stdin
By Date

• [ MDVSA-2009:185 ] firefox security@mandriva.com (Sat Aug 01 2009 - 01:41:00 EEST)
• [ MDVSA-2009:186 ] firebird security@mandriva.com (Sat Aug 01 2009 - 04:52:01 EEST)
• [ MDVSA-2009:187 ] nagios security@mandriva.com (Sat Aug 01 2009 - 05:40:00 EEST)
• [ MDVSA-2009:188 ] php4-eaccelerator security@mandriva.com (Sat Aug 01 2009 - 06:21:00 EEST)
• [ GLSA 200908-01 ] OpenSC: Multiple vulnerabilities Tobias Heinlein (Sat Aug 01 2009 - 15:37:00 EEST)
• [ MDVSA-2009:189 ] apache-mod_auth_mysql security@mandriva.com (Sat Aug 01 2009 - 17:29:00 EEST)
• [ GLSA 200908-02 ] BIND: Denial of Service Alex Legler (Sat Aug 01 2009 - 23:04:23 EEST)
• Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869) Roee Hay (Sun Aug 02 2009 - 05:13:12 EEST)
• [SECURITY] [DSA 1848-1] New znc packages fix remote code execution Florian Weimer (Sun Aug 02 2009 - 16:17:42 EEST)
• [SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery Florian Weimer (Sun Aug 02 2009 - 16:48:02 EEST)
• [ MDVSA-2009:190 ] OpenEXR security@mandriva.com (Mon Aug 03 2009 - 01:21:00 EEST)
• [ MDVSA-2009:191 ] OpenEXR security@mandriva.com (Mon Aug 03 2009 - 01:31:00 EEST)
• AST-2009-004: Remote Crash Vulnerability in RTP stack Asterisk Security Team (Mon Aug 03 2009 - 07:30:14 EEST)
• [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert@hp.com (Mon Aug 03 2009 - 16:08:00 EEST)
• [security bulletin] HPSBUX02181 SSRT061289 rev.4 - HP-UX Running IPFilter, Remote Denial of Service (DoS) security-alert@hp.com (Mon Aug 03 2009 - 21:06:00 EEST)
• Blink Blog System Authentication Bypass Salvatore Fresta aka Drosophila (Mon Aug 03 2009 - 20:28:04 EEST)
• Cross-Site Scripting vulnerabiliy in Firefox and Opera MustLive (Sat Aug 01 2009 - 21:45:44 EEST)
• Discloser 0.0.4-rc2 SQL Injection Vulnerability Salvatore Fresta aka Drosophila (Mon Aug 03 2009 - 12:27:02 EEST)
• Team SHATTER Security Advisory: Multiple SQL Injection vulnerabilities in Oracle Enterprise Manager Shatter (Tue Aug 04 2009 - 02:31:16 EEST)
• [SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution Steffen Joeris (Tue Aug 04 2009 - 11:57:58 EEST)
• SAP Business One 2005 Remote Buffer Overflow Vulnerability. mikey27@hotmail.com (Tue Aug 04 2009 - 18:22:01 EEST)
• Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability palmprehacker@gmail.com (Tue Aug 04 2009 - 06:06:32 EEST)
• [BONSAI] SQL Injection in CS-Cart Bonsai - Information Security (Tue Aug 04 2009 - 21:49:05 EEST)
• Re: Multiple Flaws in Huawei D100 wojwar@yahoo.com (Tue Aug 04 2009 - 23:12:05 EEST)
• [USN-810-1] NSS vulnerabilities Jamie Strandboge (Wed Aug 05 2009 - 00:23:07 EEST)
• [USN-810-2] NSPR update Jamie Strandboge (Wed Aug 05 2009 - 01:00:59 EEST)
• [USN-811-1] Firefox and Xulrunner vulnerability Jamie Strandboge (Wed Aug 05 2009 - 05:34:16 EEST)
• [ MDVSA-2009:192 ] phpmyadmin security@mandriva.com (Wed Aug 05 2009 - 17:07:00 EEST)
• Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100] jerome.athias@free.fr (Wed Aug 05 2009 - 18:31:57 EEST)
• ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability ZDI Disclosures (Wed Aug 05 2009 - 20:44:36 EEST)
• ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability ZDI Disclosures (Wed Aug 05 2009 - 20:45:11 EEST)
• ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability ZDI Disclosures (Wed Aug 05 2009 - 20:45:51 EEST)
• ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability ZDI Disclosures (Wed Aug 05 2009 - 20:46:24 EEST)
• fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666) ma+bt@dt.e-technik.uni-dortmund.de (Thu Aug 06 2009 - 03:12:57 EEST)
