SecurityFocus Bugtraq
By Author

Starting: 01/01/02
Ending: 01/31/02

• 'ken'@FTU
  • Re: ICQ remote buffer overflow vulnerability (01/08/02)
• 3APA3A
  • SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446) (01/28/02)
  • Buffer overflow in awhttpd (Re: Format string bug in awhttpd (Re: [AP] awhttpd v2.2 local DoS)) (01/04/02)
  • Format string bug in awhttpd (Re: [AP] awhttpd v2.2 local DoS) (01/04/02)
• _kiss_@guay.com
  • Re: BOOZT! Standard CGI Vuln : fixed in 0.9.9 (01/17/02)
• ACD Incorporated Support
  • (Repost) CwpApi : GetRelativePath() returns invalid paths (security advisory) (01/22/02)
• Adam Herscher
  • Re: squirrelmail bug (01/24/02)
• Adrian Chung
  • Cookie modification allows unauthenticated user login in Geeklog 1.3 (01/10/02)
• advisory
  • ISSTW Security Advisory Tarantella Enterprise 3.11.903 Directory Index Disclosure Vulnerability (01/24/02)
• Ahmet Sabri ALPER
  • [ARL02-A01] Vulnerability in Hosting Controller (01/26/02)
• Ajax
  • Re: user-mode-linux problems (01/31/02)
• al3x hernandez
  • CyberStop-Server-DoS-remote-attacks (01/23/02)
• Alan Caulkins
  • Re: Serious privacy leak in Python for Windows (01/16/02)
• Alfonso De Gregorio
  • Re: Vulnerability in encrypted loop device for linux (01/03/02)
• Andi Kleen
  • Re: remote memory reading through tcp/icmp (01/20/02)
• Andrew Clover
  • Re: CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor] (01/11/02)
• Andrew Griffiths
  • user-mode-linux problems (01/28/02)
  • bru backup program (01/26/02)
  • Re: Maelstrom file overwrite (01/22/02)
  • dnrd 2.10 dos (01/20/02)
  • Maelstrom 1.4.3 abartity file overwrite (01/20/02)
  • remote memory reading through tcp/icmp (01/20/02)
• Andrew Wason
  • Re: Cross-Site Vulnerabilities (Still) Found in Major Web Sites (01/22/02)
• Anthony DeRobertis
  • Re: cdrdao insecure filehandling (01/15/02)
• appelast@bsquad.sm.pl
  • squirrelmail bug (01/24/02)
• ark@eltex.ru
  • Re: Handspring Visor D.O.S (01/11/02)
• Arne Vidstrom
  • Vulnerabilities in EServ 2.97 (01/29/02)
  • Bounce vulnerability in SpoonFTP 1.1.0.1 (01/20/02)
• Austin Ensminger
  • Re: Shoutcast server 1.8.3 win32 (01/22/02)
• austin naremore
  • Re: AIM addendum (01/03/02)
• Barker, Brent
  • BindView NetInventory NetRC hostcfg_ni password passed in clear t ext (01/24/02)
• Ben Laurie
  • Re: AW: IE https certificate attack (01/06/02)
• benjurry@263.net
  • RE:Siemens Mobile Phone SMS Denial of Service Vulnerability (01/30/02)
  • Siemens Mobie SMS Exceptional Character Vulnerability (01/14/02)
• Bernhard Kuemel
  • gnuchess buffer overflow vulnerabilty (01/24/02)
• Bjorn Djupvik
  • svindel.net security advisory - web admin vulnerability in CacheOS (01/08/02)
• Bob Dog
  • Re: DoS bug on Tru64 (01/30/02)
• Brad
  • Re: remote buffer overflow in sniffit (01/22/02)
• Brian Dittmer
  • Shoutcast server 1.8.3 win32 (01/19/02)
• Brian Gallagher
  • Authorize.Net Plain Text Login Transmission (01/15/02)
• Brian Hatch
  • Stunnel: Format String Bug update (01/03/02)
• Brian Rea
  • psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminal (01/22/02)
• bugtraq@artemas.reachin.com
  • Announcing a new DNS server implementation (01/09/02)
• bugtraq@t-swat.com
  • RE: Breakable (01/18/02)
• bugzilla@redhat.com
  • [RHSA-2002:018-10] New rsync packages available (01/30/02)
  • [RHSA-2002:018-05] New rsync packages available (01/25/02)
  • [RHSA-2002:007-16] Updated 2.4 kernel available (01/24/02)
  • [RHSA-2002:014-07] Updated OpenLDAP packages available (01/23/02)
  • [RHSA-2002:015-13] Updated at package available (01/23/02)
  • [RHSA-2002:013-03] Updated sudo package is available (01/15/02)
  • [RHSA-2002:005-09] Updated xchat packages are available (01/15/02)
  • [RHSA-2002:011-06] Updated sudo packages are available (01/15/02)
  • [RHSA-2002:004-06] New groff packages available to fix security problems (01/14/02)
  • [RHSA-2001:179-05] Updated namazu packages are available (01/09/02)
  • [RHSA-2001:176-05] Updated exim packages fix security problem (01/08/02)
  • [RHSA-2002:003-10] New mutt packages available to fix security problem (01/07/02)
  • [RHSA-2002:002-10] Updated stunnel packages available. (01/07/02)
  • [RHSA-2001:170-06] Updated Mailman packages available (01/02/02)
• Cabezon Aurélien
  • Xoops topics : One more time (01/29/02)
  • Xoops Private Message System Script injection (01/29/02)
  • Xoops SQL fragment disclosure and SQL injection vulnerability (01/29/02)
• Casper Dik
  • Re: remote memory reading through tcp/icmp (01/31/02)
• Charles 'core' Stevenson
  • Re: uucp --config patch -- not sufficient (01/20/02)
  • Sudo +Postfix Exploit (01/16/02)
  • Eterm SGID utmp Buffer Overflow (Local) (01/13/02)
• Chris Adams
  • Re: DoS bug on Tru64 (01/31/02)
• Chris Anley
  • New SQL Injection Whitepaper (01/31/02)
  • Paper: Unicode overflow technique (01/09/02)
• Chris Gragsone
  • Re: Maelstrom 1.4.3 abartity file overwrite (01/21/02)
• Chris Lathem
  • MiraMail 1.04 can give POP account access and details (01/09/02)
• Chris Nandor
  • [SA-2002:00] Slashcode login vulunerability (01/10/02)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Hardening of Solaris OS for MGC (01/16/02)
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco SN 5420 Storage Router (01/09/02)
• Colin Watson
  • Re: [RHSA-2002:004-06] New groff packages available to fix security problems (01/16/02)
• D.
  • Re: [AP] awhttpd v2.2 local DoS (01/07/02)
• D. J. Bernstein
  • Re: Announcing a new DNS server implementation (01/10/02)
• Daniel Lorch
  • PHP 4.x session spoofing (01/13/02)
• Daniel Tan
  • Re: ICQ remote buffer overflow vulnerability (01/08/02)
  • Re: ICQ remote buffer overflow vulnerability (01/06/02)
  • ICQ remote buffer overflow vulnerability (01/06/02)
• Danny Ricci
  • Vulnerability in user posting in Nick.com forums (01/04/02)
• dario luethi
  • Intel WLAN Driver storing 128bit WEP-Key in plain text! (01/28/02)
• Daryl
  • CSS (01/05/02)
• Dave Ahmad
  • FWD: IRIX nsd Vulnerability (01/16/02)
  • Re: Unixware 7.1.1 rpc.cmsd remote exploit code. (01/10/02)
  • FWD: Sun Microsystems, Inc. Security Bulletin (01/10/02)
  • Re: More reading of local files in MSIE (01/05/02)
• Dave Cotter
  • Potential RealPlayer 8 Vulnerability (01/25/02)
• Dave Miller
  • Security Advisory for Bugzilla v2.15 (cvs20020103) and older (01/06/02)
• Dave Plonka
  • Alteon ACEdirector signature/security bug (01/25/02)
• David
  • Re: D-Link DWL-1000AP can be compromised because of SNMP configuration (01/24/02)
• David Frascone
  • Re: VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAILURE (01/06/02)
• David LeBlanc
  • RE: Long path exploit on NTFS (01/31/02)
  • RE: The "Lunch Break Hole" (01/27/02)
  • RE: remote memory reading through tcp/icmp (01/21/02)
• David Litchfield
  • ASP Application Security: CDONTS.NEWMAIL (01/11/02)
  • Announce: NGSSniff (01/11/02)
• David Miller
  • Re: Inproper input validation in Bugzilla <=2.14 - exploit (01/09/02)
  • Re: Security Advisory for Bugzilla v2.15 (cvs20020103) and older (01/06/02)
• Dennis Jenkins
  • Re: DoS bug on Tru64 (01/30/02)
• Derek Callaway
  • cgiaudit release information (01/11/02)
• Des Gibbons
  • RE: XP automatic recognition of Nokia as NIC? (12/31/01)
• Digital Shadow
  • Mail.com Cross Site Scripting Vulnerability (01/03/02)
• Ed Moyle
  • Plumtree Corporate Portal Cross-Site Scripting (Patch Available) (01/24/02)
• Edwin Groothuis
  • Re: remote buffer overflow in sniffit (01/22/02)
• Elan Hasson
  • "Dec. 6: Oracle server vulnerable on Unix" (01/22/02)
• elijah wright
  • Re: ICQ remote buffer overflow vulnerability (01/07/02)
• ellipse
