Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/bugtraq/bugtraq/ en-us (c) Gossamer Threads Inc. All rights reserved. 25 Nov 2009 05:36:24 -0800 120 75 23 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg rPath Security Advisory: 2008-0018-1 Published: 2008-01-17 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Determi 17 Jan 2008 07:32:21 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26774 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 17 Jan 2008 06:38:45 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26771 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00727143 Version: 7 HPSBMA02133 SSRT061201 re 17 Jan 2008 05:30:57 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26770 #################################################################### # # # 17 Jan 2008 00:54:46 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26777 Hello,, PHPEchoCMS Multible remote vulnerabilitis Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address 16 Jan 2008 21:07:58 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26773 Autore: Smasher Sito: http://warwolfz.altervista.org Tipo: Remote File Inclusion Rischio: Alto A remote attacker can gain access to your website thro 16 Jan 2008 16:06:03 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26772 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 16 Jan 2008 15:30:09 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26775 =========================================================== Ubuntu Security Notice USN-570-1 January 16, 2008 boost vulnerabilities CVE-200 16 Jan 2008 14:45:38 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26768 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 16 Jan 2008 14:29:34 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26769 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 16 Jan 2008 14:16:50 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26767 [+] Info: [~] Software: Gradman <= 0.1.3 [~] HomePage: http://gradman.xe1ido.com.mx/ [~] Exploit: Local File Inclusion [High] [~] Where: agregar_info 16 Jan 2008 13:11:31 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26766 For those of you logging ISA (or whatever) to SQL, you'll have no doubt noted that the source and destination IP's are logged as long integers, and no 16 Jan 2008 12:20:15 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26764 [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10 =============================================================================== Author: 16 Jan 2008 12:19:44 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26762 [waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: J 16 Jan 2008 12:18:40 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26765 TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 January 16, 2008 -- CVE ID: 16 Jan 2008 12:12:32 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26763 I've updated the HoG site to include Country-by-country sets for ISA 2004 for those still using that version of the product. http://hammerofgod.com/d 16 Jan 2008 12:00:25 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26761 ####################################################################### Luigi Auriemma Applications: BitTorrent and uTo 16 Jan 2008 10:47:28 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26760 Author: BLaSTER a.K.a Gokhan Title: mcGuestbook v1.2 Remote File Inc. Download: http://www.hotscripts.com/jump.php?listing_id=13439&jump_type=1 Contac 16 Jan 2008 10:44:01 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26759 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager CTL Provider Heap Overflow Document ID: 16 Jan 2008 08:15:00 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26758 [+] Info: [~] Software: RichStrong CMS [~] HomePage: http://www.hzrich.cn [~] Exploit: Remote Sql Injection [High] [~] Where: showproduct.asp?cat= [~ 16 Jan 2008 03:36:08 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26748 Digital Security Research Group [DSecRG] Advisory #DSECRG-08-003 Application: Blogcms Versions Affected: Blogc 16 Jan 2008 03:02:40 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26747 Digital Security Research Group [DSecRG] Advisory #DSECRG-08-002 Application: aria-0.99-6 (Web based ERP) Versions Affected 16 Jan 2008 02:37:35 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26753 Aria-Security Team http://Aria-Security.Net ----------------------------------- Vendor: http://cPanel.com cPanel Hosting Manager (dohtaccess.html) Cro 15 Jan 2008 20:09:29 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26750 Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Dev 15 Jan 2008 19:42:43 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26756 8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/ 15 Jan 2008 18:55:20 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26755 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 15 Jan 2008 15:47:39 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26746 iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND Quicktime is Apple's media pla 15 Jan 2008 15:15:44 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26757 TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/TPTI-08-01.html January 15 Jan 2008 15:02:03 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26754 rPath Security Advisory: 2008-0017-1 Published: 2008-01-15 Products: rPath Appliance Platform Linux Service 1 rPath Linux 1 Rating: Minor Exp 15 Jan 2008 14:54:33 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26752 rPath Security Advisory: 2008-0016-1 Published: 2008-01-15 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Determ 15 Jan 2008 14:53:57 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26751 rPath Security Advisory: 2008-0015-1 Published: 2008-01-15 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User 15 Jan 2008 14:52:53 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26749 iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a messag 15 Jan 2008 11:18:52 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26743 iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a messag 15 Jan 2008 11:12:38 