• [SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution Steffen Joeris (Thu Aug 06 2009 - 11:28:57 EEST)
• [ MDVSA-2009:193 ] ruby security@mandriva.com (Thu Aug 06 2009 - 02:10:00 EEST)
• [ MDVSA-2009:194 ] wireshark security@mandriva.com (Thu Aug 06 2009 - 06:17:00 EEST)
• [ MDVSA-2009:195 ] apr security@mandriva.com (Thu Aug 06 2009 - 17:55:00 EEST)
• [CSS09-01] SlideShowPro Director File Disclosure Vulnerability Scott Miles (Thu Aug 06 2009 - 19:23:15 EEST)
• iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability iDefense Labs (Thu Aug 06 2009 - 22:19:26 EEST)
• OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error katie.french@cgifederal.com (Thu Aug 06 2009 - 22:25:52 EEST)
• iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability iDefense Labs (Thu Aug 06 2009 - 22:38:13 EEST)
• [ MDVSA-2009:195-1 ] apr security@mandriva.com (Thu Aug 06 2009 - 22:32:01 EEST)
• iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability iDefense Labs (Thu Aug 06 2009 - 22:57:15 EEST)
• iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability iDefense Labs (Fri Aug 07 2009 - 00:06:00 EEST)
• CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management Kotas, Kevin J (Fri Aug 07 2009 - 02:22:21 EEST)
• CA20090806-01: Security Notice for Data Transport Services Kotas, Kevin J (Fri Aug 07 2009 - 02:22:34 EEST)
• CFP: International workshop on Secure Software Engineering secse@sislab.no (Fri Aug 07 2009 - 14:06:45 EEST)
• [ GLSA 200908-03 ] libTIFF: User-assisted execution of arbitrary code Robert Buchholz (Fri Aug 07 2009 - 14:49:24 EEST)
• [ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities Robert Buchholz (Fri Aug 07 2009 - 15:01:32 EEST)
• [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) security-alert@hp.com (Fri Aug 07 2009 - 16:02:06 EEST)
• [security bulletin] HPSBOV02452 SSRT090161 rev.1 - HP TCP/IP Services for OpenVMS BIND Server Remote Denial of Service (DoS) security-alert@hp.com (Fri Aug 07 2009 - 16:02:34 EEST)
• [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS) security-alert@hp.com (Fri Aug 07 2009 - 16:03:04 EEST)
• Subversion heap overflow Matt Lewis (Fri Aug 07 2009 - 17:47:24 EEST)
• [SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution Nico Golde (Fri Aug 07 2009 - 18:33:32 EEST)
• [ MDVSA-2009:196 ] samba security@mandriva.com (Fri Aug 07 2009 - 19:45:01 EEST)
• [SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness Nico Golde (Fri Aug 07 2009 - 18:31:48 EEST)
• iDefense Security Advisory 08.07.09: Adobe Flash Player Invalid Loader Object Reference Vulnerability iDefense Labs (Fri Aug 07 2009 - 20:49:03 EEST)
• ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities core collapse (Fri Aug 07 2009 - 22:08:04 EEST)
• ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability ZDI Disclosures (Fri Aug 07 2009 - 23:53:17 EEST)
• ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability ZDI Disclosures (Fri Aug 07 2009 - 23:54:31 EEST)
• [USN-813-3] apr-util vulnerability Jamie Strandboge (Sat Aug 08 2009 - 08:56:47 EEST)
• [ MDVSA-2009:161-1 ] squid security@mandriva.com (Sat Aug 08 2009 - 15:14:00 EEST)
• [ MDVSA-2009:198 ] firefox security@mandriva.com (Sat Aug 08 2009 - 01:17:00 EEST)
• [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite Adam Baldwin (Sat Aug 08 2009 - 19:07:37 EEST)
• [USN-813-1] apr vulnerability Jamie Strandboge (Sat Aug 08 2009 - 03:57:13 EEST)
• [SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution Florian Weimer (Sat Aug 08 2009 - 21:55:09 EEST)
• [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution RedTeam Pentesting GmbH (Mon Aug 10 2009 - 15:32:56 EEST)
• [USN-813-2] Apache vulnerability Jamie Strandboge (Sat Aug 08 2009 - 04:06:16 EEST)
• [SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution Florian Weimer (Sat Aug 08 2009 - 22:07:27 EEST)
• [SECURITY] [DSA 1857-1] New camlimages packages fix arbitrary code execution Steffen Joeris (Mon Aug 10 2009 - 03:55:14 EEST)
• [USN-812-1] Subversion vulnerability Jamie Strandboge (Sat Aug 08 2009 - 03:56:30 EEST)
• [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF) Adam Baldwin (Sat Aug 08 2009 - 22:16:21 EEST)
• XSS in SqLiteManager hadikiamarsi@hotmail.com (Mon Aug 10 2009 - 09:59:13 EEST)
• [SECURITY] [DSA 1856-1] New mantis packages fix information leak Thijs Kinkhorst (Sat Aug 08 2009 - 22:34:12 EEST)
• [ MDVSA-2009:199 ] subversion security@mandriva.com (Sun Aug 09 2009 - 02:26:00 EEST)
• [ MDVSA-2009:197 ] nss security@mandriva.com (Sat Aug 08 2009 - 00:59:00 EEST)
• [SECURITY] [DSA 1843-2] New squid3 packages fix regression Nico Golde (Sun Aug 09 2009 - 19:54:21 EEST)
• [SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities Luciano Bello (Mon Aug 10 2009 - 20:05:37 EEST)
• [SECURITY] [DSA 1859-1] New libxml2 packages fix several issues Nico Golde (Mon Aug 10 2009 - 21:55:11 EEST)
• [USN-814-1] openjdk-6 vulnerabilities Kees Cook (Tue Aug 11 2009 - 08:54:45 EEST)
• [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS) security-alert@hp.com (Tue Aug 11 2009 - 16:23:56 EEST)
• AST-2009-005: Remote Crash Vulnerability in SIP channel driver Asterisk Security Team (Tue Aug 11 2009 - 17:00:15 EEST)
• IE7 Script James C. Slora Jr. (Tue Aug 11 2009 - 17:48:58 EEST)
• TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability dvlabs (Tue Aug 11 2009 - 21:04:07 EEST)
• Sql injection in OCS Inventory NG Server 1.2.1 gmcbr0 gmcbr0 (Tue Aug 11 2009 - 21:05:59 EEST)
• [USN-815-1] libxml2 vulnerabilities Marc Deslauriers (Tue Aug 11 2009 - 21:41:05 EEST)
• ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability ZDI Disclosures (Tue Aug 11 2009 - 23:26:28 EEST)
• ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability ZDI Disclosures (Tue Aug 11 2009 - 23:23:39 EEST)
• [security bulletin] HPSBTU02454 SSRT080172 rev.1 - HP Internet Express for Tru64 UNIX Running Samba, Remote Information Disclosure security-alert@hp.com (Wed Aug 12 2009 - 00:06:12 EEST)
• ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability ZDI Disclosures (Tue Aug 11 2009 - 23:25:48 EEST)
• ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability ZDI Disclosures (Tue Aug 11 2009 - 23:25:11 EEST)
• ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability ZDI Disclosures (Tue Aug 11 2009 - 23:24:24 EEST)
• Re: Multiple vulnerabilities in several ATEN IP KVM Switches starchang@aten.com.tw (Wed Aug 12 2009 - 13:34:18 EEST)
• Chavoosh CMS SQL Injection Vulnerability faghani@nsec.ir (Wed Aug 12 2009 - 13:15:43 EEST)
• [PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability Valery Marchuk (Wed Aug 12 2009 - 15:31:38 EEST)
• Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Lists (Wed Aug 12 2009 - 09:02:44 EEST)
• [security bulletin] HPSBUX02437 SSRT090038 rev.2 - HP-UX Running XNTP, Remote Execution of Arbitrary Code security-alert@hp.com (Wed Aug 12 2009 - 15:41:26 EEST)
• Hijacking Safari 4 Top Sites with Phish Bombs Inferno (Wed Aug 12 2009 - 03:27:16 EEST)
• JibberBook GuestBook 2.3 Multiple Vulnerabilities contact@onuryilmaz.info (Wed Aug 12 2009 - 01:22:18 EEST)
• [DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability Alexandr Polyakov (Wed Aug 12 2009 - 16:04:50 EEST)