  • Re: tac_plus version F4.0.4.alpha on at least Solaris 8 sparc (01/31/02)
  • Re: DoS bug on Tru64 (01/30/02)
  • Re: Shoutcast server 1.8.3 win32 (01/22/02)
• elliptic
  • Re: sastcpd Buffer Overflow and Format String Vulnerabilities (01/29/02)
• EnGarde Secure Linux
  • [ESA-20020125-004] rsync signed integer handling vulnerability (01/25/02)
  • [ESA-20020114-003] Several local LIDS vulnerabilities (01/14/02)
  • [ESA-20020114-002] 'pine' URL handling vulnerability (01/14/02)
  • [ESA-20020114-001] 'sudo' can invoke the system MTA as root (01/14/02)
• Falk Siemonsmeier
  • Re: Sapgui 4.6D for Windows (01/28/02)
  • Sapgui 4.6D for Windows (01/28/02)
• Florian Weimer
  • Re: AW: IE https certificate attack (01/06/02)
• Franc Ruiz Arenas
  • File Transversal Vulnerability in Dino's WebServer (01/10/02)
• Frank Heyne
  • The "Lunch Break Hole" (01/21/02)
• frog frog
  • Cross Site Scripting in microsoft.com (01/06/02)
• funkysh
  • Inproper input validation in Bugzilla <=2.14 - exploit (01/06/02)
• Fyodor
  • Re: remote memory reading through tcp/icmp (01/21/02)
• g_463@hotmail.com
  • remote buffer overflow in sniffit (01/19/02)
• Gabriel A. Maggiotti
  • Script for find domino's users (01/31/02)
• Gabriel Maggiotti
  • UPNP Denial of Service (01/09/02)
• Gavin Lowe
  • RE: Long path exploit on NTFS (01/30/02)
• George Staikos
  • Re: AW: IE https certificate attack (01/06/02)
• Georgi Guninski
  • Re: IE GetObject() problems (01/04/02)
  • IE GetObject() problems (01/01/02)
• Greg Williamson
  • RE: Breakable (01/23/02)
• Guillaume PELAT
  • Re: cdrdao insecure filehandling (01/15/02)
• Gunzour
  • Re: FW: PHP 4.x session spoofing (01/15/02)
• H D Moore
  • Re: efax (01/16/02)
• Hacknisty
  • More information on alcatel speed touch home modem (01/22/02)
  • Bug in alcatel speed touch home adsl modem (01/11/02)
• Handle Nopman
  • PHP-Nuke allows Command Execution & Much more (01/16/02)
• hans.somers@nl.abnamro.com
  • Long path exploit on NTFS (01/30/02)
• HarryM
  • Fairly serious vulnerability in vBulletin 2.2.0 (01/31/02)
• Helmut Springer
  • Re: IE https certificate attack (01/06/02)
• Holger Zimmermann
  • Re: Pi3Web Webserver v2.0 Buffer Overflow Vulnerability (01/21/02)
• Huagang Xie
  • LIDS Security Advisory 1 (01/09/02)
• Indra Kusuma
  • PhpSmsSend remote execute commands bug (01/29/02)
• Information Anarchy 2K01
  • NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting (01/15/02)
• InterWN Labs
  • Cross-Site Scripting Vuln... (01/24/02)
• IT Resource Center
  • HP-UX security bulletins digest (01/25/02)
  • HP Secure OS Software for Linux security bulletins digest (01/25/02)
  • HP-UX security bulletins digest (01/08/02)
  • HP Secure OS Software for Linux security bulletins digest (01/05/02)
• Ivan Sergio Borgonovo
  • IE FORM DOS (01/15/02)
• J_Bourdeau@videotron.ca
  • Full path disclosure vulnerabilty in Sun's Web site (01/26/02)
• Jarno Huuskonen
  • Re: tac_plus version F4.0.4.alpha on at least Solaris 8 sparc (01/31/02)
• Jason Johns - SAS(IT)
  • DoS bug on Tru64 (01/30/02)
• Jason Lutz
  • Handspring Visor D.O.S (01/10/02)
• Jass Seljamaa
  • Macinosh IE file execuion vulerability (01/22/02)
• Jeff Mills
  • RE: Citrix NFuse 1.6 (01/22/02)
• Jeffrey W. Dronenburg
  • MSIE 6.0 will rollback during XP Pro Install -- Ref: MSIE may download and run programs automatically - details (01/15/02)
• jelmer
  • More reading of local files in MSIE (01/04/02)
• Jens Steube
  • cdrdao insecure filehandling (01/13/02)
• Jerome Etienne
  • Security weaknesses of VTun (01/10/02)
  • Security flaws in tinc (01/09/02)
  • Vulnerability in encrypted loop device for linux (01/02/02)
• jG gM
  • dtterm exploit in Unixware 7.1.1 (01/08/02)
  • CDE bug in Unixware 7.1 (01/08/02)
  • xterm exploit in Unixware 7.0.1 (01/08/02)
• jGgM.
