SecurityFocus Bugtraq
By Author

432 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 01/01/00
Ending: 07/31/02

• 'ken'@FTU
  • Windows mplay32 buffer overflow (07/30/02)
• 0x36@hushmail.com
  • Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) (07/24/02)
• 2c79cbe14ac7d0b8472d3f129fa1df
  • IPSwitch IMail ADVISORY/EXPLOIT/PATCH (07/26/02)
  • MailMax security advisory/exploit/patch (07/23/02)
  • MERCUR Mailserver advisory/remote exploit (07/18/02)
  • remote winamp 2.x exploit (all current versions) (07/05/02)
• 2c79cbe14ac7d0b8472d3f129fa1df55 2c79cbe14ac7d0b8472d3f129fa1df55
  • Re: Hoax Exploit (2c79cbe14ac7d0b8472d3f129fa1df55 RETURNS) (07/29/02)
• 2c79cbe14ac7d0b8472d3f129fa1df55@hush.com
  • IPSwitch IMail Advisory #2 (07/30/02)
• 3APA3A
  • SECURITY.NNOV: multiple vulnerabilities in JanaServer (07/26/02)
  • Re: Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller (07/19/02)
  • NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd)) (07/03/02)
• <-delusion->
  • Code injection Vulnerability in endity.com's shoutBOX (07/30/02)
• @stake advisories
  • @stake Advisory: Multiple Vulnerabilities with Pingtel xpressa SIP Phones (07/12/02)
• [Zero_Byte]
  • Bug in Eupload (07/31/02)
• Aaron C. Newman
  • RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) (07/12/02)
  • Sybase contact (07/05/02)
• Adam [wp-ckkl]
  • Re: Remote ICQ Sound Desactivation (07/16/02)
• Adam Megacz
  • Re: XWT Foundation Advisory (07/30/02)
  • XWT Foundation Advisory: Firewall circumvention possible with all browsers (07/29/02)
• Adam Shostack
  • Re: Norton AV 2002 rewriting SMTP, breaking TLS (07/22/02)
• Adam Slattery
  • sparc exploit for known solaris 8 kcms_configure overflow (07/07/02)
• Ademar de Souza Reis Jr.
  • Re: OpenSSL patches for other versions (07/30/02)
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• advisories@atstake.com
  • @stake Advisory: Norton Personal Internet Firewall HTTP Proxy Vulnerability (07/15/02)
• alaric@alaricsecurity.com
  • Sniffable Switch Project (07/16/02)
• Aleksander Adamowski
  • Re: Linux kernels DoSable by file-max limit (07/09/02)
• aleph1@securityfocus.com
  • Administrivia: Symantec acquiring SecurityFocus (07/17/02)
• altomo
  • Worldspan DoS (07/04/02)
• Andrea Arcangeli
  • Re: Linux kernels DoSable by file-max limit (07/10/02)
• Andrea Lisci
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/24/02)
• Andreas Beck
  • Re: RAZOR advisory: Linux util-linux chfn local root vulnerability (07/31/02)
  • Re: VNC authentication weakness (07/25/02)
• Andreas Sandblad
  • Mozilla cookie stealing - Sandblad advisory #9 (07/24/02)
  • Pressing CTRL in IE is dangerous - Sandblad advisory #8 (07/23/02)
• Andrew Church
  • Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack (07/23/02)
• Andrew Pimlott
  • Re: RAZOR advisory: Linux util-linux chfn local root vulnerability (07/30/02)
  • Re: RAZOR advisory: Linux util-linux chfn local root vulnerability (07/30/02)
• Andrew van der Stock
  • RE: VNC authentication weakness (07/26/02)
• Arek Suroboyo
  • Easy Homepage Creator Vulnerability (07/27/02)
  • Easy Guestbook Vulnerabilities (07/27/02)
• Ariel Waissbein
  • Re: VNC authentication weakness (07/27/02)
• Auriemma Luigi
  • Pegasus mail DoS (07/24/02)
  • Re: UT DDoS risk (possible solution) (01/02/00)
• auto458545@hushmail.com
  • SSH Protocol Trick (07/23/02)
• avart@gmx.de
  • Again NULL and addslashes() (now in 123tkshop) (07/15/02)
  • Several problems in CARE 2002 (07/12/02)
• badc0ded@badc0ded.com
  • Re: Multiple vulnerabilities in atphttpd-0.4b (07/02/02)
• Barton Miller
  • Re: Announcement: injectso-0.2 (07/26/02)
• bd@bc-bd.org
  • Re: Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) (07/24/02)
• Bela Lubkin
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/28/02)
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/28/02)
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/27/02)
• Ben Laurie
  • OpenSSL patches for other versions (07/30/02)
  • OpenSSL Security Altert - Remote Buffer Overflows (07/30/02)
• Ben M
  • Re: Hosting Controller Vulnerability (07/15/02)
  • Hosting Controller Vulnerability (07/13/02)
• Berend-Jan Wever
  • CSS in blackboard (07/01/02)
• Bernardo Pons
  • ZyXEL Prestige Router Remote Node Filtering Vulnerability still present (07/11/02)
• Bojidar Alexandrov
  • Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code (07/18/02)
• BrainRawt .
  • Uninets StatsPlus 1.25 script injection vulnerabilities (07/25/02)
• bugtest@sitoverde.com
  • Popcorn vulnerabilities (07/11/02)
  • UT DDoS risk (01/01/00)
• bugzilla@redhat.com
  • [RHSA-2002:153-07] Updated mm packages fix temporary file handling (07/31/02)
  • [RHSA-2002:155-11] Updated openssl packages fix remote vulnerabilities (07/30/02)
  • [RHSA-2002:132-14] Updated util-linux package fixes password locking race (07/29/02)
  • [RHSA-2002:139-10] Updated glibc packages fix vulnerabilities in resolver (07/25/02)
  • [RHSA-2002:134-12] Updated mod_ssl packages available (07/16/02)
  • [RHSA-2002:051-16] New Squid packages available (07/04/02)
• Burton M. Strauss III
  • RE: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/26/02)
• by way of bugtest
  • Re: Remote DoS in AnlaogX SimpleServer:www 1.16 (07/02/02)
• c c
  • SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. (07/26/02)
  • SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file (07/11/02)
• c0rrect0r@hushmail.com
  • CommuniGate Pro directory listings (07/02/02)
• Casper Dik
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• Cedric Blancher
  • Re: Sniffable Switch Project (07/16/02)
• Charles Hannum
  • Three problems in OpenSSH's ssh-keysign (07/03/02)
• Chris Paget
  • Re: It takes two to tango (07/31/02)
• Chris Wysopal
  • Re: MFC ISAPI Framework Buffer Overflow (07/13/02)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: TFTP Long Filename Vulnerability (07/30/02)
  • Cisco Security Advisory: Heap Overflow in Solaris cachefs Daemon (07/24/02)
  • Security Advisory: Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability (07/03/02)
• Coffin, Chris
  • RE: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (07/26/02)
• Cohen, Steve
  • RE: PGP 7.04 Patch Modifies the Password Cache Setting (07/26/02)
• Constantin Kaplinsky
  • Re: VNC authentication weakness (07/26/02)
• Corey J. Steele
  • Re: MacOS X SoftwareUpdate Vulnerability (07/11/02)
• Curator
  • Announcing: The Zardoz 'Security Digest' Archives (07/31/02)
• D. J. Bernstein
  • Re: Remote buffer overflow in resolver code of libc (07/04/02)
• D4rkGr3y
  • 5 bugs (07/12/02)
• Dale Clapperton (lists)
  • Norton AV 2002 rewriting SMTP, breaking TLS (07/17/02)
• Dale Southard
  • Re: Apple OSX and iDisk and Mail.app (07/24/02)
• Damir Rajnovic
  • The answer to the PIX encryption issue (07/12/02)
• Daniel Ahlberg
  • GLSA: OpenSSL (07/30/02)
• Daniel Nyström
  • Exploit for previously reported DoS issues in Shambala Server 4.5 (07/09/02)
• Daniel Roethlisberger
  • Re: ZyXEL Prestige Router Remote Node Filtering Vulnerability still present (07/12/02)
• Daryl Tester
  • Re: Apple OSX and iDisk and Mail.app (07/25/02)
• Dave Ahmad
  • Remote Buffer Overflow Vulnerability in Sun RPC (07/31/02)
  • ISS Brief: Remote Buffer Overflow Vulnerability in Microsoft Exchange Server (fwd) (07/25/02)
  • Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) (07/25/02)
  • Microsoft Security Bulletin MS02-038: Cumulative Patch for SQL Server 2000 Service Pack 2 (Q316333) (fwd) (07/25/02)
  • Microsoft Security Bulletin MS02-036: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138) (fwd) (07/25/02)
  • Microsoft Security Bulletin MS02-039: Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875) (fwd) (07/25/02)
  • Foundstone Advisory - Buffer Overflow in MyWebServer (fwd) (07/08/02)
  • Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) (07/01/02)
• Dave Aitel
  • Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) (07/08/02)
  • Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) (07/05/02)
• David Beards
  • Re: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (07/26/02)
• David Frascone
  • Re: VNC authentication weakness (07/24/02)
• David Litchfield
  • SQL Server passwords (07/11/02)
• David Malone
  • Re: VNC authentication weakness (07/30/02)
• David Raeman
  • [ADVISORY]: Arbitrary file disclosure vulnerability in Sympoll 1.2 (07/30/02)
• David Wagner
  • Re: VNC authentication weakness (07/29/02)
  • Re: VNC authentication weakness (07/26/02)
• David Walker
  • Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack (07/22/02)
• Demi Sex God from Hell
  • Potential remote root in CodeBlue log scanner (07/24/02)
• der Mouse
  • Re: BIND 9.2.1 patch, multiple RR's for singleton types. (07/04/02)
• Doug Monroe
  • Re: REFRESH: EUDORA MAIL 5.1.1 (07/25/02)
• Dr. Peter Bieringer
  • Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak (07/22/02)
• e-matters Security
  • Advisory 02/2002: PHP remote vulnerability (07/22/02)
• ellipse
  • Re: BadBlue - Unauthorized Administrative Command Execution (07/20/02)
• elv@openbeer.it
  • Re: Linux kernels DoSable by file-max limit (07/09/02)
• EnGarde Secure Linux
  • [ESA-20020730-019] several vulnerabilities in the openssl library (07/30/02)
  • [ESA-20020724-018] Buffer overflow in BIND4-derived resolver code. (07/24/02)
  • [ESA-20020702-017] off-by-one in mod_ssl's configuration directive handling (07/02/02)
  • [ESA-20020702-016] several vulnerabilities in the OpenSSH daemon (07/02/02)
• Eric Hall
  • Re: Apple OSX and iDisk and Mail.app (07/25/02)
• Eric Horschman
  • Re: VMware GSX Server Remote Buffer Overflow (07/26/02)
• ethx@hotmail.com
  • PHPAuction bug (07/02/02)
• Florian Weimer
  • Re: Remote buffer overflow in resolver code of libc (07/04/02)
• FozZy
  • Re: Linux kernel setgid implementation flaw (07/19/02)
  • Re: Linux kernel setgid implementation flaw (07/19/02)
  • Linux kernel setgid implementation flaw (07/19/02)
• Fred Cohen
  • Error in MS mail handler - noncritical but a problem (07/14/02)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-02:32.pppd (07/31/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:23.stdio [REVISED] (07/30/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:31.openssh (07/15/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:30.ktrace (07/12/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:29.tcpdump (07/12/02)
• Frédéric Raynal
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
  • Re: Sniffable Switch Project (07/16/02)
• gabriel rosenkoetter
  • Re: MacOS X SoftwareUpdate Vulnerability (07/12/02)
• gcsb
  • XSS in Slashcode (07/02/02)
• Geoff Hutchison
  • Re: XSS in ht://Dig (07/11/02)
• Global InterSec Research
  • [Global InterSec 2002062801] OpenSSH challenge-response buffer overflow (Update) (07/03/02)
• Glynn Clements
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• gobbles@hushmail.com
  • The SUPER Bug (07/31/02)
  • Proof of Concept Code for OpenSSH (07/01/02)
• GreyMagic Software
  • RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers (07/30/02)
  • RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 (07/24/02)
• H D Moore
  • Re: [VulnWatch] KDE 2/3 artsd 1.0.0 local root exploit (07/29/02)
  • Re: SSH Protocol Trick (07/23/02)
• Hall, Philip
  • RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) (07/11/02)
• Hank Leininger
  • ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored (07/01/02)
• Henrik Nordstrom
  • Squid Security Update Advisory 2002:3 (07/03/02)
• http-equiv@excite.com
  • WHERE'S THE CA$H: Internet Explorer 6.00. Outlook Express 6.00 (07/27/02)
  • Re: [Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 (07/26/02)
  • UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 (07/25/02)
  • REFRESH: EUDORA MAIL 5.1.1 (07/24/02)
• hubbelyo@yahoo.com
  • Re: iPlanet Remote File Viewing (07/10/02)
• Hundley, Gordon - Princeton
  • RE: MacOS X SoftwareUpdate Vulnerability (07/15/02)
• info@elcomsoft.com
  • Vulnerability: protected Adobe eBooks can be copied between computers (07/30/02)
• Intel Nop
  • Fwd: non-disclosed info in Outlook can lead to potential serious Social Attack. (07/17/02)
