Mail Index

• Thread Index

• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: trh
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: David Brodbeck
• Re: Promiscuous email printing in Canon imageRunner
  • From: Felix Lindner
• Multiple vulnerabilities in w-agora forum
  • From: Alexander Antipov
• [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak
  • From: Martin Schulze
• TSL-2004-0050 - multi
  • From: Trustix Security Advisor
• Multiple Vulnerabilities in Silent Storm Portal
  • From: R00tCr4ck
• Unicornscan 0.4.2
  • From: robert
• Samba Security Announcement -- Potential Arbitrary File Access
  • From: Gerald (Jerry) Carter
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Yoav Nir
• Re: cdrecord local root exploit
  • From: Jason T. Miller
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: David F. Skoll
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Hugo van der Kooij
• Re: directory traversal in ParaChat Server 5.5
  • From: Donato Ferrante
• Re:[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
  • From: advisories
• RE: Diebold Global Election Management System (GEMS) Backdoor
  • From: Geoff Vass
• iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability
  • From: customer service mailbox
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Chris Paget
• Re: New whitepaper "The Phishing Guide"
  • From: Aleksandar Milivojevic
• iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability
  • From: customer service mailbox
• RE: Diebold Global Election Management System (GEMS) Backdoor
  • From: David Schwartz
• RE: Promiscuous email printing in Canon imageRunner
  • From: Jeff Bates
• [SECURITY] [DSA 553-1] New getmail packages fix root compromise
  • From: Martin Schulze
• CFMX vulnerability
  • From: Eric Lackey
• Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
  • From: Shawn McMahon
• TSLSA-2004-0051 - samba
  • From: Trustix Security Advisor
• Multiple Vulnerabilities in AJ-Fork
  • From: Ahmad Muammar
• SQL Injection vulnerability in bBlog 0.7.3
  • From: James McGlinn
• EEYE: RealPlayer pnen3260.dll Heap Overflow
  • From: Marc Maiffret
• Broadcast buffer-overflow in Vypress Messenger 3.5.1
  • From: Luigi Auriemma
• Re: Possible GDI Exploit Vector
  • From: Babar Shafiq Nazmi
• Re: cdrdao local root exploit
  • From: newbug Tseng
• Re: cdrecord local root exploit
  • From: Greg A. Woods
• MDKSA-2004:104 - Updated samba packages fix vulnerability
  • From: Mandrake Linux Security Team
• Oracle 9i Union Flaw
  • From: Brandon Petty
• [ GLSA 200410-01 ] sharutils: Buffer overflows in shar.c and unshar.c
  • From: Thierry Carrez
• Re: Promiscuous email printing in Canon imageRunner
  • From: Marco Ivaldi
• Re: Oracle 9i Union Flaw
  • From: Brandon Petty
• Re: cdrecord local root exploit
  • From: Jason T. Miller
• dbPowerAmp Buffer Overflow And Dos Vulnerabilities
  • From: GulfTech Security
• On Polymorphic Evasion
  • From: Phantasmal Phantasmagoria
• Security advisory - Xerces-C++ 2.5.0: Attribute blowup
  • From: Amit Klein (AKsecurity)
• [FLSA-2004:1733] Updated squirrelmail resolves security vulnerabilities
  • From: Dominic Hargreaves
• In-game format string in Judge Dredd vs. Death 1.01
  • From: Luigi Auriemma
• Re:2. Code execution in Icecast 2.0.1(exploit with shellcode)
  • From: me
• Re: cdrecord local root exploit
  • From: Solar Designer
• Re: Oracle 9i Union Flaw
  • From: Peter J. Holzer
• [SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free
  • From: Matt Zimmerman
• Buffer Overflow in Spider game
  • From: Security Team
• [LoWNOISE] IPSWITCH WhatsUp Gold 8.03 Remote fr33 exploit
  • From: ET LoWNOISE
• [SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
  • From: Martin Schulze
• [FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities
  • From: Marc Deslauriers
• [FLSA-2004:1325] Updated mod_python packages fix security vulnerability
  • From: Dominic Hargreaves
• FreeBSD Security Advisory FreeBSD-SA-04:15.syscons
  • From: FreeBSD Security Advisories
• Full path disclosure in PHP Links