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26742 iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a messag 15 Jan 2008 11:04:42 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26741 iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a messag 15 Jan 2008 11:01:23 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26740 Pipe the output of a command to FOR in (), and you crash the Windows Vista Windows Command Processor (CMD.exe) with a DEP violation. I expect it works 15 Jan 2008 07:41:06 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26732 # MicroNews Authentication Bypass # Homepage: http://phptoys.com/ # Download: http://www.phptoys.com/download.php?view.31 # Found by Xcross87 | xcross 15 Jan 2008 07:33:33 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26731 # Max's File Uploader File Upload Vulnerability # Homepage: http://www.phpf1.com/ # Download: http://www.phpf1.com/download.html?item=9 # Dork: intitl 15 Jan 2008 07:12:26 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26730 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01325239 Version: 1 HPSBST02304 SSRT080003 re 15 Jan 2008 06:10:00 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26712 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01323725 Version: 1 HPSBUX02303 SSRT071468 re 15 Jan 2008 06:09:13 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26711 ########################################################################## # ArticleDashBoard all version SQL Injection Vulnerability # 15 Jan 2008 05:36:22 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26729 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)] Author: sp3x Date: - - 15 Jan 2008 00:33:08 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26727 The attached exploit demonstrates that the WordPress SpamBam plugin can be bypassed due to relying on the client for security. Vulnerable software: S 14 Jan 2008 22:01:53 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26721 Hi all, Some days ago I wrote an advisory which demonstrates how the Peter's Math Antispam Spinoff plugin for wordpress (http://www.theblog.ca/math-a 14 Jan 2008 22:01:03 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26719 =========================================================== Ubuntu Security Notice USN-569-1 January 14, 2008 libxml2 vulnerability CVE-200 14 Jan 2008 16:13:03 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26717 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:02.libc 14 Jan 2008 15:09:43 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26716 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:01.pty 14 Jan 2008 15:09:39 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26715 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 14 Jan 2008 15:04:52 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26714 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 14 Jan 2008 14:56:08 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26713 Recently, David Litchfield asked me to help him out a bit with a research project he was working on by having me set up a network capture in my DMZ to 14 Jan 2008 14:20:50 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26720 =========================================================== Ubuntu Security Notice USN-568-1 January 14, 2008 postgresql vulnerabilities CV 14 Jan 2008 13:31:06 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26709 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 14 Jan 2008 10:51:52 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26706 ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-001.htm 14 Jan 2008 10:51:37 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26705 [+] Info: [~] Software: Binn SBuilder [~] HomePage: http://www.cms.ge/ [~] Exploit: Blind Sql Injection [High] [~] Where: full_text.php?nid= [~] Bug 14 Jan 2008 08:59:40 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26701 Marcello Barnaba (void) <vjt@openssl.it> wrote: > By the way, even with "Transport setup" -> "Automatic", the software > doesn't crash nor loops after 14 Jan 2008 06:56:17 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26686 F5 BIG-IP Web Management List Search XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a c 14 Jan 2008 06:36:46 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26678 SQL injection digger is a command line program that looks for SQL injections and common errors in websites. This version now can perform the following 14 Jan 2008 06:17:36 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26685 Dear crazy frog crazy frog, Clear your computer from trojan, change FTP password for you site hosting access, because it's stolen, access 14 Jan 2008 01:34:48 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26682 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 13 Jan 2008 09:14:11 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26675 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 13 Jan 2008 08:57:16 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26710 Hi, Recently on opening one of my site,my antivirus pops up saying that it has found on malicious script.the url is random and i have managed to get 13 Jan 2008 08:01:34 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26676 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 13 Jan 2008 07:45:01 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26681 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 13 Jan 2008 07:07:24 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26693 http://www.gnucitizen.org/blog/hacking-the-interwebs When the victim visits a malicious SWF file, a 4 step ATTACK will silently execute in the backgr 13 Jan 2008 00:27:05 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26704 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 12 Jan 2008 14:06:23 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26679 [+] Discovered by Smasher [+] WarWolfz Crew. [+] http://warwolfz.altervista.org/ Hey wassup....i've found a vulnerability in Garmentcenter in index. 