SecurityFocus Bugtraq
By Author

417 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 08/02/04
Ending: 08/31/04

• 3APA3A
  • Microsoft updates documentation on Windows time synchronization (08/24/04)
  • Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure (08/20/04)
  • Security aspects of time synchronization infrastructure (08/19/04)
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/12/04)
  • Re[2]: Aladdin response regarding eSafe (08/02/04)
• Abdul Azis
  • Comersus 5.098 XSS Vulnerable (08/02/04)
• aborg_at_mca.org.mt
  • SideFind (08/02/04)
• Abu Lafy
  • Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (08/17/04)
• Adam Zabrocki
  • Advanced usage of system() function. (08/13/04)
• Adik
  • IpSwitch IMail Server <= ver 8.1 User Password Decryption (08/16/04)
• Advisories
  • IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service (08/25/04)
  • Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues (08/13/04)
  • Corsaire Security Advisory - Sygate Enforcer discovery packet DoS issue (08/10/04)
  • Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue (08/10/04)
  • Corsaire Security Advisory - Sygate Secure Enterprise replay issue (08/10/04)
  • Corsaire Security Advisory - Port80 Software ServerMask inconsistencies (08/10/04)
• Ahmad Muammar
  • Multiple vulnerabilities in PHP-FUSION (08/18/04)
  • Multiple vulnerabilities in eNdonesia CMS (08/04/04)
  • vulnerabilities in JetboxOne CMS (08/04/04)
• albatross_at_tim.it
  • Security Center and Windows XP clients in domain (08/31/04)
  • New MyDoom variant (08/04/04)
• Albert Puigsech Galicia
  • 7a69Adv#13 - USRobotics AP Wireless Denial of Service (08/02/04)
• Alex Keller
  • Re: New google's top query? (08/24/04)
• Allan Zhang
  • RealVNC 4.0 DoS (08/25/04)
• Amit Klein
  • HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5 (08/11/04)
  • Security contact for RSA Security (08/01/04)
• Andre Lorbach
  • RE: NETGEAR DG834G SPECIAL FEATURES (08/13/04)
• Andreas Freyvogel
  • RE: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (08/25/04)
• Andy Cuff
  • Computer Network Defence Vulnerability Alert State (08/25/04)
• Andy Dustman
  • Re: CVS woes: .cvspass (08/06/04)
• Andy Markert
  • Re: SQL Injection in CACTI (08/18/04)
• Angelo Rosiello
  • SoX Exploiter by Rosiello Security (08/02/04)
• Anthony Debhian
  • [PHP Bug] How to hide a HTTP request in the apache logs (08/07/04)
• Anthony Nemmer
  • Re: SHA-0 Broken, MD5 Rumored Broken (08/18/04)
• Anthony Petito
  • Re: Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (08/18/04)
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Audun Larsen
  • Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer (08/20/04)
• Balaram Amgoth
  • Re: Remote crash in tcpdump from OpenBSD (08/06/04)
• Barry Fitzgerald
  • Re: Fwd: New possible scam method : forged websites using XUL (Firefox) (08/03/04)
• Bart.Lansing_at_kohls.com
  • RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/06/04)
• bashis
  • Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (08/24/04)
  • Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (08/24/04)
  • [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (08/22/04)
• Bill Roemhild
  • RE: [Full-Disclosure] IpSwitch IMail Server <= ver 8.1 User Password Decryption (08/16/04)
• bill_at_dit-inc.us
  • Re: International DNS compromise? (08/06/04)
• Bipin Gautam
  • Re: Unsecure file permission of ZoneAlarm pro. (08/22/04)
  • Unsecure file permission of ZoneAlarm pro. (08/20/04)
  • Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Boren, Rich (SSRT)
  • [security bulletin] SSRT4779 - rev.0 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow (08/25/04)
  • [security bulletin] SSRT3460 rev.3 HP-UX Network traffic can cause programs to fail (08/17/04)
  • [security bulletin] SSRT4785 rev. 0 HP-UX Process Resource Manager (PRM) potential data corruption (08/10/04)
  • [security bulletin] SSRT4788 rev. 0 HP-UX Apache Remote arbitrary code execution (08/10/04)
  • [security bulletin] SSRTSSRT4778 Rev.0 Mozilla Application Suite for HP Tru64 UNIX libpng Potential Overflows (08/06/04)
  • [security bulletin] SSRT4777 HP-UX Apache, PHP remote code execution, Denial of Service (08/06/04)
  • [security bulletin] SSRT4782 rev. 1 HP-UX CIFS Server potential remote root access (08/06/04)
• Brad Herbert
  • Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (08/12/04)
• Bryan Burns
  • Re: New MyDoom variant (08/04/04)
• bugtraq_at_beyondsecurity.com
  • [2Cents on] vpopmail <= 5.4.2 (sybase vulnerability) (08/18/04)
• c0ntex_at_open-security.org
  • Xines_Mine.c Open Security Group Advisory (08/17/04)
  • Open Security Group Advisory #6 (08/17/04)
• Cedric Blancher
  • Re: SQL Injection in CACTI (08/17/04)
• chris_at_scary.beasts.org
  • CESA-2004-004: qt (08/19/04)
  • CESA-2004-001: libpng (08/04/04)
• Christoph Jeschke
  • pscript.de PFORUM XSS Vulnerability (08/15/04)
• Christopher Wagner
  • RE: Driver for display goes to a infinite loop by viewing a html! (08/17/04)
• Christopher X. Candreva
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability (08/27/04)
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server (08/25/04)
  • Cisco Security Advisory: Cisco IOS Malformed OSPF Packet Causes Reload (08/18/04)
• Colin Alston
  • Re: First vulnerabilities in the SP2 - XP ?... (08/17/04)
• Conectiva Updates
  • [CLA-2004:858] Conectiva Security Announcement - squirrelmail (08/12/04)
  • [CLA-2004:856] Conectiva Security Announcement - libpng (08/06/04)
  • [CLA-2004:857] Conectiva Security Announcement - apache (08/06/04)
• Conor Byrne
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• CoolICE
  • DOS@TFS (08/31/04)
  • Bug@thttpd (08/04/04)
  • DOS@MEHTTPS (08/02/04)
• CORE Security Technologies Advisories
  • CORE-2004-0714: Cfengine RSA Authentication Heap Corruption (08/09/04)
  • CORE-2004-0705: Vulnerabilities in PuTTY and PSCP (08/04/04)
• Criolabs
  • Vulnerabilities in Merak Webmail Server. (08/17/04)
• Cyrille Barthelemy
  • QuiXplorer directory traversal (08/14/04)
• CyruxNET
  • Cross Site Scripting in XOOPS Version 2.x Dictionary module (08/28/04)
• Dan Margolis
  • Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (08/14/04)
• Dan Pixley
  • Re: IE, Firefox, Opera DoS (08/23/04)
• Dana Hudes
  • RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/06/04)
• Daniel Souza
  • Re: Posible security bug in phpMyWebhosting (08/20/04)
• Danny
  • Re: International DNS compromise? (08/06/04)
• Dav1d
  • A new website to search & submit win exploits (08/21/04)
• dave
  • Immunity, Inc. Release: libdisassemble (08/19/04)
• Dave Aitel
  • New Paper: Microsoft Windows, a lower Total Cost of Ownership (08/13/04)
• Dave Paris
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/13/04)
• Dave Warren
  • Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption (08/17/04)
• David E. Smith
  • Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption (08/19/04)
• Delian Krustev
  • Re: CVS woes: .cvspass (08/06/04)
  • Re: CVS woes: .cvspass (08/05/04)
• Donato Ferrante
  • DoS in Chat Anywhere 2.72a (08/27/04)
  • DoS in Bird Chat 1.61 (08/23/04)
  • Multiple Vulnerabilities in Free Web Chat (08/04/04)
  • DoS in Webbsyte Chat 0.9.0 (08/03/04)
• Dr Ponidi
  • JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks (08/22/04)
• Dror Shalev
  • Yahoo! E-mail Service Vulnerability (08/23/04)
• e0r
  • CuteNews News.txt writable to world (08/29/04)
• Eddie Block
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Eggers, Bill A [LTD]
  • RE: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Eric McCarty
  • RE: Sonicwall diag tool includes VPN credentlials (08/02/04)
• Evgeny Demidov
  • ANNOUNCE: VulnDisco RADIUS protocol testsuite v1.0 (08/24/04)
• exploits_at_su1d.net
  • IE, Firefox, Opera DoS (08/21/04)
• Faro Poplar
  • Windows doesn't verify digital signature of CRL files (08/09/04)
• Fernando Quintero
  • SQL Injection in CACTI (08/16/04)
• First Last
  • Window Washer 5.5: False Sense of Security (08/23/04)
• Francisco Alisson
  • Remote Command Execution (08/09/04)
  • Remote Command Execution (08/06/04)
  • GoScript Remote Command Execution (08/04/04)
• Frank Nospam
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/12/04)
• Gabriel Kihlman
  • Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??) (08/25/04)
• Geoff Vass
  • Running renamed executables with CMD.EXE (08/21/04)
• George Capehart
  • Re: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection (08/20/04)
• Greg A. Woods
  • Re: CVS woes: .cvspass (08/07/04)
  • Re: CVS woes: .cvspass (08/05/04)
  • Re: CVS woes: .cvspass (08/04/04)
• GreyMagic Software
  • Opera Local File/Directory Detection (GM#009-OP) (08/17/04)
  • Opera: Location, Location, Location (GM#008-OP) (08/06/04)
  • Opera: Location, Location, Location (08/05/04)
• GulfTech Security
  • Multiple Vulnerabilities In Xedus Webserver (08/30/04)
  • Keene Digital Media Server Directory Traversal (08/26/04)
  • RE: IE, Firefox, Opera DoS (08/25/04)
  • Possible Security Issues In LiveWorld Products (08/24/04)
  • BadBlue Webserver v2.5 Denial Of Service Vulnerability (08/20/04)
• H D Moore
  • Metasploit Framework v2.2 (08/12/04)
• hellNbak
  • MS04-025 - Ignorance is truly bliss.... (08/05/04)
• Henning Schmiedehausen
  • spamcop.net allows everyone to grab mail addresses and reset passwords (08/10/04)
• High Pressure
  • Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability (08/12/04)
• homicidal_at_gmail.com
  • AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability (08/10/04)
• http-equiv_at_excite.com
  • What A Drag II XP SP2 (08/20/04)
  • What A Drag II XP SP2 (08/18/04)
  • Microsoft Windows XP SP2 (08/19/04)
• I)ruid
  • CAU-2004-0002 - imwheel Predictable PidFile Name Race Condition (08/21/04)
• infamous41md_at_hotpop.com
  • EXPLOIT: Qt bmp heap overflow (08/21/04)
  • Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability (08/21/04)
  • XV multiple buffer overflows, exploit included (08/20/04)
  • gv buffer overflows: here, there, and everywhere (08/16/04)
  • recent gaim advisory (08/13/04)
  • Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (08/13/04)
  • EXPLOIT libpng (08/10/04)
  • EXPLOIT Re: Pavuk Digest Authentication Buffer Overflow (08/07/04)
  • EXPLOIT for Re: [VSA0402] OpenFTPD format string vulnerability (08/03/04)
• IO ERROR
  • Re: Citadel/UX Remote DoS Vulnerability (08/01/04)
• Jack C
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Jack Lloyd
  • Re: Windows doesn't verify digital signature of CRL files (08/10/04)
• James C. Slora Jr.
  • Re: New MyDoom variant (08/05/04)
• Jan Minar
  • Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (08/24/04)
• Janusz A. Urbanowicz
  • Re: GNU/Linux 'info Buffer Overflow (08/07/04)
• Jason Coombs PivX Solutions
  • Re: Images being pulled in Outlook 2003 even though don't download pictures is set? (08/26/04)
• Jason Munro
  • Hastymail security update (08/24/04)
• Javier Ubilla Brenni
  • xss in moodle (post.php) (08/06/04)
• Jay D. Dyson
  • Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (08/25/04)
• Jedi/Sector One
  • Re: Anyone know IBM's security address? (08/06/04)
• Jim Paris
  • Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (08/20/04)
• Jody McCluggage
  • RE: Sonicwall diag tool includes VPN credentlials (08/02/04)
• joe
  • RE: [Full-Disclosure] Security aspects of time synchronization infrastructure (08/20/04)
  • RE: Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure (08/20/04)
• Joe Eversole
  • Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (08/12/04)
• Joel D. Kinard
  • Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??) (08/24/04)
• Johan Nilsson
  • RE: International DNS compromise? (08/06/04)
• john
  • Re: International DNS compromise? (08/05/04)
• John F. Waymouth
  • Re: International DNS compromise? (08/06/04)
• John Kinsella
  • Re: International DNS compromise? (08/05/04)
• john.courcoul_at_mac.com
  • Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (08/27/04)
  • Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (08/26/04)
• Jordan Pilat
  • SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (08/06/04)
• Jose Antonio
  • Multiple vulnerabilities in MyDMS (08/21/04)
  • Mantis Bugtracker Remote PHP Code Execution Vulnerability (08/21/04)
  • Cross Site Scripting Vulnerability in Sympa (08/21/04)
  • Multiple Vulnerabilities in Mantis Bugtracker (08/21/04)
• Josh Martin
  • GNU/Linux 'info Buffer Overflow (08/06/04)
• Joshua J. Berry
  • [ GLSA 200408-25 ] MoinMoin: Group ACL bypass (08/26/04)
  • [ GLSA 200408-23 ] kdelibs: Cross-domain cookie injection vulnerability (08/24/04)
  • [ GLSA 200408-20 ] Qt: Image loader overflows (08/22/04)
  • [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability (08/20/04)
• Jouko Pynnonen
  • Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability (08/06/04)
• Joxean Koret
  • Bugs fixed in Version 1.4.3 (08/22/04)
  • Multiple Cross Site Scripting Vulnerabilities in eGroupWare (08/22/04)
• Juan Manuel Pascual
  • OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform) (08/02/04)
• Justin Polazzo
  • Re: Fwd: New possible scam method : forged websites using XUL (Firefox) (08/02/04)
• Justin Wheeler
  • Re: New google's top query? (08/26/04)
• Jérôme
  • D-Link DCS-900 IP camera remote exploit that change the IP (08/31/04)
  • Gaucho v1.4 Build 145 Buffer Overflow (08/27/04)
  • Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (08/26/04)
  • MS XP SP2 Windows Security Center allows spoofing (08/26/04)
  • Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability - [Full-Disclosure] iDEFENSE Security Advisory 08.25.04 (08/25/04)
  • CDE libDtHelp LOGNAME Buffer Overflow Vulnerability (08/25/04)
  • Squirrelmail chpasswd local root bruteforce exploit (08/24/04)
  • WebAPP directory traversal and ability to retrieve the DES encrypted password hash (08/24/04)
  • New google's top query? (08/20/04)
  • Breaking windows LM hashes using the Time-Memory Trade-Off : Optimization & new tool (08/17/04)
  • SHA-0 Broken, MD5 Rumored Broken (08/18/04)
  • Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption (08/18/04)
  • vpopmail <= 5.4.2 (sybase vulnerability) (08/17/04)
  • First vulnerabilities in the SP2 - XP ?... (08/16/04)
• K-OTiK Security
  • Re: 0day critical vulnerability/exploit targets Winamp users in the wild (08/28/04)
  • 0day critical vulnerability/exploit targets Winamp users in the wild (08/26/04)
  • Re: JS/Zerolin (08/13/04)
• kers0r
  • First symbian OS trojan discovered in the wild (08/09/04)
• Kevin Sheldrake
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/06/04)
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/06/04)
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/05/04)
• Kim Scarborough
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/03/04)
• Kroma Pierre
  • Clearswift Mimesweeper Path Traversal Vulnerability (08/11/04)
• ktha_at_hush.com
  • Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability (08/24/04)
• Kurt Lieber
  • [ GLSA 200408-21 ] Cacti: SQL injection vulnerability (08/23/04)
  • [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities (08/23/04)
  • ERRATA: [ GLSA 200406-14 ] aspell: Buffer overflow in word-list-compress (08/23/04)
  • [ GLSA 200408-18 ] xine-lib: VCD MRL buffer overflow (08/17/04)
  • [ GLSA 200408-17 ] rsync: Potential information leakage (08/17/04)
  • [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (08/17/04)
  • [ GLSA 200408-09 ] Roundup filesystem access vulnerability (08/12/04)
  • [ GLSA 200408-07 ] Horde-IMP: Input validation vulnerability for Internet Explorer users (08/10/04)
• Kyle Maxwell
  • Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (08/25/04)
• labs_at_NGSEC
  • [NGSEC-2004-7] NtRegmon, local system denial of service. (08/25/04)
  • [NGSEC-2004-6] IPD, local system denial of service. (08/17/04)
• Lance James
  • Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (08/13/04)
• Larry Seltzer
  • RE: First vulnerabilities in the SP2 - XP ?... (08/21/04)
  • RE: First vulnerabilities in the SP2 - XP ?... (08/18/04)
• Lee Dilkie
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/05/04)
• lion
  • [vulnwatch] WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability (08/29/04)
  • [vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability (08/29/04)
  • [vulnwatch] WS_FTP Server Denial of Service Vulnerability (08/29/04)
• Lionel Ferette
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/04/04)
• lists_at_NGSEC
  • NGSEC's response to Idefense overflow protections whitepaper. (PART II) (08/13/04)
  • NGSEC's response to Idefense overflow protections whitepaper. (08/11/04)
• Liu Die Yu
  • NullyFake - Site Spoofing in MSIE (08/15/04)
• Luca Berra
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/28/04)
• Luigi Auriemma
  • Broadcast forced exit in Ground Control II 1.0.0.7 (08/26/04)
  • Limited buffer overflow in Painkiller 1.31 (08/24/04)
• Luke Burton
  • Re: New google's top query? (08/24/04)
• Mandrake Linux Security Team
  • MDKSA-2004:087 - Updated kernel packages fix multiple vulnerabilities (08/27/04)
  • MDKSA-2004:086 - Updated kdelibs and kdebase packages fix multiple vulnerabilities (08/21/04)
  • MDKSA-2004:085 - Updated qt3 packages fix multiple vulnerabilities (08/19/04)
  • MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (08/19/04)
  • MDKSA-2004:083 - Updated rsync packages fix remotely-exploitable vulnerability (08/18/04)
  • MDKSA-2004:082 - Updated mozilla packages fix multiple vulnerabilities (08/13/04)
  • MDKSA-2004:081 - Updated gaim packages fix remotely exploitable vulnerabilities (08/13/04)
  • MDKSA-2004:080 - Updated shorewall packages fix temporary file vulnerabilities (08/10/04)
  • MDKSA-2004:079 - Updated libpng packages fix multiple vulnerabilities (08/04/04)
• Marc
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/02/04)
• Marc Bejarano
  • recent iDefense advisories not being posted to bugtraq includes CVS information disclosure bug (CAN-2004-0778) (08/17/04)
• Marc Hultquist
  • Re: New MyDoom variant (08/05/04)
• Marc Schoenefeld
  • Java XSLT security advisory addendum (08/09/04)
• Markus Ackermann
  • Re: Anonymous Surfing Via Gmail Login Window - Poor Sanitization (08/26/04)
• Martin Schulze
  • [SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities (08/31/04)
  • [SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow (08/31/04)
  • [SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service (08/30/04)
  • [SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting (08/24/04)
  • [SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation (08/18/04)
  • [SECURITY] [DSA 539-1] New kdelibs packages fix denial of service (08/17/04)
  • [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access (08/17/04)
  • [SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management (08/16/04)
• Mary Landesman
  • Re: New MyDoom variant (08/05/04)
• Mathieu Lacroix
  • bug found (08/25/04)
• Matias Neiff
  • Re: Fwd: Re: Posible security bug in phpMyWebhosting (08/20/04)
  • Posible security bug in phpMyWebhosting (08/14/04)
• Matt Venzke
  • Airpwn & libpng holes (08/07/04)
• Matt Zimmerman
  • [SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities (08/05/04)
  • [SECURITY] [DSA 535-1] New squirrelmail packages fix multiple vulnerabilities (08/03/04)
• Matthew Roberts
  • Re: First vulnerabilities in the SP2 - XP ?... (08/18/04)
• Matthias Bethke
  • Buffer overflow in sarad (08/20/04)
• Matthias Leisi
  • Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (08/09/04)
• Max Valdez
  • Re: [PHP Bug] How to hide a HTTP request in the apache logs (08/09/04)
• Michael Howard
  • Windows doesn't verify digital signature of CRL files (08/11/04)
• Michael Reilly
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/03/04)
• Michael Scheidell
  • Anyone know IBM's security address? (08/06/04)
• Michael Wojcik
  • RE: Running renamed executables with CMD.EXE (08/24/04)
• Mike Clark
  • RE: International DNS compromise? (08/06/04)
• Mike Pumford
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• mikx
  • Alpha Phising [IE 6 WinXP SP2] (08/26/04)
  • What A Drag! -revisited- (08/24/04)
• morning_wood
  • Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (08/22/04)
• Myron Davis
  • [Fwd: Re: [vchkpw] vpopmail <= 5.4.2 (sybase vulnerability) (fwd)] (08/19/04)
• neil gardner
  • Re: Sonicwall diag tool includes VPN credentlials (08/01/04)
• Neil Gierman
  • Re: Windows doesn't verify digital signature of CRL files (08/10/04)
• NetBSD Security-Officer
  • NetBSD Security Advisory 2004-009: ftpd root escalation (08/17/04)
• Nicholas Knight
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/01/04)
• Nick D.
  • SpecificMAIL Technical Brief (08/14/04)
• Nicolas Gregoire
  • Re: JS/Zerolin (08/13/04)
• Niels Bakker
  • Re: GNU/Linux 'info Buffer Overflow (08/06/04)
• Nikyt0x Argentina
  • PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities (08/25/04)
• Oliver Schneider
  • Re: First vulnerabilities in the SP2 - XP ?... (08/17/04)
• OpenPKG
  • [OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib) (08/25/04)
  • [OpenPKG-SA-2004.036] OpenPKG Security Advisory (cvstrac) (08/06/04)
  • [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png) (08/04/04)
• Otto Moerbeek
  • Re: Remote crash in tcpdump from OpenBSD (08/07/04)
• Patrik Hornik
  • SA-20040802 GnuTLS certificate chain verification bug (08/02/04)
• Paul Craig - Pimp Industries
  • BlackICE unprivileged local user attack (08/11/04)
• Paul James
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/24/04)
• Paul Kurczaba
  • Re: New MyDoom variant (08/04/04)
• Paul Starzetz
  • Linux kernel file offset pointer races (08/04/04)
• Pentest Security Advisories
  • ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows (08/11/04)
• Pete Simpson
  • Re: Clearswift Mimesweeper Path Traversal Vulnerability (08/11/04)
• Peter Fregon
  • RE: [Full-Disclosure] DOS@MEHTTPS (08/09/04)
• Peter J. Holzer
  • Re: Fwd: New possible scam method : forged websites using XUL (Firefox) (08/03/04)
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/03/04)
  • Re: New possible scam method : forged websites using XUL (Firefox) (08/02/04)
• pmoses_at_physics.ucsd.edu
  • local denial of Service, Yellowdog linux to 3.0.1 (08/05/04)
• Polazzo Justin
  • RE: SideFind (08/02/04)
• prj
  • RE: NETGEAR DG834G SPECIAL FEATURES (08/26/04)
• Punabi MC
  • Anonymous Surfing Via Gmail Login Window - Poor Sanitization (08/25/04)
• Purple Pony
  • Re: New MyDoom variant (08/05/04)
• QElliott_C=2E_B=E4ck=22?=
  • Re: New MyDoom variant (08/04/04)
• Radoslav Dejanović
  • Re: First vulnerabilities in the SP2 - XP ?... (08/18/04)
  • Re: Winmx Software making calls to Port 25 (08/09/04)
  • Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (08/09/04)
• Rainer Duffner
  • Re: Linux OpenExchange - cleartext rootpw in swap (08/31/04)
• Rene
  • Linux OpenExchange - cleartext rootpw in swap (08/31/04)
• Retro Granny
  • Re: Winmx Software making calls to Port 25 (08/07/04)
  • Winmx Software making calls to Port 25 (08/06/04)
• Richard Hipp
  • Re: CVStrac Remote Arbitrary Code Execution exploit (08/06/04)
• Richard Johnson
  • RE: NGSEC's response to Idefense overflow protections whitepaper. (08/12/04)
• Richard Ngo
  • CVStrac Remote Arbitrary Code Execution exploit (08/05/04)
• Rio Martin.
  • Re: International DNS compromise? (08/06/04)
• Rishi Khan
  • Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (08/27/04)
• Robert Decker
  • Re: First vulnerabilities in the SP2 - XP ?... (08/19/04)
• Robillard, Nicolas
  • Microsoft Internet Explorer 6 Protocol Handler Vulnerability (08/05/04)
• Robin Rosenberg
  • Re: CVS woes: .cvspass (08/07/04)
  • Re: CVS woes: .cvspass (08/07/04)
• Rodrigo Barbosa
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/26/04)
  • Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (08/24/04)
• Rohit Dube
  • RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection (08/24/04)
  • Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection (08/17/04)
• Roman Werpachowski
  • Re: GNU/Linux 'info Buffer Overflow (08/07/04)
• root_at_spiffomatic64.com
  • Type xxs (08/07/04)
• Rynho Zeros Web
  • Internet Explorer Local File/Directory Detection (08/24/04)
• Secure Science Corporation Advisory Notice
  • SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (08/11/04)
• Security Guy
  • RE: New MyDoom variant (08/05/04)
• Serkan Akpolat
  • Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (08/24/04)
  • Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (08/25/04)
  • Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (08/23/04)
• Seth Breidbart
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/06/04)
• SGI Security Coordinator
  • SGI ProPack 3: Kernel Update #3 - Security and other fixes (08/27/04)
  • SGI Advanced Linux Environment 3 Security Update #9 (08/14/04)
  • SGI Advanced Linux Environment 2.4 security update #24 (08/14/04)
  • CDE libDtHelp and dtlogin vulnerabilities on IRIX (08/03/04)
• Simon Zuckerbraun
  • RE: Unsecure file permission of ZoneAlarm pro. (08/22/04)
• Skip Carter
  • Re: SpecificMAIL Technical Brief (08/16/04)
• Solar Designer
  • Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (08/21/04)
• stanislav shalunov
  • Re: SHA-0 Broken, MD5 Rumored Broken (08/20/04)
• Stefan Seifert
  • Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (08/07/04)
• Stephan Sachweh
  • RE: Sonicwall diag tool includes VPN credentlials (08/02/04)
• Steve
  • Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (08/25/04)
• Steve Brown
  • Re: [PHP Bug] How to hide a HTTP request in the apache logs (08/09/04)
• Steve R
  • RE: IE, Firefox, Opera DoS (*not* a DoS, not even close) (08/26/04)
• Steven Leikeim
  • Re: Driver for display goes to a infinite loop by viewing a html! (08/11/04)
• Steven Van Acker
  • Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable) (08/30/04)
  • A word of caution on the use of suphp (08/23/04)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200408-27 ] Gaim: New vulnerabilities (08/27/04)
  • [ GLSA 200408-26 ] zlib: Denial of service vulnerability (08/27/04)
  • ERRATA: [ GLSA 200408-21 ] Cacti: SQL injection vulnerability (08/23/04)
  • [ GLSA 200408-14 ] acroread: UUDecode filename buffer overflow (08/15/04)
  • [ GLSA 200408-15 ] Tomcat: Insecure Installation (08/15/04)
  • [ GLSA 200408-12 ] Gaim: MSN protocol parsing function buffer overflow (08/12/04)
  • [ GLSA 200408-13 ] kdebase, kdelibs: Multiple security issues (08/12/04)
  • [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (08/12/04)
  • [ GLSA 200408-11 ] Nessus: "adduser" race condition vulnerability (08/12/04)
  • [ GLSA 200408-06 ] SpamAssassin: Denial of Service vulnerability (08/09/04)
  • [ GLSA 200408-04 ] PuTTY: Pre-authentication arbitrary code execution (08/05/04)
  • [ GLSA 200408-03 ] libpng: Numerous vulnerabilities (08/05/04)
• T.H. Haymore
  • Re: JS/Zerolin (08/13/04)
  • JS/Zerolin (08/12/04)
• Tal0n
  • MusicDaemon <= 0.0.3 /etc/shadow Stealer / DoS Exploit (08/23/04)
• thanasonic_at_hack.gr
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/13/04)
  • NETGEAR DG834G SPECIAL FEATURES (08/12/04)
• Thierry Carrez
  • [ GLSA 200408-05 ] Opera: Multiple new vulnerabilities (08/05/04)
  • [ GLSA 200408-02 ] Courier: Cross-site scripting vulnerability in SqWebMail (08/04/04)
  • [ GLSA 200408-01 ] MPlayer: GUI filename handling overflow (08/01/04)
• Thomas Biege
  • SUSE Security Announcement: qt3 (SUSE-SA:2004:027) (08/19/04)
  • SUSE Security Announcement: rsync (SUSE-SA:2004:026) (08/16/04)
  • SUSE Security Announcement: gaim (SUSE-SA:2004:025) (08/12/04)
  • SUSE Security Announcement: kernel (SUSE-SA:2004:024) (08/09/04)
  • SUSE Security Announcement: libpng (SUSE-SA:2004:023) (08/04/04)
• Thomas Chiverton
  • Re: SQL Injection in CACTI (08/17/04)
• Thomas Ryan
  • ISS BlackIce Server Protect Unprivileged User Attack (08/11/04)
• Thomas T. Evans, III
  • RE: New possible scam method : forged websites using XUL (Firefox) (08/02/04)
• Thomas Walpuski
  • Re: Windows doesn't verify digital signature of CRL files (08/11/04)
  • Re: Windows doesn't verify digital signature of CRL files (08/10/04)
  • Re: Windows doesn't verify digital signature of CRL files (08/10/04)
• Thor
  • Re: New MyDoom variant (08/05/04)
• Thor Larholm
  • RE: CDE libDtHelp LOGNAME Buffer Overflow Vulnerability (08/26/04)
  • RE: First vulnerabilities in the SP2 - XP ?... (08/19/04)
  • RE: JS/Zerolin (08/14/04)
  • RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability (08/11/04)
• Tilman Schmidt
  • Re: CVS woes: .cvspass (08/06/04)
• Tim Yamin
  • [ GLSA 200408-24 ] Linux Kernel: Multiple information leaks (08/26/04)
• tinysofa Security Team
  • TSSA-2004-020-ES - rsync (08/16/04)
• Tom Yu
  • MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service (08/31/04)
• Toomas Soome
  • Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (08/04/04)
• travis.alexander_at_lacamas.org
  • RE: International DNS compromise? (08/05/04)
• Troy
  • Re: International DNS compromise? (08/06/04)
  • Re: International DNS compromise? (08/05/04)
• Troy Monaghen
  • RE: International DNS compromise? (08/06/04)
• Trustix Security Advisor
  • TSL-2004-0043 - multi (08/26/04)
  • TSLSA-2004-0042 - rsync (08/17/04)
  • TSLSA-2004-0041 - kernel (08/09/04)
  • TSLSA-2004-0040 - libpng (08/05/04)
• Uday Moorjani
  • Re: NETGEAR DG834G SPECIAL FEATURES (08/13/04)
  • Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability (08/06/04)
• Udo
  • Re: Posible security bug in phpMyWebhosting (08/19/04)
• Udo Mueller
  • Re: Posible security bug in phpMyWebhosting (08/20/04)
• Vafa Izadinia
  • Vulnerability: OpenBSD 3.5 Kernel Panic. (08/25/04)
• Valdis.Kletnieks_at_vt.edu
  • Re: Windows doesn't verify digital signature of CRL files (08/10/04)
  • Re: GNU/Linux 'info Buffer Overflow (08/06/04)
• venglin_at_freebsd.lublin.pl
  • multiple vulnerabilities in lukemftpd/tnftpd on mailhost.freebsd.lublin.pl (08/22/04)
• Vincenzo Ciaglia
  • LNSA-#2004-0017: rsync (Aug, 17 2004) (08/17/04)
• vuln_at_hexview.com
  • Clear text password exposure in Datakey's tokens and smartcards (08/04/04)
• Waldo Bastian
  • KDE Security Advisory: Konqueror Cross-Domain Cookie Injection (08/23/04)
  • KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities (08/11/04)
• Wil Allsopp
  • Dynix Webpac Input Validation (08/24/04)
• Zhen Shi
  • International DNS compromise? (08/05/04)
• Zone Labs Product Security
  • Check Point - Zone Labs Division - Response to "Weak Default Permissions Vulnerability" (08/25/04)

Last message date: 08/31/04
Archived on: 08/31/04 CEST

---

417 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2004-08