  • Unixware 7.1.1 scoadminreg.cgi local exploit (01/21/02)
  • Unixware 7.1.1 rpc.cmsd remote exploit code. (01/10/02)
• Jim
  • Re: D-Link DWL-1000AP can be compromised because of SNMP configuration (01/23/02)
• Jim Knoble
  • rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available) (01/27/02)
  • Re: IE https certificate attack (01/08/02)
• joetesta@hushmail.com
  • Vulnerability in hellbent (01/18/02)
• John Bissell
  • Vulnerabilty in PaintBBS v1.2 (01/23/02)
• John Cantu
  • Allaire Forums Vulnerability (01/09/02)
• John Duksta
  • Re: Linksys 'routers', SNMP issues (01/07/02)
• John Percival
  • Semi-serious vulnerability in vBulletin 2.2.0 (01/31/02)
• John.Airey@rnib.org.uk
  • RE: [RHSA-2001:165-08] The uuxqt utility can be used to execute a rbitrary commands as uucp.uucp (01/18/02)
• Jon Zobrist
  • sltrib.com, using nacorp.com's web forms are submitted insecurely, and are clearly promoted as being secure (01/21/02)
• Jonas Eriksson
  • Sudo version 1.6.4 now available (fwd) (01/14/02)
• Jonathan A. Zdziarski
  • RE: Breakable (01/18/02)
  • RE: Breakable (01/17/02)
  • Re: gzip bug w/ patch.. (01/06/02)
• Jordan Ritter
  • w00w00 on AIM Filter (Backdoors & SpyWare) (01/08/02)
• Jouko Pynnonen
  • MSIE may download and run programs automatically - details (01/14/02)
• Juan M. de la Torre
  • Heap overflow in snmpnetstat (01/03/02)
• K.J.Mueller@EnBW.com
  • AW: IE https certificate attack (01/03/02)
• Keith Dallara
  • Mail.com Cross Site Scripting Vulnerability (01/04/02)
• keith royster
  • VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAILURE (01/04/02)
• Ken.Williams@ey.com
  • Re: Linksys 'routers', SNMP issues (01/09/02)
• Kevin A. Nassery
  • tac_plus version F4.0.4.alpha on at least Solaris 8 sparc (01/31/02)
• Kevin L. Poulsen
  • Breakable (01/16/02)
• KF
  • Re: ISSTW Security Advisory Tarantella Enterprise 3.11.903 Directory Index Disclosure Vulnerability (01/25/02)
  • pldaniels - ripMime 1.2.6 and lower? (01/22/02)
  • Re: USPS Online Bill Pay - Cleartext Password Leakage (01/20/02)
  • Clanlib overflow / Super Methane Brothers overflow (01/15/02)
  • Re: Snort core dumped (01/10/02)
  • Details on the updated namazu packages that are available (01/10/02)
• Konstantin Riabitsev
  • Re: squirrelmail bug (01/24/02)
• Kurt Seifried
  • KSSA-003 - Multiple windows file wiping utilities do not properly wipe data with NTFS (01/21/02)
  • KSSA-003 - Multiple windows file wiping utilities do not properly wipe data with NTFS (01/21/02)
• Lance Hitchcock Jr.
