Bugtraq

[slackware-security] kernel (SSA:2013-140-01)

Tue, 21 May 2013 16:00:14 GMT

[slackware-security] kernel (SSA:2013-140-01)

Sony PS3 Firmware v4.31 - Code Execution Vulnerability

Tue, 21 May 2013 15:43:16 GMT

Sony PS3 Firmware v4.31 - Code Execution Vulnerability

CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall)

chudakovma@xxxxxxxxx — Tue, 21 May 2013 15:24:28 GMT

CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall)

Static analysis tool exposition (SATE) V Call for participation

aure@xxxxxxxx — Tue, 21 May 2013 15:19:45 GMT

Static analysis tool exposition (SATE) V Call for participation

Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt)

Tue, 21 May 2013 15:09:52 GMT

Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt)

Defense in depth -- the Microsoft way

Tue, 21 May 2013 14:57:50 GMT

Defense in depth -- the Microsoft way

CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops!

Fri, 17 May 2013 15:30:20 GMT

CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops!

[slackware-security] ruby (SSA:2013-136-02)

Fri, 17 May 2013 15:15:13 GMT

[slackware-security] ruby (SSA:2013-136-02)

[slackware-security] mozilla-thunderbird x86_64 packages (SSA:2013-136-01)

Fri, 17 May 2013 15:02:51 GMT

[slackware-security] mozilla-thunderbird x86_64 packages (SSA:2013-136-01)

APPLE-SA-2013-05-16-1 iTunes 11.0.3

Fri, 17 May 2013 14:49:50 GMT

APPLE-SA-2013-05-16-1 iTunes 11.0.3

ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability

Thu, 16 May 2013 15:35:04 GMT

ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability

ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability

Thu, 16 May 2013 15:20:46 GMT

ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability

[slackware-security] mozilla-thunderbird (SSA:2013-135-02)

Thu, 16 May 2013 14:57:01 GMT

[slackware-security] mozilla-thunderbird (SSA:2013-135-02)

[slackware-security] mozilla-firefox (SSA:2013-135-01)

Thu, 16 May 2013 14:45:49 GMT

[slackware-security] mozilla-firefox (SSA:2013-135-01)

[SECURITY] [DSA 2669-1] linux security update

Thu, 16 May 2013 14:32:36 GMT

[SECURITY] [DSA 2669-1] linux security update

Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability

Wed, 15 May 2013 18:59:37 GMT

Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability

Multiple Vulnerabilities in Exponent CMS

advisory@xxxxxxxxxxxx — Wed, 15 May 2013 18:43:22 GMT

Multiple Vulnerabilities in Exponent CMS

[ MDVSA-2013:165 ] firefox

security@xxxxxxxxxxxx — Wed, 15 May 2013 15:50:15 GMT

[ MDVSA-2013:165 ] firefox

[security bulletin] HPSBUX02859 SSRT101144 rev.3 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execution of Arbitrary Code

security-alert@xxxxxx — Wed, 15 May 2013 15:39:42 GMT

[security bulletin] HPSBUX02859 SSRT101144 rev.3 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execution of Arbitrary Code

