SecurityFocus

@stake advisory: Lexar JumpDrive Secure Password Extraction 2004-09-13
Chris Wysopal (weld atstake com)

[ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities 2004-09-13
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) 2004-09-13
Gerald (Jerry) Carter (jerry samba org)

Directory Traversal Vulnerability in TwinFTP Server allows overwriting 2004-09-13
Jérôme ATHIAS (jerome athias caramail com)

Re: cdrecord local root exploit 2004-09-12
Sean Davis (dive endersgame net)

Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service 2004-09-12
David S. Miller (davem davemloft net)

[ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin 2004-09-12
Dan Margolis (krispykringle gentoo org)

Posible Inclusion File in Perl Desk 2004-09-12
Nikyt0x Argentina (nikyt0x hotmail com)

[CLA-2004:865] Conectiva Security Announcement - zlib 2004-09-13
Conectiva Updates (secure conectiva com br)

Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL 2004-09-13
3APA3A (3APA3A SECURITY NNOV RU)

RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service 2004-09-12
Wolfpaw - Dale Corse (admin wolfpaw net)

[OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) 2004-09-13
OpenPKG (openpkg openpkg org)

Re: New Data Wipe Tools 2004-09-12
Derek Martin (code pizzashack org)

Gadu-Gadu (all versions with image-send feature) Heap Overflow 2004-09-12
Sec-Labs Team (noreply sec-labs hack pl)

[CLA-2004:864] Conectiva Security Announcement - kde 2004-09-13
Conectiva Updates (secure conectiva com br)

Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service 2004-09-11
Wolfpaw - Dale Corse (admin-lists wolfpaw net)

Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service 2004-09-12
David S. Miller (davem davemloft net)

problem in voip environment 2004-09-11
Pasquiet Loic (M.) (Loic Pasquiet Polytechnique fr)

CAU-EX-2004-0002: cdrecord-suidshell.sh 2004-09-10
I)ruid (druid caughq org)

Remote buffer overflow in Apache mod_ssl when reverse proxying SSL 2004-09-11
Jérôme ATHIAS (jerome athias caramail com)

Re: New Data Wipe Tools 2004-09-11
Brendan Murray (brendan wolfhoundsecurity com)

Re: New Data Wipe Tools 2004-09-10
Jake Appelbaum (jacob appelbaum net)

Re: New Data Wipe Tools 2004-09-10
Thomas C. Greene (thomas greene theregister co uk)

Serv-U up to 5.2 Denial of Service 2004-09-11
Patrick (patrickthomassen gmail com)

[CLA-2004:863] Conectiva Security Announcement - wv 2004-09-10
Conectiva Updates (secure conectiva com br)

cdrecord local root exploit 2004-09-10
newbug Tseng (newbug chroot org)

Multiple vulnerabilities in Icewarp Web Mail 5.2.7 2004-09-10
ShineShadow (ss_contacts hotmail com)

Axis Network Camera and Video Server Security Advisory 2004-09-07
product-security axis com

ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability 2004-09-10
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

[CLA-2004:860] Conectiva Security Announcement - krb5 2004-09-09
Conectiva Updates (secure conectiva com br)

Bug XSS in PsNews 1.1 2004-09-05
Michal Blaszczak (wacky nicponie org)

New Data Wipe Tools 2004-09-09
Thomas C. Greene (thomas greene theregister co uk)

BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included] 2004-09-10
Jérôme ATHIAS (jerome athias caramail com)

OpenOffice World-Readable Temporary Files Disclose Files to Local Users 2004-09-10
Jérôme ATHIAS (jerome athias caramail com)

F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE] 2004-09-10
Jérôme ATHIAS (jerome athias caramail com)

SQL-Injection in Subjects 2.0 for Postnuke 2004-09-10
Criolabs (security criolabs net)

Off-by-one bug in Halo 1.04 2004-09-09
Luigi Auriemma (aluigi autistici org)

Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities 2004-09-09
http-equiv@excite.com (1 malware com)

Multiple vulnerabilities 1n BBS E-Market Professional 2004-09-09
Ahmad Muammar (y3dips echo or id)

[ GLSA 200409-14 ] Samba: Remote printing vulnerability 2004-09-09
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

[ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows 2004-09-08
Thierry Carrez (koon gentoo org)

[ GLSA 200409-13 ] LHa: Multiple vulnerabilities 2004-09-08
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability 2004-09-08
Mandrake Linux Security Team (security linux-mandrake com)

MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability 2004-09-08
Mandrake Linux Security Team (security linux-mandrake com)

[XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug 2004-09-08
bima tampan (iko94 yahoo com)

Re: [XSS] PHP-Nuke 7.4 Bugs 2004-09-08
Peter Lowe (pgl yoyo org)

Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities] 2004-09-08
Jérôme ATHIAS (jerome athias caramail com)

Insecure Temporary File Creation Vulnerability in Net-Acct 2004-09-08
Jérôme ATHIAS (jerome athias caramail com)

Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit 2004-09-08
Jérôme ATHIAS (jerome athias caramail com)

MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability 2004-09-08
Mandrake Linux Security Team (security linux-mandrake com)

[ GLSA 200409-11 ] star: Suid root vulnerability 2004-09-07
Kurt Lieber (klieber gentoo org)

