 EDT
  • [ GLSA 200710-21 ] TikiWiki: Arbitrary command execution Raphael Marichez 
• Sat Oct 20 2007 - 10:27:20 EDT
  • ReloadCMS Vulnerable sekuru(at)email.ua 
• Fri Oct 19 2007 - 20:33:37 EDT
  • Simple Machines Forum multiple sql injection flaws with exploit code. th3.r00k.spammenot(at)gmail.com 
• Sat Oct 20 2007 - 05:55:01 EDT
  • Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) farion42(at)yahoo.de 
• Sat Oct 20 2007 - 07:56:10 EDT
  • [SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff 
• Sat Oct 20 2007 - 00:46:49 EDT
  • [Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln. Advisory(at)Aria-Security.Net, 
• Fri Oct 19 2007 - 11:55:05 EDT
  • [SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities Moritz Muehlenhoff 
• Fri Oct 19 2007 - 09:49:11 EDT
  • [CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability Williams, James K 
• Thu Oct 18 2007 - 22:49:10 EDT
  • A-Cart SQL Injection And Cross-Site Scripting Advisory(at)Aria-Security.Net, 
• Thu Oct 18 2007 - 20:09:14 EDT
  • [SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution Noah Meyerhans 
• Thu Oct 18 2007 - 19:20:21 EDT
  • rPSA-2007-0220-1 ImageMagick rPath Update Announcements 
• Thu Oct 18 2007 - 18:46:04 EDT
  • [ GLSA 200710-20 ] PDFKit, ImageKits: Buffer overflow Raphael Marichez 
• Thu Oct 18 2007 - 18:02:44 EDT
  • [ MDKSA-2007:200 ] - Updated tk packages fix vulnerabilities security(at)mandriva.com 
• Thu Oct 18 2007 - 18:02:29 EDT
  • S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting S21sec Labs 
• Thu Oct 18 2007 - 16:06:37 EDT
  • [ GLSA 200710-18 ] util-linux: Local privilege escalation Raphael Marichez 
• Thu Oct 18 2007 - 17:38:53 EDT
  • [ GLSA 200710-19 ] The Sleuth Kit: Integer underflow Raphael Marichez 
• Thu Oct 18 2007 - 15:05:56 EDT
  • Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096) Stefan Kanthak 
• Thu Oct 18 2007 - 16:01:35 EDT
  • Serious holes affecting SiteBar 3.3.8 Tim Brown 
• Thu Oct 18 2007 - 15:05:51 EDT
  • Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07) Stefan Kanthak 
• Thu Oct 18 2007 - 15:05:43 EDT
  • Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) Stefan Kanthak 
• Thu Oct 18 2007 - 16:39:48 EDT
  • [SECURITY] [DSA 1389-1] New zoph packages fix SQL injection Moritz Muehlenhoff 
• Thu Oct 18 2007 - 15:29:12 EDT
  • rPSA-2007-0219-1 libpng rPath Update Announcements 
• Tue Oct 16 2007 - 14:15:33 EDT
  • Re[2]: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu Thierry Zoller 
• Wed Oct 17 2007 - 15:27:35 EDT
  • Re: Multiple CSRF in SimplePHPBlog Hanno Böck 
• Wed Oct 17 2007 - 20:05:06 EDT
  • Re: SSH attacks - anyone else seen these? Tim 
• Thu Oct 18 2007 - 13:50:21 EDT
  • CFP C H A S E - 2 0 0 7 Lahore Pakistan chase 
• Thu Oct 18 2007 - 12:04:16 EDT
  • [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day) Reversemode 
• Thu Oct 18 2007 - 11:00:15 EDT
  • [security bulletin] HPSBMA02274 SSRT071445 rev.2 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) security-alert(at)hp.com 
• Thu Oct 18 2007 - 10:59:11 EDT
  • [security bulletin] HPSBUX02273 SSRT071476 rev.2 - HP-UX Running Apache, Remote Unauthorized Denial of Service (DoS) security-alert(at)hp.com 
• Thu Oct 18 2007 - 10:25:49 EDT
  • [SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution Steve Kemp 
• Thu Oct 18 2007 - 08:31:02 EDT
  • Nortel Telephony Server Denial of Service daniel.stirnimann(at)csnc.ch 
• Thu Oct 18 2007 - 07:37:57 EDT
  • Latest web hacking incidents Ofer Shezaf 
• Thu Oct 18 2007 - 08:29:53 EDT
  • Nortel IP Phone forced re-authentication daniel.stirnimann(at)csnc.ch 
• Thu Oct 18 2007 - 08:28:43 EDT
  • Nortel IP Phone Flooding Denial of Service daniel.stirniman(at)csnc.ch 
• Thu Oct 18 2007 - 08:27:31 EDT
  • Nortel IP Phone Surveillance Mode daniel.stirnimann(at)csnc.ch 
• Thu Oct 18 2007 - 08:26:03 EDT
  • Nortel UNIStim IP Softphone Buffer-Overflow daniel.stirnimann(at)csnc.ch 
• Wed Oct 17 2007 - 19:07:23 EDT
  • Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day) Reversemode 
• Wed Oct 17 2007 - 15:56:11 EDT
  • SYMSA-2007-011: Microsoft WM5 PocketPC Phone Ed SMS Handler Issue research(at)symantec.com 
• Wed Oct 17 2007 - 15:05:12 EDT