  • Internet Explorer Javascript Modeless Popup Local Denial of Service Vulnerability (01/06/02)
• Larry W. Cashdollar
  • Vulnerability report for Tarantella Enterprise 3. (01/26/02)
• Leif Sawyer
  • RE: Long path exploit on NTFS (01/30/02)
• Luciano Miguel Ferreira Rocha
  • Re: cdrdao insecure filehandling (01/17/02)
• Mandrake Linux Security Team
  • MDKSA-2002:011 - gzip update (01/31/02)
  • MDKSA-2002:010 - enscript update (01/28/02)
  • MDKSA-2002:009 - rsync update (01/28/02)
  • MDKSA-2002:008 - jmcce update (01/22/02)
  • MDKSA-2002:007 - at update (01/19/02)
  • MDKSA-2002:004 - stunnel update (01/16/02)
  • MDKSA-2002:003 - sudo update (01/16/02)
  • MDKSA-2001:095-1 - glibc update (01/09/02)
  • MDKSA-2002:001 - bind update (01/09/02)
  • MDKSA-2002:002 - mutt update (01/09/02)
• Marc Slemko
  • Mozilla Cookie Exploit (01/22/02)
  • Re: Denial of Service flaw in Apache (01/07/02)
• Mark A. Rowe (PenTest)
  • [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache (01/07/02)
• Mark Coleman
  • Re: AIM addendum (01/03/02)
• martin f krafft
  • Re: cdrdao insecure filehandling (01/16/02)
• Martin Mačok
  • Re: remote memory reading through tcp/icmp (linux) (01/22/02)
• Martin Roesch
  • Re: Snort core dumped (01/11/02)
• Martin Schulze
  • [SECURITY] [DSA 107-1] New jgroff packages fix printf format problem (01/30/02)
  • [SECURITY] [DSA 102-2] New at packages really fix heap corruption vulnerability (01/18/02)
  • [SECURITY] [DSA 102-1] New at packages fix heap corruption vulnerability (01/16/02)
  • [SECURITY] [DSA 099-1] New XChat packages fix potential IRC session hijacking (01/12/02)
  • [SECURITY] [DSA 101-1] New sudo packages fix local root exploit (01/14/02)
  • [SECURITY] [DSA 100-1] New gzip packages fix potential buffer overflow (01/13/02)
  • [SECURITY] [DSA 097-1] New versions of Exim fix uncontrolled program execution (01/04/02)
• Matt Chapman
  • Re: DoS bug on Tru64 (01/31/02)
• Matt Conover
  • Re: AIM addendum (01/02/02)
  • AIM addendum (01/02/02)
  • w00w00 on AOL Instant Messenger (serious vulnerability) (01/02/02)
• Matthew Dent
  • Re: USPS Online Bill Pay - Cleartext Password Leakage (resolved) (01/23/02)
  • USPS Online Bill Pay - Cleartext Password Leakage (01/19/02)
• Matthew S. Hallacy
  • Linksys 'routers', SNMP issues (01/06/02)
• methodic
  • [AP] awhttpd v2.2 local DoS (01/04/02)
• Michael Fellows
  • Re: IE GetObject() problems (01/03/02)
• Michael Jennings
  • Re: Eterm SGID utmp Buffer Overflow (Local) (01/21/02)
• Michael Wojcik
  • RE: remote memory reading through tcp/icmp (01/22/02)
• Michal Zalewski
  • Re: Pine 4.33 (at least) URL handler allows embedded commands. (01/06/02)
• Microsoft
  • Microsoft Security Bulletin MS02-001 (01/31/02)
• Moorhouse, Walt P
  • RE: Long path exploit on NTFS (01/31/02)
  • RE: w00w00 on AOL Instant Messenger (serious vulnerability) (01/02/02)
• natecars@real-time.com
  • Re: XP automatic recognition of Nokia as NIC? (12/31/01)
• Nathan Andrew Carter
  • For European and Asian Knowledge Seekers (01/24/02)
• Neeko Oni
  • Re: Aftpd core dump vulnerability (01/07/02)
• NetBSD Security Officer
  • NetBSD Security Advisory 2002-001 Close-on-exec, SUID and ptrace(2) (01/16/02)
• NGSEC Research Team
  • [NGSEC] Whitepaper Released: Polymorphic shellcodes vs. Application IDSs (01/24/02)
• Nick FitzGerald
  • Re: ICQ remote buffer overflow vulnerability (01/08/02)
• NIKEBOY@retemail.es
  • BOOZT! Standard CGI Vulnerability : Exploit Released (01/10/02)
• NOKUBI Takatsugu
  • Re: Details on the updated namazu packages that are available (01/11/02)
• Nu Omega Tau
  • Re: Aftpd core dump vulnerability (01/07/02)
  • Faqmanager.cgi file read vulnerability (01/07/02)
  • Aftpd core dump vulnerability (01/07/02)
• Obscure
  • RE: CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor] (01/10/02)
  • CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor] (01/09/02)
• Ofir Arkin
  • Identifying PGP Corporate Desktop 7.1 with PGPfire Personal Desktop Firewall Installed (no need to be enabled) on Microsoft Windows Based OSs (01/25/02)
• Omkhar Arasaratnam
  • Vulnerability Netgear RP-114 Router - nmap causes DOS (01/15/02)
• palante@subterrain.net
  • msdtc on 3372 (01/31/02)
• Patrick Chambet
  • Re: UPNP Denial of Service (01/10/02)
• Paul Schmehl
  • Re: AIM addendum (01/03/02)
  • Re: AIM addendum (01/02/02)
• Pavel Kankovsky
  • Re: cdrdao insecure filehandling (01/20/02)
• Perry Harrington
  • Re: XP automatic recognition of Nokia as NIC? (12/31/01)
• Pete Finnigan
  • Re: Breakable (01/21/02)
• Peter Gründl
  • KPMG-2002003: Bea Weblogic DOS-device Denial of Service (01/08/02)
• Peter Santangeli
  • Shockwave Flash player issue (01/09/02)
• Philip Wagenaar
  • Novell Netware Login "bypass" to execute programs (01/11/02)
• Phuong Nguyen
  • Hosting Controller's - Multiple Security Vulnerabilities (01/05/02)
• PSIRT (Product Security Incident Response Team)
  • Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability (01/29/02)
• psychoid@rewtbox.de
  • psyBNC2.3 Beta - encrypted text spoofable in others irc terminal (01/23/02)
• Raistlin
  • Re: Handspring Visor D.O.S (01/11/02)
• Remko Catersels
  • Betr.: Long path exploit on NTFS (01/30/02)
• Replugge [Rod]
  • Kerberos 5 ftp client Core Dump (01/11/02)
• Richard M. Smith
  • Internet Explorer SuperCookies bypass P3P and cookie controls (01/15/02)
  • Serious privacy leak in Python for Windows (01/15/02)
  • Update on the SuperCookie issue (01/15/02)
• Robert Brewer
  • RE: Authorize.Net Plain Text Login Transmission (01/15/02)
• Robert Ellis
  • RE: address.com: email vulnerability (01/11/02)
• Roberts Ross
  • RE: DoS bug on Tru64 (01/30/02)
  • Compaq Tru64 patches for CERT VU#10277 (01/30/02)
• Rodent of Unusual Size
  • Re: autoresponder program could be tricked by spamers to send unsolicitedmail to victim's address (fwd) (01/11/02)
• Roger H. Goun
  • Re: Handspring Visor D.O.S (01/11/02)
• rolphin
  • CrossSiteScripting PostNuke. (01/06/02)
• Roman Drahtmueller
  • SuSE Security Announcement: at (SuSE-SA:2002:003) (01/16/02)
  • Re: Stunnel: Format String Bug update (01/08/02)
  • Re: Pine 4.33 (at least) URL handler allows embedded commands. (01/07/02)
  • SuSE Security Announcement: mutt (SuSE-SA:2002:001) (01/07/02)
• RoMaNSoFt
  • Re: PHP-Nuke allows Command Execution & Much more (01/24/02)
• Ronald F. Guilmette
  • Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9 (01/24/02)
• Root Extractor
  • [ WWWThreads, UBBThreads ] Security Hole in upload system (01/30/02)
• rpc
  • sastcpd 8.0 'authprog' local root vulnerability (01/31/02)
• rsanmcar@alum.uax.es
  • BOOZT! Standard 's administration cgi vulnerable to buffer overflow (01/05/02)
• s96192@ce.hannam.ac.kr
  • [ Hackerslab bug_paper ] Xkas application vulnerability (01/28/02)
• Sam Sargeant
  • Re: Fairly serious vulnerability in vBulletin 2.2.0 (01/31/02)
• Samy Kamkar
  • Automated remote CGI vulnerability discovery (01/11/02)
• Scott Brewster
  • Re: DoS bug on Tru64 (01/31/02)
• Scott Dier
  • Re: myvoicestream.com vulnerability (01/10/02)
• Scott Parish
  • security vulnerability in chuid (01/21/02)
• Sebastian Krahmer
  • SuSE Security Announcement: rsync (SuSE-SA:2002:004) (01/25/02)
  • SuSE Security Announcement: sudo (SuSE-SA:2002:002) (01/14/02)
• secure@conectiva.com.br
  • [CLA-2002:460] Conectiva Linux Security Announcement - pine (01/31/02)
  • [CLA-2002:459] Conectiva Linux Security Announcement - openldap (01/28/02)
  • [CLA-2002:458] Conectiva Linux Security Announcement - rsync (01/25/02)
  • [CLA-2002:455] Conectiva Linux Security Announcement - MySQL (01/18/02)
  • [CLA-2002:451] Conectiva Linux Security Announcement - sudo (01/15/02)
  • [CLA-2002:450] Conectiva Linux Security Announcement - proftpd (01/09/02)
  • [CLA-2002:449] Conectiva Linux Security Announcement - mutt (01/07/02)
  • [CLA-2002:448] Conectiva Linux Security Announcement - libgtop (01/03/02)
  • [CLA-2002:447] Conectiva Linux Security Announcement - glibc (01/03/02)
• security@caldera.com
  • Security Update: [CSSA-2002-SCO.2] Open UNIX, UnixWare 7: sort creates temporary files insecurely (01/25/02)
  • Security Update: [CSSA-2001-SCO.35.2] REVISED: OpenServer: setcontext and sysi86 vulnerabilities (01/23/02)
  • Security Update: [CSSA-2002-SCO.1] OpenServer: wu-ftpd ftpglob() vulnerability (01/10/02)
• security@devitry.com
  • C2IT.com Cross Site Scripting Vulnerability (01/07/02)
• SGI Security Coordinator
  • SGI IRIX: Various shells create temporary files insecurely update (01/28/02)
  • IRIX O2 video security issue (01/28/02)
  • IRIX nsd vulnerability update (01/16/02)
  • Network Queuing Environment (NQE) contains vulnerabilities (01/07/02)
• Simon Delicata
  • Re: Script for find domino's users (01/31/02)
• Simon Dick
  • Re: Handspring Visor D.O.S (01/11/02)
• Sinbad
  • Snort core dumped (01/10/02)
• SkyLined@mail.com
  • Re: IE FORM DOS (01/19/02)
• spi labs
  • SPI Labs SQL Injection Whitepaper Available (01/30/02)
• SQEHXLLBQUJX@spammotel.com
  • BSCW: Vulnerabilities and Problems (01/03/02)
• Steve Kneizys
  • Re: Agoracgi v3.3e Cross Site Scripting Vulnerability (01/25/02)
  • Re: Agoracgi v3.3e Cross Site Scripting Vulnerability (01/24/02)
• Steven M. Christey
  • Re: ZBServer Pro DoS Vulnerability (01/16/02)
• steven.sporen@za.pwcglobal.com
  • RE: Citrix NFuse 1.6 (01/23/02)
• Strumpf Noir Society
  • [resend] Strumpf Noir Society on BadBlue (01/21/02)
  • [resend] Avirt Gateway Telnet Vulnerability (and more?) (01/21/02)
  • Avirt Gateway Suite Remote SYSTEM Level Compromise (01/17/02)
  • Avirt Proxy Buffer Overflow Vulnerabilities (01/17/02)
  • BlackMoon FTPd Buffer Overflow Vulnerability (01/15/02)
• superpetz@hushmail.com
  • [SUPERPETZ ADVISORY #001 - agora.cgi Secret Path Disclosure Vulnerability] (01/29/02)
• Support Info
  • Security Update: [CSSA-2001-039.0] Linux - IMP/HORDE cross site scripting vulnerability (01/11/02)
• TAKAGI, Hiromitsu
  • Re: IE Clipboard Stealing Vulnerability (01/15/02)
• Tamer Sahin
  • Sambar Webserver v5.1 DoS Vulnerability (01/16/02)
  • ZBServer Pro DoS Vulnerability (01/15/02)
  • Web Server 4D/eCommerce 3.5.3 DoS Vulnerability (01/14/02)
  • Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability (01/14/02)
  • Pi3Web Webserver v2.0 Buffer Overflow Vulnerability (01/14/02)
  • Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability (Solution) (01/11/02)
  • Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability (01/10/02)
  • AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability (01/06/02)
  • Savant Webserver Buffer Overflow Vulnerability (01/05/02)
• Tekno pHReak
  • Timbuktu 6.0.1 and Older DoS Advisory (01/18/02)
• The Cyberiad
  • Re: Linksys 'routers', SNMP issues (01/07/02)
• the Pull
  • Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug (01/16/02)