Re: [XSS] PHP-Nuke 7.4 Bugs 2004-09-05
Blaine Elzey (lz lzmarine net)

Re: cdrdao local root exploit 2004-09-07
3APA3A (3APA3A SECURITY NNOV RU)

[SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability 2004-09-07
snsadv lac co jp (snsadv)

mpg123 buffer overflow vulnerability 2004-09-07
Davide Del Vecchio (dante alighieri org)

Site News Authentication Error May Let Local Users Add Messages 2004-09-05
Jérôme ATHIAS (jerome athias caramail com)

Bug XSS in PsNews 1.1 2004-09-05
Michal Blaszczak (wacky nicponie org)

PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch 2004-09-05
Pierquinto Manco (mantra ntj it)

[XSS] PHP-Nuke 7.4 AddMsg Bug 2004-09-05
Pierquinto Manco (mantra ntj it)

Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4 2004-09-06
Pierquinto Manco (pierquinto gmail com)

[XSS] PHP-Nuke 7.4 Newsletter Injection Bug 2004-09-05
Pierquinto Manco (mantra ntj it)

[ GLSA 200409-10 ] multi-gnome-terminal: Information leak 2004-09-06
Thierry Carrez (koon gentoo org)

Apple, Apple Remote Desktop client 2004-09-05
Adam Shostack (adam homeport org)

cdrdao local root exploit 2004-09-05
Jérôme ATHIAS (jerome athias caramail com)

[RLSA_01-2004] QNX PPPoEd local root vulnerabilities 2004-09-05
Julio Cesar Fort (julio rfdslabs com br)

Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) 2004-09-05
Jedi/Sector One (j pureftpd org)

serverview 3.0 - insecure file permissions 2004-09-06
Rene (l0om excluded org)

Broadcast shutdown in Call of Duty 1.4 2004-09-05
Luigi Auriemma (aluigi autistici org)

SUSE Security Announcement: apache2 (SUSE-SA:2004:030) 2004-09-06
krahmer suse de (Sebastian Krahmer)

[ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities 2004-09-06
Thierry Carrez (koon gentoo org)

OpenCA Security Advisory: Cross Site Scripting vulnerability 2004-09-06
Martin Bartosch (martin bartosch gmx de)

Cross-Site Scripting Vulnerability in Newtelligence DasBlog 2004-09-01
Dominick Baier (seclists leastprivilege com)

Patch available for multiple critical flaws in Oracle 2004-08-31
NGSSoftware Insight Security Research (nisr nextgenss com)

FUll Path Disclosure in YABBSE 2004-09-04
Ahmad Muammar (y3dips echo or id)

[ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely 2004-09-03
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

[XSS] PHP-Nuke 7.4 DelAdmin Bug 2004-09-04
Pierquinto Manco (mantra ntj it)

[XSS] PHP-Nuke 7.4 ViewAdmin Bug 2004-09-04
Pierquinto Manco (mantra ntj it)

Engenio/LSI Logic controllers denial of service/data corruption 2004-09-04
Jedi/Sector One (j pureftpd org)

FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities 2004-09-04
Thor Larholm (thor pivx com)

MailWorks Professional - Authentication Bypass 2004-09-02
headpimp pimp-industries com

[ GLSA 200409-07 ] xv: Buffer overflows in image handling 2004-09-03
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

Re: Linux OpenExchange - cleartext rootpw in swap 2004-09-03
Joshua Goodall (joshua myinternet com au)

Dynalink routers backdoor? 2004-09-03
fabio (ctrlaltca libero it)

[XSS] PHP-Nuke 7.4 Remote Privilege Escalation 2004-09-03
Pierquinto Manco (mantra ntj it)

UPDATE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities 2004-09-03
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

Open Source Vulnerability Database Opens Vendor Dictionary 2004-09-02
Jake (jkouns opensecurityfoundation org)

Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration 2004-09-02
Jérôme ATHIAS (jerome athias caramail com)

Patch available for IBM DB2 Universal Database flaws 2004-09-01
NGSSoftware Insight Security Research (nisr nextgenss com)

MailWorks Professional - Authentication bypass 2004-09-02
headpimp pimp-industries com

[ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication 2004-09-02
Thierry Carrez (koon gentoo org)

SUSE Security Announcement: zlib (SUSE-SA:2004:029) 2004-09-02
Thomas Biege (thomas suse de)

[ GLSA 200409-05 ] Gallery: Arbitrary command execution 2004-09-02
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code 2004-09-02
Jérôme ATHIAS (jerome athias caramail com)

[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server 2004-09-02
SHATTER (Application Security, Inc.) (vrathod appsecinc com)

[ GLSA 200409-06 ] eGroupWare: Multiple XSS vulnerabilities 2004-09-02
Sune Kloppenborg Jeppesen (jaervosz gentoo org)

[ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo() 2004-09-02
Thierry Carrez (koon gentoo org)

TSL-2004-0045 - kerberos5 2004-09-02
Trustix Security Advisor (tsl trustix org)

[hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews 2004-09-02
Exoduks (exoduks gmail com)

Password Protect XSS and SQL-Injection vulnerabilities. 2004-08-30
Criolabs (security criolabs net)

Re: Linux OpenExchange - cleartext rootpw in swap 2004-09-02
Valdis Kletnieks vt edu