• Iván Arce
  • Re: VNC authentication weakness (07/24/02)
  • [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server (07/11/02)
  • CORE-20020620: Inktomi Traffic Server Buffer Overflow (07/03/02)
• Jack Lloyd
  • Re: VNC authentication weakness (07/24/02)
• jaehnel@web.de
  • RE: MacOS X SoftwareUpdate Vulnerability (07/13/02)
• James Griffin
  • Re: Hosting Controller Vulnerability (07/14/02)
• Jamie McCarthy
  • Re: XSS in Slashcode (07/02/02)
• Jason Coombs
  • RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers (07/30/02)
  • RE: XWT Foundation Advisory (07/30/02)
• Jedi/Sector One
  • Fake Identd - Remote root exploit (07/29/02)
• Jeff Epler
  • Exploit for a security hole in the pickle module for Python versions <= 2.1.x (07/17/02)
• Jeff Kell
  • Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 (07/25/02)
• Jelmer
  • Re: ICQ and MSIE allow execution of arbitrary code (07/18/02)
  • WINAMP also allows execution of arbitrary code (probably a lot more programs aswell) (07/18/02)
  • Java webstart also allows execution of arbitrary code (07/18/02)
  • ICQ and MSIE allow execution of arbitrary code (07/16/02)
• jepler@unpythonic.net
  • VNC authentication weakness (07/24/02)
• Jim Breton
  • Re: Linux kernels DoSable by file-max limit (07/10/02)
• Jim Mellander
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• Jim Paris
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/28/02)
• Jim Reid
  • Re: BIND 9.2.1 patch, multiple RR's for singleton types. (07/02/02)
• John Korsak
  • Hoax Exploit (07/29/02)
• John Pettitt
  • Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 (07/23/02)
• john smith
  • Re: AIM Exploit!! (07/20/02)
• John Tolmachofft
  • RE: New Paper: Microsoft SQL Server Passwords (07/15/02)
• Jonas Koch
  • Tiny Software and Sygate contact (07/11/02)
• Jordan K Wiens
  • Re: Multiple Security Vulnerabilities in Sharp Zaurus (07/11/02)
• Jose Nazario
  • Re: It takes two to tango (07/31/02)
  • Re: VNC authentication weakness (07/26/02)
• Joseph S. Testa II
  • How to reproduce PHP segfault. (07/24/02)
• josh@pulltheplug.com
  • KaZaa v1.7.1 Denial of Service Attack (07/25/02)
• Julian Suschlik
  • Re: MacOS X SoftwareUpdate Vulnerability (07/08/02)
• JW Oh
  • Re: Eat gopher! (07/29/02)
• JWC@portcullis-security.com
  • Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability (07/12/02)
  • Portcullis Security Advisory - Directory Traversal Vulnerability in SunPS iRunbook 2.5.2 (07/11/02)
• Kanatoko
  • Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) (07/26/02)
• kanix
  • Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT (07/09/02)
• kanix THE HACKER
  • LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT (07/06/02)
• kelli burkinshaw
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/26/02)
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/23/02)
• KF
  • Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT (06/13/02)
• kim0
  • phenoelit advisory, Brother Printers ++/- (07/27/02)
  • Phenoelit Advisory 0815 ++ -- Brick (07/27/02)
  • Phenoelit ADvisory 0815 ++ ** Ascend (07/27/02)
  • Phenoelit Advisory 0815 ++ // Xedia (07/27/02)
  • Phenoelit Advisory #0815 +-- (07/27/02)
  • Phenoelit Advisory #0815 ++-+ dp_300 (DLINK) (07/27/02)
  • Phenoelit Advisory #0815 +-+ (07/27/02)
  • Phenoelit Advisory 0815 ++ /+ HP ProCurve (07/27/02)
  • 0815 ++ */ SEH_Web (07/27/02)
  • Phenoelit Advisory, 0815 ++ * - Cisco_tftp (07/27/02)
• Knud Erik Hřjgaard
  • Re: Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) (07/25/02)
  • Re: AIM forced behavior "issue" (07/16/01)
  • Re: Remote ICQ Sound Desactivation (07/15/01)
• kokane
  • KDE 2/3 artsd 1.0.0 local root exploit (07/29/02)
• Kragen Sitaker
  • Re: VNC authentication weakness (07/26/02)
• Kurt Seifried
  • Re: [VulnWatch] 5 bugs (07/15/02)
  • Re: Linux kernels DoSable by file-max limit (07/09/02)
  • Re: MacOS X SoftwareUpdate Vulnerability (07/08/02)
• Kyuzo
  • Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/23/02)
• langtuhaohoa caothuvolam
  • phpBB/gender mod allows get admin privilege, exploit/patch (07/27/02)
• Lee Howard
  • HylaFAX - Various Vulnerabilities Fixed (07/29/02)
• Lucas Lundgren
  • Outpost24 Advisory: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability (07/16/02)
• lumpy
  • asciiSECURE advisory (2002-07-17/1) (07/17/02)
• Lupe Christoph
  • [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 (07/22/02)
• Mandrake Linux Security Team
  • MDKSA-2002:046 - openssl update (07/31/02)
  • MDKSA-2002:045 - mm update (07/29/02)
  • MDKSA-2002:044 - squid update (07/17/02)
  • MDKSA-2002:043 - bind update (07/16/02)
  • MDKSA-2002:042 - LPRng updates (07/04/02)
  • MDKSA-2002:041 - kernel 2.2 and 2.4 updates (07/04/02)
  • MDKSA-2002:040-1 - openssh update (07/03/02)
• Marc Maiffret
  • EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability (07/11/02)
• Marc Ruef
  • Trend Micro Officescan Denial of Service (07/17/00)
• Marco van Berkum
  • Novell GroupWise 6.0.1 Support Pack 1 Bufferoverflow (07/25/02)
• Mark A. Rowe (PenTest)
  • Tivoli TMF Endpoint Buffer Overflow (07/15/02)
  • Tivoli TMF ManagedNode Buffer Overflow (07/15/02)
  • PTL-2002-03 Betsie XSS Vuln (07/01/02)
• Marko Karppinen
  • PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 (07/22/02)
• Markus Friedl
  • Re: SSH Protocol Trick (07/24/02)
  • Revised OpenSSH Security Advisory (07/01/02)
• martin f krafft
  • ANNOUNCING: Debian GNU/Linux 3.0 (07/20/02)
  • Re: Sniffable Switch Project (07/17/02)
  • Re: Sniffable Switch Project (07/17/02)
• Martin J. Muench
  • Denial of Service bug in Pine 4.44 (07/24/02)
  • BufferOverflow in OmniHTTPd 2.09 (07/01/02)
• Martin Schulze
  • [SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation (07/30/02)
• Matt Moore
  • Re: [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting (07/19/02)
  • wp-02-0012: Carello 1.3 Remote File Execution (07/10/02)
  • wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting (07/10/02)
  • wp-02-0008: Apache Tomcat Cross Site Scripting (07/10/02)
• Matt Smith
  • FW: Parachat DoS Vulnerability (07/31/02)
• Matthew Murphy
  • PHP Resource Exhaustion Denial of Service (07/21/02)
  • BadBlue - Unauthorized Administrative Command Execution (07/20/02)
  • BadBlue 302 Status Message XSS (07/20/02)
  • MFC Overflow Test Code (07/13/02)
  • Three BadBlue Vulnerabilities (07/13/02)
  • MFC ISAPI Framework Buffer Overflow (07/11/02)
  • Exploit: TL003/Dot Bug = Reading Non-Parsable Files (07/11/02)
  • Lil'HTTP Pbcgi.cgi XSS Vulnerability (07/11/02)
  • ALERT: Working Resources BadBlue #2 (DoS, Heap Overflow) (07/09/02)
  • BadBlue 1.73 EXT.DLL XSS Variant (07/08/02)
  • Technical Details of Urlcount.cgi Vulnerability (07/08/02)
  • Technical Details of BadBlue EXT.DLL Vulnerability (07/08/02)
• Michael
  • Icq 2001&2002 vulnerability (07/24/02)
• Michal Zalewski
  • Re: RAZOR advisory: Linux util-linux chfn local root vulnerability (07/30/02)
  • RAZOR advisory: Linux util-linux chfn local root vulnerability (07/29/02)
  • Re: Linux kernels DoSable by file-max limit (07/09/02)
• Microsoft Security Response Center
  • RE: XWT Foundation Advisory (07/30/02)
• Mikael Olsson
  • Re: SSH Protocol Trick (07/23/02)
• Mike Caudill
  • Re: Phenoelit Advisory, 0815 ++ * - Cisco_tftp (07/27/02)
• Mike Forrester
  • Re: It takes two to tango (07/31/02)
• Mike Porter
  • Re: VNC authentication weakness (07/30/02)
• Mingyan Liu
  • VMware GSX Server Remote Buffer Overflow (07/24/02)
• Mitch Adair
  • Re: VNC authentication weakness (07/26/02)
• Moorhouse, Walt P
  • RE: Multiple Security Vulnerabilities in Sharp Zaurus (07/11/02)
• Muhammad Faisal Rauf Danka
  • Re: Hosting Controller Vulnerability (07/14/02)
• Nate Lawson
  • Re: VNC authentication weakness (07/30/02)
• Neil W Rickert
  • Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack (07/23/02)
• nfinity@gmx.net
  • Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal (07/03/02)
• NGSSoftware Insight Security Research
  • Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) (07/25/02)
  • Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) (07/11/02)
  • Sun iPlanet Web Server Buffer Overflow (#NISR09072002) (07/09/02)
  • New Paper: Microsoft SQL Server Passwords (07/08/02)
  • Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002) (07/03/02)
• Nick FitzGerald
  • Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 (07/26/02)
• Noam Rathaus
  • Falsifying a VeriSign Seal (Japan) (07/02/02)
• noir sin
  • Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) (07/07/02)
  • Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) (07/06/02)
  • UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) (07/04/02)
• office
  • cross-site scripting bug of Mailman (07/24/02)
• Olaf Kirch
  • Re: Nanog traceroute format string exploit. (07/24/02)
  • SuSE Security Announcement: Resolver (SuSE-SA:2002:026) (07/10/02)
  • Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT (07/08/02)
• OpenPKG
  • [OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) (07/30/02)
  • [OpenPKG-SA-2002.008] OpenPKG Security Advisory (openssl) (07/30/02)
  • [OpenPKG-SA-2002.006] OpenPKG Security Advisory (bind) (07/04/02)
• orb
  • AIM forced behavior "issue" (07/16/02)
• osx_guru
  • Re: Apple OSX and iDisk and Mail.app (07/24/02)
• Owen, Greg
  • RE: Norton AV 2002 rewriting SMTP, breaking TLS (07/19/02)
• patrik.karlsson@se.pwcglobal.com
  • pwc.20020630.nims_modweb.b (07/15/02)
  • pwc.20020630.nims_3.0.3_imapd.a (07/15/02)
  • SQL Server passwords (07/12/02)
• Paul Schmehl
  • Re: Tiny Software and Sygate contact (07/11/02)
• Paul Starzetz
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
  • Re: Linux kernels DoSable by file-max limit (07/09/02)
  • Linux kernels DoSable by file-max limit (07/07/02)
• Paul Szabo
  • Re: Acrobat reader 5.05 temp file insecurity (07/04/02)
• Pauli Porkka
  • RE: New Paper: Microsoft SQL Server Passwords (07/10/02)
• Pete Davis
  • Re: Cisco VPN3000 gateway MTU overflow (07/15/02)
• Peter Gründl
  • KPMG-2002034: Jigsaw Webserver DOS device DoS (07/17/02)
  • KPMG-2002033: Resin DOS device path disclosure (07/17/02)
  • KPMG-2002032: Macromedia Sitespring Cross Site Scripting (07/17/02)
  • KPMG-2002031: Jigsaw Webserver Path Disclosure (07/17/02)
  • KPMG-2002030: Watchguard Firebox Dynamic VPN Configuration Protocol DoS (07/09/02)
  • KPMG-2002029: Bea Weblogic Performance Pack Denial of Service (07/08/02)
  • KPMG-2002028: Sitespring Server Denial of Service (07/01/02)
  • KPMG-2002026: Jrun sourcecode Disclosure (07/01/02)
• Peter Pentchev
  • Re: Pressing CTRL in IE is dangerous - Sandblad advisory #8 (07/24/02)
• Peter Watkins
  • Re: XWT Foundation Advisory (07/30/02)
  • Re: XWT Foundation Advisory: Firewall circumvention possible with all browsers (07/29/02)
• phased@webtribe.net
  • tru64 proof of concept /bin/su non-exec bypass (07/19/02)
• Phrack Staff
  • PHRACK 59 OFFICIAL RELEASE (07/23/02)
• Pistone
  • Wiki module postnuke Cross Site Scripting Vulnerability (07/17/02)
• plattner@caltech.edu
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• pokley
  • Cobalt Qube 3 Administration page (07/24/02)
• pokleyzz
  • php dotProject by pass authentication (07/29/02)
• porte10@free.fr
  • Re: Cisco VPN3000 MTU overflow (fragmentation issue) (07/12/02)
  • Cisco VPN3000 gateway MTU overflow (07/11/02)
• qitest1
  • wwwoffle-2.7b and prior segfaults with negative Content-Length value (07/18/02)
  • Multiple vulnerabilities in atphttpd-0.4b (07/12/02)
• quentyn@fotango.com
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• Randal L. Schwartz
  • Apple OSX and iDisk and Mail.app (07/24/02)
• Rasmus Břg Hansen
  • Re: Interface promiscuity obscurity in Linux (07/25/02)
• Renato Murilo Langona
  • LinuxSecurity Magazine Online - First Edition (07/30/02)
• Riad S. Wahby
  • Re: It takes two to tango (07/31/02)
• Ricardo Branco
  • Interface promiscuity obscurity in Linux (07/24/02)
• Richard M. Smith
  • It takes two to tango (07/31/02)
• Richard van den Berg
  • SunPCi II VNC weak authentication scheme vulnerability (07/03/02)
• Robert van der Meulen
  • [SECURITY] [DSA-135-1] buffer overflow / DoS in libapache-mod-ssl (07/02/02)
• Roman Drahtmueller
  • SuSE Security Announcement: mod_ssl, mm (SuSE-SA:2002:028) (07/31/02)
  • SuSE Security Announcement: openssl (SuSE-SA:2002:027) (07/30/02)
  • SuSE Security Announcement: squid (SuSE-SA:2002:025) (07/09/02)
  • SuSE Security Announcement: openssh (SuSE-SA:2002:024) (07/02/02)
• Ron Ray
  • Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller (07/18/02)
• Russ Garrett
  • RE: PHP Resource Exhaustion Denial of Service (07/22/02)
• Russell Harding
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/28/02)
  • MacOS X SoftwareUpdate Vulnerability (07/07/02)
• Russell Mann
  • RE: Norton AV 2002 rewriting SMTP, breaking TLS (07/19/02)
• rwertenb@mit.edu
  • Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code (07/20/02)
• Ryan Mansager
  • Re: Nanog traceroute format string exploit. (07/24/02)
• Ryan Russell
  • Re: Sybase contact (07/05/02)
• secfocus@downhill.at.eu.org
  • Re: Acrobat reader 5.05 temp file insecurity (07/25/02)
• secure@conectiva.com.br
  • [CLA-2002:513] Conectiva Linux Security Announcement - openssl (07/31/02)
  • [CLA-2002:512] Conectiva Linux Security Announcement - libpng (07/17/02)
  • [CLA-2002:507] Conectiva Linux Security Announcement - Resolver libraries (07/11/02)
  • [CLA-2002:506] Conectiva Linux Security Announcement - squid (07/05/02)
  • [CLA-2002:505] Conectiva Linux Security Announcement - ethereal (07/04/02)
  • [CLA-2002:504] Conectiva Linux Security Announcement - apache (07/02/02)
• Securiteinfo.com
  • Abyss Web Server version 1.0.3 shows file and directory content (07/29/02)
  • Pablo Sofware Solutions FTP server Directory Traversal Vulnerability (07/22/02)
  • KF Web Server version 1.0.2 shows file and directory content (07/07/02)
• security-protocols@hushmail.com
  • Re: KPMG-2002033: Resin DOS device path disclosure (07/17/02)
• security@caldera.com
  • Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl (07/31/02)
  • Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm (07/31/02)
  • Security Update: [CSSA-2002-SCO.35] OpenServer 5.0.5 OpenServer 5.0.6 : crontab format string vulnerability (07/22/02)
  • Security Update: [CSSA-2002-031.0] Linux: mod_ssl off-by-one error (07/17/02)
  • Security Update: [CSSA-2002-SCO.33] OpenServer 5.0.5 OpenServer 5.0.6 : timed does not enforce nulls (07/16/02)
  • Security Update: [CSSA-2002-SCO.34] OpenServer 5.0.5 OpenServer 5.0.6 : uux status file name buffer overflow (07/16/02)
  • Security Update: [CSSA-2002-SCO.28] UnixWare 7.1.1 Open UNIX 8.0.0 : rpc.ttdbserverd file creation and deletion vulnerabilities (07/11/02)
  • Security Update: [CSSA-2002-SCO.31] UnixWare 7.1.1 Open UNIX 8.0.0 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error (07/02/02)
  • Security Update: [CSSA-2002-SCO.32] OpenServer 5.0.5 OpenServer 5.0.6 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error (07/02/02)
• Seth Knox
  • RE: Tiny Software and Sygate contact (07/11/02)
• SGI Security Coordinator
  • SGI Apache Web Server Chunk Handling vulnerability (07/13/02)
  • IRIX DNS resolver vulnerability (07/11/02)
• Shaun Clowes
  • Announcement: injectso-0.2 (07/23/02)
• Simon Hausmann
  • Re: [VulnWatch] 5 bugs (07/15/02)
• sindhi@hushmail.com
