SecurityFocus Bugtraq
By Author

Starting: 09/02/02
Ending: 09/30/02

• 3APA3A
  • Re: SWS Web Server v0.1.0 Exploit (09/03/02)
• @stake Advisories
  • Apple QuickTime ActiveX v5.0.2 Buffer Overrun (a091002-1) (09/10/02)
• Abraham Lincoln
  • NSSI-2002-sygatepfw5: Sygate Personal Firewall IP Spoofing Vulnerability (09/16/02)
• adamkuj@gatordog.com
  • Re: bugtraq.c httpd apache ssl attack (09/13/02)
• Adcock, Matt
  • RE: NetMeeting 3.01 Local RDS Session Hijacking (09/20/02)
• Ajai Khattri
  • Re: Linux Slapper Worm (09/18/02)
• Alex Gantman
  • More vulnerabilities (Re: Security side-effects of Word fields) (09/19/02)
• Allen.Wilson@guardent.com
  • Guardent Client Advisory: Multiple wordtrans-web Vulnerabilities (09/08/02)
• Andrew Church
  • Not a bug: IIL Advisory: Format String bug in Null Webmail (0.6.3) (09/25/02)
• Andrew Danforth
  • OpenSSH 3.4p1 Privsep (09/16/02)
• Andy Spiers
  • Re: Bug in Opera and Konqueror (09/17/02)
• annihilator@inet.hr
  • IIL Advisory: Winamp 3 (1.0.0.488) XML parser buffer overflow vulnerability (09/29/02)
• Arne Schwerdtfegger
  • Fw: [ut2003bugs] remote denial of service in ut2003 demo (09/17/02)
• Artem Chuprina
  • Re: OpenSSH 3.4p1 Privsep (09/17/02)
• Auriemma Luigi
  • Savant 3.1 multiple vulnerabilities (09/13/02)
  • Some unpatched vulnerabilities fixed (09/11/02)
• Aviram Jenik
  • Bypassing SMTP Content Protection with a Flick of a Button (09/12/02)
• Axel Pettinger
  • Re: All versions of windows infected? (09/07/02)
• B.Goodman
  • Re: Security side-effects of Word fields (09/06/02)
• Ben Cohen
  • Re: Microsoft Windows Terminal Services vulnerabilities (09/20/02)
  • Microsoft Windows Terminal Services vulnerabilities (09/18/02)
  • Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities (09/16/02)
  • Microsoft Windows XP Remote Desktop denial of service vulnerability (09/16/02)
• Ben Kittridge
  • Re: bugtraq.c httpd apache ssl attack (09/14/02)
• Ben Laurie
  • Re: bugtraq.c httpd apache ssl attack (09/14/02)
  • OpenSSL worm in the wild (09/13/02)
• Bencsath Boldizsar
  • Allot Netenforcer problems, GNU TAR flaw (09/27/02)
• Berend-Jan Wever
  • Norton AntiVirus 2001 POP3 Proxy local DoS (09/11/02)
  • Re: Small bug crashes OE (09/11/02)
• Bert Vanmanshoven
  • remote exploitable heap overflow in Null HTTPd 0.5.0 (09/23/02)
  • AFD 1.2.14 multiple local root compromises (09/04/02)
• Blake Watters
  • Re: nidump on OS X (09/18/02)
• Blue@mail.securityfocus.com, Coat@mail.securityfocus.com, Systems@mail.security
  • Re: CacheFlow CacheOS Cross-site Scripting Vulnerability (09/03/02)
• Bonemach
  • Re: Information Disclosure with Invision Board installation (fwd) (09/26/02)
• Boris Veytsman
  • Re: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (09/26/02)
• Brandon Sturgeon
  • Re: [UPDATED] Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks (09/20/02)
• Brendan C. Johnson
  • Cobalt 6.0 Local Root (09/12/02)
• Brenna Primrose
  • RE: Trillian weakly encrypts saved passwords (09/09/02)
• Brook Powers
  • HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability (09/24/02)
• Bryan Blackburn
  • Re: nidump on OS X (09/17/02)
• bugtraq-help@securityfocus.com
  • ezmlm warning (09/30/02)
• bugtraq@applied-knowledge.net
  • Re: Password Security Policy Question (09/10/02)
• bugzilla@redhat.com
  • [RHSA-2002:096-24] Updated unzip and tar packages fix vulnerabilities (09/29/02)
  • [RHSA-2002:060-17] Updated Zope packages are available (09/25/02)
  • [RHSA-2002:036-26] Updated ethereal packages available (09/13/02)
  • [RHSA-2002:189-08] Updated gaim client fixes URL vulnerability (09/10/02)
  • [RHSA-2002:188-08] New wordtrans packages fix remote vulnerabilities (09/09/02)
  • [RHSA-2002:186-07] Updated scrollkeeper packages fix tempfile vulnerability (09/02/02)
• Cano2
  • sql injection vulnerability in WBB 2.0 RC1 and below (09/08/02)
• Charles Stevenson
  • Re: Linux Slapper Worm (09/19/02)
• Chris Brenton
  • Re: Next-hop scanning for open firewall ports (09/07/02)
• Christopher Allene
  • Security Issue with Mac OS X (09/13/02)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Microsoft Windows SMB Denial of Service Vulnerabilities in Cisco Products - MS02-045 (09/18/02)
  • Cisco Security Advisory: Cisco VPN 5000 Client Multiple Vulnerabilities (09/18/02)
  • Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set (09/05/02)
  • Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities (09/03/02)
• Cloud Ass
  • efstool slackware 7.1 local root exploit exploit included (09/11/02)
• Craig Dickson
  • Re: slashdot / slashcode disclosing passwords (09/11/02)
• Crispin Cowan
  • Re: Password Security Policy Question (09/18/02)
• Curator at Security Digest Archives
  • [securitydigest.org]: Changes in August/September 2002 (09/13/02)
• Damon McMahon
  • Re: Vulnerabilities in Microsoft's Java implementation (09/11/02)
• Daniel Ahlberg
  • GLSA: glibc (update) (09/27/02)
  • GLSA: dietlibc (09/27/02)
  • GLSA: tomcat (09/25/02)
  • GLSA: glibc (09/09/02)
  • GLSA: amavis (09/05/02)
  • GLSA: scrollkeeper (09/04/02)
• Daniel R. Ome
  • Re: IIL Advisory: Reverse traversal vulnerability in Monkey (0.1.4) HTTP server (09/26/02)
• DarC KonQuesT
  • Squirrel Mail 1.2.7 XSS Exploit (09/19/02)
• Dark Angel
  • KSTAT (and maybe others) bypass (09/06/02)
• Darren Reed
  • Re: The Art of Unspoofing (09/19/02)
  • Re: Next-hop scanning for open firewall ports (09/07/02)
• das@hush.com
  • ECHU Alert #2: IMG Attack in the news : 6 CMS vulnerables (09/25/02)
  • Xoops RC3 script injection vulnerability (09/24/02)
• Dave Ahmad
  • Re: Hacking Citrix Faq (fwd) (09/27/02)
  • [security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability (fwd) (09/23/02)
  • Re: OpenSSL worm in the wild (09/13/02)
  • [security bulletin] SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP (fwd) (09/11/02)
  • Re: MSIEv6 % encoding causes a problem again (09/04/02)
  • Re: MSIEv6 % encoding causes a problem again (09/04/02)
  • [security bulletin] SSRT2310a HP Tru64 UNIX & HP OpenVMS Potential OpenSSL Security Vulnerability (fwd) (09/03/02)
• Dave Aitel
  • Unmask 1.0 Release Party at My House! (09/09/02)
  • SPIKE 2.6 Released... (09/04/02)
• David Endler
  • iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server (09/30/02)
  • RE: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (09/26/02)
  • Errata: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (09/26/02)
  • iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (09/26/02)
  • Now Online: OWASP Guide to Building Secure Web Applications v1.1 (09/23/02)
  • iDEFENSE Security Advisory 09.23.2002: Directory Traversal in Dino's Webserver (09/23/02)
  • iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (09/18/02)
• David F. Skoll
  • Roaring Penguin fixes for "Bypassing SMTP Content Protection with a Flick of a Button" (09/12/02)
  • MIMEDefang update (was Re: Bypassing SMTP Content Protection ) (09/12/02)
• David G. Andersen
  • Next-hop scanning for open firewall ports (09/06/02)
• David Komanek
  • Re: Small bug crashes OE (09/12/02)
• Dirk Mueller
  • Re: Bug in Opera and Konqueror (09/17/02)
  • KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability (09/11/02)
  • KDE Security Advisory: Secure Cookie Vulnerability (09/11/02)
  • Re: MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable (09/07/02)
• DominusQ
  • Re: JSP source code exposure in Tomcat 4.x (09/24/02)
• DownBload
  • XSS bug in Monkey (0.5.0) HTTP server (09/30/02)
  • IIL Advisory: Vulnerabilities in acWEB HTTP server (09/25/02)
  • IIL Advisory: Format String bug in Null Webmail (0.6.3) (09/25/02)
  • IIL Advisory: Reverse traversal vulnerability in Monkey (0.1.4) HTTP server (09/25/02)
• Dragos Ruiu
  • CanSecWest/core03 (09/19/02)
• eax@3xT.org
  • Cross-Site Scripting in Aestiva's HTML/OS (09/03/02)
• EGADS Team
  • ANNOUNCE: Egads 0.9.5 (09/19/02)
• Eric Rescorla
  • Re: Remote detection of vulnerable OpenSSL versions (09/18/02)
  • Re: OpenSSL worm in the wild (09/13/02)
  • Re: OpenSSL worm in the wild (09/13/02)
  • Buffer over/underflows in ssldump prior to 0.9b3 (09/11/02)
• Eric Stevens
  • RE: Trillian Remote DoS Attack - AIM (09/24/02)
  • RE: PHP header() CRLF Injection (09/09/02)
• eric.prince@cox.net
  • The Art of Unspoofing (09/18/02)
• eric@catastrophe.net
  • Re: OpenSSH 3.4p1 Privsep (09/17/02)
• ersatz@unixhideout.com
  • Yet another XSS vulnerability in PHP NUKE (09/27/02)
• ET LoWNOISE
  • [LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware (09/29/02)
• Euan
  • Re: The Art of Unspoofing (09/19/02)
• Evan Nemerson
  • Trillian weakly encrypts saved passwords (09/09/02)
• Fernando Nunes
  • Re: bugtraq.c httpd apache ssl attack (09/14/02)
  • bugtraq.c httpd apache ssl attack (09/13/02)
• Florian Weimer
  • Remote detection of vulnerable OpenSSL versions (09/17/02)
  • Re: Compaq mount patch broken (09/03/02)
• Foundstone Labs
  • Foundstone Labs Advisory - Buffer Overflow in Savant Web Server (09/11/02)
  • Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP (09/06/02)
• Geoff Craig
  • UPDATE: (Was Veritas Backup Exec opens networks for NetBIOS based attacks?) (09/06/02)
  • Veritas Backup Exec opens networks for NetBIOS based attacks? (09/06/02)
• Gino Genari
  • RE: Veritas Backup Exec opens networks for NetBIOS based attacks? (09/06/02)
• Gossi The Dog
  • Re: Information Disclosure with Invision Board installation (fwd) (09/25/02)
  • Information Disclosure with Invision Board installation (fwd) (09/25/02)
  • Re: Bypassing SMTP Content Protection with a Flick of a Button (09/13/02)
• grazer@digit-labs.org
  • Borland Interbase local root exploit (09/25/02)
• Greg A. Woods
  • Re: Password Security Policy Question (09/11/02)
• gregh
  • Wireless Networking Frailty (09/23/02)
• GreyMagic Software
  • RE: Who framed Internet Explorer and IE6 SP1 (09/10/02)
  • Who framed Internet Explorer (GM#010-IE) (09/09/02)
• Gwendal Stevanazzi
  • Re: Vulnerabilities in Microsoft's Java implementation (09/11/02)
• h1kari
  • ToorCon 2002 This Weekend (09/23/02)
• Howard Yeend
  • Re: One step easier password guessing on Windows (09/03/02)
• Iamhatingit@aol.com
  • All versions of windows infected? (09/06/02)
• Jamie McCarthy
  • Re: slashdot / slashcode disclosing passwords (09/17/02)
  • Re: slashdot / slashcode disclosing passwords (09/12/02)
• Jason
  • Re: IE6 SSL Certificate Chain Verification (09/24/02)
• Jason A. Fager
  • Re: nidump on OS X (09/17/02)
• Jason Barbour
  • Re: Trillian .74 and below, ident flaw. (09/18/02)
• Jason Munro
  • Re: Squirrel Mail 1.2.7 XSS Exploit (09/19/02)
• Jean-loup Gailly
  • remote SYSTEM compromise in WASD OpenVMS http server (09/26/02)
• Jeffrey Denton
  • Re: efstool slackware 7.1 local root exploit exploit included (09/12/02)
• jelmer
  • LEVERAGING CROSS-PROTOCOL SCRIPTING IN MSIE (09/12/02)
  • the attachement (09/12/02)
  • Re: Trillian weakly encrypts saved passwords (09/09/02)
  • Re: MSIEv6 % encoding causes a problem again (09/04/02)
• Jeremy C. Reed
  • Re: xbreaky symlink vulnerability (09/12/02)
• Jim Duncan
  • Re: The Trivial Cisco IP Phones Compromise (09/19/02)
• Joao Gouveia
  • Watchguard firewall appliances security issues (09/27/02)
• John C. Welch
  • Re: nidump on OS X (09/18/02)
• Jonathan G. Lampe
  • SafeTP coughs up internal server IP addresses (09/28/02)
• Jose Marcio Martins da Cruz
  • Another possible RFC 2046 vulnerability. (09/27/02)
• Jose Martins
  • tst attachment (09/18/02)
• Jose Nazario
  • trillian DoS: trillian 1.0 pro also vulnerable (09/18/02)
• Joshua Wright
  • RE: Trillian Remote DoS Attack - AIM (09/24/02)
• Jouko Pynnonen
  • Technical information about the vulnerabilities fixed by MS-02-52 (09/23/02)
  • Vulnerabilities in Microsoft's Java implementation (09/09/02)
• Just Marc
  • Re: OpenSSH 3.4p1 Privsep (09/17/02)
• Ka
  • Re: Information Disclosure with Invision Board installation (fwd) (09/25/02)
• KF
  • iDEFENSE OSF1/Tru64 3.x vuln clarification (09/19/02)
  • Re: Linux Slapper Worm code (09/16/02)
  • TRU64 formal disclosure from Snosoft. (09/04/02)
  • Happy Labor Day from Snosoft (09/02/02)
• Kilian CAVALOTTI
  • Re: Small bug crashes OE (09/10/02)
• Knights of the Routing Table
  • Cacti security issues (09/03/02)
• Kurt Seifried
  • Kondara MNU/Linux (09/23/02)
• L. Adrian Griffis
  • Password Security Policy Question (09/10/02)
• Lance Fitz-Herbert
  • *sigh* Trillian multiple DoS's flaws. (09/22/02)
  • And Again. Trillian 'raw 221' Overflow. (09/21/02)
  • Yet Another. Trillian 'JOIN' Overflow. (09/20/02)
  • Trillian .73 & .74 "PRIVMSG" Overflow. (09/19/02)
  • Trillian .74 and below, ident flaw. (09/18/02)
• Liu Die Yu
  • MSIEv6 % encoding causes a problem again (09/03/02)
• Mandrake Linux Security Team
  • MDKSA-2002:059 - php update (09/11/02)
  • MDKSA-2002:057 - krb5 update (09/10/02)
  • MDKSA-2002:058 - kdelibs update (09/10/02)
  • MDKSA-2002:054-1 - gaim update (09/06/02)
• Marc Bejarano
  • Fwd: QuickTime for Windows ActiveX security advisory (09/25/02)
• Marc Ruef
  • NetGear FM114P URL filter bypassing vulnerability (09/07/02)
  • Bypassing the Finjan SurfinGate URL filter (09/04/02)
• Marcin Jackowski
  • Re: JSP source code exposure in Tomcat 4.x (09/24/02)
• Marco van Berkum
  • Re: xbreaky symlink vulnerability (09/12/02)
  • xbreaky symlink vulnerability (09/12/02)
• Mario van Velzen
  • Analysis of Modap worm (09/17/02)
• Mark Anderson
  • Final Speakers for HiverCon 2002 Announced (09/11/02)
• Mark Grimes
  • Postnuke XSS issues [correction] (09/26/02)
  • Postnuke XSS issues (09/25/02)
  • PHPNUKE 6 XSS Vulnerabilities (09/24/02)
• Mark van Gelder
  • Firewall-1 –HTTP Security Server - Proxy vulnerability (09/18/02)
• Marshall Beddoe
  • Foundstone Research Labs Advisory - Remotely Exploitable Buffer Overflow in ISS Scanner (09/18/02)
• Martin
  • Re: nidump on OS X (09/17/02)
• Martin Robson
  • RE: JSP source code exposure in Tomcat 4.x (09/25/02)
• Martin Schulze
  • [SECURITY] [DSA 149-2] New glibc packages fix (09/26/02)
  • [SECURITY] [DSA 168-1] New PHP packages fix several vulnerabilities (09/18/02)
  • [SECURITY] [DSA 167-1] New kdelibs fix cross site scripting bug (09/16/02)
  • [SECURITY] [DSA 166-1] New purity packages fix potential buffer overflows (09/13/02)
  • [SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities (09/12/02)
  • [SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution (09/10/02)
  • [SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems (09/09/02)
  • [SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix (09/09/02)
  • [SECURITY] [DSA 162-1] New ethereal packages fix buffer overflow (09/06/02)
  • [SECURITY] [DSA 161-1] New Mantis package fixes privilege escalation (09/04/02)
  • [SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation (09/03/02)
• Matthew Murphy
  • Lycos HTMLGear Guestbook Script Injection Vulnerability (09/15/02)
  • PHP header() CRLF Injection (09/08/02)
  • XSS in Null HTTPd (09/02/02)
• Matthias Bauer
  • Re: PHP source injection in phpWebSite (09/24/02)
• Mella Marco
  • Scan against Enterasys SSR8000 crash the system (09/13/02)
• Menashe Eliezer
  • FW: Bypassing SMTP Content Protection with a Flick of a Button (09/12/02)
  • RE: Bypassing the Finjan SurfinGate URL filter (09/05/02)
• Michael McCallum
  • Re: Bug in Opera and Konqueror (09/18/02)
• Michael Scheidell
  • SECNAP Security Alert: Radmin Default install options vulnerability (09/02/02)
• Michael Stone
  • [SECURITY] [DSA-136-2] Multiple OpenSSL problems (update) (09/16/02)
  • [SECURITY] [DSA-136-3] Multiple OpenSSL problems (update) (09/17/02)
• Michal Zalewski
  • Re: slashdot / slashcode disclosing passwords (09/12/02)
  • Re: slashdot / slashcode disclosing passwords (09/11/02)
  • slashdot / slashcode disclosing passwords (09/11/02)
  • Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later (09/10/02)
• Mike Benham
  • Re: Trillian weakly encrypts saved passwords (09/09/02)
  • Outlook S/MIME Vulnerability (09/02/02)
• Mike Duncan
  • Re: Vulnerabilities in Microsoft's Java implementation (09/11/02)
• Mike Riley
  • OpenVMS POP server local vulnerability (09/27/02)
• Miroslaw Jaworski
  • Re: Linux Slapper Worm (09/19/02)
• Muhammad Faisal Rauf Danka
  • Re: Yet another XSS vulnerability in PHP NUKE (09/28/02)
• Nate Lawson
  • Re: Password Security Policy Question (09/17/02)
• nestler@speakeasy.net
  • Re: Web browser certificate Validation flaw: Netscape, Mozilla, MSIE vulnerable - still? (09/19/02)
• NetBSD Security Officer
  • NetBSD Security Advisory YYYY-NNN: {brief description of SA} (09/23/02)
  • Multiple NetBSD Security Advisories Released/Updated (09/17/02)
  • NetBSD Security Advisory 2002-017: shutdown(s, SHUT_RD) on TCP socket does not work as intended (09/17/02)
  • NetBSD Security Advisory 2002-013: Bug in NFS server code allows remote denial of service (09/17/02)
  • NetBSD Security Advisory 2002-012: buffer overrun in setlocale (09/17/02)
  • NetBSD Security Advisory 2002-006: buffer overrun in libc/libresolv DNS resolver (09/17/02)
  • NetBSD Security Advisory 2002-007: Repeated TIOCSCTTY ioctl can corrupt session hold counts (09/17/02)
  • NetBSD Security Advisory 2002-010: symlink race in pppd (09/17/02)
  • NetBSD Security Advisory 2002-018: Multiple security isses with kfd daemon (09/17/02)
  • NetBSD Security Advisory 2002-014: fd_set overrun in mbone tools and pppd (09/17/02)
  • NetBSD Security Advisory 2002-009: (09/17/02)
  • NetBSD Security Advisory 2002-011: Sun RPC XDR decoder contains buffer overflow (09/17/02)
• netmask {enZo}
  • Re: Trillian .74 and below, ident flaw. (09/19/02)
• NGSSoftware Insight Security Research
  • New Paper: Threat profiling Microsoft SQL Server (09/02/02)
  • Microsoft SQL Server Stored procedures [sp_MSSetServerPropertiesn and sp_MSsetalertinfo] (#NISR03092002A) (09/02/02)
  • Windows .NET Server (RC1) and MSDE (#NISR03092002B) (09/02/02)
• Nick Lamb
  • Re: Password Security Policy Question (09/13/02)
• Niels Heinen
  • Cisco VPN 5000 client buffer overflow vulnerabilities. (09/18/02)
• NP-completer
  • One step easier password guessing on Windows (09/01/02)
• Ofir Arkin
  • RE: The Trivial Cisco IP Phones Compromise (09/20/02)
  • The Trivial Cisco IP Phones Compromise (09/19/02)
• Olaf Kirch
  • SuSE Security Announcement: Slapper worm (SuSE-SA:2002:033) (09/20/02)
• Ondrej Suchy
  • joe editor backup problem (09/17/02)
• Paul A Roberts
  • NetMeeting 3.01 Local RDS Session Hijacking (09/13/02)
• Paul Szabo
  • Re: Compaq mount patch broken (09/04/02)
  • Compaq mount patch broken (09/03/02)
• Pedro Inacio
  • PHP-Nuke x.x AND PostNuke SQL Injection (09/26/02)
  • PHP-Nuke x.x SQL Injection (09/25/02)
• Peter Gründl
  • KPMG-2002035: IBM Websphere Large Header DoS (09/19/02)
• Peter J. Holzer
  • Re: OpenSSH 3.4p1 Privsep (09/17/02)
• Peter Peters
  • Re: The Trivial Cisco IP Phones Compromise (09/20/02)
• Peter Watkins
  • Re: Race condition in BRU Workstation 17.0 (09/13/02)
• Pidgorny, Slav
  • Web browser certificate Validation flaw: Netscape, Mozilla, MSIE vulnerable - still? (09/18/02)
• Piotr Paw³ow
  • MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable (09/06/02)
• ppp-design
  • phpGB: DoS and executing_arbitrary_commands (09/09/02)
  • phpGB: mysql injection bug (09/09/02)
  • phpGB: cross site scripting bug (09/09/02)
• proberts@teleport.com
  • Re: NetMeeting 3.01 Local RDS Session Hijacking (09/20/02)
• prophecy@prophecy.net.nz
  • Re: Race condition in BRU Workstation 17.0 (09/14/02)
  • Race condition in BRU Workstation 17.0 (09/13/02)
• Raistlin
  • Small correction... (09/09/02)
  • Small bug crashes OE (09/09/02)
• Rapid 7 Security Advisories
  • Rapid 7 Advisory R7-0005: ZMerge Insecure Default ACLs (09/06/02)
• RATS Team
  • ANNOUNCE: RATS 2.0 (09/19/02)
• Rohit Sharma
  • QT Assistant leaves port unfiltered (09/29/02)
• Roman Drahtmueller
  • Re: Password Security Policy Question (09/10/02)
  • SuSE Security Announcement: glibc (SuSE-SA:2002:031) (08/30/02)
• Ron DuFresne
  • Slapper worm redux; (09/24/02)
• Rossen Raykov
  • JSP source code exposure in Tomcat 4.x (09/24/02)
• Roy Hills
  • RE: SecuRemote usernames can be guessed or sniffed using IKE exchange (09/11/02)
  • SecuRemote usernames can be guessed or sniffed using IKE exchange (09/03/02)
• RuIezz@aol.com
  • Re: Xoops RC3 script injection vulnerability (09/28/02)
• Russell Garrett
  • Re: Multiple vulnerabilities in Avaya Argent Office (09/12/02)
• saman@hush.com
  • SWS Web Server v0.1.0 Exploit (09/02/02)
• Sandu Mihai
  • RE: bugtraq.c httpd apache ssl attack (09/13/02)
  • RE: Apache worm in the wild (09/13/02)
• Sandu Mihai Eduard
  • RE: bugtraq.c httpd apache ssl attack (09/16/02)
• Scott Walker Register
  • RE: SecuRemote usernames can be guessed or sniffed using IKE exchange (09/05/02)
• Sean Trifero
  • Re: The Art of Unspoofing (09/20/02)
• Sebastian Krahmer
  • SuSE Security Announcement: heimdal (SuSE-SA:2002:034) (09/30/02)
  • SuSE Security Announcement: xf86 (SuSE-SA:2002:032) (09/18/02)
• secure@conectiva.com.br
  • [CLA-2002:526] Conectiva Linux Security Announcement - xchat (09/23/02)
  • [CLA-2002:525] Conectiva Linux Security Announcement - kdelibs (09/20/02)
  • [CLA-2002:524] Conectiva Linux Security Announcement - postgresql (09/19/02)
  • [CLA-2002:523] Conectiva Linux Security Announcement - util-linux (09/12/02)
  • [CLA-2002:522] Conectiva Linux Security Announcement - mailman (09/03/02)
• Sergio
  • Re: Xoops RC3 script injection vulnerability (09/26/02)
  • Re: Xoops RC3 script injection vulnerability fixed (09/26/02)
• SGI Security Coordinator
  • IRIX default root umask and coredumps (09/18/02)
• sh@phion.com
  • Microsoft PPTP Server and Client remote vulnerability (09/26/02)
• shaddup@hush.com
  • Apache 2.0.(39|40) DOS (PHP!) (09/23/02)
• Shaolin Tiger
  • Re: SUMMARY: Disabling Port 445 (SMB) Entirely (09/02/02)
• Sharla Warren
  • ShadowCon 2002 (09/20/02)
• skinnay@skinnux.com
  • Jetty jsp/servlet engine xss / uname disclosure vuln (09/28/02)
• Solar Designer
  • Re: Password Security Policy Question (09/13/02)
• soulshock
  • Re: Trillian XML parser buffer overflow (08/31/02)
• Spikeman
  • Trillian Remote DoS Attack - AIM (09/23/02)
• Spybreak
  • The ScrollKeeper Root Trap (09/02/02)
• Spyder
  • Re: Outlook S/MIME Vulnerability (09/03/02)
• Stefan Esser
  • Advisory 03/2002: Fetchmail remote vulnerabilities (09/29/02)
  • Re: PHP fopen() CRLF Injection (09/12/02)
• Stefan.Bagdohn@guardeonic.com
  • Advisory: TCP-Connection risk in DB4Web (09/17/02)
  • Advisory: File disclosure in DB4Web (09/17/02)
• Steve Fallin
  • Software Update Available for Legacy RapidStream Appliances and W atchGuard Firebox Vclass appliances (09/27/02)
• Steven M. Bellovin
  • Re: Bypassing SMTP Content Protection with a Flick of a Button (09/14/02)
• Steven M. Christey
  • Re: [Full-Disclosure] iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (09/19/02)
• sullo
  • Shana Informed 3.05 information disclosure (09/25/02)
• Sven Neuhaus
  • Privacy leak in mozilla (09/11/02)
• Sym Security
  • http://online.securityfocus.com/archive/1/291358/2002-09-08/2002-09-14/0, Subj: Norton AintiVirus 2001 POPROXY DoS (09/19/02)
• The Little Prince
  • Re: bugtraq.c httpd apache ssl attack (09/13/02)
• Thomas Seliger
  • Re: **maillist:: Outlook S/MIME Vulnerability (09/03/02)
• Thor Larholm
  • Mozilla vulnerabilities, an update (09/18/02)
  • IE6 SP1 Notes (09/10/02)
  • RE: (Fwd) MSIEv6 % encoding causes a problem again (09/05/02)
• Tim Vandermeersch
  • PHP source injection in phpWebSite (09/23/02)
• Timothy J.Miller
  • Re: **maillist:: Outlook S/MIME Vulnerability (09/04/02)
• Torbjörn Hovmark
  • Re: Execution Rights Not Checked Correctly For 16-bit Applications (09/19/02)
  • Execution Rights Not Checked Correctly For 16-bit Applications (09/18/02)
  • Re: **maillist:: Outlook S/MIME Vulnerability (09/04/02)
• UkR security team™
  • Planet Web Software Buffer Overflow (09/14/02)
  • advisory (09/05/02)
• Ulf Harnhammar
  • MyNewsGroups :) XSS patch (09/30/02)
  • JAWmail XSS (09/23/02)
  • Re: PHP fopen() CRLF Injection (09/12/02)
  • ht://Check XSS (09/12/02)
  • PHP fopen() CRLF Injection (09/09/02)
• Vigneau, Steve
  • RE: Execution Rights Not Checked Correctly For 16-bit Application s (09/18/02)
• Vincent Royer
  • Bypassing TrendMicro InterScan VirusWall (09/12/02)
• Walter Hop
  • Re: All versions of windows infected? (09/07/02)
• Woody Leonhard
  • Re: Security side-effects of Word fields (09/03/02)
• zen-parse
  • zero-width gif: exploit PoC for NS6.2.3 (fixed in 7.0) [Was: GIFs Good, Flash Executable Bad] (09/06/02)
• zeno
  • Re: Foundstone Labs Advisory - Buffer Overflow in Savant Web Server (09/11/02)
• Zeux
  • Bug in Opera and Konqueror (09/15/02)
• Zoltán Nochta
  • IE6 SSL Certificate Chain Verification (09/23/02)

Last message date: 09/30/02
Archived on: 09/30/02 CEST

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint