Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

257 messages starting Mar 01 99 and ending Apr 01 99
Date index | Thread index | Author index

• Re: AltaVista Firewall97 Jochen Thomas Bauer (Mar 01)
• [0z0n3] XCmail remotely exploitable vulnerability Arthur (Mar 01)
• Multiple IMail Vulnerabilites Marc (Mar 02)
• New OpenBSD security-related patches Theo de Raadt (Mar 02)
• Defeating Solaris/SPARC Non-Executable Stack Protection John McDonald (Mar 03)
• Remote OS Deception? Robert Wick (Mar 04)
  • Security Conference Announcement: the Black Hat Briefings '99 Dominique Brezinski (Mar 04)
  • Oracle Plaintext Password James Kivisild (Mar 04)
  • Linux /usr/bin/gnuplot overflow xnec () INFERNO TUSCULUM EDU (Mar 04)
    • Re: Linux /usr/bin/gnuplot overflow Lars Hecking (Mar 05)
      • Re: Linux /usr/bin/gnuplot overflow Hans-Bernhard Broeker (Mar 05)
      • Re: Linux /usr/bin/gnuplot overflow Andrea Arcangeli (Mar 05)
      • buffer overflow in /usr/bin/cancel Josh A. Strickland (Mar 05)
      • Re: Linux /usr/bin/gnuplot overflow -- SuSE hasnt fixed lsof Mario Lorenz (Mar 05)
      • Update to Microsoft Security Bulletin (MS99-006) aleph1 () UNDERGROUND ORG (Mar 05)
      • More Internet Explorer zone confusion Jim Paris (Mar 06)
      • Re: More Internet Explorer zone confusion Walt Armour (Mar 08)
      • Re: More Internet Explorer zone confusion Jeremy Nimmer (Mar 08)
      • Re: More Internet Explorer zone confusion Jim Paris (Mar 08)
      • ISAPI Extension vulnerability allows to execute code as SYSTEM Aleph One (Mar 08)
      • Re: More Internet Explorer zone confusion David E. Smith (Mar 08)
      • Little exploit for startup scripts (SCO 5.0.4p). leshka (Mar 07)
      • Re: Little exploit for startup scripts (SCO 5.0.4p). Peter van Dijk (Mar 08)
      • Re: Little exploit for startup scripts (SCO 5.0.4p). Taneli Leppä (Mar 08)
      • Call for Papers: CQRE Detlef Hühnlein (Mar 08)
      • Re: Little exploit for startup scripts (SCO 5.0.4p). Jon Coyle (Mar 08)
• Re: Linux /usr/bin/gnuplot overflow Speed (Mar 05)
  • Re: Linux /usr/bin/gnuplot overflow Rich Lafferty (Mar 05)
  • <Possible follow-ups>
  • Re: Linux /usr/bin/gnuplot overflow Marc SCHAEFER (Mar 06)
  • Re: Linux /usr/bin/gnuplot overflow Marc Heuse (Mar 06)
  • Re: Linux /usr/bin/gnuplot overflow Marc Heuse (Mar 08)
• IMAIL password recovery is trivial. Steven Alexander (Mar 05)
• Re: More Internet Explorer zone confusion Oliver Lineham (Mar 08)
  • <Possible follow-ups>
  • Re: More Internet Explorer zone confusion iversen (Mar 08)
    • WinFreez.c Delmore (Mar 05)
    • The FPSC-IRCD.txt advisory syg FPSC (Mar 08)
      • Digital Unix 4 protected password database. James Clement (Mar 09)
      • Re: Digital Unix 4 protected password database. Chris Johnson (Mar 09)
      • Re: Digital Unix 4 protected password database. Jon Morgan (Mar 10)
      • Re: Digital Unix 4 protected password database. Alec Muffett (Mar 10)
      • Re: Digital Unix 4 protected password database. Keith Piepho (Mar 10)
      • Re: Digital Unix 4 protected password database. Solar Designer (Mar 13)
      • Default password in Bay Networks switches. Jan B. Koum (Mar 10)
      • Re: Default password in Bay Networks switches. Dax Kelson (Mar 11)
      • Re: Default password in Bay Networks switches. Dax Kelson (Mar 11)
      • Re: Default password in Bay Networks switches. Igor Sviridov (Mar 11)