  • From: Nikyt0x Argentina
• [FLSA-2004:1324] Updated libxml2 resolves security vulnerability
  • From: Marc Deslauriers
• [ GLSA 200410-02 ] Netpbm: Multiple temporary file issues
  • From: Thierry Carrez
• Re: Buffer Overflow in Spider game
  • From: Steve Kemp
• Patch available for critical IBM DB2 Universal Database flaws
  • From: NGSSoftware Insight Security Research
• SUSE Security Announcement: samba (SUSE-SA:2004:035)
  • From: Thomas Biege
• [security bulletin]SSRT4826 rev.0 Mozilla Application Suite for HP Tru64 UNIX Multiple Potential Security Vulnerabilities
  • From: Boren, Rich (SSRT)
• Re: EEYE: RealPlayer pnen3260.dll Heap Overflow
  • From: Chenghuai Lu
• Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug
  • From: Bipin Gautam
• Test your windows OS
  • From: Berend-Jan Wever
• Re: Full path disclosure in PHP Links
  • From: Scott T. Cameron
• [MAXPATROL Security Advisories] Cross site scripting in Invision Power Board
  • From: Alexander Antipov
• ERRATA: Potential Arbitrary File Access (CAN-2004-0815)
  • From: Gerald (Jerry) Carter
• Re: Buffer Overflow in Spider game
  • From: van Helsing
• Re: Full path disclosure in PHP Links - more
  • From: LSS Security
• Full path disclosure and sql injection on CubeCart 2.0.1
  • From: Pedro Sanches
• [Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal
  • From: Alexander Antipov
• GDI+ JPEG exploit
  • From: albatross
• Patch available for multiple high risk vulnerabilities in RealPlayer
  • From: NGSSoftware Insight Security Research
• SUSE Security Announcement: mozilla (SUSE-SA:2004:036)
  • From: Sebastian Krahmer
• Multiple vulnerabilities in BlackBoard
  • From: Lin Xiaofeng
• Re: [Full-Disclosure] iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability
  • From: 3APA3A
• [SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation
  • From: Martin Schulze
• [ GLSA 200410-04 ] PHP: Memory disclosure and arbitrary location file upload
  • From: Dan Margolis
• CodeCon 2005 Call for Papers
  • From: Len Sassaman
• Directory traversal in Tridcomm 1.3
  • From: Luigi Auriemma
• Latest Apple Sec update
  • From: Michael Bartosh
• [GoSecure Advisory] Neoteris IVE Vulnerability
  • From: Jian Hui Wang
• MDKSA-2004:105 - Updated xine-lib packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service
  • From: Martin Schulze
• Re: Multiple vulnerabilities in BlackBoard
  • From: Yves Goergen
• Patch available for high risk flaws in the AtHoc Toolbar
  • From: NGSSoftware Insight Security Research
• [Gosecure Adivsory] Neoteris IVE Vulnerability
  • From: Jian Hui Wang
• New Microsoft Security Response Center PGP Key [pgp]
  • From: Microsoft Security Response Center
• Re: Buffer Overflow in Spider game
  • From: Matt Zimmerman
• [HV-HIGH] MS Word multiple exceptions, at least one exploitable
  • From: vuln
• HTTP Response Splitting Vulnerability in Wordpress 1.2
  • From: Chaotic Evil
• [SECURITY] [DSA 600-1] New samba packages fix arbitrary file access
  • From: Martin Schulze
• [SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
  • From: Kurt Lieber
• Server crash in Flash Messaging 5.2.0g
  • From: Luigi Auriemma
• ASP.NET cannonicalization issue
  • From: Evans, Arian
• TSLSA-2004-0053 - cyrus-sasl
  • From: Trustix Security Advisor
• MDKSA-2004:106 - Updated cyrus-sasl packages fix local vulnerability
  • From: Mandrake Linux Security Team
• Limited \secure\ buffer-overflow in some old Monolith games
  • From: Luigi Auriemma
• [ GLSA 200410-06 ] CUPS: Leakage of sensitive information
  • From: Kurt Lieber
• [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board
  • From: Alexander Antipov
• [SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality
  • From: Martin Schulze
• Multiple vulnerabilities in ZanfiCmsLite
  • From: Lin Xiaofeng
• Micronet wireless broadband router SP916BM admin password reset when power off
  • From: MrJoe
• MonkeyShell: using XML-RPC for access to a remote shell
  • From: Abe Usher
• FW: problem in voip environment
  • From: Walton, John Michael (John)