[SECURITY] [DSA 2668-1] linux-2.6 security update

Wed, 15 May 2013 15:22:50 GMT

[SECURITY] [DSA 2668-1] linux-2.6 security update

WASC Announcement: Static Analysis Technologies Evaluation Criteria Published

announcements@xxxxxxxxxxxxx — Mon, 13 May 2013 17:06:31 GMT

WASC Announcement: Static Analysis Technologies Evaluation Criteria Published

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

Mon, 13 May 2013 16:45:42 GMT

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

SimpleTransfer 2.2.1 - Command Injection Vulnerabilities

Mon, 13 May 2013 16:34:30 GMT

SimpleTransfer 2.2.1 - Command Injection Vulnerabilities

Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities

Mon, 13 May 2013 16:25:23 GMT

Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities

Wifi Album v1.47 iOS - Command Injection Vulnerability

Mon, 13 May 2013 16:08:59 GMT

Wifi Album v1.47 iOS - Command Injection Vulnerability

Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities

Mon, 13 May 2013 15:54:29 GMT

Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities

Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities

Mon, 13 May 2013 15:39:37 GMT

Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities

[RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution

Mon, 13 May 2013 15:28:14 GMT

[RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution

[ MDVSA-2013:164 ] mesa

security@xxxxxxxxxxxx — Mon, 13 May 2013 15:14:20 GMT

[ MDVSA-2013:164 ] mesa

[SECURITY] [DSA 2667-1] mysql-5.5 security update

Mon, 13 May 2013 14:56:25 GMT

[SECURITY] [DSA 2667-1] mysql-5.5 security update

[SECURITY] [DSA 2666-1] xen security update

Mon, 13 May 2013 14:40:31 GMT

[SECURITY] [DSA 2666-1] xen security update

CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException

Fri, 10 May 2013 18:11:39 GMT

CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException

ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability

Fri, 10 May 2013 18:05:08 GMT

ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability

[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited

Fri, 10 May 2013 17:52:12 GMT

[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited

CFP: Hacktivity 2013, October 11-12, Budapest, Hungary

cfp@xxxxxxxxxxxxxx — Fri, 10 May 2013 17:46:38 GMT

CFP: Hacktivity 2013, October 11-12, Budapest, Hungary

[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator

Fri, 10 May 2013 17:42:05 GMT

[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator

DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities

ddivulnalert@xxxxxxxxxxxxxxxx — Thu, 09 May 2013 20:18:26 GMT

DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities

ESA-2013-021: EMC Documentum Multiple Vulnerabilities

Thu, 09 May 2013 20:04:38 GMT

ESA-2013-021: EMC Documentum Multiple Vulnerabilities

Re: Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued]

Thu, 09 May 2013 19:45:53 GMT

Re: Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued]

ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability

Thu, 09 May 2013 19:27:44 GMT

ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability

Vulnerability in "Fujitsu Desktop Update" (for Windows)

Thu, 09 May 2013 19:14:01 GMT

Vulnerability in "Fujitsu Desktop Update" (for Windows)

[security bulletin] HPSBMU02786 SSRT100877 rev.2 - HP System Management Homepage (SMH) Running on Linux, Windows, and VMware ESX, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code

security-alert@xxxxxx — Thu, 09 May 2013 19:00:46 GMT

[security bulletin] HPSBMU02786 SSRT100877 rev.2 - HP System Management Homepage (SMH) Running on Linux, Windows, and VMware ESX, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code

[security bulletin] HPSBUX02876 SSRT101148 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)

security-alert@xxxxxx — Wed, 08 May 2013 20:49:16 GMT

[security bulletin] HPSBUX02876 SSRT101148 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)

[2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability

Wed, 08 May 2013 20:38:44 GMT

[2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software

Wed, 08 May 2013 17:48:59 GMT

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software

Cross-Site Request Forgery (CSRF) in UMI.CMS

advisory@xxxxxxxxxxxx — Wed, 08 May 2013 16:35:26 GMT

Cross-Site Request Forgery (CSRF) in UMI.CMS

[ MDVSA-2013:163 ] glibc

security@xxxxxxxxxxxx — Wed, 08 May 2013 15:12:52 GMT

[ MDVSA-2013:163 ] glibc

[ MDVSA-2013:162 ] glibc

security@xxxxxxxxxxxx — Wed, 08 May 2013 14:59:40 GMT

[ MDVSA-2013:162 ] glibc

SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager

Tue, 07 May 2013 13:59:56 GMT

SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager

Apache VCL improper input validation

Mon, 06 May 2013 17:28:12 GMT

Apache VCL improper input validation

[ MDVSA-2013:161 ] java-1.7.0-openjdk

security@xxxxxxxxxxxx — Mon, 06 May 2013 17:10:21 GMT

[ MDVSA-2013:161 ] java-1.7.0-openjdk

ESA-2013-015: RSA Archer® GRC Multiple Vulnerabilities

Mon, 06 May 2013 15:40:57 GMT

ESA-2013-015: RSA Archer® GRC Multiple Vulnerabilities

VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6

Mon, 06 May 2013 14:44:37 GMT

VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6

Multiple buffer overflows on Huawei SNMPv3 service

roberto.paleari@xxxxxxxxx — Mon, 06 May 2013 14:43:10 GMT

Multiple buffer overflows on Huawei SNMPv3 service

Vulnerability in Microsoft Security Essentials
Mon, 06 May 2013 14:27:31 GMT
Vulnerability in Microsoft Security Essentials

