oss-sec: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

291 messages starting Jan 02 10 and ending Mar 31 10
Date index | Thread index | Author index

• CVE request - pidgin MSN arbitrary file upload Paul Aurich (Jan 02)
  • Re: CVE request - pidgin MSN arbitrary file upload Josh Bressers (Jan 07)
    • Re: CVE request - pidgin MSN arbitrary file upload Nico Golde (Jan 07)
      • Re: CVE request - pidgin MSN arbitrary file upload Steven M. Christey (Jan 09)
• CVE request - uzbl remote code execution Giuseppe Iuculano (Jan 06)
  • Re: CVE request - uzbl remote code execution Josh Bressers (Jan 06)
• CVE Request: Transmission Jamie Strandboge (Jan 06)
  • Re: CVE Request: Transmission Josh Bressers (Jan 06)
• CVE id request: GNU libc: NIS shadow password leakage Aurelien Jarno (Jan 07)
  • Re: CVE id request: GNU libc: NIS shadow password leakage Josh Bressers (Jan 08)
    • Re: CVE id request: GNU libc: NIS shadow password leakage Christoph Pleger (Jan 08)
      • Re: CVE id request: GNU libc: NIS shadow password leakage Tomas Hoger (Jan 11)
      • Re: CVE id request: GNU libc: NIS shadow password leakage Christoph Pleger (Jan 11)
      • Re: CVE id request: GNU libc: NIS shadow password leakage Josh Bressers (Jan 11)
• FreeRadius 1.1.7 CVE-2009-4481 being duplicate of CVE-2009-3111 Jan Lieskovsky (Jan 11)
  • Re: FreeRadius 1.1.7 CVE-2009-4481 being duplicate of CVE-2009-3111 Steven M. Christey (Jan 12)
• CVE Request: viewvc Ludwig Nussel (Jan 11)
  • Re: CVE Request: viewvc Josh Bressers (Jan 13)
    • Re: CVE Request: viewvc Nico Golde (Jan 14)
• CVE Request: phpMyAdmin Ludwig Nussel (Jan 11)
  • Re: CVE Request: phpMyAdmin Josh Bressers (Jan 11)
  • Re: CVE Request: phpMyAdmin Steven M. Christey (Jan 12)
• CVE request - kernel: infoleak if print-fatal-signals=1 Eugene Teo (Jan 11)
  • Re: CVE request - kernel: infoleak if print-fatal-signals=1 Josh Bressers (Jan 13)
• [PATCH] memory consumption (DoS) in openssl CVE-2009-4355 Michael K. Johnson (Jan 13)
• CVE Request: kernel ebtables perm check dann frazier (Jan 13)
  • Re: CVE Request: kernel ebtables perm check Eugene Teo (Jan 13)
• CVE-2010-0006 - kernel: ipv6: skb_dst() can be NULL in ipv6_hop_jumbo() Eugene Teo (Jan 13)
• gnome doesn't lock external screen after resume Ludwig Nussel (Jan 15)
  • Re: gnome doesn't lock external screen after resume Josh Bressers (Jan 19)
• CVE request: typo3 < 4.3.1 openid authentication bypass Hanno Böck (Jan 16)
  • Re: CVE request: typo3 < 4.3.1 openid authentication bypass Josh Bressers (Jan 19)
• CVE request: phpbb before 3.0.5 Hanno Böck (Jan 16)
  • Re: CVE request: phpbb before 3.0.5 Josh Bressers (Jan 19)
• CVE request: dokuwiki Giuseppe Iuculano (Jan 17)
  • Re: CVE request: dokuwiki Josh Bressers (Jan 19)
    • Re: CVE request: dokuwiki Solar Designer (Jan 19)
• Evolution denial of service bug ... Marcus Meissner (Jan 18)
  • Re: Evolution denial of service bug ... Josh Bressers (Jan 19)
• BerliOS.de comrpomise Josh Bressers (Jan 18)
  • Re: BerliOS.de comrpomise Nico Golde (Jan 20)
• CVE request - kernel: untangle the do_mremap() mess Eugene Teo (Jan 18)
  • <Possible follow-ups>
  • Re: CVE request - kernel: untangle the do_mremap() mess Josh Bressers (Jan 19)
    • Re: CVE request - kernel: untangle the do_mremap() mess Eugene Teo (Jan 19)
      • Re: CVE request - kernel: untangle the do_mremap() mess Greg KH (Jan 19)
      • Re: CVE request - kernel: untangle the do_mremap() mess Steven M. Christey (Jan 19)
      • Re: CVE request - kernel: untangle the do_mremap() mess Greg KH (Jan 20)
      • Re: CVE request - kernel: untangle the do_mremap() mess Josh Bressers (Jan 20)
      • Re: CVE request - kernel: untangle the do_mremap() mess Marcus Meissner (Jan 21)
• BIND CVE-2009-4022 fix incomplete Josh Bressers (Jan 19)
  • Re: BIND CVE-2009-4022 fix incomplete Josh Bressers (Jan 20)
• CVE-2009-4272 kernel: emergency route cache flushing leads to node deadlock Eugene Teo (Jan 19)
  • Re: CVE-2009-4272 kernel: emergency route cache flushing leads to node deadlock Eugene Teo (Jan 20)
• CVE-2009-3556 kernel: qla2xxx NPIV vport management pseudofiles are world writable Eugene Teo (Jan 19)
• CVE request - kernel: drm/radeon: r6xx/r7xx possible security issue, system ram access Eugene Teo (Jan 21)
  • Re: CVE request - kernel: drm/radeon: r6xx/r7xx possible security issue, system ram access Eugene Teo (Jan 21)
    • Re: CVE request - kernel: drm/radeon: r6xx/r7xx possible security issue, system ram access Ludwig Nussel (Jan 21)
      • Re: CVE request - kernel: drm/radeon: r6xx/r7xx possible security issue, system ram access Jerome Glisse (Jan 21)
• CVE request: MoinMoin information disclosure Raphael Geissert (Jan 21)
• CVE id request: postgresql bitsubstr overflow Nico Golde (Jan 27)
  • Re: CVE id request: postgresql bitsubstr overflow Josh Bressers (Jan 27)
    • Re: CVE id request: postgresql bitsubstr overflow Steven M. Christey (Jan 27)
• CVE id request: maildrop Steffen Joeris (Jan 27)
  • Re: CVE id request: maildrop Josh Bressers (Jan 28)
    • Re: CVE id request: maildrop Steffen Joeris (Jan 28)
      • Re: CVE id request: maildrop Josh Bressers (Jan 28)
• CVE id: hybserv Steffen Joeris (Jan 27)
  • Re: CVE id: hybserv Josh Bressers (Jan 29)
• CVE Request -- ejabberd Jan Lieskovsky (Jan 29)
  • Re: CVE Request -- ejabberd Josh Bressers (Jan 29)
• CVE id request: Wireshark Eren Türkay (Jan 29)
  • Re: CVE id request: Wireshark Josh Bressers (Jan 29)
• CVE request - kernel: DoS on x86_64 Eugene Teo (Jan 31)
  • Re: CVE request - kernel: DoS on x86_64 dann frazier (Feb 03)
    • Re: CVE request - kernel: DoS on x86_64 Eugene Teo (Feb 03)
      • Re: CVE request - kernel: DoS on x86_64 dann frazier (Feb 04)
      • Re: CVE request - kernel: DoS on x86_64 Eugene Teo (Feb 17)
  • <Possible follow-ups>
  • Re: CVE request - kernel: DoS on x86_64 Josh Bressers (Feb 01)
• Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 Eugene Teo (Jan 31)
• CVE Request -- Squid -- SQUID-2010_1.txt Jan Lieskovsky (Feb 01)
  • <Possible follow-ups>
  • Re: CVE Request -- Squid -- SQUID-2010_1.txt Josh Bressers (Feb 01)
• CVE Request -- OCSNG_UNIX_SERVER-1.02.2 Jan Lieskovsky (Feb 01)
  • Re: CVE Request -- OCSNG_UNIX_SERVER-1.02.2 Josh Bressers (Feb 01)
• lighttpd: slow request dos/oom attack [CVE-2010-0295] Stefan Bühler (Feb 01)
• CVE request - kvm: cat /dev/port in the guest can cause host DoS Eugene Teo (Feb 01)
  • Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS Josh Bressers (Feb 02)
• KVM possible security issues fixed Thomas Biege (Feb 02)
  • Re: KVM possible security issues fixed Eugene Teo (Feb 02)
    • Re: KVM possible security issues fixed Eren Türkay (Feb 04)
      • Re: KVM possible security issues fixed Josh Bressers (Feb 04)
• CVE request: kernel OOM/crash in drivers/connector Marcus Meissner (Feb 03)
  • Re: CVE request: kernel OOM/crash in drivers/connector Josh Bressers (Feb 03)
• CVE Request -- GMime-2.4.15 Jan Lieskovsky (Feb 03)
  • Re: CVE Request -- GMime-2.4.15 Josh Bressers (Feb 03)
• CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) Matthias Andree (Feb 04)
  • Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) Nico Golde (Feb 04)
  • Fwd: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) Matthias Andree (Feb 09)
    • Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) Tomas Hoger (Feb 09)
• CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks Steven M. Christey (Feb 04)
• systemtap DoS issue (CVE-2010-0411) Vincent Danen (Feb 04)
• Samba symlink 0day flaw Josh Bressers (Feb 05)
  • Re: Samba symlink 0day flaw Nico Golde (Feb 05)
    • Re: Samba symlink 0day flaw Michael Gilbert (Feb 05)
    • Re: Samba symlink 0day flaw Simo Sorce (Feb 05)
      • Re: Samba symlink 0day flaw Nico Golde (Feb 06)
      • Re: Samba symlink 0day flaw Yves-Alexis Perez (Feb 06)
      • Re: Samba symlink 0day flaw Nico Golde (Feb 07)
  • Re: Samba symlink 0day flaw Eren Türkay (Feb 06)
  • Re: Samba symlink 0day flaw Ludwig Nussel (Mar 04)
    • Re: Samba symlink 0day flaw Steven M. Christey (Mar 05)
• CVE request: information leak / potential crash in sys_move_pages Marcus Meissner (Feb 06)
  • Re: CVE request: information leak / potential crash in sys_move_pages Eugene Teo (Feb 07)
  • Re: CVE request: information leak / potential crash in sys_move_pages Marcus Meissner (Feb 08)
• CVE request - kernel: ima: fix null pointer dereference Eugene Teo (Feb 07)
  • Re: CVE request - kernel: ima: fix null pointer dereference Greg KH (Feb 09)
    • Re: CVE request - kernel: ima: fix null pointer dereference Eugene Teo (Feb 09)
      • Re: CVE request - kernel: ima: fix null pointer dereference Mark J Cox (Feb 09)
      • Re: CVE request - kernel: ima: fix null pointer dereference Eugene Teo (Feb 09)
      • Re: CVE request - kernel: ima: fix null pointer dereference Greg KH (Feb 09)
• gnome-screensaver vulnerability (CVE-2010-0414) Vincent Danen (Feb 08)
  • Re: gnome-screensaver vulnerability (CVE-2010-0414) Vincent Danen (Feb 12)
• CVE request - kernel: race in ptrace Eugene Teo (Feb 08)
  • Re: CVE request - kernel: race in ptrace Eugene Teo (Feb 10)
    • Re: CVE request - kernel: race in ptrace Eugene Teo (Feb 14)
• CVE request - kernel: futex: Handle user space corruption gracefully Eugene Teo (Feb 08)
  • Re: CVE request - kernel: futex: Handle user space corruption gracefully Steven M. Christey (Feb 11)
• CVE Request -- cURL/libCURL 7.20.0 Jan Lieskovsky (Feb 09)
  • Re: CVE Request -- cURL/libCURL 7.20.0 Jan Lieskovsky (Mar 09)
  • <Possible follow-ups>
  • Re: CVE Request -- cURL/libCURL 7.20.0 Vincent Danen (Mar 16)
• vulnerability in netpbm (CVE-2009-4274) Vincent Danen (Feb 09)
• CVE request - coppermine gallery <1.4.26 code execution vulnerability Hanno Böck (Feb 10)
  • Re: CVE request - coppermine gallery <1.4.26 code execution vulnerability Henri Salo (Feb 22)
• CVE Request -- ModSecurity - v2.5.12 Jan Lieskovsky (Feb 10)
• CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference Eugene Teo (Feb 10)
  • Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference Eugene Teo (Mar 03)
  • <Possible follow-ups>
  • Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference Josh Bressers (Mar 04)
• CVE Request: gnome-screensaver termination by pressing "Enter" Marcus Meissner (Feb 12)
  • Re: CVE Request: gnome-screensaver termination by pressing "Enter" Marcus Meissner (Mar 05)
    • Re: Re: CVE Request: gnome-screensaver termination by pressing "Enter" Vincent Danen (Mar 16)
• CVE Request: KDE screensaver unlock issue similar to GNOME one Marcus Meissner (Feb 12)
  • <Possible follow-ups>
  • Re: CVE Request: KDE screensaver unlock issue similar to GNOME one Jeff Mitchell (Feb 12)
    • Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one Jeff Mitchell (Feb 12)
      • Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one Jeff Mitchell (Feb 17)
• CVE Request -- MoinMoin -- 1.8.7 Jan Lieskovsky (Feb 15)
  • Re: CVE Request -- MoinMoin -- 1.8.7 Thomas Waldmann (Feb 15)
    • Re: CVE Request -- MoinMoin -- 1.8.7 Steven M. Christey (Feb 21)
  • Re: CVE Request -- MoinMoin -- 1.8.7 Thomas Waldmann (Feb 15)
    • Re: CVE Request -- MoinMoin -- 1.8.7 Steven M. Christey (Feb 21)
• CouchDB: Don't use a RESTful API from the browser, please Florian Weimer (Feb 15)
• CVE request: kernel information leak via userspace USB interface Marcus Meissner (Feb 17)
  • Re: CVE request: kernel information leak via userspace USB interface Eugene Teo (Feb 17)
    • Re: CVE request: kernel information leak via userspace USB interface Marcus Meissner (Feb 18)
      • Re: CVE request: kernel information leak via userspace USB interface Steven M. Christey (Feb 18)
      • Re: CVE request: kernel information leak via userspace USB interface Eugene Teo (Feb 18)
    • Re: CVE request: kernel information leak via userspace USB interface Bernhard R. Link (Feb 18)
• additional memory leak in USB userspace handling Marcus Meissner (Feb 17)
  • Re: additional memory leak in USB userspace handling Eugene Teo (Feb 18)
• CVE requests - kernel network vulns Eugene Teo (Feb 17)
• lwn: 2.6.32.9 Release notes Eugene Teo (Feb 21)
• CVE request: kernel: ALSA: hda-intel: Avoid divide by zero crash Eugene Teo (Feb 21)
• CVE-2005-4886 assigned to old remote oops Mark J Cox (Feb 22)
• WANTED: mikmod patches Thomas Biege (Feb 22)
  • Re: WANTED: mikmod patches Kees Cook (Mar 06)
• CVE request: wordpress < 2.9.2 information leak Hanno Böck (Feb 22)
  • Re: CVE request: wordpress < 2.9.2 information leak Steven M. Christey (Feb 22)
• CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check Jan Lieskovsky (Feb 23)
  • Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check Todd C. Miller (Feb 23)
    • Re: Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check Jamie Strandboge (Feb 25)
• CVE request: typo3 below 4.3.2 and 4.2.12 Authentication bypass, 2x XSS, Information disclosure Hanno Böck (Feb 23)
• CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set Jan Lieskovsky (Feb 23)
  • Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set Jamie Strandboge (Feb 24)
    • Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set Jan Lieskovsky (Feb 24)
  • Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set Jamie Strandboge (Feb 25)
• kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only) Eugene Teo (Feb 23)
• kernel: RTO (Retransmission Timeouts) Remote DoS Eugene Teo (Feb 23)
• CVE request: kernel: NFS DoS related to "automount" symlinks Eugene Teo (Feb 23)
• incorrect description for CVE-2010-0412 systemtap flaw Vincent Danen (Feb 25)
• CVE request: kernel: dvb-core: ULE decapsulation DoS Eugene Teo (Mar 01)
• CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? Vincent Danen (Mar 02)
  • Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? Vincent Danen (Mar 02)
  • Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? Steven M. Christey (Mar 03)
    • Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? Vincent Danen (Mar 03)
• CVE request: kernel: NFS: Fix an Oops when truncating a file Eugene Teo (Mar 03)
• [cansecwest] Advanced PHP Hacking Laurent OUDOT at TEHTRI-Security (Mar 03)
  • CFPs and con invitations on the list (was: [cansecwest] Advanced PHP Hacking) Solar Designer (Mar 03)
    • Re: CFPs and con invitations on the list Solar Designer (Mar 12)
      • Re: CFPs and con invitations on the list Jon Oberheide (Mar 12)
      • Re: CFPs and con invitations on the list Solar Designer (Mar 14)
      • Re: CFPs and con invitations on the list Josh Bressers (Mar 15)
      • Re: CFPs and con invitations on the list Solar Designer (Mar 24)
      • Re: CFPs and con invitations on the list Josh Bressers (Mar 25)
      • Re: CFPs and con invitations on the list Matthias Andree (Mar 25)
      • Re: CFPs and con invitations on the list Jonathan Brossard (Mar 25)
• OpenSSL (with KRB5) remote crash - CVE-2010-0433 Tomas Hoger (Mar 03)
• CVE Request: libesmtp does not check NULL bytes in commonName Kees Cook (Mar 03)
  • Re: CVE Request: libesmtp does not check NULL bytes in commonName Jan Lieskovsky (Mar 09)
    • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 10)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 10)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 11)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 11)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 11)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 11)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 15)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName ArkanoiD (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Peter Sylvester (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName ArkanoiD (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Ludwig Nussel (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName ArkanoiD (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Brian Stafford (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName ArkanoiD (Mar 17)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Joe Orton (Mar 16)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Geoff Keating (Mar 11)
      • Re: CVE Request: libesmtp does not check NULL bytes in commonName Joe Orton (Mar 11)
  • Re: CVE Request: libesmtp does not check NULL bytes in commonName Steven M. Christey (Mar 30)
  • <Possible follow-ups>
  • Re: CVE Request: libesmtp does not check NULL bytes in commonName Emily Ratliff (Mar 17)
• kernel: hvc_console: Fix race between hvc_close and hvc_remove Eugene Teo (Mar 04)
• CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 Jan Lieskovsky (Mar 08)
• CVE Request: postgresql integer overflow in hash table size calculation Vincent Danen (Mar 09)
  • Re: CVE Request: postgresql integer overflow in hash table size calculation Vincent Danen (Mar 16)
• CVE Request -- MediaWiki - v1.15.2 Jan Lieskovsky (Mar 09)
  • Re: CVE Request -- MediaWiki - v1.15.2 Nico Golde (Mar 16)
  • Re: CVE Request -- MediaWiki - v1.15.2 Henri Salo (Mar 23)
  • Re: CVE Request -- MediaWiki - v1.15.2 Steven M. Christey (Mar 30)
• phpmyvisites 2.3 Henri Salo (Mar 10)
  • Re: phpmyvisites 2.3 Anthon Pang (Mar 10)
  • Re: phpmyvisites 2.3 Steven M. Christey (Mar 30)
    • Re: phpmyvisites 2.3 Anthon Pang (Mar 30)
• CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) Jan Lieskovsky (Mar 10)
  • Re: CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) Steven M. Christey (Mar 26)
• CVE Request -- aMSN -- improper SSL certificate validation (MITM) Jan Lieskovsky (Mar 10)
• CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header Jan Lieskovsky (Mar 10)
• CVE Request: DeviceKit privilege escalation via pluggable storage device labels Vincent Danen (Mar 10)
• CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input Reed Loden (Mar 10)
  • Re: CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input Vincent Danen (Mar 16)
• CVE id request: mydms Nico Golde (Mar 11)
• Re: CVE request: kernel: connector security bypass dann frazier (Mar 11)
  • Re: [Drbd-dev] [oss-security] CVE request: kernel: connector security bypass Lars Ellenberg (Mar 12)
    • Re: [Drbd-dev] [oss-security] CVE request: kernel: connector security bypass dann frazier (Mar 12)
• CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw Eugene Teo (Mar 11)
• CVE-2010-0729 kernel: ia64: ptrace: peek_or_poke requests miss ptrace_check_attach() Eugene Teo (Mar 11)
• CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Jan Lieskovsky (Mar 12)
  • Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Vincent Danen (Mar 16)
    • Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Tomas Hoger (Mar 16)
      • Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Vincent Danen (Mar 16)
      • Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Steven M. Christey (Mar 18)
      • Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS Vincent Danen (Mar 18)
• CVE-2010-0397: NULL pointer dereference in PHP's xmlrpc extension Raphael Geissert (Mar 12)
• Call for papers: ISP-10, USA, July 2010 James Heralds (Mar 12)
• [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released Hafez Kamal (Mar 14)
• CVE-2009-4271 kernel: 32bit process on 64bit system DoS Eugene Teo (Mar 16)
  • Re: CVE-2009-4271 kernel: 32bit process on 64bit system DoS Marcus Meissner (Mar 17)
• CVE-2010-0008 kernel: sctp remote denial of service Eugene Teo (Mar 16)
• CVE id request: ikiwiki Nico Golde (Mar 17)
  • Re: CVE id request: ikiwiki Steven M. Christey (Mar 30)
• CVE Request -- Transmission v1.92 Jan Lieskovsky (Mar 17)
• CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs Jan Lieskovsky (Mar 19)
  • Re: CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs Steven M. Christey (Mar 30)
• CVE request: kernel: bluetooth: potential bad memory access with sysfs files Eugene Teo (Mar 22)
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! Hafez Kamal (Mar 22)
• CVE requests 6x kernel vulns still pending Eugene Teo (Mar 22)
  • Re: CVE requests 6x kernel vulns still pending Steven M. Christey (Mar 23)
    • Re: CVE requests 6x kernel vulns still pending Eugene Teo (Mar 23)
• kernel: bluetooth: Fix kernel crash on L2CAP stress tests Eugene Teo (Mar 23)
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction* Hafez Kamal (Mar 24)
• Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule Jonathan Brossard (Mar 25)
• Re: CFPs and con invitations on the list Josh Bressers (Mar 26)
• CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) Eugene Teo (Mar 28)
  • Re: CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) Steven M. Christey (Mar 30)
    • Re: CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) Eugene Teo (Mar 30)
• OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes Florian Weimer (Mar 29)
  • Re: OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes Florian Weimer (Mar 29)
• CVE Request -- Quake II Server -- two security issues affecting also Alien Arena Jan Lieskovsky (Mar 29)
  • RE: CVE Request -- Quake II Server -- two security issues affecting also Alien Arena Richard Stanway (Mar 29)
• CVE-2010-0741 qemu: Improper handling of erroneous data provided by Linux virtio-net driver Petr Matousek (Mar 29)
• CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input Reed Loden (Mar 29)
  • Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input Secunia Research (Mar 30)
  • Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input Reed Loden (Mar 30)
    • Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input Reed Loden (Mar 30)
    • Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input Steven M. Christey (Mar 30)
• CVE request: kernel: tipc: Fix oops on send prior to entering networked mode Eugene Teo (Mar 29)
  • Re: CVE request: kernel: tipc: Fix oops on send prior to entering networked mode Steven M. Christey (Mar 30)
    • Re: CVE request: kernel: tipc: Fix oops on send prior to entering networked mode Eugene Teo (Mar 30)
• iscsitarget/scsi-target-tuils format string CVE assignment Josh Bressers (Mar 31)
• CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw Jan Lieskovsky (Mar 31)
  • Re: CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw Alex Legler (Mar 31)

Previous period

Next period