Bugtraq - Dec-2007 Week 3

Readlist -> Bugtraq -> Dec-2007-week-1 Dec-2007-week-2 Dec-2007-week-3 Dec-2007-week-4

	1 msg	Unicode buffer-overflow in Zoom Player 6.00b2	(24 Dec 2007 )
	1 msg	Double directory traversal in ImgSvr 0.6.21	(24 Dec 2007 )
	1 msg	Buffer-overflow and format string in VideoLAN VLC 0.8.6d	(24 Dec 2007 )
	1 msg	Update: Clients buffer-overflow in Live for Speed 0.5X10	(24 Dec 2007 )
	1 msg	SimpleForum <= 4.6.2 - Cross-Site Scripting Vulnerability	(24 Dec 2007 )
	1 msg	[CVE-2007-5342] Apache Tomcat's default security policy is too open	(24 Dec 2007 )
	3 msgs	PHP <= 5.2.5 Safe Mode Bypass	(24 Dec 2007 )
	1 msg	[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5	(24 Dec 2007 )
	1 msg	Jupiter Cms Multiple Vulnerabilities	(24 Dec 2007 )
	1 msg	pdflib long filename multiple bufferoverflows	(24 Dec 2007 )
	1 msg	Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability	(24 Dec 2007 )
	1 msg	[ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack	(24 Dec 2007 )
	1 msg	Logaholic Web Analytics Software	(24 Dec 2007 )
	2 msgs	[HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities	(22 Dec 2007 )
	2 msgs	Microsoft Office Publisher	(22 Dec 2007 )
	1 msg	My Blog Rfi	(22 Dec 2007 )
	1 msg	America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution	(22 Dec 2007 )
	1 msg	Word 2003 denial of service	(21 Dec 2007 )
	1 msg	HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access	(21 Dec 2007 )
	1 msg	[CAID 35970]: CA Products That Embed Ingres Authentication Vulnerability	(21 Dec 2007 )
	1 msg	Buffer-overflow in WinUAE 1.4.4	(21 Dec 2007 )
	18 msgs	Cryptome: NSA has real-time access to Hushmail servers	(21 Dec 2007 )
	3 msgs	Moodle SQL Injection	(21 Dec 2007 )
	1 msg	CFP CISIS '08	(21 Dec 2007 )
	1 msg	[SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities	(20 Dec 2007 )
	1 msg	Woltlab Burning Board 1.0.2 SQL-Injection Vulnerability	(20 Dec 2007 )
	2 msgs	Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability	(20 Dec 2007 )
	1 msg	PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability	(20 Dec 2007 )
	1 msg	[security bulletin] HPSBUX02284 SSRT071483 rev.4 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access	(20 Dec 2007 )
	1 msg	SiteScape Forum TCL injection	(20 Dec 2007 )
	1 msg	[security bulletin] HPSBUX02295 SSRT071333 rev.1 - HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS)	(20 Dec 2007 )
	1 msg	[security bulletin] HPSBTU02300 SSRT071452 rev.1 - HP Tru64 UNIX running FFM, Local Denial of Service (Dos)	(20 Dec 2007 )
	1 msg	[Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection	(20 Dec 2007 )
	1 msg	Re: Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability	(20 Dec 2007 )
	1 msg	iSupport v1.8 Local file include vulnerability	(20 Dec 2007 )
	1 msg	Black Hat Briefings Call for Papers and Happy Happy Joy Joy	(20 Dec 2007 )
	1 msg	xeCMS 1.x.x Remote File Disclosure Vulnerability.	(19 Dec 2007 )
	1 msg	HP laptops Software Update tool vulnerability	(19 Dec 2007 )
	1 msg	[SECURITY] [DSA 1435-1] New clamav packages fix several vulnerabilities	(19 Dec 2007 )
	1 msg	Array overflow in id3lib (devel CVS)	(19 Dec 2007 )
	1 msg	SYMSA-2007-015	(19 Dec 2007 )
	1 msg	Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module	(19 Dec 2007 )
	1 msg	smbfs and apache+php source code disclosure	(19 Dec 2007 )
	1 msg	[USN-557-1] GD library vulnerability	(19 Dec 2007 )
	1 msg	[ GLSA 200712-14 ] CUPS: Multiple vulnerabilities	(18 Dec 2007 )
	1 msg	[ GLSA 200712-13 ] E2fsprogs: Multiple buffer overflows	(18 Dec 2007 )
	1 msg	AST-2007-027 - Database matching order permits host-based authentication to be ignored	(18 Dec 2007 )
	1 msg	Google Toolbar Dialog Spoofing Vulnerability	(18 Dec 2007 )
	2 msgs	Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm	(18 Dec 2007 )
	1 msg	iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability	(18 Dec 2007 )
	1 msg	rPSA-2007-0269-1 kernel	(18 Dec 2007 )
	1 msg	iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability	(18 Dec 2007 )
	1 msg	[USN-556-1] Samba vulnerability	(18 Dec 2007 )
	1 msg	[security bulletin] HPSBST02299 SSRT071506 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-063 to MS07-069	(18 Dec 2007 )
	1 msg	SyScan'08 Call For Paper/Training	(18 Dec 2007 )
	1 msg	ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability	(18 Dec 2007 )
	1 msg	iMesh <= 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x) remote exploit	(18 Dec 2007 )
	1 msg	ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability	(18 Dec 2007 )
	1 msg	ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability	(18 Dec 2007 )
	2 msgs	Multiple xss in mambo 4.6.2	(18 Dec 2007 )
	1 msg	Rosoft Media Player 4.1.7 crash	(18 Dec 2007 )
	1 msg	rPSA-2007-0268-1 kdebase	(17 Dec 2007 )
	1 msg	Apple OS X Software Update Remote Command Execution	(17 Dec 2007 )
	2 msgs	Uber Uploader <= 5.3.6 Remote File Upload Vulnerability	(17 Dec 2007 )
	1 msg	SurgeMail v.38k4 webmail Host header crash	(17 Dec 2007 )
	1 msg	RaidenHTTPD 2.0.19 ulang cmd exec poc exploit	(17 Dec 2007 )
	1 msg	rPSA-2007-0266-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi	(17 Dec 2007 )
	1 msg	Heap overflow in PeerCast 0.1217	(17 Dec 2007 )
	1 msg	PHP Security Framework: Vuln and Security Bypass	(17 Dec 2007 )
	1 msg	release uhooker v1.3	(17 Dec 2007 )
	1 msg	[SECURITY] [DSA 1434-1] New mydns packages fix denial of service	(17 Dec 2007 )
	1 msg	[SECURITY] [DSA 1433-1] New centericq packages fix execution of code	(17 Dec 2007 )
	1 msg	[SECURITY] [DSA 1432-1] New link-grammar packages fix execution of code	(17 Dec 2007 )
	1 msg	jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow	(17 Dec 2007 )
	1 msg	neuron news1.0 Multiple Remote Vulnerabilities (sql injection/xss)	(17 Dec 2007 )
	2 msgs	ZSA-2007-029: syslog-ng Denial of Service	(17 Dec 2007 )