oss-security mailing list

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/03

Messages by day:

March 3 (2 messages)

CVE request: lighttpd mod_cgi script source disclosure (Robert Buchholz <rbu@...too.org>)
Re: CVE request: lighttpd mod_cgi script source disclosure ("Steven M. Christey" <coley@...us.mitre.org>)

March 4 (4 messages)

request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)
Re: request CVE id: insecure handling of DISPLAY in rxvt ("Steven M. Christey" <coley@...us.mitre.org>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Steve Kemp <steve@...ve.org.uk>)
CVE? CCE? dovecot setting is often used incorrectly (Jonathan Smith <smithj@...ethemallocs.com>)

March 5 (9 messages)

Re: request CVE id: insecure handling of DISPLAY in rxvt (Matthieu Herrb <matthieu.herrb@...s.fr>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Tomas Hoger <thoger@...hat.com>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Steve Kemp <steve@...ve.org.uk>)
wiki: Debian, auditing tools, vendor-sec (Solar Designer <solar@...nwall.com>)
Re: list archive (Robert Buchholz <rbu@...too.org>)
Re: list archive (Solar Designer <solar@...nwall.com>)
Re: wiki: Debian, auditing tools, vendor-sec (Steve Kemp <steve@...ve.org.uk>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Nico Golde <oss-security+ml@...lde.de>)

March 6 (3 messages)

CVE Request (Josh Bressers <bressers@...hat.com>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)
Attack vector exploiting rxvt defaulting to :0 ("Bernhard R. Link" <brlink@...ian.org>)

March 8 (2 messages)

Re: CVE? CCE? dovecot setting is often used incorrectly (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE? CCE? dovecot setting is often used incorrectly (Robert Buchholz <rbu@...too.org>)

March 9 (3 messages)

CVE request: dovecot unauthorized login (Jonathan Smith <smithj@...ethemallocs.com>)
Re: list archive (Solar Designer <solar@...nwall.com>)
Re: CVE? CCE? dovecot setting is often used incorrectly ("Steven M. Christey" <coley@...us.mitre.org>)

March 10 (8 messages)

Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: ruby information disclosure (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: ruby information disclosure (Tomas Hoger <thoger@...hat.com>)
CVE request: yet another lighttpd issue (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: yet another lighttpd issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: dovecot unauthorized login (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: dovecot unauthorized login ("Steven M. Christey" <coley@...us.mitre.org>)

March 11 (3 messages)

CVE request: multiple issues in ViewVC (Pierre-Yves Rofes <py@...too.org>)
CVE request: insecure X11 handling in ltsp (Nico Golde <oss-security+ml@...lde.de>)
CVE request: setrlimit can be avoided (Linux less than 2.6.22) (Kees Cook <kees@...flux.net>)

March 12 (4 messages)

Re: CVE request: setrlimit can be avoided (Linux less than 2.6.22) (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: multiple issues in ViewVC ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: insecure X11 handling in ltsp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: setrlimit can be avoided (Linux less than 2.6.22) ("Steven M. Christey" <coley@...us.mitre.org>)

March 18 (4 messages)

new archive file format research by Oulo university (Marcus Meissner <meissner@...e.de>)
CVE request: bzip2 CERT-FI: 20469 (Robert Buchholz <rbu@...too.org>)
Re: CVE request: bzip2 CERT-FI: 20469 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: bzip2 CERT-FI: 20469 ("Steven M. Christey" <coley@...us.mitre.org>)

March 20 (2 messages)

Re: CVE request: bzip2 CERT-FI: 20469 (Josh Bressers <bressers@...hat.com>)
webapp vulns with no cve (Hanno Böck <hanno@...eck.de>)

March 22 (2 messages)

CVE Request: openssh local users may hijack forwarded X connections (Micah Anderson <micah@...eup.net>)
CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow (Micah Anderson <micah@...eup.net>)

March 24 (8 messages)

SA29489 CenterIM URL handling flaw (Lubomir Kundrak <lkundrak@...hat.com>)
CVE Request: xine-lib multiple buffer overflows (Lubomir Kundrak <lkundrak@...hat.com>)
CVE Request: namazu UTF-7 XSS (Lubomir Kundrak <lkundrak@...hat.com>)
Re: CVE Request: xine-lib multiple buffer overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: namazu UTF-7 XSS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: openssh local users may hijack forwarded X connections ("Steven M. Christey" <coley@...us.mitre.org>)
Re: webapp vulns with no cve ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)

March 25 (7 messages)

Need CVEs for joomla, egroupware (Hanno Böck <hanno@...eck.de>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
Re: Need CVEs for joomla, egroupware ("Pierre-Yves Rofes" <py@...too.org>)
Re: Need CVEs for joomla, egroupware (Nico Golde <oss-security+ml@...lde.de>)
was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)

March 26 (6 messages)

firefox 2.0.0.13 (Jonathan Smith <smithj@...ethemallocs.com>)
Re: firefox 2.0.0.13 (Josh Bressers <bressers@...hat.com>)
Re: firefox 2.0.0.13 (Vincent Danen <vdanen@...sec.ca>)
Re: was: SA29489 CenterIM URL handling flaw (Lubomir Kundrak <lkundrak@...hat.com>)
CVE request: lighttpd DoS: forcefully closing of foreign SSL connections (Christian Hoffmann <hoffie@...too.org>)
CVE Request: Perlbal DoS (Lubomir Kundrak <lkundrak@...hat.com>)

March 27 (13 messages)

CVE request: GnuPG Import Key Memory Corruption (Robert Buchholz <rbu@...too.org>)
Re: request CVE id: insecure handling of DISPLAY in rxvt (Robert Buchholz <rbu@...too.org>)
Re: firefox 2.0.0.13 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: firefox 2.0.0.13 (Josh Bressers <bressers@...hat.com>)
Re: firefox 2.0.0.13 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: GnuPG Import Key Memory Corruption ("Steven M. Christey" <coley@...us.mitre.org>)
Re: was: SA29489 CenterIM URL handling flaw ("Steven M. Christey" <coley@...us.mitre.org>)
using oss-security references in CVE ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: Perlbal DoS ("Steven M. Christey" <coley@...us.mitre.org>)
4 more messages

March 28 (15 messages)

Re: using oss-security references in CVE (Solar Designer <solar@...nwall.com>)
Re: using oss-security references in CVE (Nico Golde <oss-security+ml@...lde.de>)
Re: CVEs for zzuf crashers? (Nico Golde <oss-security+ml@...lde.de>)
Re: was: SA29489 CenterIM URL handling flaw (Nico Golde <oss-security+ml@...lde.de>)
CVE request: policyd-weight insecure temporary file creation (Robert Buchholz <rbu@...too.org>)
Re: using oss-security references in CVE (Josh Bressers <bressers@...hat.com>)
wiki: links from list archive (was: using oss-security references in CVE) (Solar Designer <solar@...nwall.com>)
change subscription address (Zenaan Harkness <zen@...edbms.net>)
Re: change subscription address (Solar Designer <solar@...nwall.com>)
6 more messages

March 30 (1 message)

CVE request: phpmyadmin (PMASA-2008-2) (Hanno Böck <hanno@...eck.de>)

March 31 (7 messages)

CVE id request: comix (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: silc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpmyadmin (PMASA-2008-2) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: comix ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: policyd-weight insecure temporary file creation ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: comix (Nico Golde <oss-security+ml@...lde.de>)

103 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.