Vulnwatch: by date

81 messages starting Jan 03 07 and ending Mar 30 07
Date index | Thread index | Author index


Wednesday, 03 January

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access Cisco Systems Product Security Incident Response Team

Thursday, 04 January

High Risk Vulnerability in the OpenOffice and StarOffice Suites NGSSoftware Insight Security Research
Correction (High Risk Vulnerability in the OpenOffice and StarOffice Suites) NGSSoftware Insight Security Research

Saturday, 06 January

iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability iDefense Labs
iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability iDefense Labs
iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability iDefense Labs
fetchmail security announcement 2006-03 (CVE-2006-5974) Matthias Andree
fetchmail security announcement 2006-02 (CVE-2006-5867) Matthias Andree
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server Cisco Systems Product Security Incident Response Team

Tuesday, 09 January

iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability iDefense Labs
iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability iDefense Labs
iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability iDefense Labs
iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability iDefense Labs

Thursday, 11 January

iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeGetVisualInfo Memory Corruption Vulnerability iDefense Labs
iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability iDefense Labs
iDefense Security Advisory 01.09.07: Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability iDefense Labs
Cisco Security Advisory: Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: DLSw Vulnerability Cisco Systems Product Security Incident Response Team

Wednesday, 17 January

Corsaire Security Advisory: ChainKey Java Code Protection Bypass issue advisories

Friday, 19 January

Cisco Security Advisory: SSL/TLS Certificate and SSH Public Key Validation Vulnerability Cisco Systems Product Security Incident Response Team

Wednesday, 24 January

Cisco Security Advisory: Crafted TCP Packet Can Cause Denial of Service Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: IPv6 Routing Header Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Crafted IP Option Vulnerability Cisco Systems Product Security Incident Response Team

Thursday, 25 January

BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.] Lebbeous Weekley
Medium Risk Vulnerability in PGP Desktop NGSSoftware Insight Security Research

Friday, 26 January

iDefense Security Advisory 01.26.07: Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability iDefense Labs

Friday, 02 February

Cisco Security Advisory: SIP Packet Reloads IOS Devices Not Configured for SIP Cisco Systems Product Security Incident Response Team

Friday, 09 February

Jetty Session ID Prediction NGSSoftware Insight Security Research
iDefense Security Advisory 02.02.07: Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability iDefense Labs
iDefense Security Advisory 02.07.07: RARLabs Unrar Password Prompt Buffer Overflow Vulnerability iDefense Labs
iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability iDefense Labs
iDefense Security Advisory 02.07.07: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability iDefense Labs
TWiki Security Alert: Arbitrary code execution in session files (CVE-2007-0669) Peter Thoeny
Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technical details) Nicob

Saturday, 10 February

TFTP directory traversal in Kiwi CatTools Nicob

Monday, 12 February

Multiple vulnerabilities in phpMyVisites Nicob

Thursday, 15 February

Cisco Security Advisory: Multiple IOS IPS Vulnerabilities Cisco Systems Product Security Incident Response Team
iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability iDefense Labs NO-REPLY
iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability iDefense Labs NO-REPLY
Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Cisco Systems Product Security Incident Response Team

Friday, 16 February

Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Cisco Systems Product Security Incident Response Team
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability iDefense Labs
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability iDefense Labs

Friday, 23 February

Overtaking Google Desktop Yair Amit
Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Multiple Vulnerabilities in 802.1X Supplicant Cisco Systems Product Security Incident Response Team
iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability iDefense Labs

Saturday, 24 February

iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability iDefense Labs
iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability iDefense Labs
iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities iDefense Labs

Tuesday, 27 February

iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability iDefense Labs
iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability iDefense Labs
iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability iDefense Labs
iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability iDefense Labs

Wednesday, 28 February

Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability Cisco Systems Product Security Incident Response Team

Friday, 02 March

iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability iDefense Labs

Monday, 05 March

iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Labs
CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability CORE Security Technologies Advisories

Wednesday, 07 March

ANNOUNCE: Security OPUS San Francisco, CA - March 19-21, 2007 Steve Manzuik

Monday, 12 March

iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities iDefense Labs
Php Nuke POST XSS on steroids ascii
Windows Multimedia mmioRead Denial of Service Vulnerability Michał Majchrowicz
Re: Php Nuke POST XSS on steroids ascii

Tuesday, 13 March

Unrarlib 0.4.0 (urarlib_get) Local buffer overflow starcadi

Wednesday, 14 March

CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow CORE Security Technologies Advisories
iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability iDefense Labs

Thursday, 15 March

iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Labs
QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow starcadi starcadi
LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow starcadi starcadi

Friday, 16 March

iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities iDefense Labs

Saturday, 17 March

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability starcadi

Monday, 19 March

dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability starcadi

Tuesday, 20 March

cftp 0.12 (readrc) Local buffer overflow vulnerability starcadi

Wednesday, 28 March

iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability iDefense Labs
Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability Michał Majchrowicz
Libero.it (italian ISP) XSS vulnerability Rosario Valotta

Thursday, 29 March

iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Labs
iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability iDefense Labs
Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team

Friday, 30 March

iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Labs