~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Macromedia Products Not Affected by Microsoft JPEG/GDIPlus
Vulnerability

Originally posted: September 20, 2004

http://www.macromedia.com/go/security_mpsb04-07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Summar

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : qt3
SUMMARY : Fixes for image loader vulnerab

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200409-29
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

Dear ladies and gentlemen,

I am a proud user of the Pinnacle ShowCenter 1.51. When I was playing

around with the system, it seems I have found a denial of service attack

against the web interface.

First I did manually a HTTP GET request that selects a non-existent

skin: http://192.168.

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : spamassassin
SUMMARY : Fix for denial of serv

[ more ]  [ reply ]

Rigel Kent Security & Advisory Services Inc
http://www.rigelksecurity.com

Advisory # RK-001-04

Mike Sues
September 22, 2004

"Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Securit

[ more ]  [ reply ]

If we don't have any data, then we are making decisions based on
propaganda, no matter what side you listen to.

Of course California suing then does raise questions :) Any state that
implements voting technology that has not been verified by independent
means needs rethink their approach. Any sta

[ more ]  [ reply ]

Sophos Small Business Suite Reserved Device Name Handling Vulnerability

iDEFENSE Security Advisory 09.22.04
www.idefense.com/application/poi/display?id=143&type=vulnerabilities
September 22, 2004

I. BACKGROUND

Sophos Small Business Suite includes the Sophos PureMessage Small
Business Edition, com

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 552-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
September 22nd, 2004

[ more ]  [ reply ]

Dear ladies and gentlemen,

I am a proud user of the Pinnacle ShowCenter 1.51. When I was playing
around with the system, it seems I have found a denial of service attack
against the web interface.

First I did manually a HTTP GET request that selects a non-existent
skin: http://192.168.0.11:8000

[ more ]  [ reply ]

Hi List,

I'd like to point out that NGS have just released a new whitepaper. The
whitepaper "The Phishing Guide" can be downloaded from:
http://www.ngssoftware.com/papers/NISR-WP-Phishing.pdf

Abstract

Phishing is the new 21st century crime. The global media runs stories on an
almost daily basi

[ more ]  [ reply ]

Can we get some source code to verify/disprove this? I notice there was
no technical documentation/information from either side.

Anyone else for coding Election Management Systems software under the
Open Software License? :)

Jp

-----Original Message-----
From: pressinfo (at) diebold (dot) com [email concealed] [mailto:press

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200409-27
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[ more ]  [ reply ]

Good morning,
I'm proud to announce that a new White Paper has been released.
English version can be downloaded on : http://www.wisec.it/docs.php

Title:
"...and More Advanced Sql Injection
SiXSS, SiHRS and the Client Side SQL Injection"

Abstract:
How much a Sql Injection is a hard vulnerability?
I

[ more ]  [ reply ]

jabberd up to and including version 1.4.3 and jadc2s up to and including
version 0.9.0 are vulnerable against a DoS attack reported by Jose
Antonio Calvo yesterday on the jabberd mailing list.
(http://jabberstudio.org/pipermail/jabberd/2004-September/002004.html)

An attacker can crash a running jab

[ more ]  [ reply ]

In-Reply-To: <20040831203815.13871.qmail (at) www.securityfocus (dot) com [email concealed]>

Diebold strongly refutes the existence of any "back doors" or "hidden codes" in its GEMS software. These inaccurate allegations appear to stem from those not familiar with the product, misunderstanding the purpose of legitimate struct

[ more ]  [ reply ]

Sun Alert ID: 57643

Synopsis: Netscape NSS Library Vulnerability Affects Sun Java Enterprise System

Category: Security

Product: Sun Java Enterprise System (JES), Network Security Services (NSS)

BugIDs: 5069683

Avoidance: Patch

State: Resolved

Date Released: 16-Sep-2004

Date Closed:

[ more ]  [ reply ]

#######################################################################

Luigi Auriemma

Application: PopMessenger
http://www.leadmind.com
Versions: <= 1.60 (before 20 Sep 2004)
Platforms: Windows
Bug: crash
Risk: medium
Exploitati

[ more ]  [ reply ]