SecurityFocus Bugtraq
By Author

Starting: 02/01/02
Ending: 02/28/02

• 'ken'@FTU
  • Four More ScriptEase MiniWeb Server v0.95 DoS Attacks (02/20/02)
  • Dino's Webserver v1.2 DoS, possible overflow (02/18/02)
• (no name)
  • Aprisma Response to CERT Advisory (02/14/02)
• - phinegeek -
  • texis(CGI) Path Disclosure Vulnerability (02/06/02)
• 3APA3A
  • LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup (02/27/02)
  • SECURITY.NNOV: Special device access in The Bat! (02/27/02)
  • Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general) (02/27/02)
  • SECURITY.NNOV: Bypassing content filtering software (02/15/02)
  • dH & SECURITY.NNOV: buffer overflow in mshtml.dll (02/13/02)
• ][-][UNTER
  • BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY (02/27/02)
  • BPM STUDIO PRO 4.2 DOS DEVICE PATH VULNERABILITY (02/27/02)
• _kiss_@guay.com
  • KICQ 2.0.0b1 can be remotely crashed (02/01/02)
• Adam Lydick
  • Re: Infecting the KaZaA network? (unlikely) (02/07/02)
• Adonis.No.Spam
  • BlackIce 2.9 car Latest with patch "DOS attacks with URG Flag Set ARE NOT LOGGED" (02/15/02)
  • Windows XP Remote DOS attacks with SYN Flag. Make CPU 100 % (02/15/02)
  • This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP (02/11/02)
  • Trojan / Spyware Connection made to 64.240.175.18 every time you use IE ANti-spyware Anti-virus wont detect it. (02/05/02)
• advisories
  • Re: Vulnerability in Black ICE Defender (02/05/02)
• Ahmet Sabri ALPER
  • [ARL02-A03] DCP-Portal Cross Site Scripting Vulnerability (02/15/02)
  • [ARL02-A02] DCP-Portal Root Path Disclosure Vulnerability (02/15/02)
• Aidan O'Kelly
  • RE: SECURITY.NNOV: Bypassing content filtering software (02/18/02)
• Alan DeKok
  • DoS Attack against many RADIUS servers (02/21/02)
• Aleksander Posmyk
  • ScriptEase:WebServer Edition vulnerability (02/24/02)
• Alex Forkosh
  • Viewing arbitrary file from the file system using Eshare Expressions 4 server (02/05/02)
• Alex Hernandez
  • Phusion-Webserver-v1.0-Bugs&Exploits-Remotes (02/17/02)
• Alexander K. Yezhov
  • Re: Deanonymizing SafeWeb Users (02/15/02)
• Alexander Poizner
  • RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS (02/01/02)
• Alun Jones
  • Re: Infecting the KaZaA network? (02/08/02)
• Andreas Baetz
  • Re: Sapgui 4.6D for Windows (02/04/02)
• Andrej Todosic
  • verisign payment site backdoor ? (02/08/02)
• Andrew Clover
  • CNet CatchUp arbitrary code execution (02/20/02)
  • CSS visited pages disclosure (02/20/02)
• Andrew Griffiths
  • codeblue remote root (02/15/02)
• Andrew McClymont
  • RE: Infecting the KaZaA network? (02/07/02)
  • Infecting the KaZaA network? (02/06/02)
• Andrew Simmons
  • Re: new advisory (02/05/02)
• Andrey Kazakov
  • BUG: Kmail client DoS (02/26/02)
• andy
  • RE: Long path exploit on NTFS (02/07/02)
• b0iler _
  • "Cthulhu xhAze" - Command execution in Ans.pl (02/21/02)
  • Add2it Mailman command execution (02/14/02)
  • SIPS - vulnerable to anyone gaining admin access. (02/12/02)
  • Re: new advisory - (filtering problems) (02/07/02)
• Barney Wolff
  • Re: Mrtg Path Disclosure Vulnerability (02/04/02)
• Barry McGeorge
  • Re: SNMP Enabled on Dell Servers (02/14/02)
• Bela Lubkin
  • nmap vs. inetd on Caldera (ex-SCO) OpenServer, Re: DoS bug on Tru64 (02/05/02)
• Ben Laurie
  • Re: Infecting the KaZaA network? (02/10/02)
• Ben Ryan
  • Remote DoS in Netgear RM-356 (02/15/02)
• Blake Frantz
  • Account theft vulnerability in MakeBid Auction Deluxe 3.30 (02/09/02)