[SE-2012-01] New security vulnerabilities and broken fixes in IBM Java

Mon, 06 May 2013 14:23:35 GMT
[SE-2012-01] New security vulnerabilities and broken fixes in IBM Java

Multiple Vulnerabilities in D-Link DSL-320B

devnull@xxxxxxxxxxx — Mon, 06 May 2013 14:03:53 GMT
Multiple Vulnerabilities in D-Link DSL-320B

[ MDVSA-2013:160 ] phpmyadmin

security@xxxxxxxxxxxx — Fri, 03 May 2013 18:52:14 GMT
[ MDVSA-2013:160 ] phpmyadmin

VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "CDisplayPointer" Use-after-free (MS13-028)

Fri, 03 May 2013 18:34:56 GMT
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "CDisplayPointer" Use-after-free (MS13-028)

VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free (MS13-028)

Fri, 03 May 2013 18:19:54 GMT
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free (MS13-028)

ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability

Thu, 02 May 2013 19:03:52 GMT
ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability

ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability

Thu, 02 May 2013 18:43:33 GMT
ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability

ESA-2013-034: EMC Avamar Improper Authorization vulnerability

Thu, 02 May 2013 18:20:12 GMT
ESA-2013-034: EMC Avamar Improper Authorization vulnerability

[SECURITY] [DSA 2664-1] stunnel4 security update

Thu, 02 May 2013 18:11:24 GMT
[SECURITY] [DSA 2664-1] stunnel4 security update

NGS00415 Patch Notification: Oracle 11g TNS listener remote Null Pointer Dereference (pre-auth)

Thu, 02 May 2013 17:50:11 GMT
NGS00415 Patch Notification: Oracle 11g TNS listener remote Null Pointer Dereference (pre-auth)

WordPress Plugin: Advanced XML Reader v0.3.4 XXE Vulnerability

admin@xxxxxxxxxxxxx — Thu, 02 May 2013 17:39:25 GMT
WordPress Plugin: Advanced XML Reader v0.3.4 XXE Vulnerability

NGS00416 Patch Notification: Oracle 11g TNS listener remote Invalid Pointer Read (pre-auth)

Thu, 02 May 2013 17:37:56 GMT
NGS00416 Patch Notification: Oracle 11g TNS listener remote Invalid Pointer Read (pre-auth)

NGS00422 Patch Notification: Oracle Retail Integration Bus Manager Directory Traversal

Thu, 02 May 2013 17:11:29 GMT
NGS00422 Patch Notification: Oracle Retail Integration Bus Manager Directory Traversal

NGS00423 Patch Notification: Oracle Retail Invoice Manager SQL Injection

Thu, 02 May 2013 16:54:18 GMT
NGS00423 Patch Notification: Oracle Retail Invoice Manager SQL Injection

Multiple Cross-Site Scripting (XSS) vulnerabilities in GetSimple CMS

advisory@xxxxxxxxxxxx — Wed, 01 May 2013 17:01:27 GMT
Multiple Cross-Site Scripting (XSS) vulnerabilities in GetSimple CMS

SQL Injection in b2evolution

advisory@xxxxxxxxxxxx — Wed, 01 May 2013 16:49:21 GMT
SQL Injection in b2evolution

[HITB-Announce] #HITB2013KUL Call for Papers

Wed, 01 May 2013 16:36:22 GMT
[HITB-Announce] #HITB2013KUL Call for Papers

Unchecked Buffer in Microchip TCP/IP Stack Could Allow Remote Code Execution

az.bugreport.subscriber@xxxxxxxxx — Wed, 01 May 2013 16:25:36 GMT
Unchecked Buffer in Microchip TCP/IP Stack Could Allow Remote Code Execution

[ MDVSA-2013:159 ] clamav

security@xxxxxxxxxxxx — Wed, 01 May 2013 13:46:12 GMT
[ MDVSA-2013:159 ] clamav

[ MDVSA-2013:158 ] krb5

security@xxxxxxxxxxxx — Tue, 30 Apr 2013 19:44:17 GMT
[ MDVSA-2013:158 ] krb5

Syslog Watcher Pro 'Date' Parameter Cross Site Scripting Vulnerability

demonalex@xxxxxxx — Tue, 30 Apr 2013 18:54:04 GMT
Syslog Watcher Pro 'Date' Parameter Cross Site Scripting Vulnerability

