SecurityFocus Bugtraq
By Author

392 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 04/01/04
Ending: 04/30/04

• 'ken'_at_FTU
  • Microsoft IE iframe src DoS already reported to Microsoft (04/08/04)
• 3APA3A
  • SECURITY.NNOV: Sambar security quest (04/30/04)
  • Re[2]: [Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/29/04)
  • Re: Spammers can hide behind 'Email a friend/article' scripts. (04/27/04)
  • Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (04/20/04)
• aborg_at_mca.org.mt
  • MS Patches last Mon - Recap (04/18/04)
  • MS Patches last Wed - SOLUTION (04/18/04)
  • After Ms patches last Wed ... (04/16/04)
• Adam Zabrocki
  • Re: Apache - all versions vulnerability in OLD procesors. (04/26/04)
  • Apache - all versions vulnerability in OLD procesors. (04/24/04)
• advisories
  • Netegrity SiteMinder Affiliate Agent Cookie Overflow (04/23/04)
  • Potential Microsoft PCT worm (MS04-011) (04/23/04)
• advisories_at_atstake.com
  • Netegrity SiteMinder Affiliate Agent Cookie Overflow (04/23/04)
• advisory_at_security-corporation.com
  • [SCSA-028] Nuked-Klan Multiple Vulnerabilities (04/17/04)
• Aida Escriva-Sammer
  • [ GLSA 200404-11 ] Multiple Vulnerabilities in pwlib (04/09/04)
  • [ GLSA 200404-02 ] KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability (04/06/04)
• Alex Behar
  • Re: NcFTP - password leaking (04/20/04)
• Alex Cruz
  • Re: After Ms patches last Wed ... (04/19/04)
• Alex Gen
  • new strange worm (04/12/04)
• Alun Jones
  • RE: After Ms patches last Wed ... (04/17/04)
• Alvin Alex
  • SquirrelMail Cross Scripting Attacks.... (04/29/04)
• Amer Karim
  • RE: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/10/04)
• Andy Shaw
  • Re: After Ms patches last Wed ... (04/17/04)
• Arman Nayyeri
  • Microsoft Internet Explorer BMP file memory DoS vulnerability (04/11/04)
  • Microsoft Outlook Express EML file Crash vulnerability (04/11/04)
  • Adobe Acrobat Reader PDF file DoS vulnerability (04/11/04)
• Aviram Jenik
  • KPhone STUN DoS (Malformed STUN Packets) (04/19/04)
  • Zaep AntiSpam Cross Site Scripting (04/19/04)
• ax09001h
  • Dameware Mini Remote Control Version 4.2 – Weak Key Agreement Scheme (04/30/04)
• Bartek Nowotarski
  • Cross Site Scripting in Moodle < 1.3 (04/30/04)
• Ben Garvey
  • IE 6 Print Without Prompt (04/12/04)
• Bipin Gautam
  • Re: Norton AntiVirus nested file manual scan bypass..... (04/18/04)
  • Norton AntiVirus nested file manual scan bypass..... (04/17/04)
  • Browser bugs [DoS] ... where will you draw a line? (04/09/04)
• BlueRaven
  • Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (04/28/04)
• Bryce Porter
  • RE: [Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/28/04)
• BugtraQ
  • RE: Netsky.R, auto execute w/ IE6 ? (04/06/04)
  • Netsky.R, auto execute w/ IE6 ? (04/02/04)
• bugzilla_at_redhat.com
  • [RHSA-2004:175-01] Updated utempter package fixes vulnerability (04/30/04)
  • [RHSA-2004:181-01] Updated libpng packages fix crash (04/30/04)
  • [RHSA-2004:163-01] Updated OpenOffice packages fix security vulnerability in neon (04/30/04)
  • [RHSA-2004:173-00] Updated mc packages resolve several vulnerabilities (04/30/04)
  • [RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities (04/30/04)
  • [RHSA-2004:177-01] An updated X-Chat package fixes vulnerability in Socks-5 proxy (04/30/04)
  • [RHSA-2004:182-01] Updated httpd packages fix mod_ssl security issue (04/30/04)
  • [RHSA-2004:166-01] Updated kernel packages resolve security vulnerabilities (04/21/04)
  • [RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon (04/15/04)
• Carlos Eduardo Pinheiro
  • Re: GNU Sharutils buffer overflow vulnerability. (04/07/04)
• Chris Adams