  • Re: CSS -> ign.com (02/07/02)
• Blake, Scott
  • RE: BindView NetInventory NetRC hostcfg_ni password passed in cle ar text (02/14/02)
• Bob Fiero
  • Re: Citrix NFuse 1.6 - additional network exposure (02/20/02)
• Brad Maloney
  • Re: Infecting the KaZaA network? (02/07/02)
• Brandon Bray
  • In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature (02/15/02)
• Brian Gallagher
  • Re: Authorize.Net Plain Text Login Transmission (02/13/02)
• Brian McWilliams
  • Re: Windows Media Player executes WMF content in .MP3 files. (02/24/02)
• bugtraq@t-swat.com
  • Re: DoS bug on Tru64 (02/05/02)
• bugzilla@redhat.com
  • [RHSA-2002:028-13] Updated 2.4 kernel available (02/27/02)
  • [RHSA-2002:029-09] New squid packages available (02/26/02)
  • [RHSA-2002:020-05] Updated ncurses4 compat packages are available (02/21/02)
  • [RHSA-2001:163-20] Updated ucd-snmp packages available (02/12/02)
• c c
  • MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS (02/19/02)
• Calanan, Michael
  • RE: Symantec LiveUpdate (02/26/02)
• Campbell, Dirk
  • RE: svindel.net security advisory - web admin vulnerability in Ca cheOS (02/05/02)
• Chad Loder
  • Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service (02/07/02)
  • Re: Lotus Domino password bypass (02/04/02)
  • Re: Script for find domino's users (02/01/02)
• Chris Bisnett
  • Re: Re: Remote crashes in Yahoo messenger (02/23/02)
  • Re: Remote crashes in Yahoo messenger (02/23/02)
• Chris Lathem
  • Re: NetScreen Response to ScreenOS Port Scan DoS Vulnerability (02/06/02)
  • NetScreen ScreenOS 2.6 Subject to Trust Interface DoS (02/01/02)
• Chris Paget
  • RE: Vulnerability in Black ICE Defender (02/05/02)
• Chris Ren
  • Microsoft C++ feature against buffer overflows itself vulnerable (02/14/02)
• Chris Wilson
  • Re: SNMP test suite vs. Motorola SB4100 cable modem (02/17/02)
• Christian Vezina
  • Re: Netgear RT311/RT314 (02/05/02)
• Christophe Bousquet
  • Re: Long path exploit on NTFS (02/06/02)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Data Leak with Cisco Express Forwarding (02/27/02)
  • Cisco Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability (02/07/02)
• ciscosux@hushmail.com
  • -Possible- licq D.o.S (02/06/02)
• Clinton Smith
  • Re: Zero One Tech (ZOT) P100s PrintServer and SNMP (02/21/02)
  • Zero One Tech (ZOT) P100s PrintServer and SNMP (02/21/02)
• Colby Marks
  • RE: Security Advisory - #1 (02/08/02)
• Corey J. Steele
  • [Fwd: RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall]] (02/25/02)
  • RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall] (02/22/02)
• Crispin Cowan
  • Re: In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature (02/15/02)
  • Sardonix Security Auditing Portal (02/05/02)
• Daniel Jacobowitz
  • [SECURITY] [DSA-113-1] New ncurses packages available (02/19/02)
• darky0da@hushmail.com
  • Vulnerability in Sawmill for Solaris v. 6.2.14 (02/11/02)
• Dave Ahmad
  • Exim 3.34 and lower (fwd) (02/13/02)
  • Re: Mrtg Path Disclosure Vulnerability (02/04/02)
• Dave Killion
  • RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS (02/01/02)
• Dave Wilson
  • DW020203-PHP clarification (02/06/02)
  • PHP Safe Mode Filesystem Circumvention Problem (02/03/02)
• David Choi
  • Re: Vulnerability in all versions of DCForum from dcscripts.com (02/01/02)
• david evlis reign
  • Re: Cert Advisory 2002-03 and HP JetDirect (02/22/02)
• David F. Skoll
  • Re: Anti Virus Mailscanners DOS (02/26/02)
  • RE: Non existing attachments, more info (02/19/02)
