Vulnwatch: by date

95 messages starting Jan 03 05 and ending Mar 31 05
Date index | Thread index | Author index


Monday, 03 January

Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser Peter Kruse

Tuesday, 04 January

Secunia Research: Mozilla / Mozilla Firefox Download Dialog Source Spoofing Jakob Balle

Wednesday, 05 January

IBM DB2 db2fmp buffer overflow (#NISR05012005A) NGSSoftware Insight Security Research
IBM DB2 libdb2.so buffer overflow (#NISR05012005B) NGSSoftware Insight Security Research
IBM DB2 call buffer overflow (#NISR05012005C) NGSSoftware Insight Security Research
IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D) NGSSoftware Insight Security Research
IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E) NGSSoftware Insight Security Research
IBM DB2 Windows Permission Problems (#NISR05012005F) NGSSoftware Insight Security Research
IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G) NGSSoftware Insight Security Research
IBM DB2 XML functions overflows (#NISR05012005H) NGSSoftware Insight Security Research
IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I) NGSSoftware Insight Security Research

Thursday, 06 January

WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow Rafel Ivgi, The-Insider
WinHKI - BH File Directory Transversal Rafel Ivgi, The-Insider
WinHKI - CAB File Directory Transversal Rafel Ivgi, The-Insider
WinAce & WinHKI - ZIP File Directory Transversal Rafel Ivgi, The-Insider
WinAce - GZIP File Directory Transversal Rafel Ivgi, The-Insider
WinHKI - ARC File Extraction of 1KB to 1.56GB Rafel Ivgi, The-Insider

Friday, 07 January

Linux kernel sys_uselib local root vulnerability Paul Starzetz
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability customer service mailbox

Monday, 10 January

[AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation Team SHATTER (Application Security, Inc.)
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow Team SHATTER (Application Security, Inc.)
Windows Improper Token Validation -Exploit- Cesar

Tuesday, 11 January

VERITAS Backup Exec 8.x/9.x Remote Universal Exploit class 101
EEYE: Windows ANI File Parsing Buffer Overflow Derek Soeder

Wednesday, 12 January

Linux kernel i386 SMP page fault handler privilege escalation Paul Starzetz

Thursday, 13 January

iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability customer service mailbox

Friday, 14 January

iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability customer service mailbox
iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability customer service mailbox
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability customer service mailbox

Monday, 17 January

iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability customer service mailbox

Tuesday, 18 January

Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability Rafel Ivgi, The-Insider
Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations Rafel Ivgi, The-Insider

Wednesday, 19 January

Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i NGSSoftware Insight Security Research
iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow customer service mailbox
Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c) NGSSoftware Insight Security Research
MSN Heartbeat Control Buffer Overflow NGSSoftware Insight Security Research
Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a) NGSSoftware Insight Security Research
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) NGSSoftware Insight Security Research
RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f) NGSSoftware Insight Security Research

Thursday, 20 January

RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g) NGSSoftware Insight Security Research
iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities Michael Sutton
Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications Integrigy Security
iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability iDefense Customer Service

Friday, 21 January

Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow NGSSoftware Insight Security Research

Monday, 24 January

iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability iDefense Customer Service

Wednesday, 26 January

iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability iDefense Customer Service

Thursday, 27 January

NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name NSFOCUS Security Team

Wednesday, 02 February

High Risk Vulnerabilities in Eudora Mail Client NGSSoftware Insight Security Research

Monday, 07 February

iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability iDefense Customer Service
iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability iDefense Customer Service

Tuesday, 08 February

CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability CORE Security Technologies Advisories
iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability iDefense Customer Service
GREENAPPLE Release Dave Aitel
Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability Rafel Ivgi
Re: iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability Shiva Persaud

Wednesday, 09 February

Patch available for high risk IBM DB2 Universal Database flaw NGSSoftware Insight Security Research

Thursday, 10 February

iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow iDefense Customer Service
iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability iDefense Customer Service
iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability iDefense Customer Service
iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability iDefense Customer Service
Re:iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability Shiva Persaud
Re: iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability Shiva Persaud
Re: iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability Shiva Persaud
iDEFENSE Security Advisory 02.10.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability iDefense Customer Service

Friday, 11 February

Secunia Research: Microsoft Internet Explorer "createControlRange()" Memory Corruption Andreas Sandblad
Secunia Research: Microsoft Internet Explorer Multiple Vulnerabilities Andreas Sandblad
iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability iDefense Customer Service

Saturday, 19 February

Secunia Research: Yahoo! Messenger File Transfer Filename Spoofing Andreas Sandblad
Secunia Research: Yahoo! Messenger Audio Setup Wizard Privilege Escalation Carsten H. Eiram
3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow class 101

Wednesday, 23 February

Robustness patch for TWiki, vulnerability in ImageGalleryPlugin Florian Weimer

Thursday, 24 February

Cyclades AlterPath Manager Vulnerabilities Sullo

Monday, 28 February

[HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit class 101
Corsaire Security Advisory - Mitel 3300 ICP web interface session hijacking issue advisories
Corsaire Security Advisory - Mitel 3300 ICP web interface DoS issue advisories

Tuesday, 01 March

iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability Michael Sutton

Wednesday, 02 March

RealOne Player / Real .WAV Heap Overflow File Format Vulnerability Mark Litchfield

Monday, 07 March

[HAT-SQUAD] Computer Associates Exploit class 101
Real Realplayer 10 .smil local buffer overflow POC nolimit bugtraq
CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow CIRT.DK Mailinglists
- Argeniss - Oracle Database Server Directory transversal Cesar

Thursday, 10 March

Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation Stefano Di Paola
Mysql CREATE FUNCTION mysql.func table arbitrary library injection Stefano Di Paola
Mysql CREATE FUNCTION libc arbitrary code execution. Stefano Di Paola

Sunday, 13 March

[HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit class 101

Monday, 14 March

[HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit class 101

Wednesday, 16 March

LLSSRV Clarifications [Immunity] Dave Aitel

Thursday, 17 March

LLSSRV Redux Dave Aitel

Friday, 18 March

Linux ISO9660 handling flaws Michal Zalewski

Monday, 21 March

Details of Sybase ASE bugs withheld NGSSoftware Insight Security Research
iDEFENSE Security Advisory 03.21.05: Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability iDefense Customer Service

Tuesday, 22 March

RUXCON 2005 Call for Papers RUXCON Call for Papers

Wednesday, 23 March

Re: Details of Sybase ASE bugs withheld Simple Nomad

Sunday, 27 March

Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Paul Laudanski

Thursday, 31 March

Bay Technical Associates telnet server logon bypass nolimit bugtraq