SecurityFocus Bugtraq
By Thread

433 messages sorted by: [ author ] [ date ] [ subject ] [ attachment ]

---

Starting: 08/01/02
Ending: 08/31/02

• FactoSystem CMS Contains Multiple Vulnerabilities Matthew Murphy (08/31/02)
• [security bulletin] SSRT2275 HP Tru64 UNIX - Potential Buffer Overflows & SSRT2229 Potential Denial of Service (fwd) Dave Ahmad (08/31/02)
• Trillian XML parser buffer overflow John C. Hennessy (08/31/02)
• Potential issue with Ethereal Jonas Eriksson (08/30/02)
• RE: Macromedia Shockwave Flash Malformed Header Overflow Martin O'Neal (08/30/02)
• SUMMARY: Disabling Port 445 (SMB) Entirely Jason Coombs (08/30/02)
  • Re: SUMMARY: Disabling Port 445 (SMB) Entirely Andrew Oman (08/30/02)
• GLSA: ethereal Daniel Ahlberg (08/30/02)
• [RHSA-2002:162-12] PXE server crashes from certain DHCP packets bugzilla@redhat.com (08/30/02)
• MDKSA-2002:054 - gaim update Mandrake Linux Security Team (08/29/02)
• MDKSA-2002:055 - hylafax update Mandrake Linux Security Team (08/29/02)
• Netscape JRE vulnerability on IRIX SGI Security Coordinator (08/29/02)
• [CLA-2002:519] Conectiva Linux Security Announcement - kde secure@conectiva.com.br (08/29/02)
• [RHSA-2002:169-13] Updated ethereal packages are available bugzilla@redhat.com (08/29/02)
• Windows SMB DoS - Proof of concept Frederic Deletang (08/29/02)
• Yet another SMB dos concept code Huagang Xie (08/29/02)
  • Re: Yet another SMB dos concept code Fabio Pietrosanti (naif) (08/29/02)
    • Re: Yet another SMB dos concept code Thomas Antepoth (08/29/02)
  • Re: Yet another SMB dos concept code Kevin Gennuso (08/29/02)
• Re: Kerio Mail Server Multiple Security vulnerabilities Abraham Lincoln (08/29/02)
• Microsoft Terminal Server Client Buffer Overrun (A082802-1) @stake Advisories (08/28/02)
• Manipulating Microsoft SQL Server Using SQL Injection Aaron C. Newman (08/28/02)
• Webmin Vulnerability Leads to Remote Compromise (RPC CGI) Aviram Jenik (08/28/02)
  • Re: Webmin Vulnerability Leads to Remote Compromise (RPC CGI) Muhammad Faisal Rauf Danka (08/30/02)
  • Re: Webmin Vulnerability Leads to Remote Compromise (RPC CGI) Noam Rathaus (08/31/02)
• SWServer 2.2 directory traversal bug Bugtest (08/28/02)
• iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow David Endler (08/28/02)
  • Re: iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow Dave Aitel (08/28/02)
• Origin of downloaded files can be spoofed in MSIE Jouko Pynnonen (08/28/02)
• [SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use Martin Schulze (08/28/02)
• NOVL-2002-2961546 - SNMPv1 Trap and Request HandlingVulnerabilities Ed Reed (08/24/02)
• `admin' bug in upb GooDWiN (08/25/02)
• Yahoo Messenger Install Secuirty Kyle Duren (08/27/02)
• IE bug not fixed - update Brian Taylor (08/27/02)
  • Re: IE bug not fixed - update Sanford Olson (08/30/02)
• MDKSA-2002:053 - xinetd update Mandrake Linux Security Team (08/27/02)
• Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow security@caldera.com (08/27/02)
• GLSA: gaim Daniel Ahlberg (08/27/02)
• [SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution Martin Schulze (08/27/02)
• uuuppz.com - Advisory 002 - mIRC $asctime overflow James Martin (08/27/02)
• Security side-effects of Word fields Alex Gantman (08/26/02)
  • Re: Security side-effects of Word fields Sean Smith (08/27/02)
  • Re: Security side-effects of Word fields Kyle Duren (08/27/02)
  • RE: Security side-effects of Word fields Hauke Lampe (08/30/02)
• [SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem Martin Schulze (08/26/02)
• SAP R/3 default password vulnerability Stefan Hoelzner (08/26/02)
  • Re: SAP R/3 default password vulnerability John Eisenschmidt (08/27/02)
• Kerio Personal Firewall DOS Vulnerability Abraham Lincoln (08/26/02)
  • Re: Kerio Personal Firewall DOS Vulnerability Jason Giglio (08/26/02)
• Belkin F5D6130 Wireless Network Access Point SNMP Request Denial Of Service Vulnerability wlanman (08/26/02)
• More OmniHTTPd Problems Matthew Murphy (08/25/02)
• OmniHTTPd test.shtml Cross-Site Scripting Issue Matthew Murphy (08/25/02)
• OmniHTTPd test.php Cross-Site Scripting Issue Matthew Murphy (08/25/02)
• phpReactor - Cross-Site Scripting via STYLE Matthew Murphy (08/24/02)
• Microsoft Internet Explorer Legacy Text Control Buffer Overflow (#NISR26082002) NGSSoftware Insight Security Research (08/26/02)
• GLSA: PostgreSQL Daniel Ahlberg (08/26/02)
• Blazix 1.2 jsp view and free protected folder access Auriemma Luigi (08/24/02)
• Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release Lamar Owen (08/24/02)
• AOL Instant Messenger Heap Overflow Matthew Murphy (08/24/02)
  • Re: AOL Instant Messenger Heap Overflow JasonBrown777@netscape.net (08/25/02)
• Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver security@caldera.com (08/24/02)
• [RHSA-2002:176-06] Updated mailman packages close cross-site scripting vulnerability bugzilla@redhat.com (08/23/02)
• [Mantis Advisory/2002-07] Bugs in private projects listed on 'View Bugs' Jeroen Latour (08/24/02)
• [Mantis Advisory/2002-06] Private bugs accessible in Mantis Jeroen Latour (08/23/02)
• UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw Scott T. Cameron (08/23/02)
• PHP: Bypass safe_mode and inject ASCII control chars with mail() Wojciech Purczynski (08/23/02)
  • Re: PHP: Bypass safe_mode and inject ASCII control chars with mail() Ulf Harnhammar (08/29/02)
• [luca.ercoli@inwind.it: DoS against mysqld] Simone Piunno (08/23/02)
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] bda (08/23/02)
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] Rich Lafferty (08/23/02)
  • Re: [luca.ercoli@inwind.it: DoS against mysqld] Simone Piunno (08/23/02)
• DoS against mysqld luca.ercoli@inwind.it (08/23/02)
  • Re: DoS against mysqld Ryan Fox (08/23/02)
    • RE: DoS against mysqld Bob Castleberry (08/23/02)
• ToorCon Computer Security Conference 2002 Announcement h1kari (08/23/02)
• Accessing remote/local content in IE (GM#009-IE) GreyMagic Software (08/23/02)
• [SECURITY] [DSA 157-1] New irssi-text packages fix denial of service Martin Schulze (08/23/02)
• CORE-20020618: Vulnerabilities in Windows SMB (DoS) Iván Arce (08/23/02)
• Arbitrary code execution problem in Achievo Jeroen Latour (08/22/02)
• [SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution Martin Schulze (08/22/02)
• Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) David Litchfield (08/22/02)
  • Re: Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) Cesar (08/23/02)
    • Re: [VulnDiscuss] Re: Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A) Steve (08/23/02)
• Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg security@caldera.com (08/22/02)
• Light Security Advisory: Remotely-exploitable code execution J. S. Connell (08/22/02)
• Abyss 1.0.3 directory traversal and administration bugs Auriemma Luigi (08/22/02)
• LG Electronics LG3100p router Lukasz Bromirski (08/22/02)
• Lynx CRLF Injection, part two Ulf Harnhammar (08/22/02)
  • Re: Lynx CRLF Injection, part two Alberto Devesa (08/23/02)
    • Re: Lynx CRLF Injection, part two Ulf Harnhammar (08/23/02)
    • Re: Lynx CRLF Injection, part two Petr Baudis (08/29/02)
• IPv4 mapped address considered harmful Jun-ichiro itojun Hagino (08/22/02)
  • Re: IPv4 mapped address considered harmful Anthony DeRobertis (08/27/02)
    • Re: IPv4 mapped address considered harmful itojun@iijlab.net (08/27/02)
      • Re: IPv4 mapped address considered harmful Anthony DeRobertis (08/27/02)
      • Re: IPv4 mapped address considered harmful itojun@iijlab.net (08/27/02)
      • Re: IPv4 mapped address considered harmful Anthony DeRobertis (08/27/02)
      • Re: IPv4 mapped address considered harmful itojun@iijlab.net (08/27/02)
      • Re: IPv4 mapped address considered harmful Anthony DeRobertis (08/27/02)
  • Re: IPv4 mapped address considered harmful Peter J. Holzer (08/23/02)
  • Re: IPv4 mapped address considered harmful Mark Tinberg (08/23/02)
    • Re: IPv4 mapped address considered harmful itojun@iijlab.net (08/23/02)
      • Re: IPv4 mapped address considered harmful Mark Tinberg (08/23/02)
• possible exploit: D-Link DI-804 unauthorized DHCP release from WAN Jens Jensen (08/22/02)
  • Re: possible exploit: D-Link DI-804 unauthorized DHCP release from WAN Roger McLaren (08/22/02)
• [UPDATED] Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks Stan Bubrouski (08/22/02)
• Terrible: Windows Media Player http-equiv@excite.com (08/22/02)
• Cisco IOS exploit PoC FX (08/22/02)
• WorldView vulnerability on IRIX SGI Security Coordinator (08/22/02)