• 2WIRE Gateway Authentication Bypass & Password Reset hkm (Wed Aug 12 2009 - 06:54:46 EEST)
• [ MDVSA-2009:200 ] libxml security@mandriva.com (Wed Aug 12 2009 - 17:43:01 EEST)
• Microsoft Wordpad Memory Exhaustion (msftedit) murderkey@gmail.com (Wed Aug 12 2009 - 20:45:59 EEST)
• [ MDVSA-2009:201 ] fetchmail security@mandriva.com (Wed Aug 12 2009 - 23:16:01 EEST)
• [SECURITY] [DSA 1860-1] New Ruby packages fix several issues Florian Weimer (Wed Aug 12 2009 - 22:49:54 EEST)
• SecurityFocus Linux Newsletter #445 sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:21 EEST)
• SecurityFocus Newsletter #509 sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:10 EEST)
• SecurityFocus Microsoft Newsletter #450 sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:16 EEST)
• Fwd: Follow-up: Heartland CEO on Data Breach: QSAs Let Us Down Jeffrey Walton (Thu Aug 13 2009 - 16:58:31 EEST)
• [USN-816-1] fetchmail vulnerability Kees Cook (Thu Aug 13 2009 - 01:56:28 EEST)
• Elkapax CMS Cross site scripting vulnerability faghani@nsec.ir (Thu Aug 13 2009 - 09:03:19 EEST)
• Authentication Bypass of Snom Phone Web Interface Walter Sprenger (Thu Aug 13 2009 - 00:46:27 EEST)
• Windows 7 Firewire Attacks - and Defense Techniques Security Research Publications (Thu Aug 13 2009 - 15:13:36 EEST)
• [security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux (ICE-LX) Cross Site Request Forgery (CSRF) , Remote Execution of Arbitrary Code, Denial of Service (DoS), and Other Vulnerabilities security-alert@hp.com (Thu Aug 13 2009 - 15:46:43 EEST)
• Static analysis tool exposition (SATE) 2009 - call for participation Vadim Okun (Thu Aug 13 2009 - 00:35:11 EEST)
• Chris Paget Defcon RFID Presentation Slides Now Online Timothy (Thor) Mullen (Thu Aug 13 2009 - 04:25:48 EEST)
• Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla elkekas@gmail.com (Thu Aug 13 2009 - 12:26:11 EEST)
• KIWICON ]|[ - 2009 Call For Papers Kiwicon <3 (Thu Aug 13 2009 - 05:43:53 EEST)
• Linux NULL pointer dereference due to incorrect proto_ops initializations Tavis Ormandy (Thu Aug 13 2009 - 21:57:53 EEST)
• [IMF 2009] Call for Participation Oliver Goebel (Thu Aug 13 2009 - 21:13:15 EEST)
• [SECURITY] [DSA 1861-1] New libxml packages fix several issues Nico Golde (Thu Aug 13 2009 - 23:40:37 EEST)
• Re: Linux NULL pointer dereference due to incorrect proto_ops initializations Przemyslaw Frasunek (Fri Aug 14 2009 - 14:11:37 EEST)
• new vulnerability founded by ostoure ostoure.sazan@gmail.com (Thu Aug 13 2009 - 23:36:02 EEST)
• ICQ 6.5 HTML-injection vulnerability ss_contacts@hotmail.com (Fri Aug 14 2009 - 13:42:46 EEST)
• ClubHack2009: Call for Papers/Speakers ClubHack (Fri Aug 14 2009 - 22:02:42 EEST)
• [ MDVSA-2009:202 ] memcached security@mandriva.com (Fri Aug 14 2009 - 21:23:01 EEST)
• [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation dann frazier (Fri Aug 14 2009 - 22:31:10 EEST)
• [SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution Nico Golde (Sat Aug 15 2009 - 18:56:00 EEST)
• [ MDVSA-2009:203 ] curl security@mandriva.com (Sat Aug 15 2009 - 19:03:00 EEST)
• DUgallery 3.0 / Remote Admin Bug spymeta@yahoo.com (Sun Aug 16 2009 - 21:39:20 EEST)
• [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies research@dsecrg.com (Mon Aug 17 2009 - 17:44:20 EEST)
• [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation dann frazier (Sun Aug 16 2009 - 19:42:51 EEST)
• Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit ostoure.sazan@gmail.com (Sat Aug 15 2009 - 04:08:33 EEST)
• Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 Lists (Mon Aug 17 2009 - 09:40:21 EEST)
• DeepSec 2009 - Preliminary Schedule is online DeepSec Conference (Sat Aug 15 2009 - 16:38:45 EEST)
• [DSECRG-09-052] Adobe JRun 4 Directory Traversal Vulnerabilities research@dsecrg.com (Mon Aug 17 2009 - 17:46:47 EEST)
• [ MDVSA-2009:204 ] wxgtk security@mandriva.com (Mon Aug 17 2009 - 03:13:00 EEST)
• [DSECRG-09-051] Adobe JRun 4 Multiple XSS research@dsecrg.com (Mon Aug 17 2009 - 17:46:45 EEST)
• [SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Sun Aug 16 2009 - 23:52:35 EEST)
• TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local contact.fingers@gmail.com (Mon Aug 17 2009 - 19:08:41 EEST)
• [ MDVSA-2009:205 ] kernel security@mandriva.com (Tue Aug 18 2009 - 03:21:00 EEST)
• Vtiger CRM 5.0.4 Multiple Vulnerabilities ascii (Tue Aug 18 2009 - 11:49:13 EEST)
• Safari buffer overflow Leon Juranic (Tue Aug 18 2009 - 12:23:30 EEST)
• Re: [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies Mike Duncan (Mon Aug 17 2009 - 18:25:55 EEST)
• Re: Multiple vulnerabilities in several ATEN IP KVM Switches Glenn Rossi (Mon Aug 17 2009 - 18:56:13 EEST)
• Re: common dns misconfiguration can lead to "same site" scripting saik0pod@gmail.com (Mon Aug 17 2009 - 23:38:53 EEST)
• [USN-818-1] curl vulnerability Kees Cook (Mon Aug 17 2009 - 21:42:06 EEST)
• ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service brad.antoniewicz@foundstone.com (Tue Aug 18 2009 - 20:13:05 EEST)
• Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability Cisco Systems Product Security Incident Response Team (Sat Jul 18 2009 - 19:25:00 EEST)
• (Reposting truncated message) Re: ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service dm@securityfocus.com (Tue Aug 18 2009 - 22:11:29 EEST)
• [security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS) security-alert@hp.com (Tue Aug 18 2009 - 22:30:44 EEST)
• [ GLSA 200908-07 ] Perl Compress::Raw modules: Denial of Service Alex Legler (Wed Aug 19 2009 - 00:37:23 EEST)
• [ GLSA 200908-05 ] Subversion: Remote execution of arbitrary code Alex Legler (Wed Aug 19 2009 - 00:36:51 EEST)
• CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System Kotas, Kevin J (Tue Aug 18 2009 - 23:38:47 EEST)
• [ GLSA 200908-08 ] ISC DHCP: dhcpd Denial of Service Alex Legler (Wed Aug 19 2009 - 00:37:39 EEST)
• [ GLSA 200908-10 ] Dillo: User-assisted execution of arbitrary code Alex Legler (Wed Aug 19 2009 - 00:37:51 EEST)
• CA20090818-02: Security Notice for CA Internet Security Suite Kotas, Kevin J (Tue Aug 18 2009 - 23:38:40 EEST)
• [ GLSA 200908-09 ] DokuWiki: Local file inclusion Alex Legler (Wed Aug 19 2009 - 00:37:46 EEST)
• [ GLSA 200908-06 ] CDF: User-assisted execution of arbitrary code Alex Legler (Wed Aug 19 2009 - 00:37:06 EEST)
• CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability CORE Security Technologies Advisories (Wed Aug 19 2009 - 00:52:29 EEST)
• [SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities Steffen Joeris (Wed Aug 19 2009 - 15:33:14 EEST)
• rPSA-2009-0118-1 mod_dav_svn subversion rPath Update Announcements (Wed Aug 19 2009 - 01:05:28 EEST)
• [SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities Steffen Joeris (Wed Aug 19 2009 - 15:33:02 EEST)
• rPSA-2009-0119-1 apr apr-util rPath Update Announcements (Wed Aug 19 2009 - 01:06:40 EEST)
• [SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities Steffen Joeris (Wed Aug 19 2009 - 15:32:52 EEST)
• rPSA-2009-0121-1 kernel open-vm-tools rPath Update Announcements (Wed Aug 19 2009 - 01:10:31 EEST)
• ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability ZDI Disclosures (Wed Aug 19 2009 - 01:52:57 EEST)
• ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities ZDI Disclosures (Wed Aug 19 2009 - 01:58:26 EEST)
• [ MDVSA-2009:206 ] wget security@mandriva.com (Wed Aug 19 2009 - 02:29:00 EEST)
• Re: Elkapax CMS Cross site scripting vulnerability security curmudgeon (Wed Aug 19 2009 - 08:09:30 EEST)
• [USN-802-2] Apache regression Marc Deslauriers (Wed Aug 19 2009 - 18:32:12 EEST)
• Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability Cisco Systems Product Security Incident Response Team (Wed Aug 19 2009 - 20:12:26 EEST)
• SecurityFocus Microsoft Newsletter #451 sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:46 EEST)
• SecurityFocus Linux Newsletter #446 sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:50 EEST)
• SecurityFocus Newsletter #510 sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:42 EEST)
• Adobe Flex 3.3 SDK DOM-Based XSS labs@gdssecurity.com (Wed Aug 19 2009 - 23:04:52 EEST)
• iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability iDefense Labs (Thu Aug 20 2009 - 00:02:45 EEST)
• [SECURITY] [DSA 1869-1] New curl packages fix SSL certificate verification weakness Nico Golde (Thu Aug 20 2009 - 00:22:07 EEST)
• [ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2 security@mandriva.com (Thu Aug 20 2009 - 01:09:01 EEST)
• [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution Nico Golde (Thu Aug 20 2009 - 01:29:43 EEST)
• [USN-809-1] GnuTLS vulnerabilities Jamie Strandboge (Thu Aug 20 2009 - 02:55:26 EEST)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability iDefense Labs (Thu Aug 20 2009 - 07:24:35 EEST)
• Bypassing OWASP ESAPI XSS Protection inside Javascript Inferno (Thu Aug 20 2009 - 11:18:00 EEST)
• [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities Bkis (Thu Aug 20 2009 - 07:29:17 EEST)
• iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability iDefense Labs (Thu Aug 20 2009 - 07:32:43 EEST)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability iDefense Labs (Thu Aug 20 2009 - 07:20:15 EEST)
• [USN-820-1] Pidgin vulnerability Marc Deslauriers (Thu Aug 20 2009 - 16:32:39 EEST)
• RE: Bypassing OWASP ESAPI XSS Protection inside Javascript Schmidt, Chris (Thu Aug 20 2009 - 18:28:03 EEST)
• t2?09 Challenge - Free Tickets Available Tomi Tuominen (Thu Aug 20 2009 - 15:14:37 EEST)
• SQL Injection vulnerabilities in Subdreamer CMS itweb@itweb.fi (Thu Aug 20 2009 - 19:19:28 EEST)
• [ MDVSA-2009:208 ] libgadu security@mandriva.com (Thu Aug 20 2009 - 20:36:01 EEST)
• [USN-817-1] Thunderbird vulnerabilities Jamie Strandboge (Fri Aug 21 2009 - 02:42:26 EEST)
• [ MDVSA-2009:209 ] java-1.6.0-openjdk security@mandriva.com (Fri Aug 21 2009 - 03:54:01 EEST)
• [ MDVSA-2009:210 ] gnutls security@mandriva.com (Fri Aug 21 2009 - 06:35:01 EEST)
• VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server VMware Security team (Fri Aug 21 2009 - 09:38:49 EEST)
• Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier ryan.wessels@kohler.com (Fri Aug 21 2009 - 18:24:18 EEST)
• Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities gamr-14@hotmail.com (Fri Aug 21 2009 - 19:49:27 EEST)
• Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier Eloy Paris (Fri Aug 21 2009 - 20:00:16 EEST)
• Cuteflow Version 2.10.3 "edituser.php" Security Bypass Vulnerability hever@hever.com.br (Fri Aug 21 2009 - 21:17:35 EEST)
• DoS vulnerabilities in Mozilla Firefox, Internet Explorer and Chrome MustLive (Fri Aug 21 2009 - 20:58:21 EEST)
• FreeBSD <= 6.1 kqueue() NULL pointer dereference Przemyslaw Frasunek (Sat Aug 22 2009 - 20:06:23 EEST)
• Local Kernel Buffer Overflow vulnerability in Avast! s.leberre@sysdream.com (Mon Aug 24 2009 - 15:09:01 EEST)
• [SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities Steffen Joeris (Sun Aug 23 2009 - 06:41:14 EEST)
• [ MDVSA-2009:211 ] expat security@mandriva.com (Sun Aug 23 2009 - 20:37:02 EEST)
• [ MDVSA-2009:212 ] python security@mandriva.com (Sun Aug 23 2009 - 21:12:00 EEST)
• CoolPreviews - Firefox Extension - Chrome Privileged Code Injection Roberto Suggi Liverani (Mon Aug 24 2009 - 15:25:56 EEST)
• [ MDVSA-2009:212 ] python security@mandriva.com (Sun Aug 23 2009 - 21:30:01 EEST)
• Radvision's Scopia Cross Site Scripting Vulnerabilities Francesco Bianchino (Mon Aug 24 2009 - 12:46:59 EEST)
• [ MDVSA-2009:213 ] wxgtk security@mandriva.com (Sun Aug 23 2009 - 21:57:00 EEST)
• WM Downloader (.Smi/ .Ram/ .pls/ .smil/ .wax/ .wpl File) Local Buffer Overflow Exploit the_3dit0r@yahoo.com (Sun Aug 23 2009 - 22:51:05 EEST)
• [ MDVSA-2009:213 ] wxgtk security@mandriva.com (Sun Aug 23 2009 - 22:53:00 EEST)
• [ MDVSA-2009:214 ] python-celementtree security@mandriva.com (Sun Aug 23 2009 - 23:37:00 EEST)
• [ MDVSA-2009:215 ] audacity security@mandriva.com (Mon Aug 24 2009 - 00:22:00 EEST)
• [ MDVSA-2009:216 ] mozilla-thunderbird security@mandriva.com (Mon Aug 24 2009 - 00:40:00 EEST)
• [ MDVSA-2009:217 ] mozilla-thunderbird security@mandriva.com (Mon Aug 24 2009 - 01:13:00 EEST)
• Feed Sidebar Firefox Extension - Privileged Code Injection Nick Freeman (Mon Aug 24 2009 - 07:23:28 EEST)
• ScribeFire Firefox Extension - Privileged Code Injection Nick Freeman (Mon Aug 24 2009 - 07:48:49 EEST)
• WizzRSS Firefox Extension - Privileged Code Injection Nick Freeman (Mon Aug 24 2009 - 07:49:50 EEST)
• AiO ( All into One) Flash Mixer 3 (.afp File) Crash Vulnerability Exploit the_3dit0r@yahoo.com (Mon Aug 24 2009 - 12:17:15 EEST)
• FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit the_3dit0r@yahoo.com (Mon Aug 24 2009 - 12:31:13 EEST)
• Update Scanner - Firefox Extension - Chrome Privileged Code Injection Roberto Suggi Liverani (Mon Aug 24 2009 - 15:27:16 EEST)
• DoS vulnerability in Google Chrome MustLive (Sun Aug 23 2009 - 18:21:23 EEST)
• Packet Storm is back online. Packet Storm (Sat Aug 22 2009 - 08:11:14 EEST)
• Re: SQL Injection vulnerabilities in Subdreamer CMS ziad@subdreamer.com (Sat Aug 22 2009 - 11:37:56 EEST)
• [ MDVSA-2009:218 ] w3c-libwww security@mandriva.com (Mon Aug 24 2009 - 18:37:00 EEST)
• [ MDVSA-2009:219 ] kompozer security@mandriva.com (Mon Aug 24 2009 - 21:18:01 EEST)
• [SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Mon Aug 24 2009 - 21:59:41 EEST)
• rPSA-2009-0122-1 idle python rPath Update Announcements (Mon Aug 24 2009 - 22:36:53 EEST)
• [USN-822-1] KDE-Libs vulnerabilities Marc Deslauriers (Mon Aug 24 2009 - 22:00:38 EEST)
• [ MDVSA-2009:220 ] davfs security@mandriva.com (Mon Aug 24 2009 - 22:19:00 EEST)
• [USN-823-1] KDE-Graphics vulnerabilities Marc Deslauriers (Mon Aug 24 2009 - 22:01:12 EEST)
• rPSA-2009-0124-1 curl rPath Update Announcements (Mon Aug 24 2009 - 22:48:27 EEST)
• rPSA-2009-0123-1 apr-util rPath Update Announcements (Mon Aug 24 2009 - 22:38:00 EEST)
• [USN-824-1] PHP vulnerability Marc Deslauriers (Mon Aug 24 2009 - 22:01:44 EEST)
• [USN-825-1] libvorbis vulnerability Marc Deslauriers (Mon Aug 24 2009 - 22:02:18 EEST)
• [ MDVSA-2009:221 ] libneon0.27 security@mandriva.com (Tue Aug 25 2009 - 02:23:01 EEST)
• Xerox WorkCentre multiple models Denial of Service Henri Lindberg - Smilehouse Oy (Tue Aug 25 2009 - 15:11:30 EEST)
