Mail Index

• Thread Index

• New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Anton R Ivanov
• XDICT Buffer OverRun Vulnerability,funny :-)
  • From: Sowhat .
• [SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Critical Vulnerability in Altiris Deployment Server architecture
  • From: Brian Gallagher
• p h i s h i n g p h o r p h u n p h o r p h u q u e s a k e
  • From: http-equiv@xxxxxxxxxx
• [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability
  • From: Luke Macken
• [USN-13-1] groff utility vulnerability
  • From: Martin Pitt
• [USN-10-1] XML library vulnerabilities
  • From: Martin Pitt
• [USN-14-1] xpdf vulnerabilities
  • From: Martin Pitt
• [OpenPKG-SA-2004.045] OpenPKG Security Advisory (mysql)
  • From: OpenPKG
• [SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
  • From: Martin Schulze
• TSLSA-2004-0055 - multi
  • From: Trustix Security Advisor
• [OpenPKG-SA-2004.050] OpenPKG Security Advisory (libxml)
  • From: OpenPKG
• [OpenPKG-SA-2004.049] OpenPKG Security Advisory (gd)
  • From: OpenPKG
• Safari vulnerable to URL spoofing
  • From: Gilbert Verdian
• Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities
  • From: roozbeh afrasiabi
• [ GLSA 200411-02 ] Cherokee: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [CLA-2004:881] Conectiva Security Announcement - rsync
  • From: Conectiva Updates
• Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?
  • From: Henning Brauer
• [USN-15-1] lvm10 vulnerability
  • From: Martin Pitt
• [ GLSA 200411-03 ] Apache 1.3: Buffer overflow vulnerability in mod_include
  • From: Matthias Geerdsen
• Medium Risk Vulnerability in WinRAR
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
  • From: Martin Schulze
• Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication
  • From: Cisco Systems Product Security Incident Response Team
• Exploiting default exception handler to increase exploit stability on win32
  • From: tal zeltzer
• zlib 1.2.2 released
  • From: Mark Adler
• Re: [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability
  • From: Paul Mackerras
• MDKSA-2004:117 - Updated gaim packages fix vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200411-04 ] Speedtouch USB driver: Privilege escalation vulnerability
  • From: Luke Macken
• MDKSA-2004:118 - Updated perl-Archive-Zip packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:119 - Updated MySQL packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:120 - Updated mpg123 packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:121 - Updated netatalk packages fix temporary file vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:122 - Updated mod_ssl packages fix information disclosure vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:123 - Updated perl-MIME-tools packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Crispin Cowan
• zlib 1.2.2 released
  • From: Mark Adler
• MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (fwd)
  • From: Michal Zalewski
• Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: morning_wood
• Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: Elia Florio
• [SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution
  • From: Martin Schulze
• Re: debian dhcpd, old format string bug
  • From: Javier Fernandez-Sanguino
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Jeff Williams
• Multiple Vulnerabilities in Web Forums Server
  • From: R00tCr4ck
• Microsoft ISA Server Authentication Bypassing
  • From: Jérôme
• URL spoofing bug (with iframes) in Microsoft Internet Explorer (11/02/2004)
  • From: Benjamin Tobias Franz
• [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM
  • From: Hat-Squad Security Team
• RE: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann (NGS)
• Re: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Nicolas Gregoire
• [CLA-2004:882] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• [USN-16-1] perl vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory
  • From: Martin Schulze
• [ GLSA 200411-06 ] MIME-tools: Virus detection evasion
  • From: Thierry Carrez
• [ GLSA 200411-05 ] libxml2: Remotely exploitable buffer overflow
  • From: Thierry Carrez
• [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability
  • From: Thierry Carrez
• ERRATA: [ GLSA 200411-01 ] ppp: No denial of service vulnerability
  • From: Luke Macken
• [CLA-2004:885] Conectiva Security Announcement - apache
  • From: Conectiva Updates
• [HV-MED] Zip/Linux long path buffer overflow
  • From: vuln
• [CLA-2004:884] Conectiva Security Announcement - gaim
  • From: Conectiva Updates
• [CLA-2004:883] Conectiva Security Announcement - subversion
  • From: Conectiva Updates
• [SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability
  • From: Martin Schulze
• SSC Advisory TSA-052 (Callwave.com)
  • From: Secure Science Corporation Advisory Notice
• [ GLSA 200411-09 ] shadow: Unauthorized modification of account information
  • From: Matthias Geerdsen
• [ GLSA 200411-08 ] GD: Integer overflow
  • From: Thierry Carrez
• SSC Advisory TSA-052 (Callwave.com)
  • From: Secure Science Corporation Advisory Notice
• Re: [ GLSA 200411-09 ] shadow: Unauthorized modification of account information
  • From: Solar Designer
• MDKSA-2004:124 - Updated xorg-x11 packages fix libXpm overflow vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:125 - Updated iptables packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:126 - Updated shadow-utils packages fix security bypass vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:127 - Updated libxml and libxml2 packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• RE: New Whitepaper - "Second-order Code Injection Attacks"
  • From: Gunter Ollmann (NGS)
• Re: debian dhcpd, old format string bug
  • From: Martin Schulze
• Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems.
  • From: ShineShadow
• [USN-18-1] zip vulnerability
  • From: Martin Pitt
• FW: Hacker Group back again, this time claiming to have source code to Cisco PIX firewall
  • From: Graham, Brian
• Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow
  • From: Martin Pitt
• [FLSA-2004:2076] Updated foomatic package fixes security vulnerability
  • From: Marc Deslauriers
• [USN-17-1] passwd vulnerability
  • From: Martin Pitt
• SSC Advisory TSA-053 (Ureach.com)
  • From: Secure Science Corporation Advisory Notice
• TSLSA-2004-0056 - apache
  • From: Trustix Security Advisor
• Re: [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow
  • From: Josh Bressers
• Making distinctions between similar-looking vulnerabilities
  • From: Steven M. Christey
• In-game format string bug in the Lithtech engine
  • From: Luigi Auriemma
• [SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour
  • From: Martin Schulze
• UPDATE: [ GLSA 200410-20 ] Xpdf, CUPS: Multiple integer overflows
  • From: Thierry Carrez
• UPDATE: [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
  • From: Thierry Carrez
• [ GLSA 200411-10 ] Gallery: Cross-site scripting vulnerability
  • From: Luke Macken
• Resources consumption in 602 Lan Suite 2004.0.04.0909
  • From: Luigi Auriemma
• [ GLSA 200411-11 ] ImageMagick: EXIF buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [USN-19-1] squid vulnerabilities
  • From: Martin Pitt
• [ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Michal Zalewski
• MSIE src&name property disclosure
  • From: Berend-Jan Wever
• [SECURITY] [DSA 587-1] New freeam packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7
  • From: Gerald (Jerry) Carter
• Microsoft Internet Explorer permits to examine the existence of local files
  • From: Benjamin Tobias Franz
• DOS against Java JNDI/DNS
  • From: Kurt Huwig
• [SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files
  • From: Martin Schulze
• Offline WPA-PSK auditing tool (coWPAtty)
  • From: Joshua Wright
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Paul Schmehl
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Dave Aitel
• Re: [Full-Disclosure] MSIE src&name property disclosure
  • From: Michal Zalewski
• [ GLSA 200411-15 ] OpenSSL, Groff: Insecure tempfile handling
  • From: Thierry Carrez
• up-imapproxy DoS vulnerabilities
  • From: Timo Sirainen
• [ GLSA 200411-12 ] zgv: Multiple buffer overflows
  • From: Luke Macken
• [ GLSA 200411-14 ] Kaffeine, gxine: Remotely exploitable buffer overflow
  • From: Luke Macken
• [HV-LOW] Symantec LiveUpdate issues may cause DoS
  • From: vuln
• [SECURITY] [DSA 586-1] New ruby packages fix denial of service
  • From: Martin Schulze
• Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
  • From: Menashe Eliezer
• [CLA-2004:888] Conectiva Security Announcement - libtiff3
  • From: Conectiva Updates
• [CLA-2004:886] Conectiva Security Announcement - xpdf
  • From: Conectiva Updates
• MDKSA-2004:128 - Updated ruby packages fix remote DoS vulnerability
  • From: Mandrake Linux Security Team
• Evidence Mounts that the Vote Was Hacked
  • From: Atom 'Smasher'
• BoF in Windows 2000: ddeshare.exe
  • From: Jack C
• Vulnerabilities in JAF CMS
  • From: [ echo|staff ]@securityfocus.com@www.securityfocus.com
• [SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution
  • From: Martin Schulze
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: roozbeh afrasiabi
• [USN-20-1] Ruby CGI module vulnerability
  • From: Martin Pitt
• Re: [HV-LOW] Symantec LiveUpdate issues may cause DoS
  • From: secure
• Re: BoF in Windows 2000: ddeshare.exe
  • From: Berend-Jan Wever
• Security Contact for T-Mobile?
  • From: Jake Appelbaum
• [SECURITY] [DSA 589-1] New libgd1 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 591-1] New libgd2 packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Update: Web browsers - a mini-farce (MSIE gives in)
  • From: Heikki Kortti
• EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service
  • From: Marc Maiffret
• [ GLSA 200411-17 ] mtink: Insecure tempfile handling
  • From: Sune Kloppenborg Jeppesen
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jay D. Dyson
• Re: BoF in Windows 2000: ddeshare.exe
  • From: Valdis . Kletnieks
• [ GLSA 200411-16 ] zip: Path name buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Linux ELF loader vulnerabilities
  • From: Paul Starzetz
• Multiple Vulnerabilities in WebCalendar
  • From: Joxean Koret
• Nortel Networks Contivity VPN Client information leakage vulnerability
  • From: Network Intelligence (I) Pvt. Ltd.
• BNC 2.8.9 remote buffer overflow
  • From: LSS Security
• [SquirrelMail Security Advisory] Cross Site Scripting in encoded text
  • From: Jonathan Angliss
• Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service
  • From: Cisco Systems Product Security Incident Response Team
• Re: BoF in Windows 2000: ddeshare.exe
  • From: J. S. Connell
• Security Contact Info for IPSWITCH
  • From: Tom
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jay D. Dyson
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jei
• 04WebServer Three Vulnerabilities
  • From: Jérôme
• Unsecure Ftpd on HP PSC 2510 Printer
  • From: Justin Rush
• Re: Nortel Networks Contivity VPN Client information leakage vulnerability
  • From: Quincy Jackson
• Re: Evidence Mounts that the Vote Was Hacked
  • From: bkfsec
• Hotfoon Ver 4.0 Highv Risk
  • From: saudi linux
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Rick Crelia
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Atom 'Smasher'
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Peter Conrad
• Re: Linux ELF loader vulnerabilities
  • From: Ted Percival
• SQL injection in vBulletin forums (last10.php)
  • From: Dr. Death
• Re: [Full-Disclosure] Re: Linux ELF loader vulnerabilities
  • From: Jirka Kosina
• [ GLSA 200411-20 ] ez-ipupdate: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections
  • From: Cisco Systems Product Security Incident Response Team
• [CLA-2004:889] Conectiva Security Announcement - sasl2
  • From: Conectiva Updates
• Zone Labs IMsecure Active Link Filter Bypass
  • From: Kurczaba Associates advisories
• [ GLSA 200411-19 ] Pavuk: Multiple buffer overflows
  • From: Luke Macken
• [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]
  • From: Janek Vind
• [ GLSA 200411-18 ] Apache 2.0: Denial of Service by memory consumption
  • From: Matthias Geerdsen
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: http-equiv@xxxxxxxxxx
• [ GLSA 200411-22 ] Davfs2, lvm-user: Insecure tempfile handling
  • From: Sune Kloppenborg Jeppesen
• [USN-21-1] libgd vulnerabilities
  • From: Martin Pitt
• security hole (http response splitting) in phpwebsite
  • From: Maestro De-Seguridad
• [USN-22-1] samba vulnerability
  • From: Martin Pitt
• RE: Norton AntiVirus Script Blocking Exploit -- Symantec's response
  • From: Daniel Milisic
• RE: Evidence Mounts that the Vote Was Hacked
  • From: David Hayden
• Re: Linux ELF loader vulnerabilities
  • From: Pavel Kankovsky
• Re: Evidence Mounts that the Vote Was Hacked
  • From: Jake Appelbaum
• Contact in HP related to OpenView / Coda
  • From: Noam Rathaus
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Unofficial Internet Explorer FRAME/IFRAME fix
  • From: Thomas Rogg
• [ GLSA 200411-21 ] Samba: Remote Denial of Service
  • From: Matthias Geerdsen
• [USN-23-1] apache2 vulnerability
  • From: Martin Pitt
• [USN-24-1] openssl script vulnerability
  • From: Martin Pitt
• Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: Gregory Duchemin
• [SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability
  • From: Martin Schulze
• Re: Linux ELF loader vulnerabilities
  • From: Jirka Kosina
• Vulnerability not with vBulletin
  • From: Kier Darby
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: KF_lists
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: KF_lists
• Re: Unsecure Ftpd on HP PSC 2510 Printer
  • From: Lawrence MacIntyre
• Sudo version 1.6.8p2 now available (fwd)
  • From: je
• Crash in Secure Network Messenger 1.4.2
  • From: Luigi Auriemma
• SQL Injection in phpBT (bug.php)
  • From: jessica soules
• phpBB Code EXEC (v2.0.10)
  • From: jessica soules
• Eudora 6.2 attachment spoof
  • From: Paul Szabo
• TWiki search function allows arbitrary shell command execution
  • From: Hans Ulrich Niedermann
• IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command
  • From: Jérôme
• SQL Injection in phpBT (bug.php - Add)
  • From: Jérôme
• SQL Injection in phpBT (bug.php) add project
  • From: jessica soules
• Multiple XSS holes in TheFaceBook
  • From: Alex Lanstein
• Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: 3APA3A
• Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems
  • From: Gregory Duchemin
• Format string bug in Army Men RTS
  • From: Luigi Auriemma
• [SNS Advisory No.79] A Possibility of Cookie Overwrite in Microsoft Internet Explorer
  • From: Jérôme
• Multiple vulnerabilities in Hired Team: Trial (Shine engine)
  • From: Luigi Auriemma
• Re: 04WebServer Three Vulnerabilities
  • From: chewkeong
• Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow
  • From: Stefan Esser
• XSS in TheFaceBook round 2
  • From: Alex Lanstein
• iDEFENSE Security Advisory 11.15.04: Multiple Security Vulnerabilities in Fcron
  • From: customer service mailbox
• [SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd
  • From: Gerald (Jerry) Carter
• SUSE Security Announcement: samba (SUSE-SA:2004:040)
  • From: Marcus Meissner
• [USN-25-1] libgd2 vulnerability
  • From: Martin Pitt
• Re: Crash in Secure Network Messenger 1.4.2
  • From: r`Futile
• Google Desktop Search ignores Preferences
  • From: Elliott Bäck
• Skype callto:// BoF technical details
  • From: Berend-Jan Wever
• [SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution
  • From: Martin Schulze
• Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution
  • From: Florian Weimer
• Flaws in SP2 security features, part II
  • From: Juergen Schmidt
• [waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]
  • From: Janek Vind
• TSLSA-2004-0058 - multi
  • From: Trustix Security Advisor
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: q q
• [ GLSA 200411-24 ] BNC: Buffer overflow vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Skype callto:// BoF technical details
  • From: Fabian Becker
• Airport x-ray software creating images of phantom weapons?
  • From: Jason Coombs
• Re: Skype callto:// BoF technical details
  • From: Berend-Jan Wever
• [ GLSA 200411-23 ] Ruby: Denial of Service issue
  • From: Thierry Carrez
• [SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200411-25 ] SquirrelMail: Encoded text XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: New URL spoofing bug in Microsoft Internet Explorer
  • From: GuidoZ
• SUSE Security Announcement: xshared, XFree86-libs, xorg-x11-libs (SUSE-SA:2004:041)
  • From: Thomas Biege
• MDKSA-2004:135 - Updated apache2 packages fix request DoS
  • From: Mandrake Linux Security Team
• [USN-26-1] bogofilter vulnerability
  • From: Martin Pitt
• [USN-27-1] libxpm4 vulnerability
  • From: Martin Pitt
• Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities
  • From: Stefan Esser
• MDKSA-2004:132 - Updated gd packages fix integer overflows
  • From: Mandrake Linux Security Team
• MDKSA-2004:134 - Updated apache packages fix buffer overflow in mod_include
  • From: Mandrake Linux Security Team
• [USN-28-1] sudo vulnerability
  • From: Martin Pitt
• RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: rexolab
• [ GLSA 200411-26 ] GIMPS, SETI@home, ChessBrain: Insecure installation
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2004:133 - Updated sudo packages fix vulnerability
  • From: Mandrake Linux Security Team
• RE: New URL spoofing bug in Microsoft Internet Explorer
  • From: Michael Silk
• Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Jerome ATHIAS
• Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: Hans-Bernhard Broeker
• FreeBSD Security Advisory FreeBSD-SA-04:16.fetch
  • From: FreeBSD Security Advisories
• EXEC exploit in phpBB - fix
  • From: Paul S. Owen
• [MaxPatrol] SQL-injection in Invision Power Board 2.x
  • From: Alexander Anisimov
• AppServ 2.5.x and Prior Exploit
  • From: saudi linux
• [CLA-2004:892] Conectiva Security Announcement - MySQL
  • From: Conectiva Updates
• Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Rafael San Miguel Carrasco
• Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.
  • From: Reed Arvin
• [USN-29-1] samba vulnerability
  • From: Martin Pitt
• Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.)
  • From: Robert Hetzler
• [ GLSA 200411-27 ] Fcron: Multiple vulnerabilities
  • From: Luke Macken
• [USN-30-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [CLA-2004:890] Conectiva Security Announcement - libxml2
  • From: Conectiva Updates
• RE: EXEC exploit in phpBB - fix
  • From: Ron Brinker
• A Brief Analysis of Bofra/MyDoom.AG/AH
  • From: Bryan Burns
• Apache 2.0.52 DoS Exploit v2
  • From: Daniel Guido
• Inofficial updates to 758884/NISCC/DNS
  • From: Roy Arends
• Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.
  • From: rexolab
• Privilege escalation in Mailtraq Version 2.6.1.1677.
  • From: Reed Arvin
• Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues
  • From: advisories
• SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: Jérôme ATHIAS
• Zone Labs Ad-Blocking Instability
  • From: Nicolas Robillard
• Java Vulnerabilities in Opera 7.54
  • From: Marc Schoenefeld
• Zone Labs Security Advisory: Ad-Blocking Instability
  • From: Zone Labs Product Security
• EXEC exploit in phpBB - new release
  • From: Paul S. Owen
• Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).
  • From: Reed Arvin
• MDKSA-2004:136 - Updated samba packages fix remote vulnerability
  • From: Mandrake Linux Security Team
• SecurityForest - Public Release #1
  • From: loni
• Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue
  • From: advisories
• Addendum, recent Linux <= 2.4.27 vulnerabilities
  • From: Paul Starzetz
• [ GLSA 200411-28 ] X.Org, XFree86: libXpm vulnerabilities
  • From: Thierry Carrez
• FreeBSD Security Advisory FreeBSD-SA-04:16.fetch
  • From: security-advisories
• Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity...
  • From: K-OTiK Security
• [ GLSA 200411-29 ] unarj: Long filenames buffer overflow and a path traversal vulnerability
  • From: Thierry Carrez
• TWiki exploit (search.pm / CAN-2004-1037)
  • From: Roman Medina-Heigl Hernandez
• Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: security curmudgeon
• IpbProArace 2.5.x SQL injection.
  • From: axl daivy
• [ECL] WCI TC-IDE embedded linux vulnerabilities
  • From: ECL team
• Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit
  • From: Jerome ATHIAS
• CoffeeCup FTP Clients Buffer Overflow Vulnerability
  • From: Komrade
• TSLSA-2004-0061 - multi
  • From: Trustix Security Advisor
• WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability
  • From: Komrade
• Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Broadcast client crash in Halo 1.05
  • From: Luigi Auriemma
• Re: Changes to the filesystem while find is running - comments?
  • From: Dmitry V. Levin
• GFHost PHP GMail remote command execution exploit that achieves webserver id privileges
  • From: Jerome ATHIAS
• Router ZyXEL Prestige 650 HW http remote admin.
  • From: José
• PHPKIT SQL Injection, XSS
  • From: Steve
• iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrary Package Access Vulnerability
  • From: customer service mailbox
• [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: chewkeong
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• Hardware support for XP SP2 DEP not enabled by default ?
  • From: Nicolas RUFF
• Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities
  • From: Stefan Esser
• Winamp - Buffer Overflow In IN_CDDA.dll
  • From: Brett Moore
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• [ GLSA 200411-30 ] pdftohtml: Vulnerabilities in included Xpdf
  • From: Thierry Carrez
• [ GLSA 200411-31 ] ProZilla: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• echalk vuln
  • From: kevin anonymous
• Fotolog.net cross-site scripting vulnerabilities [RLSA_05-2004]
  • From: Jerome ATHIAS
• IPFront - Release
  • From: Hernan Racciatti
• RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability
  • From: Sherlock, Nathan
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• Broadcast memory corruption in Soldier of Fortune II 1.03
  • From: Luigi Auriemma
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• Re: Changes to the filesystem while find is running - comments?
  • From: Paul Szabo
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability
  • From: Randal, Phil
• Sun Java Plugin arbitrary package access vulnerability
  • From: Jouko Pynnonen
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• [CLA-2004:894] Conectiva Security Announcement - shadow-utils
  • From: Conectiva Updates
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Ken S
• Windows Mobile Pocket PC Security
  • From: kers0r
• Incorrect reporting of the Bofra/The Register exploit
  • From: matt
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Hugo van der Kooij
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• SecureCRT - Remote Command Execution
  • From: Brett Moore
• MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities
  • From: Mandrake Linux Security Team
• [CLA-2004:896] Conectiva Security Announcement - bugzilla
  • From: Conectiva Updates
• Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: dullien
• STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability
  • From: advisory
• Re: Incorrect reporting of the Bofra/The Register exploit
  • From: Florian Laws
• [SECURITY] [DSA 596-1] New sudo packages fix privilege escalation
  • From: Martin Schulze
• Re: Changes to the filesystem while find is running - comments?
  • From: Martin Buchholz
• [SECURITY] [DSA 596-2] New sudo packages removes debug output
  • From: Martin Schulze
• Re: Changes to the filesystem while find is running - comments?
  • From: Casper . Dik
• Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11
  • From: Luigi Auriemma
• [SECURITY] [DSA 595-1] New bnc packages arbitrary code execution
  • From: Martin Schulze
• [USN-31-1] cyrus21-imapd vulnerabilities
  • From: Martin Pitt
• STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability
  • From: advisory
• Re: Changes to the filesystem while find is running - comments?
  • From: devnull
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Steve Clement
• Re: Changes to the filesystem while find is running - comments?
  • From: Casper . Dik
• STG Security Advisory: [SSA-20041122-11] JSPWiki XSS vulnerability
  • From: advisory
• [ GLSA 200411-33 ] TWiki: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Prozilla Remote Exploit
  • From: Serkan Akpolat
• [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities
  • From: chewkeong
• Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  • From: Ralph Harvey
• Re: Router ZyXEL Prestige 650 HW http remote admin.
  • From: Laurent Papier
• STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability
  • From: advisory
• Re: Changes to the filesystem while find is running - comments?
  • From: James Youngman
• XSS in Brazilian Insite products
  • From: Carlos Ulver
• MSIE flaws: nested array sort() loop Stack overflow exception
  • From: Berend-Jan Wever
• [SECURITY] [DSA 598-1] New yardradius packages fix arbitrary code execution
  • From: Martin Schulze
• FIREFOX flaws: nested array sort() loop Stack overflow exception
  • From: Berend-Jan Wever
• Atari800 - local root.
  • From: Adam Zabrocki
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Ken S
• [ GLSA 200411-34 ] Cyrus IMAP Server: Multiple remote vulnerabilities
  • From: Thierry Carrez
• [USN-32-1] mysql vulnerabilities
  • From: Martin Pitt
• EZshopper is still vulnerable against Directory Traversal.
  • From: Zero_X www.lobnan.de Team
• Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Exchange
• Re: Liferay Cross Site Scripting Flaw
  • From: michael young
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Peter Greenwood
• Re: Sun Java Plugin arbitrary package access vulnerability
  • From: Alla Bezroutchko
• Re: [Full-Disclosure] FIREFOX flaws: nested array sort() loop Stack overflow exception
  • From: Heikki Toivonen
• Rumours about Opera
  • From: Marc Schoenefeld
• Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory]
  • From: Jerome ATHIAS
• [SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200411-32 ] phpBB: Remote command execution
  • From: Sune Kloppenborg Jeppesen
• Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows
  • From: icbm
• Buffer Overflow in Open Dc Hub 0.7.14
  • From: Donato Ferrante
• [CLA-2004:899] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution
  • From: Martin Schulze
• Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: Brett Moore
• MDKSA-2004:139 - Updated cyrus-imapd packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2004:140 - Updated a2ps packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:141 - Updated zip packages fix vulnerability
  • From: Mandrake Linux Security Team
• RE: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: alex cottle
• Re: MSIE flaws: nested array sort() loop Stack overflow exception
  • From: isno
• Re: Atari800 - local root. (fwd)
  • From: Petr Stehlik
• Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability
  • From: Chris Withers
• phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure
  • From: Cyrille Barthelemy
• php 4.3.7 memory limit POC exploit
  • From: Gyan chawdhary
• FluxBox crash vulnerability
  • From: Quith
• PnTresMailer code browser 6.03 Vulnerabilities
  • From: John Cobb
• Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]
  • From: K-OTiK Security
• Java version downgrading proof-of-concept
  • From: auto333584
• Immunity, Inc Advisor
  • From: Nicolas Waisman
• Phpbb id: 10701 update and Attachmodule add-on Directory Traversal
  • From: zee
• [ GLSA 200411-35 ] phpWebSite: HTTP response splitting vulnerability
  • From: Matthias Geerdsen
• [CLA-2004:900] Conectiva Security Announcement - sun-jre
  • From: Conectiva Updates
• [ GLSA 200411-36 ] phpMyAdmin: Multiple XSS vulnerabilities
  • From: Luke Macken
• Setiri + Invisible browsers != browsers
  • From: Haroon Meer
• Microsoft Help ActiveX Control Related Topics Local Content Accessing Vulnerability
  • From: Paul
• [OpenPKG-SA-2004.051] OpenPKG Security Advisory (imapd)
  • From: OpenPKG
• ncpfs buffer overflow
  • From: Karol Więsek
• Macromedia provided wrong "Solution" in mpsb02-08
  • From: Liu Die Yu
• [SECURITY] [DSA 601-1] New libgd1 packages fix arbitrary code execution
  • From: Martin Schulze
• Buffer-overflow in Orbz 2.10
  • From: Luigi Auriemma
• Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.
  • From: Reed Arvin
• [ GLSA 200411-38 ] Sun and Blackdown Java: Applet privilege escalation
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution
  • From: Martin Schulze
• Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038
  • From: Liu Die Yu
• Privilege escalation flaw in MDaemon 7.2.
  • From: Reed Arvin
• Password Disclosure for SMB Shares in KDE's Konqueror
  • From: Daniel Fabian
• TSL-2004-0063 - multi
  • From: Trustix Security Advisor
• Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)
  • From: Luigi Auriemma
• Linux Netwosix NEPOTE Updated!
  • From: Vincenzo Ciaglia
• [SHK-001]Payflow Link Default Config may lead to Hidden Field Modification
  • From: M. Shirk