bugtraq at insecure.orgLatest posts to bugtraq with detailed descriptionsRE: New Paper: More than 600 million users surf at high risk- July 1, 2008 --On July 1, 2008 3:31:32 PM -0400 Larry Seltzer wrote: From your paper: It is noteworthy that it has taken 19 months since the initial general availability of IE7 (public release October 2006) to reach 52.5% ...http://www.seclists.org/lists/bugtraq/2008/Jul/0017.html SECURITY DSA 1560-1 New sympa packages fix denial of service- July 1, 2008 - Debian Security Advisory DSA-1600-1 securityatdebian.org Steve Kemp July 01, 2008 - Package : sympa Vulnerability : dos Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-1648 Debian Bug : 475163 It was discovered that sympa, a modern mailing list manager, would ...http://www.seclists.org/lists/bugtraq/2008/Jul/0016.html Deepsec Talks 2007 are online - registration for 2008 is open- July 1, 2008 Dear Madam, dear Sir, DeepSec Vienna, the annual In-Depth Security Conference has opened online registrations for 2008. Registrations will receive a discount of 5% off the regular fees until August 31st if you use the following promotional code: earlybird-L4KZIEUE on our online registration form at ...http://www.seclists.org/lists/bugtraq/2008/Jul/0014.html Re: Collection of Vulnerabilities in Fully Patched Vim 7.1- July 1, 2008 On Sat, Jun 14, 2008 at 2:09 PM, Bram Moolenaar wrote: Jan Minar wrote: 1. Summary Product : Vim -- Vi IMproved Version : Tested with 7.1.314 and 6.4 Impact : Arbitrary code execution Wherefrom: Local and remote ...http://www.seclists.org/lists/bugtraq/2008/Jul/0015.html RE: New Paper: More than 600 million users surf at high risk- July 1, 2008 From your paper: It is noteworthy that it has taken 19 months since the initial general availability of IE7 (public release October 2006) to reach 52.5% proliferation amongst users that navigate the Internet with Microsoft's Web browser. Meanwhile, 92.2% of Firefox users have migrated to FF2. ...http://www.seclists.org/lists/bugtraq/2008/Jul/0013.html RE: New Paper: More than 600 million users surf at high risk- July 1, 2008 A reply from Robert Hensing at Microsoft ( eb-browser-study-full-of-fail.aspx) says that your study did not include minor version information for Internet Explorer, probably because such information is not reported in the user-agent string. But fully-patched copies of IE5 and IE6 are not insecure in the same way as an unsupported ...http://www.seclists.org/lists/bugtraq/2008/Jul/0012.html New Paper: More than 600 million users surf at high risk- July 1, 2008 Hi List, For the last 18 month we analyzed the daily USER-AGENT data collected by Google's Web search and application servers around the world to study how users patch and update their Web browsers. We came out that approximately 637 million (or 45.2 percent) users currently ...http://www.seclists.org/lists/bugtraq/2008/Jul/0010.html security bulletin HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)- July 1, 2008 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01488878 Version: 1 HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. ...http://www.seclists.org/lists/bugtraq/2008/Jul/0008.html GLSA 200807-02 Motion: Execution of arbitrary code- July 1, 2008 - - Gentoo Linux Security Advisory GLSA 200807-02 - - - - Severity: Normal Title: Motion: Execution of arbitrary code Date: July 01, 2008 Bugs: 227053 ID: 200807-02 - - Synopsis Multiple vulnerabilities in Motion might result in the execution of ...http://www.seclists.org/lists/bugtraq/2008/Jul/0009.html GLSA 200807-01 Python: Multiple integer overflows- July 1, 2008 - - Gentoo Linux Security Advisory GLSA 200807-01 - - - - Severity: Normal Title: Python: Multiple integer overflows Date: July 01, 2008 Bugs: 216673, 217221 ID: 200807-01 - - Synopsis Multiple integer overflows may allow for Denial of Service. Background ...http://www.seclists.org/lists/bugtraq/2008/Jul/0007.html |