• [RHSA-2002:158-09] New kernel update available, fixes i810 video oops, several security issues bugzilla@redhat.com (08/21/02)
• NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2 Ed Reed (08/21/02)
• More DBCC overruns SQL SEVER 2000 Mark Litchfield (08/22/02)
• Solaris 2.6-8 SPARC Telnetd Vulnerability Brendan C. Johnson (08/21/02)
  • Re: Solaris 2.6-8 SPARC Telnetd Vulnerability Casper Dik (08/21/02)
• bugtraq@security.nnov.ru list issues [2] 3APA3A (08/21/02)
• LG Electronics LG3001f router Bromirski, Lukasz (08/21/02)
• More Vulnerabilities with Pingtel xpressa SIP-based IP phones Ofir Arkin (08/20/02)
• Win32 API 'shatter' vulnerability found in VNC-based products EXT-Bellers, Chris (08/21/02)
• [RHSA-2002:109-07] Updated bugzilla packages fix security issues bugzilla@redhat.com (08/20/02)
• @(#)Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL. Sir Mordred The Traitor (08/20/02)
• @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL Sir Mordred The Traitor (08/20/02)
  • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL Florian Weimer (08/20/02)
  • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL Lamar Owen (08/21/02)
    • Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL Steffen Dettmer (08/22/02)
• NSSI-2002-tpfw: Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities Aaron Lu (08/20/02)
• vulnerabilities in scponly Derek D. Martin (08/20/02)
• NOVL-2002-2963307 - PERL Handler Vulnerability Ed Reed (08/20/02)
• NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability Ed Reed (08/20/02)
• [RHSA-2002:102-26] New PHP packages fix vulnerability in safemode bugzilla@redhat.com (08/20/02)
• killer k00kie [was Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0] http-equiv@excite.com (08/20/02)
• Advisory: DoS in WebEasyMail +more possible? Stan Bubrouski (08/20/02)
• Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities Stan Bubrouski (08/20/02)
• Re: PHP-Nuke v5.6 - Users can compromise admin accts Ravish. (08/17/02)
• Information disclosure on mod_auth ( apache 1.3.26 ) ? Hector A. Paterno (08/17/02)
  • Re: Information disclosure on mod_auth ( apache 1.3.26 ) ? Alex Muntada (08/22/02)
• Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion and buffer overflow vulnerabilities security@caldera.com (08/20/02)
• W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability (REPOST) TAKAGI, Hiromitsu (08/17/02)
• Freebsd FD exploit dvdman (08/19/02)
  • Re: Freebsd FD exploit Jacques A. Vidrine (08/20/02)
• Multiple security vulnerabilities inside Microsoft File Transfer Manager ActiveX control (<4.0) [buffer overflow, arbitrary file upload/download] Andrew G. Tereschenko (08/18/02)
• New SecurityFocus Lists Hal Flynn (08/19/02)
• [Mantis Advisory/2002-04] Arbitrary code execution vulnerability in Mantis Jeroen Latour (08/19/02)
• [Mantis Advisory/2002-02] Limiting output to reporters can be bypassed Jeroen Latour (08/19/02)
• Weak MySQL Default Configuration on Windows Mike Bommarito (08/18/02)
• [Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis Jeroen Latour (08/19/02)
• [Mantis Advisory/2002-05] Arbitrary code execution and file reading vulnerability in Mantis Jeroen Latour (08/19/02)
• Kerio Mail Server Multiple Security Vulnerabilities Abraham Lincoln (08/19/02)
  • Re: Kerio Mail Server Multiple Security Vulnerabilities Jaroslav Snajdr (08/27/02)
• [Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation Jeroen Latour (08/19/02)
• Lynx CRLF Injection Ulf Harnhammar (08/19/02)
• Tiny3 vs Winhelp32 Bof Brett Moore (08/19/02)
• [RHSA-2002:151-21] Updated libpng packages fix buffer overflow bugzilla@redhat.com (08/19/02)
• nCipher Advisory #5: C_Verify validates incorrect symmetric signatures nCipher Support (08/19/02)
• FUDforum file access and SQL Injection Ulf Harnhammar (08/18/02)
• KDE Security Advisory: Konqueror SSL vulnerability Waldo Bastian (08/19/02)
• @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL Sir Mordred The Traitor (08/19/02)
  • Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL Florian Weimer (08/19/02)
• Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B) NGSSoftware Insight Security Research (08/19/02)
• Insufficient Verification of Client Certificates in IIS 5.0 pre sp3 Johan Persson (08/19/02)
• Arbitrary File Creation/Overwrite with SQL Agent Jobs (SQL 2000 and 7) (#NISR19002002A) NGSSoftware Insight Security Research (08/19/02)
• FreeBSD Security Advisory FreeBSD-SA-02:38.signed-error FreeBSD Security Advisories (08/19/02)
• RETRY : newly released winamp 3 fails to address serious "execution of arbitrary" code issue when combined with MSIE6 Jelmer (08/17/02)
• Enableing java logging in MSIE is dangerous Jelmer (08/17/02)
• Internet explorer can read local files Jelmer (08/17/02)
  • Re: Internet explorer can read local files Avleen Vig (08/17/02)
    • Re: Internet explorer can read local files Jelmer (08/17/02)
• Repost: Buffer overflow in Microsoft DirectX Files Viewer xweb.ocx (<2,0,16,15) ActiveX sample Andrew G. Tereschenko (08/17/02)
• Subtle insinuations may be more than idle threats I'm afraid. security@australia.edu (08/16/02)
• Apache 2.0.39 directory traversal and path disclosure bug Auriemma Luigi (08/16/02)
  • Re: Apache 2.0.39 directory traversal and path disclosure bug William A. Rowe, Jr. (08/16/02)
• Sun RPC xdr_array vulnerability on IRIX SGI Security Coordinator (08/16/02)
• MODERATOR WAIT ! Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 http-equiv@excite.com (08/16/02)
• NTFS Hard Links Subvert Auditing (A081602-1) @stake Advisories (08/16/02)
• Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) David Litchfield (08/16/02)
  • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) Brent Glover (08/25/02)
    • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) David Litchfield (08/26/02)
    • Re: Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B) Chip Andrews (08/26/02)
• Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A) David Litchfield (08/16/02)
• "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1 Carl R Diliberto (08/15/02)
  • Re: "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1 Dave English (08/16/02)
• Input validation attack in php-affiliate-v1.0 MOD (08/15/02)
• [RHSA-2002:172-07] Updated krb5 packages fix remote buffer overflow bugzilla@redhat.com (08/15/02)
• MDKSA-2002:052 - sharutils update Mandrake Linux Security Team (08/15/02)
• MDKSA-2002:051 - xchat update Mandrake Linux Security Team (08/15/02)
• IceWarp Webmail XSS DarC KonQuesT (08/15/02)
• IE [with Google Toolbar installed] crash Adam [onet] (08/15/02)
  • Re: IE [with Google Toolbar installed] crash Bill Fryberger (08/15/02)
    • Re: IE [with Google Toolbar installed] crash Chuck (08/16/02)
  • RE: IE [with Google Toolbar installed] crash Mark Healey (08/16/02)
• PHP-Nuke v5.6 - Users can compromise admin accts. <-delusion-> (08/15/02)
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts. Jelmer (08/16/02)
  • Re: PHP-Nuke v5.6 - Users can compromise admin accts. <-delusion-> (08/16/02)
    • Re: PHP-Nuke v5.6 - Users can compromise admin accts. Konstantin Riabitsev (08/16/02)
    • RE: PHP-Nuke v5.6 - Users can compromise admin accts. Eric Stevens (08/16/02)
• Web Shop Manager Security Vulnerability Tacettin Karadeniz (08/15/02)
• Delete arbitrary files using Help and Support Center [MSRC 1198dg] Shane Hird (08/15/02)
  • Re: Delete arbitrary files using Help and Support Center [MSRC 1198dg] Gary Flynn (08/16/02)
• MDKSA-2002:038-1 - bind update Mandrake Linux Security Team (08/15/02)
• SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 http-equiv@excite.com (08/15/02)
• Trivial root compromise in Gateway GS-400 NAS Servers Keith T. Morgan (08/14/02)
  • RE: Trivial root compromise in Gateway GS-400 NAS Servers Quarantine (08/15/02)
• new bugs in MyWebServer D4rkGr3y (08/14/02)
• L-Forum Vulnerability - SQL Injection Matthew Murphy (08/14/02)
• GLSA: xinetd Daniel Ahlberg (08/14/02)
• Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability Cisco Systems Product Security Incident Response Team (08/14/02)
• MAC address change on SGI Origin 3000 SGI Security Coordinator (08/14/02)
• Acrobat Reader symlink vulnerability on IRIX SGI Security Coordinator (08/14/02)
• Oracle Listener Control Format String Vulnerabilities (#NISR14082002) NGSSoftware Insight Security Research (08/14/02)
• MDKSA-2002:049 - libpng update Mandrake Linux Security Team (08/14/02)
• TSLSA-2002-0067 - glibc Trustix Secure Linux Advisor (08/14/02)
• MDKSA-2002:050 - glibc update Mandrake Linux Security Team (08/14/02)
• L-Forum XSS and upload spoofing Ulf Harnhammar (08/14/02)
• IRIX ftpd minor vulnerabilities SGI Security Coordinator (08/14/02)
• [SECURITY] [DSA 149-1] New glibc packages fix security related problems Martin Schulze (08/13/02)
• mantisbt security flaw Joao Gouveia (08/13/02)
• Multiple Vulnerabilities in CafeLog Weblog Package Matthew Murphy (08/13/02)
• [RHSA-2002:166-07] Updated glibc packages fix vulnerabilities in RPC XDR decoder bugzilla@redhat.com (08/13/02)
• [SECURITY] [DSA 152-1] New l2tpd packages adds better randomization Martin Schulze (08/13/02)
• [SECURITY] [DSA 151-1] New xinetd packages fix local denial of service Martin Schulze (08/13/02)
• NOVL-2002-FAQ - Novell Security Alerts Facts Sheet Ed Reed (08/12/02)
• [SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition Martin Schulze (08/13/02)
• New l2tpd release 0.68 Jeff Mcadams (08/13/02)
• The Large-Scale Threat of Bad Data in DNS FORENSICS.ORG Security Coordinator (08/10/02)
  • Re: The Large-Scale Threat of Bad Data in DNS Greg Steuck (08/13/02)
• SAME LADY, DIFFERENT DRESS: Internet Explorer 6 http-equiv@excite.com (08/13/02)
• Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG aleph1@securityfocus.com (08/12/02)
  • Re: Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG Werner Koch (08/13/02)
• Bulk Data Services (BDS) vulnerability on IRIX SGI Security Coordinator (08/12/02)
• NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack Ed Reed (08/12/02)
• OpenBSD Security Advisory: Select Boundary Condition (fwd) Jonas Eriksson (08/12/02)
• [RHSA-2002:148-06] Updated Tcl/Tk packages fix local vulnerability bugzilla@redhat.com (08/12/02)
• CERN Proxy Server: Cross-Site Scripting Vulnerability TAKAGI, Hiromitsu (08/12/02)
• TinySSL Vendor Statement: Basic Constraints Vulnerability Adam Megacz (08/11/02)
• IE SSL Exploit Mike Benham (08/12/02)
• Vulnerability in Oracle Gilles Parc (08/12/02)
• [SECURITY] [DSA 148-1] New hylafax packages fix security related problems Martin Schulze (08/12/02)
• SuSE Security Announcement: i4l (SuSE-SA:2002:030) Sebastian Krahmer (08/12/02)
• ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability Ricochet@entercept.com (08/12/02)
• Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities Cisco Systems Product Security Incident Response Team (08/12/02)
• CodeCon 2003 Call for Papers Len Sassaman (08/07/02)
• MidiCart Shopping Cart Software database vulnerability Dimitri Sekhniashvili (08/07/02)
• Apache 2.0 vulnerability affects non-Unix platforms Mark J Cox (08/09/02)
• [RHSA-2002:133-13] Updated bind packages fix buffer overflow in resolver library bugzilla@redhat.com (08/09/02)
• MDKSA-2002:048 - mod_ssl update Mandrake Linux Security Team (08/09/02)
• EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow Marc Maiffret (08/09/02)
• EEYE: Macromedia Shockwave Flash Malformed Header Overflow Marc Maiffret (08/09/02)
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow ismail donmez (08/09/02)
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Scott Lampert (08/09/02)
    • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Mike Chambers (08/09/02)
      • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Richard M. Smith (08/10/02)
      • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Carlos Laviola (08/11/02)
      • RE: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Drew (08/13/02)
    • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Tim Jackson (08/09/02)
  • Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Will Bryant (08/13/02)
• MDKSA-2002:047 - util-linux update Mandrake Linux Security Team (08/09/02)
• [SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem Martin Schulze (08/09/02)
• Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd security@caldera.com (08/09/02)
• Cross-Site Scripting Issues in Falcon Web Server Matthew Murphy (08/09/02)
• Eudora attachment spoof Paul Szabo (08/07/02)
• Macromedia Flash plugin can read local files Jelmer (08/08/02)
• [SNS Advisory No.55 rev.2] Eudora 5.x for Windows Buffer Overflow Vulnerability Atsushi Nishimura (08/08/02)
  • Re: [SNS Advisory No.55 rev.2] Eudora 5.x for Windows Buffer Overflow Vulnerability John Pettitt (08/09/02)
• [SECURITY] [DSA 146-2] New dietlibc packages fix integer overflows Martin Schulze (08/08/02)
• [CLA-2002:516] Conectiva Linux Security Announcement - openssl secure@conectiva.com.br (08/08/02)
• @stake advisory: WS_FTP SITE CPWD Buffer Overflow vulnerability (a090902-1) @stake advisories (08/08/02)
• [SECURITY] [DSA 146-1] New dietlibc packages fix integer overflows Martin Schulze (08/08/02)
• iDEFENSE Security Advisory: iSCSI Default Configuration File Settings David Endler (08/08/02)
  • Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings Mike Caudill (08/09/02)
• Exploiting the Google toolbar (GM#001-MC) GreyMagic Software (08/08/02)
  • RE: Exploiting the Google toolbar (GM#001-MC) GreyMagic Software (08/20/02)
• BIND vulnerabilities in IRIX named SGI Security Coordinator (08/07/02)
• [ESA-20020807-020] ASN.1 vulnerability fix corrections EnGarde Secure Linux (08/07/02)
• [CLA-2002:515] Conectiva Linux Security Announcement - krb5 secure@conectiva.com.br (08/07/02)
• [SECURITY] [DSA 145-1] New tinyproxy packages fix security vulnerability Martin Schulze (08/07/02)
• MS SQL Server Hello Overflow NASL script Dave Aitel (08/07/02)
• Cisco Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability Cisco Systems Product Security Incident Response Team (08/07/02)
• MDKSA-2002:046-1 - openssl update Mandrake Linux Security Team (08/07/02)
• SECURITY.NNOV: Windows 2000 system partition weak default permissions 3APA3A (08/05/02)
• Re: qmailadmin SUID buffer overflow badc0ded (07/25/02)
• IE SSL Vulnerability Mike Benham (08/06/02)
  • Re: IE SSL Vulnerability Alex Loots (08/07/02)
    • Re: IE SSL Vulnerability Mike Benham (08/07/02)
      • Re: IE SSL Vulnerability Pawe³ Krawczyk (08/10/02)
  • RE: IE SSL Vulnerability Pidgorny, Slav (08/08/02)
  • Re: IE SSL Vulnerability Balazs Scheidler (08/08/02)
    • Re: IE SSL Vulnerability Balazs Scheidler (08/08/02)
  • Re: IE SSL Vulnerability Torbjörn Hovmark (08/07/02)
    • Re: IE SSL Vulnerability (Konqueror affected too) Thomas C. Greene (08/12/02)
  • Re: IE SSL Vulnerability Torbjörn (08/08/02)
  • Re: IE SSL Vulnerability robert walker (08/16/02)
    • Re: IE SSL Vulnerability Charles Miller (08/19/02)
      • Re: IE SSL Vulnerability J. Lasser (08/20/02)
• Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries security@caldera.com (08/06/02)
• SPIKE 2.5 and associated vulns Dave Aitel (08/06/02)
• [RHSA-2002:156-04] Updated secureweb packages fix temporary file handling bugzilla@redhat.com (08/06/02)
• FreeBSD Security Advisory FreeBSD-SA-02:36.nfs FreeBSD Security Advisories (08/06/02)
• FreeBSD Security Advisory FreeBSD-SA-02:35.ffs FreeBSD Security Advisories (08/06/02)
• White paper: Exploiting the Win32 API. Chris Paget (08/06/02)
  • RE: White paper: Exploiting the Win32 API. John Howie (08/06/02)
    • Re: White paper: Exploiting the Win32 API. Chris Paget (08/06/02)
    • Re: White paper: Exploiting the Win32 API. Florian Weimer (08/06/02)
    • RE: White paper: Exploiting the Win32 API. Marc Maiffret (08/07/02)
  • RE: White paper: Exploiting the Win32 API. John Howie (08/06/02)
  • Re: White paper: Exploiting the Win32 API. Florian Weimer (08/06/02)
  • Re: White paper: Exploiting the Win32 API. Chad Loder (08/06/02)
  • Re: White paper: Exploiting the Win32 API. Roland Kaufmann (08/07/02)
  • Re: White paper: Exploiting the Win32 API. Chris Calabrese (08/07/02)
    • Re: White paper: Exploiting the Win32 API. slack3r (08/07/02)
    • RE: White paper: Exploiting the Win32 API. Kenn Humborg (08/07/02)
  • Re: White paper: Exploiting the Win32 API. Adam Megacz (08/07/02)
  • RE: White paper: Exploiting the Win32 API. John Howie (08/07/02)
  • Re: White paper: Exploiting the Win32 API. Simos Xenitellis (08/08/02)
  • Re: White paper: Exploiting the Win32 API. Andrey Kolishak (08/07/02)
    • Re: White paper: Exploiting the Win32 API. Paul Starzetz (08/26/02)
  • RE: White paper: Exploiting the Win32 API. Rothe, Greg (G.A.) (08/27/02)
    • RE: White paper: Exploiting the Win32 API. Drew (08/28/02)
      • Re: White paper: Exploiting the Win32 API. Chris Paget (08/29/02)
• FreeBSD Security Advisory FreeBSD-SA-02:37.kqueue FreeBSD Security Advisories (08/06/02)
• CSS bug in Winamp DownBload (08/05/02)
  • Re: CSS bug in Winamp Chris (08/09/02)
• Bypassing cookie restrictions in IE 5+6 Jelmer (08/04/02)
  • RE: Bypassing cookie restrictions in IE 5+6 Christopher G. Lewis (08/06/02)
  • RE: Bypassing cookie restrictions in IE 5+6 GreyMagic Software (08/06/02)
• Opera FTP View Cross-Site Scripting Vulnerability Eiji James Yoshida (08/06/02)
• Mozilla FTP View Cross-Site Scripting Vulnerability Eiji James Yoshida (08/06/02)
• Software vulnerability reporting survey Tiina Havana (08/05/02)
• [SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow Martin Schulze (08/05/02)
• [SECURITY] [DSA 142-1] New OpenAFS packages fix integer overflow bug Martin Schulze (08/05/02)
• [SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug Martin Schulze (08/05/02)
• [CLA-2002:514] Conectiva Linux Security Announcement - sendmail secure@conectiva.com.br (08/05/02)
• [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability snsadv@lac.co.jp (08/05/02)
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability Hack Hawk (08/06/02)
    • Fate Research Labs Advisory: Retrieve SHOUTcast Admin Password Through GET / Loki (08/06/02)
    • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability John D. Hardin (08/16/02)
  • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability Kanatoko (08/06/02)
    • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability Steven Michaud (08/10/02)
      • Re: [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability Kanatoko (08/10/02)
• RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines Florian Weimer (08/05/02)
• RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code Florian Weimer (08/05/02)
• SNMP vulnerability in AVAYA Cajun firmware Jacek Lipkowski (08/05/02)
• Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks Stan Bubrouski (08/04/02)
• Clarification on Xitami DoS Matthew Murphy (08/05/02)
• Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS Stan Bubrouski (08/04/02)
• OpenAFS Security Advisory 2002-001: Remote root vulnerability in OpenAFS servers Derrick J Brashear (08/04/02)
• MSN Groups makes cross site scripting easy Obscure (08/03/02)
• Fw: Security Update 2002-08-02 for OpenSSL, Sun RPC, mod_ssl for OS X onlyOOD@gnaps.com (08/03/02)
• Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002) NGSSoftware Insight Security Research (08/03/02)
  • Re: Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002) Dave Aitel (08/09/02)
• Re: Microsoft Internet Explorer 'Folder View for FTP sites' Script Execution vulnerability Eiji James Yoshida (08/03/02)
• Multiple Cyan Chat Exploits chip (08/03/02)
• Xitami Connection Flood Server Termination Vulnerability Matthew Murphy (08/03/02)
  • Re: Xitami Connection Flood Server Termination Vulnerability Muhammad Faisal Rauf Danka (08/03/02)
  • Re: Xitami Connection Flood Server Termination Vulnerability mattmurphy@kc.rr.com (08/03/02)
• Lcc-win32 infos diffusion Auriemma Luigi (08/02/02)
• MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system Tom Yu (08/02/02)
• NetBSD Security Advisory 2002-011: Sun RPC XDR decoder contains buffer overflow NetBSD Security Officer (08/02/02)
• NetBSD Security Advisory 2002-009: Multiple vulnerabilities in OpenSSL code NetBSD Security Officer (08/02/02)
• NetBSD Security Advisory 2002-010: symlink race in pppd NetBSD Security Officer (08/02/02)
• Xprobe2 - Tool & Paper release Ofir Arkin (08/02/02)
• Nmap 3.00 Released -- http://www.insecure.org/ Fyodor (08/02/02)
• Re: Remote Buffer Overflow Vulnerability in Sun RPC Ricardo Quesada (08/02/02)
• kerberos rpc xdr_array david evlis reign (08/02/02)
• [SECURITY] [DSA 141-1] New mpack packages fix buffer overflow Martin Schulze (08/02/02)
• Security Advisory: Raptor Firewall Weak ISN Vulnerability Kristof Philipsen (08/02/02)
• Sun AnswerBook2 format string and other vulnerabilities ghandi (08/02/02)
• OpenSSL Vulnerabilities Tina Bird (07/31/02)
  • Re: OpenSSL Vulnerabilities Eric Rescorla (08/02/02)
    • Re: OpenSSL Vulnerabilities Patrick Brauch (08/15/02)
      • Re: OpenSSL Vulnerabilities Sami Dalouche (08/15/02)
  • Re: OpenSSL Vulnerabilities troy (08/02/02)
  • RE: OpenSSL Vulnerabilities Josh Welch (08/02/02)
• Re: The SUPER bug William Deich (08/02/02)
• Two more exploitable holes in the trillian irc module josh@pulltheplug.com (08/02/02)
• Fw: [slackware-security] Security updates for Slackware 8.1 Adam Young (08/02/02)
• RE: Windows 2000 Service Pack 3 now available. Colin Stefani (08/01/02)
  • Re: Windows 2000 Service Pack 3 now available. Darren Reed (08/02/02)
  • RE: Windows 2000 Service Pack 3 now available. Nick FitzGerald (08/02/02)
  • RE: Windows 2000 Service Pack 3 now available. Javier Sanchez (Information Systems) (08/07/02)
• Formal Response to HP ATD (08/01/02)
• trillian buffer overflow John C. Hennessy (08/01/02)
• Re: Additional bugs in gallery Bharat Mediratta (08/01/02)
• Re: OpenSSL Security Altert - Remote Buffer Overflows Scott Gifford (08/01/02)
• iPlanet vulnerabilities on IRIX SGI Security Coordinator (08/01/02)
• Re: Comment on DMCA, Security, and Vuln Reporting] Declan McCullagh (08/01/02)
• code injection in gallery avart@gmx.de (08/01/02)
• FW: Windows 2000 Service Pack 3 now available. Leif Sawyer (08/01/02)
• List of mirrors carrying trojaned OpenSSH Tomi Nylund (08/01/02)
• HiverCon 2002, Ireland - Earlybird registration now available Mark Anderson (08/01/02)
• Sun RPC xdr_array vulnerability SGI Security Coordinator (08/01/02)
• Winhelp32 Remote Buffer Overrun Next Generation Insight Security Research Team (08/02/02)
  • Re: Winhelp32 Remote Buffer Overrun Jelmer (08/02/02)
    • Re: Winhelp32 Remote Buffer Overrun Mark Litchfield (08/06/02)
      • RE: Winhelp32 Remote Buffer Overrun Drew (08/07/02)
  • RE: Winhelp32 Remote Buffer Overrun Drew (08/07/02)
• Re: IPSwitch IMail ADVISORY/EXPLOIT/PATCH Tom Fischer (08/01/02)
• rpc.pcnfsd vulnerabilities on IRIX SGI Security Coordinator (08/01/02)
• FreeBSD Security Advisory FreeBSD-SA-02:34.rpc [REVISED] FreeBSD Security Advisories (08/01/02)
• SuSE Security Announcement: wwwoffle (SuSE-SA:2002:029) Thomas Biege (08/01/02)
• [SECURITY] [DSA 140-1] New libpng packages fix buffer overflow Martin Schulze (08/01/02)
• RPC analysis Charles Hannum (08/01/02)
• [SECURITY] [DSA 139-1] New super packages fix local root exploit Martin Schulze (08/01/02)
• Re: Phenoelit Advisory 0815 ++ -- Brick Andrew Ferreira (08/01/02)
• OpenSSH Security Advisory: Trojaned Distribution Files Niels Provos (08/01/02)
• trojan horse in recent openssh (version 3.4 portable 1) Christian Bahls (08/01/02)
  • Re: trojan horse in recent openssh (version 3.4 portable 1) Jim Breton (08/01/02)
• openssh-3.4p1.tar.gz distribution recently trojaned Mikael Olsson (08/01/02)
• it's all about timing Florin Andrei (07/31/02)
  • Re: [Full-Disclosure] it's all about timing John Scimone (07/31/02)
  • Re: it's all about timing Steven M. Christey (08/01/02)
    • Re: [Full-Disclosure] Re: it's all about timing Georgi Guninski (08/01/02)
• TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC Claudio Ortiz Meinberg (07/31/02)
• Incorrect Dichotomy - Was: It takes two to tango Matthew White (08/01/02)
• RE: It takes two to tango (or samba for that matter) Gibby McCaleb (07/31/02)
• FW: It takes two to tango (or samba for that matter) Gibby McCaleb (07/31/02)
• Re: It takes two to tango Derek D. Martin (08/01/02)
  • Re: It takes two to tango Randy Hinders (07/31/02)
  • Re: It takes two to tango Tom Perrine (07/31/02)
  • Re: It takes two to tango Greg A. Woods (07/31/02)
    • Re: It takes two to tango Chris Paget (07/31/02)
  • Re: It takes two to tango Kyle R. Hofmann (08/01/02)
  • Re: It takes two to tango Branson Matheson (07/31/02)
  • Re: It takes two to tango Ltlw0lf (07/31/02)
• RE: It takes two to tango Mark L. Jackson (07/31/02)
  • RE: It takes two to tango John Howie (07/31/02)
  • RE: It takes two to tango Scott, Richard (07/31/02)
• Comment on DMCA, Security, and Vuln Reporting Richard Forno (07/31/02)
  • RE: Comment on DMCA, Security, and Vuln Reporting Wolf, Glenn (07/31/02)
• FreeBSD Security Advisory FreeBSD-SA-02:34.rpc FreeBSD Security Advisories (08/01/02)
  • Re: FreeBSD Security Advisory FreeBSD-SA-02:34.rpc Adam Sampson (08/01/02)
    • Re: FreeBSD Security Advisory FreeBSD-SA-02:34.rpc Casper Dik (08/04/02)
• Fwd: Re: [Full-Disclosure] for the record... (Tru64 / Compaq) John Scimone (07/31/02)
• bug in KSTAT Dallachiesa Michele (07/31/02)
• [SECURITY] [DSA-138-1] Remote execution exploit in gallery Wichert Akkerman (08/01/02)

Last message date: 08/31/02
Archived on: 08/31/02 CEST

---

433 messages sorted by: [ author ] [ date ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2002-08