> Subject: BrightStor ARCserve Backup buffer overflow PoC
> From: <cybertronic () gmx ! net>
> Date: 2005-02-11 18:19:23
> Message-ID: <20050211181923.27031.qmail () www ! securityfocus ! com>
>
> //cybertronic (at) gmx (dot) net [email concealed]
>
> #include <stdio.h>
> [...snip...]

FYI - we have posted a f

[ more ]  [ reply ]

Some people use programs as part of their email delivery that
automatically discard duplicate messages (e.g. sent to two mailing
lists the receiver is both subscribed to) based on their Message-ID.

Currently, someone on linux-kernel automatically sends an email to
everyone who sent an email to l

[ more ]  [ reply ]

------------------------
NetSec Security Advisory
------------------------

VULNERABILITY DETAILS

Name: Multiple Vulnerabilities Resulting From Use Of Apple OSX
HFS+
Impact: HIGH
Platform: Apple OS X (Darwin) <= 10.2
Method: Possible unauthorized access to file system data
Identifier: 0701

[ more ]  [ reply ]

[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability
Date: 2005 February
Bug Number: 06

paNews
is a news management script to use on your site. Users can use paCode, special code designed to allow the adding of images and font changes in the posts without allowing users to use HTML to po

[ more ]  [ reply ]

From http://www.microsoft.com/technet/security/bulletin/ms05-009.mspx
under the FAQ section:

"Can I use the Microsoft Baseline Security Analyzer (MBSA) to determine
if this update is required?
MBSA will determine if this update is required for Windows Media Player.
MBSA will not determine if this u

[ more ]  [ reply ]

One difference occurs to me immediately.
In the CC scheme, every legitmate participant (issuing, acquiring, cardholder,
merchant et al) have knowingly agreed to a contract under a common structure.

In CA/PKI land, you may be legally and contractually obligated and have
certain rights defined (or r

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HP SECURITY BULLETIN

HPSBMA01116 REVISION: 0

SSRT5893 rev.0 - HP Web-enabled Management Software
Remote Buffer Overflow

NOTICE:
There are no restrictions for distribution of this Security
Bulletin provided that it remains complet

[ more ]  [ reply ]

Hi

I noticed that very recently, the whitepapers section of
www.sanctuminc.com was removed (possibly as part of phasing out
the www.sanctuminc.com website). So here are few links to
mirrored resources (there are many more mirrors; those listed
below seem most stable):

*** long links may be wor

[ more ]  [ reply ]

You may want to consider deleting all of the Authorities, and then
add a specific certificate only when you have called the company and
verified the fingerprint of the digital signature.
--
Bill Brown

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-83-1 February 16, 2005
lesstif1-1 vulnerabilities
CAN-2004-0914
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)

[ more ]  [ reply ]

Now, we've all seen this coming for a while.
http://www.schneier.com/blog/archives/2005/02/sha1_broken.html

Where do we go from here?

Gadi.

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200502-21
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 684-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
February 16th, 2005

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200502-20
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-82-1 February 15, 2005
linux-source-2.6.8.1 vulnerabilities
CAN-2005-0176, CAN-2005-0177, CAN-2005-0178
http://oss.sgi.com/archives/netdev/2005-01/msg01036.html
=================================================

[ more ]  [ reply ]

> My proposition is that the argument that they (and their associated webs
> of trust) are inherently trustworthy because of external pressures is a
> flawed assumption because they do not have the proposed level of
> pressure applied to them since most of the people affected by their web
> of trus

[ more ]  [ reply ]