-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------

Debian Security Advisory DSA 736-2 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Michael Stone
July 07, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------

Debian Security Advisory DSA 735-2 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Michael Stone
July 07, 2005

[ more ]  [ reply ]

Summary
=======

Bugzilla is a Web-based bug-tracking system, used by a large number of
software projects.

This advisory covers two security bugs that have recently been
discovered and fixed in the Bugzilla code:

+ Any user can change a flag on any bug. This also allows the
attacker to expose

[ more ]  [ reply ]

FYI

---------- Forwarded message ----------
From: Mark Teicher <mht3 (at) earthlink (dot) net [email concealed]>
Date: Jul 7, 2005 7:06 PM
Subject: Re: [VOIPSEC] VoIP-Phones: Weakness in proccessing SIP-Notify-Messages
To: Tobias Glemser <tglemser (at) tele-consulting (dot) com [email concealed]>
Cc: voipsec (at) voipsa (dot) org [email concealed]

Interesting results when executed

[ more ]  [ reply ]

/*
************************************************************************
*****************************************
$ An open security advisory #10 - Siteminder v5.5 Vulnerabilities
************************************************************************
**************************************

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Security Advisory #2005-0034

Package name: net-snmp, zlib
Summary: Multiple vulnerabilities
Date: 2005-07-08
Affected versions

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 743-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
July 8th, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 744-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
July 8th, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________
______

SUSE Security Announcement

Package: php/pear XML::RPC
Announcement ID: SUSE-SA:2005:041
Date:

[ more ]  [ reply ]

Dcrab 's Security Advisory
http://www.dbtech.org
Deadbolt Computer Technologies

******************************
SPECIAL BIRTHDAY RELEASE, 18TH BIRTHDAY RELEASE FOR DIABOLIC CRAB, YOU CAN SEND EMAILS TO DCRAB (at) HACKERSCENTER (dot) COM [email concealed]
******************************

Get Dcrab's Services to audit your Web ser

[ more ]  [ reply ]

They emailed me saying the fix would be released in their June Maintenance patch.

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 741-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
July 7th, 2005

[ more ]  [ reply ]

Sysdream && Serial Savate System.

<[( advisory )]>---------------------------------------<[( xxxxxxxxxxx6.adv.en

Program : PHPSLASH
Homepage : http://www.php-slash.org
Author Contacted : 05/may/2005
Author's Answer : 06/may/2005 joestewart
Version test

[ more ]  [ reply ]

On Wed, 6 Jul 2005, Theo de Raadt wrote:

>
> Repeat a few times -- and everyone will now consider that peer to be
> flapping, and you have successfully taken an ISP off the net.
>
>
> Please read the article. My take on this is that there are people
> who don't want to fix this.
>

This isn't new

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

NULL sessions vulnerabilities using alternate named pipes

Hervé Schauer Consultants Security Advisory
http://www.hsc.fr/

- -[ Summary ]-

Advisory: NULL sessions vulnerabilities using alternate named pipes
CVE identi

[ more ]  [ reply ]

PNGƒJƒEƒ“ƒ^+—pƒƒO‰ðÍ&#
402;XƒNƒŠƒvƒg remote commands execution vulnerability

Vendor URL : http://www.aurora.dti.ne.jp/~zom/Counter/
Vulnerability : Remote Command Execution
Risk : High

=======================

[ more ]  [ reply ]

__ .__
______ |__|_____ | | ___.__.
\____ \ | \____ \| |< | |
| |_> > | | |_> > |_\___ |
| __/\__| | __/|____/ ____|
|__| \______|__| \/ Where is the security? ...

Security Advisory 2005-0x00

Authors......... pjphem && LazyCrs
Date............

[ more ]  [ reply ]

Hi,

I stumbled on another bug during my review for console servers:

Summary:
Lantronix SecureLinx console server: Retrieval of ssh-private keys and system logfiles

Confirmed on SLC32, Software version: 2.0, 3.0
very likely on all models of SLC series (SLC8, 16, 32, 48)
www.lantronix.com

Detail

[ more ]  [ reply ]

I usually open it in OpenOffice and remove the protection there (use openoffice2.0) then save it as a word file again

-----Original Message-----
From: Dave.Collins (at) tetratech (dot) com [email concealed] [mailto:Dave.Collins (at) tetratech (dot) com [email concealed]]
Sent: Wednesday, July 06, 2005 1:11 PM
To: bugtraq (at) securityfocus (dot) com [email concealed]
Subject: Re: Mic

[ more ]  [ reply ]

Quick HOWTO:

1. Open the protected document in Word
2. File / Save As (XML Document)
3. Open XML Document, look for <w:documentProtection w:edit="read-only"
w:enforcement="on" w:unprotectPassword="xxxxxxx"/> The
"unprotectPassword" will be a hex byte string.
4. Open the .doc in your favorite h

[ more ]  [ reply ]

Hey all,
Whilst analyzing Oracle's Critical Patch Update for April 2005 I noticed
some failures in it, that meant certain issues the patch was supposed to fix
were actually left unfixed.

One set of vulnerabilities "fixed" by the April CPU is a group of SQL
injection bugs in DBMS_SUBSCRIBE and DB

[ more ]  [ reply ]

Much more information on the ICMP vulnerabilities that allow you to blindly
tear down TCP sessions.

http://kerneltrap.org/node/5382

Please note these are not man-in-the-middle attacks. You can do them
blind. Totally blind. You do not need to know any information.

There are three attacks ou

[ more ]  [ reply ]

Whatpulse.org is a site that provides software to allower users to keep track of how many keystrokes they have entered and 'pulse' them to the website and view who has the most keys to date, etc. Whatpulse has a profile feature that lets a user describe a little bit about themself to otherusers. T

[ more ]  [ reply ]

There are many programs to get the password from a word document, The one I use often is Advanced Office Password Recovery, it's demo is often enough.

dan.

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: zlib
Advisory ID:

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-147-2 July 06, 2005
php4, php4-universe fixed packages
https://bugzilla.ubuntu.com/show_bug.cgi?id=12426
===========================================================

A security issue affects the following Ub

[ more ]  [ reply ]

hello

the attached text file contains the full advisory

be well

tobozo

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200507-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-148-1 July 06, 2005
zlib vulnerability
CAN-2005-2096
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5

[ more ]  [ reply ]