      • Re: Default password in Bay Networks switches. Rolf Obrecht (Mar 12)
      • Re: The FPSC-IRCD.txt advisory Bjarni R. Einarsson (Mar 09)
      • Windows NT Screen Saver Vulnerability Aleph One (Mar 09)
    • Re: More Internet Explorer zone confusion Tilman Schmidt (Mar 09)
      • 64 bit Solaris 7 procfs bug Toomas Soome (Mar 09)
      • Re: More Internet Explorer zone confusion Jim Frost (Mar 09)
  • Re: More Internet Explorer zone confusion Paul Leach (Mar 08)
    • Re: More Internet Explorer zone confusion Christopher Masto (Mar 09)
• Update: HP printer vulnerabilities bwoodard () CISCO COM (Mar 08)
• Netscape Communicator find() vulnerabilities Georgi Guninski (Mar 08)
• SMTP server account probing Brett Glass (Mar 08)
  • Re: SMTP server account probing Frank Miller (Mar 09)
  • Re: SMTP server account probing John E. Martin (Mar 09)
    • Re: SMTP server account probing Brett Glass (Mar 09)
      • Re: SMTP server account probing Nick Andrew (Mar 09)
      • Re: SMTP server account probing Brian Behlendorf (Mar 10)
    • Re: SMTP server account probing Valdis.Kletnieks () VT EDU (Mar 09)
      • Re: SMTP server account probing Scott Fendley (Mar 09)
      • Re: SMTP server account probing Alexander Bochmann (Mar 10)
      • Re: SMTP server account probing Alan Cox (Mar 09)
    • Re: SMTP server account probing Ryan Permeh (Mar 09)
    • Re: SMTP server account probing Keith Woodworth (Mar 09)
    • Linux Blind TCP Spoofing Security Research Labs (Mar 10)
      • Re: Linux Blind TCP Spoofing John D. Hardin (Mar 10)
    • Winfreeze.c for Solaris ... Max Schubert (Mar 10)
  • Re: SMTP server account probing GvS (Mar 09)
  • Re: SMTP server account probing David Gale (Mar 09)
    • Re: SMTP server account probing James Lick (Mar 10)
    • Administrivia Aleph One (Mar 10)
  • <Possible follow-ups>
  • Re: SMTP server account probing Stefan Monnier (Mar 09)
  • Re: SMTP server account probing Jose C. Oon (Mar 10)
  • Re: SMTP server account probing Tobias J. Kreidl (Mar 10)
    • Re: SMTP server account probing typo () INFERNO TUSCULUM EDU (Mar 13)
• X server font path buffer overflow vulnerability SGI Security Coordinator (Mar 08)
• Re: More Internet Explorer zone confusion (new issue) Paul Leach (Mar 09)
  • Re: More Internet Explorer zone confusion (new issue) Jeremie (Mar 09)
• Re: buffer overflow in /usr/bin/cancel Anonymous (Mar 09)
• Re: Linux Blind TCP Spoofing Jochen Thomas Bauer (Mar 10)
• Re: Digital Unix 4 protected password database. Darren J Moffat - Enterprise Services OS Product Support Group (Mar 10)
  • <Possible follow-ups>
  • Re: Digital Unix 4 protected password database. der Mouse (Mar 10)
    • New Security Vulnerability in WinNT Alexandre Stervinou (Mar 12)
    • Re: Digital Unix 4 protected password database. Tim Pierce (Mar 12)
  • Re: Digital Unix 4 protected password database. Nate Lawson (Mar 13)
    • Re: Digital Unix 4 protected password database. Alec Muffett (Mar 15)
  • Re: Digital Unix 4 protected password database. Alec Muffett (Mar 16)
• SMTP Abuse - Extracted domains from glpro.exe application Frank Miller (Mar 10)
• Re: Linux Blind TCP Spoofing (fwd) John D. Hardin (Mar 10)
• Re: 64 bit Solaris procfs bug Ed Arnold (Mar 10)
• Re: Default password in Bay Networks switches. Jon Green (Mar 11)
  • Re: Default password in Bay Networks switches. Dmitry Kohmanyuk Дмитрий Кохманюк (Mar 11)
  • <Possible follow-ups>
  • Re: Default password in Bay Networks switches. Greg Galloway (Mar 12)
    • Re: Default password in Bay Networks switches. Jan B. Koum (Mar 13)
    • Microsoft Security Bulletin (MS99-008) aleph1 () UNDERGROUND ORG (Mar 13)
• Re: Winfreeze.c for Solaris ... Delmore (Mar 11)
• Re: 64 Bit Solaris 7 procfs bug Toomas Soome (Mar 11)
• Cisco security notice: Cisco 7xx TCP and HTTP vulnerabilities security-alert () cisco com (Mar 11)
• ISS Security Advisory: Remote Reconfiguration and Denial of X-Force (Mar 11)
• [Fwd: Shockwave 7 Security Hole] Sean Coates (Mar 11)
• CFP: RAID99 - Recent Advances in Intrusion Detection Marc Dacier (Mar 11)
• sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 12)
  • Re: sendmail 8.9.3 patches to curb RCPT harvesters Tim Pierce (Mar 13)
  • <Possible follow-ups>
  • Re: sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 13)
  • Re: sendmail 8.9.3 patches to curb RCPT harvesters Andy Church (Mar 13)
    • /usr/bin/doscmd on BSDI kasper (Mar 14)
      • Re: /usr/bin/doscmd on BSDI Warner Losh (Mar 17)
    • Re: sendmail 8.9.3 patches to curb RCPT harvesters Aggelos P. Varvitsiotis (Mar 15)
    • Lynx 2.8 overflow Mixter (Mar 15)
    • ISS Security Advisory: LDAP Buffer overflow against Microsoft X-Force (Mar 16)
    • Microsoft Security Bulletin (MS99-009) aleph1 () UNDERGROUND ORG (Mar 17)
• Announce: vpnd 1.0.0 released A. Steinmetz (Mar 12)
• Bug in IRC services fractalg (Mar 12)
  • Re: Bug in IRC services Kevin Day (Mar 13)
  • Re: Bug in IRC services David Schwartz (Mar 13)
  • <Possible follow-ups>
  • Re: Bug in IRC services Taral (Mar 13)
    • Re: Bug in IRC services Pedro Ribeiro (Mar 14)
      • Bug in IRC services Leal Duarte (Mar 14)
      • erps kasper (Mar 14)
      • GLPro.exe spam fix Kerb (Mar 14)
      • Microsoft's SMTP service broken/stupid Chris Adams (Mar 15)
      • Re: Microsoft's SMTP service broken/stupid Alan Brown (Mar 17)
  • Re: Bug in IRC services Andy Church (Mar 13)
• Netscape upgrade Keith Young (Mar 15)
  • <Possible follow-ups>
  • Re: Netscape upgrade Chris Price (Mar 16)
  • Re: Netscape upgrade Georgi Guninski (Mar 16)
• NetBSD Security Advisory 1999-006 matthew green (Mar 17)
• Re: Netscape 4.51 Upgrade Boyce, Nick (Mar 17)
• Re: Microsoft's SMTP service broken/stupid David Lemson (Mar 17)
  • <Possible follow-ups>
  • Re: Microsoft's SMTP service broken/stupid Bob Beck (Mar 18)
  • Re: Microsoft's SMTP service broken/stupid David Lemson (Mar 18)
• ISSalert: ISS Security Advisory: Short-Term High-Risk aleph1 () UNDERGROUND ORG (Mar 18)
• NetBSD Security Advisory 1999-007 matthew green (Mar 18)
• Re: /usr/bin/doscmd on BSDI Keith Bostic (Mar 18)
• Security Bulletins Digest aleph1 () UNDERGROUND ORG (Mar 18)
  • <Possible follow-ups>
  • Security Bulletins Digest aleph1 () UNDERGROUND ORG (Mar 25)
• IE5 - same vulnerabilities, only some fixed Most Psychoid (Mar 19)
  • <Possible follow-ups>
  • Re: IE5 - same vulnerabilities, only some fixed Stepan Stadnyk (Mar 20)
  • Re: IE5 - same vulnerabilities, only some fixed Alan Chapman (Mar 22)
  • Re: IE5 - same vulnerabilities, only some fixed Jim Reavis (Mar 26)
• Promail trojan Patrick Oonk (Mar 19)
• New Patches Address Privacy Concerns (fwd) Jon Katz (Mar 20)
• The default permissions on /dev/kmem is insecure. Aleph One (Mar 20)
• Eudora Attachment Buffer Overflow whiz (Mar 20)
• wu-ftpd overflow. CyberPsychotic (Mar 21)
  • Re: wu-ftpd overflow. Gregory A Lundberg (Mar 26)
• X11R6 NetBSD Security Problem in.telnetd (Mar 22)
  • Re: X11R6 NetBSD Security Problem in.telnetd (Mar 22)
    • Re: X11R6 NetBSD Security Problem Petras Sinkevicius (Mar 26)
  • FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 22)
    • ANNOUNCE: New Security Tool: HostSentry 0.02 Alpha Craig H. Rowland (Mar 26)
    • Re: FrontPage + Apache + FreeBSD Roberto Grassi (Mar 26)
      • Re: FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 26)
  • abuse of nickserv Nelson Little (Mar 24)
  • Linux 2.2.3 patch to prevent FIN/NULL/XMAS scans Taral (Mar 24)
  • not only NetBSD [was Re: X11R6 NetBSD Security Problem] Pavel Machek (Mar 26)
  • Re: X11R6 NetBSD Security Problem Matthieu Herrb (Mar 26)
    • Re: X11R6 NetBSD Security Problem Kevin Vajk (Mar 29)
  • wu-ftp 2.4.2 (release VR16) /bin/ftponly [ (Mar 27)
  • SuSE Security Announcement - XFree86 Marc Heuse (Mar 28)
  • <Possible follow-ups>
  • Re: X11R6 NetBSD Security Problem /usr/libexec/telnetd (Mar 26)
• ftp exploit Pieter Nieuwenhuijsen (Mar 22)
  • <Possible follow-ups>
  • Re: ftp exploit duke (Mar 23)
    • Re: ftp exploit Aleph One (Mar 26)
  • ftp exploit Martin Bartosch (Mar 23)
• OpenSSL/SSLeay Security Alert Ben Laurie (Mar 22)
• New OpenBSD security patches Richard Trott (Mar 23)
  • <Possible follow-ups>
  • Re: New OpenBSD security patches Charles M. Hannum (Mar 26)
• comment about ftp exploit Alex Yu (Mar 23)
• Index Server 2.0 and the Registry Mnemonix (Mar 23)
• Re: LNotes encryption IAKOVLEV () FR IBM COM (Mar 24)
• WUftp scanner baku () EXCITE COM (Mar 24)
  • Re: WUftp scanner Gregory A Lundberg (Mar 26)
  • Re: WUftp scanner Scott Stone (Mar 26)
• ISS Security Advisory: Remote Denial of Service Vulnerability in X-Force (Mar 24)
• Cisco security notice: Cisco Catalyst Supervisor Remote Reload psirt () cisco com (Mar 24)
• IE5 Feature/security hole Anthony Pijerov (Mar 24)
  • Re: IE5 Feature/security hole Eilon Lipton (Mar 26)
  • <Possible follow-ups>
  • Re: IE5 Feature/security hole Juha Jäykkä (Mar 29)
    • XFree86 3.3.3 on RedHat 5.2. Why is RedHat waiting?? Domas Mituzas (Mar 29)
      • Re: XFree86 3.3.3 on RedHat 5.2. Why is RedHat waiting?? sillyhead (Mar 31)
      • XFree86 security problem Patrick J. Volkerding (Mar 31)
    • Re: IE5 Feature/security hole Eilon Lipton (Mar 29)
• DoS for Linux 2.1.89 - 2.2.3: 0 length fragment bug John McDonald (Mar 25)
• another ftp exploit Pieter Nieuwenhuijsen (Mar 25)
• Netscape Communicator 4.51 allows sniffing of URLs from another Georgi Guninski (Mar 25)
• Adminitrivia Aleph One (Mar 25)
• ADM Worm. Worm for Linux x86 found in wild. Ben Cantrick (Mar 25)
  • Re: ADM Worm. Worm for Linux x86 found in wild. Jim Paris (Mar 26)
  • Re: ADM Worm. Worm for Linux x86 found in wild. Mixter (Mar 26)
  • Malicious code detection and full disclosure Nate Lawson (Mar 28)
    • Re: Malicious code detection and full disclosure Nick FitzGerald (Mar 29)
      • Re: Malicious code detection and full disclosure Alan Cox (Mar 29)
  • <Possible follow-ups>
  • Re: ADM Worm. Worm for Linux x86 found in wild. Dep. de Teleinformática (Mar 26)
  • Re: ADM Worm. Worm for Linux x86 found in wild. Dep. de Teleinformática (Mar 26)
• Re: FrontPage + Apache + FreeBSD Forrest J. Cavalier III (Mar 26)
  • <Possible follow-ups>
  • Re: FrontPage + Apache + FreeBSD Paul Schandel (Mar 26)
    • Possible security hole Christoforos Karatzinis (Mar 26)
      • Re: Possible security hole Jason Costomiris (Mar 29)
      • Bypassing Excel Macro Virus Protection rotaiv (Mar 29)
    • Re: FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 26)
  • Re: FrontPage + Apache + FreeBSD Paul Schandel (Mar 26)
  • Re: FrontPage + Apache + FreeBSD -Reply Bob McConnell (Mar 29)
• Re: [Unet-Opers] abuse of nickserv (fwd) danny (Mar 26)
• Re: abuse of nickserv StudNo1 (Mar 26)
• Lotus Notes Encryption Bug Martin Bartosch (Mar 26)
  • <Possible follow-ups>
  • Re: Lotus Notes Encryption Bug IAKOVLEV () FR IBM COM (Mar 29)
• ProMail trojan still available at some sites Patrick Oonk (Mar 26)
• Re: another ftp exploit (fwd) Artem Malyshev (Mar 26)
• Re: ADM w0rm The ADM Crew (Mar 26)
• Re: Lotus Notes security advisory Kevin_Lynch/CAM/Lotus () LOTUS COM (Mar 26)
• Melissa Macro Virus Aleph One (Mar 27)
  • <Possible follow-ups>
  • Re: Melissa Macro Virus Nate Lawson (Mar 27)
    • Re: Melissa Macro Virus Matthew Kirkwood (Mar 27)
      • Re: Melissa Macro Virus Nick FitzGerald (Mar 29)
  • Re: Melissa Macro Virus Kuo, Jimmy (Mar 27)
  • Re: Melissa Macro Virus Jim Reavis (Mar 27)
    • Re: Melissa Macro Virus Doug Granzow (Mar 29)
  • Re: Melissa Macro Virus Brett Glass (Mar 29)
    • Bug in xfs Lukasz Trabinski (Mar 29)
      • ICQ Webserver bug Kerb (Mar 30)
      • IE 5.0 allows reading and sending local files to a remote server Georgi Guninski (Mar 30)
      • Excel Virus Seree Visitseelwat (Mar 31)
      • Re: IE 5.0 allows reading and sending local files to a remote Andrew Tulloch (Mar 31)
      • Procmail scanning for hostile macros in Microsoft document e-mail John D. Hardin (Mar 31)
      • Excel variant of Melissa Marcel de Haas (Mar 30)
      • Re: Excel variant of Melissa Ken Pfeil (Mar 31)
      • Re: Bug in xfs Roman Drahtmueller (Mar 31)
      • Re: Bug in xfs Matthieu Herrb (Mar 31)
      • Re: Bug in xfs Juha Virtanen (Mar 31)
      • Re: Bug in xfs Alan Cox (Mar 31)
      • [support_feedback () us-support external hp com: Security Bulletins Patrick Oonk (Mar 31)
    • Re: Melissa Macro Virus Bronek Kozicki (Mar 30)
      • Re: Melissa Macro Virus Brett Glass (Mar 31)
      • Re: Melissa Macro Virus Dimitry Andric (Mar 31)
      • Potential vulnerability in SCO TermVision Windows 95 client JJ Gray (Mar 31)
  • Re: Melissa Macro Virus Darryl Braaten (Mar 29)
  • Re: Melissa Macro Virus Rodefeld, Sonja (Mar 31)
• Melissa virus code Nate Lawson (Mar 27)
• Fwd: CERT Advisory CA-99.04 - Melissa Macro Virus Charles J Anthe (Mar 27)
• Microsoft Security Bulletin (MS99-010) aleph1 () UNDERGROUND ORG (Mar 27)
• Re: Blocking the Melissa Trojan John D. Hardin (Mar 28)
• Re: Possible security hole Ryan Russell (Mar 29)
  • Re: Possible security hole Darren Reed (Mar 29)
  • <Possible follow-ups>
  • Re: Possible security hole Cristiano Lincoln Mattos (Mar 29)
  • Re: Possible security hole Warren Barrow (Mar 29)
  • Re: Possible security hole Ryan Russell (Mar 29)
• linux insmod bug/security vulnerability Brian Szymanski (Mar 31)
• SECURITY: various packages updated (pine, mutt, sysklogd, sillyhead (Mar 31)
• Re: IE 5.0 allows reading and sending local files to a remote root (Mar 31)
• Caveat on Melissa Macro Virus Phil Cox (Mar 31)
• ISSalert: ISS Security Advisory -- WebRamp Denial of Service aleph1 () UNDERGROUND ORG (Mar 31)
• VENGINE: Polymorphizer for MS-Word macro viruses Aleph One (Apr 01)

Previous period

Next period