[bugtraq] Thread Index

• Chronological Index · RSS feed

• Re: MkPortal Urlobox Cross Site Request Forgery, (continued)
  • Re: MkPortal Urlobox Cross Site Request Forgery, securityfocus   (December 21, 2006)  
• ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability, zdi-disclosures   (December 20, 2006)
• SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability, SEC Consult Research   (December 20, 2006)
• Oracle Portal 10g HTTP Response Splitting, putosoft softputo   (December 20, 2006)
  • Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting, Brian Eaton   (December 20, 2006)  
  • <Possible follow-ups>
  • Re: Oracle Portal 10g HTTP Response Splitting, majororacle   (December 21, 2006)  
   
• NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory, security   (December 20, 2006)
• Mono XSP ASP.NET Server sourcecode disclosure vulnerability, jose . palanco   (December 20, 2006)
• [security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege, security-alert   (December 20, 2006)
• [security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078, security-alert   (December 20, 2006)
• [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability, Raphael Marichez   (December 20, 2006)
• [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities, Raphael Marichez   (December 20, 2006)
• [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability, Raphael Marichez   (December 20, 2006)
• critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, quincy   (December 20, 2006)
  • Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, 3APA3A   (December 21, 2006)  
  • <Possible follow-ups>
  • Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, Juha-Matti Laurio   (December 21, 2006)
    • Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, Thierry Zoller   (December 22, 2006)  
     
   
• [USN-397-1] mono vulnerability, Kees Cook   (December 20, 2006)
• [OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus), OpenPKG GmbH   (December 21, 2006)
• NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory, security   (December 21, 2006)
• [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability, Williams, James K   (December 21, 2006)
• Fun with event logs (semi-offtopic), 3APA3A   (December 21, 2006)
  • Re: [Full-disclosure] Fun with event logs (semi-offtopic), endrazine   (December 21, 2006)  
   
• Microsoft Windows XP/2003/Vista memory corruption 0day, 3APA3A   (December 21, 2006)
  • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, 3APA3A   (December 21, 2006)
    • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Alexander Sotirov   (December 21, 2006)
      • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Pukhraj Singh   (December 21, 2006)  
      • Message not available
      • RE: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Michele Cicciotti   (December 22, 2006)  
       
     
   
• [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution, Steve Kemp   (December 21, 2006)
• [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability, security   (December 21, 2006)