SecurityFocus Bugtraq
By Author

433 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 08/01/02
Ending: 08/31/02

• 3APA3A
  • bugtraq@security.nnov.ru list issues [2] (08/21/02)
  • SECURITY.NNOV: Windows 2000 system partition weak default permissions (08/05/02)
• <-delusion->
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts. (08/16/02)
  • PHP-Nuke v5.6 - Users can compromise admin accts. (08/15/02)
• @stake Advisories
  • Microsoft Terminal Server Client Buffer Overrun (A082802-1) (08/28/02)
  • NTFS Hard Links Subvert Auditing (A081602-1) (08/16/02)
  • @stake advisory: WS_FTP SITE CPWD Buffer Overflow vulnerability (a090902-1) (08/08/02)
• Aaron C. Newman
  • Manipulating Microsoft SQL Server Using SQL Injection (08/28/02)
• Aaron Lu
  • NSSI-2002-tpfw: Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities (08/20/02)
• Abraham Lincoln
  • Re: Kerio Mail Server Multiple Security vulnerabilities (08/29/02)
  • Kerio Personal Firewall DOS Vulnerability (08/26/02)
  • Kerio Mail Server Multiple Security Vulnerabilities (08/19/02)
• Adam [onet]
  • IE [with Google Toolbar installed] crash (08/15/02)
• Adam Megacz
  • TinySSL Vendor Statement: Basic Constraints Vulnerability (08/11/02)
  • Re: White paper: Exploiting the Win32 API. (08/07/02)
• Adam Sampson
  • Re: FreeBSD Security Advisory FreeBSD-SA-02:34.rpc (08/01/02)
• Adam Young
  • Fw: [slackware-security] Security updates for Slackware 8.1 (08/02/02)
• Alberto Devesa
  • Re: Lynx CRLF Injection, part two (08/23/02)
• aleph1@securityfocus.com
  • Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG (08/12/02)
• Alex Gantman
  • Security side-effects of Word fields (08/26/02)
• Alex Loots
  • Re: IE SSL Vulnerability (08/07/02)
• Alex Muntada
  • Re: Information disclosure on mod_auth ( apache 1.3.26 ) ? (08/22/02)
• Andrew Ferreira
  • Re: Phenoelit Advisory 0815 ++ -- Brick (08/01/02)
• Andrew G. Tereschenko
  • Multiple security vulnerabilities inside Microsoft File Transfer Manager ActiveX control (<4.0) [buffer overflow, arbitrary file upload/download] (08/18/02)
  • Repost: Buffer overflow in Microsoft DirectX Files Viewer xweb.ocx (<2,0,16,15) ActiveX sample (08/17/02)
• Andrew Oman
  • Re: SUMMARY: Disabling Port 445 (SMB) Entirely (08/30/02)
• Andrey Kolishak
  • Re: White paper: Exploiting the Win32 API. (08/07/02)
• Anthony DeRobertis
  • Re: IPv4 mapped address considered harmful (08/27/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
• ATD
  • Formal Response to HP (08/01/02)
• Atsushi Nishimura
  • [SNS Advisory No.55 rev.2] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/08/02)
• Auriemma Luigi
  • Blazix 1.2 jsp view and free protected folder access (08/24/02)
  • Abyss 1.0.3 directory traversal and administration bugs (08/22/02)
  • Apache 2.0.39 directory traversal and path disclosure bug (08/16/02)
  • Lcc-win32 infos diffusion (08/02/02)
• avart@gmx.de
  • code injection in gallery (08/01/02)
• Aviram Jenik
  • Webmin Vulnerability Leads to Remote Compromise (RPC CGI) (08/28/02)
• Avleen Vig
  • Re: Internet explorer can read local files (08/17/02)
• badc0ded
  • Re: qmailadmin SUID buffer overflow (07/25/02)
• Balazs Scheidler
  • Re: IE SSL Vulnerability (08/08/02)
  • Re: IE SSL Vulnerability (08/08/02)
• bda
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] (08/23/02)
• Bharat Mediratta
  • Re: Additional bugs in gallery (08/01/02)
• Bill Fryberger
  • Re: IE [with Google Toolbar installed] crash (08/15/02)
• Bob Castleberry
  • RE: DoS against mysqld (08/23/02)
• Branson Matheson
  • Re: It takes two to tango (07/31/02)
• Brendan C. Johnson
  • Solaris 2.6-8 SPARC Telnetd Vulnerability (08/21/02)
• Brent Glover
  • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) (08/25/02)
• Brett Moore
  • Tiny3 vs Winhelp32 Bof (08/19/02)
• Brian Taylor
  • IE bug not fixed - update (08/27/02)
• Bromirski, Lukasz
  • LG Electronics LG3001f router (08/21/02)
• Bugtest