  • Internet Explorer Pop-Up OBJECT Tag Bug (01/13/02)
  • Re: More reading of local files in MSIE (01/05/02)
  • Re: IE GetObject() problems (01/02/02)
• Thomas Roessler
  • [Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released. (01/01/02)
• Tim Yardley
  • RE: w00w00 on AIM Filter (Backdoors & SpyWare) (01/08/02)
• tmorgan-security@kavi.com
  • RealPlayer Buffer Overflow [Sentinel Chicken Networks Security Advisory #01] (01/25/02)
• Tom Gilder
  • IE Clipboard Stealing Vulnerability (01/12/02)
• Tom McAdam
  • Vulnerabilities in squirrelmail (01/24/02)
• Tom Micklovitch
  • File Extensions Spoofable in Windows Explorer (01/15/02)
  • Serious IE privacy issues (01/03/02)
• Tom.Lyne@kamino.com
  • Citrix NFuse 1.6 (01/22/02)
• Tozz
  • Denial of Service flaw in Apache (01/06/02)
• Trey Valenta
  • myvoicestream.com vulnerability (01/09/02)
• truff
  • Re: PHP-Nuke allows Command Execution & Much more (01/21/02)
• Trustix Secure Linux Advisor
  • TSLSA-2002-0025 - rsync (01/28/02)
  • TSLSA-2002-0003 - mutt (01/07/02)
• Tyler
  • Re: AIM addendum (01/04/02)
• UCX Foe
  • Re: DoS bug on Tru64 (01/31/02)
• uid0@catastrophe.net
  • Re: Breakable (01/18/02)
• user@compulabs.dhs.org
  • autoresponder program could be tricked by spamers to send unsolicited mail to victim's address (01/11/02)
• Venkatesh babu Sira
  • Legato Vulnerable (01/10/02)
• Victor Kruger
  • Palm Desktop 4.0b76-77 for Mac OS X (01/13/02)
• vps-support
  • RE: Re : Fw: VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAI LURE (#5947-000093-7546\939465) (01/06/02)
• wannabe anonymousplease
  • address.com: email vulnerability (01/09/02)
• Watung Arif
  • Cross-Site Vulnerabilities (Still) Found in Major Web Sites (01/21/02)
• Wichert Akkerman
  • [SECURITY] [DSA-106-1] rsync remote exploit (01/26/02)
  • [SECURITY] [DSA-105-1] enscript creates temporary files insecurely (01/21/02)
  • [SECURITY] [DSA-089-2] updated i386 icecast-server package (01/21/02)
  • [SECURITY] [DSA-104-1] CIPE DoS attack (01/14/02)
  • [SECURITY] [DSA-103-1] glibc buffer overflow (01/13/02)
  • [SECURITY] [DSA-098-1] two libgtop security problems (01/09/02)
  • [SECURITY] [DSA-096-2] mutt buffer overflow, sparc update (01/03/02)
  • [SECURITY] [DSA-096-1] mutt buffer overflow (01/02/02)
• William D. Colburn (aka Schlake)
  • Re: [VulnWatch] sastcpd Buffer Overflow and Format String Vulnerabilities (01/29/02)
• Wodahs Latigid
  • sastcpd Buffer Overflow and Format String Vulnerabilities (01/29/02)
  • Re: efax (01/16/02)
• Wojtek Pilorz
  • Re: gzip bug w/ patch.. (12/31/01)
• Wolfgang Fischer
  • Re: Legato Vulnerable (01/10/02)
• Woody Hughes
  • Vulnerability in new user creation in Geeklog 1.3 (01/04/02)
• xperc
  • Chinput Buffer Overflow Vulnerability (01/16/02)
• Zeeshan Mustafa
  • IMail Web Service User Aliases / Mailing Lists Admin Vulnerability (12/31/01)
• zen-parse
  • Re: uucp --config patch -- not sufficient (01/21/02)
  • uucp --config patch -- not sufficient (01/18/02)
  • '/usr/bin/at 31337 + vuln' problem + exploit (01/17/02)
  • xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2) (01/09/02)
  • Re: Pine 4.33 (at least) URL handler allows embedded commands. (01/07/02)
  • Pine 4.33 (at least) URL handler allows embedded commands. (01/05/02)
• zeno
  • Cgisecurity Paper #4: Header Based Exploitation: Web Statistical Software Threats (01/23/02)
• Zoid
  • Re: Vulnerability Netgear RP-114 Router - nmap causes DOS (01/15/02)

Last message date: 01/31/02
Archived on: 01/31/02 CET

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint