gmane.comp.security.vulnerabilities.watch.announce archive

iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability

Fri, 02 Mar 2007 13:35:21 -0500

iDefense Labs <[email protected]> • #1338

CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability

Mon, 05 Mar 2007 19:44:23 -0300

CORE Security Technologies Advisories <[email protected]> • #1337

ANNOUNCE: Security OPUS San Francisco, CA - March 19-21, 2007

Wed, 7 Mar 2007 20:32:29 -0500 (EST)

Steve Manzuik <[email protected]> • #1336

iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability

Mon, 05 Mar 2007 17:18:01 -0500

iDefense Labs <[email protected]> • #1335

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities

Thu, 22 Feb 2007 19:10:34 -0500

iDefense Labs <[email protected]> • #1334

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability

Thu, 22 Feb 2007 19:06:03 -0500

iDefense Labs <[email protected]> • #1333

iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability

Thu, 22 Feb 2007 17:27:05 -0500

iDefense Labs <[email protected]> • #1332

iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability

Wed, 21 Feb 2007 18:03:23 -0500

iDefense Labs <[email protected]> • #1331

Cisco Security Advisory: Multiple Vulnerabilities in 802.1X Supplicant

Wed, 21 Feb 2007 12:20:26 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1330

Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities

Thu, 21 Feb 2007 17:09:11 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1329

Overtaking Google Desktop

Wed, 21 Feb 2007 16:06:58 +0200

"Yair Amit" <[email protected]> • #1328

iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability

Thu, 15 Feb 2007 13:50:03 -0500

iDefense Labs <[email protected]> • #1327

Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module

Wed, 14 Feb 2007 12:13:07 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1326

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

Wed, 14 Feb 2007 11:39:36 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1325

iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability

Tue, 13 Feb 2007 19:58:24 -0500

iDefense Labs NO-REPLY <[email protected]> • #1324

iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability

Tue, 13 Feb 2007 15:32:06 -0500

iDefense Labs NO-REPLY <[email protected]> • #1323

Cisco Security Advisory: Multiple IOS IPS Vulnerabilities

Tue, 13 Feb 2007 11:50:46 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1322

iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability

Thu, 15 Feb 2007 13:50:59 -0500

iDefense Labs <[email protected]> • #1321

Multiple vulnerabilities in phpMyVisites

Sun, 11 Feb 2007 12:25:10 +0100

Nicob <[email protected]> • #1320

TWiki Security Alert: Arbitrary code execution in session files (CVE-2007-0669)

Thu, 08 Feb 2007 09:31:21 -0800

Peter Thoeny <[email protected]> • #1319

iDefense Security Advisory 02.07.07: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability

Wed, 07 Feb 2007 14:26:40 -0500

iDefense Labs <[email protected]> • #1318

iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability

Wed, 07 Feb 2007 14:26:29 -0500

iDefense Labs <[email protected]> • #1317

iDefense Security Advisory 02.07.07: RARLabs Unrar Password Prompt Buffer Overflow Vulnerability

Wed, 07 Feb 2007 14:26:02 -0500

iDefense Labs <[email protected]> • #1316

Jetty Session ID Prediction

Mon, 05 Feb 2007 13:35:40 +0000

NGSSoftware Insight Security Research <[email protected]> • #1315

iDefense Security Advisory 02.02.07: Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability

Mon, 05 Feb 2007 11:24:28 -0500

iDefense Labs <[email protected]> • #1314

TFTP directory traversal in Kiwi CatTools

Thu, 08 Feb 2007 23:28:56 +0100

Nicob <[email protected]> • #1313

Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technical details)

Thu, 08 Feb 2007 23:08:53 +0100

Nicob <[email protected]> • #1312

Cisco Security Advisory: DLSw Vulnerability

Wed, 10 Jan 2007 12:08:09 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1311

Cisco Security Advisory: Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability

Wed, 10 Jan 2007 17:00:00 +0100

Cisco Systems Product Security Incident Response Team <[email protected]> • #1310

iDefense Security Advisory 01.09.07: Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability

Tue, 09 Jan 2007 20:25:18 -0500

iDefense Labs <[email protected]> • #1309

iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability

Tue, 09 Jan 2007 16:59:41 -0500

iDefense Labs <[email protected]> • #1308

iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeGetVisualInfo Memory Corruption Vulnerability

Tue, 09 Jan 2007 16:59:23 -0500

iDefense Labs <[email protected]> • #1307

iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability

Tue, 09 Jan 2007 16:56:14 -0500

iDefense Labs <[email protected]> • #1306

iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability

Tue, 09 Jan 2007 14:21:39 -0500

iDefense Labs <[email protected]> • #1305

iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability

Tue, 09 Jan 2007 14:21:14 -0500

iDefense Labs <[email protected]> • #1304

iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability

Tue, 09 Jan 2007 14:14:04 -0500

iDefense Labs <[email protected]> • #1303

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server

Fri, 5 Jan 2007 18:23:43 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1302

fetchmail security announcement 2006-02 (CVE-2006-5867)

Sat, 6 Jan 2007 00:05:51 +0100

Matthias Andree <[email protected]> • #1301

fetchmail security announcement 2006-03 (CVE-2006-5974)

Sat, 6 Jan 2007 00:06:21 +0100

Matthias Andree <[email protected]> • #1300

iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability

Fri, 05 Jan 2007 17:13:16 -0500

iDefense Labs <[email protected]> • #1299

iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability

Fri, 05 Jan 2007 12:32:13 -0500

iDefense Labs <[email protected]> • #1298

iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability

Fri, 05 Jan 2007 12:32:09 -0500

iDefense Labs <[email protected]> • #1297

Correction (High Risk Vulnerability in the OpenOffice and StarOffice Suites)

Thu, 4 Jan 2007 21:03:39 -0000

"NGSSoftware Insight Security Research" <[email protected]> • #1296

High Risk Vulnerability in the OpenOffice and StarOffice Suites

Thu, 4 Jan 2007 17:58:21 -0000

"NGSSoftware Insight Security Research" <[email protected]> • #1295

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access

Wed, 03 Jan 2007 18:15:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1294

iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability

Sat, 23 Dec 2006 21:07:59 -0500

iDefense Labs <[email protected]> • #1293

iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability

Sat, 23 Dec 2006 21:07:53 -0500

iDefense Labs <[email protected]> • #1292

Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability

Thu, 14 Dec 2006 12:48:23 -0500

iDefense Labs <[email protected]> • #1291

iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability

Thu, 14 Dec 2006 12:36:08 -0500

iDefense Labs <[email protected]> • #1290

[Full-disclosure] iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability

Tue, 12 Dec 2006 14:31:20 -0500

iDefense Labs <[email protected]> • #1289

CORE-2006-1127: ProFTPD Controls Buffer Overflow

Wed, 13 Dec 2006 19:06:42 -0300

CORE Security Technologies Advisories <[email protected]> • #1288

IBM DB2 Remote DoS during CONNECT processing

Wed, 13 Dec 2006 14:29:42 -0500

Team SHATTER <[email protected]> • #1287

iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability

Tue, 12 Dec 2006 14:31:20 -0500

iDefense Labs <[email protected]> • #1286

iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability

Tue, 12 Dec 2006 14:31:08 -0500

iDefense Labs <[email protected]> • #1285

iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Fri, 08 Dec 2006 17:56:37 -0500

iDefense Labs <[email protected]> • #1284

iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability

Fri, 08 Dec 2006 17:56:31 -0500

iDefense Labs <[email protected]> • #1283

iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability

Fri, 08 Dec 2006 17:56:23 -0500

iDefense Labs <[email protected]> • #1282

XSS vulnerability in OFBIZ forum

Fri, 8 Dec 2006 17:35:36 +0200 (EET)

Ēriks <[email protected]> • #1281

Orkut Multiple Cross Site Scripting Vulnerabilities

Thu, 7 Dec 2006 23:33:58 -0800 (PST)

Rajesh Sethumadhavan <[email protected]> • #1280

EEYE: Intel Network Adapter Driver Local Privilege Escalation

Thu, 7 Dec 2006 15:09:10 -0800

"eEye Advisories" <[email protected]> • #1279

Orkut Email Address Disclosure Vulnerability

Thu, 7 Dec 2006 13:08:27 -0800 (PST)

Rajesh Sethumadhavan <[email protected]> • #1278

EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability

Tue, 5 Dec 2006 17:28:44 -0800

"eEye Advisories" <[email protected]> • #1277

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability

Fri, 01 Dec 2006 16:01:27 -0500

iDefense Labs <[email protected]> • #1276

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Fri, 01 Dec 2006 16:01:18 -0500

iDefense Labs <[email protected]> • #1275

iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability

Thu, 30 Nov 2006 13:55:35 -0500

iDefense Labs <[email protected]> • #1274

TWiki Security Alert: Login bypass allows view of access restricted content (CVE-2006-6071)

Thu, 30 Nov 2006 10:51:57 -0800

Peter Thoeny <[email protected]> • #1273

iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability

Wed, 29 Nov 2006 10:38:47 -0500

iDefense Labs <[email protected]> • #1272

The Week of Oracle Database Bugs

Mon, 20 Nov 2006 13:25:31 -0800 (PST)

Cesar <[email protected]> • #1271

EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow

Wed, 15 Nov 2006 14:02:03 -0800

"eEye Advisories" <[email protected]> • #1270

iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability

Thu, 09 Nov 2006 12:21:32 -0500

iDefense Labs <[email protected]> • #1269

iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability

Wed, 08 Nov 2006 12:25:57 -0500

iDefense Labs <[email protected]> • #1268

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop

Wed, 8 Nov 2006 11:46:13 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1267

iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities

Wed, 08 Nov 2006 10:07:17 -0500

iDefense Labs <[email protected]> • #1266

Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie

Wed, 08 Nov 2006 11:40:10 +0000

ProCheckUp Research <[email protected]> • #1265

Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server

Mon, 06 Nov 2006 13:54:34 +0000

ProCheckUp Research <[email protected]> • #1264

Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00

Thu, 02 Nov 2006 02:24:23 +0100

Nicob <[email protected]> • #1263

Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass

Wed, 01 Nov 2006 16:15:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1262

iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability

Tue, 31 Oct 2006 18:35:52 -0500

iDefense Labs <[email protected]> • #1261

iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability

Tue, 31 Oct 2006 18:35:49 -0500

iDefense Labs <[email protected]> • #1260

iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability

Tue, 31 Oct 2006 18:35:46 -0500

iDefense Labs <[email protected]> • #1259

iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability

Thu, 26 Oct 2006 14:50:08 -0400

iDefense Labs <[email protected]> • #1258

iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability

Thu, 26 Oct 2006 14:50:05 -0400

iDefense Labs <[email protected]> • #1257

Cisco Security Advisory: Cisco Security Agent for Linux Port Scan Denial of Service

Wed, 25 Oct 2006 16:15:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1256

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Sun, 22 Oct 2006 00:43:44 -0400

iDefense Labs <[email protected]> • #1255

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability

Sun, 22 Oct 2006 00:43:33 -0400

iDefense Labs <[email protected]> • #1254

iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability

Sun, 22 Oct 2006 00:43:31 -0400

iDefense Labs <[email protected]> • #1253

iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability

Thu, 19 Oct 2006 15:49:34 -0400

iDefense Labs <[email protected]> • #1252

Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin

Tue, 17 Oct 2006 13:36:21 -0700

[email protected] • #1251

iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability

Tue, 17 Oct 2006 16:08:15 -0400

iDefense Labs <[email protected]> • #1250

iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability

Mon, 16 Oct 2006 16:03:59 -0400

iDefense Labs <[email protected]> • #1249

iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV rebuildpe Heap Overflow Vulnerability

Mon, 16 Oct 2006 16:03:57 -0400

iDefense Labs <[email protected]> • #1248

Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux

Mon, 16 Oct 2006 14:54:16 -0400

[email protected] • #1247

Kmail <= 1.9.1 (table/frameset) DOS

Sat, 14 Oct 2006 21:33:55 +0100

nnp <[email protected]> • #1246

iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability

Fri, 13 Oct 2006 14:37:38 -0400

iDefense Labs <[email protected]> • #1245

iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability

Thu, 12 Oct 2006 13:16:37 -0400

iDefense Labs <[email protected]> • #1244

Cisco Security Advisory: Default Password in Wireless Location Appliance

Thu, 12 Oct 2006 12:12:04 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1243

iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability

Wed, 11 Oct 2006 16:45:09 -0400

iDefense Labs <[email protected]> • #1242

iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability

Wed, 11 Oct 2006 16:28:00 -0400

iDefense Labs <[email protected]> • #1241

Kmail <= 1.9.1 (latest) DOS

Tue, 10 Oct 2006 23:57:21 +0100

nnp <[email protected]> • #1240

PacSec Hype Security Team: CGI.pm param injection

Tue, 10 Oct 2006 15:54:24 -0700

Dragos Ruiu <[email protected]> • #1239