oss-security mailing list - 2010/03

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 1	² 2	³ 6	⁴ 4	⁵ 3	⁶ 1	⁷
⁸ 1	⁹ 4	¹⁰ 8	¹¹ 9	¹² 9	¹³	¹⁴ 2
¹⁵ 2	¹⁶ 16	¹⁷ 12	¹⁸ 2	¹⁹ 1	²⁰	²¹
²²	²³ 3	²⁴ 5	²⁵ 4	²⁶ 3	²⁷	²⁸
²⁹ 7	³⁰ 12	³¹ 6

Messages by day:

March 1 (1 message)

CVE request: kernel: dvb-core: ULE decapsulation DoS (Eugene Teo <eugeneteo@...nel.sg>)

March 2 (2 messages)

CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? (Vincent Danen <vdanen@...hat.com>)
Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? (Vincent Danen <vdanen@...hat.com>)

March 3 (6 messages)

CVE request: kernel: NFS: Fix an Oops when truncating a file (Eugene Teo <eugeneteo@...nel.sg>)
[cansecwest] Advanced PHP Hacking (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
CFPs and con invitations on the list (was: [cansecwest] Advanced PHP Hacking) (Solar Designer <solar@...nwall.com>)
Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? ("Steven M. Christey" <coley@...us.mitre.org>)
OpenSSL (with KRB5) remote crash - CVE-2010-0433 (Tomas Hoger <thoger@...hat.com>)
CVE Request: libesmtp does not check NULL bytes in commonName (Kees Cook <kees@...ntu.com>)

March 4 (4 messages)

Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names? (Vincent Danen <vdanen@...hat.com>)
Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference (Eugene Teo <eugene@...hat.com>)
kernel: hvc_console: Fix race between hvc_close and hvc_remove (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference (Josh Bressers <bressers@...hat.com>)

March 5 (3 messages)

Re: Samba symlink 0day flaw (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: gnome-screensaver termination by pressing "Enter" (Marcus Meissner <meissner@...e.de>)
Re: Samba symlink 0day flaw ("Steven M. Christey" <coley@...us.mitre.org>)

March 6 (1 message)

Re: WANTED: mikmod patches (Kees Cook <kees@...ntu.com>)

March 8 (1 message)

CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 (Jan Lieskovsky <jlieskov@...hat.com>)

March 9 (4 messages)

Re: CVE Request -- cURL/libCURL 7.20.0 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request: postgresql integer overflow in hash table size calculation (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- MediaWiki - v1.15.2 (Jan Lieskovsky <jlieskov@...hat.com>)

March 10 (8 messages)

phpmyvisites 2.3 (Henri Salo <henri@...v.fi>)
CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request -- aMSN -- improper SSL certificate validation (MITM) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: phpmyvisites 2.3 (Anthon Pang <anthon.pang@...il.com>)
CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request: DeviceKit privilege escalation via pluggable storage device labels (Vincent Danen <vdanen@...hat.com>)
CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input (Reed Loden <reed@...dloden.com>)

March 11 (9 messages)

Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
CVE id request: mydms (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Geoff Keating <geoffk@...le.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Joe Orton <jorton@...hat.com>)
Re: CVE request: kernel: connector security bypass (dann frazier <dannf@...nf.org>)

March 12 (9 messages)

CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw (Eugene Teo <eugeneteo@...nel.sg>)
CVE-2010-0729 kernel: ia64: ptrace: peek_or_poke requests miss ptrace_check_attach() (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS (Jan Lieskovsky <jlieskov@...hat.com>)
Re: [Drbd-dev] CVE request: kernel: connector security bypass (dann frazier <dannf@...nf.org>)
CVE-2010-0397: NULL pointer dereference in PHP's xmlrpc extension (Raphael Geissert <geissert@...ian.org>)
Re: [Drbd-dev] CVE request: kernel: connector security bypass (Lars Ellenberg <lars.ellenberg@...bit.com>)
Call for papers: ISP-10, USA, July 2010 (James Heralds <jmheralds@...il.com>)
Re: CFPs and con invitations on the list (Solar Designer <solar@...nwall.com>)
Re: CFPs and con invitations on the list (Jon Oberheide <jon@...rheide.org>)

March 14 (2 messages)

[HITB-Announce] HITBSecConf2010 - Dubai Agenda Released (Hafez Kamal <aphesz@...kinthebox.org>)
Re: CFPs and con invitations on the list (Solar Designer <solar@...nwall.com>)

March 15 (2 messages)