• Microsoft cabarc directory traversal
  • From: Jelmer
• Insecure Default Service DACL's in Windows 2003
  • From: Ziots, Edward
• Regression in IE: Accessing remote/local content in IE (GM#009-IE)
  • From: GreyMagic Security
• Microsoft Internet Explorer Install Engine Control Buffer Overflow
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 563-2] New cyrus-sasl packages really fix arbitrary code execution
  • From: Martin Schulze
• UnixWare 7.1.3up UnixWare 7.1.4 : CUPS before 1.1.21 allows remote attackers to cause a denial of service
  • From: please_reply_to_security
• UnixWare 7.1.4 : Multiple Vulnerabilities in libpng
  • From: please_reply_to_security
• CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
  • From: CORE Security Technologies Advisories
• RE: Insecure Default Service DACL's in Windows 2003
  • From: Kurt Dillard
• Re: Regression in IE: Accessing remote/local content in IE (GM#009-IE)
  • From: Nick FitzGerald
• Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS
  • From: Amit Klein (AKsecurity)
• Reverse Engineering the First Pocket PC Trojan
  • From: kers0r
• [SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution
  • From: Martin Schulze
• MS October Security bulletins
  • From: albatross
• [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3.
  • From: Exoduks
• [SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
  • From: Martin Schulze
• XXS in fusetalk forum
  • From: Matthew Oyer
• XXS in SCT email client
  • From: Matthew Oyer
• [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss
  • From: vuln
• [FLSA-2004:2102] Updated samba packages fix security vulnerability
  • From: Dominic Hargreaves
• BindView Advisory: Memory Leak and DoS in NT4 RPC server
  • From: advisory
• ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer
  • From: ACROS Security
• [SECURITY] [DSA 565-1] New sox packages fix buffer overflow
  • From: Martin Schulze
• IT Underground Talks
  • From: Dave Aitel
• [ GLSA 200410-10 ] gettext: Insecure temporary file handling
  • From: Luke Macken
• EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
  • From: Derek Soeder
• Adobe acrobat / Adobe Reader 6 can read local files
  • From: Jelmer
• EEYE: Windows VDM #UD Local Privilege Escalation
  • From: Derek Soeder
• [ GLSA 200410-11 ] tiff: Buffer overflows in image decoding
  • From: Thierry Carrez
• [ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm
  • From: Luke Macken
• MSN Gaming Heartbeat Component Buffer Overflow
  • From: NGSSoftware Insight Security Research
• Format String Vulnerability in Valve's CS-Source
  • From: Some One
• Buffer Overflow In Microsoft Excel
  • From: Brett Moore
• SetWindowLong Shatter Attacks
  • From: Brett Moore
• [CLA-2004:872] Conectiva Security Announcement - cups
  • From: Conectiva Updates
• [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities
  • From: Luke Macken
• [FLSA-2004:1888] Updated mod_ssl package fixes Apache security vulnerabilities
  • From: Marc Deslauriers
• [CLA-2004:873] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [FLSA-2004:1833] Updated lha resolves security vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm
  • From: Martin Schulze
• [SECURITY] [DSA 566-1] New CUPS packages fix information leak
  • From: Martin Schulze
• [HV-MED] UPDATE: RIM Blackberry DoS, data loss
  • From: vuln
• Buffer-overflow in ShixxNOTE 6.net
  • From: Luigi Auriemma
• [FLSA-2004:1737] Updated httpd packages fix a mod_proxy security vulnerability
  • From: Marc Deslauriers
• CESA-2004-006: libtiff
  • From: chris
• 3COM Wireless router (3CRADSL72) information disclosure
  • From: Karb0nOxyde -
• New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: John Bissell
• ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response
  • From: ACROS Security
• ACROS Security: HTML Injection in JRun Management Console
  • From: ACROS Security
• ACROS Security: Session Fixation in JRun Management Console
  • From: ACROS Security
• UPDATE: Format String Vulnerability in Valve's CS-Source
