| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Change MAINTAINER address for ports maintained by the Security Team to | simon | 2005-07-31 | 1 | -1/+1 |
| * | - Set maintainership to security@. | simon | 2005-07-04 | 1 | -1/+1 |
| * | Grab maintainer-ship of portaudit. While I do not currently have any | simon | 2005-06-15 | 1 | -1/+1 |
| * | Document Horde's XSS vulnerabilities. | thierry | 2005-01-05 | 1 | -0/+1 |
| * | Create a VuXML entry for Horde XSS help window vulnerability to replace | nectar | 2004-10-27 | 1 | -1/+0 |
| * | Add an entry for a vulnerability fixed in horde-2.2.7. | thierry | 2004-10-27 | 1 | -0/+1 |
| * | Add entries for vulnerabilites in imported xpdf code in kdegraphics | lofi | 2004-10-24 | 1 | -0/+2 |
| * | Add an entry for a XSS vulnerability fixed in IMP-3.2.6. | thierry | 2004-10-12 | 1 | -0/+1 |
| * | - star-devel: privilege escalation | eik | 2004-09-09 | 2 | -1/+7 |
| * | - XSS vulnerability in phpGroupWare wiki module | eik | 2004-09-07 | 2 | -8/+42 |
| * | multiple vulnerabilities in LHA | eik | 2004-09-04 | 1 | -0/+36 |
| * | grrrr... left the test case intact | eik | 2004-09-04 | 1 | -1/+1 |
| * | - add some references | eik | 2004-09-04 | 3 | -8/+142 |
| * | samba printer change notification request DoS | eik | 2004-08-31 | 1 | -0/+1 |
| * | add some references, add ru-gaim | eik | 2004-08-30 | 1 | -2/+4 |
| * | multiple vulnerabilities in gaim | eik | 2004-08-30 | 1 | -4/+4 |
| * | security bug in rscsi client code | eik | 2004-08-30 | 1 | -0/+4 |
| * | Document NSS SSLv2 server buffer overflow (already referenced in | nectar | 2004-08-27 | 1 | -1/+0 |
| * | Document ripMIME decoding bug (already referenced in portaudit.txt). | nectar | 2004-08-27 | 1 | -1/+0 |
| * | Argh. Duplicate entry for "Scorched 3D server chat box format string vulnerab... | eik | 2004-08-27 | 1 | -2/+1 |
| * | Mozilla / NSS S/MIME DoS vulnerability & Scorched 3D server chat box format s... | eik | 2004-08-27 | 1 | -0/+2 |
| * | Note sanitize_path bug in rsync (already referenced in portaudit.txt). | nectar | 2004-08-27 | 1 | -1/+0 |
| * | Document buffer overflows in SoX (already referenced in portaudit.txt). | nectar | 2004-08-27 | 1 | -1/+0 |
| * | Document cookie bug in Konqueror (already referenced in portaudit.txt). | nectar | 2004-08-27 | 1 | -1/+0 |
| * | Remove libxine issue which is now documented in the FreeBSD VuXML | nectar | 2004-08-25 | 1 | -1/+0 |
| * | nss library SSL remote buffer overflow | eik | 2004-08-25 | 1 | -0/+1 |
| * | multiple buffer overflows in xv | eik | 2004-08-25 | 1 | -2/+3 |
| * | Konqueror cross-domain cookie injection | eik | 2004-08-24 | 1 | -0/+1 |
| * | handle some duplicates | eik | 2004-08-24 | 3 | -2/+71 |
| * | a2ps: Possible execution of shell commands as local user. | eik | 2004-08-21 | 1 | -1/+2 |
| * | correct topic of eda0ade6-f281-11d8-81b0-000347a4fa7d | eik | 2004-08-20 | 1 | -1/+1 |
