gmane.comp.security.vulnerabilities.watch.announce archive

iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability

Tue, 10 Oct 2006 18:05:56 -0400

iDefense Labs <[email protected]> • #1238

pacsec hype security team: 7 words of warning about Macromedia Flash Player 9+

Tue, 10 Oct 2006 14:41:05 -0700

Dragos Ruiu <[email protected]> • #1237

Cisco Security Advisory: Limitations in Cisco Secure Desktop

Mon, 9 Oct 2006 12:00:58 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1236

iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability

Thu, 05 Oct 2006 13:49:37 -0400

iDefense Labs <[email protected]> • #1235

iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability

Tue, 03 Oct 2006 12:14:32 -0400

iDefense Labs <[email protected]> • #1234

Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]

Sun, 1 Oct 2006 13:00:43 +0900

"Eiji James Yoshida" <[email protected]> • #1233

iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Signedness Vulnerability

Mon, 25 Sep 2006 17:52:05 -0400

iDefense Labs <[email protected]> • #1232

iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Overflow Vulnerability

Mon, 25 Sep 2006 17:51:46 -0400

iDefense Labs <[email protected]> • #1231

Cisco Security Advisory: DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

Wed, 20 Sep 2006 13:07:39 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1230

Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

Wed, 20 Sep 2006 12:34:09 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1229

Cisco Security Advisory: Cisco Guard enables Cross Site Scripting

Wed, 20 Sep 2006 15:00:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1228

NetPerformer FRAD ACT Multiple Vulnerabilities

Wed, 13 Sep 2006 17:13:36 +0700

[email protected] • #1227

[EEYEB-20080824] Internet Explorer Compressed Content URL Heap Overflow Vulnerability #2

Tue, 12 Sep 2006 15:28:12 -0700

"eEye Advisories" <[email protected]> • #1226

iDefense Security Advisory 09.12.06: Multiple Vendor X Server CID-keyed Fonts 'CIDAFM()' Integer Overflow

Tue, 12 Sep 2006 16:31:29 -0400

iDefense Labs <[email protected]> • #1225

iDefense Security Advisory 09.12.06: Multiple Vendor X Server CID-keyed Fonts 'scan_cidfont()' Integer Overflow Vulnerability

Tue, 12 Sep 2006 16:30:55 -0400

iDefense Labs <[email protected]> • #1224

iDefense Security Advisory 09.12.06: Apple QuickTime FLIC File Heap Overflow Vulnerability

Tue, 12 Sep 2006 16:20:30 -0400

iDefense Labs <[email protected]> • #1223

TWiki Security Alert: Viewfile script allows view of arbitrary files (CVE-2006-4294)

Thu, 07 Sep 2006 08:30:10 -0700

Peter Thoeny <[email protected]> • #1222

IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability

Fri, 8 Sep 2006 02:24:43 +0300 (EEST)

Juha-Matti Laurio <[email protected]> • #1221

CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer

Thu, 07 Sep 2006 17:03:21 -0300

CORE Security Technologies Advisories <[email protected]> • #1220

CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability

Thu, 07 Sep 2006 16:47:27 -0300

CORE Security Technologies Advisories <[email protected]> • #1219

NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability

Fri, 25 Aug 2006 14:55:02 +0800

NSFOCUS Security Team <[email protected]> • #1218

Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities

Thu, 24 Aug 2006 19:51:45 -0400

"Krulewitch, Sean V" <[email protected]> • #1217

Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products

Wed, 23 Aug 2006 12:44:31 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1216

Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities

Wed, 23 Aug 2006 12:30:24 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1215

Re: Re: Concurrency-related vulnerabilities in browsers - expect problems

Thu, 17 Aug 2006 14:04:33 -0400 (EDT)

"Steven M. Christey" <[email protected]> • #1214

[EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability

Wed, 16 Aug 2006 16:21:11 -0700

"eEye Advisories" <[email protected]> • #1213

Re: Concurrency-related vulnerabilities in browsers - expect problems

Tue, 15 Aug 2006 21:41:48 +0200 (CEST)

Michal Zalewski <[email protected]> • #1212

Concurrency-related vulnerabilities in browsers - expect problems

Sat, 12 Aug 2006 18:15:12 +0200 (CEST)

Michal Zalewski <[email protected]> • #1211

Latinchat Denial Of Service

Wed, 09 Aug 2006 15:45:13 -0500

Vicente Perez <[email protected]> • #1210

Latinchat Denial Of Service

Wed, 09 Aug 2006 02:04:26 -0500

Vicente Perez <[email protected]> • #1209

[EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow

Mon, 7 Aug 2006 15:09:36 -0700

"eEye Advisories" <[email protected]> • #1208

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue

Mon, 31 Jul 2006 13:59:57 +0100

"advisories" <[email protected]> • #1207

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue

Mon, 31 Jul 2006 13:55:19 +0100

"advisories" <[email protected]> • #1206

Corsaire Security Advisory - VMware ESX Server Password Cross Site Request Forgery issue

Mon, 31 Jul 2006 13:52:49 +0100

"advisories" <[email protected]> • #1205

TWiki Security Alert: Configure Script Allows Arbitrary Shell Command Execution (CVE-2006-3819)

Thu, 27 Jul 2006 22:35:01 -0700

Peter Thoeny <[email protected]> • #1204

Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability

Thu, 27 Jul 2006 18:04:44 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1203

NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

Thu, 27 Jul 2006 12:16:03 +0800

NSFOCUS Security Team <[email protected]> • #1202

iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability

Fri, 21 Jul 2006 16:52:09 -0400

labs-no-reply <[email protected]> • #1201

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)

Wed, 19 Jul 2006 12:00:45 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1200

[EEYEB-20060227] D-Link Router UPNP Stack Overflow

Mon, 17 Jul 2006 10:19:36 -0700

"eEye Advisories" <[email protected]> • #1199

Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant

Mon, 17 Jul 2006 12:52:55 +0100

"Mark Litchfield" <[email protected]> • #1198

Cisco Security Advisory: Cisco Intrusion Prevention System Malformed Packet Denial of Service

Wed, 12 Jul 2006 17:00:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1197

Cisco Security Advisory: Multiple Cisco Unified CallManager Vulnerabilities

Wed, 12 Jul 2006 23:05:30 +0000 (UTC)

Cisco Systems Product Security Incident Response Team <[email protected]> • #1196

Cisco Security Advisory: Cisco Router Web Setup Ships with Insecure Default IOS Configuration

Wed, 12 Jul 2006 12:31:54 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1195

NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability

Wed, 12 Jul 2006 15:43:48 +0800

NSFOCUS Security Team <[email protected]> • #1194

NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability

Wed, 12 Jul 2006 15:43:28 +0800

NSFOCUS Security Team <[email protected]> • #1193

NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability

Wed, 12 Jul 2006 15:42:54 +0800

NSFOCUS Security Team <[email protected]> • #1192

ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)

Mon, 10 Jul 2006 07:53:05 +0200

[email protected] • #1191

TWiki Security Alert: Secure webserver to prevent script execution of uploaded files (CVE-2006-3336)

Fri, 07 Jul 2006 14:03:11 -0700

Peter Thoeny <[email protected]> • #1190

WebEx Downloader Plug-in Multiple Vulnerabilities + rant

Fri, 7 Jul 2006 17:58:52 +0100

"Mark Litchfield" <[email protected]> • #1189

Digital Armaments Security: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability

Mon, 3 Jul 2006 08:02:59 -0700 (PDT)

[email protected] • #1188

Heap overflow in OpenOffice.org suite leads to code execution

Fri, 30 Jun 2006 14:51:40 +0100

"NGSSoftware Insight Security Research" <[email protected]> • #1187

Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability

Wed, 28 Jun 2006 17:00:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1186

Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System

Wed, 28 Jun 2006 17:00:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1185

ERNW Security Advisory 01/2006

Mon, 26 Jun 2006 15:15:29 +0200

[email protected] • #1184

TWiki Security Advisory: Privilege elevation with crafted registration form (CVE-2006-2942)

Fri, 16 Jun 2006 19:59:27 -0700

Peter Thoeny <[email protected]> • #1183

[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow

Mon, 12 Jun 2006 15:25:03 -0700

"eEye Advisories" <[email protected]> • #1182

You tube html/javascript code injection

Thu, 08 Jun 2006 21:46:33 +0200

[email protected] • #1181

Advisory - D-Link Access Point

Tue, 6 Jun 2006 22:09:46 -0300 (BRT)

news <[email protected]> • #1180

Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue

Thu, 1 Jun 2006 11:50:19 +0100

"advisories" <[email protected]> • #1179

Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability

Wed, 24 May 2006 11:25:44 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1178

Caucho Resin Windows Directory Traversal Vulnerability

Tue, 16 May 2006 11:08:04 -0700

[email protected] • #1177

Cisco Security Advisory: AVS TCP Relay Vulnerability

Wed, 10 May 2006 11:00:00 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1176

ISA Server 2004 Log Manipulation

Thu, 4 May 2006 16:28:40 +0300

beSIRT <[email protected]> • #1175

BankTown's ActiveX Buffer Overflow Vulnerability

Wed, 3 May 2006 18:34:37 +0800

"Alex Park" <[email protected]> • #1174

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary command execution.

Tue, 02 May 2006 15:40:57 +0200

Stefano Di Paola <[email protected]> • #1173

MySQL Anonymous Login Handshake - Information Leakage.

Tue, 02 May 2006 15:40:02 +0200

Stefano Di Paola <[email protected]> • #1172

Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation

Tue, 02 May 2006 05:30:00 -0000

Cisco Systems Product Security Incident Response Team <[email protected]> • #1171

PoC for Internet Explorer Modal Dialog Issue

Thu, 27 Apr 2006 07:37:54 -0500

Matthew Murphy <[email protected]> • #1170

Internet Explorer User Interface Races, Redeux

Wed, 26 Apr 2006 17:09:19 -0500

Matthew Murphy <[email protected]> • #1169

[EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow

Wed, 26 Apr 2006 12:33:35 -0700

"eEye Advisories" <[email protected]> • #1168

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

Wed, 26 Apr 2006 12:18:09 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1167

NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability

Mon, 24 Apr 2006 16:35:17 +0800

NSFOCUS Security Team <[email protected]> • #1166

NSFOCUS SA2006-03 : IBM AIX rm_mlcache_file Local Race Condition Vulnerability

Mon, 24 Apr 2006 16:37:05 +0800

NSFOCUS Security Team <[email protected]> • #1165

MSIE (mshtml.dll) OBJECT tag vulnerability

Sun, 23 Apr 2006 01:30:03 +0200 (CEST)

Michal Zalewski <[email protected]> • #1164

Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability

Fri, 21 Apr 2006 12:18:08 -0700

[email protected] • #1163

Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key

Fri, 21 Apr 2006 12:16:06 -0700

[email protected] • #1162

Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error

Fri, 21 Apr 2006 12:13:36 -0700

[email protected] • #1161

Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows

Fri, 21 Apr 2006 12:03:08 -0700

[email protected] • #1160

[Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure

Wed, 19 Apr 2006 17:02:56 -0700 (PDT)

Cesar <[email protected]> • #1159

Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance

Wed, 19 Apr 2006 17:00:00 +0200

Cisco Systems Product Security Incident Response Team <[email protected]> • #1158

Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities

Wed, 19 Apr 2006 17:00:00 +0200

Cisco Systems Product Security Incident Response Team <[email protected]> • #1157

Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting

Wed, 12 Apr 2006 18:36:08 -0300

"Esteban Martinez Fayo" <[email protected]> • #1156

Cisco Security Advisory: Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities

Wed, 5 Apr 2006 12:00:32 -0400

Cisco Systems Product Security Incident Response Team <[email protected]> • #1155

Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability

Wed, 05 Apr 2006 17:00:00 +0200

Cisco Systems Product Security Incident Response Team <[email protected]> • #1154

Barracuda ZOO archiver security bug leads to remote compromise

Mon, 03 Apr 2006 20:30:51 -0400

Jean-Sébastien Guay-Leroux <[email protected]> • #1153

Barracuda LHA archiver security bug leads to remote compromise

Mon, 03 Apr 2006 20:30:50 -0400

Jean-Sébastien Guay-Leroux <[email protected]> • #1152

[xfocus-SD-060329]MPlayer: Multiple integer overflows

Wed, 29 Mar 2006 14:12:52 +0800

XFOCUS Security Team <[email protected]> • #1151

Re: FW: failure notice

Tue, 28 Mar 2006 21:38:52 -0500

"Michael Evanchik" <[email protected]> • #1150

Re: FW: failure notice

Tue, 28 Mar 2006 14:38:13 -0800

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[email protected]> • #1149

FW: failure notice

Tue, 28 Mar 2006 17:12:18 -0500

Ken Pfeil <[email protected]> • #1148

EEYE: Temporary workaround for IE createTextRange vulnerability

Tue, 28 Mar 2006 13:43:16 -0500 (EST)

Steve Manzuik <[email protected]> • #1147

iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability

Thu, 23 Mar 2006 17:57:19 -0500

labs-no-reply <[email protected]> • #1146

iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability

Thu, 23 Mar 2006 17:57:49 -0500

labs-no-reply <[email protected]> • #1145

PasswordSafe 3.0 weak random number generator allows key recovery attack

Thu, 23 Mar 2006 17:14:54 +0300

[email protected] • #1144

CORE-2006-0124: Cross-Site Scripting in Verisign’s haydn.exe CGI script

Mon, 20 Mar 2006 20:29:25 -0300

CORE Security Technologies Advisories <[email protected]> • #1143

Re: Remote overflow in MSIE script action handlers (mshtml.dll)

Sat, 18 Mar 2006 05:46:46 +0000

Konstantine <[email protected]> • #1142

Re: Remote overflow in MSIE script action handlers (mshtml.dll)

Fri, 17 Mar 2006 08:47:45 +0100 (CET)

Michal Zalewski <[email protected]> • #1141

Re: Remote overflow in MSIE script action handlers (mshtml.dll)

Thu, 16 Mar 2006 22:13:37 +0100 (CET)

Michal Zalewski <[email protected]> • #1140

Remote overflow in MSIE script action handlers (mshtml.dll)

Thu, 16 Mar 2006 20:22:55 +0100 (CET)

Michal Zalewski <[email protected]> • #1139