Re: CFPs and con invitations on the list (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)

March 16 (16 messages)

Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request -- MediaWiki - v1.15.2 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (ArkanoiD <ark@...ex.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Joe Orton <jorton@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Peter Sylvester <Peter.Sylvester@...lweb.fr>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (ArkanoiD <ark@...ex.net>)
Re: Re: CVE Request: gnome-screensaver termination by pressing "Enter" (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: postgresql integer overflow in hash table size calculation (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request -- cURL/libCURL 7.20.0 (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS (Vincent Danen <vdanen@...hat.com>)

March 17 (12 messages)

CVE-2009-4271 kernel: 32bit process on 64bit system DoS (Eugene Teo <eugeneteo@...nel.sg>)
CVE-2010-0008 kernel: sctp remote denial of service (Eugene Teo <eugene@...hat.com>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (ArkanoiD <ark@...ex.net>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Brian Stafford <brian@...fford.uklinux.net>)
Re: CVE-2009-4271 kernel: 32bit process on 64bit system DoS (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (ArkanoiD <ark@...ex.net>)
CVE id request: ikiwiki (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName (Emily Ratliff <emilyr@...ibm.com>)
CVE Request -- Transmission v1.92 (Jan Lieskovsky <jlieskov@...hat.com>)

March 18 (2 messages)

Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS (Vincent Danen <vdanen@...hat.com>)

March 19 (1 message)

CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs (Jan Lieskovsky <jlieskov@...hat.com>)

March 23 (3 messages)

CVE request: kernel: bluetooth: potential bad memory access with sysfs files (Eugene Teo <eugeneteo@...nel.sg>)
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Hafez Kamal <aphesz@...kinthebox.org>)
CVE requests 6x kernel vulns still pending (Eugene Teo <eugeneteo@...nel.sg>)

March 24 (5 messages)

Re: CVE requests 6x kernel vulns still pending ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requests 6x kernel vulns still pending (Eugene Teo <eugene@...hat.com>)
kernel: bluetooth: Fix kernel crash on L2CAP stress tests (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request -- MediaWiki - v1.15.2 (Henri Salo <henri@...v.fi>)
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction* (Hafez Kamal <aphesz@...kinthebox.org>)

March 25 (4 messages)

Re: CFPs and con invitations on the list (Solar Designer <solar@...nwall.com>)
Re: CFPs and con invitations on the list (Josh Bressers <bressers@...hat.com>)
Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule (Jonathan Brossard <endrazine@...il.com>)
Re: CFPs and con invitations on the list (Matthias Andree <matthias.andree@....de>)

March 26 (3 messages)

Re: CFPs and con invitations on the list (Jonathan Brossard <endrazine@...il.com>)
Re: CFPs and con invitations on the list (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) ("Steven M. Christey" <coley@...us.mitre.org>)

March 29 (7 messages)

CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) (Eugene Teo <eugeneteo@...nel.sg>)
OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes (Florian Weimer <fw@...eb.enyo.de>)
CVE Request -- Quake II Server -- two security issues affecting also Alien Arena (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2010-0741 qemu: Improper handling of erroneous data provided by Linux virtio-net driver (Petr Matousek <pmatouse@...hat.com>)
RE: CVE Request -- Quake II Server -- two security issues affecting also Alien Arena ("Richard Stanway" <r.stanway@...il.com>)
Re: OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes (Florian Weimer <fw@...eb.enyo.de>)
CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input (Reed Loden <reed@...dloden.com>)

March 30 (12 messages)

CVE request: kernel: tipc: Fix oops on send prior to entering networked mode (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input (Secunia Research <vuln@...unia.com>)
Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input (Reed Loden <reed@...dloden.com>)
Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input (Reed Loden <reed@...dloden.com>)
Re: CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: tipc: Fix oops on send prior to entering networked mode ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- MediaWiki - v1.15.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: libesmtp does not check NULL bytes in commonName ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: ikiwiki ("Steven M. Christey" <coley@...us.mitre.org>)
Re: phpmyvisites 2.3 ("Steven M. Christey" <coley@...us.mitre.org>)

March 31 (6 messages)

Re: CVE request: kernel: tipc: Fix oops on send prior to entering networked mode (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS) (Eugene Teo <eugene@...hat.com>)
Re: phpmyvisites 2.3 (Anthon Pang <anthon.pang@...il.com>)
iscsitarget/scsi-target-tuils format string CVE assignment (Josh Bressers <bressers@...hat.com>)
CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw (Alex Legler <a3li@...too.org>)

123 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.