  • SWServer 2.2 directory traversal bug (08/28/02)
• bugzilla@redhat.com
  • [RHSA-2002:162-12] PXE server crashes from certain DHCP packets (08/30/02)
  • [RHSA-2002:169-13] Updated ethereal packages are available (08/29/02)
  • [RHSA-2002:176-06] Updated mailman packages close cross-site scripting vulnerability (08/23/02)
  • [RHSA-2002:158-09] New kernel update available, fixes i810 video oops, several security issues (08/21/02)
  • [RHSA-2002:109-07] Updated bugzilla packages fix security issues (08/20/02)
  • [RHSA-2002:102-26] New PHP packages fix vulnerability in safemode (08/20/02)
  • [RHSA-2002:151-21] Updated libpng packages fix buffer overflow (08/19/02)
  • [RHSA-2002:172-07] Updated krb5 packages fix remote buffer overflow (08/15/02)
  • [RHSA-2002:166-07] Updated glibc packages fix vulnerabilities in RPC XDR decoder (08/13/02)
  • [RHSA-2002:148-06] Updated Tcl/Tk packages fix local vulnerability (08/12/02)
  • [RHSA-2002:133-13] Updated bind packages fix buffer overflow in resolver library (08/09/02)
  • [RHSA-2002:156-04] Updated secureweb packages fix temporary file handling (08/06/02)
• Carl R Diliberto
  • "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1 (08/15/02)
• Carlos Laviola
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/11/02)
• Casper Dik
  • Re: Solaris 2.6-8 SPARC Telnetd Vulnerability (08/21/02)
  • Re: FreeBSD Security Advisory FreeBSD-SA-02:34.rpc (08/04/02)
• Cesar
  • Re: Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) (08/23/02)
• Chad Loder
  • Re: White paper: Exploiting the Win32 API. (08/06/02)
• Charles Hannum
  • RPC analysis (08/01/02)
• Charles Miller
  • Re: IE SSL Vulnerability (08/19/02)
• chip
  • Multiple Cyan Chat Exploits (08/03/02)
• Chip Andrews
  • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) (08/26/02)
• Chris
  • Re: CSS bug in Winamp (08/09/02)
• Chris Calabrese
  • Re: White paper: Exploiting the Win32 API. (08/07/02)
• Chris Paget
  • Re: White paper: Exploiting the Win32 API. (08/29/02)
  • Re: White paper: Exploiting the Win32 API. (08/06/02)
  • White paper: Exploiting the Win32 API. (08/06/02)
  • Re: It takes two to tango (07/31/02)
• Christian Bahls
  • trojan horse in recent openssh (version 3.4 portable 1) (08/01/02)
• Christopher G. Lewis
  • RE: Bypassing cookie restrictions in IE 5+6 (08/06/02)
• Chuck
  • Re: IE [with Google Toolbar installed] crash (08/16/02)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability (08/14/02)
  • Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities (08/12/02)
  • Cisco Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability (08/07/02)
• Claudio Ortiz Meinberg
  • TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC (07/31/02)
• Colin Stefani
  • RE: Windows 2000 Service Pack 3 now available. (08/01/02)
• D4rkGr3y
  • new bugs in MyWebServer (08/14/02)
• Dallachiesa Michele
  • bug in KSTAT (07/31/02)
• Daniel Ahlberg
  • GLSA: ethereal (08/30/02)
  • GLSA: gaim (08/27/02)
  • GLSA: PostgreSQL (08/26/02)
  • GLSA: xinetd (08/14/02)
• DarC KonQuesT
  • IceWarp Webmail XSS (08/15/02)
• Darren Reed
  • Re: Windows 2000 Service Pack 3 now available. (08/02/02)
• Dave Ahmad
  • [security bulletin] SSRT2275 HP Tru64 UNIX - Potential Buffer Overflows & SSRT2229 Potential Denial of Service (fwd) (08/31/02)
• Dave Aitel
  • Re: iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow (08/28/02)
  • Re: Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002) (08/09/02)
  • MS SQL Server Hello Overflow NASL script (08/07/02)
  • SPIKE 2.5 and associated vulns (08/06/02)
• Dave English
  • Re: "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1 (08/16/02)
• David Endler
  • iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow (08/28/02)
  • iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (08/08/02)
• david evlis reign
  • kerberos rpc xdr_array (08/02/02)
• David Litchfield
  • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) (08/26/02)
  • Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) (08/22/02)
  • Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) (08/16/02)
  • Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A) (08/16/02)
• Declan McCullagh
  • Re: Comment on DMCA, Security, and Vuln Reporting] (08/01/02)
• Derek D. Martin
  • vulnerabilities in scponly (08/20/02)
  • Re: It takes two to tango (08/01/02)
• Derrick J Brashear
  • OpenAFS Security Advisory 2002-001: Remote root vulnerability in OpenAFS servers (08/04/02)
• Dimitri Sekhniashvili
  • MidiCart Shopping Cart Software database vulnerability (08/07/02)
• DownBload
  • CSS bug in Winamp (08/05/02)
• Drew
  • RE: White paper: Exploiting the Win32 API. (08/28/02)
  • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/13/02)
  • RE: Winhelp32 Remote Buffer Overrun (08/07/02)
  • RE: Winhelp32 Remote Buffer Overrun (08/07/02)
• dvdman
  • Freebsd FD exploit (08/19/02)
• Ed Reed
  • NOVL-2002-2961546 - SNMPv1 Trap and Request HandlingVulnerabilities (08/24/02)
  • NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2 (08/21/02)
  • NOVL-2002-2963307 - PERL Handler Vulnerability (08/20/02)
  • NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability (08/20/02)
  • NOVL-2002-FAQ - Novell Security Alerts Facts Sheet (08/12/02)
  • NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack (08/12/02)
• Eiji James Yoshida
  • Opera FTP View Cross-Site Scripting Vulnerability (08/06/02)
  • Mozilla FTP View Cross-Site Scripting Vulnerability (08/06/02)
  • Re: Microsoft Internet Explorer 'Folder View for FTP sites' Script Execution vulnerability (08/03/02)
• EnGarde Secure Linux
  • [ESA-20020807-020] ASN.1 vulnerability fix corrections (08/07/02)
• Eric Rescorla
  • Re: OpenSSL Vulnerabilities (08/02/02)
• Eric Stevens
  • RE: PHP-Nuke v5.6 - Users can compromise admin accts. (08/16/02)
• EXT-Bellers, Chris
  • Win32 API 'shatter' vulnerability found in VNC-based products (08/21/02)
• Fabio Pietrosanti (naif)
  • Re: Yet another SMB dos concept code (08/29/02)
• Florian Weimer
  • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL (08/20/02)
  • Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL (08/19/02)
  • Re: White paper: Exploiting the Win32 API. (08/06/02)
  • Re: White paper: Exploiting the Win32 API. (08/06/02)
  • RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines (08/05/02)
  • RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code (08/05/02)
• Florin Andrei
  • it's all about timing (07/31/02)
• FORENSICS.ORG Security Coordinator
  • The Large-Scale Threat of Bad Data in DNS (08/10/02)
• Frederic Deletang
  • Windows SMB DoS - Proof of concept (08/29/02)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-02:38.signed-error (08/19/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:36.nfs (08/06/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:35.ffs (08/06/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:37.kqueue (08/06/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:34.rpc [REVISED] (08/01/02)
  • FreeBSD Security Advisory FreeBSD-SA-02:34.rpc (08/01/02)
• FX
  • Cisco IOS exploit PoC (08/22/02)
• Fyodor
  • Nmap 3.00 Released -- http://www.insecure.org/ (08/02/02)
• Gary Flynn
  • Re: Delete arbitrary files using Help and Support Center [MSRC 1198dg] (08/16/02)
• Georgi Guninski
  • Re: [Full-Disclosure] Re: it's all about timing (08/01/02)
• ghandi
  • Sun AnswerBook2 format string and other vulnerabilities (08/02/02)
• Gibby McCaleb
  • RE: It takes two to tango (or samba for that matter) (07/31/02)
  • FW: It takes two to tango (or samba for that matter) (07/31/02)
• Gilles Parc
  • Vulnerability in Oracle (08/12/02)
• GooDWiN
  • `admin' bug in upb (08/25/02)
• Greg A. Woods
  • Re: It takes two to tango (07/31/02)
• Greg Steuck
  • Re: The Large-Scale Threat of Bad Data in DNS (08/13/02)
• GreyMagic Software
  • Accessing remote/local content in IE (GM#009-IE) (08/23/02)
  • RE: Exploiting the Google toolbar (GM#001-MC) (08/20/02)
  • Exploiting the Google toolbar (GM#001-MC) (08/08/02)
  • RE: Bypassing cookie restrictions in IE 5+6 (08/06/02)
• h1kari
  • ToorCon Computer Security Conference 2002 Announcement (08/23/02)
• Hack Hawk
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/06/02)
• Hal Flynn
  • New SecurityFocus Lists (08/19/02)
• Hauke Lampe
  • RE: Security side-effects of Word fields (08/30/02)
• Hector A. Paterno
  • Information disclosure on mod_auth ( apache 1.3.26 ) ? (08/17/02)
• http-equiv@excite.com
  • Terrible: Windows Media Player (08/22/02)
  • killer k00kie [was Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0] (08/20/02)
  • MODERATOR WAIT ! Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 (08/16/02)
  • SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 (08/15/02)
  • SAME LADY, DIFFERENT DRESS: Internet Explorer 6 (08/13/02)
• Huagang Xie
  • Yet another SMB dos concept code (08/29/02)
• ismail donmez
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/09/02)
• itojun@iijlab.net
  • Re: IPv4 mapped address considered harmful (08/23/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
  • Re: IPv4 mapped address considered harmful (08/27/02)
• Iván Arce
  • CORE-20020618: Vulnerabilities in Windows SMB (DoS) (08/23/02)
• J. Lasser
  • Re: IE SSL Vulnerability (08/20/02)
• J. S. Connell
  • Light Security Advisory: Remotely-exploitable code execution (08/22/02)
• Jacek Lipkowski
  • SNMP vulnerability in AVAYA Cajun firmware (08/05/02)
• Jacques A. Vidrine
  • Re: Freebsd FD exploit (08/20/02)
• James Martin
  • uuuppz.com - Advisory 002 - mIRC $asctime overflow (08/27/02)
• Jaroslav Snajdr
  • Re: Kerio Mail Server Multiple Security Vulnerabilities (08/27/02)
• Jason Coombs
  • SUMMARY: Disabling Port 445 (SMB) Entirely (08/30/02)
• Jason Giglio
  • Re: Kerio Personal Firewall DOS Vulnerability (08/26/02)
• JasonBrown777@netscape.net
  • Re: AOL Instant Messenger Heap Overflow (08/25/02)
• Javier Sanchez (Information Systems)
  • RE: Windows 2000 Service Pack 3 now available. (08/07/02)
• Jeff Mcadams
  • New l2tpd release 0.68 (08/13/02)
• Jelmer
  • Re: Internet explorer can read local files (08/17/02)
  • RETRY : newly released winamp 3 fails to address serious "execution of arbitrary" code issue when combined with MSIE6 (08/17/02)
  • Enableing java logging in MSIE is dangerous (08/17/02)
  • Internet explorer can read local files (08/17/02)
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts. (08/16/02)
  • Macromedia Flash plugin can read local files (08/08/02)
  • Bypassing cookie restrictions in IE 5+6 (08/04/02)
  • Re: Winhelp32 Remote Buffer Overrun (08/02/02)
• Jens Jensen
  • possible exploit: D-Link DI-804 unauthorized DHCP release from WAN (08/22/02)
• Jeroen Latour
  • [Mantis Advisory/2002-07] Bugs in private projects listed on 'View Bugs' (08/24/02)
  • [Mantis Advisory/2002-06] Private bugs accessible in Mantis (08/23/02)
  • Arbitrary code execution problem in Achievo (08/22/02)
  • [Mantis Advisory/2002-04] Arbitrary code execution vulnerability in Mantis (08/19/02)
  • [Mantis Advisory/2002-02] Limiting output to reporters can be bypassed (08/19/02)
  • [Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis (08/19/02)
  • [Mantis Advisory/2002-05] Arbitrary code execution and file reading vulnerability in Mantis (08/19/02)
  • [Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation (08/19/02)
• Jim Breton
  • Re: trojan horse in recent openssh (version 3.4 portable 1) (08/01/02)
• Joao Gouveia
  • mantisbt security flaw (08/13/02)
• Johan Persson
  • Insufficient Verification of Client Certificates in IIS 5.0 pre sp3 (08/19/02)
• John C. Hennessy
  • Trillian XML parser buffer overflow (08/31/02)
  • trillian buffer overflow (08/01/02)
• John D. Hardin
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/16/02)
• John Eisenschmidt
  • Re: SAP R/3 default password vulnerability (08/27/02)
• John Howie
  • RE: White paper: Exploiting the Win32 API. (08/07/02)
  • RE: White paper: Exploiting the Win32 API. (08/06/02)
  • RE: White paper: Exploiting the Win32 API. (08/06/02)
  • RE: It takes two to tango (07/31/02)
• John Pettitt
  • Re: [SNS Advisory No.55 rev.2] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/09/02)
• John Scimone
  • Re: [Full-Disclosure] it's all about timing (07/31/02)
  • Fwd: Re: [Full-Disclosure] for the record... (Tru64 / Compaq) (07/31/02)
• Jonas Eriksson
  • Potential issue with Ethereal (08/30/02)
  • OpenBSD Security Advisory: Select Boundary Condition (fwd) (08/12/02)
• Josh Welch
  • RE: OpenSSL Vulnerabilities (08/02/02)
• josh@pulltheplug.com
  • Two more exploitable holes in the trillian irc module (08/02/02)
• Jouko Pynnonen
  • Origin of downloaded files can be spoofed in MSIE (08/28/02)
• Jun-ichiro itojun Hagino
  • IPv4 mapped address considered harmful (08/22/02)
• Kanatoko
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/10/02)
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/06/02)
• Keith T. Morgan
  • Trivial root compromise in Gateway GS-400 NAS Servers (08/14/02)
• Kenn Humborg
  • RE: White paper: Exploiting the Win32 API. (08/07/02)
• Kevin Gennuso
  • Re: Yet another SMB dos concept code (08/29/02)
• Konstantin Riabitsev
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts. (08/16/02)
• Kristof Philipsen
  • Security Advisory: Raptor Firewall Weak ISN Vulnerability (08/02/02)
• Kyle Duren
  • Re: Security side-effects of Word fields (08/27/02)
  • Yahoo Messenger Install Secuirty (08/27/02)
• Kyle R. Hofmann
  • Re: It takes two to tango (08/01/02)
• Lamar Owen
  • Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release (08/24/02)
  • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL (08/21/02)
• Leif Sawyer
  • FW: Windows 2000 Service Pack 3 now available. (08/01/02)
• Len Sassaman
  • CodeCon 2003 Call for Papers (08/07/02)
• Loki
  • Fate Research Labs Advisory: Retrieve SHOUTcast Admin Password Through GET / (08/06/02)
• Ltlw0lf
  • Re: It takes two to tango (07/31/02)
• luca.ercoli@inwind.it
  • DoS against mysqld (08/23/02)
• Lukasz Bromirski
  • LG Electronics LG3100p router (08/22/02)
• Mandrake Linux Security Team
  • MDKSA-2002:054 - gaim update (08/29/02)
  • MDKSA-2002:055 - hylafax update (08/29/02)
  • MDKSA-2002:053 - xinetd update (08/27/02)
  • MDKSA-2002:052 - sharutils update (08/15/02)
  • MDKSA-2002:051 - xchat update (08/15/02)
  • MDKSA-2002:038-1 - bind update (08/15/02)
  • MDKSA-2002:049 - libpng update (08/14/02)
  • MDKSA-2002:050 - glibc update (08/14/02)
  • MDKSA-2002:048 - mod_ssl update (08/09/02)
  • MDKSA-2002:047 - util-linux update (08/09/02)
  • MDKSA-2002:046-1 - openssl update (08/07/02)
• Marc Maiffret
  • RE: White paper: Exploiting the Win32 API. (08/07/02)
  • EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow (08/09/02)
  • EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/09/02)
• Mark Anderson
  • HiverCon 2002, Ireland - Earlybird registration now available (08/01/02)
• Mark Healey
  • RE: IE [with Google Toolbar installed] crash (08/16/02)
• Mark J Cox
  • Apache 2.0 vulnerability affects non-Unix platforms (08/09/02)
• Mark L. Jackson
  • RE: It takes two to tango (07/31/02)
• Mark Litchfield
  • More DBCC overruns SQL SEVER 2000 (08/22/02)
  • Re: Winhelp32 Remote Buffer Overrun (08/06/02)
• Mark Tinberg
  • Re: IPv4 mapped address considered harmful (08/23/02)
  • Re: IPv4 mapped address considered harmful (08/23/02)
• Martin O'Neal
  • RE: Macromedia Shockwave Flash Malformed Header Overflow (08/30/02)
• Martin Schulze
  • [SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use (08/28/02)
  • [SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution (08/27/02)
  • [SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem (08/26/02)
  • [SECURITY] [DSA 157-1] New irssi-text packages fix denial of service (08/23/02)
  • [SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution (08/22/02)
  • [SECURITY] [DSA 149-1] New glibc packages fix security related problems (08/13/02)
  • [SECURITY] [DSA 152-1] New l2tpd packages adds better randomization (08/13/02)
  • [SECURITY] [DSA 151-1] New xinetd packages fix local denial of service (08/13/02)
  • [SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition (08/13/02)
  • [SECURITY] [DSA 148-1] New hylafax packages fix security related problems (08/12/02)
  • [SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem (08/09/02)
  • [SECURITY] [DSA 146-2] New dietlibc packages fix integer overflows (08/08/02)
  • [SECURITY] [DSA 146-1] New dietlibc packages fix integer overflows (08/08/02)
  • [SECURITY] [DSA 145-1] New tinyproxy packages fix security vulnerability (08/07/02)
  • [SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow (08/05/02)
  • [SECURITY] [DSA 142-1] New OpenAFS packages fix integer overflow bug (08/05/02)
  • [SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug (08/05/02)
  • [SECURITY] [DSA 141-1] New mpack packages fix buffer overflow (08/02/02)
  • [SECURITY] [DSA 140-1] New libpng packages fix buffer overflow (08/01/02)
  • [SECURITY] [DSA 139-1] New super packages fix local root exploit (08/01/02)
• Matthew Murphy
  • FactoSystem CMS Contains Multiple Vulnerabilities (08/31/02)
  • More OmniHTTPd Problems (08/25/02)
  • OmniHTTPd test.shtml Cross-Site Scripting Issue (08/25/02)
  • OmniHTTPd test.php Cross-Site Scripting Issue (08/25/02)
  • phpReactor - Cross-Site Scripting via STYLE (08/24/02)
  • AOL Instant Messenger Heap Overflow (08/24/02)
  • L-Forum Vulnerability - SQL Injection (08/14/02)
  • Multiple Vulnerabilities in CafeLog Weblog Package (08/13/02)
  • Cross-Site Scripting Issues in Falcon Web Server (08/09/02)
  • Clarification on Xitami DoS (08/05/02)
  • Xitami Connection Flood Server Termination Vulnerability (08/03/02)
• Matthew White
  • Incorrect Dichotomy - Was: It takes two to tango (08/01/02)
• mattmurphy@kc.rr.com
  • Re: Xitami Connection Flood Server Termination Vulnerability (08/03/02)
• Mikael Olsson
  • openssh-3.4p1.tar.gz distribution recently trojaned (08/01/02)
• Mike Benham
  • IE SSL Exploit (08/12/02)
  • Re: IE SSL Vulnerability (08/07/02)
  • IE SSL Vulnerability (08/06/02)
• Mike Bommarito
  • Weak MySQL Default Configuration on Windows (08/18/02)
• Mike Caudill
  • Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (08/09/02)
• Mike Chambers
  • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/09/02)
• MOD
  • Input validation attack in php-affiliate-v1.0 (08/15/02)
• Muhammad Faisal Rauf Danka
  • Re: Webmin Vulnerability Leads to Remote Compromise (RPC CGI) (08/30/02)
  • Re: Xitami Connection Flood Server Termination Vulnerability (08/03/02)
• nCipher Support
  • nCipher Advisory #5: C_Verify validates incorrect symmetric signatures (08/19/02)
• NetBSD Security Officer
  • NetBSD Security Advisory 2002-011: Sun RPC XDR decoder contains buffer overflow (08/02/02)
  • NetBSD Security Advisory 2002-009: Multiple vulnerabilities in OpenSSL code (08/02/02)
  • NetBSD Security Advisory 2002-010: symlink race in pppd (08/02/02)
• Next Generation Insight Security Research Team
  • Winhelp32 Remote Buffer Overrun (08/02/02)
• NGSSoftware Insight Security Research
  • Microsoft Internet Explorer Legacy Text Control Buffer Overflow (#NISR26082002) (08/26/02)
  • Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B) (08/19/02)
  • Arbitrary File Creation/Overwrite with SQL Agent Jobs (SQL 2000 and 7) (#NISR19002002A) (08/19/02)
  • Oracle Listener Control Format String Vulnerabilities (#NISR14082002) (08/14/02)
  • Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002) (08/03/02)
• Nick FitzGerald
  • RE: Windows 2000 Service Pack 3 now available. (08/02/02)
• Niels Provos
  • OpenSSH Security Advisory: Trojaned Distribution Files (08/01/02)
• Noam Rathaus
  • Re: Webmin Vulnerability Leads to Remote Compromise (RPC CGI) (08/31/02)
• Obscure
  • MSN Groups makes cross site scripting easy (08/03/02)
• Ofir Arkin
  • More Vulnerabilities with Pingtel xpressa SIP-based IP phones (08/20/02)
  • Xprobe2 - Tool & Paper release (08/02/02)
• onlyOOD@gnaps.com
  • Fw: Security Update 2002-08-02 for OpenSSL, Sun RPC, mod_ssl for OS X (08/03/02)
• Patrick Brauch
  • Re: OpenSSL Vulnerabilities (08/15/02)
• Paul Starzetz
  • Re: White paper: Exploiting the Win32 API. (08/26/02)
• Paul Szabo
  • Eudora attachment spoof (08/07/02)
• Pawe³ Krawczyk
  • Re: IE SSL Vulnerability (08/10/02)
• Peter J. Holzer
  • Re: IPv4 mapped address considered harmful (08/23/02)
• Petr Baudis
  • Re: Lynx CRLF Injection, part two (08/29/02)
• Pidgorny, Slav
  • RE: IE SSL Vulnerability (08/08/02)
• Quarantine
  • RE: Trivial root compromise in Gateway GS-400 NAS Servers (08/15/02)
• Randy Hinders
  • Re: It takes two to tango (07/31/02)
• Ravish.
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts (08/17/02)
• Ricardo Quesada
  • Re: Remote Buffer Overflow Vulnerability in Sun RPC (08/02/02)
• Rich Lafferty
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] (08/23/02)
• Richard Forno
  • Comment on DMCA, Security, and Vuln Reporting (07/31/02)
• Richard M. Smith
  • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/10/02)
• Ricochet@entercept.com
  • ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability (08/12/02)
• robert walker
  • Re: IE SSL Vulnerability (08/16/02)
• Roger McLaren
  • Re: possible exploit: D-Link DI-804 unauthorized DHCP release from WAN (08/22/02)
• Roland Kaufmann
  • Re: White paper: Exploiting the Win32 API. (08/07/02)
• Rothe, Greg (G.A.)
  • RE: White paper: Exploiting the Win32 API. (08/27/02)
• Ryan Fox
  • Re: DoS against mysqld (08/23/02)
• Sami Dalouche
  • Re: OpenSSL Vulnerabilities (08/15/02)
• Sanford Olson
  • Re: IE bug not fixed - update (08/30/02)
• Scott Gifford
  • Re: OpenSSL Security Altert - Remote Buffer Overflows (08/01/02)
• Scott Lampert
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/09/02)
• Scott T. Cameron
  • UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw (08/23/02)
• Scott, Richard
  • RE: It takes two to tango (07/31/02)
• Sean Smith
  • Re: Security side-effects of Word fields (08/27/02)
• Sebastian Krahmer
  • SuSE Security Announcement: i4l (SuSE-SA:2002:030) (08/12/02)
• secure@conectiva.com.br
  • [CLA-2002:519] Conectiva Linux Security Announcement - kde (08/29/02)
  • [CLA-2002:516] Conectiva Linux Security Announcement - openssl (08/08/02)
  • [CLA-2002:515] Conectiva Linux Security Announcement - krb5 (08/07/02)
  • [CLA-2002:514] Conectiva Linux Security Announcement - sendmail (08/05/02)
• security@australia.edu
  • Subtle insinuations may be more than idle threats I'm afraid. (08/16/02)
• security@caldera.com
  • Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow (08/27/02)
  • Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver (08/24/02)
  • Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg (08/22/02)
  • Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion and buffer overflow vulnerabilities (08/20/02)
  • Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (08/09/02)
  • Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries (08/06/02)
• SGI Security Coordinator
  • Netscape JRE vulnerability on IRIX (08/29/02)
  • WorldView vulnerability on IRIX (08/22/02)
  • Sun RPC xdr_array vulnerability on IRIX (08/16/02)
  • MAC address change on SGI Origin 3000 (08/14/02)
  • Acrobat Reader symlink vulnerability on IRIX (08/14/02)
  • IRIX ftpd minor vulnerabilities (08/14/02)
  • Bulk Data Services (BDS) vulnerability on IRIX (08/12/02)
  • BIND vulnerabilities in IRIX named (08/07/02)
  • iPlanet vulnerabilities on IRIX (08/01/02)
  • Sun RPC xdr_array vulnerability (08/01/02)
  • rpc.pcnfsd vulnerabilities on IRIX (08/01/02)
• Shane Hird
  • Delete arbitrary files using Help and Support Center [MSRC 1198dg] (08/15/02)
• Simone Piunno
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] (08/23/02)
  • [luca.ercoli@inwind.it: DoS against mysqld] (08/23/02)
• Simos Xenitellis
  • Re: White paper: Exploiting the Win32 API. (08/08/02)
• Sir Mordred The Traitor
  • @(#)Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL. (08/20/02)
  • @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL (08/20/02)
  • @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL (08/19/02)
• slack3r
  • Re: White paper: Exploiting the Win32 API. (08/07/02)
• snsadv@lac.co.jp
  • [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/05/02)
• Stan Bubrouski
  • [UPDATED] Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks (08/22/02)
  • Advisory: DoS in WebEasyMail +more possible? (08/20/02)
  • Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities (08/20/02)
  • Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks (08/04/02)
  • Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS (08/04/02)
• Stefan Hoelzner
  • SAP R/3 default password vulnerability (08/26/02)
• Steffen Dettmer
  • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL (08/22/02)
• Steve
  • Re: [VulnDiscuss] Re: Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) (08/23/02)
• Steven M. Christey
  • Re: it's all about timing (08/01/02)
• Steven Michaud
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08/10/02)
• Tacettin Karadeniz
  • Web Shop Manager Security Vulnerability (08/15/02)
• TAKAGI, Hiromitsu
  • W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability (REPOST) (08/17/02)
  • CERN Proxy Server: Cross-Site Scripting Vulnerability (08/12/02)
• Thomas Antepoth
  • Re: Yet another SMB dos concept code (08/29/02)
• Thomas Biege
  • SuSE Security Announcement: wwwoffle (SuSE-SA:2002:029) (08/01/02)
• Thomas C. Greene
  • Re: IE SSL Vulnerability (Konqueror affected too) (08/12/02)
• Tiina Havana
  • Software vulnerability reporting survey (08/05/02)
• Tim Jackson
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/09/02)
• Tina Bird
  • OpenSSL Vulnerabilities (07/31/02)
• Tom Fischer
  • Re: IPSwitch IMail ADVISORY/EXPLOIT/PATCH (08/01/02)
• Tom Perrine
  • Re: It takes two to tango (07/31/02)
• Tom Yu
  • MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system (08/02/02)
• Tomi Nylund
  • List of mirrors carrying trojaned OpenSSH (08/01/02)
• Torbjörn
  • Re: IE SSL Vulnerability (08/08/02)
• Torbjörn Hovmark
  • Re: IE SSL Vulnerability (08/07/02)
• troy
  • Re: OpenSSL Vulnerabilities (08/02/02)
• Trustix Secure Linux Advisor
  • TSLSA-2002-0067 - glibc (08/14/02)
• Ulf Harnhammar
  • Re: PHP: Bypass safe_mode and inject ASCII control chars with mail() (08/29/02)
  • Re: Lynx CRLF Injection, part two (08/23/02)
  • Lynx CRLF Injection, part two (08/22/02)
  • Lynx CRLF Injection (08/19/02)
  • FUDforum file access and SQL Injection (08/18/02)
  • L-Forum XSS and upload spoofing (08/14/02)
• Waldo Bastian
  • KDE Security Advisory: Konqueror SSL vulnerability (08/19/02)
• Werner Koch
  • Re: Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG (08/13/02)
• Wichert Akkerman
  • [SECURITY] [DSA-138-1] Remote execution exploit in gallery (08/01/02)
• Will Bryant
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow (08/13/02)
• William A. Rowe, Jr.
  • Re: Apache 2.0.39 directory traversal and path disclosure bug (08/16/02)
• William Deich
  • Re: The SUPER bug (08/02/02)
• wlanman
  • Belkin F5D6130 Wireless Network Access Point SNMP Request Denial Of Service Vulnerability (08/26/02)
• Wojciech Purczynski
  • PHP: Bypass safe_mode and inject ASCII control chars with mail() (08/23/02)
• Wolf, Glenn
  • RE: Comment on DMCA, Security, and Vuln Reporting (07/31/02)

Last message date: 08/31/02
Archived on: 08/31/02 CEST

---

433 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(15)