Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

383 messages starting Feb 01 02 and ending Feb 28 02
Date index | Thread index | Author index

• Re: Script for find domino's users Chad Loder (Feb 01)
  • <Possible follow-ups>
  • Re: Script for find domino's users nicob (Feb 04)
    • Re: Script for find domino's users David Litchfield (Feb 05)
  • RE: Script for find domino's users Jay D. Thomson (Feb 10)
• Re: tac_plus version F4.0.4.alpha on at least Solaris 8 sparc Devrim SERAL (Feb 01)
• NetScreen ScreenOS 2.6 Subject to Trust Interface DoS Chris Lathem (Feb 01)
  • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... David P. Maynard (Feb 05)
    • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... Zeke Gibson [STI] (Feb 06)
      • Re: PIX DOS (config problem) - Similar to NetScreen ScreenOS... David P. Maynard (Feb 07)
  • <Possible follow-ups>
  • RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS Dave Killion (Feb 01)
  • RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS Alexander Poizner (Feb 04)
  • Re: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS Drew Simonis (Feb 05)
• Vulnerability in all versions of DCForum from dcscripts.com shimi (Feb 01)
  • Re: Vulnerability in all versions of DCForum from dcscripts.com David Choi (Feb 01)
• new advisory UkR-XblP? (Feb 02)
  • <Possible follow-ups>
  • RE: new advisory sj (Feb 04)
    • Re: new advisory Andrew Simmons (Feb 06)
• KICQ 2.0.0b1 can be remotely crashed _kiss_ (Feb 02)
• Re: Sapgui 4.6D for Windows Nick Wilkens (Feb 04)
  • Re: Sapgui 4.6D for Windows Andreas Baetz (Feb 05)
• Long path exploit on NTFS - F-Secure Anti-Virus not vulnerable Tomi Tuominen (Feb 04)
• Re: rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available) Steven M. Christey (Feb 04)
• Re: autoresponder program could be tricked by spamers to send unsolicitedmail to victim's address (fwd) Rodent of Unusual Size (Feb 04)
• Mrtg Path Disclosure Vulnerability Tamer Sahin (Feb 04)
  • Re: Mrtg Path Disclosure Vulnerability Barney Wolff (Feb 04)
    • Re: Mrtg Path Disclosure Vulnerability Dave Ahmad (Feb 04)
  • <Possible follow-ups>
  • Re: Mrtg Path Disclosure Vulnerability Frog Man (Feb 04)
  • Re: Mrtg Path Disclosure Vulnerability Jason Hicks (Feb 10)
• Re: Long path exploit on NTFS Hans Somers (Feb 04)
  • Re: Long path exploit on NTFS Frank Heyne (Feb 04)
  • <Possible follow-ups>
  • RE: Long path exploit on NTFS Fleming, Diane (Feb 05)
    • RE: Long path exploit on NTFS Didier Arenzana (Feb 06)
  • RE: Long path exploit on NTFS David Sexton (Feb 07)
  • Re: Long path exploit on NTFS Christophe Bousquet (Feb 07)
  • RE: Long path exploit on NTFS Uidam, T (Tim) (Feb 07)
    • RE: Long path exploit on NTFS Elan Hasson (Feb 09)
  • RE: Long path exploit on NTFS David Korn (Feb 07)
    • RE: Long path exploit on NTFS Frank Heyne (Feb 08)
  • Long Path Exploit on NTFS Mark Ng (Feb 08)
  • RE: Long path exploit on NTFS andy (Feb 09)
• [SECURITY] [DSA-106-2] updated rsync fix Wichert Akkerman (Feb 04)
• KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service Peter Gründl (Feb 04)
  • Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service Nicolas Gregoire (Feb 07)
    • Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service Chad Loder (Feb 07)
• RE: DoS bug on Tru64 Jethro Rose (Feb 04)
  • nmap vs. inetd on Caldera (ex-SCO) OpenServer, Re: DoS bug on Tru64 Bela Lubkin (Feb 07)
  • <Possible follow-ups>
  • Re: DoS bug on Tru64 bugtraq () t-swat com (Feb 05)
• ICQ Bug possibly? Kronos Yademos (Feb 04)
  • <Possible follow-ups>
  • Re:ICQ Bug possibly? w0o (Feb 04)
    • Re: Re:ICQ Bug possibly? Lex de Heer (Feb 05)
• Lotus Domino password bypass Gabriel A. Maggiotti (Feb 04)
  • Re: Lotus Domino password bypass Chad Loder (Feb 04)
  • Re: Lotus Domino password bypass David Litchfield (Feb 05)
  • <Possible follow-ups>
  • Lotus Domino password bypass Red Wolf (Feb 05)
• [SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability] superpetz (Feb 04)
• Netgear RT311/RT314 sq (Feb 04)
  • Re: Netgear RT311/RT314 Rzac` (Feb 05)
  • Re: Netgear RT311/RT314 Christian Vezina (Feb 07)
  • <Possible follow-ups>
  • Re: Netgear RT311/RT314 Sullo sq (Feb 07)
• Re : Lotus Domino password bypass Nicolas Gregoire (Feb 04)
• MSN Messenger reveals your name to websites (and can reveal email addresses too) Richard Burton (Feb 05)
• Re: Vulnerability in Black ICE Defender advisories (Feb 05)
  • Re: Vulnerability in Black ICE Defender Swift Griggs (Feb 05)
  • <Possible follow-ups>
  • Vulnerability in Black ICE Defender Matt Taylor (Feb 05)
    • RE: Vulnerability in Black ICE Defender Chris Paget (Feb 05)
  • Re: Vulnerability in Black ICE Defender Troy Billington (Feb 06)
• cachemgr.cgi (squid 2.3STABLE4) Francisco Sáa Muñoz (Feb 05)
• Buffer overflow in mIRC allowing arbitary code to be executed. James Martin (Feb 05)
  • <Possible follow-ups>
  • Re: Buffer overflow in mIRC allowing arbitary code to be executed. Kevin Day (Feb 05)
• PHP Safe Mode Filesystem Circumvention Problem Dave Wilson (Feb 05)
• Microsoft .NET faults Johannes Westerink (Feb 05)
• squirrelmail: squirrelspell plugin check_me.mod.php bug skylined (Feb 05)
• Viewing arbitrary file from the file system using Eshare Expressions 4 server Alex Forkosh (Feb 05)
• OSX ICQ DoS Stephen (Feb 05)
  • Re: OSX ICQ DoS Stephen (Feb 05)
• RE: svindel.net security advisory - web admin vulnerability in Ca cheOS Campbell, Dirk (Feb 05)
• Castelle Faxpress: Password used for NT Print queue can be discl osed in Plain Text Leon Ward (Feb 05)
• Trojan / Spyware Connection made to 64.240.175.18 every time you use IE ANti-spyware Anti-virus wont detect it. Adonis.No.Spam (Feb 05)
• Sardonix Security Auditing Portal Crispin Cowan (Feb 05)
• Faq-O-Matic Cross-Site Scripting superpetz (Feb 05)
• Published Report of Vulnerability in Lucent VitalSuite Software Richard Hafner (Feb 05)
• NetScreen Response to ScreenOS Port Scan DoS Vulnerability Mike Kouri (Feb 05)
  • <Possible follow-ups>
  • Re: NetScreen Response to ScreenOS Port Scan DoS Vulnerability Chris Lathem (Feb 07)
• And another (same) bug in DCForum at user registration process (dcscripts.com) shimi (Feb 05)
• Mrtg Path Disclosure Vulnerability (Revised) Tamer Sahin (Feb 05)
• Vulnerabilities in Astaro Security Linux 2.016 Jörg Lübbert (Feb 06)
• texis(CGI) Path Disclosure Vulnerability - phinegeek - (Feb 06)
  • <Possible follow-ups>
  • Re: texis(CGI) Path Disclosure Vulnerability mark-bugtraq (Feb 11)
• MSN Messenger and UDP 1900 Louie Martinez (Feb 06)
  • RE: MSN Messenger and UDP 1900 Dustin Miller (Feb 08)