12 Jan 2008 08:44:24 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26674 ############################################################## - S21Sec Advisory - ############################################ 12 Jan 2008 07:30:14 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26671 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 11 Jan 2008 17:19:37 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26670 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 11 Jan 2008 17:05:25 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26669 Source URL of this announcement: http://int21.de/cve/CVE-2008-0123-moodle.html References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0123 11 Jan 2008 15:51:55 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26668 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 11 Jan 2008 15:00:29 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26672 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 11 Jan 2008 13:56:07 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26673 FYI - this works for 2007, not 2003. We're seeing about writing one for 2003, but it may be a few weeks. Thanks! t > -----Original Message----- > F 11 Jan 2008 11:07:38 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26688 Naymz is a online profile system with positive and accurate information that you want others to find when they search for you online. Community Sear 11 Jan 2008 09:11:32 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26665 ---------------------------------------------------------------------- Member Area System (MAS) Remote File Include Vulnerability (view_func.php) -- 11 Jan 2008 03:12:20 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26663 [. Our anticipate apologies if you receive this call for paper more than once! ] CALL FOR PAPERS - EUROSEC WORKSHOP EuroSec (http://www.cs.vu.nl/eu 11 Jan 2008 01:12:14 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26662 As long as Outlook has been around, people have been trying to get two instances running at the same time. Not multiple profiles that you can load whe 10 Jan 2008 22:28:34 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26656 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 10 Jan 2008 21:44:54 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26657 I've also posted this to my blog: http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html About one year ago, Sam Hocevar pos 10 Jan 2008 21:06:33 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26655 ImageAlbum Remote SQL Injection Vulnerabilities ------------------------------------------------------------------------- Product: ImageAlbum Version 10 Jan 2008 19:09:20 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26664 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability] Author: sp3x Date 10 Jan 2008 15:30:59 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26658 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability ] Author: sp3x Date: - - Wr 10 Jan 2008 15:29:25 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26660 =========================================================== Ubuntu Security Notice USN-567-1 January 10, 2008 dovecot vulnerability CVE-200 10 Jan 2008 14:01:59 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26653 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 10 Jan 2008 12:47:39 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26650 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 10 Jan 2008 12:06:32 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26651 ####################################################################### Luigi Auriemma Application: Quicktime Player 10 Jan 2008 10:45:17 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26648 ######################################################################## # 10 Jan 2008 10:18:23 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26649 Intro: Word 2007 is the latest installment of Microsoft's word processing program Bug: Word 2007 with the "save as pdf" add-on is vulnerable to a pat 10 Jan 2008 08:07:12 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26647 http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub-5 It's known that UPnP [1] is inherently insecure for a very simple reason: adminis 10 Jan 2008 04:20:37 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26646 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager 10 Jan 2008 04:00:12 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26642 .--. : .--' .-..-.: : .--. ,-.,-. : :; :: :__ ' .; :: ,. : `.__.'`.__.'`.__.':_;:_; CALL FOR PARTICIPATION uCon 2008, 1st 10 Jan 2008 03:02:21 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26640 Digital Armaments January-February Hacking Challenge: Special 20.000$ Prize - Windows Vulnerabilities and Exploit Challenge pubblication is 01.04.200 10 Jan 2008 02:36:44 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26644 [HSC] Simple Machines Forum XSS Vulnerabilities Simple Machines Forum allows attackers to exploiting this vulnerability by cross-site scripting and 09 Jan 2008 18:12:49 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26641 =========================================================== Ubuntu Security Notice USN-566-1 January 09, 2008 openssh vulnerability CVE-200 09 Jan 2008 18:00:28 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26643 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200801-06:02 - - - 09 Jan 2008 15:26:26 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26645 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Adv 09 Jan 2008 14:56:13 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26638 =========================================================== Ubuntu Security Notice USN-565-1 January 09, 2008 squid vulnerability CVE-2007- 09 Jan 2008 14:22:24 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26636 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisor 09 Jan 2008 14:17:52 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26635 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 09 Jan 2008 14:15:23 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26639 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 09 Jan 2008 14:02:37 -0800 http://www.gossamer-threads.com/lists/bugtraq/bugtraq/26634