|
|
Colapse all |
Post message
FreeBSD Security Advisory FreeBSD-SA-05:18.zlib 2005-07-27 FreeBSD Security Advisories (security-advisories freebsd org) RE: On classifying attacks 2005-07-25 Black, Michael (black EssexCorp com) Perhaps the current popularity of remote/local terms comes from the Lincoln Labs studies done in 1998: http://www.usenix.org/events/sec99/full_papers/ghosh/ghosh_html/ Attacks were divided into four categories: denial of service probing/surveillance remote to local user to root attacks In the [ more ] [ reply ] [SECURITY] [DSA 768-1] New phpbb2 packages fix cross-site scripting 2005-07-27 joey infodrom org (Martin Schulze) Shared section vulnerability when opening microsoft office document resulting in DoS 2005-07-27 sylvain roger solucom fr There is a shared section vulnerability in office products when trying to open an office document with firefox. For example try to open a word document attached in a webmail. firefox.exe process will create a son winword.exe process (it only appears when the process is created with firefox not svcho [ more ] [ reply ] Re : [Firefox Bug 302187] New: Shared section vulnerability when opening microsoft office document resulting in DoS 2005-07-27 sylvain roger solucom fr Hello, More details about the potentiel vulnerability : Firefox is just starting a new process in the standard way, using CreateProcess (see <http://lxr.mozilla.org/seamonkey/source/nsprpub/pr/src/md/windows/ntmis c.c#391>). Firefox is already passing NULL to lpProcessAttributes and lpThreadAttribu [ more ] [ reply ] [ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library 2005-07-27 Sune Kloppenborg Jeppesen (jaervosz gentoo org) [SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution 2005-07-27 joey infodrom org (Martin Schulze) [ GLSA 200507-25 ] Clam AntiVirus: Integer overflows 2005-07-26 Sune Kloppenborg Jeppesen (jaervosz gentoo org) FreeBSD Security Advisory FreeBSD-SA-05:19.ipsec 2005-07-27 FreeBSD Security Advisories (security-advisories freebsd org) [ GLSA 200507-24 ] Mozilla Suite: Multiple vulnerabilities 2005-07-26 Sune Kloppenborg Jeppesen (jaervosz gentoo org) [SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution 2005-07-27 joey infodrom org (Martin Schulze) [ISR] - Novell GroupWise Client Remote Buffer Overflow 2005-07-27 Francisco Amato (famato infobyte com ar) || || [ISR] || Infobyte Security Research || www.infobyte.com.ar || 07.27.2005 || .:: SUMMARY Novell GroupWise Client Remote Buffer Overflow Version: GroupWise 6.5.3, It is suspected that all previous versions of Groupwise Client are vulnerable. .:: BACKGROUND GroupWise Client is Novell' [ more ] [ reply ] [NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability 2005-07-27 Jonglim Yun (abc mail nilesoft co kr) CYBSEC - Security Advisory: Default Configuration InformationDisclosure in Lotus Domino 2005-07-26 Leandro Meiners (lmeiners cybsec com) (The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/default_configuration_information_disclosure_ lotus_domino.pdf ) CYBSEC S.A. www.cybsec.com Advisory Name: Default Configuration Information Disclosure in Lotus Domino (Including password hashes) Vu [ more ] [ reply ] Re: Re: Local privilege escalation using runasp V3.5.1 2005-07-26 securityfocus 5 stele spamgourmet com Internet Explorer AJAX Bug 2005-07-26 anakin php5 pl Summary: Internet Explorer 6.0 and below hangs when entering prepared page Details: When using AJAX (Asynchronous JavaScript and XML) to load page content dynamicly we are allowed to do anything on the side of server. Internet Explorer process hangs when Content-type header is sent within. Vulnera [ more ] [ reply ] Vulnerability in IBM access 2005-07-26 sylvain roger solucom fr Hello, I would like to make to Bugtraq knowledge the existence of a security vulnerability in IBM access software. IBM access is vulnerable to a Shared Section vulnerability. The processes QCWLICON.exe and QCTRAY.exe have the section \BaseNamedObjects\QCONDB with invalid rights which allows everyo [ more ] [ reply ] 3Com launches vulnerability-buying program 2005-07-25 Ghaith Nasrawi (libero aucegypt edu) folks, as it was announced few minutes ago that "3Com launches vulnerability-buying program" (through TippingPoint, a company 3Com acquired earlier this year) http://www.securityfocus.com/news/11253 http://www.zerodayinitiative.com/ so what do you think about this step? Obviously, they are trying [ more ] [ reply ] fetchmail security announcement fetchmail-SA-2005-01 2005-07-26 Matthias Andree ma+nomail (at) dt.e-technik.uni-dortmund (dot) de [email concealed] (ma+nomail dt e-technik uni-dortmund de) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2005-01: security announcement Topic: remote code injection vulnerability in fetchmail Author: Matthias Andree Version: 1.02 Announced: 2005-07-21 Type: buffer overrun/stack corruption/code injection Impact: account or system compromi [ more ] [ reply ] SPIDynamics WebInspect Cross-Application Scripting (XAS) 2005-07-26 3APA3A (3APA3A SECURITY NNOV RU) |
|
Privacy Statement |
to logout of URLs protected
by HTTP basic authentication.
Try to completely close all browser instances between the two attempts and
you will discover that
firefox asks for a login in all cases.
Shalom Carmel
-------------
[ more ] [ reply ]