  • [ MDKSA-2007:199 ] - Updated phpMyAdmin packages fix multiple vulnerabilities security(at)mandriva.com 
• Tue Oct 16 2007 - 17:17:20 EDT
  • Re: SSH attacks - anyone else seen these? pand0ra 
• Wed Oct 17 2007 - 10:27:49 EDT
  • SQL Injection Flaw in Oracle Workspace Manager David Litchfield 
• Wed Oct 17 2007 - 01:46:30 EDT
  • Re: Netgear FVG318 is vunerable to DOS attack NetGear(at)leonbergers.plus.com 
• Wed Oct 17 2007 - 12:29:47 EDT
  • Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Cisco Systems Product Security Incident Response Team 
• Wed Oct 17 2007 - 13:15:25 EDT
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Cisco Systems Product Security Incident Response Team 
• Tue Oct 16 2007 - 15:34:18 EDT
  • Re: SSH attacks - anyone else seen these? James Lay 
• Wed Oct 17 2007 - 08:16:21 EDT
  • Re: Third-party patch for CVE-2007-3896, UPDATE NOW KJK::Hyperion 
• Wed Oct 17 2007 - 12:00:00 EDT
  • Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Cisco Systems Product Security Incident Response Team 
• Tue Oct 16 2007 - 20:42:22 EDT
  • Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows hvazquez(at)pentest.es 
• Wed Oct 17 2007 - 08:07:06 EDT
  • Oracle audit issue with XMLDB ftp service NGSSoftware Insight Security Research 
• Tue Oct 16 2007 - 19:59:11 EDT
  • AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql Asterisk Security Team 
• Wed Oct 17 2007 - 07:55:55 EDT
  • Oracle RDBMS TNS Data packet DoS NGSSoftware Insight Security Research 
• Wed Oct 17 2007 - 07:37:09 EDT
  • Multiple SQL Injection Flaws in Oracle CTX_DOC package NGSSoftware Insight Security Research 
• Wed Oct 17 2007 - 10:00:55 EDT
  • Multiple CSRF in SimplePHPBlog deme(at)hackish.eu 
• Wed Oct 17 2007 - 07:47:44 EDT
  • Oracle TNS Listener DoS and/or remote memory inspection NGSSoftware Insight Security Research 
• Tue Oct 16 2007 - 18:27:06 EDT
  • [ GLSA 200710-17 ] Balsa: Buffer overflow Raphael Marichez 
• Mon Oct 15 2007 - 21:02:39 EDT
  • [ MDKSA-2007:195 ] - Updated kernel packages fix multiple vulnerabilities and bugs security(at)mandriva.com 
• Tue Oct 16 2007 - 16:35:34 EDT
  • Re: SSH attacks - anyone else seen these? Jose Nazario 
• Tue Oct 16 2007 - 15:29:04 EDT
  • Re: SSH attacks - anyone else seen these? Mark R. Bowyer 
• Tue Oct 16 2007 - 15:28:10 EDT
  • Re: SSH attacks - anyone else seen these? Gayathri Swaminathan 
• Tue Oct 16 2007 - 14:03:51 EDT
  • [security bulletin] HPSBUX02277 SSRT071453 rev.1 - HP-UX Running OpenSSL, Local Denial of Service (DoS) security-alert(at)hp.com 
• Tue Oct 16 2007 - 12:01:48 EDT
  • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis 
• Mon Oct 15 2007 - 21:04:26 EDT
  • [ MDKSA-2007:196 ] - Updated kernel packages fix multiple vulnerabilities and bugs security(at)mandriva.com 
• Tue Oct 16 2007 - 14:03:04 EDT
  • [security bulletin] HPSBTU02276 SSRT071472 rev.1 - HP Tru64 UNIX Running Apache Tomcat, Remote Unauthorized Access, Remote Denial of Service (DoS) security-alert(at)hp.com 
• Mon Oct 15 2007 - 21:34:58 EDT
  • [ MDKSA-2007:197 ] - Updated tar packages prevent buffer overflow security(at)mandriva.com 
• Tue Oct 16 2007 - 14:04:32 EDT
  • [security bulletin] HPSBST02280 SSRT071480 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-055 to MS07-060 security-alert(at)hp.com 
• Tue Oct 16 2007 - 14:01:42 EDT
  • [security bulletin] HPSBMA02230 SSRT071436 rev.2 - HP Select Identity, Remote Unauthorized Access security-alert(at)hp.com 
• Tue Oct 16 2007 - 13:06:19 EDT
  • SSH attacks - anyone else seen these? Tim 
• Tue Oct 16 2007 - 10:24:10 EDT
  • Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability Secunia Research 
• Mon Oct 15 2007 - 21:21:59 EDT
  • [ MDKSA-2007:198 ] - Updated util-linux packages fix vulnerability security(at)mandriva.com 
• Tue Oct 16 2007 - 12:23:57 EDT
  • WWWISIS <= 7.1 (IsisScript) Multiple Vulnerabilities jose luis góngora fernández 
• Tue Oct 16 2007 - 12:25:59 EDT
  • IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX Andy Davis 
• Tue Oct 16 2007 - 12:09:37 EDT
  • FW: [Dailydave] Canada's Response to Black Hat - SecTor 2007 Taylor, Gord 
• Mon Oct 15 2007 - 18:21:10 EDT
  • RE: playing for fun with <=IE7 avivra 
• Mon Oct 15 2007 - 19:10:12 EDT
  • about phpMyAdmin setup.php XSS vulnerability Marc Delisle 
• Tue Oct 16 2007 - 09:04:15 EDT
  • CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability bugtraq(at)firewraith.co.uk 
• Mon Oct 15 2007 - 11:28:13 EDT
  • Re: RE: playing for fun with <=IE7 jason.gerfen(at)gmail.com 
• Sun Oct 14 2007 - 00:03:08 EDT
  • HTML Injection Vuln in nssboard kcghost(at)gmail.com 
• Sun Oct 14 2007 - 18:15:40 EDT
  • [ GLSA 200710-15 ] KDM: Local privilege escalation Pierre-Yves Rofes 
• Mon Oct 15 2007 - 07:32:20 EDT
  • eXtremail(ly easy) remote roots mu-b 
• Mon Oct 15 2007 - 17:10:12 EDT
  • [SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution Florian Weimer 
• Sat Oct 13 2007 - 14:05:44 EDT
  • RE: playing for fun with <=IE7 Roger A. Grimes 
• Mon Oct 15 2007 - 17:21:01 EDT
  • Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability jose luis góngora fernández 
• Sun Oct 14 2007 - 16:59:19 EDT
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks pdp (architect) 
• Sat Oct 13 2007 - 23:04:57 EDT
  • Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available KJK::Hyperion 
• Mon Oct 15 2007 - 15:00:24 EDT
  • Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability jose luis góngora fernández 
• Mon Oct 15 2007 - 14:55:53 EDT
  • InnovaShop&#x2122;® (mgs.jps) Cross Siting Scripting jose luis góngora fernández 
• Mon Oct 15 2007 - 14:39:55 EDT
  • SYMSA-2007-010: Microsoft ActiveSync 4.x Weak Password Obfuscation research(at)symantec.com 
• Mon Oct 15 2007 - 15:39:55 EDT
  • RE: playing for fun with <=IE7 James C. Slora Jr. 
• Sat Oct 13 2007 - 08:51:04 EDT
  • Re: Remote Desktop Command Fixation Attacks pdp (architect) 
• Thu Oct 11 2007 - 14:44:28 EDT
  • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Alex Everett 
• Sun Oct 14 2007 - 18:38:27 EDT
  • [ GLSA 200710-16 ] X.Org X server: Composite local privilege escalation Pierre-Yves Rofes 
• Sat Oct 13 2007 - 17:44:10 EDT
  • Clients buffer-overflow in Live for Speed 0.5X10 Luigi Auriemma 
• Mon Oct 15 2007 - 02:46:24 EDT
  • [SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service Martin Schulze 
• Mon Oct 15 2007 - 03:11:14 EDT
  • [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service Martin Schulze 
• Fri Oct 12 2007 - 16:44:16 EDT
  • [ GLSA 200710-10 ] SKK Tools: Insecure temporary file creation Raphael Marichez 
• Fri Oct 12 2007 - 16:34:02 EDT
  • playing for fun with <=IE7 laurent.gaffie(at)gmail.com 
• Fri Oct 12 2007 - 19:54:38 EDT
  • [SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities dann frazier 
• Fri Oct 12 2007 - 18:08:59 EDT
  • [ GLSA 200710-12 ] T1Lib: Buffer overflow Pierre-Yves Rofes 
• Sat Oct 13 2007 - 10:53:34 EDT
  • VImpX ActiveX (VImpX.ocx v. 4.7.3.0) Remote saw_xyz(at)yahoo.com 
• Sat Oct 13 2007 - 07:43:02 EDT
  • [ GLSA 200710-14 ] DenyHosts: Denial of Service Pierre-Yves Rofes 
• Sat Oct 13 2007 - 07:35:06 EDT
  • [ GLSA 200710-13 ] Ampache: Multiple vulnerabilities Pierre-Yves Rofes 
• Fri Oct 12 2007 - 17:30:47 EDT
  • [ GLSA 200710-11 ] X Font Server: Multiple Vulnerabilities Pierre-Yves Rofes 
• Fri Oct 12 2007 - 15:51:48 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Mark Senior 
• Fri Oct 12 2007 - 14:57:17 EDT
  • [USN-530-1] hplip vulnerability Kees Cook 
• Fri Oct 12 2007 - 04:25:06 EDT
  • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Pete Simpson 
• Fri Oct 12 2007 - 12:32:58 EDT
  • RE: Remote Desktop Command Fixation Attacks Thor (Hammer of God) 
• Fri Oct 12 2007 - 08:57:55 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Roman Medina-Heigl Hernandez 
• Thu Oct 11 2007 - 17:45:05 EDT
  • Re: Remote Desktop Command Fixation Attacks hvdkooij(at)vanderkooij.org 
• Fri Oct 12 2007 - 07:05:20 EDT
  • SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS Bernhard Mueller 
• Fri Oct 12 2007 - 07:05:48 EDT
  • OpenSSL Security Advisory Ben Laurie 
• Fri Oct 12 2007 - 06:23:02 EDT
  • Re: Tikiwiki 1.9.8 exploit ITW 3APA3A 
• Thu Oct 11 2007 - 23:59:22 EDT
  • Re: Joomla! swMenuFree 4.6 Component Remote File Include sean(at)swmenupro.com 
• Thu Oct 11 2007 - 17:20:06 EDT
  • Tikiwiki 1.9.8 exploit ITW Moritz Naumann 
• Thu Oct 11 2007 - 17:30:52 EDT
  • rPSA-2007-0214-1 initscripts rPath Update Announcements 
• Thu Oct 11 2007 - 17:26:15 EDT
  • RE: Remote Desktop Command Fixation Attacks Jim Harrison 
• Thu Oct 11 2007 - 14:27:15 EDT
  • [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities Williams, James K 
• Thu Oct 11 2007 - 16:49:48 EDT
  • S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service S21sec Labs 
• Thu Oct 11 2007 - 15:16:03 EDT
  • [USN-529-1] Tk vulnerability Kees Cook 
• Thu Oct 11 2007 - 09:17:57 EDT
  • [security bulletin] HPSBMA02230 SSRT071436 rev.1 - HP Select Identity, Remote Unauthorized Access security-alert(at)hp.com 
• Thu Oct 11 2007 - 08:48:53 EDT
  • Re: URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Thierry Zoller 
• Thu Oct 11 2007 - 15:46:32 EDT
  • iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Labs 
• Wed Oct 10 2007 - 20:17:16 EDT
  • Re: Remote Desktop Command Fixation Attacks pdp (architect) 
• Thu Oct 11 2007 - 15:35:23 EDT
  • EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference eEye Advisories 
• Thu Oct 11 2007 - 02:26:30 EDT
  • [USN-528-1] MySQL vulnerabilities Kees Cook 
• Thu Oct 11 2007 - 03:29:43 EDT
  • CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability hfli 
• Thu Oct 11 2007 - 09:18:48 EDT
  • [security bulletin] HPSBUX02273 SSRT071476 rev. 1 - HP-UX running Apache, Remote Unauthorized Denial of Service (DoS) security-alert(at)hp.com 
• Wed Oct 10 2007 - 20:24:48 EDT
  • Re: Remote Desktop Command Fixation Attacks pdp (architect) 
• Thu Oct 11 2007 - 03:32:19 EDT
  • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis 
• Thu Oct 11 2007 - 12:49:04 EDT
  • Re: URI handling as the harbinger of interaction errors Florian Weimer 
• Wed Oct 10 2007 - 05:31:09 EDT
  • Re: Vulnerabilities Victor Brilon 
• Wed Oct 10 2007 - 18:52:31 EDT
  • RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Andy Davis 
• Wed Oct 10 2007 - 04:40:54 EDT
  • Re: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu Felix 'FX' Lindner 
• Fri Oct 12 2007 - 02:32:17 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake 
• Wed Oct 10 2007 - 00:53:47 EDT
  • Re: Vulnerabilities sottwell(at)sottwell.com 
• Tue Oct 09 2007 - 17:18:38 EDT
  • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller 
• Wed Oct 10 2007 - 19:31:20 EDT
  • Black Hat Tokyo + DC and Europe CfPs now open. Jeff Moss 
• Thu Oct 11 2007 - 12:41:50 EDT
  • Joomla! swMenuFree 4.6 Component Remote File Include Guns(at)0x90.com.ar 
• Thu Oct 11 2007 - 08:27:48 EDT
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks gjgowey(at)tmo.blackberry.net 
• Thu Oct 11 2007 - 12:55:16 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Florian Weimer 
• Thu Oct 11 2007 - 04:21:54 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake 
• Thu Oct 11 2007 - 13:04:56 EDT
  • Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows fwadmin(at)bigorg.com 
• Thu Oct 11 2007 - 13:08:01 EDT
  • M$ will fix URI? Memisyazici, Aras 
• Thu Oct 11 2007 - 10:12:15 EDT
  • RE: [Full-disclosure] Remote Desktop Command Fixation Attacks Paul Melson 
• Thu Oct 11 2007 - 12:14:07 EDT
  • October Microsoft Tuesday Todd Manning 
• Wed Oct 10 2007 - 22:11:15 EDT
  • [ MDKSA-2007:194 ] - Updated libvorbis packages fix vulnerabilities security(at)mandriva.com 
• Wed Oct 10 2007 - 22:32:13 EDT
  • CORE-2007-0928: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server Core Security Technologies Advisories 
• Thu Oct 11 2007 - 09:14:53 EDT
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks pdp (architect) 
• Thu Oct 11 2007 - 08:37:47 EDT
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks gboyce 
• Wed Oct 10 2007 - 19:35:54 EDT
  • Fwd: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype merigoth(at)gmail.com 
• Thu Oct 11 2007 - 01:36:17 EDT
  • RE: Remote Desktop Command Fixation Attacks M. Burnett 
• Wed Oct 10 2007 - 19:47:11 EDT
  • URI handling as the harbinger of interaction errors Steven M. Christey 
• Wed Oct 10 2007 - 19:03:29 EDT
  • IRM Advisory: Cisco IOS LPD Remote Stack Overflow Andy Davis 
• Wed Oct 10 2007 - 16:25:46 EDT
  • [ELEYTT] 10PAZDZIERNIK2007 Michal Bucko 
• Wed Oct 10 2007 - 18:02:58 EDT
  • TPTI-07-18: EMC RepliStor Server Heap Overflow Vulnerability TSRT(at)3com.com 
• Wed Oct 10 2007 - 18:11:21 EDT
  • RE: Remote Desktop Command Fixation Attacks Thor (Hammer of God) 
• Wed Oct 10 2007 - 17:51:56 EDT
  • ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability zdi-disclosures(at)3com.com 
• Wed Oct 10 2007 - 17:51:46 EDT
  • ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities zdi-disclosures(at)3com.com 
• Wed Oct 10 2007 - 17:51:32 EDT
  • ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability zdi-disclosures(at)3com.com 
• Thu Oct 11 2007 - 15:25:05 EDT
  • Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Halvar Flake 
• Wed Oct 10 2007 - 12:35:43 EDT
  • AST-2007-022: Buffer overflows in voicemail when using IMAP storage The Asterisk Development Team 
• Wed Oct 10 2007 - 15:38:08 EDT
  • Re: Remote Desktop Command Fixation Attacks Steve Shockley 
• Wed Oct 10 2007 - 14:27:30 EDT
  • iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability iDefense Labs 
• Wed Oct 10 2007 - 14:19:25 EDT
  • Vulnerabilities digest 3APA3A 
• Wed Oct 10 2007 - 13:59:21 EDT
  • [SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution Noah Meyerhans 
• Wed Oct 10 2007 - 11:57:52 EDT
  • Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password Cisco Systems Product Security Incident Response Team 
• Wed Oct 10 2007 - 11:47:23 EDT
  • 0day: Hacking secured CITRIX from outside pdp (architect) 
• Wed Oct 10 2007 - 07:05:23 EDT
  • Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques Damir Rajnovic 
• Wed Oct 10 2007 - 04:15:57 EDT
  • Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow Nick FitzGerald 
• Wed Oct 10 2007 - 01:17:39 EDT
  • Several vulnerabilities in CMS Made Simple 1.1.3.1 Omid 
• Wed Oct 10 2007 - 07:14:32 EDT
  • Remote Desktop Command Fixation Attacks pdp (architect) 
• Wed Oct 10 2007 - 02:47:12 EDT
  • wmtrssreader joomla component 1.0 Remote File Include Vulnerability cyber-crime(at)sibersavascilar.com 
• Wed Oct 10 2007 - 10:14:01 EDT
  • 3Com WIFI router remote administration vulnerability. Guy Mizrahi 
• Wed Oct 10 2007 - 07:01:07 EDT
  • Regarding vulnerability in ViArt Shop support(at)viart.com 
• Tue Oct 09 2007 - 18:09:27 EDT
  • [ GLSA 200710-08 ] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow Pierre-Yves Rofes 
• Tue Oct 09 2007 - 18:25:54 EDT
  • [ GLSA 200710-09 ] NX 2.1: User-assisted execution of arbitrary code Pierre-Yves Rofes 
• Tue Oct 09 2007 - 15:14:30 EDT
  • The Death of Defence in Depth ? - An invitation to Hack.lu Thierry Zoller 
• Sun Oct 07 2007 - 23:34:13 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype gjgowey(at)tmo.blackberry.net 
• Sun Oct 07 2007 - 20:45:24 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype KJK::Hyperion 
• Tue Oct 09 2007 - 14:22:50 EDT
  • iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Labs 
• Sun Oct 07 2007 - 11:21:01 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Valdis.Kletnieks(at)vt.edu 
• Tue Oct 09 2007 - 16:31:56 EDT
  • NULL pointer crash in World in Conflict 1.000 Luigi Auriemma 
• Sun Oct 07 2007 - 22:52:31 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. 
• Mon Oct 08 2007 - 10:24:38 EDT
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Jim Slora 
• Tue Oct 09 2007 - 13:08:42 EDT
  • [USN-527-1] xen-3.0 vulnerability Kees Cook 
• Sun Oct 07 2007 - 09:40:59 EDT
  • Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Glynn Clements 
• Mon Oct 08 2007 - 23:29:01 EDT
  • RE: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Brett Moore 
• Mon Oct 08 2007 - 18:41:08 EDT
  • Research: Cybercrime and the Electoral System Oliver Friedrichs 
• Tue Oct 09 2007 - 12:31:14 EDT
  • LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues Chris Travers 
• Tue Oct 09 2007 - 02:35:22 EDT
  • Vulnerabilities xoxland(at)gmail.com 
• Sun Oct 07 2007 - 23:49:35 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype KJK::Hyperion 
• Mon Oct 08 2007 - 06:51:52 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Morning Wood 
• Tue Oct 09 2007 - 01:51:50 EDT
  • DNewsWeb Softwares Cross Site Scripting Vulrnability DoZ(at)HackersCenter.com 
• Tue Oct 09 2007 - 07:03:10 EDT
  • Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Andreas Lindenblatt 
• Sun Oct 07 2007 - 13:58:25 EDT
  • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller 
• Sun Oct 07 2007 - 01:40:32 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. 
• Mon Oct 08 2007 - 23:29:32 EDT
  • rPSA-2007-0212-1 util-linux rPath Update Announcements 
• Sat Oct 06 2007 - 21:30:20 EDT
  • RE: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Roger A. Grimes 
• Mon Oct 08 2007 - 22:53:07 EDT
  • Viart Shopping Cart Directory Transversal Vuln Advisory(at)Aria-Security.Net, 
• Sun Oct 07 2007 - 23:03:03 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. 
• Mon Oct 08 2007 - 21:55:02 EDT
  • Black Hat Tokyo + DC and Europe CfPs now open. Jeff Moss 
• Tue Oct 09 2007 - 02:33:57 EDT
  • Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Andreas Lindenblatt 
• Mon Oct 08 2007 - 16:20:49 EDT
  • [security bulletin] HPSBMA02275 SSRT071445 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alert(at)hp.com 
• Mon Oct 08 2007 - 05:19:29 EDT
  • Re[3]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype 3APA3A 
• Mon Oct 08 2007 - 16:19:59 EDT
  • [security bulletin] HPSBMA02274 SSRT071445 rev.1 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) security-alert(at)hp.com 
• Mon Oct 08 2007 - 16:18:42 EDT
  • [security bulletin] HPSBUX02181 SSRT061289 rev.3 - HP-UX Running IPFilter, Remote Denial of Service (DoS) security-alert(at)hp.com 
• Mon Oct 08 2007 - 17:07:42 EDT
  • BT Home Flub: Pwnin the BT Home Hub Adrian P 
• Mon Oct 08 2007 - 16:17:46 EDT
  • [security bulletin] HPSBUX01137 SSRT5954 rev.11 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS) security-alert(at)hp.com 
• Mon Oct 08 2007 - 16:16:55 EDT
  • [security bulletin] HPSBUX02262 SSRT071447 rev. 1 - HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS) security-alert(at)hp.com 
• Mon Oct 08 2007 - 14:11:15 EDT
  • rPSA-2007-0210-1 xen rPath Update Announcements 
• Sun Oct 07 2007 - 17:32:22 EDT
  • [ GLSA 200710-06 ] OpenSSL: Multiple vulnerabilities Pierre-Yves Rofes 
• Sun Oct 07 2007 - 21:08:50 EDT
  • TorrentTrader Classic Mutiple Remote vulnerabilities security(at)soqor.net 
• Sun Oct 07 2007 - 05:24:06 EDT
  • [ GLSA 200710-02 ] PHP: Multiple vulnerabilities Raphael Marichez 
• Mon Oct 08 2007 - 07:07:08 EDT
  • new vuln in snewscms.net.ru in lang file info(at)medconsultation.ru 
• Sun Oct 07 2007 - 16:56:34 EDT
  • [ GLSA 200710-05 ] QGit: Insecure temporary file creation Pierre-Yves Rofes 
• Sun Oct 07 2007 - 16:07:04 EDT
  • [ GLSA 200710-03 ] libvorbis: Multiple vulnerabilities Raphael Marichez 
• Sun Oct 07 2007 - 18:06:09 EDT
  • [ GLSA 200710-07 ] Tk: Buffer overflow Raphael Marichez 
• Sun Oct 07 2007 - 16:22:01 EDT
  • [ GLSA 200710-04 ] libsndfile: Buffer overflow Raphael Marichez 
• Sun Oct 07 2007 - 11:17:55 EDT
  • [SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow Steve Kemp 
• Sat Oct 06 2007 - 14:52:28 EDT
  • Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Kurt Dillard 
• Sat Oct 06 2007 - 12:42:32 EDT
  • Else If cms Multiple Remote vulnerabilities security(at)soqor.net 
• Sat Oct 06 2007 - 13:10:11 EDT
  • idmos-phoenix cms Remote File inclusion security(at)soqor.net 
• Sat Oct 06 2007 - 13:06:51 EDT
  • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Thierry Zoller 
• Sat Oct 06 2007 - 11:42:32 EDT
  • CMS Creamotion - Remote File inclusion security(at)soqor.net 
• Sat Oct 06 2007 - 12:43:16 EDT
  • Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype Geo. 
• Sat Oct 06 2007 - 12:13:21 EDT
  • Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller 
• Sat Oct 06 2007 - 11:53:30 EDT
  • SSHatter 0.6 Tim Brown 
• Sat Oct 06 2007 - 11:06:06 EDT
  • Re[2]: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Thierry Zoller 
• Sat Oct 06 2007 - 06:46:47 EDT
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Juergen Schmidt 
• Sat Oct 06 2007 - 05:45:21 EDT
  • Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) Amit Klein 
• Fri Oct 05 2007 - 18:05:29 EDT
  • [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN Advisory(at)Aria-Security.Net, 
• Fri Oct 05 2007 - 15:33:14 EDT
  • [SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities Steve Kemp 
• Fri Oct 05 2007 - 15:54:11 EDT
  • RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Roger A. Grimes 
• Fri Oct 05 2007 - 16:41:42 EDT
  • Format string in The Dawn of Time 1.69s beta4 Luigi Auriemma 
• Fri Oct 05 2007 - 13:58:04 EDT
  • Reporting Vulnerable Public Web mail ivan.sanchez(at)nullcode.com.ar 
• Thu Oct 04 2007 - 00:48:24 EDT
  • Re: Re: file upload vulnerability in joomla media component vinodsharma.mimit(at)gmail.com 
• Fri Oct 05 2007 - 16:41:20 EDT
  • Multiple vulnerabilities in Dropteam 1.3.3 Luigi Auriemma 
• Thu Oct 04 2007 - 18:22:52 EDT
  • [SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting Thijs Kinkhorst 
• Fri Oct 05 2007 - 12:20:22 EDT
  • rPSA-2007-0209-1 elinks rPath Update Announcements 
• Thu Oct 04 2007 - 19:27:15 EDT
  • [USN-524-1] OpenOffice.org vulnerability Kees Cook 
• Thu Oct 04 2007 - 19:56:22 EDT
  • [ MDKSA-2007:193 ] - Updated openssl packages fix vulnerabilities security(at)mandriva.com 
• Thu Oct 04 2007 - 20:17:31 EDT
  • [USN-525-1] libsndfile vulnerability Kees Cook 
• Fri Oct 05 2007 - 08:58:48 EDT
  • URI handling woes in Acrobat Reader, Netscape, Miranda, Skype Juergen Schmidt 
• Thu Oct 04 2007 - 20:18:15 EDT
  • [USN-526-1] debian-goodies vulnerability Kees Cook 
• Thu Oct 04 2007 - 16:55:53 EDT
  • DDIVRT-2007-05 NetSupport Manager Client Buffer Overflow vulnerabilityresearch(at)digitaldefense.net 
• Thu Oct 04 2007 - 17:45:55 EDT
  • [ GLSA 200710-01 ] RPCSEC_GSS library: Buffer overflow Pierre-Yves Rofes 
• Thu Oct 04 2007 - 16:18:54 EDT
  • [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN Advisory(at)Aria-Security.Net, 
• Thu Oct 04 2007 - 09:47:31 EDT
  • Re: Re[2]: 0day: mIRC pwns Windows Gavin Hanover 
• Thu Oct 04 2007 - 14:16:02 EDT
  • Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs 
• Thu Oct 04 2007 - 13:45:36 EDT
  • Re: 0day: mIRC pwns Windows Fred Elliot 
• Thu Oct 04 2007 - 11:03:40 EDT
  • Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow ejc(at)thousandplaces.org 
• Thu Oct 04 2007 - 12:38:51 EDT
  • Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability 3APA3A 
• Thu Oct 04 2007 - 12:04:06 EDT
  • Re: 0day: mIRC pwns Windows Greg Rubin 
• Thu Oct 04 2007 - 07:55:14 EDT
  • FLEA-2007-0059-1 qt qt-tools Foresight Linux Essential Announcement Service 
• Wed Oct 03 2007 - 19:11:02 EDT
  • [USN-523-1] ImageMagick vulnerabilities Kees Cook 
• Thu Oct 04 2007 - 06:19:50 EDT
  • Re: Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9[EXPLOIT] weak(at)fraglab.at 
• Wed Oct 03 2007 - 22:58:20 EDT
  • [RISE-2007002] Borland InterBase Multiple Buffer Overflow Vulnerabilities RISE Security 
• Wed Oct 03 2007 - 22:13:35 EDT
  • Cart32 Arbitrary File Download Vulnerability Paul Craig 
• Thu Oct 04 2007 - 07:12:02 EDT
  • Re[2]: 0day: mIRC pwns Windows 3APA3A 
• Wed Oct 03 2007 - 22:59:34 EDT
  • [RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities RISE Security 
• Wed Oct 03 2007 - 18:56:35 EDT
  • FLEA-2007-0058-1 openssl openssl-scripts Foresight Linux Essential Announcement Service 
• Wed Oct 03 2007 - 17:58:30 EDT
  • FreeBSD Security Advisory FreeBSD-SA-07:08.openssl FreeBSD Security Advisories 
• Wed Oct 03 2007 - 16:49:45 EDT
  • Content Builder 0.7.5 RFI Bug mehrad1989(at)gmail.com 
• Wed Oct 03 2007 - 14:47:47 EDT
  • Re: 0day: mIRC pwns Windows Gregory Rubin 
• Wed Oct 03 2007 - 15:49:20 EDT
  • rPSA-2007-0206-1 openssl openssl-scripts rPath Update Announcements 
• Wed Oct 03 2007 - 15:59:45 EDT
  • Re: 0day: mIRC pwns Windows Gavin Hanover 
• Wed Oct 03 2007 - 15:41:43 EDT
  • rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs rPath Update Announcements 
• Wed Oct 03 2007 - 15:37:11 EDT
  • rPSA-2007-0204-1 qt-x11-free rPath Update Announcements 
• Wed Oct 03 2007 - 13:04:16 EDT
  • DRBGuestbook Remote XSS Vulnerability gokhankaya(at)hotmail.com 
• Wed Oct 03 2007 - 12:06:29 EDT
  • 0day: mIRC pwns Windows jinc4fareijj(at)hotmail.com 
• Mon Oct 01 2007 - 06:37:47 EDT
  • Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) sathyakrishnadas(at)gmail.com 
• Mon Oct 01 2007 - 04:10:32 EDT
  • Re: Ruby Net::HTTPS library does not validate server certificate CN Thomas 
• Wed Oct 03 2007 - 14:19:10 EDT
  • RE: CheckPoint Secure Platform Multiple Buffer Overflows Hugo van der Kooij 
• Wed Oct 03 2007 - 12:39:39 EDT
  • International Hacking & Security Conference "POC200" poc2007(at)gmail.com 
• Wed Oct 03 2007 - 11:46:38 EDT
  • RE: CheckPoint Secure Platform Multiple Buffer Overflows Tony Reusser 
• Wed Oct 03 2007 - 10:32:03 EDT
  • iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability iDefense Labs 
• Wed Oct 03 2007 - 04:59:11 EDT
  • [SECURITY] [DSA 1379-1] New quagga packages fix denial of service Steve Kemp 
• Wed Oct 03 2007 - 04:18:48 EDT
  • FLEA-2007-0057-1 pidgin Foresight Linux Essential Announcement Service 
• Tue Oct 02 2007 - 22:07:49 EDT
  • [SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier 
• Tue Oct 02 2007 - 18:34:17 EDT
  • [SECURITY] [DSA 1380-1] New elinks packages fix information disclosure Steve Kemp 
• Tue Oct 02 2007 - 18:28:22 EDT
  • rPSA-2007-0203-1 rmake rmake-proxy rmake-repos rPath Update Announcements 
• Tue Oct 02 2007 - 18:18:25 EDT
  • iDefense Security Advisory 10.02.07: Multiple Vendor X Font Server Multiple Vulnerabilities iDefense Labs 
• Tue Oct 02 2007 - 16:38:20 EDT
  • TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities TSRT(at)3com.com 
• Tue Oct 02 2007 - 16:36:31 EDT
  • TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities TSRT(at)3com.com 
• Tue Oct 02 2007 - 16:06:48 EDT
  • [SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution Noah Meyerhans 
• Tue Oct 02 2007 - 15:28:19 EDT
  • Re: dvddb-0.6 media sql-inj. vuln. james(at)globalmegacorp.org 
• Tue Oct 02 2007 - 16:21:45 EDT
  • Original Photo Gallery Remote Command Execution ascii 
• Tue Oct 02 2007 - 01:17:29 EDT
  • Re: CheckPoint Secure Platform Multiple Buffer Overflows hvazquez(at)pentest.es 
• Tue Oct 02 2007 - 04:47:49 EDT
  • [SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service dann frazier 
• Tue Oct 02 2007 - 02:08:14 EDT
  • WifiZoo v1.2 release Hernan Ochoa 
• Mon Oct 01 2007 - 19:52:58 EDT
  • [ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability security(at)mandriva.com 
• Mon Oct 01 2007 - 15:31:38 EDT
  • Unexploitable buffer-overflow in America's Army 2.8.2 through PB Luigi Auriemma 
• Mon Oct 01 2007 - 14:15:23 EDT
  • Re: phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion str0ke 
• Mon Oct 01 2007 - 16:31:08 EDT
  • [ MDKSA-2007:191 ] - Updated libsndfile packages fix vulnerability security(at)mandriva.com 
• Mon Oct 01 2007 - 15:17:10 EDT
  • Immunity Debugger v1.2 Release Nicolas Waisman 
• Mon Oct 01 2007 - 14:27:22 EDT
  • ClubHack - CFP closing by 15th October 2007 `ClubHack ` 
• Mon Oct 01 2007 - 15:31:43 EDT
  • Format string in F.E.A.R. 1.08 through PB Luigi Auriemma 
• Mon Oct 01 2007 - 15:31:32 EDT
  • Format string in the Doom 3 engine through PB Luigi Auriemma 
• Mon Oct 01 2007 - 15:31:00 EDT
  • Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9 Luigi Auriemma 
• Mon Oct 01 2007 - 11:48:02 EDT
  • smbftpd 0.96 format string vulnerability Jerry Illikainen 
• Mon Oct 01 2007 - 09:12:40 EDT
  • New Advisory: X-script GuestBook m2x(at)inbox.ru 
• Mon Oct 01 2007 - 08:16:14 EDT
  • CheckPoint Secure Platform Multiple Buffer Overflows hvazquez(at)pentest.es 
• Mon Oct 01 2007 - 08:07:00 EDT
  • Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow snagg(at)securenetwork.it 

  This archive was generated by hypermail 2.1.8 : Wed Jul 16 2008 - 14:45:29 EDT