[bugtraq] Chronological Index

• Thread Index · RSS feed

• October 14, 2004
  • [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities, Luke Macken   (October 14, 2004)
  • [FLSA-2004:1833] Updated lha resolves security vulnerabilities, Marc Deslauriers   (October 14, 2004)
  • [SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm, Martin Schulze   (October 14, 2004)
  • [CLA-2004:873] Conectiva Security Announcement - samba, Conectiva Updates   (October 14, 2004)
  • [CLA-2004:872] Conectiva Security Announcement - cups, Conectiva Updates   (October 14, 2004)
  • SetWindowLong Shatter Attacks, Brett Moore   (October 14, 2004)
  • Buffer Overflow In Microsoft Excel, Brett Moore   (October 14, 2004)
  • [ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm, Luke Macken   (October 14, 2004)
  • MSN Gaming Heartbeat Component Buffer Overflow, NGSSoftware Insight Security Research   (October 14, 2004)
  • [ GLSA 200410-11 ] tiff: Buffer overflows in image decoding, Thierry Carrez   (October 14, 2004)
  • EEYE: Windows VDM #UD Local Privilege Escalation, Derek Soeder   (October 14, 2004)
  • [ GLSA 200410-10 ] gettext: Insecure temporary file handling, Luke Macken   (October 14, 2004)
  • Adobe acrobat / Adobe Reader 6 can read local files, Jelmer   (October 14, 2004)
  • IT Underground Talks, Dave Aitel   (October 14, 2004)
  • EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability, Derek Soeder   (October 14, 2004)
• October 13, 2004
  • [SECURITY] [DSA 565-1] New sox packages fix buffer overflow, Martin Schulze   (October 13, 2004)
  • ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer, ACROS Security   (October 13, 2004)
  • BindView Advisory: Memory Leak and DoS in NT4 RPC server, advisory   (October 13, 2004)
  • [FLSA-2004:2102] Updated samba packages fix security vulnerability, Dominic Hargreaves   (October 13, 2004)
  • [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss, vuln   (October 13, 2004)
  • XXS in SCT email client, Matthew Oyer   (October 13, 2004)
  • XXS in fusetalk forum, Matthew Oyer   (October 13, 2004)
  • [SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution, Martin Schulze   (October 13, 2004)
  • [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3., Exoduks   (October 13, 2004)
  • [SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution, Martin Schulze   (October 13, 2004)
  • MS October Security bulletins, albatross   (October 13, 2004)
  • Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS, Amit Klein (AKsecurity)   (October 13, 2004)
  • Reverse Engineering the First Pocket PC Trojan, kers0r   (October 13, 2004)
• October 12, 2004
  • RE: Insecure Default Service DACL's in Windows 2003, Kurt Dillard   (October 12, 2004)
  • Re: Regression in IE: Accessing remote/local content in IE (GM#009-IE), Nick FitzGerald   (October 12, 2004)