SecurityFocus Bugtraq
By Author

355 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

Starting: 10/01/03
Ending: 10/31/03

• 3APA3A
  • Few issues previously unpublished in English (10/15/03)
  • Bad news on RPC DCOM vulnerability (10/10/03)
  • Re: PHP-Nuke SQL Injection (10/08/03)
• _at_stake Advisories
  • Mac OS X Long argv[] buffer overflow (10/28/03)
  • Mac OS X Arbitrary File Overwrite via Core Files (10/28/03)
  • Mac OS X Systemic Insecure File Permissions (10/28/03)
  • Opera HREF escaped server name overflow (10/20/03)
• Adam Dyga
  • mod_security 1.7RC1 to 1.7.1 vulnerability (10/28/03)
• Adam Shostack
  • Macos 10.2.8 (10/31/03)
  • Re: Mac OS X vulnerabilities (10/31/03)
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
• Adeel Hussain
  • Re: [PAPER] Juggling with packets: floating data storage (10/09/03)
• advisories
  • Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue (10/31/03)
  • Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues (10/31/03)
• advisories(-at-)texonet.com
  • Remote overflow in thttpd (10/27/03)
• advisory_at_stgsecurity.com
  • STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability (10/29/03)
• Alan
  • Mimail.C (10/31/03)
• Alexander E. Cuttergo
  • The joys of impurity (was: MOSDEF, InlineEgg) (10/06/03)
• Alla Bezroutchko
  • Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (10/28/03)
• Alun Jones
  • RE: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Andreas Boeckler
  • IE6 CSS-Crash (10/22/03)
• Andreas Reich
  • Re: a dangerous fast spreading (yet simple) trojan horse. (10/27/03)
• Andreas Sandblad
  • Re: Internet Explorer and Opera local zone restriction bypass (10/27/03)
  • Re: Internet Explorer and Opera local zone restriction bypass (10/26/03)
• Angelo Rosiello
  • WU-FTPD 2.6.2 Freezer (10/31/03)
• arachnid__notdot_net_at_meta.net.nz
  • New IE crash: CSS + HTML (10/03/03)
• Aron Nimzovitch
  • Re: [PAPER] Juggling with packets: floating data storage (10/09/03)
• Astharot
  • ZH2003-31SA (security advisory): file inclusion vulnerability in cpCommerce (10/19/03)
  • ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front (10/08/03)
  • ZH2003-3SP (security patch): multiple vulnerabilities in mod_gzip 1.3.x debug mode (10/07/03)
• Aviram Jenik
  • Multiple SQL Injection Vulnerabilities in DeskPRO (10/20/03)
• b0f www.b0f.net
  • Local root vuln in kpopup (10/28/03)
• Bahaa Naamneh
  • PHP-Nuke Path Disclosure Vulnerability (10/18/03)
  • Minihttpserver File-Sharing for NET Directory Traversal Vulnerability (10/03/03)
  • Multiple vulnerabilities in WinShadow (10/01/03)
• Bharat Mediratta
  • Re: Gallery 1.4 including file vulnerability (10/12/03)
• Bipin Gautam hUNT3R
  • Re: Internet Explorer and Opera local zone restriction bypass (10/28/03)
  • Some serious security holes in 'The Bat!' (10/25/03)
• Blademaster
  • E107 DoS vulnerability (10/29/03)
• Bob Niederman
  • Re: Cisco 6509 switch telnet vulnerability (10/04/03)
• BrainRawt
  • TRACKtheCLICK Script Injection Vulnerabilities (10/11/03)
• Brandon Eisenmann
  • Re: [PAPER] Juggling with packets: floating data storage (10/10/03)
• Brent Meshier
  • RE: Gallery 1.4 including file vulnerability (10/11/03)
• Brett Moore
  • HTML Help API - Privilege Escalation (10/24/03)
  • Listbox And Combobox Control Buffer Overflow (10/16/03)
  • Shattering By Example (10/10/03)
  • Process Killing - Playing with PostThreadMessage (10/02/03)
• Brian Paulson
  • RE: New IE crash: CSS + HTML (10/03/03)
• bruce_at_webwizguide.info
  • Re: Web Wiz Forums ver. 7.01 (10/22/03)
• bugzilla_at_redhat.com
  • [RHSA-2003:281-01] Updated MySQL packages fix vulnerability (10/09/03)
  • [RHSA-2003:278-01] Updated SANE packages fix remote vulnerabilities (10/07/03)
  • [RHSA-2003:256-02] Updated Perl packages fix security issues. (10/03/03)
• Cael Abal
  • Re: [Full-Disclosure] Re: Gaim festival plugin exploit (10/18/03)
• Carl Livitt
  • Remote root exploit for proftpd \n bug (10/13/03)
• Chris Norton
  • Access Runner DSL Console vulnerability update (10/05/03)
  • Conexant Access Runner DSL Console login bypass vulnerability (10/04/03)
  • Cisco 6509 switch telnet vulnerability (10/03/03)
• Chris Wysopal
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
• Chris.Kulish_at_us.ing.com
  • Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities (10/08/03)
• Christian Ruediger Bahls
  • Re: XLS Attack on AES (Rijndael) (10/25/03)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: SSL Implementation Vulnerabilities (10/01/03)
• Colm MacCarthaigh
  • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (10/29/03)
  • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (10/29/03)
• Conectiva Updates
  • [CLA-2003:773] Conectiva Security Announcement - libnids (10/29/03)
  • [CLA-2003:771] Conectiva Security Announcement - anonftp (10/24/03)
  • [CLA-2003:769] Conectiva Security Announcement - sane (10/22/03)
  • [CLA-2003:768] Conectiva Security Announcement - fileutils (10/22/03)
  • [CLA-2003:765] Conectiva Security Announcement - ircd (10/17/03)
  • [CLA-2003:766] Conectiva Security Announcement - gdm (10/17/03)
  • [CLA-2003:762] Conectiva Security Announcement - glibc (10/14/03)
  • [CLA-2003:760] Conectiva Security Announcement - mplayer (10/06/03)
  • [CLA-2003:758] Conectiva Security Announcement - vixie-cron (10/03/03)
  • [CLA-2003:757] Conectiva Security Announcement - vixie-cron (10/03/03)
  • [CLA-2003:751] Conectiva Security Announcement - openssl (09/30/03)
• Craig Holmes
  • Re: a dangerous fast spreading (yet simple) trojan horse. (10/27/03)
• Dan Searle
  • Re: CensorNet: Cross Site Scripting Vulnerability (10/27/03)
• Daniel Ahlberg
  • GLSA: openssl (200309-19) (10/01/03)
• Darren Reed
  • Re: [PAPER] Juggling with packets: floating data storage (10/10/03)
• Darryl Swofford
  • VMWare GSX Server Authentication Server Buffer Overflow Vulnerability - Update (10/31/03)
• dave_at_immunitysec.com
  • Re: The joys of impurity (was: MOSDEF, InlineEgg) (10/07/03)
  • MOSDEF Initial Release (10/02/03)
• David Heigl
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Davide Del Vecchio
  • HPUX dtprintinfo buffer overflow vulnerability (10/08/03)
• debian-security-announce_at_lists.debian.org
  • [Full-Disclosure] [SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (10/01/03)
• demz
  • Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit) (10/01/03)
• der Mouse
  • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (10/29/03)
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• DigitalPranksters
  • Norton Internet Security 2003 XSS (10/27/03)
  • LinkSys EtherFast Router Denial of Service Attack (10/15/03)
• Dirk Haun
  • Re: I have fixes for the Geeklog vulnerabilities (10/05/03)
• dong-h0un U
  • Musicqueue multiple local vulnerabilities (10/27/03)
  • sh-httpd `wildcard character' vulnerability (10/27/03)
• Doug Moen
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Dr`Ponidi Haryanto
  • Dansie Shopping Cart Discloses Installation Path to Remote Users (10/26/03)
• Drew Copley
  • RE: Webmails + Internet Explorer can create unwanted javascript execution (10/03/03)
  • RE: New IE crash: CSS + HTML (10/03/03)
• Ed Reed
  • NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL - revised url (10/01/03)
  • NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL (10/01/03)
• Eiji James Yoshida
  • Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability (10/08/03)
• Ejovi Nuwere
  • Re: "Local" and "Remote" considered insufficient (10/23/03)
• EnGarde Secure Linux
  • [ESA-20031003-028] Potential OpenSSL DoS. (10/03/03)
• Eric Knight
  • Re: "Local" and "Remote" considered insufficient (10/23/03)
• error
  • Gaim festival plugin exploit (10/15/03)
• Eugen Leitl
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• evol_at_ruiner.halo.nu
  • Cisco LEAP Insecurities + POC (10/03/03)
• Florian Weimer
  • Re: "Local" and "Remote" considered insufficient (10/23/03)
  • Re: [CLA-2003:765] Conectiva Security Announcement - ircd (10/17/03)
• Francis Favorini
  • RE: Internet Explorer and Opera local zone restriction bypass (10/30/03)
• Francisco Andrades
  • Re: Java 1.4.2_02 InsecurityManager JVM crash (10/27/03)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-03:15.openssh (10/05/03)
  • FreeBSD Security Advisory FreeBSD-SA-03:18.openssl (10/04/03)
  • FreeBSD Security Advisory FreeBSD-SA-03:16.filedesc (10/02/03)
  • FreeBSD Security Advisory FreeBSD-SA-03:17.procfs (10/03/03)
• Frog Man
  • Advanced Poll : PHP Code Injection, File Include, Phpinfo (10/25/03)
  • myPHPCalendar : Informations Disclosure, File Include (10/12/03)
  • GuppY : XSS, Files Reading/Writing (10/05/03)
  • PHP-Nuke v 6.7 + Windows = File Upload (10/04/03)
  • EMML, EMGB : Include() hole (10/04/03)
• gabriel rosenkoetter
  • Re: Mac OS X vulnerabilities (10/30/03)
  • Re: Mac OS X vulnerabilities (10/30/03)
• Gadi Evron
  • IE bug: loading HTML under a graphic file name - summary (10/31/03)
  • a dangerous fast spreading (yet simple) trojan horse. (10/28/03)
• Giovanni Campagnoli
  • Microsoft Windows Security Bulletin Summary October (10/15/03)
• Godwin Stewart
  • Re: SiteKiosk terminal software (10/25/03)
• Graham Morley
  • Re: FirstClass 7.1 HTTP Server: Remote Directory Listing (10/30/03)
• graham.coles_at_retail-logic.com
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
  • RE: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
• GreyMagic Software
  • RE: IE 6 XML Patch Bypass (10/08/03)
  • Adobe SVG Viewer Local and Remote File Reading (GM#003-MC) (10/07/03)
  • Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC) (10/07/03)
  • Adobe SVG Viewer Active Scripting Bypass (GM#002-MC) (10/07/03)
• H D Moore
  • MS03-046 Microsoft Exchange 2000 Heap Overflow (10/22/03)
• Hat-Squad Security Team
  • Buffer Overflow in Yahoo messenger Client (10/26/03)
• HCTITS Security Division
  • Re: Gaim festival plugin exploit (10/18/03)
  • Is it safe yet? (10/02/03)
• Heikki Toivonen
  • Re: Internet Explorer and Opera local zone restriction bypass (10/27/03)
• HEX
  • Web Wiz Forums ver. 7.01 (10/21/03)
• Immunix Security Team
  • Immunix Secured OS 7+ apache update (10/29/03)
  • Immunix Secured OS 7+ fetchmail update (10/20/03)
• info_at_i-assure.com
  • PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload (10/07/03)
  • PeopleSoft <Control><J> Information Disclosure (10/07/03)
  • PeopleSoft Grid Option Vulnerability (10/07/03)
• IRM Advisories
  • IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scripting (10/31/03)
• itojun_at_iijlab.net
  • possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (10/29/03)
• Ivan Ristic
  • [ANNOUNCE] mod_security 1.7 released (10/19/03)
• James Kelly
  • Re: Mac OS X vulnerabilities (10/30/03)
• Jason Munro
  • Re: Webmails + Internet Explorer can create unwanted javascript execution (10/03/03)
• Jason Storm
  • Console Root On OSX up to 10.2.8 (10/31/03)
• Jedi/Sector One
  • Re: Webmails + Internet Explorer can create unwanted javascript execution (10/03/03)
  • Webmails + Internet Explorer can create unwanted javascript execution (10/02/03)
• jelmer
  • Re: Internet Explorer and Opera local zone restriction bypass (10/28/03)
  • Re: Internet Explorer and Opera local zone restriction bypass (10/25/03)
  • Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities (10/08/03)
  • Re: Half-Life 2 source code stolen through IE exploit (10/03/03)
• Joost Pol
  • PINE-CERT-20030901: Integer Overflow in FreeBSD Kernel [fhold] (10/02/03)
  • PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio] (10/02/03)
• Jort Slobbe
  • Re: Internet Explorer and Opera local zone restriction bypass (10/24/03)
• Joshua Levitsky
  • Re: Mac OS X vulnerabilities (10/29/03)
• Joshua P. Miller
  • New Vulnerability (10/26/03)
• Joshua Wright
  • Weaknesses in LEAP Challenge/Response (10/06/03)
• Jouko Pynnonen
  • Re: IE remote code execution (10/20/03)
  • Geeklog exploit (10/19/03)
• K-OTiK Security
  • Re: a dangerous fast spreading (yet simple) trojan horse (Now IRC.Trojan.Fgt) (10/28/03)
  • (Fw) : mIRC 6.12 (latest) DCC Exploit (10/23/03)
  • Re: IE remote code execution (10/20/03)
  • Re: Bad news on RPC DCOM vulnerability (10/10/03)
• kang
  • [securemac] Local vulnerability: MacOSX Screensaver locking bypass. (10/28/03)
• Kevin George
  • Re: What software breaks because of this DNS feature? (10/14/03)
• Kurt Harvey
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/30/03)
• Kurt Lieber
  • GLSA: cfengine (200310-02) (10/05/03)
• Larry W. Cashdollar
  • SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. (10/05/03)
• Last Stage of Delirium
  • [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (10/23/03)
• latte1_at_hushmail.com
  • XLS Attack on AES (Rijndael) (10/24/03)
• Lifo Fifo
  • DCP Portal - 5.5 holes (10/01/03)
• Liu Die Yu
  • Redirection and refresh parses local file (10/31/03)
  • Unpatched Internet Explorer Bugs (10/20/03)
• Lorenzo Hernandez Garcia-Hierro
  • ColdFusion SQL Error Pages XSS (10/15/03)
  • Cobalt RaQ Control Panel Cross Site Scripting (10/04/03)
• Luigi Auriemma
  • Serious Sam is not so serious (10/30/03)
  • Medieval Total War <= 1.1 broadcast Connection expired (10/07/03)
  • Medieval Total War <= 1.1 broadcast crash (10/07/03)
• Lyndon Nerenberg
  • Re: Mac OS X vulnerabilities (10/30/03)
• Maarten Hartsuijker
  • exploiting fortigate firewall through webinterface (10/02/03)
• Mandrake Linux Security Team
  • MDKSA-2003:096-1 - Updated apache2 packages fix CGI scripting deadlock (10/25/03)
  • MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities (10/17/03)
  • MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability (10/17/03)
  • MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability (10/17/03)
  • MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities (10/17/03)
  • MDKSA-2003:099 - Updated sane packages fix remote vulnerabilities (10/10/03)
  • MDKSA-2003:098 - Updated openssl packages fix vulnerabilities (10/01/03)
  • MDKSA-2003:097 - Updated mplayer packages fix buffer overflow vulnerability (09/30/03)
• Marc Schoenefeld
  • Re: Java 1.4.2_02 InsecurityManager JVM crash (10/27/03)
  • Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (10/27/03)
  • Java 1.4.2_02 InsecurityManager JVM crash (10/26/03)
  • IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (10/21/03)
  • Cross Site Java applets (10/20/03)
  • Openoffice 1.1.0 DoS (10/08/03)
  • Update JBoss 308 & 321: Remote Command Injection (10/06/03)
  • JBoss 3.2.1: Remote Command Injection (10/05/03)
• Marcin Ulikowski
  • IE remote code execution (10/19/03)
• Martin Schulze
  • [SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution (10/29/03)
  • [SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service (10/15/03)
  • [SECURITY] [DSA 394-1] New openssl095 packages fix denial of service (10/11/03)
• Matt Riffle
  • patch for vulnerability in cgiemail (10/03/03)
• Matthieu Peschaud
  • Les Visiteurs v2.0.1 code injection vulnerability (10/26/03)
• Mattox, Norman
  • RE: Half-Life 2 source code stolen through IE exploit (10/03/03)
• Maxime Ducharme
  • Re: Process Killing - Playing with PostThreadMessage (10/03/03)
• Menashe Eliezer
  • Finjan Software Discovers a New Critical Vulnerability In Microsoft Hotmail (10/15/03)
• Michael A. Nunes
  • New AIM Expliot/Worm/Adware-script (realphx.com related) (10/11/03)
  • *ADDENDUM* New AIM Expliot/Worm/Adware-script (realphx.com related) (10/11/03)
• Michael Earls
  • Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (10/27/03)
• Michael Renzmann
  • Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable (10/03/03)
• Michael Sierchio
  • Re: XLS Attack on AES (Rijndael) (10/24/03)
  • Re: What software breaks because of this DNS feature? (10/14/03)
• Michael Stone
  • [SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (10/01/03)
• Michael Wojcik
  • RE: What software breaks because of this DNS feature? (10/14/03)
• Michal Zalewski
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
  • Re: [Full-Disclosure] RE: [PAPER] Juggling with packets: floating data storage (10/08/03)
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Mike Stark
  • Re: Mac OS X vulnerabilities (10/30/03)
• Mindwarper *
  • RE: Internet Explorer and Opera local zone restriction bypass (10/25/03)
  • Internet Explorer and Opera local zone restriction bypass (10/24/03)
  • IE 6 XML Patch Bypass (10/07/03)
• mod
  • PHP-Nuke SQL Injection (10/08/03)
• Mohsen Hariri
  • Re: Internet Explorer and Opera local zone restriction bypass (10/26/03)
• morning_wood
  • Visualroute Server - reverse tracerouting (10/02/03)
• natok_at_hush.com
  • Gast Arbeiter Privilege Escalation (10/21/03)
• NetBSD Security Officer
  • NetBSD Security Advisory 2003-015: Remote and local vulnerabilities in XFree86 font libraries (10/09/03)
  • NetBSD Security Advisory 2003-017: OpenSSL multiple vulnerabilities (10/09/03)
  • NetBSD Security Advisory 2003-016: Sendmail - another prescan() bug CAN-2003-0694 (10/09/03)
• NGSSoftware Insight Security Research
  • Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003) (10/16/03)
• Nicholas Weaver
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Ofir Arkin
  • Tool Release: Xprobe2 0.2 (10/13/03)
• Oliver Karow
  • DoS in Plug and Play Web Server Proxy Server (10/31/03)
  • TelCondex SimpleWebserver Buffer Overflow (10/29/03)
  • Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability (10/28/03)
  • CSS Vulnerability in Bajie HTTP JServer (10/16/03)
• Ollie Whitehouse
  • @stake tool announcement: RedFang 2.5: The Bluetooth Hunter (10/20/03)
• OpenPKG
  • [OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql) (10/30/03)
  • [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache) (10/28/03)
  • [OpenPKG-SA-2003.045] OpenPKG Security Advisory (ircd) (10/19/03)
• Ory Segal
  • Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack (Microsoft Security Bulletin MS03-047) (10/16/03)
• Patrik Hornik
  • SA-20031006 slocate buffer overflow - exploitation proof (10/11/03)
  • SA-20031006 slocate vulnerability (10/06/03)
  • New OpenSSL remote vulnerability (issue date 2003/10/02) (10/02/03)
• Paul Szabo
  • RE: Internet Explorer and Opera local zone restriction bypass (10/31/03)
  • Re: Internet Explorer and Opera local zone restriction bypass (10/30/03)
  • Re: Internet Explorer and Opera local zone restriction bypass (10/25/03)
  • RE: New IE crash: CSS + HTML (10/05/03)
• Paul Webster
  • Free OverflowGuard Personal Edition Released (10/03/03)
• Pentest Security Advisories
  • ptl-2003-02: IBM DB2 INVOKE Command Stack Overflow Vulnerability (10/01/03)
  • ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability (10/01/03)
• Peter
  • Gallery 1.4 including file vulnerability (10/11/03)
• Peter Kieser
  • Re: Nachi/Welchia/LovSan.D version 2 appears to be spreading (10/28/03)
• Philip Wagenaar
  • Betr.: IE 6 XML Patch Bypass (10/08/03)
• Piotr KUCHARSKI
  • buffer overflow in IRCD software (10/12/03)
• ProXy -
  • Multiple Vulnerabilities in Led-Forums (10/30/03)
• Q?=Hanabishi ReccaQ=20?=
  • Proof of concept for Windows Messenger Service overflow (10/18/03)
• Q?=nimberQ=20?=
  • JS/HTML code injection in File-Sharing for NET v1.5 and Forums Web Server v1.5 (10/06/03)
  • Vulnerabilities in Easy File Sharing Web Server (1.2 NEW). (10/04/03)
• Radoslav Dejanovic
  • Re: Mac OS X vulnerabilities (10/30/03)
• Rafal Wojtczuk
  • Libnids <= 1.17 buffer overflow (10/27/03)
• Ragnar Sundblad
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
• Rajiv Aaron Manglani
  • GLSA: apache (200310-04) (10/31/03)
• Randal L. Schwartz
  • Re: Gaim festival plugin exploit (10/20/03)
• random nut
  • EartStation 5 P2P application contains malicious code (10/03/03)
• Richard Brittain
  • Re: sh-httpd `wildcard character' vulnerability (10/28/03)
• Richard M. Smith
  • Microsoft got it wrong (10/15/03)
  • What software breaks because of this DNS feature? (10/13/03)
  • Class-action suit points to Microsoft security flaws (10/02/03)
• Richard Maudsley
  • FirstClass 7.1 HTTP Server: Remote Directory Listing (10/28/03)
  • Re: CensorNet: Cross Site Scripting Vulnerability (10/27/03)
  • CensorNet: Cross Site Scripting Vulnerability (10/22/03)
• Rick Wash
  • Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Rob Mayoff
  • RE: What software breaks because of this DNS feature? (10/14/03)
• Robert Ahnemann
  • RE: New IE crash: CSS + HTML (10/03/03)
• Roman Drahtmueller
  • Re: Local root exploit in SuSE Linux 8.2Pro (10/06/03)
• root_at_networkpenetration.com
  • UK's Internet Infrastructure Open to Prying Eyes (10/14/03)
• Russ Uhte (Lists)
  • RE: New IE crash: CSS + HTML (10/03/03)
• Sebastian Krahmer
  • SuSE Security Announcement: lsh (SuSE-SA:2003:041) (10/01/03)
  • SuSE Security Announcement: mysql (SuSE-SA:2003:042) (10/01/03)
• security_at_sco.com
  • OpenServer 5.0.5 : Insecure creation of files in /tmp (10/21/03)
  • OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Multiple security vulnerabilities in Xsco (10/16/03)
  • OpenLinux: wu-ftpd fb_realpath() off-by-one bug (10/04/03)
  • OpenServer 5.0.7 : OpenSSH: multiple buffer handling problems (10/02/03)
  • UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities (10/02/03)
• seeker_at_hush.ai
  • Concern about Checkpoint and SSL Vulnerability (10/10/03)
• Seth Arnold
  • Re: WU-FTPD 2.6.2 Freezer (10/31/03)
• Seth Woolley
  • Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS (10/03/03)
• SGI Security Coordinator
  • Wildcard exportfs issue in NFS on IRIX (10/28/03)
  • SGI Advanced Linux Environment security update #2 (10/27/03)
  • SGI Advanced Linux Environment security update #3 (10/27/03)
  • SGI Advanced Linux Environment security update #4 (10/27/03)
• Sharad Ahlawat
  • Re: Weaknesses in LEAP Challenge/Response (10/07/03)
• Sherlock
  • Re: New IE crash: CSS + HTML (10/04/03)
• Sintelli SINTRAQ
  • SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version (10/21/03)
  • ByteHoard Directory Traversal Vulnerability (10/19/03)
  • Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine (10/14/03)
• Slackware Security Team
  • [slackware-security] gdm security update (SSA:2003-300-01) (10/27/03)
  • [slackware-security] fetchmail security update (SSA:2003-300-02) (10/27/03)
  • [slackware-security] OpenSSL security update (SSA:2003-273-01) (10/01/03)
• spackard_at_fastlink.com
  • Re: Half-Life 2 source code stolen through IE exploit (10/03/03)
• Stan Bubrouski
  • Advisory: Sun's jre/jdk 1.4.2 multiple vulernabilities in linux installers (10/31/03)
• Stefan Nordhausen
  • Local root exploit in SuSE Linux 7.3Pro (10/06/03)
  • Local root exploit in SuSE Linux 8.2Pro (10/06/03)
• Stephen Samuel
  • Re: Root Directory Listing on RH default apache (10/28/03)
• Steve Manzuik
  • RE: Cobalt RaQ Control Panel Cross Site Scripting (10/05/03)
• Steve Clement
  • Re: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
• steve_at_uk.intasys.com
  • Re: Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit) (10/01/03)
• Steven M. Christey
  • "Local" and "Remote" considered insufficient (10/22/03)
• Stuart Staniford
  • New FAQ on worm/worm containment (10/07/03)
• Sym Security
  • RE: Norton Internet Security Blocked Sites XSS (10/28/03)
• T.A. Adjuster
  • Re: Microsoft got it wrong (10/16/03)
• Tarapia Tapioco
  • JAP Wins Court Victory (10/20/03)
• Tawie Security Advisor
  • TSLSA-2003-0003 - openssl (10/03/03)
  • TSLSA-2003-0001 - openssl (10/02/03)
• Terence Runge
  • Re: Bad news on RPC DCOM vulnerability (10/12/03)
  • Re: Bad news on RPC DCOM vulnerability (10/12/03)
• Terry Bankert
  • Re: SSGbook (ASP) (10/01/03)
• tfm_at_tfm.org
  • Root Directory Listing on RH default apache (10/27/03)
• The-Insider
  • eMule 2.2 [0.29c] - Web Control Panel - DOS(Denial Of Service) (10/19/03)
• Theo Markettos
  • Origo ASR-8100 ADSL router remote factory reset (10/12/03)
• Thomas Biege
  • SUSE Security Announcement: thttpd (SuSE-SA:2003:044) (10/31/03)
  • SuSE Security Announcement: openssl (SuSE-SA:2003:043) (10/01/03)
• Thor Larholm
  • RE: Internet Explorer and Opera local zone restriction bypass (10/30/03)
  • RE: Mac OS X vulnerabilities ['Virus checked"] (10/29/03)
  • Re: Mac OS X vulnerabilities (10/28/03)
  • RE: Internet Explorer and Opera local zone restriction bypass (10/28/03)
  • RE: Internet Explorer and Opera local zone restriction bypass (10/25/03)
  • RE: IE remote code execution (10/20/03)
  • RE: Microsoft Windows Security Bulletin Summary October (10/16/03)
  • Re: New AIM Expliot/Worm/Adware-script (realphx.com related) (10/11/03)
  • Verisign fighting back at ICANN (10/05/03)
  • RE: Half-Life 2 source code stolen through IE exploit (10/03/03)
  • RE: Half-Life 2 source code stolen through IE exploit (10/03/03)
  • Half-Life 2 source code stolen through IE exploit (10/03/03)
  • Re: Process Killing - Playing with PostThreadMessage (10/02/03)
• twig les
  • Re: Cisco 6509 switch telnet vulnerability (10/05/03)
• Vade 79
  • mah-jong[v1.4]: server/client remote buffer overflow exploit. (10/22/03)
• Valdis.Kletnieks_at_vt.edu
  • Re: [Full-Disclosure] Re: [PAPER] Juggling with packets: floating data storage (10/08/03)
• Valgasu
  • Divine OpenMarket Content Server XSS (10/03/03)
• VigilantMinds Security Operations Center
  • RE: Bad news on RPC DCOM vulnerability (10/11/03)
• Virginity Security
  • Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads (10/31/03)
• visigoth
  • New Tool: MetaCoretex (DB Security Scanner) (10/02/03)
• Vitor Ventura
  • RE: Process Killing - Playing with PostThreadMessage (10/03/03)
• Vlad M
  • Re: Multiple Heap Overflows in FTP Desktop (10/18/03)
• VMware
  • VMware GSX Server and ESX Server OpenSSL vulnerability patches (10/31/03)
• Weke
  • Get admin level on Goldlink script v3.0 (10/18/03)
• Wendy Garvin
  • Re: Cisco 6509 switch telnet vulnerability (10/04/03)
• william schulze
  • Re: Internet Explorer and Opera local zone restriction bypass (10/30/03)
• Wojciech Purczynski
  • [PAPER] Juggling with packets: floating data storage (10/06/03)
• xenophi1e
  • Shatter XP (10/23/03)
  • Re: IE6 CSS-Crash (10/22/03)
• Young, Keith
  • Nachi/Welchia/LovSan.D version 2 appears to be spreading (10/27/03)
• Zrekam
  • SiteKiosk terminal software (10/24/03)

Last message date: 10/31/03
Archived on: 10/31/03 CET

355 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint