SecurityFocus Bugtraq
By Author

357 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 03/01/04
Ending: 03/31/04

• 0seen security team
  • SHOUTcast v1.9.2 remote connect back exploit (03/04/04)
• advisories_at_madison-gurkha.com
  • Problem with customized login pages for Oracle SSO (03/30/04)
• advisory_at_rapid7.com
  • R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities (03/30/04)
  • R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities (03/23/04)
• Aida Escriva-Sammer
  • [ GLSA 200403-14 ] Multiple Security Vulnerabilities in Monit (03/31/04)
  • GLSA200403-04 Multiple security vulnerabilities in Apache 2 (03/25/04)
• Alun Jones
  • RE: Wftpd stat Command Remote Vulnerability Exploit (03/04/04)
• Amir Mohammadkhani-Aminabadi
  • Re: security enforcement - new monitor for winnt (03/30/04)
• Amit Klein
  • Multiple Vendor SOAP server array DoS (03/15/04)
  • RE: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation (03/07/04)
  • RE: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics" (03/07/04)
  • A new white paper by Sanctum: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics" (03/04/04)
• Andreas Constantinides (MegaHz)
  • Check Point SmartDashboard Buffer Overflow (03/25/04)
• Andreas Steinmetz
  • Apache mod_disk_cache stores client authentication credentials on disk (03/20/04)
• Andrew Barkley
  • UPDATED: MS Word - password protection vulnerabilty (03/25/04)
• Andrew W Barkley
  • UPDATED: MS Word - password protection vulnerabilty (03/25/04)
• Angelo Rosiello
  • Crafty Game Stack Overflow & Exploit (03/16/04)
  • Rosiello Security's exploit for MDaemon (03/14/04)
• Arab VieruZ
  • Cpanel 9.1.0 have a problem ? (03/12/04)
  • Cpanel 8.*.* have a problem ? (03/11/04)
• ax09001h
  • Dameware Passes Weak File Encryption Key in the Clear (03/23/04)
• b0f www.b0f.net
  • Re: Winamp 5.02 Long Filename Buffer Overflow Vulnerability (03/20/04)
• backspace
  • YabbSE (3 on 1) (03/01/04)
• Benjamin Tolman
  • Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (03/28/04)
• Berend-Jan Wever
  • Re: new internet explorer exploit (was new worm) (03/30/04)
• Bipin Gautam.
  • Re: Norton Antivirus 2002 fails to scan files with ... [2'nd... UPDATED] (03/06/04)
  • Norton Antivirus 2002 fails to scan files with special character(s) properly. (03/05/04)
• blexim
  • Heap overflow in MPlayer (03/30/04)
• Blurred Vision
  • Format String vuln in Inktomi Search4.0 (03/02/04)
• Brandon Sturgeon
  • Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities (03/10/04)
• Brian Keefer
  • Re: TrendMacro Interscan Viruswall Directory Traversal (03/24/04)
• bugzilla_at_redhat.com
  • [RHSA-2004:137-01] Updated Ethereal packages fix security issues (03/31/04)
  • [RHSA-2004:134-01] Updated squid package fixes security vulnerability (03/29/04)
  • [RHSA-2004:112-01] Updated Mozilla packages fix security issues (03/18/04)
  • [RHSA-2004:121-01] Updated OpenSSL packages fix vulnerabilities (03/17/04)
  • [RHSA-2004:093-01] Updated sysstat packages fix security vulnerabilities (03/10/04)
  • [RHSA-2004:102-01] Updated gdk-pixbuf packages fix denial of service vulnerability (03/10/04)
  • [RHSA-2004:075-01] Updated kdelibs packages resolve cookie security issue (03/10/04)
• C Ryll
  • RE: MS Word - password protection vulnerabilty (03/26/04)
• Calum Power
  • Multiple vulnerabilities in Hushmail.com (03/11/04)
• Casper Dik
  • Re: Immunity Advisory: Solaris local kernel root (03/25/04)
  • Re: Immunity Advisory: Solaris local kernel root (03/24/04)
• Cheng Peng Su
  • phpBB profile.php Cross Site Scripting Vulnerability (03/21/04)
  • YaBB/YaBBse Cross Site Scripting Vulnerability (03/14/04)
