[bugtraq] Thread Index

• Chronological Index · RSS feed

• Password Protect XSS and SQL-Injection vulnerabilities., Criolabs   (September 03, 2004)
• [ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy, Thierry Carrez   (September 03, 2004)
• TSL-2004-0045 - kerberos5, Trustix Security Advisor   (September 03, 2004)
• WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code, Jérôme   (September 03, 2004)
• Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation, Cisco Systems Product Security Incident Response Team   (September 03, 2004)
• [ GLSA 200409-05 ] Gallery: Arbitrary command execution, Sune Kloppenborg Jeppesen   (September 03, 2004)
• SUSE Security Announcement: zlib (SUSE-SA:2004:029), Thomas Biege   (September 03, 2004)
• [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews, Exoduks   (September 03, 2004)
• [ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication, Thierry Carrez   (September 03, 2004)
• [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server, SHATTER (Application Security, Inc.)   (September 03, 2004)
• Dynalink routers backdoor?, fabio   (September 03, 2004)
• [ GLSA 200409-07 ] xv: Buffer overflows in image handling, Sune Kloppenborg Jeppesen   (September 03, 2004)
• Patch available for IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research   (September 03, 2004)
• [security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow, Boren, Rich (SSRT)   (September 03, 2004)
• Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration, Jérôme   (September 04, 2004)
• FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, Thor Larholm   (September 05, 2004)
  • <Possible follow-ups>
  • Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, http-equiv@xxxxxxxxxx   (September 12, 2004)  
   
• [XSS] PHP-Nuke 7.4 ViewAdmin Bug, Pierquinto Manco   (September 05, 2004)
  • Re: [XSS] PHP-Nuke 7.4 Bugs, Blaine Elzey   (September 08, 2004)
    • Re: [XSS] PHP-Nuke 7.4 Bugs, Peter Lowe   (September 09, 2004)  
     
   
• Engenio/LSI Logic controllers denial of service/data corruption, Jedi/Sector One   (September 05, 2004)
  • Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption), Jedi/Sector One   (September 07, 2004)  
   
• MITKRB5-SA-2004-002: double-free vulnerabilities, Tom Yu   (September 05, 2004)
• [XSS] PHP-Nuke 7.4 DelAdmin Bug, Pierquinto Manco   (September 06, 2004)
• OpenCA Security Advisory: Cross Site Scripting vulnerability, Martin Bartosch   (September 06, 2004)
• [ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely, Sune Kloppenborg Jeppesen   (September 06, 2004)
• SUSE Security Announcement: apache2 (SUSE-SA:2004:030), Sebastian Krahmer   (September 07, 2004)
• FUll Path Disclosure in YABBSE, Ahmad Muammar   (September 07, 2004)
• Patch available for multiple critical flaws in Oracle, NGSSoftware Insight Security Research   (September 07, 2004)
  • <Possible follow-ups>
  • Re: Patch available for multiple critical flaws in Oracle, Marc Bejarano   (December 20, 2004)