[SECURITY] [DSA 2665-1] strongswan security update

Tue, 30 Apr 2013 18:34:49 GMT
[SECURITY] [DSA 2665-1] strongswan security update

[ MDVSA-2013:157 ] krb5

security@xxxxxxxxxxxx — Tue, 30 Apr 2013 17:56:34 GMT
[ MDVSA-2013:157 ] krb5

[security bulletin] HPSBMU02872 SSRT101185 rev.1 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS)

security-alert@xxxxxx — Tue, 30 Apr 2013 17:32:16 GMT
[security bulletin] HPSBMU02872 SSRT101185 rev.1 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS)

FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver [REVISED]

Tue, 30 Apr 2013 16:53:19 GMT
FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver [REVISED]

WowzaMediaServer SecureToken bypass (and worse)

Tue, 30 Apr 2013 16:49:50 GMT
WowzaMediaServer SecureToken bypass (and worse)

WowzaMediaServer StorageDir escape (regression)

Tue, 30 Apr 2013 16:25:15 GMT
WowzaMediaServer StorageDir escape (regression)

Personal File Share HTTP Server Remote Overflow Vulnerability

demonalex@xxxxxxx — Tue, 30 Apr 2013 16:01:46 GMT
Personal File Share HTTP Server Remote Overflow Vulnerability

CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities

Tue, 30 Apr 2013 15:44:11 GMT
CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities

FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver

Tue, 30 Apr 2013 15:09:07 GMT
FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver

[ MDVSA-2013:156 ] apache-mod_security

security@xxxxxxxxxxxx — Tue, 30 Apr 2013 14:44:49 GMT
[ MDVSA-2013:156 ] apache-mod_security

[security bulletin] HPSBMU02874 SSRT101184 rev.1 - HP Service Manager, Java Runtime Environment (JRE) Security Update

security-alert@xxxxxx — Tue, 30 Apr 2013 14:20:44 GMT
[security bulletin] HPSBMU02874 SSRT101184 rev.1 - HP Service Manager, Java Runtime Environment (JRE) Security Update

[security bulletin] HPSBMU02873 SSRT101182 rev.1 - HP Service Manager, Apache Tomcat Security Update

security-alert@xxxxxx — Tue, 30 Apr 2013 14:07:00 GMT
[security bulletin] HPSBMU02873 SSRT101182 rev.1 - HP Service Manager, Apache Tomcat Security Update

Re: Nginx ngx_http_close_connection function integer overflow

Mon, 29 Apr 2013 17:26:46 GMT
Re: Nginx ngx_http_close_connection function integer overflow

[ MDVSA-2013:155 ] fuse

security@xxxxxxxxxxxx — Mon, 29 Apr 2013 17:14:14 GMT
[ MDVSA-2013:155 ] fuse

[ MDVSA-2013:154 ] util-linux

security@xxxxxxxxxxxx — Mon, 29 Apr 2013 16:56:53 GMT
[ MDVSA-2013:154 ] util-linux

Cisco/Linksys E1200 N300 Reflected XSS

Mon, 29 Apr 2013 16:46:16 GMT
Cisco/Linksys E1200 N300 Reflected XSS

[KIS-2013-04] Joomla! <= 3.0.3 (remember.php) PHP Object Injection Vulnerability

Mon, 29 Apr 2013 16:34:38 GMT
[KIS-2013-04] Joomla! <= 3.0.3 (remember.php) PHP Object Injection Vulnerability

[ MDVSA-2013:153 ] subversion

security@xxxxxxxxxxxx — Mon, 29 Apr 2013 16:20:55 GMT
[ MDVSA-2013:153 ] subversion

[ MDVSA-2013:152 ] subversion

security@xxxxxxxxxxxx — Mon, 29 Apr 2013 16:06:14 GMT
[ MDVSA-2013:152 ] subversion

[ MDVSA-2013:151 ] curl

security@xxxxxxxxxxxx — Mon, 29 Apr 2013 15:55:03 GMT
[ MDVSA-2013:151 ] curl

EDSC 2013 CFP Open

Mon, 29 Apr 2013 15:39:36 GMT
EDSC 2013 CFP Open