SecurityFocus Bugtraq
By Date

432 messages sorted by: [ author ] [ thread ] [ subject ] [ attachment ]

---

Starting: 01/01/00
Ending: 07/31/02

• Re: It takes two to tango Chris Paget (07/31/02)
• Re: It takes two to tango Riad S. Wahby (07/31/02)
• Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl security@caldera.com (07/31/02)
• SuSE Security Announcement: mod_ssl, mm (SuSE-SA:2002:028) Roman Drahtmueller (07/31/02)
• Remote Buffer Overflow Vulnerability in Sun RPC Dave Ahmad (07/31/02)
• Announcing: The Zardoz 'Security Digest' Archives Curator (07/31/02)
• Re: It takes two to tango Stan Bubrouski (07/31/02)
• Re: It takes two to tango Mike Forrester (07/31/02)
• FW: Parachat DoS Vulnerability Matt Smith (07/31/02)
• FreeBSD Security Advisory FreeBSD-SA-02:32.pppd FreeBSD Security Advisories (07/31/02)
• [CLA-2002:513] Conectiva Linux Security Announcement - openssl secure@conectiva.com.br (07/31/02)
• Re: It takes two to tango Jose Nazario (07/31/02)
• Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andreas Beck (07/31/02)
• The SUPER Bug gobbles@hushmail.com (07/31/02)
• [RHSA-2002:153-07] Updated mm packages fix temporary file handling bugzilla@redhat.com (07/31/02)
• Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Szemkel (07/30/02)
• It takes two to tango Richard M. Smith (07/31/02)
• LinuxSecurity Magazine Online - First Edition Renato Murilo Langona (07/30/02)
• Directory traversal vulnerability in sendform.cgi Steven M. Christey (07/31/02)
• Re: VNC authentication weakness David Malone (07/30/02)
• Re: VNC authentication weakness Mike Porter (07/30/02)
• Bug in Eupload [Zero_Byte] (07/31/02)
• Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm security@caldera.com (07/31/02)
• MDKSA-2002:046 - openssl update Mandrake Linux Security Team (07/31/02)
• Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andrew Pimlott (07/30/02)
• [RHSA-2002:155-11] Updated openssl packages fix remote vulnerabilities bugzilla@redhat.com (07/30/02)
• RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers Jason Coombs (07/30/02)
• IPSwitch IMail Advisory #2 2c79cbe14ac7d0b8472d3f129fa1df55@hush.com (07/30/02)
• [ADVISORY]: Arbitrary file disclosure vulnerability in Sympoll 1.2 David Raeman (07/30/02)
• RE: XWT Foundation Advisory Jason Coombs (07/30/02)
• Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Michal Zalewski (07/30/02)
• [SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation Martin Schulze (07/30/02)
• FreeBSD Security Advisory FreeBSD-SA-02:23.stdio [REVISED] FreeBSD Security Advisories (07/30/02)
• Re: XWT Foundation Advisory Adam Megacz (07/30/02)
• Windows mplay32 buffer overflow 'ken'@FTU (07/30/02)
• Re: OpenSSL patches for other versions Ademar de Souza Reis Jr. (07/30/02)
• RE: warning Thor Larholm (07/30/02)
• Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andrew Pimlott (07/30/02)
• Vulnerability: protected Adobe eBooks can be copied between computers info@elcomsoft.com (07/30/02)
• TSLSA-2002-0064 - util-linux Trustix Secure Linux Advisor (07/30/02)
• SuSE Security Announcement: openssl (SuSE-SA:2002:027) Roman Drahtmueller (07/30/02)
• RE: XWT Foundation Advisory Thor Larholm (07/30/02)
• RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers GreyMagic Software (07/30/02)
• Cisco Security Advisory: TFTP Long Filename Vulnerability Cisco Systems Product Security Incident Response Team (07/30/02)
• Code injection Vulnerability in endity.com's shoutBOX <-delusion-> (07/30/02)
• GLSA: OpenSSL Daniel Ahlberg (07/30/02)
• [ESA-20020730-019] several vulnerabilities in the openssl library EnGarde Secure Linux (07/30/02)
• OpenSSL patches for other versions Ben Laurie (07/30/02)
• OpenSSL Security Altert - Remote Buffer Overflows Ben Laurie (07/30/02)
• TSLSA-2002-0063 - openssl Trustix Secure Linux Advisor (07/30/02)
• [OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) OpenPKG (07/30/02)
• [OpenPKG-SA-2002.008] OpenPKG Security Advisory (openssl) OpenPKG (07/30/02)
• [SECURITY] [DSA-136-1] Multiple OpenSSL problems Wichert Akkerman (07/30/02)