  • Re: Apache - all versions vulnerability in OLD procesors. (04/25/04)
  • Re: Apache - all versions vulnerability in OLD procesors. (04/25/04)
• Chris Brenton
  • Re: IPv4 fragmentation --> The Rose Attack (04/01/04)
• Chris Johnson
  • Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
  • Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
• Chris Thompson
  • Solaris 9 patch 113579-03 introduces a NIS security bug (04/19/04)
• Chris Wysopal
  • Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/03/04)
• christophe barbe
  • Re: Pikachu -Turn on WEP ! (04/01/04)
• Christopher T. Beers
  • Re: Horde webmail: mysql access (04/27/04)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Vulnerabilities in SNMP Message Processing (04/21/04)
  • Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS Based Cisco Products (04/20/04)
  • Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS-Based Cisco Products (04/20/04)
  • Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability (04/15/04)
  • UPDATE: Cisco Security Notice: Dictionary Attack on Cisco LEAP Vulnerability (04/12/04)
  • Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability (04/08/04)
  • Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (04/07/04)
  • Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (04/07/04)
• CoKi
  • Format String in Cherokee (04/20/04)
• Conectiva Updates
  • [CLA-2004:837] Conectiva Security Announcement - mod_python (04/12/04)
  • [CLA-2004:838] Conectiva Security Announcement - squid (04/12/04)
  • [CLA-2004:836] Conectiva Security Announcement - libxml2 (03/31/04)
  • [CLA-2004:835] Conectiva Security Announcement - ethereal (03/31/04)
  • [CLA-2004:834] Conectiva Security Announcement - openssl (03/31/04)
• Crist J. Clark
  • Re: IPv4 fragmentation --> The Rose Attack (04/01/04)
• cyber_flash_at_hotmail.com
  • Spammers can hide behind 'Email a friend/article' scripts. (04/26/04)
• Damien Miller
  • Re: BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE) (04/13/04)
• Damjan Kreft
  • ZA Security Hole (04/14/04)
• Dan Harkless
  • Re: After Ms patches last Wed ... (04/17/04)
• Dan Yefimov
  • Re: GNU Sharutils buffer overflow vulnerability. (04/10/04)
• Dariusz 'Officerrr' Kolasinski
  • phpBB modified by Przemo arbitary code execution (04/19/04)
  • phpBB modified by Przemo arbitary code execution (04/19/04)
• Darren Reed
  • Re: IPv4 fragmentation --> The Rose Attack (04/10/04)
  • Re: IPv4 fragmentation --> The Rose Attack (04/09/04)
  • Re: IPv4 fragmentation --> The Rose Attack (04/08/04)
• Dave Aitel
  • Enterprise Application Security (04/02/04)
• Dave Paris
  • RE: cdp buffer overflow vulnerability (03/31/04)
• David Ahmad
  • [cliph@isec.pl: Linux kernel setsockopt MCAST_MSFILTER integer overflow] (04/20/04)
  • NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP (04/20/04)
  • [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted] (04/16/04)
  • [product-security@apple.com: APPLE-SA-2004-04-05 Security Update 2004-04-05]] (04/06/04)
  • [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted] (04/03/04)
• David Barroso Berrueta
  • MS04-011 SSL Remote DoS PoC (04/17/04)
• David Hayden
  • RE: After Ms patches last Wed ... (04/30/04)
  • RE: After Ms patches last Wed ... (04/18/04)
• David Wilson
  • Re: ZA Security Hole (04/20/04)
• Derek Soeder
  • EEYE: Symantec Multiple Firewall TCP Options Denial of Service (04/23/04)
• Didier Arenzana
  • Re: GNU Sharutils buffer overflow vulnerability. (04/07/04)
• Donato Ferrante
  • resources consumption in DiGi WWW Server (04/27/04)
  • DoS in NETFile FTP/Web Server (04/19/04)
  • DoS in Crackalaka 1.0.8 (04/09/04)
  • Index viewing in imgSvr 0.4 (04/01/04)
• Drew Copley
  • EEYE: Yahoo! Mail Account Filter Overflow Hijack (04/21/04)
  • Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (03/31/04)
• E.Kellinis
  • IE Certificate Stealing (Phising) bug (04/30/04)
  • Re: Kerio Personal Firewall 4 and IE 6 "Bug" (04/07/04)
  • Kerio Personal Firewall 4.0.13 - Remote DoS (Crash) (04/07/04)
  • Internet Explorer 6 - Crash (04/07/04)
  • Kerio Personal Firewall 4 and IE 6 "Bug" (04/07/04)
• EnGarde Secure Linux
  • [ESA-20040428-004] 'kernel' Several security and bug fixes (04/28/04)
• Eye on Security India
  • Monit <= 4.2 Remote Root Exploit (04/12/04)
• fbr
  • Open Source Vulnerability Database Opens for Public Access (03/31/04)
• Felipe Neuwald
  • BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE) (04/12/04)
• Foundstone Labs
  • Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0 (04/06/04)
• Fozzy
  • Vuln Info Disclosure may become illegal in France [was: Re: Bugfinder Being Indicted As Criminal] (04/05/04)
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/03/04)
• Frank v Waveren
  • Re: NcFTP - password leaking (04/20/04)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-04:07.cvs (04/15/04)
• FX
  • Re: HP Web JetAdmin vulnerabilities. (04/27/04)
• Gandalf The White
  • Source Code To Test IPv4 fragmentation --> The Rose Attack (04/27/04)
• gandalf_at_digital.net
  • Re: IPv4 fragmentation --> The Rose Attack (04/10/04)
  • Re: IPv4 fragmentation --> The Rose Attack (04/10/04)
  • Re: IPv4 fragmentation --> The Rose Attack (04/09/04)
• Gavin Hanover
  • Re: new IE vurn (04/05/04)
• geoff.froh_at_densho.org
  • Re: After Ms patches last Wed ... (04/17/04)
• Geoffrey
  • Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
• Greg Kujawa
  • Re: After Ms patches last Wed ... (04/20/04)
• gsicht gsicht
  • Gnome nautilus bug (04/12/04)
  • monit 4.1 POC (04/09/04)
• H D Moore
  • Metasploit Framework 2.0 Released! (04/07/04)
• Himanshu Singh
  • Pikachu -Turn on WEP ! (04/01/04)
• houseofdabus HOD
  • MS04011 Lsasrv.dll RPC buffer overflow remote exploit (PoC) (04/29/04)
• Hugo van der Kooij
  • Re: ZA Security Hole (04/16/04)
• idlabs-advisories_at_idefense.com
  • [Full-Disclosure] iDEFENSE Security Advisory 04.15.04: RealNetworks Helix Universal Server Denial of Service Vulnerability (04/15/04)
  • [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability (04/05/04)
• Imperva Application Defense Center
  • RE: New Paper - SQL Injection Signatures Evasion (04/26/04)
  • New Paper - SQL Injection Signatures Evasion (04/19/04)
• IO ERROR
  • Citadel/UX 6.20 fixes local permissions vulnerability (04/12/04)
• Ioannis Migadakis
  • Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache (04/08/04)
• Ivaylo Kostadinov
  • Re: Google using Expired Cert and SSLv2 (04/01/04)
• jaguar
  • Include vulnerability in GEMITEL v 3.50 (04/15/04)
• Jan Minar
  • Re: Idea of CAW (Creation of Attack Wood) (04/21/04)
• Janek Vind
  • [waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6] (04/24/04)
  • [waraxe-2004-SA#025 - Multiple vulnerabilities in Protector System 1.15b1 for PhpNuke] (04/23/04)
  • [waraxe-2004-SA#021 - Multiple vulnerabilities in phprofession 2.5 module for PostNuke] (04/21/04)
  • [waraxe-2004-SA#022 - Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2] (04/22/04)
  • [waraxe-2004-SA#019 - Critical sql injection bug in Phorum 3.4.7] (04/18/04)
  • [waraxe-2004-SA#016 - Cross-Site Scripting aka XSS in phpnuke 6.x-7.2 part 3] (04/12/04)
  • [waraxe-2004-SA#018 - Admin-level authentication bypass in phpnuke 6.x-7.2] (04/12/04)
  • [waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2] (04/12/04)
  • [waraxe-2004-SA#014 - Cross-Site Scripting aka XSS in AzDGDatingLite] (04/08/04)
  • [waraxe-2004-SA#015 - Multiple vulnerabilities in NukeCalendar v1.1.a] (04/08/04)
• JeiAr
  • Multiple Vulnerabilities In OpenBB (04/25/04)
  • Multiple Vulnerabilities In Tiki CMS/Groupware [ TikiWiki ] (04/11/04)
• jeremy_at_33ad.org
  • Re: Microsoft Internet Explorer BMP file memory DoS vulnerability (04/13/04)
• Jerry Winegarden
  • Re: After Ms patches last Wed ... (04/19/04)
• Jodrell Dimaculangan
  • RE: New Worm??? - High level of activity on port 445 (04/29/04)
• John Morris
  • HP Web Jetadmin (04/30/04)
• Jonathan Angliss
  • Re: SquirrelMail Cross Scripting Attacks.... (04/30/04)
  • Re: Squirrelmail Chpasswod bof (04/17/04)
• Joshua J. Berry
  • [ GLSA 200404-21 ] Multiple Vulnerabilities in Samba (04/29/04)
  • [ GLSA 200404-18 ] Multiple Vulnerabilities in ssmtp (04/27/04)
  • [ GLSA 200404-20 ] Multiple vulnerabilities in xine (04/27/04)
  • [ GLSA 200404-19 ] Buffer overflows and format string (04/27/04)
  • [ GLSA 200404-03 ] Tcpdump Vulnerabilities in ISAKMP Parsing (04/06/04)
• Joshua Wright
  • Release of Cisco Attack tool Asleap (04/07/04)
• Jouko Pynnonen
  • Microsoft Help and Support Center argument injection vulnerability (04/13/04)
• JQ
  • Advanced Guestbook 2.2 -- SQL Injection Exploit (04/21/04)
• Juanma Merino
  • IBM Director 3.1 Windows Agent Remote DoS (04/05/04)
• Juliano Rizzo
  • A technical description of the SSL PCT vulnerability (CVE-2003-0719) (04/30/04)
• K-OTiK Security
  • Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/05/04)
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/04/04)
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/02/04)
• K. K. Mookhey
  • Re: New Paper - SQL Injection Signatures Evasion (04/26/04)
  • Network Intelligence Advisory - Denial of Service Vulnerability in ColdFusion MX (04/17/04)
• k1LL3r B0y
  • Multiple vulnerabilities paFileDB (04/27/04)
  • Multiple vulnerabilities PHP-Nuke Video Gallery Module for PHP-Nuke (04/26/04)
• Kamran Muzaffer
  • RE: Microsoft Outlook Express EML file Crash vulnerability (04/13/04)
• kcope
  • eMule <= 0.42d Remote Exploit (04/11/04)
• KF (lists)
  • Re: [Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/27/04)
• Kim Scarborough
  • "Delete anti-virus and firewall software" --Microsoft (04/16/04)
• kincses zoli
  • Idea of CAW (Creation of Attack Wood) (04/18/04)
  • after ms patches... (04/18/04)
• Konstantin Gavrilenko
  • NcFTP - password leaking (04/20/04)
• Kostya Kortchinsky
  • eMule v0.42d Buffer Overflow (04/03/04)
• Kurt Lieber
  • [ GLSA 200404-17 ] ipsec-tools and iputils contain a remote DoS vulnerability (04/24/04)
  • [ GLSA 200404-15 ] XChat 2.0.x SOCKS5 Vulnerability (04/19/04)
  • [ GLSA 200404-16 ] Multiple new security vulnerabilities in monit (04/19/04)
  • [ GLSA 200404-14 ] Multiple format string vulnerabilities in cadaver (04/19/04)
  • [ GLSA 200404-12 ] Scorched 3D server chat box format string vulnerability (04/09/04)
  • [ GLSA 200404-09 ] Cross-realm trust vulnerability in Heimdal (04/09/04)
  • [ GLSA 200404-08 ] GNU Automake symbolic link vulnerability (04/08/04)
  • [ GLSA 200404-04 ] Multiple vulnerabilities in sysstat (04/07/04)
  • [ GLSA 200404-07 ] ClamAV RAR Archive Remote Denial Of Service Vulnerability (04/07/04)
  • [ GLSA 200404-06 ] Util-linux login may leak sensitive data (04/07/04)
  • [ GLSA 200404-05 ] ipsec-tools contains an X.509 certificates vulnerability (04/07/04)
• Kyle Duren
  • Samsung SmartEther SS6215S Switch (04/26/04)
• Liu Die Yu
  • Releasing full source code of WinBlox (04/01/04)
• Luca Ercoli
  • Remote Format String Vulnerabilities in eXtremail (04/25/04)
  • WinSCP Denial of Service (04/15/04)
• Luigi Auriemma
  • Arbitrary file overwriting in Unreal engine through UMOD (04/22/04)
  • Re: DoS in Rsniff 1.0 (04/09/04)
  • DoS in Rsniff 1.0 (04/09/04)
  • Format string bug in IGI 2: Covert Strike 1.3 (04/05/04)
• Magosányi Árpád
  • Re: Idea of CAW (Creation of Attack Wood) (04/20/04)
• Mandrake Linux Security Team
  • MDKSA-2004:039 - Updated mc packages fix vulnerabilities (04/30/04)
  • MDKSA-2004:040 - Updated libpng packages fix vulnerability (04/30/04)
  • MDKSA-2004:038 - Updated sysklogd packages fix vulnerability (04/29/04)
  • MDKSA-2004:037 - Updated kernel packages fix multiple vulnerabilities (04/27/04)
  • MDKSA-2004:031-1 - Updated utempter packages fix several vulnerabilities (04/22/04)
  • MDKSA-2004:035 - Updated samba packages fix privilege escalation vulnerability (04/20/04)
  • MDKSA-2004:034 - Updated MySQL packages fix temporary file insecurities (04/20/04)
  • MDKSA-2004:032 - Updated libneon packages fix temporary file insecurities (04/20/04)
  • MDKSA-2004:033 - Updated xine-ui packages fix temporary file insecurities (04/20/04)
  • MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities (04/19/04)
  • MDKSA-2004:027 - Updated ipsec-tools packages fix vulnerability in racoon (04/09/04)
  • MDKSA-2004:026 - Updated mplayer packages fix remotely exploitable vulnerability (04/06/04)
• Manuel Lopez
  • Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. (04/15/04)
• Marc Maiffret
  • EEYE: Windows Expand-Down Data Segment Local Privilege Escalation (04/13/04)
  • EEYE: Windows Local Security Authority Service Remote Buffer Overflow (04/13/04)
• Mariano Firpo
  • Re: Backdoor in X-Micro WLAN 11b Broadband Router (04/16/04)
• Mark Litchfield
  • Support Contact Info (04/06/04)
• martin f krafft
  • Re: Squirrelmail Chpasswod bof (04/17/04)
• Martin Nedbal
  • Re: SMC Routers have remote administration enabled by default (04/29/04)
• Martin Schulze
  • [SECURITY] [DSA 498-1] New libpng packages fix denial of service (04/30/04)
  • [SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities (04/29/04)
  • [SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution (04/29/04)
  • [SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm) (04/26/04)
  • [SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution (04/21/04)
  • [SECURITY] [DSA 489-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (04/17/04)
  • [SECURITY] [DSA 490-1] New Zope packages fix arbitrary code execution (04/17/04)
  • [SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips) (04/17/04)
  • [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386) (04/14/04)
  • [SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation (04/06/04)
  • [SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa) (04/05/04)
  • [SECURITY] [DSA 471-1] New interchange packages fix information leak (04/02/04)
  • [SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa) (04/01/04)
• Matias Neiff
  • Squirrelmail Chpasswod bof (04/17/04)
• Matt Zimmerman
  • [SECURITY] [DSA 492-1] New iproute packages fix denial of service (04/19/04)
  • [SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory (04/17/04)
  • [SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities (04/17/04)
  • [SECURITY] [DSA 431-2] New perl packages fix information leak in suidperl (04/17/04)
  • [SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities (04/17/04)
  • [SECURITY] [DSA 478-1] New tcpdump packages fix denial of service (04/07/04)
  • [SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability (04/06/04)
  • [SECURITY] [DSA 473-1] New oftpd packages fix denial of service (04/04/04)
  • [SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation (04/04/04)
  • [SECURITY] [DSA 474-1] New squid packages fix ACL bypass (04/04/04)
  • [SECURITY] [DSA 472-1] New fte packages fix buffer overflows (04/04/04)
• Matthew S. Hamrick
  • Google using Expired Cert and SSLv2 (03/31/04)
• matthias_at_astrum.ch
  • Re: Spammers can hide behind 'Email a friend/article' scripts. (04/27/04)
• mattmurphy_at_kc.rr.com
  • Advisory: Multiple Vulnerabilities in Monit (04/05/04)
• Max Moser
  • Automated wireless client penetration tool "hotspotter" released. (04/05/04)
• mgotts_at_2roads.com
  • Re: new internet explorer exploit (was new worm) (03/31/04)
• Michael Curtis
  • Re: SMC Routers have remote administration enabled by default (04/29/04)
• Michael Gschwandtner
  • Re: Perl code exploting TCP not checking RST ACK. (04/27/04)
• Michael Scheidell
  • 3com NBX VOIP NetSet Denial of Service Attack (04/29/04)
• NetBSD Security-Officer
  • NetBSD Security Advisory 2004-005: Denial of service vulnerabilities in OpenSSL (04/21/04)
  • NetBSD Security Advisory 2004-006: TCP protocol and implementation vulnerability (04/21/04)
• NGSSoftware Insight Security Research
  • REAL One Player R3T File Format Stack Overflow (04/07/04)
  • Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B) (04/05/04)
• Nikita V. Youshchenko
  • Possible DoS on Linux kernel 2.4 and 2.6 using sigqueue overflow. (04/12/04)
• Noah Dunker
  • RE: Kerio Personal Firewall 4 and IE 6 "Bug" (04/07/04)
  • RE: Kerio Personal Firewall 4 and IE 6 "Bug" (04/07/04)
• nolife
  • [HOTFIX] setsockopt kernel vulnerability (04/26/04)
• Oliver Lavery
  • RE: Followup: vuln in WinBlox monitor for winnt (03/31/04)
  • TOOL: Adder - runtime patching in python (03/31/04)
• OpenPKG
  • [OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd) (04/30/04)
  • [OpenPKG-SA-2004.017] OpenPKG Security Advisory (png) (04/29/04)
  • [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (04/16/04)
  • [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) (04/16/04)
  • [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql) (04/14/04)
  • [OpenPKG-SA-2004.012] OpenPKG Security Advisory (fetchmail) (04/08/04)
  • [OpenPKG-SA-2004.011] OpenPKG Security Advisory (sharutils) (04/07/04)
  • [OpenPKG-SA-2004.010] OpenPKG Security Advisory (tcpdump) (04/07/04)
  • [OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc) (04/05/04)
  • [OpenPKG-SA-2004.008] OpenPKG Security Advisory (squid) (04/01/04)
• Ory Segal
  • Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 (04/05/04)
• p dont think
  • Re: Squirrelmail Chpasswod bof (04/27/04)
• Pablo G. Sabbatella
  • Re: ZA Security Hole (04/16/04)
• Patrick Brauch
  • Re: ZA Security Hole (04/21/04)
• Patrik Karlsson
  • cqure.net.20040430.citrixmetaframe (04/30/04)
• Paul
  • Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. (03/31/04)
• Paul Starzetz
  • Re: IPv4 fragmentation --> The Rose Attack (04/08/04)
• Paul Szabo
  • Eudora 6.1 is evil (04/19/04)
• Pete Herzog
  • Papers: The Invisible Catalog (04/06/04)
• Peter Geissler
  • Re: Squirrelmail Chpasswod bof (04/19/04)
• Peter J. Holzer
  • Re: Apache - all versions vulnerability in OLD procesors. (04/26/04)
• Peter Pentchev
  • Re: Apache - all versions vulnerability in OLD procesors. (04/28/04)
• Peter Winter-Smith
  • NGSSoftware Insight Security Research Advisory (04/05/04)
• phaser-X
  • RE: After Ms patches last Wed ... (04/17/04)
  • Re: After Ms patches last Wed ... (04/16/04)
• Philip Barnham
  • Fw: new IE vurn (04/05/04)
• plasmahh_at_informatik.uni-bremen.de
  • Re: After Ms patches last Wed ... (04/18/04)
• please_reply_to_security_at_sco.com
  • UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : perl unsafe Safe compartment (04/01/04)
  • OpenLinux: vim arbitrary commands execution through modelines (04/01/04)
  • OpenLinux: util-linux could leak sensitive data (04/01/04)
• Polazzo Justin
  • RE: [AppSec-research] New Worm/Virus April 8th (04/08/04)
  • New Worm/Virus April 8th (04/08/04)
• priestmaster_at_sms.at
  • ssmtp insecure file creation (04/18/04)
• Priv8 Security Research
  • PSR - #2004-002 Remote - LCDProc (04/08/04)
  • PSR - #2004-001 Remote - LCDProc (04/08/04)
• Rafel Ivgi, The-Insider
  • BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (04/19/04)
  • Internet Explorer XSS published unpatched in SP1 AND SP2 (04/17/04)
  • Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow (04/07/04)
  • Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure (04/07/04)
  • Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S) (04/06/04)
  • blaxxun3D(blaxxun Platform) 7 - Remote Buffer Overflow (04/06/04)
• Ralf Spenneberg
  • CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle attacks and unauthorized connections (04/07/04)
• Ready Response
  • phpBB 2.0.8a and lower - IP spoofing vulnerability (04/19/04)
• Renaud Deraison
  • Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (04/04/04)
• Rene
  • SuSEs YaST Online Update - possible symlink attack (04/05/04)
• Rene Wagner
  • UPDATE: LCDproc Buffer Overflow and Format String Vulnerabilities (04/14/04)
• Richard M. Smith
  • RE: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
• Richard Miller
  • Phrack #62 Call for Papers (04/08/04)
• rip_at_overflow.no
  • Re: Squirrelmail Chpasswod bof (04/19/04)
• RISKO Gergely
  • NEW backdoor in X-Micro WLAN 11b Broadband Router (04/16/04)
  • Backdoor in X-Micro WLAN 11b Broadband Router (04/10/04)
• Rodrigo Gutierrez
  • Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/26/04)
  • RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/25/04)
  • Microsoft's Explorer and Internet Explorer long share name buffer overflow. (04/25/04)
• Roger A. Grimes
  • RE: New Worm??? - High level of activity on port 445 (04/29/04)
• Romain Francoise
  • Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (04/09/04)
• Roman Drahtmueller
  • Re: SuSEs YaST Online Update - possible symlink attack (04/07/04)
• S G Masood
  • McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC] (04/07/04)
• Sam
  • Solaris vfs_getvfssw() local kernel exploit (04/07/04)
• Sami POTIRCA
  • Re: BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (04/20/04)
• Samps
  • Re: ZA Security Hole (04/16/04)
• Samuel Walker
  • Re: HP Web JetAdmin vulnerabilities. (04/29/04)
• Scott Gifford
  • Re: After Ms patches last Wed ... (04/17/04)
• Scott Johnson
  • Re: eSignal v7 remote buffer overflow (04/07/04)
• securityguy_at_dslextreme.com
  • RE: New Worm/Virus April 8th (04/08/04)
• securma massine
  • Exchange pop3 remote exploit (04/20/04)
• SGI Security Coordinator
  • SGI Advanced Linux Environment security update #19 (04/28/04)
  • SGI ProPack v2.4: Kernel update #3 (04/27/04)
  • SGI Advanced Linux Environment security update #18 (04/22/04)
  • Vulnerabilities in long-lived TCP connections on SGI systems (04/21/04)
  • SGI Advanced Linux Environment security update #17 (04/08/04)
  • IRIX Update Some Network Drivers May Leak Data (04/03/04)
  • IRIX ftpd ftp_syslog issue with anonymous FTP (04/02/04)
• Shaun Colley
  • Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (04/19/04)
  • Re: GNU Sharutils buffer overflow vulnerability (04/07/04)
  • GNU Sharutils buffer overflow vulnerability. (04/06/04)
  • Texutil symlink vulnerability. (04/04/04)
• sig_at_flaming.tolna.net
  • Horde webmail: mysql access (04/25/04)
• Slackware Security Team
  • [slackware-security] kernel security updates (SSA:2004-119-01) (04/28/04)
  • [slackware-security] xine security update (SSA:2004-111-01) (04/21/04)
  • [slackware-security] cvs security update (SSA:2004-108-02) (04/19/04)
  • [slackware-security] utempter security update (SSA:2004-110-01) (04/19/04)
  • [slackware-security] tcpdump denial of service (SSA:2004-108-01) (04/17/04)
• soby_at_hushmail.com
  • RE: US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP (04/25/04)
• spiffomatic 64
  • SCT javascript execution vulnerability (04/15/04)
• stanislav shalunov
  • Re: IPv4 fragmentation --> The Rose Attack (04/01/04)
• Sudhakar-bugtraq Govindavajhala
  • Multi stage attacks on networks? (04/30/04)
• sullo_at_cirt.net
  • TCP Reset Attacks: Paper and Code Now Availble (04/23/04)
• Sym Security
  • RE: [Full-Disclosure] EEYE: Symantec Multiple Firewall TCP Options Denial of Service (04/23/04)
  • Re: Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow, Apr 7 2004 2:22AM (04/08/04)
• T.H. Haymore
  • Re: After Ms patches last Wed ... (04/17/04)
• T.J. Ferraro
  • Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (04/07/04)
• Taylan Develioglu
  • RE: IPv4 fragmentation --> The Rose Attack (04/12/04)
• Thomas Wana
  • void.at - neon format string bugs (04/16/04)
• Thor Larholm
  • RE: New Worm??? - High level of activity on port 445 (04/29/04)
  • IETF Draft on Transmission Control Protocol security considerations (04/21/04)
  • RE: "Delete anti-virus and firewall software" --Microsoft (04/16/04)
  • RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (04/17/04)
  • FW: [Unpatched] 4 new Microsoft patches, 4 old updated, 24 vulnerabilities (04/14/04)
  • ANNOUNCE: SecLegal mailing list (04/09/04)
• Tiago Halm
  • [BUG-CORRECTION] IISShield "Server" header costumization (04/17/04)
• Tim Yamin
  • [ GLSA 200404-01 ] Insecure sandbox temporary lockfile vulnerabilities in Portage (04/06/04)
• Todd Sabin
  • Paper: Comparing binaries with graph isomorphisms (04/06/04)
• Tony Abell
  • New Worm??? - High level of activity on port 445 (04/29/04)
• Trustix Security Advisor
  • TSLSA-2004-0024 - rsync (04/30/04)
  • TSLSA-2004-0025 - multi (04/30/04)
  • TSLSA-2004-0020 - kernel (04/16/04)
• user86
  • Re: SMC Routers have remote administration enabled by default (04/29/04)
  • Re: SMC Routers have remote administration enabled by default (04/29/04)
  • SMC Routers have remote administration enabled by default (04/28/04)
• Vade 79
  • Re: cdp buffer overflow vulnerability (03/31/04)
• Valdis.Kletnieks_at_vt.edu
  • Re: Microsoft IE iframe src DoS already reported to Microsoft (04/08/04)
• Valerio Santinelli
  • [PNSA 2004-2] PostNuke Security Advisory PNSA 2004-2 (04/21/04)
• vbsubmit_at_hotmail.com
  • Re: Netsky.R, auto execute w/ IE6 ? (04/06/04)
• Ventsislav Genchev
  • Re: IPv4 fragmentation --> The Rose Attack (04/07/04)
• Vess Nedevski
  • Re: IBM Director 3.1 Windows Agent Remote DoS (04/06/04)
• Vincenzo Ciaglia
  • LNSA-#2004-0011: CVS Server and Client Vulnerabilities (04/18/04)
  • LNSA-#2004-0012: Multiple format string vulnerabilities in neon (04/18/04)
  • LNSA-#2004-0009: GNU Automake symbolic link vulnerability (04/08/04)
  • LNSA-#2004-0010: login may leak sensitive data (04/08/04)
  • LNSA-#2004-0009: GNU Automake symbolic link vulnerability (04/08/04)
  • LNSA-#2004-0008: Multiple security problems in Monit (04/06/04)
• Wojciech Purczynski
  • Linux kernel setsockopt MCAST_MSFILTER integer overflow (04/20/04)
• Xin LI
  • Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (04/29/04)
  • Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (04/21/04)
• XNUXER RESEARCH
  • Remote Exploit for Aborior's Encore Web Forum (04/03/04)

Last message date: 04/30/04
Archived on: 04/30/04 CEST

---

392 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(13)