gmane.comp.security.vulnerabilities.watch.announce archive

Business Objects WebIntelligence 6.5x Account Lockout and System DoS

Wed, 14 Dec 2005 12:50:45 +0000

Michael M Kemp <[email protected]> • #1038

[EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability

Tue, 13 Dec 2005 10:18:25 -0800

"Advisories" <[email protected]> • #1037

iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability

Mon, 12 Dec 2005 12:41:20 -0500

"[email protected]" <[email protected]> • #1036

iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability

Fri, 09 Dec 2005 16:32:51 -0500

"[email protected]" <[email protected]> • #1035

Milliscript 1.4 Multiple Vulnerabilities

Fri, 9 Dec 2005 14:14:04 -0600

"NaPa" <[email protected]> • #1034

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability

Wed, 07 Dec 2005 17:56:59 -0500

"[email protected]" <[email protected]> • #1033

iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability

Tue, 06 Dec 2005 18:06:39 -0500

"[email protected]" <[email protected]> • #1032

iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability

Tue, 06 Dec 2005 18:05:59 -0500

"[email protected]" <[email protected]> • #1031

[xfocus-SD-051202]openMotif libUil Multiple vulnerability

Fri, 02 Dec 2005 10:59:05 +0800

"[email protected]" <[email protected]> • #1030

Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability

Thu, 01 Dec 2005 17:43:52 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1029

XSS & Header Injection in Drupal and vBulletin

Wed, 30 Nov 2005 19:34:07 -0500 (EST)

Paul Laudanski <[email protected]> • #1028

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation

Tuesday, 29 Nov 2005 10:00:00 -0600

Cisco Systems Product Security Incident Response Team <[email protected]> • #1027

Google Search Appliance proxystylesheet Flaws

Mon, 21 Nov 2005 12:05:44 -0600

H D Moore <[email protected]> • #1026

ZDI-05-003: Novell NetMail IMAPD Buffer Overflows

Fri, 18 Nov 2005 10:04:55 -0800

[email protected] • #1025

iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability

Thu, 17 Nov 2005 14:19:03 -0500

"[email protected]" <[email protected]> • #1024

Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone

Wed, 16 Nov 2005 17:00:00 +0100

Cisco Systems Product Security Incident Response Team <[email protected]> • #1023

Schneier's PasswordSafe password validation flaw

Wed, 16 Nov 2005 15:36:48 +0300

[email protected] • #1022

iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability

Tue, 15 Nov 2005 17:49:41 -0500

"[email protected]" <[email protected]> • #1021

iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability

Tue, 15 Nov 2005 17:49:01 -0500

"[email protected]" <[email protected]> • #1020

[xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability

Tue, 15 Nov 2005 13:59:37 +0800

"[email protected]" <[email protected]> • #1019

Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite

Mon, 14 Nov 2005 13:00:00 +0100

Cisco Systems Product Security Incident Response Team <[email protected]> • #1018

iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability

Fri, 11 Nov 2005 11:45:05 -0500

"[email protected]" <[email protected]> • #1017

[EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II

Thu, 10 Nov 2005 13:44:50 -0800

<[email protected]> • #1016

[EEYEB-20050510] - RealPlayer Data Packet Stack Overflow

Thu, 10 Nov 2005 13:41:46 -0800

<[email protected]> • #1015

[EEYEB-20050329] Windows Metafile Multiple Heap Overflows

Tue, 8 Nov 2005 11:39:44 -0800

<[email protected]> • #1014

[EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability)

Tue, 8 Nov 2005 11:39:31 -0800

<[email protected]> • #1013

[EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability

Fri, 4 Nov 2005 17:30:15 -0800

<[email protected]> • #1012

iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability

Fri, 4 Nov 2005 18:16:13 -0500

"iDEFENSE Labs" <[email protected]> • #1011

iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability

Fri, 4 Nov 2005 18:15:27 -0500

"iDEFENSE Labs" <[email protected]> • #1010

ZDI-05-002: Clam Antivirus Remote Code Execution

Fri, 4 Nov 2005 11:29:38 -0600

[email protected] • #1009

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers

Wed, 02 Nov 2005 11:47:13 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1008

Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

Wed, 02 Nov 2005 16:00:00 +0100

Cisco Systems Product Security Incident Response Team <[email protected]> • #1007

Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability

Tue, 01 Nov 2005 16:50:22 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #1006

RE: [VulnDiscuss] new IE bug (confirmed on ALL windows)

Tue, 1 Nov 2005 14:18:23 -0500 (EST)

Steve Manzuik <[email protected]> • #1005

iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability

Fri, 28 Oct 2005 15:58:45 -0400

"iDEFENSE Labs" <[email protected]> • #1004

fetchmail security announcement 2005-02 (CVE-2005-3088)

Thu, 27 Oct 2005 10:57:55 +0200 (CEST)

[email protected] • #1003

Network Appliance iSCSI Authentication Bypass

Tue, 25 Oct 2005 06:19:43 -0400

[email protected] • #1002

iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

Mon, 24 Oct 2005 18:51:26 -0400

"iDEFENSE Labs" <[email protected]> • #1001

iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability

Mon, 24 Oct 2005 18:51:23 -0400

"iDEFENSE Labs" <[email protected]> • #1000

iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability

Mon, 24 Oct 2005 18:51:20 -0400

"iDEFENSE Labs" <[email protected]> • #999

iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation

Thu, 20 Oct 2005 17:35:34 -0400

"iDEFENSE Labs" <[email protected]> • #998

iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation

Thu, 20 Oct 2005 17:35:10 -0400

"iDEFENSE Labs" <[email protected]> • #997

iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability

Thu, 20 Oct 2005 17:35:06 -0400

"iDEFENSE Labs" <[email protected]> • #996

[Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities)

Wed, 19 Oct 2005 11:27:42 -0700 (PDT)

Cesar <[email protected]> • #995

Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability

Thursday, 19 Oct 2005 11:00:00 -0500

Cisco Systems Product Security Incident Response Team <[email protected]> • #994

back orifice and snort - two words not to be used together

Tue, 18 Oct 2005 17:05:41 -0500 (EST)

Chris Wysopal <[email protected]> • #993

flexbackup default config insecure temporary file creation

Mon, 17 Oct 2005 10:06:06 +0200

ZATAZ Audits <[email protected]> • #992

iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability

Thu, 13 Oct 2005 13:16:13 -0400

"iDEFENSE Labs" <[email protected]> • #991

iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability

Thu, 13 Oct 2005 13:16:12 -0400

"iDEFENSE Labs" <[email protected]> • #990

ZDI-05-001: VERITAS NetBackup Remote Code Execution

Wed, 12 Oct 2005 11:33:23 -0500

[email protected] • #989

OOO Troll - Ignore

Tue, 11 Oct 2005 17:56:34 -0500 (EST)

Steve Manzuik <[email protected]> • #988

[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability

Tue, 11 Oct 2005 12:05:50 -0700

<[email protected]> • #987

[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability

Tue, 11 Oct 2005 12:05:35 -0700

<[email protected]> • #986

[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability

Tue, 11 Oct 2005 12:05:20 -0700

<[email protected]> • #985

[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability

Tue, 11 Oct 2005 12:05:02 -0700

<[email protected]> • #984

iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability

Tue, 11 Oct 2005 14:38:36 -0400

"iDEFENSE Labs" <[email protected]> • #983

iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability

Tue, 11 Oct 2005 14:38:34 -0400

"iDEFENSE Labs" <[email protected]> • #982

iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability

Mon, 10 Oct 2005 16:54:23 -0400

"iDEFENSE Labs" <[email protected]> • #981

iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability

Mon, 10 Oct 2005 16:53:27 -0400

"iDEFENSE Labs" <[email protected]> • #980

Patches available for critical flaws in HP Openview

Wed, 5 Oct 2005 08:56:20 +0100

"NGSSoftware Insight Security Research" <[email protected]> • #979

RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability

Tue, 4 Oct 2005 18:09:43 -0400

"iDEFENSE Labs" <[email protected]> • #978

iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability

Tue, 4 Oct 2005 18:03:24 -0400

"iDEFENSE Labs" <[email protected]> • #977

iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability

Tue, 4 Oct 2005 17:49:52 -0400

"iDEFENSE Labs" <[email protected]> • #976

iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability

Fri, 30 Sep 2005 14:23:45 -0400

"iDEFENSE Labs" <[email protected]> • #975

apachetop insecure temporary file creation

Fri, 30 Sep 2005 14:17:59 +0200

ZATAZ Audits <[email protected]> • #974

[NRVA05-08] - Arbitrary file download by NateOn Messagener's ActiveX and DoS

Thu, 29 Sep 2005 11:36:27 +0800

"saintlinu" <[email protected]> • #973

Message for D1g1t4lLeech ZATAZ Audit has discovered this bug the 2005-09-05 D1g1t4lLeech you are a true Leecher ;)

Fri, 16 Sep 2005 16:13:27 +0200

ZATAZ Audits <[email protected]> • #972

arc insecure temporary file creation

Fri, 16 Sep 2005 16:06:22 +0200

ZATAZ Audits <[email protected]> • #971

ncompress insecure temporary file creation

Fri, 16 Sep 2005 16:00:05 +0200

ZATAZ Audits <[email protected]> • #970

gwcc insecure temporary file creation

Fri, 16 Sep 2005 15:48:14 +0200

ZATAZ Audits <[email protected]> • #969