SecurityFocus Bugtraq
By Author

681 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 02/03/04
Ending: 02/29/04

• 3APA3A
  • Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (02/19/04)
  • Re[2]: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/18/04)
  • Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
  • Re: MS to stop allowing passwords in URLs (02/03/04)
  • Re: RFC: virus handling (01/28/04)
• ACROS Security
  • ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS (02/10/04)
• ActualMInd
  • Web Blog 1.1 Remote Execute Commands Bug (01/29/04)
• Adam Langley
  • Re: XFree86 vulnerability exploit (02/13/04)
• Adam Laurie
  • Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior (02/06/04)
• Adam Zabrocki
  • 0verkill - little simple vulnerability. (02/02/04)
• Advisories
  • Mac OS X pppd format string vulnerability (02/24/04)
  • Microsoft Virtual PC Services Insecure Temporary File Creation (02/10/04)
• advisory_at_security-corporation.com
  • [SCSA-027] PHP-Nuke 6.9 SQL Injection Vulnerability (02/01/04)
• advisory_at_stgsecurity.com
  • STG Security Advisory: [SSA-20040217-06] Apache for cygwin directory traversal vulnerability (02/24/04)
• alex medvedev
  • Re: AIX password enumeration possible (02/11/04)
• Alexander Antipov
  • snort rules for ICQ http/https tunnels (02/24/04)
• Alexander GQ Gerasiov
  • Re: [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts (02/07/04)
• Alun Jones
  • RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (02/19/04)
  • RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/17/04)
  • RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/13/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
• Andre Ludwig
  • RE: [Full-Disclosure] RE: W2K source "leaked"? (02/13/04)
• Andreas Marx
  • Re: Decompression Bombs [...missed something] (02/07/04)
  • Re: Hysterical first technical alert from US-CERT (02/05/04)
• Andreas Sandblad
  • Sandblad #13: Cross-domain exploit on zombie document with event handlers (02/25/04)
  • Sandblad #12: Inject javascript url in history list (revisited) (02/03/04)
• Andrew Fried
  • Re: Hysterical first technical alert from US-CERT (02/05/04)
• Andrew Harwood
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• Andrey G. Sergeev (AKA Andris)
  • RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) (01/29/04)
• Andrey Kolishak
  • Re[2]: http://www.smashguard.org (02/07/04)
• Andrey Smirnov
  • Extremail Security Problem (02/26/04)
• André Malo
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/12/04)
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/04/04)
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/03/04)
• Angelo Rosiello
  • PSOProxy's exploit for Windows by Rosiello Security (02/25/04)
• Ansgar -59cobalt- Wiechers
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Anthony Saffer
  • Re: Misinformation in Security Advisories (ASN.1) (02/17/04)
• Antonio Messina
  • Re: sqwebmail web login (02/03/04)
• Ari Gordon-Schlosberg
  • Re: Remote Administrator 2.x: highly possible remote hole or back door (02/23/04)
• Atom 'Smasher'
  • Re: new WIN virus? (01/30/04)
  • Re: new WIN virus? (01/29/04)
• Aviram Jenik
  • Broker FTP DoS (Message Server)q?= (02/17/04)
• Axel Beckert - ecos gmbh
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/13/04)
• axl rose
  • Critical WFTPD buffer overflow vulnerability (02/28/04)
  • Multiple WFTPD Denial of Service vulnerabilities (02/28/04)
• backspace
  • Another YabbSE SQL Injection (02/16/04)
• badpack3t
  • KarjaSoft Sami HTTP Server 1.0.4 Buffer Overflow (02/17/04)
• Bartosz Kwitkowski
  • Re: HelpCtr - allow open any page or run (02/11/04)
  • Re: HelpCtr - allow open any page or run (02/10/04)
  • HelpCtr - allow open any page or run (02/07/04)
• Ben
  • Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 (02/25/04)
• Ben Wheeler
  • Re: RFC: virus handling (02/04/04)
• Bender
  • XFree86 vulnerability exploit (02/11/04)
• Berend-Jan Wever
  • Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow (02/11/04)
• Bernie, CTA
  • Re: [security] Re: Major hack attack on the U.S. Senate (02/03/04)
• Bill Gallagher
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/12/04)
• Bill Stoddard
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/12/04)
• Bipin Gautam.
  • Re: Decompression Bombs (02/10/04)
  • Re: Decompression Bombs [...missed something] (02/06/04)
• Bjørnar Bjørgum Larsen
  • Two checkpoint fw-1/vpn-1 vulns (02/05/04)
• bkbll
  • [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability (02/26/04)
• bladi
  • Windows2000 who relase the code? (02/13/04)
• bool_at_gte.net
  • Internet Explorer and Microsoft clipboard poor security policy (02/11/04)
• Boyce, Nick
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
• brandon pierce
  • Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (02/18/04)
• Brian Bothwell
  • Re: sqwebmail web login (02/03/04)
• Brian Dessent
  • Re: Decompression Bombs (02/09/04)
• Brian_J_Soby_at_raytheon.com
  • Symantec Gateway Security Management Service Cross Site Scripting (02/27/04)
• Bruce Khodabakhsh
  • DallasCon 2004 Information Security Conference and Boot Camp (02/12/04)
• Bruno Morisson
  • Red-M Red-Alert Multiple Vulnerabilities (02/09/04)
• Buck Huppmann
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/14/04)
• bugzilla_at_redhat.com
  • [RHSA-2004:091-01] Updated libxml2 packages fix security vulnerability (02/26/04)
  • [RHSA-2004:063-01] Updated mod_python packages fix denial of service vulnerability (02/26/04)
  • [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities (02/18/04)
  • [RHSA-2004:048-01] Updated PWLib packages fix protocol security issues (02/13/04)
  • [RHSA-2004:059-01] Updated XFree86 packages fix privilege escalation vulnerability (02/13/04)
  • [RHSA-2004:051-01] Updated mutt packages fix remotely-triggerable crash (02/11/04)
  • [RHSA-2004:030-01] Updated NetPBM packages fix multiple temporary file vulnerabilities (02/05/04)
  • [RHSA-2004:020-01] Updated mailman packages close cross-site scripting vulnerabilities (02/05/04)
• Byron Copeland
  • Re: W2K source "leaked"? (02/14/04)
• carlo_at_cs.dartmouth.edu
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/13/04)
• Carson Gaspar
  • Re: Calife heap corrupt / potential local root exploit (02/27/04)
• Casper Dik
  • Re: RFC: virus handling (02/03/04)
• Cedric Cochin
  • PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior (02/11/04)
  • Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior (02/03/04)
  • PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior (01/30/04)
• Charles Clancy
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/09/04)
• Charles R. Anderson
  • Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (02/19/04)
• Charley Hamilton
  • Re: CoDeX-W0rm - what happened here? (02/03/04)
• Cheng Peng Su
  • New phpBB ViewTopic.php Cross Site Scripting Vulnerability (02/28/04)
  • Cross Site Scripting in WebzEdit (02/21/04)
  • ezBoard Cross Site Scripting Vulnerability (02/23/04)
  • Possible new cross zone scripting in IE (02/10/04)
  • Possible Cross Site Scripting in Discuz! Board (02/05/04)
• Chris Adams
  • Re: Multiple issues with Mac OS X AFP client (02/28/04)
  • Multiple issues with Mac OS X AFP client (02/27/04)
• Chris Calabrese
  • Re: Windows XP explorer.exe heap overflow. (02/23/04)
• Chris Green
  • Re: Decompression Bombs (02/09/04)
• Christian Vogel
  • Re: Major hack attack on the U.S. Senate (02/03/04)
• Christopher Carboni
  • Exploit based on leaked code released. (02/16/04)
• Chuck Rock
  • CoDeX-W0rm - what happened here? (02/01/04)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities (02/19/04)
  • Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability (02/03/04)
• Conectiva Updates
  • [CLA-2004:821] Conectiva Security Announcement - XFree86 (02/20/04)
  • [CLA-2004:820] Conectiva Security Announcement - kernel (02/20/04)
  • [CLA-2004:813] Conectiva Security Announcement - gaim (02/10/04)
  • [CLA-2004:812] Conectiva Security Announcement - vim (02/10/04)
  • [CLA-2004:811] Conectiva Security Announcement - libtool (02/05/04)
• Craig Morrison
  • Re: RFC: virus handling (01/28/04)
• Crispin Cowan
  • Re: http://www.smashguard.org (02/08/04)
• Curt Purdy
  • RE: [inbox] W2K source "leaked"? (02/13/04)
• cyborgirl_at_libero.it
  • Eggrop bug (02/08/04)
• Dan Yefimov
  • Re: Second critical mremap() bug found in all Linux kernels (02/19/04)
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/05/04)
• Daniel Kabs [ML]
  • smbmount disrupts Windows file sharing. (02/02/04)
  • Re: [Full-Disclosure] smbmount disrupts Windows file sharing. (02/04/04)
• daniel uriah clemens
  • Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
• Daniel.Capo_at_tco.net.br
  • Re: Major hack attack on the U.S. Senate (02/03/04)
• Daniele Orlandi
  • Re: RFC: virus handling (01/28/04)
• Darragh Bailey
  • RE: Hysterical first technical alert from US-CERT (02/05/04)
• Darren Reed
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/12/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/10/04)
• Darren Tucker
  • Re: AIX password enumeration possible (02/17/04)
• Darwin Mecham
  • blocking gzip encoded files (02/23/04)
• Dave Aronson
  • Re: Hacking USB Thumbdrives, Thumprint authentication (02/06/04)
  • Re: RFC: virus handling (01/28/04)
• Dave Clendenan
  • Re: RFC: virus handling (02/03/04)
• Dave McCormick
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Dave Paris
  • RE: http://www.smashguard.org (02/03/04)
• Dave Tarbatt
  • APC 9606 SmartSlot Web/SNMP management card "backdoor" (02/16/04)
• Dave Warren
  • Re: getting rid of outbreaks and spam (02/06/04)
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Dave Weis
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/09/04)
• David B Harris
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• David Bachtel
  • RE: Decompression Bombs (02/05/04)
• David Brodbeck
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/09/04)
  • RE: RFC: virus handling (02/03/04)
• David Cantrell
  • YABB information leakage on failed login (02/17/04)
• David F. Skoll
  • Re: Why are postmasters distributing the MyDoom virus? (02/10/04)
  • Re: RFC: virus handling (02/03/04)
• David Monosov
  • APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (02/19/04)
• David Schwartz
  • RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/09/04)
  • RE: Major hack attack on the U.S. Senate (02/03/04)
• David Wilson
  • RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/23/04)
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/14/04)
• David.Cross_at_ngc.com
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/10/04)
• Davide Del Vecchio
  • Symantec FireWall/VPN Appliance model 200 leak of security (02/16/04)
• Dennis Freise
  • Re: clamav 0.65 remote DOS exploit (02/10/04)
• der Mouse
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/10/04)
  • Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (02/04/04)
• Disclosure From OSSI
  • RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/12/04)
  • Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/09/04)
• DiSToAGe
  • [Fwd: zyxel prestige ethernet information leakage] (02/07/04)
• Dmitry
  • Re: X-Cart vulnerability (02/05/04)
• Donato Ferrante
  • Denial Of Service in FreeChat 1.1.1a (02/26/04)
  • Multiple Remote Buffer Overflow in Avirt Soho 4.3 (02/23/04)
  • Remote Buffer Overflow in Avirt Voice 4.0 (02/23/04)
  • Remote Buffer Overflow in PSOProxy 0.91 (02/20/04)
  • Denial Of Service in Vizer Web Server 1.9.1 (02/17/04)
  • Denial Of Service in ChatterBox 2.0 (01/30/04)
• dotsecure_at_hushmail.com
  • Beagle.b@mm spreading at a steady pace. (02/17/04)
  • Windows 2000 Source Leak Verified. Get ready for the havoc. (02/13/04)
  • Another Low Blow From Microsoft: MBSA Failure! (02/10/04)
• DownBload
  • Calife heap corrupt / potential local root exploit (02/27/04)
• Dr Andrew C Aitchison
  • Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (02/14/04)
• Dr. Peter Bieringer
  • Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate (02/16/04)
• Dragos Ruiu
  • Re: Windows XP explorer.exe heap overflow. (02/26/04)
  • Fwd: Re: NT/W2K Source leak (02/14/04)
  • Re: vulnerabilities of postscript printers (01/30/04)
• Drew Copley
  • RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (02/20/04)
  • RE: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (02/20/04)
  • RE: [Full-Disclosure] Re: W2K source "leaked"? (02/13/04)
  • RE: W2K source "leaked"? (02/13/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/11/04)
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/11/04)
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/10/04)
• Dustin Furrer
  • Re: GOOROO CROSSING: File Spoofing Internet Explorer 6 (01/30/04)
• Edgar Barbosa
  • Bypassing PatchFinder 2 (02/15/04)
• Eggers, Bill A [LTD]
  • RE: Hysterical first technical alert from US-CERT (02/03/04)
• Eli K.
  • Re: Windows XP explorer.exe heap overflow. (02/24/04)
• Eli Kara
  • Re: Windows XP explorer.exe heap overflow. (02/25/04)
• Eloy A. Paris
  • Re: Bank of America Contact (02/24/04)
• Eric 'MightyE' Stevens
  • Re: Hacking USB Thumbdrives, Thumprint authentication (02/10/04)
• Eric McCarty
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/10/04)
• Eric Murray
  • Re: Hacking USB Thumbdrives, Thumprint authentication (02/09/04)
• Eric Schultze
  • RE: Another Low Blow From Microsoft: MBSA Failure (02/11/04)
• evol_at_ruiner.halo.nu
  • Re: Misinformation in Security Advisories (ASN.1) (02/16/04)
• Federico Petronio
  • Re: Snort-inline (02/04/04)
• Felipe Franciosi
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/10/04)
• Fergus Brooks
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• Ferruh Mavituna
  • Brinkster Multiple Vulnerabilities (02/09/04)
  • Dotnetnuke Multiple Vulnerabilities (02/06/04)
• first last
  • RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (02/19/04)
  • Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (02/18/04)
  • RE: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) (02/16/04)
• flashsky fangxing
  • MS ASN library is fraught not only with integer overflow, but also with stack overflow. (02/20/04)
• Florian Weimer
  • Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/14/04)
• Francis Favorini
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• Frank Knobbe
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/11/04)
• Frank Louwers
  • Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/19/04)
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/10/04)
• Fredrik Björk
  • Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (02/18/04)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-04:03.jail (02/27/04)
  • FreeBSD Security Advisory FreeBSD-SA-04:02.shmat (02/05/04)
• Fyodor
  • Nmap Security Scanner 3.50 Released (02/26/04)
• Gadi Evron
  • laptop security (02/28/04)
  • article: Theft of Client Information at a Major Israeli Bank's "Information Fortress". (02/19/04)
  • article: Alleged Trojan horse in Israeli Anti-Ballistic Missile System (02/18/04)
  • OT: reports of a Trojan horse in the Arrow project (02/17/04)
  • ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
  • W2K source "leaked"? (02/12/04)
  • Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/10/04)
  • Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/09/04)
  • Outbreak warning: possibly Mydoom.C (02/09/04)
  • Biometric systems security [WAS: Re: Hacking USB Thumbdrives, Thumprint authentication] (02/06/04)
  • announce: new mailing list - application security research - from vulnerabilities to code injection. (02/04/04)
  • getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (02/03/04)
  • Refuting tall-tales and stories about the Mydoom worms (01/30/04)
  • another Trojan with the ADO hole? + a twist in the story (01/31/04)
  • Re: [Full-Disclosure] outbreak warning: new Myydoom.B is out (01/28/04)
  • Mydoom DDoS attack time table (01/31/04)
  • outbreak warning: new Myydoom.B is out (01/28/04)
• Georg Lutz
  • Re: vulnerabilities of postscript printers (01/28/04)
• Georg Schwarz
  • Re: Why are postmasters distributing the MyDoom virus? (02/10/04)
  • Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (02/04/04)
• Gervase Markham
  • RE: blocking gzip encoded files (02/24/04)
• Giuseppe
  • Re: Eggrop bug (02/10/04)
• Glynn Clements
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
• Gregor Lawatscheck
  • Re: new WIN virus? (01/30/04)
• gsicht gsicht
  • buffer overflow in Robot FTP Server (02/15/04)
  • crob ftpd Denial of Service (02/12/04)
• Guille -bisho-
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/10/04)
  • Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (02/09/04)
• Gunnar
  • Re: MS to stop allowing passwords in URLs (02/04/04)
• Harley David
  • RE: Why are postmasters distributing the MyDoom virus? (02/10/04)
• Hilmi Ozdoganoglu
  • RE: http://www.smashguard.org (02/06/04)
  • http://www.smashguard.org (01/31/04)
• Himeur Nourredine
  • formmail (PHP) Upload file using CSS (02/06/04)
  • Les Commentaires (PHP) Include file (02/03/04)
• Ho Chaw Ming
  • Re: W2K source "leaked"? (02/16/04)
• http-equiv_at_excite.com
  • Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (02/20/04)
  • Re: Possible new cross zone scripting in IE (02/10/04)
• Hugo van der Kooij
  • Re: SNMP community string disclosure in Linksys WAP55AG (02/18/04)
• icbm
  • XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow (02/10/04)
• iDefense Labs
  • iDEFENSE Security Advisory 02.23.04: Darwin Streaming Server Remote Denial of Service Vulnerability (02/24/04)
  • iDEFENSE Security Advisory 02.17.04: Ipswitch IMail LDAP Daemon Remote Buffer Overflow (02/17/04)
  • iDEFENSE Security Advisory 02.11.04: XFree86 Font Information File Buffer Overflow II (02/12/04)
  • iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (02/10/04)
• idlabs-advisories_at_idefense.com
  • iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability (02/27/04)
  • iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass (02/27/04)
• Immunix Security Team
  • Immunix Secured OS 7+ kernel update (02/26/04)
  • Immunix Secured OS 7.3 XFree86 update (02/13/04)
• intuit bug_hunter
  • TYPSoft FTP Server 1.10 may be crashed (02/04/04)
• intuit e.b.
  • TYPSoft FTP Server 1.10 multiple vulnerabilities (02/23/04)
  • Smallftpd 1.0.3 DoS (02/17/04)
  • CesarFTP 0.99 : 100% employment of computer resources (02/17/04)
  • Xlight ftp server 1.52 RETR bug (02/15/04)
  • Sami FTP Server 1.1.3 multiple vulnerabilities (02/13/04)
  • Remote crash Xlight ftp server 1.52 (02/05/04)
• Ivan Arce
  • Re: Misinformation in Security Advisories (ASN.1) (02/16/04)
• Iván Rodriguez Almuiña
  • GateKeeper Pro 4.7 buffer overflow (02/23/04)
  • iMail 8.05 LDAP service remote exploit (02/19/04)
• J.
  • RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/14/04)
• James A. Thornton
  • Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (02/04/04)
• James C Slora Jr
  • RE: CoDeX-W0rm - what happened here? (02/04/04)
• James C. Slora Jr.
  • Re: RFC: virus handling (02/03/04)
• James Green
  • Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/17/04)
• James Riden
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • Re: getting rid of outbreaks and spam (junk) (02/04/04)
• Jamie Fisher
  • Cross Site Scripting in VBulletin forum software (02/12/04)
• Janek Vind
  • [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 (02/23/04)
  • [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0 (02/08/04)
  • [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (02/08/04)
  • [waraxe-2004-SA#001] - Script injection in GBook for Php-Nuke ver. 1.0 (02/02/04)
• Jared M Breland
  • Re: Second critical mremap() bug found in all Linux kernels (02/18/04)
• Jedi/Sector One
  • Buffer overflow in mnoGoSearch (02/15/04)
• Jeff Fisher
  • Re: Eggrop bug (02/10/04)
• Jensen, Greg
  • FW: CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability (02/12/04)
  • CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability (02/12/04)
• Jeremy Mates
  • Re: RFC: virus handling (01/28/04)
• Jesse Keating
  • [FLSA-2004:1232] Updated slocate resolves security vulnerabilites (02/12/04)
  • [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) (01/31/04)
  • [FLSA-2004:1193] Updated ethereal resolves security vulnerabilites (02/01/04)
• Joe Blatz
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
• Joe DeMarco
  • RE: Another Low Blow From Microsoft: MBSA Failure! (02/10/04)
• Joe Weisenberger
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• John Compton
  • Misinformation in Security Advisories (ASN.1) (02/16/04)
• John D. Hardin
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/11/04)
• John Fitzgibbon
  • Re: RFC: virus handling (01/28/04)
• John.Airey_at_rnib.org.uk
  • RE: Samba 3.x + kernel 2.6.x local root vulnerability (02/10/04)
• Johnson, Jeff FOR:EX
  • RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Interne t Explorer (02/10/04)
• Jon W
  • Re: Bank of America Contact (02/23/04)
• Joost Pol
  • [PINE-CERT-20040201] reference count overflow in shmat() (02/05/04)
• Josep L. Guallar-Esteve
  • Re: blocking gzip encoded files (02/24/04)
• Joseph S. Myers
  • Re: Symlink Vulnerability in GNU libtool <1.5.2 (02/03/04)
• Joshua Levitsky
  • Re: Microsoft ASN.1 (Half a sploit) (02/18/04)
  • Re: ASN.1 vulnerability -is- on Win98 (02/18/04)
  • ASN.1 vulnerability -is- on Win98 (02/17/04)
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/13/04)
• Joshua Miller
  • LiveJournal XSS (02/19/04)
• Jouko Pynnonen
  • Directory traversal in RealPlayer allows code execution (02/10/04)
• jsm_at_polyomino.org.uk
  • Re: Symlink Vulnerability in GNU libtool <1.5.2 (02/04/04)
• Just1n T1mberlake
  • PunkBuster SQL Injection Attack (02/19/04)
• K-OTiK Security
  • Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) (02/19/04)
  • Re: Microsoft ASN.1 (Half a sploit) (02/15/04)
  • Re: Outbreak warning: possibly Mydoom.C (Now Doomjuice.A) (02/09/04)
  • MyDoom.A Machines : The new P2P Sharing Network ... (02/10/04)
  • Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/09/04)
  • Re: new WIN virus? (01/29/04)
• Keith Clifton
  • Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (02/19/04)
  • Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/19/04)
• Khalid J Hosein
  • Re: clamav 0.65 remote DOS exploit (02/10/04)
• Knight Commander
  • Invision Power Board SQL injection! (02/28/04)
• kquest_at_toplayer.com
  • RE: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability (02/19/04)
  • bid: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability (02/18/04)
• kradhatman_at_hushmail.com
  • RE: ISS Security Rip: Microsoft ASN.1 (Half a sploit) (02/14/04)
• labs
  • iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability (02/04/04)
• Lance James
  • Re: Bank of America Contact (02/23/04)
  • Bank of America contact (02/20/04)
• langtuhaohoa caothuvolam
  • Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (02/05/04)
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/04/04)
• Larry Seltzer
  • RE: Windows XP explorer.exe heap overflow. (02/25/04)
  • RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/09/04)
  • RE: getting rid of outbreaks and spam (02/06/04)
  • RE: [security] Re: Major hack attack on the U.S. Senate (02/05/04)
  • RE: Hysterical first technical alert from US-CERT (02/04/04)
  • Hysterical first technical alert from US-CERT (02/03/04)
• Leon Harris
  • Re: http://www.smashguard.org (02/04/04)
• li0n7
  • PSOProxy <= 0.91 remote buffer overflow (exploit) (02/21/04)
• Li0n7_at_voila.fr
  • lbreakout2 < 2.4beta-2 local exploit (02/22/04)
• lion
  • [HUC] Serv-U FTPD 2.x/3.x/4.x/5.x "MDTM" Command Remote Exploit (02/27/04)
  • [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V2.0 (02/02/04)
• LordInfidel_at_directionweb.com
  • RE: Remote Administrator 2.x: highly possible remote hole or back door (02/18/04)
  • RE: W2K source "leaked"? (02/13/04)
• Luigi Auriemma
  • Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more) (02/24/04)
  • Remote crash in Ghost Recon engine (02/24/04)
  • Remote server crash in Haegemonia <= 1.07 (02/24/04)
  • Remote server crash in Team Factor <= 1.25 (02/23/04)
  • Broadcast client buffer-overflow in Purge Jihad <= 2.0.1 (02/16/04)
  • Denial of Service in Ratbag's game engine (02/11/04)
  • Denial of Service in Monkey httpd <= 0.8.1 (02/11/04)
  • Re: TrackMania Demo Denial of Service (02/09/04)
  • Remote crash of Chaser game <= 1.50 (02/03/04)
• Lyal Collins
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/12/04)
• LynX
  • problems with database files in 'SignatureDB' (02/15/04)
• Macroscape Solutions
  • Checkpoint 4.1 Vulnerability (02/06/04)
• Mandrake Linux Security Team
  • MDKSA-2004:015-1 - Updated x86_64 kernel packages fix multiple vulnerabilities (02/26/04)
  • MDKSA-2004:016 - Updated mtools packages fix local root vulnerability (02/25/04)
  • MDKSA-2004:015 - Updated kernel packages fix multiple vulnerabilities (02/24/04)
  • MDKSA-2004:014 - Updated metamail packages fix buffer overflow vulnerabilities (02/19/04)
  • MDKSA-2004:013 - Updated mailman packages close various cross-site scripting vulnerabilities. (02/13/04)
  • MDKSA-2004:012 - Updated XFree86 packages fix buffer overflow vulnerabilities (02/13/04)
  • MDKSA-2004:010 - Updated mutt packages fix remote crash (02/12/04)
  • MDKSA-2004:011 - Updated NetPBM packages fix a number of temporary file bugs. (02/12/04)
  • MDKSA-2004:009 - Updated glibc packages fix resolver vulnerabilities (02/05/04)
  • MDKSA-2004:006-1 - Updated gaim packages fix multiple vulnerabilities (01/30/04)
• mantra_at_lkm-zx.net
  • Multiple Vulnerabilities in PHPX (02/03/04)
• Manuel López
  • Re: Asp Portal Multiple Vulnerabilities (02/14/04)
  • ASP Portal Multiple Vulnerabilities (02/14/04)
  • XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal (02/10/04)
• Marc Bejarano
  • fix for recently disclosed Oracle interval conversion overflows? (02/20/04)
  • Microsoft Windows 2000 source code leaked (02/13/04)
• Marc Maiffret
  • EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow (02/27/04)
  • EEYE: ZoneLabs SMTP Processing Buffer Overflow (02/19/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
  • EEYE: Microsoft ASN.1 Library Bit String Heap Corruption (02/10/04)
  • EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
• Marc Schoenefeld
  • IBM cloudscape SQL Database (DB2J) vulnerable to remote command injection (02/05/04)
• Marc-Christian Petersen
  • Re: Hotfix for new mremap vulnerability (02/21/04)
• Marco Marabelli
  • sqwebmail web login (01/31/04)
• Marco van Berkum
  • Symlink vulnerabilities in mailmgr (02/12/04)
• Mariusz Woloszyn
  • Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution (02/23/04)
  • Re: Two checkpoint fw-1/vpn-1 vulns (02/06/04)
  • Re: Major hack attack on the U.S. Senate (01/29/04)
• Mark Litchfield
  • Re: Update - CheckPoint Vulnerabilities (02/12/04)
  • Update - CheckPoint Vulnerabilities (02/11/04)
• Mark Renouf
  • Re: clamav 0.65 remote DOS exploit (02/09/04)
• Markus Müller
  • Linux 2.4.24 with vserver 1.24 exploit (02/06/04)
• Markus Wernig
  • Re: Two checkpoint fw-1/vpn-1 vulns (02/06/04)
• markus-1977_at_gmx.net
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/04/04)
  • Re: new WIN virus? (01/29/04)
• Martin
  • aimSniff.pl file "deletion" (local) (02/12/04)
  • Re: Oracle toplink mapping workbench password algorithm (01/28/04)
• Martin Schulze
  • [SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips) (02/27/04)
  • [SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64) (02/20/04)
  • [SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390) (02/19/04)
  • [SECURITY] [DSA 441-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (02/18/04)
  • [SECURITY] [DSA 439-1] New Linux 2.4.16 packages fix several local root exploits (arm) (02/18/04)
  • [SECURITY] [DSA 440-1] New Linux 2.4.17 packages fix several local root exploits (powerpc/apus) (02/18/04)
  • [SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc) (02/18/04)
  • [SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities (02/05/04)
  • [SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (02/04/04)
  • [SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit (02/03/04)
• Mary Landesman
  • Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/10/04)
  • Re: Hysterical first technical alert from US-CERT (02/05/04)
• Massimo Arrigoni
  • Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities (02/18/04)
• Matt Zimmerman
  • [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows (02/27/04)
  • [SECURITY] [DSA 445-1] New lbreakout2 packages fix buffer overflow (02/21/04)
  • [SECURITY] [DSA 447-1] New hsftp packages fix format string vulnerability (02/23/04)
  • [SECURITY] [DSA 446-1] New synaesthesia packages fix insecure file creation (02/22/04)
  • [SECURITY] [DSA 448-1] New pwlib packages fix multiple vulnerabilities (02/23/04)
  • [SECURITY] [DSA 436-2] New mailman packages fix bug introduced in DSA 436-1 (02/22/04)
  • [SECURITY] [DSA 443-1] New xfree86 packages fix multiple vulnerabilities (02/20/04)
  • [SECURITY] [DSA 429-2] New gnupg packages fix cryptographic weakness (02/14/04)
  • [SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying (02/12/04)
  • [SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities (02/08/04)
  • [SECURITY] [DSA 435-1] New mpg123 packages fix heap overflow (02/06/04)
  • [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl (02/01/04)
• Matthew Dharm
  • Re: RFC: virus handling (02/03/04)
• Matthias Leu
  • Decompression Bombs (02/03/04)
• Matus UHLAR - fantomas
  • Re: Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 (01/28/04)
• Maxim Polyakov
  • Re: TYPSoft FTP Server 1.10 may be crashed (02/05/04)
• McAllister, Andrew
  • RE: MS to stop allowing passwords in URLs (Summary) (02/03/04)
  • MS to stop allowing passwords in URLs (01/28/04)
• mgotts_at_2roads.com
  • Re: blocking gzip encoded files (02/24/04)
  • RE: Remote Administrator 2.x: highly possible remote hole or back door (02/20/04)
  • Re: Why are postmasters distributing the MyDoom virus? (02/11/04)
• Michael Evanchik
  • Aol Instant Messenger/Microsoft Internet Explorer remote code execution (02/19/04)
• Michael H. Warfield
  • Re: ASN.1 telephony critical infrastructure warning - VOIP (02/18/04)
• Michael Kjorling
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/09/04)
• Michael Marziani
  • RE: CoDeX-W0rm - what happened here? (02/03/04)
• Michael Samuel
  • Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/18/04)
• Michael Shekman
  • Alcatel Omniswitch 7000 series (02/19/04)
• Michael Shigorin
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/14/04)
• Michael Wojcik
  • RE: Windows XP explorer.exe heap overflow. (02/23/04)
• Michal Medvecky
  • Samba 3.x + kernel 2.6.x local root vulnerability (02/09/04)
• Michal Zalewski
  • Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
• Micheal Cottingham
  • Re: Fw: phpBB privmsg.php XSS vulnerability patch. (01/29/04)
• Mike Bobbitt
  • Re: Another YabbSE SQL Injection (02/16/04)
• Mike Healan
  • Re: virus handling (01/28/04)
• Miskell, Craig
  • RE: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (02/19/04)
• morning_wood
  • Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! (02/11/04)
• Moshe Jacobson
  • AIM worm spreading around? (02/11/04)
• Mr Serbia
  • Advisory ! (01/31/04)
• Myron Davis
  • Re: Decompression Bombs (02/09/04)
  • RE: Decompression Bombs (02/07/04)
• N407ER
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Navaneetharangan
  • RE: Hacking USB Thumbdrives, Thumprint authentication (02/06/04)
• nCipher Support
  • nCipher Advisory #9: Host-side attackers can access secret data (02/23/04)
• NESTING, DAVID M (SBCSI)
  • RE: MS to stop allowing passwords in URLs (02/04/04)
• NetBSD Security-Officer
  • PGP signatures on recent NetBSD Security Advisories (02/19/04)
  • NetBSD Security Advisory 2004-002: Inconsistent IPv6 path MTU discovery handling (02/19/04)
  • NetBSD Security Advisory 2004-003: OpenSSL 0.9.6 ASN.1 parser vulnerability (02/19/04)
  • NetBSD Security Advisory 2004-004: shmat reference counting bug (02/19/04)
  • NetBSD Security Advisory 2004-001: Insufficient packet validation in racoon IKE daemon (02/19/04)
• Nexus
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/10/04)
• NGSoftware Insight Security Research
  • Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer (02/04/04)
• Nicholas Weaver
  • Re: http://www.smashguard.org (02/07/04)
  • Re: http://www.smashguard.org (02/03/04)
• Nick FitzGerald
  • RE: [Full-Disclosure] Re: W2K source "leaked"? (02/14/04)
  • RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/10/04)
  • Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (02/09/04)
  • Re: MS to stop allowing passwords in URLs (02/06/04)
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Nick Gudov
  • WebCortex Webstores2000 version 6.0 multiple security vulnerabilities (02/18/04)
• Nicob
  • Re: Update - CheckPoint Vulnerabilities (02/12/04)
• Nicolai van der Smagt
  • Re: SNMP community string disclosure in Linksys WAP55AG (02/19/04)
• Nicolas Gregoire
  • Re: MyDoom.A Machines : The new P2P Sharing Network ... (02/11/04)
  • Re: vulnerabilities of postscript printers (02/10/04)
• Nigel Horne
  • Re: clamav 0.65 remote DOS exploit (02/09/04)
• nimber
  • Security Advisory: CSS Vulnerability in Web Froums Server 1.6 (02/02/04)
• NN Poster
  • SNMP community string disclosure in Linksys WAP55AG (02/18/04)
• N|ghtHawk
  • Re: HelpCtr - allow open any page or run (02/10/04)
• Oliver Eikemeier
  • Re: clamav 0.65 remote DOS exploit (02/10/04)
  • Re: clamav 0.65 remote DOS exploit (02/09/04)
  • clamav 0.65 remote DOS exploit (02/09/04)
• Oliver Goebel
  • FYI: CAIF Format Specification (02/22/04)
• Oliver Lavery
  • RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/09/04)
• Oliver Schneider
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/12/04)
• Ollivier Robert
  • Re: Calife heap corrupt / potential local root exploit (02/27/04)
  • Re: Calife heap corrupt / potential local root exploit (02/27/04)
• opticfiber
  • Re: [work] Re: W2K source "leaked"? (02/17/04)
• Pablo Santana
  • AllMyLinks PHP Code Injection vulnerability (02/14/04)
  • AllMyVisitors PHP Code Injection vulnerability (02/14/04)
  • AllMyGuests PHP Code Injection vulnerability (02/14/04)
• Patrick J. Volkerding
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/10/04)
• Patrick Proniewski
  • Re: RFC: virus handling (01/28/04)
• Paul Murphy
  • RE: getting rid of outbreaks and spam (junk) (02/05/04)
• Paul Smith
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Paul Starzetz
  • Second critical mremap() bug found in all Linux kernels (02/18/04)
• Pavel harry_x Palát
  • Hotfix for new mremap vulnerability (02/19/04)
• Pavel Kankovsky
  • Re: RFC: virus handling (01/29/04)
• Pavel Levshin
  • Re: Remote Administrator 2.x: highly possible remote hole or backdoor (02/20/04)
  • Remote Administrator 2.x: highly possible remote hole or backdoor (02/16/04)
  • Re: RFC: virus handling (01/29/04)
• Pentest Security Advisories
  • ptl-2004-01: Multiple vulnerabilities in Nokia phones (02/09/04)
• Pete Fin***n
  • Re: Oracle toplink mapping workbench password algorithm (01/29/04)
• Peter Buijsman
  • RE: Serv-U "MDTM" buffer overflow PoC DoS exploit (02/26/04)
• Peter J. Holzer
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/17/04)
  • Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/11/04)
  • Re: RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) (02/03/04)
• Peter Pentchev
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/10/04)
• Peter Winter-Smith
  • Web Crossing 4.x/5.x Denial of Service Vulnerability (FIX) (02/23/04)
  • The Palace 3.x (Client) Stack Overflow Vulnerability (02/07/04)
  • Web Crossing 4.x/5.x Denial of Service Vulnerability (02/03/04)
• peter.huang_at_ossecurity.ca
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/12/04)
• Phan
  • Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (02/05/04)
• Philip
  • X-Cart vulnerability (02/03/04)
• Philip Rowlands
  • Re: Hysterical first technical alert from US-CERT (02/04/04)
• Piotr KUCHARSKI
  • Re: RFC: virus handling (01/28/04)
• please_reply_to_security_at_sco.com
  • OpenLinux: Perl Safe.pm unsafe access (02/20/04)
  • OpenLinux: Multiple vulnerabilities were discovered in the saned daemon (02/20/04)
  • OpenLinux: Fetchmail 6.2.4 and earlier remote dennial of service (02/20/04)
  • OpenLinux: Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (02/19/04)
  • OpenLinux: mpg123 remote denial of service and heap-based buffer overflow (02/19/04)
  • OpenLinux: slocate local user buffer overflow (02/11/04)
• pna.lists
  • Re: new WIN virus? (01/29/04)
• pokley
  • phpnuke 6.9 search module exploit. (02/12/04)
  • [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module. (02/10/04)
• Rafel Ivgi, The-Insider
  • InnoMedia VideoPhone Authorization Bypass (02/28/04)
  • LAN SUITE Web Mail 602Pro Multiple Vulnerabilities (02/28/04)
  • jgs webserver 0.1.0 Cross Site Scripting Vulnerabillity (02/25/04)
  • BadBlue 2.4 Local Path Disclosure By phptest.php (02/24/04)
  • New ICQ WORM (02/24/04)
  • Gigabyte Broadband Router - Multiple Vulnerabilities (02/24/04)
  • FlexWATCH-Webs 2.2 (NTSC) Authorization Bypass (02/24/04)
  • vBulletin PHP Forum Version (02/13/04)
• Rainer Gerhards
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
  • RE: virus handling (01/28/04)
• Randal, Phil
  • RE: getting rid of outbreaks and spam (02/09/04)
• Rene
  • [local problems] eTrust Virus Protection 6.0 InoculateIT for linux (02/09/04)
• Richard M. Smith
  • Why are postmasters distributing the MyDoom virus? (02/07/04)
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• RJ Auburn
  • Re: ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
• Robbie Stone
  • Re: SNMP community string disclosure in Linksys WAP55AG (02/19/04)
• Ron DuFresne
  • Re: Major hack attack on the U.S. Senate (02/03/04)
• Roy Hills
  • New version of ike-scan (IPsec IKE scanner) available - v1.6 (02/27/04)
• rsh_at_idirect.com
  • Re: [security] Re: Major hack attack on the U.S. Senate (02/03/04)
• S-Quadra Security Research
  • EarlyImpact ProductCart shopping cart software multiple security vulnerabilities (02/18/04)
  • CactuSoft CactuShop 5.0 Lite shopping cart software backdoor (02/06/04)
• Sam
  • Serv-U MDTM exploits (02/27/04)
• Sam S***e
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • Re: MS to stop allowing passwords in URLs (02/04/04)
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Sascha Wilde
  • Re: RFC: virus handling (01/29/04)
• SBNelson_at_thermeon.com
  • RE: Decompression Bombs (02/09/04)
• Scott J
  • AIX password enumeration possible (02/06/04)
• Scott James Remnant
  • Re: Symlink Vulnerability in GNU libtool <1.5.2 (02/03/04)
• scott.jefferd_at_cantire.com
  • Re: sqwebmail web login (02/03/04)
• scrap
  • TrackMania Demo Denial of Service (02/08/04)
• Security Admin
  • Re: Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior (02/05/04)
• security.advisory_at_apcc.com
  • APC Security Advisory - Static factory password vulnerability (02/19/04)
• Seth Arnold
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/09/04)
  • Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/09/04)
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/06/04)
  • Re: http://www.smashguard.org (02/05/04)
• SGI Security Coordinator
  • SGI Advanced Linux Environment security update #11 (02/26/04)
  • SGI Advanced Linux Environment security update #12 (02/26/04)
  • SGI ProPack v2.4: Kernel fixes and security update (02/26/04)
  • SGI Advanced Linux Environment security update #10 (02/11/04)
  • IRIX userland binary vulnerabilities update (02/05/04)
• Shaun Bertrand
  • RE: virus handling (02/03/04)
• Shaun Colley
  • Serv-U "MDTM" buffer overflow PoC DoS exploit (02/26/04)
  • 3Com DSL Router Long Request DoS exploit. (02/22/04)
  • PalmOS httpd accept() queue overflow DoS vulnerability. (02/08/04)
  • rxgoogle.cgi XSS Vulnerability. (02/04/04)
• Shawn McMahon
  • Re: Hysterical first technical alert from US-CERT (02/08/04)
  • Re: RFC: virus handling (02/05/04)
• Simon
  • Re: CoDeX-W0rm - what happened here? (02/04/04)
• Simon Brady
  • Re: Misinformation in Security Advisories (ASN.1) (02/16/04)
  • Re: Scope of latest RealPlayer vuln (02/13/04)
  • Scope of latest RealPlayer vuln (02/11/04)
• Slackware Security Team
  • [slackware-security] Kernel security update (SSA:2004-049-01) (02/18/04)
  • [slackware-security] metamail security update (SSA:2004-049-02) (02/18/04)
  • [slackware-security] mutt security update (SSA:2004-043-01) (02/12/04)
  • [slackware-security] XFree86 security update (SSA:2004-043-02) (02/12/04)
• Slawek
  • Re: Misinformation in Security Advisories (ASN.1) (02/17/04)
• Steen Larsen
  • RE: Hysterical first technical alert from US-CERT - CERT#25304 (02/04/04)
• Stefan Esser
  • Advisory 02/2004: Trillian remote overflows (02/24/04)
• Stefan Nordhausen
  • Re: Symlink Vulnerability in GNU libtool <1.5.2 (02/04/04)
  • Re: Symlink Vulnerability in GNU libtool <1.5.2 (02/03/04)
  • Symlink Vulnerability in GNU libtool <1.5.2 (01/30/04)
• Stefan Triller
  • Re: clamav 0.65 remote DOS exploit (02/09/04)
• Steffen Kluge
  • Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (02/17/04)
• Stephen Martin
  • RE: Hysterical first technical alert from US-CERT (02/10/04)
• Stephen Samuel
  • Re: Hysterical first technical alert from US-CERT (02/05/04)
• Steve Bremer
  • Re: Second critical mremap() bug found in all Linux kernels (02/18/04)
• Steve Friedl
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/12/04)
• Steve Kemp
  • Re: [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows (02/27/04)
  • Re: lbreakout2 < 2.4beta-2 local exploit (02/23/04)
• Steve Wray
  • RE: [Full-Disclosure] smbmount disrupts Windows file sharing. (02/03/04)
• Steven M. Christey
  • Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft (02/23/04)
  • Re: Misinformation in Security Advisories (ASN.1) (02/17/04)
• Stuart Moore
  • is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (02/20/04)
• sunglasses_at_bay-watch.com
  • Windows XP explorer.exe heap overflow. (02/20/04)
• Sven Specker
  • Re: AIX password enumeration possible (02/12/04)
• telec_at_ureach.com
  • Re: W2K source "leaked"? (02/13/04)
• Theo de Raadt
  • Re: http://www.smashguard.org (02/10/04)
  • Re: http://www.smashguard.org (02/07/04)
• thiago.vazquez_at_light.com.br
  • Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/17/04)
• Thomas Biege
  • SUSE Security Announcement: xf86/XFree86 (SuSE-SA:2004:006) (02/23/04)
  • SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:005) (02/18/04)
  • DIMVA 2004 deadline extended (02/02/04)
• Thomas M. Payerle
  • Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/17/04)
  • Re: Major hack attack on the U.S. Senate (02/04/04)
• Thomas Roessler
  • Mutt-1.4.2 fixes buffer overflow. (02/11/04)
• Thor Lancelot Simon
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/13/04)
• Thor Larholm
  • Fw: [Unpatched] The Bizex worm (02/25/04)
  • RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution (02/19/04)
  • RE: Outbreak warning: possibly Mydoom.C (02/09/04)
  • Re: getting rid of outbreaks and spam (02/05/04)
  • OpenBSD IPv6 remote kernel crash (02/05/04)
  • RE: MS to stop allowing passwords in URLs (02/03/04)
• Tim
  • Re: Windows XP explorer.exe heap overflow. (02/24/04)
• Tim Eddy
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
• Tim Nelson
  • Re: sqwebmail web login (02/04/04)
• Tim Walraven
  • RE: AIM worm spreading around? (02/12/04)
• Tim Yamin
  • [ GLSA 200402-07 ] Clamav 0.65 DoS vulnerability (02/18/04)
  • [ GLSA 200402-06 ] Linux kernel AMD64 ptrace vulnerability (02/17/04)
  • [ GLSA 200402-05 ] phpMyAdmin < 2.5.6-rc1 directory traversal attack (02/17/04)
  • [ GLSA 200402-03 ] Monkeyd Denial of Service vulnerability (02/11/04)
  • [ GLSA 200402-04 ] Gallery <= 1.4.1 and below remote exploit vulnerability (02/11/04)
  • [ GLSA 200402-02 ] XFree86 Font Information File Buffer Overflow (02/11/04)
  • [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts (02/07/04)
• Timothy J.Miller
  • Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
• Tina Bird
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/11/04)
  • RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (02/10/04)
• tlarholm_at_pivx.com
  • RE: Second critical mremap() bug found in all Linux kernels (02/18/04)
  • RE: Exploit based on leaked code released. (02/16/04)
  • RE: W2K source "leaked"? (02/13/04)
  • RE: W2K source "leaked"? (02/12/04)
• Todd C. Campbell
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/06/04)
• Tom
  • Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (02/19/04)
• Tom Hanlin
  • Re: Technical Details of Urlcount.cgi Vulnerability (02/03/04)
• Tomasz Grabowski
  • Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution (02/23/04)
  • Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users (02/23/04)
• Tri Huynh
  • Open Journal Blog Authenticaion Bypassing Vulnerability (02/06/04)
• Trustix Security Advisor
  • TSLSA-2004-0008 - kernel (02/23/04)
  • TSLSA-2004-0007 - kernel (02/18/04)
  • TSLSA-2004-0006 - mutt (02/13/04)
• Truthless
  • Re: Fw: phpBB privmsg.php XSS vulnerability patch. (02/04/04)
• Tyler Larson
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/06/04)
• Tõnu Samuel
  • Somewhat new SQL Injection concept (02/23/04)
• Ulf Härnhammar
  • metamail format string bugs and buffer overflows (02/18/04)
• Ulrich Keil
  • Re: [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities (02/18/04)
• Urban Widmark
  • Re: Samba 3.x + kernel 2.6.x local root vulnerability (02/11/04)
• Valdis.Kletnieks_at_vt.edu
  • Re: [Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate (02/16/04)
  • Re: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) (02/16/04)
  • Re: ISS Security Rip: Microsoft ASN.1 (Half a sploit) (02/16/04)
  • Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! (02/11/04)
  • Re: Hysterical first technical alert from US-CERT (02/06/04)
  • Re: Hysterical first technical alert from US-CERT (02/04/04)
  • Re: Hysterical first technical alert from US-CERT (02/04/04)
• Vietnamese Security Group
  • Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (02/03/04)
  • BUG IN APACHE HTTPD SERVER (current version 2.0.47) (01/31/04)
• Vincenzo Ciaglia
  • LNSA-#2004-0003: Linux Kernel (02/20/04)
  • LNSA-#2004-0002: Fetchmail 6.2.4 and earlier remote denial of service (02/20/04)
  • LNSA-#2004-0001: mutt remote crash (02/15/04)
• Vinny Abello
  • Re: MS to stop allowing passwords in URLs (02/03/04)
• Volker Kuhlmann
  • Re: RFC: virus handling (02/03/04)
• Víctor
  • Re: W2K source "leaked"? (02/13/04)
  • Re: W2K source "leaked"? (02/13/04)
• Wang Yun
  • Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (02/05/04)
• Ward Taylor
  • RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (02/09/04)
• WebHead
  • Re: Microsoft ASN.1 (Half a sploit) (02/17/04)
• William A. Rowe, Jr.
  • Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (02/05/04)
• William Anderson
  • SmoothWall Project Security Advisory SWP-2004:002 (02/26/04)
• wirepair
  • Dell OpenManage Web Server Heap Overflow (Pre-Auth) (02/26/04)
  • Dell OpenManage Web Server Heap Overflow (02/26/04)
• Zak Dechovich
  • RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (02/17/04)
• Zero_X www.lobnan.de Team
  • Directory Traversal in Aprox PHP Portal. (01/31/04)
  • Vulnerabilities in Crob FTP Server V3.5.1 (02/01/04)
• ZetaLabs
  • ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary files retrieving (02/23/04)
  • ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files retrieving (02/18/04)
  • ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro) (02/18/04)
  • ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote arbitrary file retrieving (02/17/04)
  • ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates (02/11/04)
  • ZH2004-04SA (security advisory): Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro (02/04/04)
  • ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability (02/02/04)
• Zhenkai Liang
  • Re: W2K source "leaked"? (02/13/04)
• Zone Labs Product Security
  • Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability (02/19/04)

Last message date: 02/29/04
Archived on: 02/29/04 CET

---

681 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2004-02