  • Noguska Nola 1.1.1 [ Intranet Business Management Software ] (07/02/02)
• skp
  • [AP] Oracle Reports Server Information Disclosure Vulnerability (07/17/02)
• SpaceWalker
  • Nanog traceroute format string exploit. (07/21/02)
• spam_bucket@mac.com
  • Re: Apple OSX and iDisk and Mail.app (07/25/02)
• Stan Bubrouski
  • Re: It takes two to tango (07/31/02)
  • Re: ICQ and MSIE allow execution of arbitrary code (07/17/02)
• stealth
  • Re: SSH Protocol Trick (07/23/02)
  • Re: SSH Protocol Trick (07/23/02)
• Stephen Harris
  • Re: Multiple Security Vulnerabilities in Sharp Zaurus (07/10/02)
• Steve McIlwain
  • Re: Cisco VPN3000 gateway MTU overflow (07/11/02)
• Steve.Cohen@EchoStar.Com
  • PGP 7.04 Patch Modifies the Password Cache Setting (07/25/02)
• Steven Champeon
  • Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 (07/24/02)
• Steven M. Christey
  • Directory traversal vulnerability in sendform.cgi (07/31/02)
• SURUAZ
  • Multiple Security Vulnerabilities in Sharp Zaurus (07/10/02)
• Szemkel
  • Re: RAZOR advisory: Linux util-linux chfn local root vulnerability (07/30/02)
• Szulc Roger
  • 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (07/25/02)
• T.Suzuki
  • CacheFlow CacheOS Cross-site Scripting Vulnerability (07/25/02)
• tfm@tfm.org
  • Re: CommuniGate Pro directory listings (07/03/02)
• Theo de Raadt
  • Re: VNC authentication weakness (07/28/02)
  • Re: Three problems in OpenSSH's ssh-keysign (07/03/02)
• Thor Larholm
  • RE: warning (07/30/02)
  • RE: XWT Foundation Advisory (07/30/02)
  • RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 (07/24/02)
  • IE allows universal Cross Domain Scripting (TL#003) (07/10/02)
• Tim Brown
  • Medium security hole affecting W3Mail (07/25/02)
• Tim Gladding
  • Re: BIND 9.2.1 patch, multiple RR's for singleton types. (07/03/02)
  • BIND 9.2.1 patch, multiple RR's for singleton types. (07/02/02)
• TLR@portcullis-security.com
  • VU#197395 Microsoft IIS SMTP encapsulated e-mail address vulnerability - update (07/23/02)
• Tom
  • UT (and other game-servers) DDOS (07/05/02)
• Tom Fischer
  • Re: Hoax Exploit (07/29/02)
• Toni Lassila
  • RE: New Paper: Microsoft SQL Server Passwords (07/09/02)
• Trustix Secure Linux Advisor
  • TSLSA-2002-0064 - util-linux (07/30/02)
  • TSLSA-2002-0063 - openssl (07/30/02)
  • TSLSA-2002-0061 - bind (07/15/02)
  • TSLSA-2002-0062 - squid (07/15/02)
• tuna
  • AIM Exploit!! (07/20/02)
• turambar386@routergod.com
  • iPlanet Remote File Viewing (07/09/02)
• Ulf Harnhammar
  • ezContents multiple vulnerabilities (07/25/02)
  • Geeklog XSS and CRLF Injection (07/19/02)
  • Double Choco Latte multiple vulnerabilities (07/14/02)
• VALDEUX@aol.com
  • XSS Hole in Fluid Dynamics search Engine (07/10/02)
• VanDyke Technical Support
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/29/02)
  • Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta (07/29/02)
• vjt
  • Re: PHP Resource Exhaustion Denial of Service (07/23/02)
• Vladimir Katalov
  • Vulnerability found: Adobe Acrobat eBook Reader and Content Server (07/22/02)
  • Vulnerability found: The Adobe eBook Library (07/12/02)
• webmaster
  • [SPSadvisory#47]RealONE Player Gold / RealJukebox2 skin file download vulnerability (07/12/02)
  • [SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow (07/12/02)
• Wichert Akkerman
  • [SECURITY] [DSA-136-1] Multiple OpenSSL problems (07/30/02)
• Wietse Venema
  • Re: Linux kernel setgid implementation flaw (07/19/02)
• xile@hushmail.com
  • Re:[VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting (07/17/02)
• xLaNT
  • Remote ICQ Sound Desactivation (07/15/02)
• zillion
  • nn remote format string vulnerability (07/04/02)
• Zoltan Milosevic
  • RE: XSS Hole in Fluid Dynamics Search engine (07/10/02)

Last message date: 07/31/02
Archived on: 07/31/02 CEST

---

432 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(18)