BugTraq@security-focus.com List Archive

• Date Index

• [SECURITY] [DSA 1172-1] New bind9 packages fix denial of service, Martin Schulze
• Cross Context Scripting with Sage, pdp (architect)
• PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore(), cxib
• Multible injections and vulnerabilities in Jetbox CMS, security
• [ MDKSA-2006:163 ] - Updated bind packages fix DoS vulnerabilities, security
• RSA SecurID SID800 Token vulnerable by design, Hadmut Danisch
  • Re: RSA SecurID SID800 Token vulnerable by design, 3APA3A
    • Re: [Full-disclosure] Re: RSA SecurID SID800 Token vulnerable by design, Brian Eaton
• Airscanner Mobile Security Advisory #06070101: Abidia & OAnywhere (All versions), removethis_contact
• Airscanner Mobile Security Advisory #06260602: Pocket Expense Pro 3.9.1 Authentication Bypass, removethis_contact
• mcNews v1.3 - Remote File Include, erne
• Akarru rfi, erne
• Timesheet 1.2.1 Blind SQL Injection Vulnerability, secaware2006
• client side vulnerability in yahoo mail, p3rlhax
• rPSA-2006-0166-1 bind bind-utils, rPath Update Announcements
• rPSA-2006-0165-1 mailman, rPath Update Announcements
• PhotoKorn Gallery => 1.52 (dir_path) Remote File Inclusion Exploit, saudi . unix
• [RISE-2006001] X11R6 XKEYBOARD extension Strcmp() buffer overflow, advisories
• [USN-343-1] bind9 vulnerabilities, Martin Pitt
• News Evolution v3.0.3 - Remote File Include Vulnerabilities, erne
• ACGV News v0.9.1 - Remote File Include Vulnerabilities, erne
• Black Hat Briefings Japan Speakers Selected!, Jeff Moss
• [SECURITY] [DSA 1171-1] New ethereal packages fix execution of arbitrary code, Moritz Muehlenhoff
• Sql injection in BLOG:CMS, Omid
• FreeBSD Security Advisory FreeBSD-SA-06:20.bind, FreeBSD Security Advisories
• Linux kernel source archive vulnerable, Hadmut Danisch
  • Re: [Full-disclosure] Linux kernel source archive vulnerable, Raj Mathur
    • Re: [Full-disclosure] Linux kernel source archive vulnerable, Hadmut Danisch
• Sql injection in RunCMS, Omid
• WM-News v0.5 - Remote File Include Vulnerabilities, erne
• XSS in AckerTodo v4.0, viz . security
• ZDI-06-028: Ipswitch Collaboration Suite SMTP Server Stack Overflow, zdi-disclosures
• SL_Site <= 1.0 [spaw_root] Remote File Include Vulnerability, ciriboflacs
• Shadow Prmod <= 2.7.1 [phpbb_root_path] Remote File Include Vulnerability, ciriboflacs
• DokuWiki <= 2006-03-09brel /bin/dwpage.php remote commands execution, rgod
• CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer, CORE Security Technologies Advisories
• Full Disclosure for SQL-Ledger vulnerability CVE-2006-4244, Chris Travers
• CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability, CORE Security Technologies Advisories
• [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities, security
• xxs in MKPortal M1.1, exe_crack
• Re: PasswordSafe 3.0 weak random number generator allows key recovery attack, ronys
• BinGoPHP News <= 3.01 [bnrep] Remote File Include Vulnerability, ciriboflacs
• [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery, Sune Kloppenborg Jeppesen
• Host header cannot be trusted as an anti anti DNS-pinning measure, Amit Klein (AKsecurity)
• PHPFusion <= 6.01.4 extract()/_SERVER[REMOTE_ADDR] sql injection exploit, rgod
• SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities, 3APA3A
• [USN-342-1] PHP vulnerabilities, Martin Pitt
• Re: ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability, Steven M. Christey
  • Re: ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability, str0ke
• NDSS CFP Due September 10th, Crispin Cowan
• [USN-341-1] libxfont vulnerability, Martin Pitt
• [OpenPKG-SA-2006.019] OpenPKG Security Advisory (bind), OpenPKG
• [ MDKSA-2006:161 ] - Updated openssl packages fix vulnerability, security
• FreeBSD Security Advisory FreeBSD-SA-06:19.openssl, FreeBSD Security Advisories
• WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit, stormhacker
  • Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit, Carsten Eilers
    • AW: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit, Frank Reißner
• Microsoft confirmed Word 0-day vulnerability, Juha-Matti Laurio
  • Re: Microsoft confirmed Word 0-day vulnerability, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• [ GLSA 200609-02 ] GTetrinet: Remote code execution, Sune Kloppenborg Jeppesen
• IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability, Juha-Matti Laurio
