Bugtraq - Jun-2007 Week 4

Readlist -> Bugtraq -> Jun-2007-week-1 Jun-2007-week-2 Jun-2007-week-3 Jun-2007-week-4

	1 msg	WheatBlog 1.1 RFI/SQL Injection	(30 Jun 2007 )
	1 msg	Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Voice data from victims/users)	(29 Jun 2007 )
	1 msg	[USN-479-1] MadWifi vulnerabilities	(29 Jun 2007 )
	1 msg	SQL Injection In Script VBZooM V1.12	(29 Jun 2007 )
	1 msg	flac123 0.0.9 - Stack overflow in comment parsing	(29 Jun 2007 )
	1 msg	[SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution	(29 Jun 2007 )
	1 msg	TSLSA-2007-0021 - kerberos5	(29 Jun 2007 )
	1 msg	[SECURITY] [DSA 1323-1] New krb5 packages fix several vulnerabilities	(28 Jun 2007 )
	1 msg	[SECURITY] [DSA 1324-1] New hiki packages fix missing input sanitising	(28 Jun 2007 )
	1 msg	FLEA-2007-0030-1: avahi avahi-glib avahi-sharp	(28 Jun 2007 )
	1 msg	[security bulletin] HPSBTU02232 SSRT071429 rev.1 - Secure Web Server for HP Tru64 UNIX Powered by Apache (SWS) or HP Internet Express for Tru64 UNIX running PHP, Remote Arbitrary Code Execution, Unauthorized Disclosure of Information, or Denial of Service (DoS)	(28 Jun 2007 )
	1 msg	Secunia Research: KVIrc irc:// URI Handler Command ExecutionVulnerability	(28 Jun 2007 )
	1 msg	Secunia Research: Symantec Mail Security for SMTP Boundary Errors	(28 Jun 2007 )
	1 msg	[SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow	(28 Jun 2007 )
	1 msg	XEForum Cookie Modification Privilege Escalation Vulnerability	(28 Jun 2007 )
	1 msg	FLEA-2007-0029-1: krb5 krb5-workstation	(28 Jun 2007 )
	1 msg	rPSA-2007-0136-1 httpd mod_ssl	(28 Jun 2007 )
	2 msgs	eTicket version 1.5.5 XSS Attack Vulnerability	(28 Jun 2007 )
	1 msg	eTicket version 1.5.5 Path Disclosure Vulnerability	(28 Jun 2007 )
	1 msg	[SECURITY] [DSA 1322-1] New wireshark packages fix denial of service	(28 Jun 2007 )
	1 msg	[GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital ImagingArbitary Data Write.	(27 Jun 2007 )
	1 msg	rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation	(27 Jun 2007 )
	1 msg	CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability	(27 Jun 2007 )
	1 msg	Juniper SBR V 6.0.1 CRL-Checking problem	(27 Jun 2007 )
	1 msg	Contact request - nVidia	(27 Jun 2007 )
	1 msg	HPSBTU02207 SSRT061239 rev.2 - HP Tru64 UNIX OpenSSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS)	(27 Jun 2007 )
	1 msg	[ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability	(27 Jun 2007 )
	1 msg	Openedge _mprosrv buffer overflow	(27 Jun 2007 )
	1 msg	Conti FTP Server v1.0 DoS	(27 Jun 2007 )
	1 msg	SAP Internet Communication Framework (BC-MID-ICF) Vulnerability	(27 Jun 2007 )
	1 msg	PHP 4/5 htaccess safemode and open_basedir Bypass	(27 Jun 2007 )
	1 msg	SAP Web Dynpro Java (BC-WD-JAV) Vulnerability	(27 Jun 2007 )
	1 msg	[ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities	(27 Jun 2007 )
	1 msg	[ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities	(26 Jun 2007 )
	1 msg	[ GLSA 200706-09 ] libexif: Buffer overflow	(26 Jun 2007 )
	1 msg	[GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vectorsoftware ActiveX Arbitrary Data Write	(26 Jun 2007 )
	1 msg	iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability	(26 Jun 2007 )
	1 msg	iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability	(26 Jun 2007 )
	1 msg	Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device	(26 Jun 2007 )
	1 msg	MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow	(26 Jun 2007 )
	1 msg	MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities	(26 Jun 2007 )
	1 msg	SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products	(26 Jun 2007 )
	1 msg	rPSA-2007-0133-1 emacs emacs-leim	(26 Jun 2007 )
	1 msg	CFP: ISOI III (a DA workshop)	(26 Jun 2007 )
	1 msg	[ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0	(25 Jun 2007 )
	1 msg	Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities	(25 Jun 2007 )
	1 msg	MyNews version 0.10 SQL Injection Vulnerability	(25 Jun 2007 )
	1 msg	[security bulletin] HPSBUX02225 SSRT071295 rev.1 - HP-UX Running Xserver, Local Denial of Service (DoS)	(25 Jun 2007 )
	1 msg	rPSA-2007-0131-1 libexif	(25 Jun 2007 )
	2 msgs	'run as' local denial-of-service enables administrative account processes to be killed	(25 Jun 2007 )
	1 msg	Safari XMLHttpRequest HTTP header injection	(25 Jun 2007 )
	2 msgs	KF Web Server 3.1.0 admin console XSS	(25 Jun 2007 )
	1 msg	Calendarix version 0.7. 20070307 Multiple XSS Attacks	(25 Jun 2007 )
	1 msg	Papoo CMS 3.6 - Access Restriction Bypass	(25 Jun 2007 )
	1 msg	phpTrafficA < 1.4.2	(25 Jun 2007 )
	1 msg	Ingres stack overflow in uuid_from_char function	(25 Jun 2007 )
	2 msgs	Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities	(25 Jun 2007 )
	1 msg	Safari Bookmarks Buffer Overflow Vulnerability	(25 Jun 2007 )
	1 msg	Pluxml 0.3.1 Remote Code Execution Exploit	(25 Jun 2007 )
	1 msg	LiteWEB 2.7 404 Denial of Services	(25 Jun 2007 )
	1 msg	Ingres wakeup setuid(ingres) file truncation	(25 Jun 2007 )
	1 msg	POWER PHLOGGER v.2.2.5 (username) SQL Injection	(25 Jun 2007 )
	1 msg	Ingres Unauthenticated Pointer Overwrite 1	(25 Jun 2007 )
	1 msg	Papoo CMS 3.6 - SQL Injection	(25 Jun 2007 )
	1 msg	Ingres verifydb local stack overflow	(25 Jun 2007 )
	1 msg	Ingres Unauthenticated Pointer Overwrite 2	(25 Jun 2007 )
	1 msg	SHTTPD V1.38 server source code disclosure	(25 Jun 2007 )
	1 msg	[GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control RemoteStack Buffer Overflow	(25 Jun 2007 )