| * | QT 3.x BMP (and possibly other graphics formats) heap-based overflow | eik | 2004-08-20 | 1 | -0/+1 |
| * | potential security flaws in mod_ssl | eik | 2004-08-19 | 1 | -4/+6 |
| * | move a800386e-ef7e-11d8-81b0-000347a4fa7d to xml | eik | 2004-08-17 | 3 | -9/+36 |
| * | ruby CGI::Session insecure file creation | eik | 2004-08-16 | 1 | -1/+2 |
| * | multiple phpGroupWare vulnerabilities | eik | 2004-08-16 | 1 | -0/+2 |
| * | phpGedView, jftpgw | eik | 2004-08-16 | 3 | -0/+29 |
| * | apply xlist not to the own files | eik | 2004-08-14 | 2 | -10/+15 |
| * | fix some vuxml duplicates, add sympa unauthorized list creation | eik | 2004-08-14 | 3 | -8/+680 |
| * | Add another entry for kdelibs3 due to another missed patch. | lofi | 2004-08-13 | 1 | -0/+1 |
| * | Correct entries for recent kde vuln's and add new entry for kdelibs | lofi | 2004-08-13 | 1 | -1/+3 |
| * | fix security hole in non-chroot rsync daemon. | eik | 2004-08-12 | 1 | -0/+1 |
| * | 9fb5bb32-d6fa-11d8-b479-02e0185c0b53 is a duplicate of 40800696-c3b0-11d8-864... | eik | 2004-08-12 | 2 | -2/+5 |
| * | f72ccf7c-e607-11d8-9b0a-000347a4fa7d is a duplicate of 6f955451-ba54-11d8-b88... | eik | 2004-08-12 | 2 | -4/+7 |
| * | Factor out all but one of the build switches of the KDE main module ports | lofi | 2004-08-11 | 1 | -0/+2 |
| * | libine "vcd:" input source buffer overflow | eik | 2004-08-10 | 1 | -0/+1 |
| * | SpamAssassin DoS & cfengine authentication heap corruption | eik | 2004-08-10 | 1 | -2/+4 |
| * | CVStrac arbitrary remote code execution | eik | 2004-08-07 | 1 | -1/+2 |
| * | fold entry 7eded4b8-e6fe-11d8-b12f-0a001f31891a into 2de14f7a-dad9-11d8-b59a-... | eik | 2004-08-06 | 2 | -1/+4 |
| * | putty local command execution | dinoex | 2004-08-06 | 1 | -0/+1 |
| * | move abe47a5a-e23c-11d8-9b0a-000347a4fa7d to vuxml, add mozilla to the list o... | eik | 2004-08-06 | 1 | -1/+0 |
| * | o Security Update to 2.2.10-ja-1.0. | nork | 2004-08-06 | 1 | -0/+1 |
| * | add Opera "location" object write access vulnerability | eik | 2004-08-05 | 1 | -0/+1 |
| * | move f9e3e60b-e650-11d8-9b0a-000347a4fa7d to vuxml, add mozilla to the list o... | eik | 2004-08-05 | 1 | -3/+0 |
| * | back out last commit | dinoex | 2004-08-05 | 1 | -1/+0 |
| * | putty local command execution | dinoex | 2004-08-05 | 1 | -0/+1 |
| * | libPNG stack-based buffer overflow and other code concerns | eik | 2004-08-05 | 1 | -0/+3 |
| * | Acrobat Reader handling of malformed uuencoded pdf files | eik | 2004-08-04 | 1 | -0/+1 |
| * | Squid NTLM authentication helper overflow | eik | 2004-08-04 | 1 | -0/+1 |
| * | ripMIME attachment extraction bypass | eik | 2004-08-04 | 1 | -4/+5 |
| * | GnuTLS certificate chain verification DoS | eik | 2004-08-03 | 1 | -1/+3 |
| * | phpMyAdmin configuration manipulation and code injection | eik | 2004-07-31 | 1 | -1/+2 |
| * | Register a vulnerability in mail/imp3. | thierry | 2004-07-31 | 1 | -0/+1 |
| * | Mozilla Firefox certificate spoofing | eik | 2004-07-30 | 1 | -0/+1 |
| * | DansGuardian banned extension filter bypass vulnerability | eik | 2004-07-30 | 1 | -0/+1 |
| * | add a reference to the SoX buffer overflow entry | eik | 2004-07-29 | 1 | -1/+1 |
| * | SoX buffer overflows when handling .WAV files | eik | 2004-07-29 | 1 | -1/+2 |
| * | LCDProc buffer overflow/format string vulnerabilities | eik | 2004-07-28 | 1 | -0/+1 |
| * | pavuk digest auth buffer overflow | eik | 2004-07-27 | 1 | -0/+1 |
| * | add Nessus "adduser" race condition and Dropbear DSS verification bug | eik | 2004-07-27 | 1 | -2/+5 |
| * | l2tpd BSS-based buffer overflow | eik | 2004-07-23 | 1 | -0/+1 |
| * | phpBB cross site scripting vulnerabilities | eik | 2004-07-22 | 1 | -0/+1 |
| * | add subversion-perl, subversion-python | eik | 2004-07-20 | 1 | -0/+1 |
| * | subversion access control bypass | eik | 2004-07-20 | 1 | -0/+1 |
| * | mod_ssl format string vulnerability | eik | 2004-07-18 | 1 | -0/+2 |
| * | Roundup directory traversal | eik | 2004-07-16 | 1 | -1/+2 |
| * | wv library datetime field buffer overflow | eik | 2004-07-14 | 1 | -0/+1 |
| * | multiple vulnerabilities in Bugzilla | eik | 2004-07-14 | 1 | -0/+1 |
| * | correct vulnerable version of linux-png and add a reference | eik | 2004-07-11 | 1 | -2/+2 |
| * | libpng row buffer overflow | eik | 2004-07-11 | 1 | -0/+2 |
| * | add some references | eik | 2004-07-09 | 1 | -0/+4 |
| * | move e5e2883d-ceb9-11d8-8898-000d6111a684 to vuln.xml | eik | 2004-07-08 | 1 | -2/+0 |
| * | add some references | eik | 2004-07-06 | 1 | -3/+3 |
| * | MySQL versions < 4.1 seem to be unaffected | eik | 2004-07-06 | 1 | -2/+2 |
| * | add MySQL server authentication bypass / buffer overflow | eik | 2004-07-06 | 1 | -0/+2 |
| * | Mark 4aec9d58-ce7b-11d8-858d-000d610a3b12 as a duplicate of the | eik | 2004-07-05 | 3 | -1/+28 |
| * | Move phpnuke vulnerabilities to VuXML. | trhodes | 2004-07-03 | 1 | -1/+0 |
| * | move "phpMyAdmin code injection" to vuxml | eik | 2004-07-02 | 1 | -1/+0 |
| * | phpMyAdmin code injection | eik | 2004-07-02 | 1 | -0/+1 |
| * | - SSLtelnet remote format string vulnerability | eik | 2004-07-01 | 1 | -7/+8 |
| * | add MIT Kerberos 5 krb5_aname_to_localname() buffer overflow | eik | 2004-06-29 | 1 | -0/+1 |
| * | add isakmpd security association deletion vulnerability | eik | 2004-06-29 | 1 | -2/+3 |
| * | add Apache input header folding DoS vulnerability | eik | 2004-06-29 | 1 | -0/+1 |
| * | xine-lib RTSP handling vulnerabilities | eik | 2004-06-28 | 1 | -0/+1 |
| * | Move MoinMoin entry to VuXML. | trhodes | 2004-06-28 | 1 | -1/+0 |
| * | diversify url conversion | eik | 2004-06-28 | 1 | -1/+21 |
| * | add portaudit2vuxml.pl to easy the migration of entries to VuXML | eik | 2004-06-26 | 1 | -0/+129 |
| * | Add an entry for recent isc-dhcp3-server buffer overflows. | trhodes | 2004-06-26 | 1 | -1/+0 |
| * | Move giFT-FastTrack to VuXML. | trhodes | 2004-06-26 | 1 | -1/+0 |
| * | giFT-FastTrack remote DoS | eik | 2004-06-25 | 1 | -0/+1 |
| * | Update to 0.2.2 | eik | 2004-06-25 | 4 | -7/+10 |
| * | correct rlpr version | eik | 2004-06-25 | 1 | -2/+2 |
| * | Pure-FTPd DoS when the max number of connection is reached | eik | 2004-06-25 | 1 | -0/+1 |
| * | Move the Gallery entry to VuXML. | trhodes | 2004-06-25 | 1 | -1/+0 |
| * | rlpr local and remote exploitable buffer overflow (CAN-2004-0393, CAN-2004-0454) | eik | 2004-06-24 | 1 | -0/+1 |
| * | CAN-2004-0451: format string vulnerabilities in sup | eik | 2004-06-24 | 1 | -0/+1 |
| * | Security flaw in rssh | eik | 2004-06-24 | 1 | -1/+2 |
| * | Icecast remote DoS vulnerability | eik | 2004-06-24 | 1 | -0/+1 |
| * | it seems like isc-dhcp3-{client,devel} are unaffected | eik | 2004-06-23 | 1 | -1/+1 |
| * | reword gallery entry | eik | 2004-06-23 | 1 | -1/+4 |
| * | Sqwebmail 4.0.4 XSS vulnerability | eik | 2004-06-22 | 1 | -0/+1 |
| * | Roundup remote file disclosure vulnerability | eik | 2004-06-22 | 1 | -0/+1 |
| * | mailman allows 3rd parties to retrieve member passwords (CAN-2004-0412)w | eik | 2004-06-21 | 1 | -0/+1 |
| * | super format string vulnerability | eik | 2004-06-21 | 1 | -0/+1 |
| * | Scorched 3D server chat box format string vulnerability | eik | 2004-06-21 | 1 | -0/+1 |
| * | BNBT Authorization Header DoS | eik | 2004-06-21 | 1 | -0/+1 |
| * | - The previous commit included ruby18-raspell-0.1, which is not affected. | thierry | 2004-06-21 | 1 | -1/+2 |
| * | Security: fix a buffer overflow in word-list-compress: | thierry | 2004-06-20 | 1 | -0/+1 |
| * | ircd-hybrid-7 low-bandwidth DoS | eik | 2004-06-20 | 1 | -0/+2 |
| * | make BASEURL customizable | eik | 2004-06-18 | 2 | -3/+11 |
| * | add subversion-perl, subversion-python | eik | 2004-06-18 | 1 | -1/+1 |
| * | added racoon certificate validation bug | eik | 2004-06-17 | 1 | -0/+1 |
| * | update to 0.2 | eik | 2004-06-17 | 3 | -8/+15 |
| * | add moinmoin, phpnuke and webmin vulnerabilities | eik | 2004-06-17 | 1 | -0/+3 |
| * | SquirrelMail has a localized japanese version | eik | 2004-06-16 | 1 | -0/+1 |
| * | Add SquirrelMail XSS vulnerability | eik | 2004-06-16 | 1 | -0/+1 |
| * | typo | eik | 2004-06-15 | 2 | -2/+2 |
| * | Point all vulnerabilities to the base URL, so that entries | eik | 2004-06-15 | 2 | -3/+14 |
| * | update to 0.1.1, supporting some of the VuXML 1.1 features | eik | 2004-06-14 | 6 | -53/+194 |
| * | reword some descriptions | eik | 2004-06-14 | 1 | -6/+6 |
| * | Change URLs for a better reference about IMP & Chora vulnerabilities. | thierry | 2004-06-13 | 1 | -2/+2 |
| * | Add an entry for Chora and IMP. | thierry | 2004-06-13 | 1 | -0/+2 |
| * | Added CAN-2004-0488, CAN-2004-0492, DBMail vulnerability, smtpproxy vulnerabi... | eik | 2004-06-13 | 1 | -4/+9 |
| * | portaudit-db generates a portaudit database from a current | eik | 2004-06-13 | 10 | -0/+644 |
