Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

467 messages starting Aug 31 04 and ending Sep 30 04
Date index | Thread index | Author index

• Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jérôme (Aug 31)
  • <Possible follow-ups>
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Ryan_Ward (Sep 27)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Brian Kirkbride (Sep 29)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes gandalf (Sep 28)
    • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jason T. Miller (Sep 29)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Bruce Barnett (Sep 29)
• Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation Cisco Systems Product Security Incident Response Team (Aug 31)
• OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability please_reply_to_security (Aug 31)
• Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd Jérôme (Aug 31)
• SUSE Security Announcement: kernel (SUSE-SA:2004:028) Thomas Biege (Sep 01)
  • Re: SUSE Security Announcement: kernel (SUSE-SA:2004:028) Paul Starzetz (Sep 02)
• [ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy Thierry Carrez (Sep 01)
• Cross-Site Scripting Vulnerability in Newtelligence DasBlog Dominick Baier (Sep 01)
  • <Possible follow-ups>
  • Cross-Site Scripting Vulnerability in Newtelligence DasBlog Dominick Baier (Sep 05)
• RE: Security Center and Windows XP clients in domain David Webster (Sep 01)
  • <Possible follow-ups>
  • Re: Security Center and Windows XP clients in domain Thor (Sep 01)
• ADVISORY: http response splitting hole in Comersus shopping cart Maestro De-Seguridad (Sep 01)
• New security tools and papers released shadown (Sep 01)
• [security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow Boren, Rich (SSRT) (Sep 01)
• RE: Security Center and Windows XP clients in domain, 20040831062712.31317.qmail () www securityfocus com Sym Security (Sep 01)
• [nisr () nextgenss com: Patch available for multiple critical flaws in Oracle] David Ahmad (Sep 01)
• RE: CuteNews News.txt writable to world Albert Puigsech Galicia (Sep 01)
• MITKRB5-SA-2004-002: double-free vulnerabilities Tom Yu (Sep 02)
• MSInfo Buffer Overflow E.Kellinis (Sep 02)
• Multiple Vulnerabilities In phpWebsite GulfTech Security (Sep 02)
• Opera DOS Stevo (Sep 02)
• SSHD / AnonCVS Nastyness Dragos Ruiu (Sep 02)
• [ GLSA 200409-01 ] vpopmail: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sep 02)
• Exploit: AIM Exploit (Ignore Previous Post) John Bissell (Sep 02)
• MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities Mandrake Linux Security Team (Sep 02)
• Re: Linux OpenExchange - cleartext rootpw in swap Valdis . Kletnieks (Sep 02)
  • <Possible follow-ups>
  • Re: Linux OpenExchange - cleartext rootpw in swap Joshua Goodall (Sep 03)
• Password Protect XSS and SQL-Injection vulnerabilities. Criolabs (Sep 02)
• [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews Exoduks (Sep 02)
• TSL-2004-0045 - kerberos5 Trustix Security Advisor (Sep 02)
• [ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo() Thierry Carrez (Sep 02)
• [ GLSA 200409-06 ] eGroupWare: Multiple XSS vulnerabilities Sune Kloppenborg Jeppesen (Sep 02)
• [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server SHATTER (Application Security, Inc.) (Sep 02)
• WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code Jérôme (Sep 02)
• [ GLSA 200409-05 ] Gallery: Arbitrary command execution Sune Kloppenborg Jeppesen (Sep 02)
• SUSE Security Announcement: zlib (SUSE-SA:2004:029) Thomas Biege (Sep 02)
• [ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication Thierry Carrez (Sep 02)
• MailWorks Professional - Authentication bypass headpimp (Sep 02)
  • <Possible follow-ups>
  • MailWorks Professional - Authentication Bypass headpimp (Sep 03)
• Patch available for IBM DB2 Universal Database flaws NGSSoftware Insight Security Research (Sep 02)
• Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration Jérôme (Sep 03)
• UPDATE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities Sune Kloppenborg Jeppesen (Sep 03)
• [XSS] PHP-Nuke 7.4 Remote Privilege Escalation Pierquinto Manco (Sep 03)
• Dynalink routers backdoor? fabio (Sep 03)
• [ GLSA 200409-07 ] xv: Buffer overflows in image handling Sune Kloppenborg Jeppesen (Sep 03)
• FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities Thor Larholm (Sep 04)
  • <Possible follow-ups>
  • Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities http-equiv () excite com (Sep 09)
• Engenio/LSI Logic controllers denial of service/data corruption Jedi/Sector One (Sep 04)
  • Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) Jedi/Sector One (Sep 06)
• [XSS] PHP-Nuke 7.4 ViewAdmin Bug Pierquinto Manco (Sep 04)
  • Re: [XSS] PHP-Nuke 7.4 Bugs Blaine Elzey (Sep 07)
    • Re: [XSS] PHP-Nuke 7.4 Bugs Peter Lowe (Sep 08)
• [ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely Sune Kloppenborg Jeppesen (Sep 05)
• [XSS] PHP-Nuke 7.4 DelAdmin Bug Pierquinto Manco (Sep 05)
• FUll Path Disclosure in YABBSE Ahmad Muammar (Sep 05)
• Patch available for multiple critical flaws in Oracle NGSSoftware Insight Security Research (Sep 05)
• OpenCA Security Advisory: Cross Site Scripting vulnerability Martin Bartosch (Sep 06)
• SUSE Security Announcement: apache2 (SUSE-SA:2004:030) Sebastian Krahmer (Sep 06)
• [ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities Thierry Carrez (Sep 06)
• Broadcast shutdown in Call of Duty 1.4 Luigi Auriemma (Sep 06)
• serverview 3.0 - insecure file permissions Rene (Sep 06)
• [RLSA_01-2004] QNX PPPoEd local root vulnerabilities Julio Cesar Fort (Sep 06)
• cdrdao local root exploit Jérôme (Sep 06)
  • Re: cdrdao local root exploit 3APA3A (Sep 07)
• Apple, Apple Remote Desktop client Adam Shostack (Sep 06)
• [ GLSA 200409-10 ] multi-gnome-terminal: Information leak Thierry Carrez (Sep 06)
• [XSS] PHP-Nuke 7.4 Newsletter Injection Bug Pierquinto Manco (Sep 07)
• Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4 Pierquinto Manco (Sep 07)
• [XSS] PHP-Nuke 7.4 AddMsg Bug Pierquinto Manco (Sep 07)
• PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch Pierquinto Manco (Sep 07)
• Bug XSS in PsNews 1.1 Michal Blaszczak (Sep 07)
  • <Possible follow-ups>
  • Bug XSS in PsNews 1.1 Michal Blaszczak (Sep 10)
• Site News Authentication Error May Let Local Users Add Messages Jérôme (Sep 07)
• mpg123 buffer overflow vulnerability Davide Del Vecchio (Sep 07)
• [SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability snsadv (Sep 07)
• [ GLSA 200409-11 ] star: Suid root vulnerability Kurt Lieber (Sep 08)
• MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability Mandrake Linux Security Team (Sep 08)
• Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit Jérôme (Sep 08)
• Insecure Temporary File Creation Vulnerability in Net-Acct Jérôme (Sep 08)
• Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities] Jérôme (Sep 08)
• [XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug bima tampan (Sep 08)
• MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability Mandrake Linux Security Team (Sep 08)
• MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability Mandrake Linux Security Team (Sep 08)
• [ GLSA 200409-13 ] LHa: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Sep 08)
• [ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows Thierry Carrez (Sep 08)
• [ GLSA 200409-14 ] Samba: Remote printing vulnerability Sune Kloppenborg Jeppesen (Sep 09)
• Multiple vulnerabilities 1n BBS E-Market Professional Ahmad Muammar (Sep 09)
• Off-by-one bug in Halo 1.04 Luigi Auriemma (Sep 09)
• SQL-Injection in Subjects 2.0 for Postnuke Criolabs (Sep 10)
• F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE] Jérôme (Sep 10)
• OpenOffice World-Readable Temporary Files Disclose Files to Local Users Jérôme (Sep 10)
• BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included] Jérôme (Sep 10)
• New Data Wipe Tools Thomas C. Greene (Sep 10)
  • Re: New Data Wipe Tools Jake Appelbaum (Sep 11)
  • Re: New Data Wipe Tools Brendan Murray (Sep 11)
  • <Possible follow-ups>
  • Re: New Data Wipe Tools Thomas C. Greene (Sep 11)
    • Re: New Data Wipe Tools Derek Martin (Sep 13)
  • RE: New Data Wipe Tools Altheide, Cory B. (IARC) (Sep 13)
• [CLA-2004:860] Conectiva Security Announcement - krb5 Conectiva Updates (Sep 10)
• ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability Sune Kloppenborg Jeppesen (Sep 10)
• Axis Network Camera and Video Server Security Advisory product-security (Sep 10)
• Multiple vulnerabilities in Icewarp Web Mail 5.2.7 ShineShadow (Sep 10)
• cdrecord local root exploit newbug Tseng (Sep 10)
  • Re: cdrecord local root exploit Sean Davis (Sep 13)
    • Message not available
      • Re: cdrecord local root exploit Sean Davis (Sep 13)
    • Re: cdrecord local root exploit Volker Kuhlmann (Sep 14)
      • Re: cdrecord local root exploit Marcus Meissner (Sep 16)
      • Re: cdrecord local root exploit Coleman (Sep 16)
      • Re: cdrecord local root exploit Jason T. Miller (Sep 16)
      • Re: cdrecord local root exploit Dr Andrew C Aitchison (Sep 27)
      • Re: cdrecord local root exploit Jason T. Miller (Sep 30)
• [CLA-2004:863] Conectiva Security Announcement - wv Conectiva Updates (Sep 10)
• Serv-U up to 5.2 Denial of Service Patrick (Sep 11)
• Remote buffer overflow in Apache mod_ssl when reverse proxying SSL Jérôme (Sep 11)
  • Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL 3APA3A (Sep 13)
• CAU-EX-2004-0002: cdrecord-suidshell.sh I)ruid (Sep 11)
• problem in voip environment Pasquiet Loic (M.) (Sep 13)
• Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Wolfpaw - Dale Corse (Sep 13)
  • Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service David S. Miller (Sep 13)
  • <Possible follow-ups>
  • RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Wolfpaw - Dale Corse (Sep 13)
    • Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service David S. Miller (Sep 13)
    • RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service Ron DuFresne (Sep 13)
• [CLA-2004:864] Conectiva Security Announcement - kde Conectiva Updates (Sep 13)
• Gadu-Gadu (all versions with image-send feature) Heap Overflow Sec-Labs Team (Sep 13)
• [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) OpenPKG (Sep 13)
• [CLA-2004:865] Conectiva Security Announcement - zlib Conectiva Updates (Sep 13)
• Posible Inclusion File in Perl Desk Nikyt0x Argentina (Sep 13)
• [ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin Dan Margolis (Sep 13)
• Directory Traversal Vulnerability in TwinFTP Server allows overwriting Jérôme (Sep 13)
• [ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities Sune Kloppenborg Jeppesen (Sep 13)
• Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) Gerald (Jerry) Carter (Sep 13)
• @stake advisory: Lexar JumpDrive Secure Password Extraction Chris Wysopal (Sep 13)
• Insecure file permissions in the Firefox browser for Linux >= v0.9 Max (Sep 13)
• [RLSA_02-2004] QNX Photon multiple buffer overflows Julio Cesar Fort (Sep 13)
• Samba nmbd Invalid Length Denial of Service Vulnerability [iDEFENSE] Jérôme (Sep 13)
• Zyxel Prestige 681 SDSL router information leak Przemyslaw Frasunek (Sep 13)
• [RLSA_03-2004] QNX ftp client format string bug Julio Cesar Fort (Sep 13)
• [RLSA_04-2004] QNX crrtrap possible race condition vulnerability Julio Cesar Fort (Sep 13)
• QNX crrtrap possible race condition vulnerability Jérôme (Sep 13)
• @stake advisory: Pingtel Xpressa Denial of Service Advisories (Sep 13)
• MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities Mandrake Linux Security Team (Sep 13)
• The ArpSucker is b0rn! Be yourself, be the net. Alpt (Sep 13)
• TSL-2004-0046 - multi Trustix Security Advisor (Sep 14)
• Inkra 1504GX DoS vulnerability in conducting IP protocol felix zhou (Sep 14)
• Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue advisories (Sep 14)
• [SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory Martin Schulze (Sep 14)
• Corsaire Security Advisory - Multiple vendor MIME separator issue advisories (Sep 14)
• Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue advisories (Sep 14)
• SUS 2.0.2 local root vulnerability LSS Security (Sep 14)
• Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue advisories (Sep 14)
• [XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug bima tampan (Sep 14)
• Correction to latest Colsaire advisories 3APA3A (Sep 14)
  • Re: Correction to latest Colsaire advisories Andreas Marx (Sep 15)
  • <Possible follow-ups>
  • Re: Correction to latest Colsaire advisories advisories (Sep 15)
    • RE: Correction to latest Colsaire advisories David Litchfield (Sep 16)
  • RE: Correction to latest Colsaire advisories advisories (Sep 16)
  • RE: Correction to latest Colsaire advisories advisories (Sep 25)
• Rainbow tables for LM/NTLMv1 authentication Hidenobu Seki (Sep 14)
• ADVISORY: http response splitting in snipsnap Maestro De-Seguridad (Sep 14)
• Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution [MS04-028] Jérôme (Sep 14)
• [ GLSA 200409-17 ] SUS: Local root vulnerability Sune Kloppenborg Jeppesen (Sep 14)
• Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability Jérôme (Sep 14)
• Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories (Sep 14)
  • Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll (Sep 15)
    • Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David Covin (Sep 15)
      • Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll (Sep 16)
      • Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue Borja Marcos (Sep 17)
      • Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue Greg A. Woods (Sep 18)
• Corsaire Security Advisory - Multiple vendor MIME field quoting issue advisories (Sep 14)
• [ GLSA 200409-18 ] cdrtools: Local root vulnerability in cdrecord if set SUID root Sune Kloppenborg Jeppesen (Sep 14)
• Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Nick D. (Sep 15)
  • <Possible follow-ups>
  • RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin (Sep 15)
    • Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow sheep explode (Sep 16)
    • Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Gary Warner (Sep 16)
  • RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin (Sep 16)
  • RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Angelidis, Fotis(NSASOUDABAY) (Sep 16)
  • RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Parks, Matt (Sep 16)
  • RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow Polazzo Justin (Sep 16)
• Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue advisories (Sep 15)
• Corsaire Security Advisory - Multiple vendor MIME field whitespace issue advisories (Sep 15)
• New Mozilla, Firefox and Thunderbird releases fix critical security issues Gaël Delalleau (Sep 15)
• SMC7004VWBR / SMC7008ABR "spoofing" vulnerability. Jimmy Scott (Sep 15)
• [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) OpenPKG (Sep 15)
• McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] Jérôme (Sep 15)
• [OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell) OpenPKG (Sep 15)
• SA04-002 - Apache config file env variable buffer overflow jonas . thambert (Sep 15)
• MDKSA-2004:093 - Updated squid packages fix DoS vulnerability Mandrake Linux Security Team (Sep 15)
• SUSE Security Announcement: apache2 (SUSE-SA:2004:032) Ludwig Nussel (Sep 15)
• MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic Mandrake Linux Security Team (Sep 15)
• MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities Mandrake Linux Security Team (Sep 15)
• PHP Vulnerability N. 1 Stefano Di Paola (Sep 15)
• [SECURITY] [DSA 545-1] New cupsys packages fix denial of service Martin Schulze (Sep 15)
• SUSE Security Announcement: cups (SUSE-SA:2004:031) Sebastian Krahmer (Sep 15)
• Re: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] bashis (Sep 15)
• MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities Mandrake Linux Security Team (Sep 15)
• CESA-2004-005: gtk+ XPM decoder chris (Sep 15)
• [ANNOUNCE] Apache HTTP Server 2.0.51 Released Sander Striker (Sep 15)
• Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Michael Scheidell (Sep 15)
  • Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Harrison Gladden (Sep 17)
  • Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Chris Norton (Sep 17)
    • RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access Michael Wilson, Contractor (Sep 17)
• CESA-2004-004: libXpm chris (Sep 15)
• iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability customer service mailbox (Sep 16)
• Php Vulnerability N. 2 Stefano Di Paola (Sep 16)
• MDKSA-2004:097 - Updated cups packages fix DoS vulnerability Mandrake Linux Security Team (Sep 16)
• [OpenPKG-SA-2004.041] OpenPKG Security Advisory (spamassassin) OpenPKG (Sep 16)
• wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities Paul Johnston (Sep 16)
  • <Possible follow-ups>
  • wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities Paul Johnston (Sep 19)
• www.proboards.com / YaBB XSS Vuln admin (Sep 16)
  • RE: www.proboards.com / YaBB XSS Vuln GulfTech Security (Sep 17)
  • <Possible follow-ups>
  • Re: www.proboards.com / YaBB XSS Vuln Patrick Clinger (Sep 17)
• [SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities Martin Schulze (Sep 16)
• [SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution Martin Schulze (Sep 16)
• TSLSA-2004-0047 - multi Trustix Security Advisor (Sep 16)
• [SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows Martin Schulze (Sep 16)
• MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities Mandrake Linux Security Team (Sep 16)
• Fwd: Theo's presentation on exploit prevention Bas Alberts (Sep 16)
• ADVISORY: security hole (http response splitting) in snitz forums 2000 Maestro De-Seguridad (Sep 16)
• JPEG Processing BOF Proof Of Concept GulfTech Security (Sep 16)
  • <Possible follow-ups>
  • RE: JPEG Processing BOF Proof Of Concept Cassidy Macfarlane (Sep 17)
• Microsoft WordPerfect 5.x Converter Heap Overflow NGSSoftware Insight Security Research (Sep 16)
  • <Possible follow-ups>
  • Microsoft WordPerfect 5.x Converter Heap Overflow NGSSoftware Insight Security Research Advisory (Sep 18)
• [sudo-announce] Sudo version 1.6.8p1 now available (fwd) je (Sep 16)
• [ GLSA 200409-19 ] Heimdal: ftpd root escalation Sune Kloppenborg Jeppesen (Sep 16)
• iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability customer service mailbox (Sep 16)
• MDKSA-2004:099 - Updated XFree86 packages fix libXpm overflow vulnerabilities Mandrake Linux Security Team (Sep 16)
• XSA-2004-5: heap overflow in DVD subpicture decoder Michael Roitzsch (Sep 16)
• XSA-2004-4: multiple string overflows Michael Roitzsch (Sep 16)
• IE6 + XP SP2 Vulnerability cns (Sep 16)
• [ GLSA 200409-20 ] mpg123: Buffer overflow vulnerability Thierry Carrez (Sep 16)
• [ GLSA 200409-21 ] Apache 2, mod_dav: Multiple vulnerabilities Thierry Carrez (Sep 17)
• Freeze in Pigeon Server 3.02.0143 Luigi Auriemma (Sep 17)
• [security bulletin] SSRT4739 rev.0 HP WebJetadmin arbitrary command execution Boren, Rich (SSRT) (Sep 17)
• RsyncX vulnerabilities Matt Johnston (Sep 17)
• GoogleToolbar:About -- Allows Script Injection ViPeR (Sep 17)
  • Re: GoogleToolbar:About -- Allows Script Injection Rafel Ivgi, The-Insider (Sep 18)
• FreeBSD kernel buffer overflow gerarra (Sep 17)
  • Re: FreeBSD kernel buffer overflow Tim Newsham (Sep 18)
  • Re: FreeBSD kernel buffer overflow Wesley Shields (Sep 18)
• MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities Mandrake Linux Security Team (Sep 17)
• [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit admin (Sep 17)
• Important message to Bugtraq Subscribers! Daniel Bertrand (Sep 17)
• Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories (Sep 18)
  • Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll (Sep 18)
• Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. khoaimi (Sep 18)
  • Re: Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. Tim Broeker (Sep 20)
• Re: Multiple Vulnerabilities in phpScheduleIt Nick Korbel (Sep 18)
• Sudo Exploit by Rosiello Security Angelo Rosiello (Sep 18)
• Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code) kers0r (Sep 18)
• RhinoSoft DNS4ME HTTP Server Vulnerabilities GulfTech Security (Sep 18)
• AOL Groups/AIM Information Disclosure Link Linkovich (Sep 19)
• Tool announcement: fakebust Michal Zalewski (Sep 20)
• Debian netkit telnetd vulnerability Michal Zalewski (Sep 20)
  • Re: Debian netkit telnetd vulnerability Solar Designer (Sep 21)
    • Re: Debian netkit telnetd vulnerability Matt Zimmerman (Sep 27)
• Vulnerabilities in TUTOS Joxean Koret (Sep 20)
  • <Possible follow-ups>
  • Vulnerabilities in TUTOS Joxean Koret (Sep 20)
• Default username/password pairs in ON Command CCM 5.x database backend Jonas Olsson (Sep 20)
• FreeBSD Security Advisory FreeBSD-SA-04:14.cvs FreeBSD Security Advisories (Sep 20)
• CoD United Offensive boom boom Luigi Auriemma (Sep 20)
• Serious Security Issue in Windows XP SP2's Firewall Andreas Marx (Sep 20)
• [SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution Martin Schulze (Sep 20)
• Local root compromise possible with getmail David Watson (Sep 20)
• glFTPd local stack buffer overflow CoKi (Sep 20)
  • <Possible follow-ups>
  • Re: glFTPd local stack buffer overflow Bloody_A (Sep 21)
• Re: Posible security bug in phpMyWebhosting Udo Mueller (Sep 20)
• [ GLSA 200409-25 ] CUPS: Denial of service vulnerability Thierry Carrez (Sep 20)
• [ GLSA 200409-24 ] Foomatic: Arbitrary command execution in foomatic-rip filter Joshua J. Berry (Sep 20)
• Multiple Full Disclosure Path in postnuke 0.750 phoenix Jérôme (Sep 20)
  • <Possible follow-ups>
  • Multiple Full Disclosure Path in postnuke 0.750 phoenix FAiN182 (Sep 20)
• [ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities Thierry Carrez (Sep 20)
• Multiple Vulnerabilities In EmuLive Server4 GulfTech Security (Sep 21)
• CA UniCenter Management Portal Username Enumeration Vulnerability thomas adams (Sep 21)
• [ GLSA 200409-28 ] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities Thierry Carrez (Sep 21)
• [SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution Martin Schulze (Sep 21)
• ICMP spoofed source tunneling Max Tulyev (Sep 21)
  • Re: ICMP spoofed source tunneling fenfire (Sep 22)
    • Re: ICMP spoofed source tunneling Tim Newsham (Sep 22)
      • Re: ICMP spoofed source tunneling fenfire (Sep 23)
    • Re: ICMP spoofed source tunneling Calum (Sep 28)
  • Re: ICMP spoofed source tunneling sin (Sep 23)
  • <Possible follow-ups>
  • Re: ICMP spoofed source tunneling Dave Paris (Sep 23)
  • Re: ICMP spoofed source tunneling raiblehugo (Sep 25)
• Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004) Luigi Auriemma (Sep 21)
• Netscape NSS Library Vulnerability Affects Sun Java Enterprise System Jérôme (Sep 21)
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes pressinfo (Sep 22)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Craig Paterson (Sep 22)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jaeson Schultz (Sep 22)
    • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Lorne J. Leitman (Sep 22)
      • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jaeson Schultz (Sep 23)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Heikki Korpela (Sep 25)
    • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Querin (Sep 23)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jay Hennigan (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jacob Appelbaum (Sep 23)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Homer (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Hollis Johnson (Sep 22)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Rainer Duffner (Sep 22)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Mike Ely (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Claudius Li (Sep 25)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart (Sep 27)
      • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz (Sep 28)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Adam Shostack (Sep 29)
      • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Enrique A. Chaparro (Sep 28)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Dana Hudes (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Patrick J. Kobly (Sep 28)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Marvin Bellamy (Sep 22)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Atom 'Smasher' (Sep 23)
  • <Possible follow-ups>
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Gene Cronk (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes steve menard (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Barry Fitzgerald (Sep 23)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jose Rey (Sep 25)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin (Sep 22)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Gene Cronk (Sep 22)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin (Sep 26)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ERACC (Sep 28)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Polazzo Justin (Sep 30)
• Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0 Matthias Wimmer (Sep 22)
• And More Advanced SQL Injection... Stefano Di Paola (Sep 22)
• [ GLSA 200409-27 ] glFTPd: Local buffer overflow vulnerability Thierry Carrez (Sep 22)
• New whitepaper "The Phishing Guide" Gunter Ollmann (NGS) (Sep 22)
  • Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 23)
    • Re: New whitepaper "The Phishing Guide" Seth Arnold (Sep 24)
      • Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 27)
      • Re: New whitepaper "The Phishing Guide" Greg A. Woods (Sep 27)
      • Re: New whitepaper "The Phishing Guide" Crispin Cowan (Sep 28)
    • Re: New whitepaper "The Phishing Guide" Daniel Veditz (Sep 26)
      • Re: New whitepaper "The Phishing Guide" Chip Andrews (Sep 27)
      • Re: New whitepaper "The Phishing Guide" Philip Stoev (Sep 29)
      • Re: New whitepaper "The Phishing Guide" Juraj Bednar (Sep 28)
      • Re: New whitepaper "The Phishing Guide" Brian Dessent (Sep 28)
    • Re[2]: New whitepaper "The Phishing Guide" Karsten Heidrich (Sep 28)
  • <Possible follow-ups>
  • RE: New whitepaper "The Phishing Guide" Dehner, Benjamin T. (Sep 25)
• Pinnacle ShowCenter Skin Denial of Service Marc Ruef (Sep 22)
• [SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution Martin Schulze (Sep 22)
• iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability customer service mailbox (Sep 22)
• Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products Mike Sues (Sep 22)
• [CLA-2004:867] Conectiva Security Announcement - spamassassin Conectiva Updates (Sep 22)
• Pinnacle ShowCenter 1.51 possible DoS Jérôme (Sep 22)
• [ GLSA 200409-29 ] FreeRADIUS: Multiple Denial of Service vulnerabilities Sune Kloppenborg Jeppesen (Sep 22)
• [CLA-2004:866] Conectiva Security Announcement - qt3 Conectiva Updates (Sep 22)
• Macromedia Products Not Affected by MS JPEG/GDIPlus Issue Macromedia Security Zone (Sep 22)
• Remote buffer overflow in MDaemon IMAP and SMTP server pigrelax (Sep 22)
• MDKSA-2004:101 - Updated webmin packages fix vulnerabilities Mandrake Linux Security Team (Sep 22)
• [ GLSA 200409-30 ] xine-lib: Multiple vulnerabilities Thierry Carrez (Sep 23)
• MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities Mandrake Linux Security Team (Sep 23)
• Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Sym Security (Sep 23)
• MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities Mandrake Linux Security Team (Sep 23)
• [CLA-2004:868] Conectiva Security Announcement - apache Conectiva Updates (Sep 23)
• Multiple vulnerabilities in ActivePost Standard 3.1 Luigi Auriemma (Sep 23)
• Example of JPG Exploit & Shellcode javier falbo (Sep 23)
• Promiscuous email printing in Canon imageRunner Andrew Daviel (Sep 24)
  • Re: Promiscuous email printing in Canon imageRunner Chip Mefford (Sep 25)
  • RE: Promiscuous email printing in Canon imageRunner Matthew E. Lauterbach (Sep 28)
  • <Possible follow-ups>
  • RE: Promiscuous email printing in Canon imageRunner Eric McCarty (Sep 29)
    • Re: Promiscuous email printing in Canon imageRunner Felix Lindner (Sep 30)
• [ GLSA 200409-32 ] getmail: Filesystem overwrite vulnerability Sune Kloppenborg Jeppesen (Sep 24)
• aspWebCalendar /aspWebAlbum: SQL injection Pedro Sanches (Sep 24)
  • Re: aspWebCalendar /aspWebAlbum: SQL injection Steven (Sep 27)
• TSLSA-2004-0049 - apache Trustix Security Advisor (Sep 24)
• Buffer overflow in Zinf 2.2.1 for Win32 Luigi Auriemma (Sep 24)
  • Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit iggy popal (Sep 28)
• Microsoft's GDI Detetection Tool faults albatross (Sep 24)
  • <Possible follow-ups>
  • Re: Microsoft's GDI Detetection Tool faults John Bissell (Sep 25)
    • Re: Microsoft's GDI Detetection Tool faults Gadi Evron (Sep 25)
      • Re: Microsoft's GDI Detetection Tool faults Andreas Marx (Sep 27)
  • RE: Microsoft's GDI Detetection Tool faults Dowling, Gabrielle (Sep 27)
    • RE: Microsoft's GDI Detetection Tool faults mgotts (Sep 29)
  • Re: Microsoft's GDI Detetection Tool faults albatross (Sep 27)
    • Re: Microsoft's GDI Detetection Tool faults the rxmr (Sep 28)
    • RE: Microsoft's GDI Detetection Tool faults Scott Jacobson (Sep 29)
• [ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability Sune Kloppenborg Jeppesen (Sep 24)
• NEW GDI+ JPEG Remote Exploit John Bissell (Sep 24)
• New Macromedia Security Zone Bulletins Postede Macromedia Security Zone (Sep 24)
• Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories (Sep 25)
  • Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll (Sep 27)
    • Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David Wilson (Sep 28)
      • Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue David F. Skoll (Sep 27)
• New XSS vulnerabilities in paFileDB 3.1 final alireza hassani (Sep 25)
• Motorola Wireless Router WR850G Authentication Circumvention Daniel Fabian (Sep 25)
  • <Possible follow-ups>
  • Motorola Wireless Router WR850G Authentication Circumvention Daniel Fabian (Sep 25)
• RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jeremy Epstein (Sep 25)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Mike Healan (Sep 27)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Tracy Bost (Sep 28)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Casper Dik (Sep 29)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Coleman (Sep 28)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Yoav Nir (Sep 27)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Paul Wouters (Sep 27)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Crispin Cowan (Sep 28)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Adam Shostack (Sep 29)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Greg A. Woods (Sep 27)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Marco S Hyman (Sep 28)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Simon (Sep 28)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Colm Buckley (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David F. Skoll (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes float (Sep 30)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David F. Skoll (Sep 30)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Nicholas Knight (Sep 27)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Matthew Keller (Sep 29)
      • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Casper Dik (Sep 29)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Colm MacCarthaigh (Sep 29)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Bob Toxen (Sep 28)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes trh (Sep 30)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Kurt Seifried (Sep 28)
  • <Possible follow-ups>
  • RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Reed, Phillip C. (LNG-DAY) (Sep 30)
• New Macromedia Security Zone Bulletins Posted Macromedia Security Zone (Sep 26)
• [CLA-2004:869] Conectiva Security Announcement - kernel Conectiva Updates (Sep 27)
• MyWebServer 1.0.3 nekd0 (Sep 27)
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Nick Knouf (Sep 27)
• IPv4 fragmentation --> The Rose Attack Gandalf The White (Sep 27)
• [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS Hat-Squad Security Team (Sep 27)
• SQL injection in BroadBoard Instant ASP Message Board pigrelax (Sep 27)
• GDI Virus in the wild. Ben (Sep 27)
  • Re: GDI Virus in the wild. Gerry Eisenhaur (Sep 27)
    • Re: GDI Virus in the wild. GuidoZ (Sep 28)
• Re: HTTP Response Splitting and SQL injection in megabbs forum PD9 Software (Sep 27)
• [SECURITY] [DSA 554-1] New sendmail packages fix potential open relay Martin Schulze (Sep 27)
• Broadcast crash in Chatman 1.5.1 RC1 Luigi Auriemma (Sep 27)
• iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability customer service mailbox (Sep 27)
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David Brodbeck (Sep 27)
  • Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Adam Jacob Muller (Sep 28)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David F. Skoll (Sep 28)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Craig Paterson (Sep 29)
    • Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Aleksandar Milivojevic (Sep 30)
  • RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Hugo van der Kooij (Sep 30)
• [ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm Thierry Carrez (Sep 28)
• @lex Guestbook (PHP) Include file Himeur Nourredine (Sep 28)
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes Jeremy Epstein (Sep 28)
• Code execution in Icecast 2.0.1 Luigi Auriemma (Sep 28)
• MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities Mandrake Linux Security Team (Sep 28)
• Vignette Application Portal Unauthenticated Diagnostics Advisories (Sep 28)
• Multiple XSS Vulnerabilities in Wordpress 1.2 Thomas Waldegger (Sep 28)
• MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs. Mandrake Linux Security Team (Sep 28)
• Yahoo! Store Security Advisory Stuart Moore (Sep 28)
• Re: iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D Lise Moorveld (Sep 29)
• directory traversal in ParaChat Server 5.5 Donato Ferrante (Sep 29)
  • <Possible follow-ups>
  • directory traversal in ParaChat Server 5.5 Donato Ferrante (Sep 30)
  • Re: directory traversal in ParaChat Server 5.5 Donato Ferrante (Sep 30)
• [security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass Boren, Rich (SSRT) (Sep 29)
• [CLA-2004:870] Conectiva Security Announcement - imlib Conectiva Updates (Sep 29)
• Php RFC1867 Upload Vuln. POC Released Stefano Di Paola (Sep 29)
  • <Possible follow-ups>
  • Php RFC1867 Upload Vuln. POC Released Stefano Di Paola (Sep 29)
• Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Gareth Humphries (Sep 29)
• Possible GDI Exploit Vector james_love (Sep 29)
• [FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities Dominic Hargreaves (Sep 29)
• MSSQL 7.0 DoS securma (Sep 29)
• [ GLSA 200409-35 ] Subversion: Metadata information leak Sune Kloppenborg Jeppesen (Sep 29)
• Re: Default username/password pairs in ON Command CCM 5.x database backend, Sep 20 2004 2:24PM Sym Security (Sep 29)
• Crash in Alpha Black Zero 1.04 Luigi Auriemma (Sep 29)
• [FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities Dominic Hargreaves (Sep 30)
• Multiple vulnerabilities in w-agora forum Alexander Antipov (Sep 30)
• [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak Martin Schulze (Sep 30)
• TSL-2004-0050 - multi Trustix Security Advisor (Sep 30)
• Multiple Vulnerabilities in Silent Storm Portal R00tCr4ck (Sep 30)
• Unicornscan 0.4.2 robert (Sep 30)
• Samba Security Announcement -- Potential Arbitrary File Access Gerald (Jerry) Carter (Sep 30)
• RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes David Brodbeck (Sep 30)
• Re:[4] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue advisories (Sep 30)
• iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability customer service mailbox (Sep 30)
• RE: Diebold Global Election Management System (GEMS) Backdoor Geoff Vass (Sep 30)

Previous period

Next period