-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : evolution
SUMMARY : Fix for Evolution vulnera

[ more ]  [ reply ]

SQL-injections in koobi-cms 4.2.3
_____________________________________________________________
The program: koobi-cms
Homepage: http://www.dream4.de/
Vulnerable Versions: 4.2.3
Has found: CENSORED [SVT] 28.04.05
_____________________________________________________________

The descripti

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 717-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
April 27th, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 716-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
April 27th, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 715-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
April 27th, 2005

[ more ]  [ reply ]

~ PHOX: myPHP v3 (Final) 'Sender/Poster Exploit' ~

###
# Content
###

- Credits
- 'sploit
- Solution

###
# Credits
###

Exploit discovered by Phox/Terencentanio/Phoxpherus of Root32.

Email: terencentanio.enache (at) btopenworld (dot) com [email concealed] / terencentanio (at) root32 (dot) com [email concealed]

###
# 'sploit
###

There are two expl

[ more ]  [ reply ]

Hackers Center Security Group (http://www.hackerscenter.com/)
Zinho's Security Advisory

Title: Comersus v6 Shopping Cart Sever Script injection
Risk: High

Comersus is one of the most used Shopping Cart software written in asp, available for *nix and windows platforms.

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Black Hat USA 2005 Call for Papers closes May 1st! Do not hesitate to submit your presentation, as time is running out. This is your chance to present in front of the largest Black Hat to date, and share your knowledge with you peers. For more detai

[ more ]  [ reply ]

This issue appears to be a rediscovery of a Bugtraq post by Alexander
Anisimov on November 18, 2004:

[MaxPatrol] SQL-injection in Invision Power Board 2.x
http://www.securityfocus.com/archive/1/381503

1) Both inject the SQL into the "qpid" parameter

2) Both deal with the "post" action ("act=

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______

SUSE Security Announcement

Package: Mozilla. Mozilla Firefox
Announcement-ID: SUSE-SA:2005:028
Date:

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200504-27
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

Hi List,

There were a number of queries about my previous paper "Anti Brute Force
Reource Metering". It appears that way too many people havn't yet gotten to
grips with some of the more standard/basic methods of preventing automated
tools from attacking a web-based application.

So, to help the co

[ more ]  [ reply ]

See attached files.
Cheers,
shadown

--
Sergio Alvarez
Security, Research & Development
IT Security Consultant
email: shadown (at) gmail (dot) com [email concealed]

This message is confidential. It may also contain information that is
privileged or otherwise legally exempt from disclosure. If you have
received it by mistake

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200504-26
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability

iDEFENSE Security Advisory 04.25.05
www.idefense.com/application/poi/display?id=235&type=vulnerabilities
April 25, 2005

I. BACKGROUND

MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's
open source database.

[ more ]  [ reply ]

MySQL MaxDB Webtool Remote Stack Overflow Vulnerability

iDEFENSE Security Advisory 04.25.05
http://www.idefense.com/application/poi/display?id=234&type=vulnerabilit

ies
April 25, 2005

I. BACKGROUND

MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's
open source database. MaxDB

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200504-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

As we have all noticed, there has increase in the number of phishing/scam
attempts via e-mail that appear to be legitimate. Most of
these e-mails look identical to e-mails that would be sent by the
e-commerce or banking institute. They also frequently link to
fraudulent/hacked webservers that also

[ more ]  [ reply ]

Hackers Center Security Group (http://www.hackerscenter.com/)
Zinho's Security Advisory

Desc: Http Splitting leads to email account stealing
Product: SQWebmail
Risk: High

A dangerous http splitting attack can be taken against mailboxes that use Sqwebmail as web mail interfa

[ more ]  [ reply ]

********************************************************
SQL-injections in Invision Power Board v2.0.1
********************************************************
--------------------------
Program: IPB 2.0.1
Homepage: http://www.invisionboard.com
Vulnerable Versions: IPB 2.0.1
Has found: CEN

[ more ]  [ reply ]

hi,

i stumbled upon a weird behaviour in IE, it
-indirectly- allows you to detect a mouse-click inside
another site - by placing an iframe between the
anchor-tags..

[snip]

<a href="javascript:alert('ALERT : You clicked inside
iframe!')">
<iframe
src="http://gmail.google.com/gmail/help/privacy.ht

[ more ]  [ reply ]

------------------------------------------------------------------------
---
Peachtree Linux Security Notice PLSN-0005
April 22, 2005

Buffer overflow, memory leaks, and NULL pointer dereference in CVS
CAN-2005-0753, http://www.cvshome.org/
------------------------------------------------------------

[ more ]  [ reply ]

------------------------------------------------------------------------
---
Peachtree Linux Security Notice PLSN-0006
April 22, 2005

Remote DoS vulnerability in libexif
CAN-2005-0664
------------------------------------------------------------------------
---

The following Peachtree Linux releases

[ more ]  [ reply ]

------------------------------------------------------------------------
---
Peachtree Linux Security Notice PLSN-0007
April 22, 2005

Remote DoS and possible code execution in libcdaudio
CAN-2005-0706
------------------------------------------------------------------------
---

The following Peachtre

[ more ]  [ reply ]

(everything is now patched in CVS-current, including the ISIS bug)

infinite loop DOS bugs in tcpdump:
(ISIS) isis_print() infinite loop DOS.
(BGP) RT_ROUTING_INFO infinite loop DOS.
(LDP) ldp_print() infinite loop DOS.

the ISIS bug is in 3.8.x/3.9.1/CVS. (did not check below 3.8.x)
the BGP an

[ more ]  [ reply ]

(i made a second message for this because it also effects ethereal,
both tcpdump and ethereal are patched in the current cvs/svn versions)

(tcpdump) workaround:
# tcpdump ip proto not rsvp

original DOS exploit reference:
http://fakehalo.us/xtcpdump+ethr-rsvp-dos.c

---------------- exploit: x

[ more ]  [ reply ]

Version: 1.1
Severity: High
Vendor: http://gcms.graymur.net/

Vulnerable code is in "code/error.php":

<----begin---->
...
if (!isset($page)) $page = '';
if (!isset($path_prefix)) $path_prefix = '../';
if (empty($main)) {
require $path_prefix.'code/main.dat';
}
if (isset($e404) or isset($_GET

[ more ]  [ reply ]

==================================================================
File: phpMyVisites 1.3 local file retrieval
From: remote
Date: 26/04/2005
Credits: Max Cerny (max[at]czerny[dot]cz)
Vendor: http://www.phpmyvisites.net
Affected version: 1.3, > not tested
===========================================

[ more ]  [ reply ]

Hi,
this is a simple PERL exploit for E-CART bug

#!/usr/bin/perl
#
# info: zeta (at) mojodo (dot) it [email concealed]
#
#
#
#
#
#z@badroot:~$ perl 7330ecart.pl
#
#
# ~~ www.badroot.org ~~
#
# E-Cart E-Commerce Software index.cgi
# Remote Command Execution Vulnerability
# Affected version: <= E-Cart 2004 v1.1
# http://www.se

[ more ]  [ reply ]

Dcrab 's Security Advisory
[Hsc Security Group] http://www.hackerscenter.com/
[dP Security] http://digitalparadox.org/

Get Dcrab's Services to audit your Web servers, scripts, networks, etc.
Learn more at http://www.digitalparadox.org/services.ah

Severity: High
Title: Multiple SQL Injections in

[ more ]  [ reply ]