Bugtraq - Apr-2008 Week 3

Readlist -> Bugtraq -> Apr-2008-week-1 Apr-2008-week-2 Apr-2008-week-3 Apr-2008-week-4

	1 msg	[SECURITY] [DSA 1534-2] New iceape packages fix regression	(24 Apr 2008 )
	1 msg	[SECURITY] [DSA 1556-1] New perl packages fix denial of service	(24 Apr 2008 )
	1 msg	[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities	(24 Apr 2008 )
	1 msg	HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code	(24 Apr 2008 )
	1 msg	A New Class of Vulnerability in Oracle: Lateral SQL Injection	(24 Apr 2008 )
	1 msg	[ GLSA 200804-27 ] SILC: Multiple vulnerabilities	(24 Apr 2008 )
	1 msg	Trillian 3.1 basic nick crash	(24 Apr 2008 )
	1 msg	DDIVRT-2008-11 BadBlue uninst.exe DoS	(24 Apr 2008 )
	1 msg	[ GLSA 200804-28 ] JRockit: Multiple vulnerabilities	(24 Apr 2008 )
	2 msgs	xine-lib NES Sound Format Demuxer Buffer Overflow	(23 Apr 2008 )
	1 msg	[W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation	(23 Apr 2008 )
	4 msgs	PR07-44: XSS on RSA Authentication Agent login page	(23 Apr 2008 )
	2 msgs	PR07-43: Cross-domain redirect on RSA Authentication Agent	(23 Apr 2008 )
	1 msg	[ GLSA 200804-26 ] Openfire: Denial of Service	(23 Apr 2008 )
	1 msg	[ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code	(23 Apr 2008 )
	1 msg	[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution	(23 Apr 2008 )
	1 msg	Zune software - arbitrary file overwrite	(23 Apr 2008 )
	3 msgs	NetClassifieds Sql Injection	(23 Apr 2008 )
	3 msgs	LayerOne 2008 - Final Pre-Con Update	(23 Apr 2008 )
	2 msgs	Horde Webmail XSS [Aria-Security]	(23 Apr 2008 )
	1 msg	AST-2008-006 - 3-way handshake in IAX2 incomplete	(23 Apr 2008 )
	5 msgs	Default key algorithm in Thomson and BT Home Hub routers	(22 Apr 2008 )
	1 msg	[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability	(22 Apr 2008 )
	4 msgs	Firefox 3.0 beta 5 crash	(22 Apr 2008 )
	1 msg	Safari 3.1.1 Multiple Vulnerabilities for windows	(22 Apr 2008 )
	4 msgs	Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)	(22 Apr 2008 )
	4 msgs	[USN-602-1] Firefox vulnerabilities	(22 Apr 2008 )
	2 msgs	[USN-604-1] Gnumeric vulnerability	(22 Apr 2008 )
	1 msg	Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))	(22 Apr 2008 )
	1 msg	Sea-Surfing on the Motorola Surfboard	(21 Apr 2008 )
	1 msg	[ GLSA 200804-24 ] DBmail: Data disclosure	(21 Apr 2008 )
	1 msg	Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it	(21 Apr 2008 )
	1 msg	[ GLSA 200804-23 ] CUPS: Integer overflow vulnerability	(21 Apr 2008 )
	1 msg	ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper	(21 Apr 2008 )
	2 msgs	Powered by gCards v1.46 SQL	(21 Apr 2008 )
	1 msg	IRM Security Advisory : RedDot CMS SQL injection vulnerability	(21 Apr 2008 )
	1 msg	[SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery	(21 Apr 2008 )
	1 msg	Acidcat CMS Multiple Vulnerabilities	(21 Apr 2008 )
	1 msg	[ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities	(21 Apr 2008 )
	1 msg	Deciphering the PHP-Nuke Capthca	(21 Apr 2008 )
	1 msg	SyScan'08 Singapore - Call for Paper	(21 Apr 2008 )
	1 msg	Deciphering the Simple Machines Forum audio Captcha	(21 Apr 2008 )
	1 msg	Token Kidnapping (Microsoft Security Advisory 951306) presentation available	(19 Apr 2008 )
	1 msg	[SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution	(19 Apr 2008 )
	1 msg	[SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities	(19 Apr 2008 )
	1 msg	ANNOUNCE: RFIDIOt-0.1s release (now available for Windows)	(18 Apr 2008 )
	1 msg	Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures	(18 Apr 2008 )
	1 msg	[ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning	(18 Apr 2008 )
	1 msg	Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure	(18 Apr 2008 )
	1 msg	Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures	(18 Apr 2008 )
	1 msg	Wikepage Wiki v.2007-2 Cross-Site Scripting	(18 Apr 2008 )
	1 msg	[ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities	(18 Apr 2008 )
	1 msg	LightNEasy v.1.2.2 flat Multiple Vulnerabilities	(18 Apr 2008 )
	1 msg	5th avenue Shopping Cart SQL Injection	(18 Apr 2008 )
	1 msg	[ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities	(18 Apr 2008 )
	1 msg	BitTorrent Clients and CSRF	(18 Apr 2008 )
	1 msg	[ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability	(18 Apr 2008 )
	1 msg	[ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities	(18 Apr 2008 )
	1 msg	[ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service	(18 Apr 2008 )
	1 msg	iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability	(18 Apr 2008 )
	1 msg	iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities	(18 Apr 2008 )
	1 msg	iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability	(18 Apr 2008 )
	1 msg	iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability	(18 Apr 2008 )
	1 msg	[SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation	(17 Apr 2008 )
	1 msg	[SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities	(17 Apr 2008 )
	1 msg	[USN-603-2] KOffice vulnerability	(17 Apr 2008 )
	1 msg	[USN-603-1] poppler vulnerability	(17 Apr 2008 )
	1 msg	[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution	(17 Apr 2008 )
	1 msg	Announcement - DeepSec Conference 2008, Nov 11-14 2008	(17 Apr 2008 )
	1 msg	Microsoft Works 7 WkImgSrv.dll crash POC	(17 Apr 2008 )
	1 msg	[security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code	(17 Apr 2008 )
	1 msg	[security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025	(17 Apr 2008 )
	1 msg	[security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update	(17 Apr 2008 )
	1 msg	[ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code	(17 Apr 2008 )
	1 msg	[ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code	(17 Apr 2008 )
	1 msg	[ GLSA 200804-16 ] rsync: Execution of arbitrary code	(17 Apr 2008 )
	1 msg	[SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution	(17 Apr 2008 )
	1 msg	[oCERT-2008-004] multiple speex implementations insufficientboundary checks	(17 Apr 2008 )
	1 msg	[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability	(17 Apr 2008 )
	1 msg	FreeBSD Security Advisory FreeBSD-SA-08:05.openssh	(17 Apr 2008 )