• Re: XWT Foundation Advisory Peter Watkins (07/30/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta VanDyke Technical Support (07/29/02)
• Re: Hoax Exploit Tom Fischer (07/29/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Jim Paris (07/28/02)
• Re: VNC authentication weakness Theo de Raadt (07/28/02)
• Re: XWT Foundation Advisory: Firewall circumvention possible with all browsers Peter Watkins (07/29/02)
• RE: XWT Foundation Advisory Microsoft Security Response Center (07/30/02)
• MDKSA-2002:045 - mm update Mandrake Linux Security Team (07/29/02)
• Re: VNC authentication weakness Nate Lawson (07/30/02)
• Re: Hoax Exploit (2c79cbe14ac7d0b8472d3f129fa1df55 RETURNS) 2c79cbe14ac7d0b8472d3f129fa1df55 2c79cbe14ac7d0b8472d3f129fa1df55 (07/29/02)
• Re: VNC authentication weakness David Wagner (07/29/02)
• Fake Identd - Remote root exploit Jedi/Sector One (07/29/02)
• Re: [VulnWatch] KDE 2/3 artsd 1.0.0 local root exploit H D Moore (07/29/02)
• Hoax Exploit John Korsak (07/29/02)
• Re: Eat gopher! JW Oh (07/29/02)
• XWT Foundation Advisory: Firewall circumvention possible with all browsers Adam Megacz (07/29/02)
• KDE 2/3 artsd 1.0.0 local root exploit kokane (07/29/02)
• [RHSA-2002:132-14] Updated util-linux package fixes password locking race bugzilla@redhat.com (07/29/02)
• Abyss Web Server version 1.0.3 shows file and directory content Securiteinfo.com (07/29/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta VanDyke Technical Support (07/29/02)
• php dotProject by pass authentication pokleyzz (07/29/02)
• HylaFAX - Various Vulnerabilities Fixed Lee Howard (07/29/02)
• RAZOR advisory: Linux util-linux chfn local root vulnerability Michal Zalewski (07/29/02)
• phenoelit advisory, Brother Printers ++/- kim0 (07/27/02)
• phpBB/gender mod allows get admin privilege, exploit/patch langtuhaohoa caothuvolam (07/27/02)
• Easy Homepage Creator Vulnerability Arek Suroboyo (07/27/02)
• Re: Phenoelit Advisory, 0815 ++ * - Cisco_tftp Mike Caudill (07/27/02)
• WHERE'S THE CA$H: Internet Explorer 6.00. Outlook Express 6.00 http-equiv@excite.com (07/27/02)
• Re: VNC authentication weakness Kragen Sitaker (07/26/02)
• Easy Guestbook Vulnerabilities Arek Suroboyo (07/27/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin (07/28/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Russell Harding (07/28/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin (07/28/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin (07/27/02)
• Phenoelit Advisory 0815 ++ -- Brick kim0 (07/27/02)
• Phenoelit ADvisory 0815 ++ ** Ascend kim0 (07/27/02)
• Re: VNC authentication weakness Ariel Waissbein (07/27/02)
• Phenoelit Advisory 0815 ++ // Xedia kim0 (07/27/02)
• Phenoelit Advisory #0815 +-- kim0 (07/27/02)
• Phenoelit Advisory #0815 ++-+ dp_300 (DLINK) kim0 (07/27/02)
• Phenoelit Advisory #0815 +-+ kim0 (07/27/02)
• Phenoelit Advisory 0815 ++ /+ HP ProCurve kim0 (07/27/02)
• 0815 ++ */ SEH_Web kim0 (07/27/02)
• Phenoelit Advisory, 0815 ++ * - Cisco_tftp kim0 (07/27/02)
• RE: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Burton M. Strauss III (07/26/02)
• Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) Kanatoko (07/26/02)
• RE: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) Coffin, Chris (07/26/02)
• Re: Announcement: injectso-0.2 Barton Miller (07/26/02)
• Re: VNC authentication weakness Jose Nazario (07/26/02)
• Re: VNC authentication weakness Constantin Kaplinsky (07/26/02)
• SECURITY.NNOV: multiple vulnerabilities in JanaServer 3APA3A (07/26/02)
• Re: VNC authentication weakness Mitch Adair (07/26/02)
• Re: [Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 http-equiv@excite.com (07/26/02)
• IPSwitch IMail ADVISORY/EXPLOIT/PATCH 2c79cbe14ac7d0b8472d3f129fa1df (07/26/02)
• Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Nick FitzGerald (07/26/02)
• RE: VNC authentication weakness Andrew van der Stock (07/26/02)
• Re: VNC authentication weakness David Wagner (07/26/02)
• RE: PGP 7.04 Patch Modifies the Password Cache Setting Cohen, Steve (07/26/02)
• Re: VMware GSX Server Remote Buffer Overflow Eric Horschman (07/26/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta kelli burkinshaw (07/26/02)
• Re: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) David Beards (07/26/02)
• Re: Apple OSX and iDisk and Mail.app Daryl Tester (07/25/02)
• SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. c c (07/26/02)
• KaZaa v1.7.1 Denial of Service Attack josh@pulltheplug.com (07/25/02)
• Re: Interface promiscuity obscurity in Linux Jim Mellander (07/25/02)
• Re: Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) Knud Erik Højgaard (07/25/02)
• 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) Szulc Roger (07/25/02)
• [RHSA-2002:139-10] Updated glibc packages fix vulnerabilities in resolver bugzilla@redhat.com (07/25/02)
• Re: SSH Protocol Trick Markus Friedl (07/24/02)
• Re: VNC authentication weakness Andreas Beck (07/25/02)
• PGP 7.04 Patch Modifies the Password Cache Setting Steve.Cohen@EchoStar.Com (07/25/02)
• Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Jeff Kell (07/25/02)
• Re: VNC authentication weakness Jack Lloyd (07/24/02)
• Re: Apple OSX and iDisk and Mail.app Eric Hall (07/25/02)
• Re: Interface promiscuity obscurity in Linux Casper Dik (07/25/02)
• ezContents multiple vulnerabilities Ulf Harnhammar (07/25/02)
• Re: Interface promiscuity obscurity in Linux Paul Starzetz (07/25/02)
• VU#197395 Microsoft IIS SMTP encapsulated e-mail address vulnerability - update TLR@portcullis-security.com (07/23/02)
• Re: Interface promiscuity obscurity in Linux quentyn@fotango.com (07/25/02)
• Re: Acrobat reader 5.05 temp file insecurity secfocus@downhill.at.eu.org (07/25/02)
• Re: Interface promiscuity obscurity in Linux Frédéric Raynal (07/25/02)
• Re: Interface promiscuity obscurity in Linux Glynn Clements (07/25/02)
• Re: Interface promiscuity obscurity in Linux Ademar de Souza Reis Jr. (07/25/02)
• Novell GroupWise 6.0.1 Support Pack 1 Bufferoverflow Marco van Berkum (07/25/02)
• Uninets StatsPlus 1.25 script injection vulnerabilities BrainRawt . (07/25/02)
• UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 http-equiv@excite.com (07/25/02)
• Re: REFRESH: EUDORA MAIL 5.1.1 Doug Monroe (07/25/02)
• Medium security hole affecting W3Mail Tim Brown (07/25/02)
• Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) NGSSoftware Insight Security Research (07/25/02)
• ISS Brief: Remote Buffer Overflow Vulnerability in Microsoft Exchange Server (fwd) Dave Ahmad (07/25/02)
• Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) Dave Ahmad (07/25/02)
• Microsoft Security Bulletin MS02-038: Cumulative Patch for SQL Server 2000 Service Pack 2 (Q316333) (fwd) Dave Ahmad (07/25/02)
• Microsoft Security Bulletin MS02-036: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138) (fwd) Dave Ahmad (07/25/02)
• Microsoft Security Bulletin MS02-039: Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875) (fwd) Dave Ahmad (07/25/02)
• Re: Interface promiscuity obscurity in Linux plattner@caltech.edu (07/25/02)
• Re: Interface promiscuity obscurity in Linux Rasmus Bøg Hansen (07/25/02)
• Re: Apple OSX and iDisk and Mail.app Dale Southard (07/24/02)
• CacheFlow CacheOS Cross-site Scripting Vulnerability T.Suzuki (07/25/02)
• Re: Apple OSX and iDisk and Mail.app spam_bucket@mac.com (07/25/02)
• Re: Apple OSX and iDisk and Mail.app osx_guru (07/24/02)
• Re: VNC authentication weakness Iván Arce (07/24/02)
• Interface promiscuity obscurity in Linux Ricardo Branco (07/24/02)
• Pegasus mail DoS Auriemma Luigi (07/24/02)
• [ESA-20020724-018] Buffer overflow in BIND4-derived resolver code. EnGarde Secure Linux (07/24/02)
• Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Steven Champeon (07/24/02)
• Re: VNC authentication weakness David Frascone (07/24/02)
• Apple OSX and iDisk and Mail.app Randal L. Schwartz (07/24/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Andrea Lisci (07/24/02)
• Denial of Service bug in Pine 4.44 Martin J. Muench (07/24/02)
• Cisco Security Advisory: Heap Overflow in Solaris cachefs Daemon Cisco Systems Product Security Incident Response Team (07/24/02)
• Potential remote root in CodeBlue log scanner Demi Sex God from Hell (07/24/02)
• cross-site scripting bug of Mailman office (07/24/02)
• Cobalt Qube 3 Administration page pokley (07/24/02)
• RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 GreyMagic Software (07/24/02)
• Re: Nanog traceroute format string exploit. Olaf Kirch (07/24/02)
• RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 Thor Larholm (07/24/02)
• Re: Pressing CTRL in IE is dangerous - Sandblad advisory #8 Peter Pentchev (07/24/02)
• VNC authentication weakness jepler@unpythonic.net (07/24/02)
• Icq 2001&2002 vulnerability Michael (07/24/02)
• Re: Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) bd@bc-bd.org (07/24/02)
• VMware GSX Server Remote Buffer Overflow Mingyan Liu (07/24/02)
• Mozilla cookie stealing - Sandblad advisory #9 Andreas Sandblad (07/24/02)
• REFRESH: EUDORA MAIL 5.1.1 http-equiv@excite.com (07/24/02)
• Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) 0x36@hushmail.com (07/24/02)
• How to reproduce PHP segfault. Joseph S. Testa II (07/24/02)
• Re: Nanog traceroute format string exploit. Ryan Mansager (07/24/02)
• Re: PHP Resource Exhaustion Denial of Service vjt (07/23/02)
• Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta kelli burkinshaw (07/23/02)
• Re: SSH Protocol Trick Mikael Olsson (07/23/02)
• Pressing CTRL in IE is dangerous - Sandblad advisory #8 Andreas Sandblad (07/23/02)
• Re: SSH Protocol Trick stealth (07/23/02)
• MailMax security advisory/exploit/patch 2c79cbe14ac7d0b8472d3f129fa1df (07/23/02)
• Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Kyuzo (07/23/02)
• PHRACK 59 OFFICIAL RELEASE Phrack Staff (07/23/02)
• Re: SSH Protocol Trick stealth (07/23/02)
• Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack Neil W Rickert (07/23/02)
• Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 John Pettitt (07/23/02)
• Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack Andrew Church (07/23/02)
• [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Lupe Christoph (07/22/02)
• RE: PHP Resource Exhaustion Denial of Service Russ Garrett (07/22/02)
• Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack David Walker (07/22/02)
• Announcement: injectso-0.2 Shaun Clowes (07/23/02)
• Re: SSH Protocol Trick H D Moore (07/23/02)
• SSH Protocol Trick auto458545@hushmail.com (07/23/02)
• Nanog traceroute format string exploit. SpaceWalker (07/21/02)
• Security Update: [CSSA-2002-SCO.35] OpenServer 5.0.5 OpenServer 5.0.6 : crontab format string vulnerability security@caldera.com (07/22/02)
• Pablo Sofware Solutions FTP server Directory Traversal Vulnerability Securiteinfo.com (07/22/02)
• Re: Norton AV 2002 rewriting SMTP, breaking TLS Adam Shostack (07/22/02)
• PHP Resource Exhaustion Denial of Service Matthew Murphy (07/21/02)
• Re: BadBlue - Unauthorized Administrative Command Execution ellipse (07/20/02)
• Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer (07/22/02)
• Vulnerability found: Adobe Acrobat eBook Reader and Content Server Vladimir Katalov (07/22/02)
• PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Marko Karppinen (07/22/02)
• Advisory 02/2002: PHP remote vulnerability e-matters Security (07/22/02)
• BadBlue - Unauthorized Administrative Command Execution Matthew Murphy (07/20/02)
• Re: AIM Exploit!! john smith (07/20/02)
• Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code rwertenb@mit.edu (07/20/02)
• AIM Exploit!! tuna (07/20/02)
• ANNOUNCING: Debian GNU/Linux 3.0 martin f krafft (07/20/02)
• BadBlue 302 Status Message XSS Matthew Murphy (07/20/02)
• RE: Norton AV 2002 rewriting SMTP, breaking TLS Owen, Greg (07/19/02)
• Re: Linux kernel setgid implementation flaw FozZy (07/19/02)
• Re: Linux kernel setgid implementation flaw Wietse Venema (07/19/02)
• RE: Norton AV 2002 rewriting SMTP, breaking TLS Russell Mann (07/19/02)
• Re: Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller 3APA3A (07/19/02)
• tru64 proof of concept /bin/su non-exec bypass phased@webtribe.net (07/19/02)
• Re: Linux kernel setgid implementation flaw FozZy (07/19/02)
• Re: [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting Matt Moore (07/19/02)
• Re: ICQ and MSIE allow execution of arbitrary code Jelmer (07/18/02)
• Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller Ron Ray (07/18/02)
• Linux kernel setgid implementation flaw FozZy (07/19/02)
• Re: ICQ and MSIE allow execution of arbitrary code Stan Bubrouski (07/17/02)
• Norton AV 2002 rewriting SMTP, breaking TLS Dale Clapperton (lists) (07/17/02)
• Geeklog XSS and CRLF Injection Ulf Harnhammar (07/19/02)
• Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code Bojidar Alexandrov (07/18/02)
• Trend Micro Officescan Denial of Service Marc Ruef (07/17/00)
• asciiSECURE advisory (2002-07-17/1) lumpy (07/17/02)
• [CLA-2002:512] Conectiva Linux Security Announcement - libpng secure@conectiva.com.br (07/17/02)
• WINAMP also allows execution of arbitrary code (probably a lot more programs aswell) Jelmer (07/18/02)
• Re: KPMG-2002033: Resin DOS device path disclosure security-protocols@hushmail.com (07/17/02)
• Fwd: non-disclosed info in Outlook can lead to potential serious Social Attack. Intel Nop (07/17/02)
• Re: Sniffable Switch Project martin f krafft (07/17/02)
• [AP] Oracle Reports Server Information Disclosure Vulnerability skp (07/17/02)
• Java webstart also allows execution of arbitrary code Jelmer (07/18/02)
• MERCUR Mailserver advisory/remote exploit 2c79cbe14ac7d0b8472d3f129fa1df (07/18/02)
• wwwoffle-2.7b and prior segfaults with negative Content-Length value qitest1 (07/18/02)
• MDKSA-2002:044 - squid update Mandrake Linux Security Team (07/17/02)
• Administrivia: Symantec acquiring SecurityFocus aleph1@securityfocus.com (07/17/02)
• KPMG-2002034: Jigsaw Webserver DOS device DoS Peter Gründl (07/17/02)
• Wiki module postnuke Cross Site Scripting Vulnerability Pistone (07/17/02)
• Exploit for a security hole in the pickle module for Python versions <= 2.1.x Jeff Epler (07/17/02)
• Re:[VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting xile@hushmail.com (07/17/02)
• Re: Sniffable Switch Project martin f krafft (07/17/02)
• KPMG-2002033: Resin DOS device path disclosure Peter Gründl (07/17/02)
• KPMG-2002032: Macromedia Sitespring Cross Site Scripting Peter Gründl (07/17/02)
• KPMG-2002031: Jigsaw Webserver Path Disclosure Peter Gründl (07/17/02)
• MDKSA-2002:043 - bind update Mandrake Linux Security Team (07/16/02)
• Security Update: [CSSA-2002-031.0] Linux: mod_ssl off-by-one error security@caldera.com (07/17/02)
• Re: AIM forced behavior "issue" Knud Erik Højgaard (07/16/01)
• ICQ and MSIE allow execution of arbitrary code Jelmer (07/16/02)
• Re: Sniffable Switch Project Frédéric Raynal (07/16/02)
• [RHSA-2002:134-12] Updated mod_ssl packages available bugzilla@redhat.com (07/16/02)
• Re: Sniffable Switch Project Cedric Blancher (07/16/02)
• Sniffable Switch Project alaric@alaricsecurity.com (07/16/02)
• Outpost24 Advisory: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability Lucas Lundgren (07/16/02)
• Error in MS mail handler - noncritical but a problem Fred Cohen (07/14/02)
• RE: New Paper: Microsoft SQL Server Passwords John Tolmachofft (07/15/02)
• Re: Remote ICQ Sound Desactivation Adam [wp-ckkl] (07/16/02)
• AIM forced behavior "issue" orb (07/16/02)
• Security Update: [CSSA-2002-SCO.33] OpenServer 5.0.5 OpenServer 5.0.6 : timed does not enforce nulls security@caldera.com (07/16/02)
• Security Update: [CSSA-2002-SCO.34] OpenServer 5.0.5 OpenServer 5.0.6 : uux status file name buffer overflow security@caldera.com (07/16/02)
• Re: Hosting Controller Vulnerability Ben M (07/15/02)
• Re: Remote ICQ Sound Desactivation Knud Erik Højgaard (07/15/01)
• Again NULL and addslashes() (now in 123tkshop) avart@gmx.de (07/15/02)
• Remote ICQ Sound Desactivation xLaNT (07/15/02)
• RE: MacOS X SoftwareUpdate Vulnerability Hundley, Gordon - Princeton (07/15/02)
• @stake Advisory: Norton Personal Internet Firewall HTTP Proxy Vulnerability advisories@atstake.com (07/15/02)
• Re: [VulnWatch] 5 bugs Simon Hausmann (07/15/02)
• FreeBSD Security Advisory FreeBSD-SA-02:31.openssh FreeBSD Security Advisories (07/15/02)
• Re: Hosting Controller Vulnerability James Griffin (07/14/02)
• Re: [VulnWatch] 5 bugs Kurt Seifried (07/15/02)
• Re: Cisco VPN3000 gateway MTU overflow Pete Davis (07/15/02)
• Tivoli TMF Endpoint Buffer Overflow Mark A. Rowe (PenTest) (07/15/02)
• Tivoli TMF ManagedNode Buffer Overflow Mark A. Rowe (PenTest) (07/15/02)
• TSLSA-2002-0061 - bind Trustix Secure Linux Advisor (07/15/02)
• TSLSA-2002-0062 - squid Trustix Secure Linux Advisor (07/15/02)
• pwc.20020630.nims_modweb.b patrik.karlsson@se.pwcglobal.com (07/15/02)
• pwc.20020630.nims_3.0.3_imapd.a patrik.karlsson@se.pwcglobal.com (07/15/02)
• Re: Hosting Controller Vulnerability Muhammad Faisal Rauf Danka (07/14/02)
• Re: Multiple vulnerabilities in atphttpd-0.4b badc0ded@badc0ded.com (07/02/02)
• Double Choco Latte multiple vulnerabilities Ulf Harnhammar (07/14/02)
• Hosting Controller Vulnerability Ben M (07/13/02)
• SGI Apache Web Server Chunk Handling vulnerability SGI Security Coordinator (07/13/02)
• RE: MacOS X SoftwareUpdate Vulnerability jaehnel@web.de (07/13/02)
• Re: MFC ISAPI Framework Buffer Overflow Chris Wysopal (07/13/02)
• MFC Overflow Test Code Matthew Murphy (07/13/02)
• Three BadBlue Vulnerabilities Matthew Murphy (07/13/02)
• The answer to the PIX encryption issue Damir Rajnovic (07/12/02)
• MFC ISAPI Framework Buffer Overflow Matthew Murphy (07/11/02)
• FreeBSD Security Advisory FreeBSD-SA-02:30.ktrace FreeBSD Security Advisories (07/12/02)
• SQL Server passwords patrik.karlsson@se.pwcglobal.com (07/12/02)
• FreeBSD Security Advisory FreeBSD-SA-02:29.tcpdump FreeBSD Security Advisories (07/12/02)
• @stake Advisory: Multiple Vulnerabilities with Pingtel xpressa SIP Phones @stake advisories (07/12/02)
• 5 bugs D4rkGr3y (07/12/02)
• Vulnerability found: The Adobe eBook Library Vladimir Katalov (07/12/02)
• Re: Cisco VPN3000 MTU overflow (fragmentation issue) porte10@free.fr (07/12/02)
• Multiple vulnerabilities in atphttpd-0.4b qitest1 (07/12/02)
• Re: ZyXEL Prestige Router Remote Node Filtering Vulnerability still present Daniel Roethlisberger (07/12/02)
• [SPSadvisory#47]RealONE Player Gold / RealJukebox2 skin file download vulnerability webmaster (07/12/02)
• Several problems in CARE 2002 avart@gmx.de (07/12/02)
• Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability JWC@portcullis-security.com (07/12/02)
• Re: MacOS X SoftwareUpdate Vulnerability gabriel rosenkoetter (07/12/02)
• [SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow webmaster (07/12/02)
• [CLA-2002:507] Conectiva Linux Security Announcement - Resolver libraries secure@conectiva.com.br (07/11/02)
• Exploit: TL003/Dot Bug = Reading Non-Parsable Files Matthew Murphy (07/11/02)
• RE: Tiny Software and Sygate contact Seth Knox (07/11/02)
• Re: Tiny Software and Sygate contact Paul Schmehl (07/11/02)
• Re: Cisco VPN3000 gateway MTU overflow Steve McIlwain (07/11/02)
• RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) Aaron C. Newman (07/12/02)
• RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) Hall, Philip (07/11/02)
• IRIX DNS resolver vulnerability SGI Security Coordinator (07/11/02)
• ZyXEL Prestige Router Remote Node Filtering Vulnerability still present Bernardo Pons (07/11/02)
• RE: Multiple Security Vulnerabilities in Sharp Zaurus Moorhouse, Walt P (07/11/02)
• Popcorn vulnerabilities bugtest@sitoverde.com (07/11/02)
• Re: MacOS X SoftwareUpdate Vulnerability Corey J. Steele (07/11/02)
• Security Update: [CSSA-2002-SCO.28] UnixWare 7.1.1 Open UNIX 8.0.0 : rpc.ttdbserverd file creation and deletion vulnerabilities security@caldera.com (07/11/02)
• Re: Multiple Security Vulnerabilities in Sharp Zaurus Jordan K Wiens (07/11/02)
• Lil'HTTP Pbcgi.cgi XSS Vulnerability Matthew Murphy (07/11/02)
• SQL Server passwords David Litchfield (07/11/02)
• Tiny Software and Sygate contact Jonas Koch (07/11/02)
• SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file c c (07/11/02)
• Portcullis Security Advisory - Directory Traversal Vulnerability in SunPS iRunbook 2.5.2 JWC@portcullis-security.com (07/11/02)
• Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) NGSSoftware Insight Security Research (07/11/02)
• Re: XSS in ht://Dig Geoff Hutchison (07/11/02)
• Re: Multiple Security Vulnerabilities in Sharp Zaurus Stephen Harris (07/10/02)
• RE: New Paper: Microsoft SQL Server Passwords Pauli Porkka (07/10/02)
• Re: Linux kernels DoSable by file-max limit Andrea Arcangeli (07/10/02)
• [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server Iván Arce (07/11/02)
• Cisco VPN3000 gateway MTU overflow porte10@free.fr (07/11/02)
• EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability Marc Maiffret (07/11/02)
• Re: Linux kernels DoSable by file-max limit Jim Breton (07/10/02)
• Re: iPlanet Remote File Viewing hubbelyo@yahoo.com (07/10/02)
• XSS Hole in Fluid Dynamics search Engine VALDEUX@aol.com (07/10/02)
• SuSE Security Announcement: Resolver (SuSE-SA:2002:026) Olaf Kirch (07/10/02)
• RE: XSS Hole in Fluid Dynamics Search engine Zoltan Milosevic (07/10/02)
• Multiple Security Vulnerabilities in Sharp Zaurus SURUAZ (07/10/02)
• IE allows universal Cross Domain Scripting (TL#003) Thor Larholm (07/10/02)
• wp-02-0012: Carello 1.3 Remote File Execution Matt Moore (07/10/02)
• wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting Matt Moore (07/10/02)
• wp-02-0008: Apache Tomcat Cross Site Scripting Matt Moore (07/10/02)
• Re: Linux kernels DoSable by file-max limit elv@openbeer.it (07/09/02)
• RE: New Paper: Microsoft SQL Server Passwords Toni Lassila (07/09/02)
• iPlanet Remote File Viewing turambar386@routergod.com (07/09/02)
• Exploit for previously reported DoS issues in Shambala Server 4.5 Daniel Nyström (07/09/02)
• ALERT: Working Resources BadBlue #2 (DoS, Heap Overflow) Matthew Murphy (07/09/02)
• Re: Linux kernels DoSable by file-max limit Aleksander Adamowski (07/09/02)
• Re: Linux kernels DoSable by file-max limit Michal Zalewski (07/09/02)
• Re: Linux kernels DoSable by file-max limit Paul Starzetz (07/09/02)
• SuSE Security Announcement: squid (SuSE-SA:2002:025) Roman Drahtmueller (07/09/02)
• KPMG-2002030: Watchguard Firebox Dynamic VPN Configuration Protocol DoS Peter Gründl (07/09/02)
• Sun iPlanet Web Server Buffer Overflow (#NISR09072002) NGSSoftware Insight Security Research (07/09/02)
• Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT kanix (07/09/02)
• Re: Linux kernels DoSable by file-max limit Kurt Seifried (07/09/02)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel (07/08/02)
• Foundstone Advisory - Buffer Overflow in MyWebServer (fwd) Dave Ahmad (07/08/02)
• BadBlue 1.73 EXT.DLL XSS Variant Matthew Murphy (07/08/02)
• Re: MacOS X SoftwareUpdate Vulnerability Kurt Seifried (07/08/02)
• Technical Details of Urlcount.cgi Vulnerability Matthew Murphy (07/08/02)
• KF Web Server version 1.0.2 shows file and directory content Securiteinfo.com (07/07/02)
• Linux kernels DoSable by file-max limit Paul Starzetz (07/07/02)
• Technical Details of BadBlue EXT.DLL Vulnerability Matthew Murphy (07/08/02)
• Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT Olaf Kirch (07/08/02)
• New Paper: Microsoft SQL Server Passwords NGSSoftware Insight Security Research (07/08/02)
• Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT KF (06/13/02)
• KPMG-2002029: Bea Weblogic Performance Pack Denial of Service Peter Gründl (07/08/02)
• Re: MacOS X SoftwareUpdate Vulnerability Julian Suschlik (07/08/02)
• sparc exploit for known solaris 8 kcms_configure overflow Adam Slattery (07/07/02)
• MacOS X SoftwareUpdate Vulnerability Russell Harding (07/07/02)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin (07/07/02)
• LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT kanix THE HACKER (07/06/02)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin (07/06/02)
• Re: Sybase contact Ryan Russell (07/05/02)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel (07/05/02)
• remote winamp 2.x exploit (all current versions) 2c79cbe14ac7d0b8472d3f129fa1df (07/05/02)
• UT (and other game-servers) DDOS Tom (07/05/02)
• Sybase contact Aaron C. Newman (07/05/02)
• [CLA-2002:506] Conectiva Linux Security Announcement - squid secure@conectiva.com.br (07/05/02)
• Re: BIND 9.2.1 patch, multiple RR's for singleton types. Tim Gladding (07/03/02)
• MDKSA-2002:042 - LPRng updates Mandrake Linux Security Team (07/04/02)
• Worldspan DoS altomo (07/04/02)
• Re: Remote buffer overflow in resolver code of libc Florian Weimer (07/04/02)
• UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin (07/04/02)
• [CLA-2002:505] Conectiva Linux Security Announcement - ethereal secure@conectiva.com.br (07/04/02)
• Re: BIND 9.2.1 patch, multiple RR's for singleton types. der Mouse (07/04/02)
• Re: Remote buffer overflow in resolver code of libc D. J. Bernstein (07/04/02)
• MDKSA-2002:041 - kernel 2.2 and 2.4 updates Mandrake Linux Security Team (07/04/02)
• Re: UT DDoS risk (possible solution) Auriemma Luigi (01/02/00)
• nn remote format string vulnerability zillion (07/04/02)
• Re: Acrobat reader 5.05 temp file insecurity Paul Szabo (07/04/02)
• [OpenPKG-SA-2002.006] OpenPKG Security Advisory (bind) OpenPKG (07/04/02)
• [RHSA-2002:051-16] New Squid packages available bugzilla@redhat.com (07/04/02)
• Squid Security Update Advisory 2002:3 Henrik Nordstrom (07/03/02)
• [Global InterSec 2002062801] OpenSSH challenge-response buffer overflow (Update) Global InterSec Research (07/03/02)
• SunPCi II VNC weak authentication scheme vulnerability Richard van den Berg (07/03/02)
• Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002) NGSSoftware Insight Security Research (07/03/02)
• Re: CommuniGate Pro directory listings tfm@tfm.org (07/03/02)
• NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd)) 3APA3A (07/03/02)
• Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal nfinity@gmx.net (07/03/02)
• Security Update: [CSSA-2002-SCO.31] UnixWare 7.1.1 Open UNIX 8.0.0 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error security@caldera.com (07/02/02)
• Security Update: [CSSA-2002-SCO.32] OpenServer 5.0.5 OpenServer 5.0.6 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error security@caldera.com (07/02/02)
• MDKSA-2002:040-1 - openssh update Mandrake Linux Security Team (07/03/02)
• Re: Three problems in OpenSSH's ssh-keysign Theo de Raadt (07/03/02)
• Three problems in OpenSSH's ssh-keysign Charles Hannum (07/03/02)
• CORE-20020620: Inktomi Traffic Server Buffer Overflow Iván Arce (07/03/02)
• Noguska Nola 1.1.1 [ Intranet Business Management Software ] sindhi@hushmail.com (07/02/02)
• Falsifying a VeriSign Seal (Japan) Noam Rathaus (07/02/02)
• SuSE Security Announcement: openssh (SuSE-SA:2002:024) Roman Drahtmueller (07/02/02)
• Re: BIND 9.2.1 patch, multiple RR's for singleton types. Jim Reid (07/02/02)
• Re: Remote DoS in AnlaogX SimpleServer:www 1.16 by way of bugtest (07/02/02)
• BIND 9.2.1 patch, multiple RR's for singleton types. Tim Gladding (07/02/02)
• [ESA-20020702-017] off-by-one in mod_ssl's configuration directive handling EnGarde Secure Linux (07/02/02)
• Security Advisory: Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability Cisco Systems Product Security Incident Response Team (07/03/02)
• CommuniGate Pro directory listings c0rrect0r@hushmail.com (07/02/02)
• [CLA-2002:504] Conectiva Linux Security Announcement - apache secure@conectiva.com.br (07/02/02)
• PHPAuction bug ethx@hotmail.com (07/02/02)
• Re: XSS in Slashcode Jamie McCarthy (07/02/02)
• [ESA-20020702-016] several vulnerabilities in the OpenSSH daemon EnGarde Secure Linux (07/02/02)
• XSS in Slashcode gcsb (07/02/02)
• [SECURITY] [DSA-135-1] buffer overflow / DoS in libapache-mod-ssl Robert van der Meulen (07/02/02)
• Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) Dave Ahmad (07/01/02)
• BufferOverflow in OmniHTTPd 2.09 Martin J. Muench (07/01/02)
• CSS in blackboard Berend-Jan Wever (07/01/02)
• KPMG-2002028: Sitespring Server Denial of Service Peter Gründl (07/01/02)
• Revised OpenSSH Security Advisory Markus Friedl (07/01/02)
• PTL-2002-03 Betsie XSS Vuln Mark A. Rowe (PenTest) (07/01/02)
• KPMG-2002026: Jrun sourcecode Disclosure Peter Gründl (07/01/02)
• Proof of Concept Code for OpenSSH gobbles@hushmail.com (07/01/02)
• ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Hank Leininger (07/01/02)
• UT DDoS risk bugtest@sitoverde.com (01/01/00)

Last message date: 07/31/02
Archived on: 07/31/02 CEST

---

432 messages sorted by: [ author ] [ thread ] [ subject ] [ attachment ]

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(16)