• Sql Injection and Path Disclosoure Wordpress v2.0.5, vannovax
  • Re: Sql Injection and Path Disclosoure Wordpress v2.0.5, Paul Robertson
  • <Possible follow-ups>
  • Re: Re: Sql Injection and Path Disclosoure Wordpress v2.0.5, vanovax
• [ GLSA 200609-01 ] Streamripper: Multiple remote buffer overflows, Sune Kloppenborg Jeppesen
• [ GLSA 200609-03 ] OpenTTD: Remote Denial of Service, Sune Kloppenborg Jeppesen
• [ GLSA 200609-04 ] LibXfont: Multiple integer overflows, Sune Kloppenborg Jeppesen
• [security bulletin] HPSBUX02102 SSRT051078 rev.4 - HP-UX usermod(1M) Local Unauthorized Access., security-alert
• [SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal, Martin Schulze
• Canon ImageRunner reveals SMB, IPX, and FTP username/passwords, gunrnr
  • Re: Canon ImageRunner reveals SMB, IPX, and FTP username/passwords, Doug Atkins
• Cisco IOS GRE issue, FX
• release uhooker v1.2, Hernan Ochoa
• Reminder: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA, Dave Wichers
• [USN-340-1] imagemagick vulnerabilities, Martin Pitt
• Details for BID 19586, shulman
• Details for BID 18428, shulman
• [OpenPKG-SA-2006.018] OpenPKG Security Advisory (openssl), OpenPKG
• Easy Address Book Web Server Format String Vulnerability, revnic
• php download local file include, ali
• Anti-vir2, rugginello
• Dyn CMS <= REleased (x_admindir) Remote File Inclusion Exploit, SHiKaA-
• in-link <=2.3.4 (adodb-postgres7.inc.php) Remote File Inclusion Exploit, saudi . unix
• rPSA-2006-0163-1 openssl openssl-scripts, rPath Update Announcements
• FlashChat <= 4.5.7 Remote File Include Vulnerability, mc . nadz
• AuditWizard 6.3.2 gives away administrator password, Terry Donaldson
• UPDATE: [ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code, Sune Kloppenborg Jeppesen
• [security bulletin] HPSBUX02145 SSRT061202 rev.1 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access, security-alert
• ZIXForum 1.12 <= "RepId" Remote SQL Injection, ChironeX . FleckeriX
• 2nd European Conference on Computer Network Defense (EC2ND), Blyth A J C (AT)
• Anti-vir vulnerability, rugginello
• Buffer overflow vulnerability in dsocks, Michael Adams
• [Kurdish Security # 26 ] AnnonceV News Script Remote Command Vulnerability, botan
• Re: CuteNews 1.3.* Remote File Include Vulnerability, satalin
• VirtualPC 2004 (build 528) detection (?), gynvael
  • <Possible follow-ups>
  • Re: VirtualPC 2004 (build 528) detection (?), gynvael
• MyBace Light (hauptverzeichniss) Remote File Inclusion, philipp . niedziela
• SolpotCrew Advisory #7 - AlstraSoft Template Seller Remote File Include Vulnerability, jong_amq
• [Kurdish Security # 25 ] GrapAgenda Remote Command Vulnerability, botan
• [SECURITY] [DSA 1169-1] New MySQL 4.1 packages fix several vulnerabilities, Martin Schulze
• HITBSecConf2006 Final Call !, Praburaajan
• Microsoft Word 0-day Vulnerability (September) FAQ document available, Juha-Matti Laurio
  • <Possible follow-ups>
  • Re: Microsoft Word 0-day Vulnerability (September) FAQ document available, Juha-Matti Laurio
• TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking, TTG
• [SECURITY] [DSA 1168-1] New imagemagick packages fix arbitrary code execution, Moritz Muehlenhoff
• SoftBB v0.1 < = Cross-Site Scripting, the . leo . 008
• [USN-339-1] OpenSSL vulnerability, Martin Pitt
• [USN-338-1] MySQL vulnerabilities, Martin Pitt
• CFP, IT Underground, Warsaw, Poland 2006, Piotr Sobolewski
• Re: TinyWebGallery v1.5 ( image ) Remote Include Vulnerability, tinywebgallery
• AnywhereUSB/5 1.80.00 Drivers Integer Overflow, SecuriTeam Assisted Disclosure
• [SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities, Steve Kemp
• SoftBB 0.1 Remote PHP Code Execution Exploit, gmdarkfig
• Airscanner Mobile Security Advisory #05081201: PDAapps Verichat v1.30bh Local Password Disclosure, contact_removethis
• Web Dictate Admin Null Password Vulnerability, revnic
• [SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow, Steve Kemp
• Re: [ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability, atomo64
• Airscanner Mobile Security Advisory #05081701: IM+ v3.10 Local Password Plaintext Exposure, contact_removethis
• The Amazing Little Poll Admin Pwd, tugra
• Tr Forum V2.0 Multiple Vulnerabilities, gmdarkfig

This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.
The main JSW4.NET technical listserv archive and search page.
The main archive page for this list.