  • Re: Non existing attachments, more info (02/18/02)
  • Re: Outlook will see non-existing attachments (02/15/02)
• David Frascone
  • Re: DoS Attack against many RADIUS servers (02/22/02)
• David Korn
  • Windows Media Player executes WMF content in .MP3 files. (02/22/02)
  • RE: Long path exploit on NTFS (02/07/02)
• David LeBlanc
  • RE: In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature (02/15/02)
  • ITS4 from Cigital flawed (02/18/02)
  • RE: Microsoft C++ feature against buffer overflows itself vulnerable (02/14/02)
• David Litchfield
  • Hackproofing Oracle Application Server paper (02/06/02)
  • Re: Script for find domino's users (02/04/02)
  • Re: Lotus Domino password bypass (02/04/02)
• David Martin
  • Deanonymizing SafeWeb Users (02/12/02)
• David P. Maynard
  • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... (02/06/02)
  • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... (02/03/02)
• David Sexton
  • RE: Long path exploit on NTFS (02/05/02)
• dendler@idefense.com
  • Astaro Security Linux Improper File Permissions Flaw (02/12/02)
• Dennis Henderson
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/20/02)
• Devrim SERAL
  • Re: tac_plus version F4.0.4.alpha on at least Solaris 8 sparc (02/01/02)
• Didier Arenzana
  • RE: Long path exploit on NTFS (02/05/02)
• Dmitry Guyvoronsky
  • Re: Security Advisory - #1 (02/08/02)
• Drew Simonis
  • Re: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS (02/05/02)
• Dustin Miller
  • RE: MSN Messenger and UDP 1900 (02/06/02)
• dzzie@yahoo.com
  • Re: HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technical exercise] (02/08/02)
• E M
  • Intel.com Mailing List Arbitrary Address Removal Link (02/06/02)
• Ed Moyle
  • mod_ssl Buffer Overflow Condition (Update Available) (02/27/02)
• Eduardo R. Maciel
  • Anti Virus Mailscanners DOS (02/25/02)
• Elan Hasson
  • RE: Long path exploit on NTFS (02/07/02)
• Elie aka \
  • Using Environment for returning into Lib C (02/27/02)
• Fleming, Diane
  • RE: Long path exploit on NTFS (02/04/02)
• Florian Weimer
  • RUS-CERT Advisory 2002-02:01: Temporary file handling in GNAT (02/12/02)
• Francisco Sáa Muñoz
  • cachemgr.cgi (2.3STABLE4) (and 2) (02/06/02)
  • cachemgr.cgi (squid 2.3STABLE4) (02/04/02)
• Frank
  • AdMentor Login Flaw (02/21/02)
• Frank Bulk
  • Security issue with GroupWise 6 and LDAP authentication in PostOffice (02/20/02)
• Frank Heyne
  • RE: Long path exploit on NTFS (02/08/02)
  • Re: Long path exploit on NTFS (02/04/02)
• freewarecollector@hotmail.com
  • A reason for concern over ie's GetObject() vulnerabilities... Hotmail... (02/25/02)
• Frog Man
  • Re: Mrtg Path Disclosure Vulnerability (02/04/02)
• Gabriel A. Maggiotti
  • Lotus Domino password bypass (02/04/02)
• Gary McGraw
  • RE: ITS4 from Cigital flawed (02/21/02)
  • Microsoft compiler flaw, Cigital responds (02/15/02)
• Geoff Sweet
  • RE: MSN contact list disclosure (02/09/02)
• GertJan de Leeuw
  • Re: Infecting the KaZaA network? (02/08/02)
• Global InterSec Research
  • [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities (02/08/02)
• godminus
  • Re: Open Bulletin Board javascript bug. (02/26/02)
• Gogel, Derryle
  • SCO UnixWare 7.1.X (02/12/02)
• Greg Fraize
  • Re: CheckPoint FW1 HTTP Security Hole (02/21/02)
• Grimes, Roger
  • RE: Non existing attachments, more info (02/19/02)
• h1kari
  • Practical Exploitation of RC4 Weaknesses in WEP Environments (02/26/02)
• haiku@hushmail.com