  • From: Some One
• [OpenPKG-SA-2004.043] OpenPKG Security Advisory (tiff)
  • From: OpenPKG
• Re: Adobe acrobat / Adobe Reader 6 can read local files
  • From: Nick Leoncavallo
• [ GLSA 200410-10 ] gettext: Insecure temporary file handling
  • From: Luke Macken
• [ GLSA 200410-13 ] BNC: Input validation flaw
  • From: Thierry Carrez
• [FLSA-2004:2102] Updated samba packages fix security vulnerability [updated]
  • From: Dominic Hargreaves
• [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl)
  • From: OpenPKG
• a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3
  • From: keitel andres ortega
• TSLSA-2004-0054 - multi
  • From: Trustix Security Advisor
• Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: americanidiot
• Re: EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
  • From: Bipin Gautam
• Re: Insecure Default Service DACL's in Windows 2003
  • From: Jean-Baptiste Marchand
• Microsoft Windows NetDDE Service Buffer Overflow
  • From: NGSSoftware Insight Security Research
• Multiple Cross Site Scripting Vulnerabilities in FuseTalk
  • From: steven
• Re: Format String Vulnerability in Valve's CS-Source
  • From: Luigi Auriemma
• ProFTPD 1.2.x remote users enumeration bug
  • From: LSS Security
• Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: Daniel Milisic
• Directory traversal in Yak! 2.1.2
  • From: Luigi Auriemma
• Eudora 6.2.0.7 attachment spoof
  • From: Paul Szabo
• Clientexec Billing Software
  • From: bugtraq
• Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
  • From: wirepair
• [SECURITY] [DSA 567-1] New libtiff packages fix remote code execution
  • From: Martin Schulze
• More details on BID 11408 (3com 3cradsl72 wireless router)
  • From: Ivan Casado
• [IE 6 SP2] Possible URL Spoofing
  • From: Andrew Hunter
• RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Polazzo Justin
• Re: Adobe acrobat / Adobe Reader 6 can read local files
  • From: Shannon Eric Peevey
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: SysAdminKC
• Multiple Vulnerabilities in CoolPHP
  • From: R00tCr4ck
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: marco correnti
• Re: Format String Vulnerability in Valve's CS-Source
  • From: Some One
• Re: 3COM Wireless router (3CRADSL72) information disclosure
  • From: mccauley@xxxxxxx
• ms04-031 pre-auth ??
  • From: Sinan Eren
• Web browsers - a mini-farce
  • From: Michal Zalewski
• IISShield and ASP.NET canonicalization
  • From: Tiago Halm
• cPanel hardlink backup issue
  • From: Karol Więsek
• cPanel hardlink chown issue
  • From: Karol Więsek
• cPanel symlink chmod issue
  • From: Karol Więsek
• Multiple vulnerabilities in Sage Saleslogix
  • From: Carl
• iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability
  • From: customer service mailbox
• Re: [IE 6 SP2] Possible URL Spoofing
  • From: http-equiv@xxxxxxxxxx
• Re: Directory traversal in Yak! 2.1.2
  • From: bil
• Re: EEYE: Windows VDM #UD Local Privilege Escalation
  • From: Jim Hatfield
• Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: secure
• [SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service
  • From: Martin Schulze
• IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS
  • From: Juan C Calderon
• [FLSA-2004:2072] Updated CUPS packages fix security vulnerability
  • From: Marc Deslauriers
• [FLSA-2004:1237] Updated gaim package resolves security issues
  • From: Marc Deslauriers
• [Powie's PSCRIPT Forum] Multiple SQL-Injection Vulnerabilities
  • From: Christoph Jeschke
• [SECURITY] [DSA 568-1] New cyrus-sasl-mit packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service
  • From: Martin Schulze
• Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS
  • From: Juan C Calderon
• ProFTPD 1.2.x remote users enumeration bug - correction
  • From: LSS Security
• [ GLSA 200410-15 ] Squid: Remote DoS vulnerability
  • From: Luke Macken
• Re: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Jay Calvert
• Mutiple AntiVirus Reserved Device Name Handling Vulnerability
  • From: Sowhat .
• apexec.pl is still vulnerable against Directory Traversal.
  • From: Zero_X www.lobnan.de Team
• RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
  • From: Simon Zuckerbraun
• [ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system
  • From: Thierry Carrez
• Re: [IE 6 SP2] Possible URL Spoofing
  • From: Paul Kurczaba
• [CLA-2004:875] Conectiva Security Announcement - gtk+
  • From: Conectiva Updates
• [FLSA-2004:1804] Updated kernel resolves security vulnerabilities
  • From: Dominic Hargreaves
• UnixWare 7.1.4 UnixWare 7.1.3 : The error handling in the inflate and inflateBack functions in ZLib compression library allows local users to cause a denial of service
  • From: please_reply_to_security
• RE: [IE 6 SP2] Possible URL Spoofing
  • From: Dror Shalev
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulnerabilitys in asycpict.dll 1.0 Advisory
  • From: Chris Norton
• avoiding stackguard
  • From: vallez
• Multiple AntiVirus Reserved Device Name Handling Vulnerability
  • From: Sowhat .
• Broadcast crash in Vypress Tonecast 1.3
  • From: Luigi Auriemma
• Google Script Insertion Exploit
  • From: Jim Ley
• MDKSA-2004:109 - Updated libtiff packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Buffer-overflow in Age of Sail II 1.04.151
  • From: Luigi Auriemma
• [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow (PoC)
  • From: houseofdabus HOD
• RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: Thor Larholm
• How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: http-equiv@xxxxxxxxxx
• [SECURITY] [DSA 571-1] New libpng3 packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Norton AntiVirus 2004 Script Blocking Failure (Includes PoC and rant)
  • From: secure
• MDKSA-2004:108 - Updated cvs packages fix vulnerability
  • From: Mandrake Linux Security Team
• mpg123 "getauthfromurl" buffer overflow
  • From: Carlos Barros
• MDKSA-2004:107 - Updated mozilla packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brian Gallagher
• NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability
  • From: NSFOCUS Security Team
• CAN-2004-0814: Linux terminal layer races
  • From: Alan Cox
• SuSE Security Announcement: kernel (SUSE-SA:2004:037)
  • From: Marcus Meissner
• [SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface
  • From: Martin Schulze
• SQL Injection in UBB.threads 3.4.x
  • From: Florian Rock
• MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:110 - Updated gaim packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) in computed field/text, allowing XSS (Risk increased)
  • From: Juan C Calderon
• HTTP Response Splitting in Serendipity 0.7-beta4
  • From: Chaotic Evil
• Re: Critical Vulnerability in Altiris Deployment Server architecture
  • From: KF_lists
• MDKSA-2004:112 - Updated squid packages fix SNMP processing vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200410-21 ] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
  • From: Kurt Lieber
• [KDE security advisory] Multiple integer overflows in kpdf
  • From: Dirk Mueller
• [HV-LOW] Unsafe WAV header handling can cause DoS on Windows
  • From: vuln
• [Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access
  • From: Boren, Rich (SSRT)
• MDKSA-2004:113 - Updated xpdf packages fix vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:115 - Updated kdegraphics packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• J2ME security vulnerabilities
  • From: Adam Gowdiak
• [Fwd: Altiris Carbon Copy Remote Control local SYSTEM exploitation.]
  • From: KF_lists
• SuSE Security Announcement: libtiff (SUSE-SA:2004:038)
  • From: Marcus Meissner
• MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities
  • From: Mandrake Linux Security Team
• Hack Dot AE
  • From: Spy Hat
• Re: avoiding stackguard
  • From: Crispin Cowan
• iDEFENSE Security Advisory XX.XX.04 - Novell SuSe Linux LibTIFF Heap Overflow Vulnerability
  • From: customer service mailbox
• [CLA-2004:877] Conectiva Security Announcement - mozilla
  • From: Conectiva Updates
• Is Windows up to snuff for running our world?
  • From: Richard M. Smith
• AOL Journals BlogID incrementing discloses account names and e-mail
  • From: Steven
• Windows DoS in certain pGina configurations
  • From: Steven
• Norton AntiVirus 2004/2005 Script Blocking Redux
  • From: Daniel Milisic
• Re: Full path disclosure and sql injection on CubeCart 2.0.1
  • From: sculptex
• windows 2000 server terminal server denial of service
  • From: Nick Caramella
• Ability FTP Server 2.34 Buffer Overflow Exploit
  • From: Jérôme
• dwc_articles possible sql injection
  • From: Rene
• rssh: pizzacode security alert
  • From: Derek Martin
• Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michal Zalewski
• Re: Google Script Insertion Exploit
  • From: Jérôme
• python does mangleme (with IE bugs!)
  • From: ned
• [BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2
  • From: David Miller
• STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
  • From: advisory
• Re: Is Windows up to snuff for running our world?
  • From: Thor
• Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Atom 'Smasher'
• Re: [Full-Disclosure] python does mangleme (with IE bugs!)
  • From: Berend-Jan Wever
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• Fake RedHat - Fedora Security Patch / Trojan Source Code & Analysis
  • From: K-OTiK Security
• Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: ducch apple
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: gabrield89
• Re: [Full-Disclosure] Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Daniel Veditz
• Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2
  • From: michael evanchik
• [CLA-2004:878] Conectiva Security Announcement - zlib
  • From: Conectiva Updates
• Bug in hotmail
  • From: security
• Re: CAN-2004-0814: Linux terminal layer races
  • From: Pavel Kankovsky
• RE: Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brooks, Shane
• Two Vulnerabilities in OpenWFE Web Client
  • From: Joxean Koret
• libxml2 remote buffer overflows (not in xml parsing code though)
  • From: infamous41md
• SUSE Security Announcement: xpdf, gpdf, kpdf, pdftohtml, cups (SUSE-SA:2004:039)
  • From: Thomas Biege
• libgd integer overflow
  • From: infamous41md
• OpenSSL 0.9.7e released (fwd from mark@openssl.org)
  • From: je
• MailCarrier 2.51 SMTP server Buffer Overflow [PoC included]
  • From: Jérôme
• [ GLSA 200410-24 ] MIT krb5: Insecure temporary file use in send-pr.sh
  • From: Thierry Carrez
• pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security
  • From: Dragos Ruiu
• [ GLSA 200410-26 ] socat: Format string vulnerability
  • From: Luke Macken
• inetutils tftp client, DNS resolving bofs
  • From: infamous41md
• Hawking Technologies HAR11A router considered insecure
  • From: Marcus Garvey
• pppd out of bounds memory access, possible DOS
  • From: infamous41md
• [ GLSA 200410-25 ] Netatalk: Insecure tempfile handling in etc2ps.sh
  • From: Luke Macken
• [ GLSA 200410-23 ] Gaim: Multiple vulnerabilities
  • From: Matthias Geerdsen
• [ GLSA 200410-22 ] MySQL: Multiple vulnerabilities
  • From: Thierry Carrez
• wvtfpd remote root heap overflow
  • From: infamous41md
• Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Valdis . Kletnieks
• zgv image viewing heap overflows
  • From: infamous41md
• Rendering large binary file as HTML makes Mozilla Firefox stop responding
  • From: Peter Kruse
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• PTms04-030
  • From: pigrelax
• debian dhcpd, old format string bug
  • From: infamous41md
• MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86
  • From: Ramon de Carvalho Valle
• PuTTY SSH client vulnerability
  • From: Anatole Shaw
• [CLA-2004:879] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• Crashs in Master of Orion III 1.2.5
  • From: Luigi Auriemma
• [CLA-2004:880] Conectiva Security Announcement - foomatic-filters
  • From: Conectiva Updates
• iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability
  • From: customer service mailbox
• [ GLSA 200410-29 ] PuTTY: Pre-authentication buffer overflow
  • From: Sune Kloppenborg Jeppesen
• High Risk Vulnerability in Quicktime for Windows
  • From: NGSSoftware Insight Security Research
• EEYE: RealPlayer Zipped Skin File Buffer Overflow
  • From: Marc Maiffret
• Multiple Vulnerabilites in Quake II Server
  • From: Richard Stanway
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• [security bulletin] SSRT3526 Serviceguard potential increase in privilege
  • From: Boren, Rich (SSRT)
• High Risk Vulnerability in RealPlayer
  • From: NGSSoftware Insight Security Research
• Presentation: Bypassing client application protection techniques with notepad
  • From: 3APA3A
• [SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal
  • From: Martin Schulze
• [SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
  • From: Martin Schulze
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: MCMuir
• Re: zgv image viewing heap overflows
  • From: Chris Frey
• PHP4 cURL functions bypass open_basedir
  • From: FraMe
• Re: Some Voters Say Machines Failed, Incorrect Choices Appear on Screens (fwd)
  • From: Paul Schmehl
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• [USN-5-1] gettext vulnerabilities
  • From: Martin Pitt
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Wojcik
• [USN-4-1] Standard C library script vulnerabilities
  • From: Martin Pitt
• [FLSA-2004:2089] Updated mozilla packages fix security vulnerabilities
  • From: Dominic Hargreaves
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• [USN-9-1] tetex-bin vulnerabilities
  • From: Martin Pitt
• [ GLSA 200410-28 ] rssh: Format string vulnerability
  • From: Thierry Carrez
• [USN-7-1] imagemagick vulnerability
  • From: Martin Pitt
• [USN-8-1] gaim vulnerabilities
  • From: Martin Pitt
• New URL spoofing bug in Microsoft Internet Explorer
  • From: 0-1-2-3
• [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
  • From: Thierry Carrez
• Re: debian dhcpd, old format string bug
  • From: Tarragon Allen
• Re: Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: Crispin Cowan
• [USN-3-1] GhostScript utility script vulnerabilities
  • From: Martin Pitt
• [USN-6-1] postgresql contributed script vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
  • From: Martin Schulze
• Re: Mozilla Firefox (tested on 0.9.3) html-code crash.
  • From: Michal Zalewski
• [SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200410-31 ] Archive::Zip: Virus detection evasion
  • From: Thierry Carrez
• [USN-11-1] libgd2 vulnerabilities
  • From: Martin Pitt
• local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Larry Cashdollar
• Re: debian dhcpd, old format string bug
  • From: infamous41md
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Larry Seltzer
• Re: libgd integer overflow
  • From: Richard Dawe
• RE: libgd integer overflow
  • From: infamous41md
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Tim Newsham
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Valdis . Kletnieks
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Tim Newsham
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Michael Shigorin
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: infamous41md
• RE: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: David Brodbeck
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: Christopher J. Pilkington
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: André Malo
• [OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
  • From: OpenPKG
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: Jérôme
• [OpenPKG-SA-2004.047] OpenPKG Security Advisory (apache)
  • From: OpenPKG
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Chris Paget
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: 0-1-2-3
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Michael Engert
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• [USN-12-1] ppp Denial of Service
  • From: Martin Pitt
• [OpenPKG-SA-2004.048] OpenPKG Security Advisory (squid)
  • From: OpenPKG
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Larry Seltzer
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: http-equiv@xxxxxxxxxx