===========================================================
Ubuntu Security Notice USN-10-1 October 28, 2004
XML library vulnerabilities
CAN-2004-0981
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty W

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200411-01
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

"bitlance winter's" magic dns is still yielding some interesting
possibilities, some aspects were capped but still not enough:

[see: http://www.securityfocus.com/bid/10554 ]

http://www.malware.com/malwaresoft.html

--
http://www.malware.com

[ more ]  [ reply ]

In-Reply-To: <771B638360252E4E8C31ED28FBA45803030855@OLCCEX01>

Greetings,

(I tried posting this to the list last week but it didn't seem to make it so I'm posting it again.)

Let me say up front that I actually like this product. I want to use it with my own clients, but I need to get this pr

[ more ]  [ reply ]

XDICT Buffer OverRun Vulnerability

by Sowhat
DATE:2004.10.26
CN:http://secway.org/Advisory/Ad20041026CN.txt
EN:http://secway.org/Advisory/Ad20041026EN.txt

VENDOR:

KingSOFT Inc.
www.kingsoft.com

AFFECTED:

XDICT 2002
XDICT 2003
XDICT 2004
XDICT 2005

BACKGROUD:

XDICT is a very popular transla

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 579-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
November 1st, 2004

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 578-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
November 1st, 2004

[ more ]  [ reply ]

Hi list,

NGS Software is pleased to make available a new whitepaper about
second-order code injection attacks.

Abstract:
"Many forms of code injection targeted at web-based applications (for
instance cross-site scripting and SQL injection) rely upon the instantaneous
execution of the embedded code

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Security Advisory #2004-0055

Package name: libxml2, postgresql
Summary: multiple security issues
Date: 2004-10-29
Affected ver

[ more ]  [ reply ]

I also want to play

<base href="http://www.microsoft.com">

<a href=><form action="http://www.malware.com"
method="get"><INPUT style="BORDER-RIGHT: 0pt; BORDER-TOP: 0pt;
FONT-SIZE: 10pt; BORDER-LEFT: 0pt;
CURSOR: hand; COLOR: blue; BORDER-BOTTOM: 0pt; BACKGROUND-COLOR:
transparent;TEXT-DECORAT

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-12-1 October 29, 2004
ppp Denial of Service
http://www.securityfocus.com/archive/1/379450
===========================================================

A security issue affects the following Ubuntu relea

[ more ]  [ reply ]

In-Reply-To: <005401c4bd36$6fdf3800$d9ebb9d9@oemcomputer>

Doesn't work on

IE 6.0.2900.2180.xpsp_sp2, XP Pro SP2 French/German

Working well on

IE 6.0.2600.000IC, TSE4.0 SP6 German

Previous versions may be vulnerable

Regards,

Jerome ATHIAS

[ more ]  [ reply ]

> -----Original Message-----
> From: Tim Newsham [mailto:newsham (at) lava (dot) net [email concealed]]

> But lets assume that a good programmer is writing software and
> it comes to his attention that there is a buffer overflow, or
> that user input is not being filtered, or that user input is being
> passed to a printf type

[ more ]  [ reply ]

Hi,

I'm running Windows 98 and see "http://www.microsoft.com/" in status bar.
ONLY if I press tabulator-key twice (to jump to next link) or click on the
link, then I can see correct info ("http://www.google.com/") in status bar.

My DLL versions:

MSHTML.DLL: 6.00.2800.1477
BROWSEUI.DLL: 6.00.2800.

[ more ]  [ reply ]

libgd is NOT used by ImageMagick. My apologies for any confusion:
5am + multiple_advisories == bad_idea. Thanks Rich for pointing that out.

--
-sean

[ more ]  [ reply ]