oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 2	⁴ 4	⁵ 9	⁶ 3	⁷	⁸ 2	⁹ 3
¹⁰ 8	¹¹ 3	¹² 4	¹³	¹⁴	¹⁵	¹⁶
¹⁷	¹⁸ 4	¹⁹	²⁰ 2	²¹	²² 2	²³
²⁴ 8	²⁵ 7	²⁶ 6	²⁷ 13	²⁸ 15	²⁹	³⁰ 1
³¹ 7

Messages by day:

March 3 (2 messages)

CVE request: lighttpd mod_cgi script source disclosure (Robert Buchholz <rbu@...too.org>)
Re: CVE request: lighttpd mod_cgi script source disclosure ("Steven M. Christey" <coley@...us.mitre.org>)

March 4 (4 messages)

request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)
Re: request CVE id: insecure handling of DISPLAY in rxvt ("Steven M. Christey" <coley@...us.mitre.org>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Steve Kemp <steve@...ve.org.uk>)
CVE? CCE? dovecot setting is often used incorrectly (Jonathan Smith <smithj@...ethemallocs.com>)

March 5 (9 messages)

Re: request CVE id: insecure handling of DISPLAY in rxvt (Matthieu Herrb <matthieu.herrb@...s.fr>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Tomas Hoger <thoger@...hat.com>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Steve Kemp <steve@...ve.org.uk>)
wiki: Debian, auditing tools, vendor-sec (Solar Designer <solar@...nwall.com>)
Re: list archive (Robert Buchholz <rbu@...too.org>)
Re: list archive (Solar Designer <solar@...nwall.com>)
Re: wiki: Debian, auditing tools, vendor-sec (Steve Kemp <steve@...ve.org.uk>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)

March 6 (3 messages)

CVE Request (Josh Bressers <bressers@...hat.com>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)
Attack vector exploiting rxvt defaulting to :0 ("Bernhard R. Link" <brlink@...ian.org>)

March 8 (2 messages)

Re: CVE? CCE? dovecot setting is often used incorrectly (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE? CCE? dovecot setting is often used incorrectly (Robert Buchholz <rbu@...too.org>)

March 9 (3 messages)

CVE request: dovecot unauthorized login (Jonathan Smith <smithj@...ethemallocs.com>)
Re: list archive (Solar Designer <solar@...nwall.com>)
Re: CVE? CCE? dovecot setting is often used incorrectly ("Steven M. Christey" <coley@...us.mitre.org>)

March 10 (8 messages)

Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: ruby information disclosure (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: ruby information disclosure (Tomas Hoger <thoger@...hat.com>)
CVE request: yet another lighttpd issue (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: yet another lighttpd issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: dovecot unauthorized login (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)

March 11 (3 messages)

CVE request: multiple issues in ViewVC (Pierre-Yves Rofes <py@...too.org>)
CVE request: insecure X11 handling in ltsp (Nico Golde <oss-security+ml@...lde.de>)
CVE request: setrlimit can be avoided (Linux less than 2.6.22) (Kees Cook <kees@...flux.net>)

March 12 (4 messages)

Re: CVE request: setrlimit can be avoided (Linux less than 2.6.22) (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: multiple issues in ViewVC ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: insecure X11 handling in ltsp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: setrlimit can be avoided (Linux less than 2.6.22) ("Steven M. Christey" <coley@...us.mitre.org>)

March 18 (4 messages)

new archive file format research by Oulo university (Marcus Meissner <meissner@...e.de>)
CVE request: bzip2 CERT-FI: 20469 (Robert Buchholz <rbu@...too.org>)
Re: CVE request: bzip2 CERT-FI: 20469 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: bzip2 CERT-FI: 20469 ("Steven M. Christey" <coley@...us.mitre.org>)

March 20 (2 messages)

Re: CVE request: bzip2 CERT-FI: 20469 (Josh Bressers <bressers@...hat.com>)
webapp vulns with no cve (Hanno Böck <hanno@...eck.de>)

March 22 (2 messages)

CVE Request: openssh local users may hijack forwarded X connections (Micah Anderson <micah@...eup.net>)
CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow (Micah Anderson <micah@...eup.net>)

March 24 (8 messages)

SA29489 CenterIM URL handling flaw (Lubomir Kundrak <lkundrak@...hat.com>)
CVE Request: xine-lib multiple buffer overflows (Lubomir Kundrak <lkundrak@...hat.com>)
CVE Request: namazu UTF-7 XSS (Lubomir Kundrak <lkundrak@...hat.com>)
Re: CVE Request: xine-lib multiple buffer overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: namazu UTF-7 XSS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: openssh local users may hijack forwarded X connections ("Steven M. Christey" <coley@...us.mitre.org>)
Re: webapp vulns with no cve ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)

March 25 (7 messages)

Need CVEs for joomla, egroupware (Hanno Böck <hanno@...eck.de>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
Re: Need CVEs for joomla, egroupware ("Pierre-Yves Rofes" <py@...too.org>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)

March 26 (6 messages)

firefox 2.0.0.13 (Jonathan Smith <smithj@...ethemallocs.com>)
Re: firefox 2.0.0.13 (Josh Bressers <bressers@...hat.com>)
Re: firefox 2.0.0.13 (Vincent Danen <vdanen@...sec.ca>)
Re: was: SA29489 CenterIM URL handling flaw (Lubomir Kundrak <lkundrak@...hat.com>)
CVE request: lighttpd DoS: forcefully closing of foreign SSL connections (Christian Hoffmann <hoffie@...too.org>)
CVE Request: Perlbal DoS (Lubomir Kundrak <lkundrak@...hat.com>)

March 27 (13 messages)

CVE request: GnuPG Import Key Memory Corruption (Robert Buchholz <rbu@...too.org>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Robert Buchholz <rbu@...too.org>)
Re: firefox 2.0.0.13 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: firefox 2.0.0.13 (Josh Bressers <bressers@...hat.com>)
Re: firefox 2.0.0.13 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: GnuPG Import Key Memory Corruption ("Steven M. Christey" <coley@...us.mitre.org>)
Re: was: SA29489 CenterIM URL handling flaw ("Steven M. Christey" <coley@...us.mitre.org>)
using oss-security references in CVE ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: Perlbal DoS ("Steven M. Christey" <coley@...us.mitre.org>)
CVEs for zzuf crashers? (Hanno Böck <hanno@...eck.de>)
Re: using oss-security references in CVE (Lubomir Kundrak <lkundrak@...hat.com>)
Re: Need CVEs for joomla, egroupware ("Steven M. Christey" <coley@...us.mitre.org>)
Re: using oss-security references in CVE (Vincent Danen <vdanen@...sec.ca>)

March 28 (15 messages)

Re: using oss-security references in CVE (Solar Designer <solar@...nwall.com>)
Re: using oss-security references in CVE (Nico Golde <oss-security+ml@...lde.de>)
Re: CVEs for zzuf crashers? (Nico Golde <oss-security+ml@...lde.de>)
Re: was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)
CVE request: policyd-weight insecure temporary file creation (Robert Buchholz <rbu@...too.org>)
Re: using oss-security references in CVE (Josh Bressers <bressers@...hat.com>)
wiki: links from list archive (was: using oss-security references in CVE) (Solar Designer <solar@...nwall.com>)
change subscription address (Zenaan Harkness <zen@...edbms.net>)
Re: change subscription address (Solar Designer <solar@...nwall.com>)
Re: wiki: links from list archive (was: using oss-security references in CVE) (Josh Bressers <bressers@...hat.com>)
CVE request: silc (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: silc (Lubomir Kundrak <lkundrak@...hat.com>)
Re: request CVE id: insecure handling of DISPLAY in rxvt ("Bernhard R. Link" <brlink@...ian.org>)
Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections (Christian Hoffmann <hoffie@...too.org>)
project announcement - oCERT - Open Source CERT (Andrea Barisani <lcars@...rt.org>)

March 30 (1 message)

CVE request: phpmyadmin (PMASA-2008-2) (Hanno Böck <hanno@...eck.de>)

March 31 (7 messages)

CVE id request: comix (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: silc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpmyadmin (PMASA-2008-2) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: comix ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: policyd-weight insecure temporary file creation ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: comix (Nico Golde <oss-security+ml@...lde.de>)

103 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.