Bugtraq: by author

272 messages starting Feb 14 11 and ending Feb 10 11
Date index | Thread index | Author index


ACROS Security Lists

ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player ACROS Security Lists (Feb 14)
ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader ACROS Security Lists (Feb 14)

advisory

HTB22822: XSS vulnerability in RunCMS advisory (Feb 14)
HTB22812: XSRF (CSRF) in UMI.CMS advisory (Feb 08)
HTB22830: Multiple XSS vulnerabilities in Gollos advisory (Feb 15)
HTB22832: Path disclosure in ArtGK CMS advisory (Feb 15)
HTB22851: SQL Injection in WP Forum Server wordpress plugin advisory (Feb 24)
HTB22839: SQL Injection in Z-Vote wordpress plugin advisory (Feb 22)
HTB22811: XSS vulnerability in UMI.CMS advisory (Feb 08)
HTB22852: SQL Injection in WP Forum Server wordpress plugin advisory (Feb 14)
HTB22824: SQL Injection in Seo Panel advisory (Feb 15)
HTB22823: SQL Injection in Seo Panel advisory (Feb 15)
HTB22829: Path disclosure in Xaraya advisory (Feb 15)
HTB22809: SQL Injection in ReOS advisory (Feb 03)
HTB22843: Path disclosure in GD Star Rating wordpress plugin advisory (Feb 22)
HTB22842: Path disclosure in Comment Rating wordpress plugin advisory (Feb 22)
HTB22825: SQL Injection in Seo Panel advisory (Feb 15)
HTB22831: XSS vulnerability in Gollos advisory (Feb 15)
HTB22850: SQL Injection in WP Forum Server wordpress plugin advisory (Feb 24)
HTB22807: SQL Injection in ReOS advisory (Feb 03)
HTB22817: XSS vulnerability in WebAsyst Shop-Script advisory (Feb 08)
HTB22844: XSS in GD Star Rating wordpress plugin advisory (Feb 22)
HTB22806: SQL Injection in ReOS advisory (Feb 03)
HTB22840: Path disclosure in Starbox Voting wordpress plugin advisory (Feb 22)
HTB22816: XSS vulnerability in ViArt Shop advisory (Feb 08)
HTB22819: XSS vulnerability in WebAsyst Shop-Script advisory (Feb 08)
HTB22813: XSS vulnerability in UMI.CMS advisory (Feb 08)
HTB22802: XSS in Podcast Generator advisory (Feb 03)
HTB22827: File Content Disclosure in Wikipad advisory (Feb 15)
HTB22847: XSS in IWantOneButton wordpress plugin advisory (Feb 24)
HTB22799: Path disclosure in Pluck CMS advisory (Feb 01)
HTB22803: Path disclosure in Razor CMS advisory (Feb 01)
HTB22818: Stored XSS vulnerability in WebAsyst Shop-Script advisory (Feb 08)
HTB22798: Path disclosure in Pluck CMS advisory (Feb 01)
HTB22846: SQL Injection in IWantOneButton wordpress plugin advisory (Feb 24)
HTB22821: Path disclosure in RunCMS advisory (Feb 14)
HTB22826: Multiple XSS vulnerabilities in Wikipad advisory (Feb 15)
HTB22801: Local File Inclusion in Podcast Generator advisory (Feb 03)
HTB22835: DoS (Denial of Service) Risk in FlatnuX advisory (Feb 17)
HTB22805: Path disclosure in Redaxscript advisory (Feb 01)
HTB22810: SQL Injection in ReOS advisory (Feb 03)
HTB22814: XSS vulnerability in ViArt Shop advisory (Feb 08)
HTB22815: XSS vulnerability in ViArt Shop advisory (Feb 08)
HTB22838: Path disclosure in Vote It Up wordpress plugin advisory (Feb 22)
HTB22836: Path disclosure in Coppermine advisory (Feb 17)
HTB22820: SQL Injection in RunCMS advisory (Feb 14)
HTB22800: Path disclosure in Podcast Generator advisory (Feb 03)
HTB22828: Multiple XSS vulnerabilities in Photopad advisory (Feb 15)
HTB22851: SQL Injection in WP Forum Server wordpress plugin advisory (Feb 14)
HTB22834: Path disclosure in FlatnuX advisory (Feb 17)
HTB22845: SQL Injection in cdnvote wordpress plugin advisory (Feb 22)
HTB22808: Local File Inclusion in ReOS advisory (Feb 03)
HTB22804: SQL Injection in Redaxscript advisory (Feb 01)
HTB22841: SQL Injection in Comment Rating wordpress plugin advisory (Feb 22)
HTB22833: Information Disclosure in Arctic Fox CMS advisory (Feb 15)

Andrzej Targosz

CONFidence 2011- CfP only 6 days left, we are still waiting for your submission Andrzej Targosz (Feb 28)

Ansgar Wiechers

Re: Microsoft Terminal Services vulnerable to MITM-attacks. Ansgar Wiechers (Feb 09)

Antonio S.M

prestashop vuln: sql injection submitted to bugtraq () securityfocus com Antonio S.M (Feb 25)

Asterisk Security Team

AST-2011-002: Multiple array overflow and crash vulnerabilities in UDPTL code Asterisk Security Team (Feb 22)

barkley

Re: Domino Sametime Multiple Reflected Cross-Site Scripting barkley (Feb 22)

beford

Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure beford (Feb 07)

Brett Porter

[SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability Brett Porter (Feb 16)
[SECURITY] CVE-2011-0533: Apache Continuum cross-site scripting vulnerability Brett Porter (Feb 10)
[SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability Brett Porter (Feb 10)

bt

www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest bt (Feb 18)
www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest bt (Feb 21)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices Cisco Systems Product Security Incident Response Team (Feb 23)
Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability Cisco Systems Product Security Incident Response Team (Feb 16)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager Cisco Systems Product Security Incident Response Team (Feb 23)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances Cisco Systems Product Security Incident Response Team (Feb 23)
Cisco Security Advisory: Multiple Cisco WebEx Player Vulnerabilities Cisco Systems Product Security Incident Response Team (Feb 01)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch Cisco Systems Product Security Incident Response Team (Feb 23)
Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Cisco Systems Product Security Incident Response Team (Feb 02)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server Cisco Systems Product Security Incident Response Team (Feb 23)
Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Feb 23)

CORE Security Technologies Advisories

CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities CORE Security Technologies Advisories (Feb 14)
[CORE-2010-1001] Cisco WebEx .atp and .wrf Overflow Vulnerabilities CORE Security Technologies Advisories (Feb 01)

cxib

PHP 5.3.5 grapheme_extract() NULL Pointer Dereference cxib (Feb 17)

Dan Rosenberg

FreeBSD crontab information leakage Dan Rosenberg (Feb 28)

david . daly

Domino Sametime Multiple Reflected Cross-Site Scripting david . daly (Feb 21)

David Leadbeater

CGI:IRC XSS issue (CVE-2011-0050) David Leadbeater (Feb 09)

difficult-511

Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability difficult-511 (Feb 28)

Digit Security Research

Data Encryption Systems - DESLock+ - Local Kernel Code Execution/Denial of Service Digit Security Research (Feb 08)

Florian Weimer

[SECURITY] [DSA 2161-2] OpenJDK security update Florian Weimer (Feb 14)
[SECURITY] [DSA 2161-1] OpenJDK security update Florian Weimer (Feb 14)
[SECURITY] [DSA-2157-1] PostgreSQL security update Florian Weimer (Feb 04)

Giuseppe Iuculano

[SECURITY] [DSA 2166-1] chromium-browser security update Giuseppe Iuculano (Feb 16)

Hafez Kamal

[HITB-Announce] HITB Magazine Issue 005 Released Hafez Kamal (Feb 09)

HD Moore

R7-0038: Check Point Endpoint Security Server Information Disclosure HD Moore (Feb 08)
R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities HD Moore (Feb 08)

info

Re: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure info (Feb 08)

irancrash

Linksys Cisco Wag120N CSRF Vulnerability irancrash (Feb 25)

Ivan Buetler

Gain Windows Domain Admin Privileges - Online Challenge Ivan Buetler (Feb 16)

Jamie Strandboge

[USN-1067-1] Telepathy Gabble vulnerability Jamie Strandboge (Feb 18)
[USN-1066-1] Django vulnerabilities Jamie Strandboge (Feb 18)

Jim Harrison

RE: Microsoft Terminal Services vulnerable to MITM-attacks. Jim Harrison (Feb 09)

Kees Cook

[USN-1061-1] iTALC vulnerability Kees Cook (Feb 14)
[USN-1065-1] shadow vulnerability Kees Cook (Feb 16)
[USN-1063-1] QEMU vulnerability Kees Cook (Feb 15)
[USN-1057-1] Linux kernel vulnerabilities Kees Cook (Feb 04)
[USN-1073-1] Linux kernel vulnerabilities Kees Cook (Feb 28)
[USN-1074-1] Linux kernel vulnerabilities Kees Cook (Feb 28)
[USN-1054-1] Linux kernel vulnerabilities Kees Cook (Feb 02)
[USN-1072-1] Linux vulnerabilities Kees Cook (Feb 28)

labs-no-reply

iDefense Security Advisory 02.08.11: Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability labs-no-reply (Feb 09)
iDefense Security Advisory 02.08.11: Microsoft Windows Picture and Fax Viewer Library labs-no-reply (Feb 08)
iDefense Security Advisory 02.08.11: Adobe Shockwave Player Memory Corruption Vulnerability labs-no-reply (Feb 09)
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Integer Overflow Vulnerability labs-no-reply (Feb 09)
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Memory Corruption Vulnerability labs-no-reply (Feb 09)

Leonardo Rota Botelho

WordPress Uploadify Plugin 1.0 Remote File Upload Leonardo Rota Botelho (Feb 24)

Luciano Bello

[SECURITY] [DSA 2165-1] ffmpeg-debian security update Luciano Bello (Feb 16)

Major Malfunction

Re: DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 Major Malfunction (Feb 18)
DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 Major Malfunction (Feb 08)

Marc Deslauriers

[USN-1071-1] Linux kernel vulnerabilities Marc Deslauriers (Feb 25)
[USN-1068-1] Aptdaemon vulnerability Marc Deslauriers (Feb 22)
[USN-1075-1] Samba vulnerability Marc Deslauriers (Feb 28)
[USN-1060-1] Exim vulnerabilities Marc Deslauriers (Feb 14)
[USN-1076-1] ClamAV vulnerability Marc Deslauriers (Feb 28)
[USN-1069-1] Mailman vulnerabilities Marc Deslauriers (Feb 22)
[USN-1059-1] Dovecot vulnerabilities Marc Deslauriers (Feb 08)
[USN-1053-1] Subversion vulnerabilities Marc Deslauriers (Feb 01)
[USN-1077-1] FUSE vulnerabilities Marc Deslauriers (Feb 28)
[USN-1070-1] Bind vulnerability Marc Deslauriers (Feb 23)

Marcin Orlowski

Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference Marcin Orlowski (Feb 18)

Mark Thomas

[SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability Mark Thomas (Feb 07)
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions Mark Thomas (Feb 07)
[SECURITY] Oracle JVM bug causes denial of service in Apache Tomcat Mark Thomas (Feb 07)
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions Mark Thomas (Feb 07)
[SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability Mark Thomas (Feb 07)

Massimo Bernaschi

fix for Nvidia CUDA drivers security breach Massimo Bernaschi (Feb 02)

Matteo Ignaccolo

Re: Linksys WAP610N Unauthenticated Root Console Matteo Ignaccolo (Feb 15)
Linksys WAP610N Unauthenticated Root Consle Matteo Ignaccolo (Feb 10)

Michal Zalewski

WOOT '11 Call for Papers Michal Zalewski (Feb 03)

mike

Majordomo2 - Directory Traversal (SMTP/HTTP) mike (Feb 03)

Moritz Muehlenhoff

[SECURITY] [DSA 2172-1] moodle security update Moritz Muehlenhoff (Feb 23)
[SECURITY] [DSA 2168-1] openafs security update Moritz Muehlenhoff (Feb 16)
[SECURITY] [DSA 2160-1] tomcat6 security update Moritz Muehlenhoff (Feb 14)
[SECURITY] [DSA 2171-1] asterisk security update Moritz Muehlenhoff (Feb 22)
[SECURITY] [DSA 2159-1] vlc security update Moritz Muehlenhoff (Feb 14)

mozilla

Troopers11 - Security Conference in Germany mozilla (Feb 07)

Nam Nguyen

[BMSA-2011-01] Insecure secure cookie in web.go Nam Nguyen (Feb 25)

nebojsa

Re: prestashop vuln: sql injection submitted to bugtraq () securityfocus com nebojsa (Feb 28)

Nico Golde

[SECURITY] [DSA 2164-1] shadow security update Nico Golde (Feb 16)
[SECURITY] [DSA 2163-1] python-django security update Nico Golde (Feb 14)
[SECURITY] [DSA 2162-1] openssl security update Nico Golde (Feb 14)
[SECURITY] [DSA 2169-1] telepathy-gabble security update Nico Golde (Feb 17)

null

SourceBans Version 1.4.7 XSS null (Feb 09)

Patrick Kelley

DoS Condition with Altigen VoIP Phone Systems Patrick Kelley (Feb 25)

Raul Siles

(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure Raul Siles (Feb 04)

Red Matter

Kunena SQL Injection Vulnerability & Information Leakage Red Matter (Feb 14)

Robbie Gill

Aruba Mobility Controller - multiple advisories: DoS and authentication bypass Robbie Gill (Feb 01)

robkraus

Tembria Server Monitor Multiple Cross-site Scripting (XSS) Vulnerabilities robkraus (Feb 15)
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability robkraus (Feb 15)

Rodrigo Rubira Branco (BSDaemon)

CVE-2010-4435 - Multiple Vendor Calendar Manager Remote Code Execution Rodrigo Rubira Branco (BSDaemon) (Feb 09)

rPath Update Announcements

rPSA-2011-0010-1 kernel rPath Update Announcements (Feb 08)

sam . vaughey

Re: Microsoft Terminal Services vulnerable to MITM-attacks. sam . vaughey (Feb 08)

security

[ MDVSA-2011:038 ] samba security (Feb 28)
[ MDVSA-2011:026 ] phpmyadmin security (Feb 14)
[ MDVSA-2011:020 ] pango security (Feb 04)
[ MDVSA-2011:035 ] tomboy security (Feb 22)
[ MDVSA-2011:032 ] eclipse security (Feb 21)
[ MDVSA-2011:023 ] proftpd security (Feb 08)
[ MDVSA-2011:027 ] openoffice.org security (Feb 14)
[ MDVSA-2011:033 ] awstats security (Feb 21)
[ MDVSA-2011:030 ] tomcat5 security (Feb 21)
[ MDVSA-2011:024 ] krb5 security (Feb 09)
[ MDVSA-2011:031 ] python-django security (Feb 21)
[ MDVSA-2011:021 ] postgresql security (Feb 07)
[ MDVSA-2011:029 ] kernel security (Feb 18)
[ MDVSA-2011:036 ] mailman security (Feb 23)
[ MDVSA-2011:034 ] banshee security (Feb 22)
[ MDVSA-2011:037 ] avahi security (Feb 24)
[ MDVSA-2011:028 ] openssl security (Feb 15)

Security_Alert

ESA-2011-004: EMC Replication Manager remote code execution vulnerability Security_Alert (Feb 08)

security-alert

[security bulletin] HPSBUX02628 SSRT090183 rev.1 - HP-UX Running CDE Calendar Manager, Remote Execution of Arbitrary Code security-alert (Feb 21)
[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF) security-alert (Feb 08)
[security bulletin] HPSBST02630 SSRT1000385 rev.1 - HP StorageWorks X9000 Network Storage Systems, Remote Unauthenticated Access security-alert (Feb 08)
[security bulletin] HPSBPI02635 SSRT100391 rev.1 - HP Web Jetadmin Running on Windows, Local Unauthorized Access to Managed Resources security-alert (Feb 28)
[security bulletin] HPSBMA02627 SSRT090246 rev.1 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code security-alert (Feb 01)

Serguei A. Mokhov on behalf of PST-11

Privacy, Security, Trust (PST 2011) - Call for Papers Serguei A. Mokhov on behalf of PST-11 (Feb 21)

simpsoed

Re: [DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability simpsoed (Feb 07)

Steve Beattie

[USN-1064-1] OpenSSL vulnerability Steve Beattie (Feb 16)
[USN-1062-1] Kerberos vulnerabilities Steve Beattie (Feb 15)
[USN-1058-1] PostgreSQL vulnerability Steve Beattie (Feb 04)
[USN-1055-1] OpenJDK vulnerabilities Steve Beattie (Feb 02)

Steve Kemp

[SECURITY] [DSA-2158-1] cgiirc security update Steve Kemp (Feb 10)

tadeu1

Re: Linksys Cisco Wag120N CSRF Vulnerability tadeu1 (Feb 25)

Thijs Kinkhorst

[SECURITY] [DSA 2170-1] mailman security update Thijs Kinkhorst (Feb 21)
[SECURITY] [DSA 2167-1] phpmyadmin security update Thijs Kinkhorst (Feb 16)
[SECURITY] [DSA 2173-1] pam-pgsql security update Thijs Kinkhorst (Feb 28)
[SECURITY] [DSA 2174-1] avahi security update Thijs Kinkhorst (Feb 28)

Timo Warns

[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables Timo Warns (Feb 23)

tinywebgallery

Re: TinyWebGallery: XSS + Directory Traversal tinywebgallery (Feb 07)

Tom Yu

MITKRB5-SA-2011-001 kpropd denial of service [CVE-2010-4022] Tom Yu (Feb 08)
MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2011-0282 CVE-2011-0283] Tom Yu (Feb 08)

Trustwave Advisories

TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR) Trustwave Advisories (Feb 07)

VMware Security Team

VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi VMware Security Team (Feb 08)
VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security team (Feb 14)

VUPEN Security Research

VUPEN Security Research - Microsoft Internet Explorer "mshtml.dll" Dangling Pointer Vulnerability (CVE-2011-0036) VUPEN Security Research (Feb 14)
VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability VUPEN Security Research (Feb 14)
VUPEN Security Research - Adobe Shockwave DIRAPI LCTX Chunck Memory Corruption Vulnerability (APSB11-01) VUPEN Security Research (Feb 14)
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability VUPEN Security Research (Feb 14)
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability VUPEN Security Research (Feb 14)

Williams, James K

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Williams, James K (Feb 25)

Yam Mesicka

TinyWebGallery: XSS + Directory Traversal Yam Mesicka (Feb 01)

YGN Ethical Hacker Group

Vanilla Forums 2.0.17.1 ~ 2.0.17.5 <= Cross Site Scripting Vulnerability YGN Ethical Hacker Group (Feb 22)
Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability YGN Ethical Hacker Group (Feb 01)

ZDI Disclosures

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability ZDI Disclosures (Feb 17)
ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability ZDI Disclosures (Feb 18)
ZDI-11-047: IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-092: (0day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability ZDI Disclosures (Feb 24)
ZDI-11-075: Adobe Acrobat Reader rt3d.dll Multimedia Playing Arbitrary Memory Overwite Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-079: Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability ZDI Disclosures (Feb 24)
ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability ZDI Disclosures (Feb 17)
ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability ZDI Disclosures (Feb 24)
ZDI-11-073: Adobe Reader ICC Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-060: Novell eDirectory Malformed NCP Request Denial of Service Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-045: IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-049: IBM Lotus Domino SMTP Multiple Filename Arguments Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-086: Oracle Java Webstart Trusted JNLP Extension Remote Code Execution Vulnerability ZDI Disclosures (Feb 16)
ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-040: Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-052: Lotus Domino Server diiop Client Request Operation Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability ZDI Disclosures (Feb 16)
ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability ZDI Disclosures (Feb 01)
ZDI-11-057: Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass Vulnerability ZDI Disclosures (Feb 08)
TPTI-11-05: Adobe Shockwave PFR1 Font Chunk Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-055: Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability ZDI Disclosures (Feb 24)
ZDI-11-074: Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-037: Symantec IM Manager Administrative Interface IMAdminSchedTask.asp Eval Code Injection Remote Code Execution Vulnerability ZDI Disclosures (Feb 01)
ZDI-11-078: Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-039: BMC PATROL Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability ZDI Disclosures (Feb 04)
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-048: IBM Lotus Domino iCalendar Meeting Request Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-069: Adobe Acrobat Reader U3D Texture psd RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-071: Adobe Reader BMP RLE_8 Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-042: Microsoft Office Excel Axis Properties Record Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-041: Microsoft Office Excel Office Art Object Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-077: Adobe Acrobat Reader U3D Texture Parser ILBM Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-084: Oracle Java Unsigned Applet Applet2ClassLoader Remote Code Execution Vulnerability ZDI Disclosures (Feb 16)
TPTI-11-03: Adobe Shockwave Font Xtra String Decoding Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability ZDI Disclosures (Feb 16)
ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-051: IBM Lotus Notes cai URI Handler Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-044: Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-043: Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-058: SCO Openserver IMAP Daemon Long Verb Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-070: Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-067: Adobe Acrobat Reader U3D Texture rgba RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-080: Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-068: Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-059: CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-072: Adobe Reader BMP ColorData Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability ZDI Disclosures (Feb 16)
ZDI-11-056: Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-046: IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-036: IBM DB2 db2dasrrm receiveDASMessage Remote Code Execution Vulnerability ZDI Disclosures (Feb 01)
TPTI-11-01: Adobe Shockwave dirapi.dll IFWV Trusted Offset Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-054: Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
TPTI-11-04: Adobe Shockwave GIF Logical Screen Descriptor Parsing Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-066: Adobe Acrobat Reader U3D Texture .iff RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-053: Lotus Domino Server diiop getEnvironmentString Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
TPTI-11-02: Adobe Shockwave TextXtra Invalid Seek Remote Code Execution Vulnerability ZDI Disclosures (Feb 09)
ZDI-11-061: EMC Replication Manager Client irccd.exe Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability ZDI Disclosures (Feb 08)
ZDI-11-035: IBM DB2 db2dasrrm validateUser Remote Code Execution Vulnerability ZDI Disclosures (Feb 01)

Ziots, Edward

RE: Microsoft Terminal Services vulnerable to MITM-attacks. Ziots, Edward (Feb 10)