  • Century Software Term Exploit (02/27/02)
• Hans Somers
  • Re: Long path exploit on NTFS (02/04/02)
• Harald Welte
  • security advisory linux 2.4.x ip_conntrack_irc (02/27/02)
• Henrik Nordstrom
  • Squid HTTP Proxy Security Update Advisory 2002:1 (02/21/02)
• http-equiv@malware.com
  • HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technical exercise] (02/08/02)
• Huseyin Uslu
  • Security Issue in Icewarp (02/09/02)
• Information Security
  • Cert Advisory 2002-03 and HP JetDirect (02/19/02)
• Irib
  • Security BugWare : Alcatel 4400 PBX hack (02/19/02)
• IT Resource Center
  • HP-UX security bulletins digest (02/15/02)
  • HP-UX security bulletins digest (02/13/02)
  • HP Secure OS Software for Linux security bulletins digest (02/13/02)
• James Martin
  • Buffer overflow in mIRC allowing arbitary code to be executed. (02/03/02)
• Jamie McCarthy
  • [SA-2002:01] Slashcode login vulnerability (02/19/02)
• Jamie Oulman
  • Re: Why is Microsoft watching us watch DVD movies? (02/21/02)
• Jarno Huuskonen
  • OT: Netscape security contact ? (02/08/02)
• Jason Haar
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/21/02)
  • Re: Non existing attachments, more info (02/20/02)
• Jason Hicks
  • Re: Mrtg Path Disclosure Vulnerability (02/08/02)
• Javier Sanchez
  • Symantec LiveUpdate (02/25/02)
• Jay D. Thomson
  • RE: Script for find domino's users (02/08/02)
• Jedi/Sector One
  • Re: Anti Virus Mailscanners DOS (02/26/02)
  • AtheOS: escaping from a chroot jail (02/07/02)
• jelmer
  • winamp and wma Song Licenses (02/15/02)
• Jens Liebchen
  • pforum: cross-site-scripting bug (02/22/02)
  • pforum: mysql-injection-bug (02/16/02)
• Jeremy Epstein
  • RE: ITS4 from Cigital flawed (02/22/02)
• Jethro Rose
  • RE: DoS bug on Tru64 (02/01/02)
• jGgM.
  • Unixware Message catalog exploit code (02/10/02)
• jhyou@chonnam.chonnam.ac.kr
  • EasyBoard 2000 Remote Buffer Overflow Vulnerability (02/11/02)
• jlewis@lewis.org
  • RE: Intel.com Mailing List Arbitrary Address Removal Link (02/09/02)
• Joe Drew
  • Re: mpg321 (02/13/02)
• Joel Maslak
  • Re: Intel.com Mailing List Arbitrary Address Removal Link (02/07/02)
• Johannes Westerink
  • Microsoft .NET faults (02/04/02)
• Jon Keating
  • RE: -Possible- licq D.o.S (02/08/02)
• Jonathan G. Lampe
  • RE: Whose X do I need to X to get on CERT? (02/21/02)
  • Whose X do I need to X to get on CERT? (02/19/02)
• Jose Nazario
  • Re: another hanterm exploit (02/09/02)
• Joshua Newton
  • Re: Cert Advisory 2002-03 and HP JetDirect (02/20/02)
• Jouko Pynnonen
  • Squid buffer overflow (02/22/02)
• Just Marc
  • Re: Why is Microsoft watching us watch DVD movies? (02/23/02)
• Justin
  • RE: Open Bulletin Board javascript bug. (02/27/02)
• Jörg Lübbert
  • Vulnerabilities in Astaro Security Linux 2.016 (02/02/02)
• Keith Simonsen
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/23/02)
• Keith T. Morgan
  • RE: Black ICE Ping Vulnerability Side Note (02/06/02)
• Kevin Day
  • Re: Buffer overflow in mIRC allowing arbitary code to be executed. (02/05/02)
• Knud Erik Højgaard
  • RE: Intel.com Mailing List Arbitrary Address Removal Link (02/08/02)
  • CSS -> ign.com (02/05/02)
• KOJIMA Hajime
  • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities (02/08/02)
• Konrad Rieck
  • Re: Why is Microsoft watching us watch DVD movies? (02/25/02)
  • Re: Why is Microsoft watching us watch DVD movies? (02/22/02)
• Kris Kennaway
  • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities (02/09/02)
• Kronos Yademos
  • ICQ Bug possibly? (02/01/02)
• Kurt Seifried
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/23/02)
• Larry W. Cashdollar
  • Exploit for Tarantella Enterprise installation (bid 4115) (02/24/02)
  • Re: Another local root vulnerability during installation of Tarantella Enterprise 3. (02/19/02)
  • Another local root vulnerability during installation of Tarantella Enterprise 3. (02/19/02)
• Leon Ward
  • Castelle Faxpress: Password used for NT Print queue can be discl osed in Plain Text (02/05/02)
• Lex de Heer
  • Re: Re:ICQ Bug possibly? (02/04/02)
• Louie Martinez
  • MSN Messenger and UDP 1900 (02/06/02)
• Mandrake Linux Security Team
  • MDKSA-2002:016-1 - squid update (02/27/02)
  • MDKSA-2002:015 - cups update (02/15/02)
  • MDKSA-2002:014 - ucd-snmp update (02/15/02)
  • MDKSA-2002:013 - openldap update (02/12/02)
  • MDKSA-2002:012 - groff update (02/08/02)
• Marc Maiffret
  • ALERT: ISS BlackICE Kernel Overflow Exploitable (02/09/02)
• Mark Ng
  • Long Path Exploit on NTFS (02/06/02)
• Mark Renouf
  • Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) (02/07/02)
• mark-bugtraq@thunderstone.com
  • Re: texis(CGI) Path Disclosure Vulnerability (02/11/02)
• Markus Hennig
  • RE: Astaro Security Linux Improper File Permissions Flaw (02/12/02)
  • Astaro Response: Vulnerabilities in Astaro Security Linux 2.016 (02/06/02)
• Martin Lesser
  • Re: Anti Virus Mailscanners DOS (02/26/02)
• Martin O'Neal
  • Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies (02/20/02)
  • Symantec Enterprise Firewall (SEF) Notify Daemon data loss via SN MP (02/20/02)
• Martin Schulze
  • [SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure (02/21/02)
  • [SECURITY] [DSA 112-1] New hanterm packages fix buffer overflow (02/16/02)
  • [SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow (02/13/02)
  • [SECURITY] [DSA 109-1] New Faq-O-Matic packages fix cross-site scripting vulnerability (02/13/02)
  • [SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access (02/08/02)
  • [SECURITY] [DSA 108-1] New wmtv packages fix symlink vulnerability (02/07/02)
• Matt Groves
  • RE: Whose X do I need to X to get on CERT? (02/20/02)
• Matt Taylor
  • Vulnerability in Black ICE Defender (02/04/02)
• Menashe Eliezer
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall] (02/26/02)
• Microsoft Security Response Center
  • Cross-site Scripting Vulnerability in .Net Framework (02/07/02)
• Mike Benham
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/19/02)
• Mike Kouri
  • NetScreen Response to ScreenOS Port Scan DoS Vulnerability (02/05/02)
• Mike Rogers
  • Re: Alteon ACEdirector signature/security bug (02/08/02)
• mrjade 2k2
  • Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability. (02/22/02)
• Nathan Neulinger
  • Insecure installations of cgi wrappers (RTFM people!) (02/05/02)
• NGSEC Research Team
  • [NGSEC-2002-1] Ettercap, remote root compromise (02/14/02)
• NGSSoftware Insight Security Research
  • Netwin Webnews Buffer Overflow Vulnerability (#NISR18022002) (02/18/02)
  • NetWin CWMail.exe Buffer Overflow (02/13/02)
  • JSP translation file access under Oracle 9iAS (02/06/02)
  • Multiple Buffer Overflows in Oracle 9iAS (02/06/02)
  • Remote Compromise in Oracle 9i Database Server (02/06/02)
• Nick Wilkens
  • Re: Sapgui 4.6D for Windows (02/01/02)
• nicob@nicob.net
  • Re: Script for find domino's users (02/01/02)
• nicolas brulez
  • Avirt 4.2 question (02/20/02)
• Nicolas Gregoire
  • Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service (02/07/02)
  • Re : Lotus Domino password bypass (02/04/02)
• Noam Eppel
  • MorningStar.ca Canada And Security Practices (02/08/02)
• nobody
  • Possible privilege escalation with NDS for NT (01/31/02)
• Nojan Moshiri
  • Re: verisign payment site backdoor ? (02/08/02)
• obscure
  • Gator installer Plugin allows any software to be installed (02/20/02)
  • Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) (02/07/02)
• Patrick Kuiper
  • Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) (02/07/02)
• Patrick M. Hausen
  • Re: Why is Microsoft watching us watch DVD movies? (02/21/02)
• Paul A Roberts
  • Identix BioLogon 3 (02/12/02)
• Paul Brereton
  • Advisory #3 - PHP & JSP (02/07/02)
  • PHP Advisory #2 (02/07/02)
  • Security Advisory - #1 (02/07/02)
• Paul L Daniels
  • Outlook \r expliots - ripMIME fix. (02/18/02)
  • Re: Outlook will see non-existing attachments (02/15/02)
• peleus
  • Correction: Re: Deanonymizing SafeWeb Users (02/13/02)
  • Re: Deanonymizing SafeWeb Users (02/14/02)
• Peter Bieringer
  • RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall] (02/22/02)
• Peter Gründl
  • KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service (02/04/02)
• Peter Mell
  • Last Call for Papers - RAID 2002 (02/26/02)
• Peter Miller
  • RE: Symantec LiveUpdate (02/26/02)
• Pim van Riezen
  • Arescom NetDSL-1000 telnetd DoS (02/09/02)
• Piotr Klaban
  • Re: Anti Virus Mailscanners DOS (02/26/02)
• Powers, James L.
  • SNMP test suite vs. Motorola SB4100 cable modem (02/16/02)
• Powertech
  • arescom 800 authentification flaw (02/08/02)
• pre
  • [GSA2002-01] Web browsers ignore the Content-Type header, thus allowing cross-site scripting (02/12/02)
• Proescholdt, timo
  • RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall] (02/21/02)
• Randal L. Schwartz
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/21/02)
• Red Wolf
  • Lotus Domino password bypass (02/04/02)
• Richard Burton
  • MSN Messenger reveals your name to websites (and can reveal email addresses too) (02/02/02)
• Richard Hafner
  • Published Report of Vulnerability in Lucent VitalSuite Software (02/05/02)
• Richard M. Smith
  • RE: Why is Microsoft watching us watch DVD movies? (02/27/02)
  • RE: Gator installer Plugin allows any software to be installed (02/22/02)
  • Why is Microsoft watching us watch DVD movies? (02/20/02)
• Robert Graham
  • more SNMP notes (02/13/02)
• Rodent of Unusual Size
  • Re: autoresponder program could be tricked by spamers to send unsolicitedmail to victim's address (fwd) (02/04/02)
• Ronald F. Guilmette
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/21/02)
• root
  • (no subject) (02/19/02)
• Russ
  • RE: Why is Microsoft watching us watch DVD movies? (02/26/02)
• Russell Fulton
  • Re: Cert Advisory 2002-03 and HP JetDirect (02/20/02)
• Ryan Fox
  • Re: Advisory #3 - PHP & JSP (02/08/02)
• Ryan M Harris
  • Re: Intel.com Mailing List Arbitrary Address Removal Link (02/08/02)
• Rzac`
  • Re: Netgear RT311/RT314 (02/05/02)
• saabstory@yahoo.com
  • Re: Symantec LiveUpdate (02/27/02)
• Sandra Song
  • SafeWeb Addresses Vulnerability in Consumer Privacy Technology (02/14/02)
• Sandro Gauci
  • [ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically (02/12/02)
• Scott Walker Register
  • Re: CheckPoint FW1 HTTP Security Hole (02/24/02)
  • Check Point response to CERT CA-2002-03 (Multi-vendor SNMP vulnerabilities) (02/21/02)
• Scott Woodward
  • Remote crashes in Yahoo messenger (02/21/02)
• secure@conectiva.com.br
  • [CLA-2002:463] Conectiva Linux Security Announcement - uucp (02/18/02)
• security curmudgeon
  • Greymatter 1.21c and earlier - remote login/pass exposure (02/25/02)
• security@caldera.com
  • Security Update: [CSSA-2002-SCO.6] (02/21/02)
  • Security Update: [CSSA-2002-SCO.5.1] REVISION: Open UNIX, UnixWare 7, OpenServer: encrypted password disclosure (02/18/02)
  • Security Update: [CSSA-2002-SCO.5] Open UNIX, UnixWare 7: encrypted password disclosure (02/14/02)
  • Security Update: [CSSA-2001-SCO.36.2] REVISED: Open UNIX, UnixWare 7: wu-ftpd ftpglob() vulnerability (02/14/02)
  • Security Update: [CSSA-2002-SCO.4] Open UNIX, UnixWare 7: snmpd memory fault vulnerabilities (02/12/02)
  • Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability (02/07/02)
• security@e-matters.de
  • Advisory 012002: PHP remote vulnerabilities (02/27/02)
• SGI Security Coordinator
  • Network Queuing Environment (NQE) vulnerabilities (02/15/02)
  • SNMP Vulnerabilities (02/12/02)
• Shai
  • Netwin Webnews 1.1k (02/21/02)
• shimi
  • And another (same) bug in DCForum at user registration process (dcscripts.com) (02/02/02)
  • Vulnerability in all versions of DCForum from dcscripts.com (02/01/02)
• Simple Nomad
  • Re: Remote DoS in Netgear RM-356 (02/15/02)
• sj@datanet.hu
  • RE: new advisory (02/04/02)
• skizzik@imail.ru
  • Open Bulletin Board javascript bug. (02/25/02)
  • XMB cross-scripting vulnerability (02/22/02)
• skylined@edup.tudelft.nl
  • squirrelmail: squirrelspell plugin check_me.mod.php bug (02/04/02)
• sozni
  • Re: This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP (02/12/02)
• sq
  • Netgear RT311/RT314 (02/03/02)
• Stefan Demetz
  • large spam messages disable Hotmail accounts (02/08/02)
• Stefan Gybas
  • Re: gnujsp: dir- and script-disclosure (02/20/02)
• Stephen
  • Re: OSX ICQ DoS (02/05/02)
  • OSX ICQ DoS (02/05/02)
• Steve VanDevender
  • UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/19/02)
• Steven Champeon
  • Re: CSS -> ign.com (02/07/02)
• Steven M. Christey
  • Internet-Draft for "Responsible Disclosure Process" released (02/20/02)
  • Re: rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available) (02/02/02)
• Stoic forty-four
  • Black ICE Ping Vulnerability Side Note (02/06/02)
• Strumpf Noir Society
  • BadBlue Yet Another Directory Traversal (02/26/02)
  • BadBlue XSS vulnerabilities / Filesharing Server Worm (02/26/02)
  • Falcon Web Server Authentication Circumvention Vulnerability (02/13/02)
  • PowerFTP Personal FTP Server Multiple Vulnerabilities (02/11/02)
  • InstantServers MiniPortal Multiple Vulnerabilities (02/09/02)
• Stuart Moore
  • another hanterm exploit (02/07/02)
• Sullo sq
  • Re: Netgear RT311/RT314 (02/07/02)
• superpetz@hushmail.com
  • Faq-O-Matic Cross-Site Scripting (02/05/02)
  • [SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability] (02/04/02)
• Support Info
  • Security Update: [CSSA-2002-004.0] Linux - Various security problems in ucd-snmp (02/20/02)
  • Security Update [CSSA-2002-002.0] Linux - Remote exploit against mutt (02/09/02)
  • Security Update [CSSA-2002-003.0] Linux - Remote attack on rsync (02/09/02)
  • Security Update [CSSA-2002-001.0] Linux - OpenLDAP attribute deletion problem (02/09/02)
• Swift Griggs
  • Re: Vulnerability in Black ICE Defender (02/05/02)
• Sym Security
  • Re: Symantec Enterprise Firewall (SEF) Notify Daemon data loss via SN MP (02/21/02)
  • Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies (02/21/02)
• Tamer Sahin
  • SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch) (02/26/02)
  • SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability (02/22/02)
  • SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability (02/22/02)
  • SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability (02/21/02)
  • ScriptEase MiniWeb Server DoS Vulnerability (02/19/02)
  • Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability (02/08/02)
  • Sambar Webserver Sample Script v5.1 DoS Vulnerability Exploit (01/01/02)
  • Mrtg Path Disclosure Vulnerability (Revised) (02/05/02)
  • Mrtg Path Disclosure Vulnerability (02/04/02)
• the Pull
  • Re: Infecting the KaZaA network? (02/07/02)
• Thierry Zoller
  • Re: Intel.com Mailing List Arbitrary Address Removal Link (02/06/02)
• Thomas Biege
  • SuSE Security Announcement: cups (SuSE-SA:2002:005) (02/25/02)
• Thomas Springer
  • gnujsp: dir- and script-disclosure (02/19/02)
• Thor Larholm
  • Update on the MS02-005 patch, holes still remain (02/12/02)
  • RE: HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technic al exercise] (02/08/02)
• Todd Arnold
  • Re: Extracting a 3DES key from an IBM 4758 (02/26/02)
• Todd Underwood
  • Re: Intel.com Mailing List Arbitrary Address Removal Link (02/07/02)
• Tom Gilder
  • MSN Messenger Hijacking (02/09/02)
• Tom McAdam
  • Re: MSN contact list disclosure (02/10/02)
• Tom Micklovitch
  • MSN contact list disclosure (02/08/02)
• Tom Parker
  • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities (02/12/02)
• Tomi Tuominen
  • Re: MorningStar.ca Canada And Security Practices (02/11/02)
  • Long path exploit on NTFS - F-Secure Anti-Virus not vulnerable (02/01/02)
• Tommaso Di Donato
  • Re: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/22/02)
• Troy Billington
  • Re: Vulnerability in Black ICE Defender (02/06/02)
• Trustix Secure Linux Advisor
  • TSLSA-2002-0031 - squid (02/22/02)
• tsr
  • -possible- Bufferoverflow in ICQ 2001b (02/08/02)
• uid0x00
  • Avirt Gateway 4.2 remote buffer overflow: proof of concept (02/12/02)
• Uidam, T (Tim)
  • RE: Long path exploit on NTFS (02/05/02)
• UkR-XblP?
  • new advisory (02/02/02)
• Ulf H{rnhammar
  • SiteNews remote add user exploit (02/16/02)
• Valdis.Kletnieks@vt.edu
  • Re: MSN Messenger and UDP 1900 (02/08/02)
• Valentijn Sessink
  • Non existing attachments, more info (02/16/02)
  • Outlook will see non-existing attachments (02/12/02)
• vm_converter
  • Auto file execution vulnerability in Mac OS (02/27/02)
• Volker Tanger
  • CheckPoint FW1 HTTP Security Hole (02/19/02)
• w0o
  • Re:ICQ Bug possibly? (02/04/02)
• webmaster
  • [SPSadvisory#46]Apple QuickTime Player "Content-Type" Buffer Overflow (02/08/02)
• Wichert Akkerman
  • [SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities (02/14/02)
  • [SECURITY] [DSA-106-2] updated rsync fix (02/03/02)
• Will Backman
  • SNMP Enabled on Dell Servers (02/14/02)
• William D. Colburn (aka Schlake)
  • Re: Non existing attachments, more info (02/20/02)
  • UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint firewall] (02/19/02)
• xperc
  • Overflow Vulnerabilities in hanterm (02/07/02)
• Zeke Gibson [STI]
  • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... (02/06/02)
• ZeroBreak
  • Sybex E-Trainer Directory Traversal Vulnerability (02/10/02)

Last message date: 02/28/02
Archived on: 02/28/02 CET

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint