Vulnwatch: by author

81 messages starting Dec 19 05 and ending Nov 04 05
Date index | Thread index | Author index


ad () heapoverflow com

2x 0day Microsoft Windows Excel ad () heapoverflow com (Dec 19)

Advisories

[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Advisories (Oct 11)
[EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II Advisories (Nov 10)
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Advisories (Oct 11)
[EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Advisories (Dec 13)
[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability Advisories (Oct 11)
[EEYEB-20050329] Windows Metafile Multiple Heap Overflows Advisories (Nov 08)
Network Appliance iSCSI Authentication Bypass advisories (Oct 25)
[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability Advisories (Oct 11)
[EEYEB-20050510] - RealPlayer Data Packet Stack Overflow Advisories (Nov 10)
[EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability Advisories (Nov 04)
[EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) Advisories (Nov 08)

alert7 () xfocus org

[xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability alert7 () xfocus org (Nov 15)
[xfocus-SD-051202]openMotif libUil Multiple vulnerability alert7 () xfocus org (Dec 01)

Cesar

[Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities) Cesar (Oct 19)

Chris Wysopal

back orifice and snort - two words not to be used together Chris Wysopal (Oct 18)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation Cisco Systems Product Security Incident Response Team (Nov 29)
Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability Cisco Systems Product Security Incident Response Team (Oct 19)
Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability Cisco Systems Product Security Incident Response Team (Dec 01)
Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite Cisco Systems Product Security Incident Response Team (Nov 14)
Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability Cisco Systems Product Security Incident Response Team (Nov 01)
Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers Cisco Systems Product Security Incident Response Team (Nov 02)
Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Cisco Systems Product Security Incident Response Team (Nov 02)
Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone Cisco Systems Product Security Incident Response Team (Nov 16)

H D Moore

Google Search Appliance proxystylesheet Flaws H D Moore (Nov 21)

iDEFENSE Labs

iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation iDEFENSE Labs (Oct 20)
iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability iDEFENSE Labs (Oct 10)
iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability iDEFENSE Labs (Oct 10)
iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Labs (Oct 20)
iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability iDEFENSE Labs (Nov 04)
iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability iDEFENSE Labs (Oct 24)
iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability iDEFENSE Labs (Oct 13)
iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability iDEFENSE Labs (Oct 05)
iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability iDEFENSE Labs (Oct 24)
iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability iDEFENSE Labs (Nov 04)
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability iDEFENSE Labs (Oct 11)
iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Labs (Oct 24)
iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation iDEFENSE Labs (Oct 20)
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability iDEFENSE Labs (Oct 11)
iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability iDEFENSE Labs (Oct 30)
iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability iDEFENSE Labs (Oct 05)
RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability iDEFENSE Labs (Oct 05)
iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability iDEFENSE Labs (Oct 13)

labs-no-reply () idefense com

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability labs-no-reply () idefense com (Dec 07)
iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability labs-no-reply () idefense com (Dec 09)
iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability labs-no-reply () idefense com (Nov 16)
iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability labs-no-reply () idefense com (Dec 12)
iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability labs-no-reply () idefense com (Nov 16)
iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability labs-no-reply () idefense com (Dec 16)
iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability labs-no-reply () idefense com (Nov 11)
iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability labs-no-reply () idefense com (Dec 21)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure labs-no-reply () idefense com (Dec 14)
iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability labs-no-reply () idefense com (Dec 06)
iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability labs-no-reply () idefense com (Dec 20)
iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability labs-no-reply () idefense com (Dec 22)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability labs-no-reply () idefense com (Dec 14)
iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite labs-no-reply () idefense com (Dec 20)
iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability labs-no-reply () idefense com (Nov 17)
iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability labs-no-reply () idefense com (Dec 14)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability labs-no-reply () idefense com (Dec 14)
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow labs-no-reply () idefense com (Dec 14)
iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability labs-no-reply () idefense com (Dec 06)

ma+nomail

fetchmail security announcement 2005-02 (CVE-2005-3088) ma+nomail (Oct 27)
fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348) ma+nomail (Dec 21)

Mariano Nuñez Di Croce

CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution Mariano Nuñez Di Croce (Dec 15)

Michael M Kemp

Business Objects WebIntelligence 6.5x Account Lockout and System DoS Michael M Kemp (Dec 14)

NaPa

Milliscript 1.4 Multiple Vulnerabilities NaPa (Dec 09)

NGSSoftware Insight Security Research

Patches available for critical flaws in HP Openview NGSSoftware Insight Security Research (Oct 05)

Nils Ohlmeier

Replay Attack Vulnerability on Sonys Instant Video Everywhere Service Nils Ohlmeier (Dec 30)

Paul Laudanski

XSS & Header Injection in Drupal and vBulletin Paul Laudanski (Nov 30)

Security Advisories

[ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others Security Advisories (Dec 21)

shadown

New site location shadown (Dec 23)

Steve Manzuik

RE: [VulnDiscuss] new IE bug (confirmed on ALL windows) Steve Manzuik (Nov 01)
OOO Troll - Ignore Steve Manzuik (Oct 11)

vkatalov

Schneier's PasswordSafe password validation flaw vkatalov (Nov 16)

Watchfire Research

XSS vulnerabilities in Google.com Watchfire Research (Dec 21)

yeah right

PTnet IRCD heap exhaustion and integer overflow yeah right (Dec 30)

ZATAZ Audits

flexbackup default config insecure temporary file creation ZATAZ Audits (Oct 17)

zdi-disclosures

ZDI-05-003: Novell NetMail IMAPD Buffer Overflows zdi-disclosures (Nov 18)
ZDI-05-001: VERITAS NetBackup Remote Code Execution zdi-disclosures (Oct 12)
ZDI-05-002: Clam Antivirus Remote Code Execution zdi-disclosures (Nov 04)