    • Re: MSN Messenger and UDP 1900 Valdis . Kletnieks (Feb 08)
• Remote Compromise in Oracle 9i Database Server NGSSoftware Insight Security Research (Feb 06)
• -Possible- licq D.o.S ciscosux (Feb 06)
  • <Possible follow-ups>
  • RE: -Possible- licq D.o.S Jon Keating (Feb 08)
• Multiple Buffer Overflows in Oracle 9iAS NGSSoftware Insight Security Research (Feb 06)
• Intel.com Mailing List Arbitrary Address Removal Link E M (Feb 06)
  • Re: Intel.com Mailing List Arbitrary Address Removal Link Joel Maslak (Feb 07)
    • Re: Intel.com Mailing List Arbitrary Address Removal Link Todd Underwood (Feb 09)
  • <Possible follow-ups>
  • Re: Intel.com Mailing List Arbitrary Address Removal Link Thierry Zoller (Feb 08)
    • Re: Intel.com Mailing List Arbitrary Address Removal Link Ryan M Harris (Feb 08)
  • RE: Intel.com Mailing List Arbitrary Address Removal Link Knud Erik Højgaard (Feb 08)
  • RE: Intel.com Mailing List Arbitrary Address Removal Link jlewis (Feb 09)
• JSP translation file access under Oracle 9iAS NGSSoftware Insight Security Research (Feb 06)
• Hackproofing Oracle Application Server paper David Litchfield (Feb 06)
• Black ICE Ping Vulnerability Side Note Stoic forty-four (Feb 06)
  • Infecting the KaZaA network? Andrew McClymont (Feb 07)
    • Re: Infecting the KaZaA network? the Pull (Feb 07)
    • Re: Infecting the KaZaA network? (unlikely) Adam Lydick (Feb 07)
    • Re: Infecting the KaZaA network? Brad Maloney (Feb 07)
  • <Possible follow-ups>
  • RE: Black ICE Ping Vulnerability Side Note Keith T. Morgan (Feb 06)
• Astaro Response: Vulnerabilities in Astaro Security Linux 2.016 Markus Hennig (Feb 06)
• CSS -> ign.com Knud Erik Højgaard (Feb 07)
  • Re: CSS -> ign.com Blake Frantz (Feb 07)
  • Message not available
    • Re: CSS -> ign.com Steven Champeon (Feb 07)
• Insecure installations of cgi wrappers (RTFM people!) Nathan Neulinger (Feb 07)
• DW020203-PHP clarification Dave Wilson (Feb 07)
• Sambar Webserver Sample Script v5.1 DoS Vulnerability Exploit Tamer Sahin (Feb 07)
• Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) obscure (Feb 07)
  • Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Mark Renouf (Feb 07)
    • Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Patrick Kuiper (Feb 07)
• Cross-site Scripting Vulnerability in .Net Framework Microsoft Security Response Center (Feb 07)
• AtheOS: escaping from a chroot jail Jedi/Sector One (Feb 07)
• Overflow Vulnerabilities in hanterm xperc (Feb 07)
• RE: Infecting the KaZaA network? Andrew McClymont (Feb 07)
  • <Possible follow-ups>
  • Re: Infecting the KaZaA network? GertJan de Leeuw (Feb 08)
    • Re: Infecting the KaZaA network? Alun Jones (Feb 08)
    • Re: Infecting the KaZaA network? Ben Laurie (Feb 11)
• Cisco Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability Cisco Systems Product Security Incident Response Team (Feb 07)
• Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability security (Feb 07)
• PHP Advisory #2 Paul Brereton (Feb 07)
• Re: new advisory - (filtering problems) b0iler _ (Feb 07)
• [SECURITY] [DSA 108-1] New wmtv packages fix symlink vulnerability Martin Schulze (Feb 07)
• [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities Global InterSec Research (Feb 07)
  • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities KOJIMA Hajime (Feb 08)
  • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities Kris Kennaway (Feb 09)
    • Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities Tom Parker (Feb 14)
• cachemgr.cgi (2.3STABLE4) (and 2) Francisco Sáa Muñoz (Feb 08)
• Security Advisory - #1 Paul Brereton (Feb 08)
  • Re: Security Advisory - #1 Dmitry Guyvoronsky (Feb 08)
  • RE: Security Advisory - #1 Colby Marks (Feb 10)
• HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technical exercise] http-equiv () malware com (Feb 08)
  • <Possible follow-ups>
  • Re: HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technical exercise] dzzie (Feb 10)
• MDKSA-2002:012 - groff update Mandrake Linux Security Team (Feb 08)
• Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability Tamer Sahin (Feb 08)
• Re: Alteon ACEdirector signature/security bug Mike Rogers (Feb 08)
• verisign payment site backdoor ? Andrej Todosic (Feb 08)
  • Re: verisign payment site backdoor ? Nojan Moshiri (Feb 10)
• Advisory #3 - PHP & JSP Paul Brereton (Feb 08)
  • Re: Advisory #3 - PHP & JSP Ryan Fox (Feb 10)
• -possible- Bufferoverflow in ICQ 2001b tsr (Feb 08)
• MSN contact list disclosure Tom Micklovitch (Feb 08)
  • RE: MSN contact list disclosure Geoff Sweet (Feb 10)
  • Re: MSN contact list disclosure Tom McAdam (Feb 11)
• RE: HELP ! : Trojanised HTML: Internet Exporer 5 and 6 [technic al exercise] Thor Larholm (Feb 08)
• [SPSadvisory#46]Apple QuickTime Player "Content-Type" Buffer Overflow webmaster (Feb 08)
• [SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access Martin Schulze (Feb 08)
• OT: Netscape security contact ? Jarno Huuskonen (Feb 08)
• large spam messages disable Hotmail accounts Stefan Demetz (Feb 08)
• Security Update [CSSA-2002-001.0] Linux - OpenLDAP attribute deletion problem Support Info (Feb 08)
• ALERT: ISS BlackICE Kernel Overflow Exploitable Marc Maiffret (Feb 09)
• Security Update [CSSA-2002-003.0] Linux - Remote attack on rsync Support Info (Feb 09)
• another hanterm exploit Stuart Moore (Feb 09)
  • Re: another hanterm exploit Jose Nazario (Feb 09)
• Security Update [CSSA-2002-002.0] Linux - Remote exploit against mutt Support Info (Feb 09)
• arescom 800 authentification flaw Powertech (Feb 09)
  • Arescom NetDSL-1000 telnetd DoS Pim van Riezen (Feb 09)
• Security Issue in Icewarp Huseyin Uslu (Feb 09)
• Account theft vulnerability in MakeBid Auction Deluxe 3.30 Blake Frantz (Feb 09)
• MSN Messenger Hijacking Tom Gilder (Feb 09)
• InstantServers MiniPortal Multiple Vulnerabilities Strumpf Noir Society (Feb 09)
• MorningStar.ca Canada And Security Practices Noam Eppel (Feb 10)
  • Re: MorningStar.ca Canada And Security Practices Tomi Tuominen (Feb 13)
• Sybex E-Trainer Directory Traversal Vulnerability ZeroBreak (Feb 11)
• EasyBoard 2000 Remote Buffer Overflow Vulnerability jhyou (Feb 11)
• Unixware Message catalog exploit code jGgM . (Feb 11)
• Vulnerability in Sawmill for Solaris v. 6.2.14 darky0da (Feb 11)
• This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP Adonis.No.Spam (Feb 11)
  • Re: This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP sozni (Feb 14)
• RUS-CERT Advisory 2002-02:01: Temporary file handling in GNAT Florian Weimer (Feb 12)
• [ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically Sandro Gauci (Feb 12)
• Deanonymizing SafeWeb Users David Martin (Feb 12)
  • <Possible follow-ups>
  • Re: Deanonymizing SafeWeb Users peleus (Feb 14)
  • Re: Deanonymizing SafeWeb Users Alexander K. Yezhov (Feb 15)
• MDKSA-2002:013 - openldap update Mandrake Linux Security Team (Feb 12)
• CERT Advisory CA-2002-03 Multiple Vulnerabilities in Many Implementations CERT Advisory (Feb 12)
• SNMP Vulnerabilities SGI Security Coordinator (Feb 12)
• SCO UnixWare 7.1.X Gogel, Derryle (Feb 12)
• Security Update: [CSSA-2002-SCO.4] Open UNIX, UnixWare 7: snmpd memory fault vulnerabilities security (Feb 12)
• [RHSA-2001:163-20] Updated ucd-snmp packages available bugzilla (Feb 13)
• more SNMP notes Robert Graham (Feb 13)
• PowerFTP Personal FTP Server Multiple Vulnerabilities Strumpf Noir Society (Feb 13)
• Outlook will see non-existing attachments Valentijn Sessink (Feb 13)
  • Re: Outlook will see non-existing attachments Paul L Daniels (Feb 15)
    • Re: Outlook will see non-existing attachments David F. Skoll (Feb 19)
• [SECURITY] [DSA 109-1] New Faq-O-Matic packages fix cross-site scripting vulnerability Martin Schulze (Feb 13)
• NetWin CWMail.exe Buffer Overflow NGSSoftware Insight Security Research (Feb 13)
• Exim 3.34 and lower (fwd) Dave Ahmad (Feb 13)
• dH & SECURITY.NNOV: buffer overflow in mshtml.dll 3APA3A (Feb 13)
• SIPS - vulnerable to anyone gaining admin access. b0iler _ (Feb 13)
• [GSA2002-01] Web browsers ignore the Content-Type header, thus allowing cross-site scripting pre (Feb 14)
• Falcon Web Server Authentication Circumvention Vulnerability Strumpf Noir Society (Feb 14)
• RE: BindView NetInventory NetRC hostcfg_ni password passed in cle ar text Blake, Scott (Feb 14)
• SNMP Enabled on Dell Servers Will Backman (Feb 14)
  • Re: SNMP Enabled on Dell Servers Barry McGeorge (Feb 14)
• [SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow Martin Schulze (Feb 14)
• Identix BioLogon 3 Paul A Roberts (Feb 14)
• Re: Authorize.Net Plain Text Login Transmission Brian Gallagher (Feb 14)
• Update on the MS02-005 patch, holes still remain Thor Larholm (Feb 14)
• Avirt Gateway 4.2 remote buffer overflow: proof of concept uid0x00 (Feb 14)
• Re: mpg321 Joe Drew (Feb 14)
• Correction: Re: Deanonymizing SafeWeb Users peleus (Feb 14)
• RE: Astaro Security Linux Improper File Permissions Flaw Markus Hennig (Feb 14)
  • <Possible follow-ups>
  • Astaro Security Linux Improper File Permissions Flaw dendler (Feb 14)
• Microsoft C++ feature against buffer overflows itself vulnerable Chris Ren (Feb 14)
  • RE: Microsoft C++ feature against buffer overflows itself vulnerable David LeBlanc (Feb 14)
• [NGSEC-2002-1] Ettercap, remote root compromise NGSEC Research Team (Feb 14)
• SafeWeb Addresses Vulnerability in Consumer Privacy Technology Sandra Song (Feb 14)
• HP Secure OS Software for Linux security bulletins digest IT Resource Center (Feb 14)
• [SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities Wichert Akkerman (Feb 14)
• Add2it Mailman command execution b0iler _ (Feb 14)
• HP-UX security bulletins digest IT Resource Center (Feb 15)
  • <Possible follow-ups>
  • HP-UX security bulletins digest IT Resource Center (Feb 15)
• In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature Brandon Bray (Feb 15)
  • Re: In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature Crispin Cowan (Feb 15)