• CONFidence 2009, November, CfP Andrzej Targosz (Tue Aug 25 2009 - 00:46:13 EEST)
• RE: DoS vulnerability in Google Chrome advisories@intern0t.net (Tue Aug 25 2009 - 10:03:00 EEST)
• EesySec Personal Firewall Remote Buffer Overflow Exploit the_3dit0r@yahoo.com (Tue Aug 25 2009 - 17:20:40 EEST)
• Re: DoS vulnerability in Google Chrome MustLive (Tue Aug 25 2009 - 19:07:49 EEST)
• Re: [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage phcoder@gmail.com (Tue Aug 25 2009 - 18:27:34 EEST)
• [security bulletin] HPSBTU02453 SSRT091037 rev.2 - HP Tru64 UNIX or HP Tru64 Internet Express Running BIND Server, Denial of Service (DoS) security-alert@hp.com (Tue Aug 25 2009 - 20:51:44 EEST)
• HyperVM File Permissions Local Vulnerability XiaShing@gmail.com (Tue Aug 25 2009 - 18:46:39 EEST)
• [SECURITY] [DSA 1833-2] New dhcp3 packages fix arbitrary code execution Florian Weimer (Tue Aug 25 2009 - 22:57:28 EEST)
• iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability iDefense Labs (Tue Aug 25 2009 - 23:05:52 EEST)
• Oracle PL/SQL Injection Flaw in REPCAT_RPC.VALIDATE_REMOTE_RC David Litchfield (Tue Aug 25 2009 - 23:18:58 EEST)
• Bypassing DBMS_ASSERT in certain situations David Litchfield (Tue Aug 25 2009 - 23:25:15 EEST)
• Oracle 11g (11.1.0.6) Password Policy and Compliance David Litchfield (Tue Aug 25 2009 - 23:45:41 EEST)
• H4RDW4RE presentations updated Thor (Hammer of God) (Wed Aug 26 2009 - 00:07:01 EEST)
• Re: DoS vulnerability in Google Chrome advisories@intern0t.net (Wed Aug 26 2009 - 11:41:18 EEST)
• [PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability Valery Marchuk (Wed Aug 26 2009 - 12:56:56 EEST)
• RE: H4RDW4RE presentations updated Thor (Hammer of God) (Wed Aug 26 2009 - 17:21:02 EEST)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Aug 26 2009 - 19:00:00 EEST)
• [MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9 Andrew Horton (Wed Aug 26 2009 - 21:14:18 EEST)
• [SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities Moritz Muehlenhoff (Wed Aug 26 2009 - 21:51:42 EEST)
• [SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities Moritz Muehlenhoff (Wed Aug 26 2009 - 22:01:32 EEST)
• [USN-826-1] Mono vulnerabilities Marc Deslauriers (Wed Aug 26 2009 - 22:31:55 EEST)
• [SECURITY] [DSA 1871-2] New wordpress packages fix regression Steffen Joeris (Thu Aug 27 2009 - 04:39:01 EEST)
• Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter Shatter (Fri Aug 28 2009 - 18:20:40 EEST)
• Cross-Site Scripting vulnerability in Mozilla, Firefox, SeaMonkey, Orca Browser and Maxthon MustLive (Fri Aug 28 2009 - 22:07:40 EEST)
• [ MDVSA-2009:222 ] squirrelmail security@mandriva.com (Fri Aug 28 2009 - 21:11:01 EEST)
• [ MDVSA-2009:223 ] xerces-c security@mandriva.com (Sun Aug 30 2009 - 21:00:00 EEST)
• [ MDVSA-2009:224 ] postfix security@mandriva.com (Mon Aug 31 2009 - 00:52:01 EEST)
• Writeup by Amit Klein (Trusteer): "Google Chrome 3.0 (Beta) Math.random vulnerability" Amit Klein (Mon Aug 31 2009 - 14:25:54 EEST)
• Illustrating the Linux sock_sendpage() NULL pointer dereference on Power/Cell BE Architecture Ramon de Carvalho Valle (Mon Aug 31 2009 - 15:32:02 EEST)
• Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows Stefan Kanthak (Mon Aug 31 2009 - 19:42:53 EEST)
• [SECURITY] [DSA 1875-1] New ikiwiki packages fix information disclosure Moritz Muehlenhoff (Mon Aug 31 2009 - 20:27:34 EEST)

Last message date: Mon Aug 31 2009 - 23:11:30 EEST
Archived on: Mon Aug 31 2009 - 23:11:32 EEST

This archive was generated by hypermail 2b28 : Mon Aug 31 2009 - 23:11:32 EEST