  • New Internet Explorer Cross Zone/Site Scripting Vulnerability (03/03/04)
• Chris Fuhrman
  • Re: spamblocker turns into mail denial of service (03/15/04)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco OpenSSL Implementation Vulnerability (03/17/04)
  • Cisco Security Advisory: Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability (03/04/04)
• Claes M Nyberg
  • GNU Anubis 3.6.2 remote root exploit (03/10/04)
• Clayton Kossmeyer
  • Re: Addressing Cisco Security Issues (03/30/04)
• Conectiva Updates
  • [CLA-2004:833] Conectiva Security Announcement - mc (03/31/04)
• Cy Schubert
  • O-088: Sun passwd(1) Command Vulnerability (03/05/04)
• d3thStaR
  • Opera Array Allocation Managment Exploit (03/14/04)
• Dan Harkless
  • Re: HP printers and currency anti-copying measures (03/10/04)
• Dana Hudes
  • spamblocker turns into mail denial of service (03/15/04)
  • Re: HP printers and currency anti-copying measures (03/10/04)
• Dave Aitel
  • Re: Immunity Advisory: Solaris local kernel root (03/25/04)
  • Re: Immunity Advisory: Solaris local kernel root (03/25/04)
  • Re: Immunity Advisory: dtlogin remote root (03/24/04)
  • Immunity Advisory: Solaris local kernel root (03/23/04)
  • Immunity Advisory: dtlogin remote root (03/23/04)
  • Multiple Immunity Advisories (03/14/04)
• Dave Markham
  • Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (03/17/04)
• David
  • Re: YabbSE (3 on 1) (03/17/04)
• David Arranz
  • Nokia 3410 cell phones software flaw (03/04/04)
• Davide Del Vecchio
  • The non-apreciated world of full-disclosure (03/03/04)
• Dennis M. Callan
  • RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (03/02/04)
• Donato Ferrante
  • directory traversal in xweb 1.0 (03/22/04)
  • XSS in MyProxy 20030629 (03/11/04)
  • Multiple Vulnerabilities in PWS 0.2.2 (03/11/04)
  • DoS in wMCam server 2.1.348 (03/10/04)
  • directory traversal in PWebServer 0.3.3 (03/08/04)
  • directory traversal in GWeb 0.6 (03/03/04)
• Dotho
  • Multiple Vulnerabilities in Cloisterblog web blog/journal (03/29/04)
• Drew Copley
  • RE: Followup: vuln in WinBlox monitor for winnt (03/31/04)
  • RE: new internet explorer exploit (was new worm) (03/29/04)
  • RE: MS Outlook/Outlook Express Preview Pane Security Issue (03/26/04)
  • RE: Desert Rats vs. Afrika Korps (Haegemonia bug) (03/05/04)
• Ejovi Nuwere
  • Infosecdaily.net: Expanding our blogging community. (03/05/04)
• EnGarde Secure Linux
  • [ESA-20040317-003] 'openssl' Denial of Service vulnerabilities. (03/17/04)
• eric
  • Follow-up: Major hack attack on the U.S. Senate (03/15/04)
• Erwann Abalea
  • Re: [bugtraq] Nokia 3410 cell phones software flaw (03/04/04)
• Eye on Security India
  • Ethereal(v0.10.0-0.10.2) IGAP Dissector Message Overflow Exploit (03/28/04)
• Fable
  • More Cpanel Vuls (cross site scripting) (03/23/04)
  • Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks (03/12/04)
• Ferruh Mavituna
  • Blogger XSS Vulnerability (03/26/04)
• FraMe
  • Fw: Bilbao Method Exposed (03/16/04)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-04:06.ipv6 (03/29/04)
  • FreeBSD Security Advisory FreeBSD-SA-04:05.openssl (03/17/04)
• Frog Man
  • RE: YaBB/YaBBse Cross Site Scripting Vulnerability (03/16/04)
• Gabucino
  • MPlayer Security Advisory #002 - HTTP parsing vulnerability (03/30/04)
• Gadi Evron
  • Re: New worm? (03/27/04)
  • The witty worm (03/20/04)
  • Re: The witty worm (03/20/04)
  • Re: The witty worm (03/20/04)
  • XP SP2 is out (03/20/04)
• gandalf_at_digital.net
  • IPv4 fragmentation --> The Rose Attack (03/31/04)
• gdayworld_at_hotmail.com
  • PHPX 2.x - 3.2.4 (03/16/04)
• Geo.
  • Addressing Cisco Security Issues (03/29/04)
• George Swentek
  • Antivir for Freebsd doesn't work on 5.X (03/05/04)
• Gerald (Jerry) Carter
  • Re: Samba 'smbprint' script tmpfile vulnerability. (03/20/04)
• GreyMagic Software
  • Remotely Exploitable Cross-Site Scripting in Hotmail and Yahoo (GM#005-MC) (03/23/04)
• GulfTech Security
  • Concerning The Recent Invision power Board Issues (03/20/04)
• H D Moore
  • Re: HP Web JetAdmin vulnerabilities. (03/24/04)
• http-equiv_at_excite.com
  • NOT GOOD: Outlook Express 6 + Internet Explorer 6 (03/31/04)
  • Re: security enforcement - new monitor for winnt (03/30/04)
  • re: New worm? (03/29/04)
  • HOTMAIL / PASSPORT: phishing expedition (03/18/04)
  • PLAXO: is that a cure or a disease? (03/12/04)
  • Z***ING EMAILS ! (03/06/04)
• Hugh Mann
  • How to crash a harddisk - the Ipswitch WS_FTP Server way (03/23/04)
  • Think of the buffers! Won't somebody think of the buffers?! (03/23/04)
  • Open the WS_FTP Server backdoor to SYSTEM (03/23/04)
  • ALLO ALLO WS_FTP Server (03/23/04)
• idlabs-advisories_at_idefense.com
  • [Full-Disclosure] iDEFENSE Security Advisory 03.19.04: Borland Interbase admin.ib Administrative Access Vulnerability (03/19/04)
• Imperva Application Defense Center
  • White Paper - Web Application Worms: Myth or Reality? (03/30/04)
• Inode
  • Sarca rainbow tables on-line cracking service (03/22/04)
• J. Nick Koston
  • cPanel Secuirty Advisory CPANEL-2004:01-01 (03/12/04)
• Jan De Luyck
  • Re: Multiple Vulnerabilities in PWS 0.2.2 (03/14/04)
• Janek Vind
  • [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (03/26/04)
  • [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta] (03/26/04)
  • [waraxe-2004-SA#011 - Multiple vulnerabilities in MS Analysis v2.0 module for PhpNuke] (03/22/04)
  • [waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c] (03/22/04)
  • [waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0] (03/22/04)
  • [waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke] (03/18/04)
  • [waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke] (03/15/04)
  • [waraxe-2004-SA#005 - XSS in Php-Nuke 7.1.0 - part 2] (03/15/04)
  • [waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke] (03/15/04)
• Jason Dodson
  • Re: Addressing Cisco Security Issues (03/29/04)
• je_at_sekure.net
  • [ANNOUNCE] Apache HTTP Server 2.0.49 Released (fwd) (03/19/04)
• Jeff
  • Another ISS BlackIce & RealSecure Update ? (03/27/04)
• Jeff Uslan
  • MS Outlook/Outlook Express Preview Pane Security Issue (03/26/04)
• JeiAr
  • PhotoPost PHP Pro Multiple Vulnerabilities (03/29/04)
  • phpBB 2.0.8 Exploit (03/28/04)
  • Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (03/26/04)
  • Re: Phpbb 2.0.7a And Earlier Secuity Issues (03/25/04)
  • Invision Power Top Site List SQL Injection Vulnerability (03/22/04)
  • Invision Gallery SQL Injection Vulnerabilities (03/22/04)
  • Phpbb 2.0.7a And Earlier Secuity Issues (03/22/04)
  • Mambo Open Source Multiple Vulnerabilities (03/16/04)
  • JelSoft vBulletin Multiple XSS Vulnerabilities (03/16/04)
  • Phorum 5.0.3 Beta && Earlier XSS Issues (03/15/04)
  • phpBB 2.0.6d && Earlier Security Issues (03/13/04)
  • Re: Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity (03/05/04)
  • Re: Invision Power Board 1.3 Final Path Disclosure Vulnerability (03/05/04)
• Jelmer
  • Re: new internet explorer exploit (was new worm) (03/30/04)
• Jeremiah Grossman
  • Re: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics" (03/05/04)
• Jesse Keating
  • [FLSA-2004:1256] Updated util-linux resolves security vulnerability (03/05/04)
  • [FLSA-2004:1284] Updated kernel resolves security vulnerabilities (03/02/04)
• Jim Halfpenny
  • New Adventures In Phishing (03/25/04)
• Joe Stewart
  • Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. (03/31/04)
• Joel Palmius
  • Mod_Survey security advisory: Script injection bug (03/22/04)
• Johan A.van Zanten
  • Re: Immunity Advisory: dtlogin remote root (03/24/04)
• john layman
  • ws_ftp overflow (03/14/04)
• John T. Larkin
  • Re: Motorola T720 cell phone DoS vulnerability. (03/01/04)
• John.Airey_at_rnib.org.uk
  • RE: [RHSA-2004:112-01] Updated Mozilla packages fix security issu es (03/18/04)
• Joshua J. Berry
  • [ GLSA 200403-12 ] OpenLDAP DoS Vulnerability (03/31/04)
• Jouko Pynnonen
  • Outlook mailto: URL argument injection vulnerability (03/10/04)
• K-OTiK Security
  • Another ISS BlackIce & RealSecure Update ? (03/27/04)
  • Re: Outlook mailto: URL argument injection vulnerability MS04-009 (Now CRITICAL) ! (03/11/04)
• kang
  • Safari javascript array overflow (03/06/04)
• Karousel
  • New worm? (03/27/04)
• Kim Scarborough
  • Re: MS Security Response is a bunch of half-witted ***s (03/12/04)
• Kostya Kortchinsky
  • Re: Any dissasemblies of the Witty worm yet? (03/20/04)
• Kurt Lieber
  • [ GLSA 200403-11 ] Squid ACL [url_regex] bypass vulnerability (03/31/04)
  • [ GLSA 200403-13 ] Remote buffer overflow in MPlayer (03/31/04)
  • [ GLSA 200403-10 ] Fetchmail 6.2.5 fixes a remote DoS (03/31/04)
  • [ GLSA 200403-09 ] Buffer overflow in Midnight Commander (03/29/04)
  • [ GLSA 200403-06 ] Multiple remote buffer overflow vulnerabilities in Courier (03/29/04)
  • [ GLSA 200403-07 ] Multiple remote overflows and vulnerabilities in Ethereal (03/29/04)
  • [ GLSA 200403-08 ] oftpd DoS vulnerability (03/29/04)
• Lachniet, Mark
  • 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance (03/02/04)
• laurent oudot
  • Nstxd vulnerability (03/26/04)
• lion
  • Serv-U Real Target and Search ASM Code Tool for Overflow Exploit. (03/04/04)
• Lise Moorveld
  • Re: IE ms-its: and mk:@MSITStore: vulnerability (03/30/04)
• Liu Die Yu
  • RE: security enforcement - new monitor for winnt (03/31/04)
  • Re: security enforcement - new monitor for winnt (03/31/04)
  • security enforcement - new monitor for winnt (03/30/04)
• Luigi Auriemma
  • RogerWilco: new funny bugs (03/31/04)
  • Remote crash in Etherlords I 1.07 and II 1.03 (03/25/04)
  • Broadcast client buffer-overflow in Terminator 3 1.0 (03/23/04)
  • Buffer overflow in PicoPhone 1.63 (03/24/04)
  • Server freeze in The Rage 1.01 (03/23/04)
  • Chrome 1.2.0.0 server crash (03/18/04)
  • Unreal engine updates and Battle Mages advisory (03/11/04)
  • Format string bug in EpicGames Unreal engine (03/10/04)
  • Ghost users in Chat Anywhere 2.72 (03/09/04)
  • Desert Rats vs. Afrika Korps (Haegemonia bug) (03/05/04)
  • Clients broadcast buffer overflow in Red Faction <= 1.20 (03/01/04)
• Mandrake Linux Security Team
  • MDKSA-2004:025 - Updated squid packages fix vulnerability (03/31/04)
  • MDKSA-2004:024 - Updated ethereal packages fix multiple vulnerabilities (03/31/04)
  • MDKSA-2004:023 - Updated openssl packages fix multiple vulnerabilities (03/17/04)
  • MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability (03/10/04)
  • MDKSA-2004:022 - Updated kdelibs packages fix cookie theft vulnerability (03/10/04)
  • MDKSA-2004:021 - Updated mozilla packages fix multiple vulnerabilities (03/10/04)
  • MDKSA-2004:019 - Updated python packages fix buffer overflow vulnerability (03/10/04)
  • MDKSA-2004:017 - Updated pwlib packages fix vulnerability (03/04/04)
  • MDKSA-2004:018 - Updated libxml2 packages fix vulnerability (03/04/04)
• Manuel Lopez
  • A-CART Pro & A-CART 2.0 Input Validation Holes (03/29/04)
  • Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration (03/22/04)
  • Vulnerabilities in Member Management System 2.1 (03/22/04)
• Marc Bejarano
  • Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (03/17/04)
  • Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (03/17/04)
  • Re: IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) (03/09/04)
• Marc Maiffret
  • EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability (03/19/04)
• Marco Marabelli
  • Re: Norton Antivirus 2002 fails to scan files with special character(s) properly. (03/06/04)
• Mark J Cox
  • Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (03/17/04)
  • New OpenSSL releases fix denial of service attacks [17 March 2004] (03/17/04)
  • Re: Fw: Bilbao Method Exposed (03/16/04)
• Martin Eiszner
  • Linbit linbox Multiple Vulnerabilities (03/30/04)
• Martin Schulze
  • [SECURITY] [DSA 469-1] New libpam-pgsql packages fix SQL injection (03/29/04)
  • [SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus) (03/18/04)
  • [SECURITY] [DSA 464-1] New gdk-pixbuf packages fix denial of service (03/16/04)
  • [SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm) (03/06/04)
  • [SECURITY] [DSA 455-1] New libxml packages fix arbitrary code execution (03/04/04)
  • [SECURITY] [DSA 454-1] New Linux 2.2.22 packages fix local root exploit (alpha) (03/02/04)
• Marukka
  • Re: Multiple issues with Mac OS X AFP client (03/04/04)
• Mathias Wegner
  • Re: mac osx- admin service buffer overflow (03/19/04)
• Matt Zimmerman
  • [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities (03/24/04)
  • [SECURITY] [DSA 467-1] New ecartis packages fix several vulnerabilities (03/24/04)
  • [SECURITY] [DSA 465-1] New openssl packages fix multiple vulnerabilities (03/17/04)
  • [SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt (03/13/04)
  • [SECURITY] [DSA 461-1] New calife packages fix buffer overflow (03/11/04)
  • [SECURITY] [DSA 460-1] New sysstat packages fix insecure temporary file creation (03/10/04)
  • [SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug (03/10/04)
  • [SECURITY] [DSA 458-1] New python2.2 packages fix buffer overflow (03/10/04)
  • [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities (03/09/04)
  • [SECURITY] [DSA 452-1] New libapache-mod-python packages fix denial of service (03/01/04)
• micheal_at_michealcottingham.com
  • RE: Fw: phpBB profile.php Cross Site Scripting Vulnerability (03/22/04)
• nesumin
  • Re[2]: ws_ftp overflow (WS_FTP Pro 8.0.3 is vulnerable) (03/19/04)
• nesumin_at_softhome.net
  • Re: ws_ftp overflow (03/16/04)
• NetScreen Security Response Team
  • NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN (03/04/04)
• Nexus
  • Re: MS Outlook/Outlook Express Preview Pane Security Issue (03/26/04)
• NGSSoftware Insight Security Research
  • Norton Internet Security Remote Command Execution (#NISR19042004b) (03/19/04)
  • Norton AntiSpam Remote Buffer Overrun (#NISR19042004a) (03/19/04)
  • With regards to the Adobe Acrobat Reader advisory (#NISR03022004) (03/10/04)
  • IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) (03/09/04)
  • SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a) (03/05/04)
  • SLWebMail Multiple Buffer Overflow Vulnerabilities (#NISR05022004b) (03/05/04)
  • Abobe Reader 5.1 XFDF Buffer Overflow Vulnerability (03/04/04)
• Nicholas Weaver
  • Re: White Paper - Web Application Worms: Myth or Reality? (03/31/04)
  • Any dissasemblies of the Witty worm yet? (03/20/04)
• Nick FitzGerald
  • Re: new internet explorer exploit (was new worm) (03/30/04)
  • MS Security Response is a bunch of half-witted ***s (03/12/04)
• Oliver Lavery
  • RE: security enforcement - new monitor for winnt (08/09/02)
  • Followup: vuln in WinBlox monitor for winnt (03/30/04)
• OpenPKG
  • [OpenPKG-SA-2004.007] OpenPKG Security Advisory (openssl) (03/18/04)
  • [OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview) (03/12/04)
  • [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) (03/09/04)
  • [OpenPKG-SA-2004.004] OpenPKG Security Advisory (libtool) (03/08/04)
  • [OpenPKG-SA-2004.003] OpenPKG Security Advisory (libxml) (03/05/04)
• Paul
  • NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. (03/30/04)
• Paul Starzetz
  • mremap(2) full details available (03/01/04)
• Paul Szabo
  • Eudora 6.0.3 attachment spoof, LaunchProtect (03/19/04)
• penfold_at_dlofnep.com
  • bblog 0.7.2 cross site scripting (03/26/04)
• Pentest Security Alerts
  • ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow (03/18/04)
• Pete Fin***n
  • new security alert #66 issued in Oracle web cache (03/16/04)
• Peter Watkins
  • Re: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation (03/05/04)
• Peter Winter-Smith
  • Establishing contact with Nullsoft (03/09/04)
• Phantasmal Phantasmagoria
  • Re: The Cult of a Cardinal Number (03/04/04)
  • The Cult of a Cardinal Number (03/02/04)
• please_reply_to_security_at_sco.com
  • OpenLinux: mc Updated packages resolve local buffer overflow vulnerability (03/26/04)
  • OpenLinux: mutt remote buffer overflow (03/26/04)
  • OpenLinux: cups denial of service vulnerability (03/04/04)
  • OpenLinux: Gnupg (gpg) severe bug could compromise almost all ElGamal keys (03/03/04)
  • OpenLinux: screen buffer overflow (03/03/04)
  • OpenLinux: rsync heap based overflow (03/03/04)
  • OpenLinux: Integer overflow may allow local users to cause a denial of service or possibly execute arbitrary code (03/02/04)
• pokley
  • [SCAN Associates Sdn Bhd Security Advisory] phpBB 2.0.6 and below sql injection (03/14/04)
• programming_rocks1_at_hotmail.com
  • Re: mac osx- admin service buffer overflow (03/19/04)
  • mac osx- admin service buffer overflow (03/19/04)
• Q?=ShelzZQ=20?=
  • vuln (03/28/04)
• Rafel Ivgi, The-Insider
  • Internet Explorer Causing Explorer.exe - Null Pointer Crash (03/19/04)
  • VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass (03/15/04)
  • Invision Power Board v1.3 Final Cross Site Scripting 2 - Addon (03/09/04)
  • Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity (03/05/04)
  • VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity (03/05/04)
• Ravish
  • RE: VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity (03/08/04)
• Rene
  • clamd - NEVER use "%f" in your "VirusEvent" (03/30/04)
• Robert C. Auch
  • RE: SonicWall Firewall DoS, ARP Flood, Network Mapping (03/03/04)
• Roberto Dapino
  • DSL Modem Ericsson HM220dp Exploit (03/21/04)
• roozbeh afrasiabi
  • Re: IE ms-its: and mk:@MSITStore: vulnerability (03/31/04)
  • Re: new internet explorer exploit (was new worm) (03/31/04)
  • IE ms-its: and mk:@MSITStore: vulnerability (03/28/04)
• S-Quadra Security Research
  • CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities (03/31/04)
  • ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow (03/16/04)
  • Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities (03/12/04)
  • Spider Sales shopping cart software multiple security vulnerabilities (03/03/04)
• s.zdrojewski_at_itvirtualcommunity.net
  • R: UPDATED: MS Word - password protection vulnerabilty (03/26/04)
• Sam
  • iss_pam1.dll remote exploits (03/28/04)
• saudi linux
  • Vcard 2.8 uninstall script problem (03/17/04)
• Sebastian
  • Re: Format string bug in EpicGames Unreal engine (03/11/04)
• security team 0seen
  • Wftpd stat Command Remote Vulnerability Exploit (03/03/04)
• SGI Security Coordinator
  • SGI Advanced Linux Environment security update #16 (03/26/04)
  • SGI Advanced Linux Environment security update #15 (03/26/04)
  • SGI Advanced Linux Environment security update #14 (03/12/04)
  • SGI Advanced Linux Environment security update #13 (03/03/04)
• Sharif Torpis
  • IEEE Security & Privacy CFP (03/04/04)
• Shaun Colley
  • Re: cdp buffer overflow vulnerability - updated details (03/31/04)
  • cdp buffer overflow vulnerability (03/31/04)
  • phpBB2 2.0.8 privmsg.php SQL injection patch (critical). (03/26/04)
  • mysqlbug tmpfile/symlink vulnerability. (03/24/04)
  • xine-check/xine-bugreport symlink vulnerability. (03/20/04)
  • Samba 'smbprint' script tmpfile vulnerability. (03/19/04)
  • Metamail 'extcompose' script Symlink Vulnerability (03/12/04)
  • RE: Outlook mailto: URL argument injection vulnerability (03/11/04)
  • Invision Power Board 1.3 Final Path Disclosure Vulnerability (03/05/04)
  • Coreutils 'dir' integer overflow vulnerability. (03/02/04)
  • Motorola T720 cell phone DoS vulnerability. (03/01/04)
• Simon Boulet
  • WebCT Campus Edition 4.1 - Cross site scripting using CSS @import (03/29/04)
• spender_at_grsecurity.net
  • systrace silently patches full local bypass vulnerability on Linux (03/27/04)
• spiffomatic 64
  • NetSupport School Pro: Password Encryption Weaknesses (03/26/04)
• Stacy Martin
  • Re: PLAXO: is that a cure or a disease? (03/18/04)
• staff_at_der-keiler.de
  • E-mail account disabling warning. (03/05/04)
• stanislav shalunov
  • Re: IPv4 fragmentation --> The Rose Attack (03/31/04)
• stealth
  • Re: systrace silently patches full local bypass vulnerability on Linux (03/29/04)
  • Announcing full functional adore-ng rootkit for 2.6 Kernel (03/11/04)
• Stefan Esser
  • Advisory 03/2004: Multiple (13) Ethereal remote overflows (03/23/04)
• Stefan Nordhausen
  • Symlink Vulnerability in GNU automake <1.8.3 (03/08/04)
• Steve Browning
  • Strange traffic - Outgoing TCP 3127/3198 (Not mydoom) New worm? (03/27/04)
• Steve Kemp
  • freshmeat.net: XSS Attack due to improper comment filtering. (03/26/04)
• sullo_at_cirt.net
  • Exensive cPanel Cross Site Scripting (03/30/04)
• Sym Security
  • Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b (03/19/04)
  • Re: Norton AntiVirus 2002 fails to scan files with ... [2'nd... UPDATED] Message-ID: 20040306040833.28300 (03/11/04)
• t4c [Founder of GHCIF]
  • Re: New phpBB ViewTopic.php Cross Site Scripting Vulnerability (03/02/04)
• Thomas Biege
  • SUSE Security Announcement: openssl (SuSE-SA:2004:007) (03/17/04)
• Thor Larholm
  • RE: new internet explorer exploit (was new worm) (03/30/04)
  • RE: New Internet Explorer Cross Zone/Site Scripting Vulnerability (03/03/04)
• Tim Yamin
  • [ GLSA 200403-05 ] UUDeview MIME Buffer Overflow (03/28/04)
  • [ GLSA 200403-05 ] Linux kernel do_mremap local privilege escalation vulnerability (03/28/04)
  • [ GLSA 200403-02 ] Linux kernel do_mremap local privilege escalation vulnerability (03/07/04)
  • [ GLSA 200403-01 ] Libxml2 URI Parsing Buffer Overflow Vulnerabilities (03/07/04)
• Tobias Welter
  • Winamp 5.02 Long Filename Buffer Overflow Vulnerability (03/19/04)
• Todd C. Campbell
  • Re: Open the WS_FTP Server backdoor to SYSTEM (03/23/04)
• Todd Chapman
  • Dark Age of Camelot login client vulnerability to man in the middle attack (03/24/04)
  • Re: Unreal engine updates and Battle Mages advisory (03/11/04)
• Tri Huynh
  • Re: TrendMicro (not Macro) Interscan Viruswall Directory Traversal (03/25/04)
  • TrendMacro Interscan Viruswall Directory Traversal (03/24/04)
• Trustix Security Advisor
  • TSLSA-2004-0017 - apache (03/30/04)
  • TSLSA-2004-0015 - tcpdump (03/30/04)
  • TSLSA-2004-0011 - sysstat (03/18/04)
  • TSLSA-2004-0012 - openssl (03/18/04)
  • TSLSA-2004-0010 - libxml2 (03/06/04)
  • TSLSA-2004-0009 - nfs-utils (03/06/04)
• Ulf Härnhammar
  • Re: [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities (03/25/04)
  • GNU Anubis buffer overflows and format string bugs (03/04/04)
• Vincenzo Ciaglia
  • LNSA-#2004-0007: Multiple security problems in Ethereal (03/29/04)
  • LNSA-#2004-0006: bug workaround for Apache 2.0.48 (03/25/04)
  • LNSA-#2004-0004: libxml2 buffer overflow (03/04/04)
• Vizzy
  • eSignal v7 remote buffer overflow (exploit) (03/25/04)
• Void
  • Re: new internet explorer exploit (was new worm) (03/29/04)
• Walter Wart
  • Re: MS Security Response is a bunch of half-witted ***s (03/12/04)
• wirepair
  • HP Web JetAdmin vulnerabilities. (03/24/04)
• WU Fei Liang
  • Tomcat 5.0.14: remote DoS (03/26/04)
• xeno_at_hush.ai
  • RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (03/03/04)
  • SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (03/02/04)
• Yanosz
  • phpkit suffers (reale stupid) XSS vuln. (03/30/04)

Last message date: 03/31/04
Archived on: 03/31/04 CEST

---

357 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2004-03