    • RE: In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature David LeBlanc (Feb 19)
• Aprisma Response to CERT Advisory Unknown (Feb 15)
• Security Update: [CSSA-2001-SCO.36.2] REVISED: Open UNIX, UnixWare 7: wu-ftpd ftpglob() vulnerability security (Feb 15)
• Security Update: [CSSA-2002-SCO.5] Open UNIX, UnixWare 7: encrypted password disclosure security (Feb 15)
• Remote DoS in Netgear RM-356 Ben Ryan (Feb 15)
  • Re: Remote DoS in Netgear RM-356 Simple Nomad (Feb 19)
• [ARL02-A02] DCP-Portal Root Path Disclosure Vulnerability Ahmet Sabri ALPER (Feb 15)
• [ARL02-A03] DCP-Portal Cross Site Scripting Vulnerability Ahmet Sabri ALPER (Feb 15)
• MDKSA-2002:014 - ucd-snmp update Mandrake Linux Security Team (Feb 15)
• MDKSA-2002:015 - cups update Mandrake Linux Security Team (Feb 15)
• Network Queuing Environment (NQE) vulnerabilities SGI Security Coordinator (Feb 15)
• Non existing attachments, more info Valentijn Sessink (Feb 16)
  • Re: Non existing attachments, more info David F. Skoll (Feb 19)
    • Re: Non existing attachments, more info Jason Haar (Feb 21)
  • <Possible follow-ups>
  • RE: Non existing attachments, more info Grimes, Roger (Feb 20)
    • RE: Non existing attachments, more info David F. Skoll (Feb 20)
      • Re: Non existing attachments, more info William D. Colburn (aka Schlake) (Feb 21)
• SECURITY.NNOV: Bypassing content filtering software 3APA3A (Feb 16)
  • RE: SECURITY.NNOV: Bypassing content filtering software Aidan O'Kelly (Feb 19)
• SiteNews remote add user exploit Ulf H{rnhammar (Feb 16)
• SNMP test suite vs. Motorola SB4100 cable modem Powers, James L. (Feb 16)
  • Re: SNMP test suite vs. Motorola SB4100 cable modem Chris Wilson (Feb 19)
• pforum: mysql-injection-bug Jens Liebchen (Feb 16)
• codeblue remote root Andrew Griffiths (Feb 17)
• Microsoft compiler flaw, Cigital responds Gary McGraw (Feb 17)
  • ITS4 from Cigital flawed David LeBlanc (Feb 19)
  • Outlook \r expliots - ripMIME fix. Paul L Daniels (Feb 19)
• Windows XP Remote DOS attacks with SYN Flag. Make CPU 100 % Adonis.No.Spam (Feb 19)
• BlackIce 2.9 car Latest with patch "DOS attacks with URG Flag Set ARE NOT LOGGED" Adonis.No.Spam (Feb 19)
• [SECURITY] [DSA 112-1] New hanterm packages fix buffer overflow Martin Schulze (Feb 19)
• Phusion-Webserver-v1.0-Bugs&Exploits-Remotes Alex Hernandez (Feb 19)
• winamp and wma Song Licenses jelmer (Feb 19)
• [CLA-2002:463] Conectiva Linux Security Announcement - uucp secure (Feb 19)
• Netwin Webnews Buffer Overflow Vulnerability (#NISR18022002) NGSSoftware Insight Security Research (Feb 19)
• Another local root vulnerability during installation of Tarantella Enterprise 3. Larry W. Cashdollar (Feb 19)
  • Re: Another local root vulnerability during installation of Tarantella Enterprise 3. Larry W. Cashdollar (Feb 19)
• Security BugWare : Alcatel 4400 PBX hack Irib (Feb 19)
• [SA-2002:01] Slashcode login vulnerability Jamie McCarthy (Feb 19)
• [SECURITY] [DSA-113-1] New ncurses packages available Daniel Jacobowitz (Feb 19)
• Dino's Webserver v1.2 DoS, possible overflow 'ken'@FTU (Feb 19)
• CheckPoint FW1 HTTP Security Hole Volker Tanger (Feb 19)
  • Re: CheckPoint FW1 HTTP Security Hole Scott Walker Register (Feb 25)
  • <Possible follow-ups>
  • Re: CheckPoint FW1 HTTP Security Hole Greg Fraize (Feb 22)
• UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] William D. Colburn (aka Schlake) (Feb 19)
  • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Dennis Henderson (Feb 20)
  • UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Steve VanDevender (Feb 21)
    • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Mike Benham (Feb 21)
      • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Randal L. Schwartz (Feb 22)
    • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Jason Haar (Feb 21)
    • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Ronald F. Guilmette (Feb 22)
• Cert Advisory 2002-03 and HP JetDirect Information Security (Feb 19)
  • Re: Cert Advisory 2002-03 and HP JetDirect Russell Fulton (Feb 21)
  • Re: Cert Advisory 2002-03 and HP JetDirect Joshua Newton (Feb 21)
  • <Possible follow-ups>
  • Re: Cert Advisory 2002-03 and HP JetDirect david evlis reign (Feb 23)
• gnujsp: dir- and script-disclosure Thomas Springer (Feb 20)
  • Re: gnujsp: dir- and script-disclosure Stefan Gybas (Feb 20)
• Security Update: [CSSA-2002-SCO.5.1] REVISION: Open UNIX, UnixWare 7, OpenServer: encrypted password disclosure security (Feb 20)
• ScriptEase MiniWeb Server DoS Vulnerability Tamer Sahin (Feb 20)
• Whose X do I need to X to get on CERT? Jonathan G. Lampe (Feb 20)
  • RE: Whose X do I need to X to get on CERT? Matt Groves (Feb 20)
  • <Possible follow-ups>
  • RE: Whose X do I need to X to get on CERT? Jonathan G. Lampe (Feb 22)
• CSS visited pages disclosure Andrew Clover (Feb 20)
• MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS c c (Feb 20)
• Symantec Enterprise Firewall (SEF) Notify Daemon data loss via SN MP Martin O'Neal (Feb 20)
  • <Possible follow-ups>
  • Re: Symantec Enterprise Firewall (SEF) Notify Daemon data loss via SN MP Sym Security (Feb 25)
• Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies Martin O'Neal (Feb 21)
  • <Possible follow-ups>
  • Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies Sym Security (Feb 21)
• Four More ScriptEase MiniWeb Server v0.95 DoS Attacks 'ken'@FTU (Feb 21)
• Avirt 4.2 question nicolas brulez (Feb 21)
• Internet-Draft for "Responsible Disclosure Process" released Steven M. Christey (Feb 21)
• Re: Citrix NFuse 1.6 - additional network exposure Bob Fiero (Feb 21)
• Security issue with GroupWise 6 and LDAP authentication in PostOffice Frank Bulk (Feb 21)
• Why is Microsoft watching us watch DVD movies? Richard M. Smith (Feb 21)
  • Re: Why is Microsoft watching us watch DVD movies? Jamie Oulman (Feb 22)
  • Re: Why is Microsoft watching us watch DVD movies? Patrick M. Hausen (Feb 22)
    • Re: Why is Microsoft watching us watch DVD movies? Konrad Rieck (Feb 23)
      • Re: Why is Microsoft watching us watch DVD movies? Just Marc (Feb 25)
      • Re: Why is Microsoft watching us watch DVD movies? Konrad Rieck (Feb 27)
      • RE: Why is Microsoft watching us watch DVD movies? Richard M. Smith (Feb 28)
  • <Possible follow-ups>
  • RE: Why is Microsoft watching us watch DVD movies? Russ (Feb 28)
• RE: ITS4 from Cigital flawed Gary McGraw (Feb 21)
  • RE: ITS4 from Cigital flawed Jeremy Epstein (Feb 23)
• AdMentor Login Flaw Frank (Feb 21)
• "Cthulhu xhAze" - Command execution in Ans.pl b0iler _ (Feb 21)
• Squid HTTP Proxy Security Update Advisory 2002:1 Henrik Nordstrom (Feb 21)
• Check Point response to CERT CA-2002-03 (Multi-vendor SNMP vulnerabilities) Scott Walker Register (Feb 21)
• Netwin Webnews 1.1k Shai (Feb 21)
• SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability Tamer Sahin (Feb 21)
• Zero One Tech (ZOT) P100s PrintServer and SNMP Clinton Smith (Feb 21)
  • <Possible follow-ups>
  • Re: Zero One Tech (ZOT) P100s PrintServer and SNMP Clinton Smith (Feb 26)
• [SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure Martin Schulze (Feb 22)
• RE: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint fire wall] Proescholdt, timo (Feb 22)
  • RE: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint fire wall] Peter Bieringer (Feb 23)
  • RE: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint fire wall] Corey J. Steele (Feb 23)
• CNet CatchUp arbitrary code execution Andrew Clover (Feb 22)
• Security Update: [CSSA-2002-004.0] Linux - Various security problems in ucd-snmp Support Info (Feb 22)
• Gator installer Plugin allows any software to be installed obscure (Feb 22)
  • RE: Gator installer Plugin allows any software to be installed Richard M. Smith (Feb 23)
• Remote crashes in Yahoo messenger Scott Woodward (Feb 22)
  • Re: Remote crashes in Yahoo messenger Chris Bisnett (Feb 25)
  • <Possible follow-ups>
  • Re: Re: Remote crashes in Yahoo messenger Chris Bisnett (Feb 26)
• SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability Tamer Sahin (Feb 22)
• [RHSA-2002:020-05] Updated ncurses4 compat packages are available bugzilla (Feb 22)
• Security Update: [CSSA-2002-SCO.6] security (Feb 22)
• DoS Attack against many RADIUS servers Alan DeKok (Feb 22)
  • Re: DoS Attack against many RADIUS servers David Frascone (Feb 23)
• Squid buffer overflow Jouko Pynnonen (Feb 22)
• SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability Tamer Sahin (Feb 22)
• Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability. mrjade 2k2 (Feb 23)
• TSLSA-2002-0031 - squid Trustix Secure Linux Advisor (Feb 23)
• Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Tommaso Di Donato (Feb 23)
  • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Keith Simonsen (Feb 23)
  • Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint firewall] Kurt Seifried (Feb 25)
• pforum: cross-site-scripting bug Jens Liebchen (Feb 23)
• Windows Media Player executes WMF content in .MP3 files. David Korn (Feb 23)
  • <Possible follow-ups>
  • Re: Windows Media Player executes WMF content in .MP3 files. Brian McWilliams (Feb 26)
• XMB cross-scripting vulnerability skizzik (Feb 23)
  • Open Bulletin Board javascript bug. skizzik (Feb 25)
• Greymatter 1.21c and earlier - remote login/pass exposure security curmudgeon (Feb 25)
• ScriptEase:WebServer Edition vulnerability Aleksander Posmyk (Feb 25)
• SuSE Security Announcement: cups (SuSE-SA:2002:005) Thomas Biege (Feb 25)
• Symantec LiveUpdate Javier Sanchez (Feb 25)
  • RE: Symantec LiveUpdate Peter Miller (Feb 26)
  • <Possible follow-ups>
  • RE: Symantec LiveUpdate Calanan, Michael (Feb 27)
  • Re: Symantec LiveUpdate saabstory (Feb 27)
• A reason for concern over ie's GetObject() vulnerabilities... Hotmail... freewarecollector (Feb 25)
• Exploit for Tarantella Enterprise installation (bid 4115) Larry W. Cashdollar (Feb 26)
• CERT Advisory CA-2002-04 Buffer Overflow in Microsoft Internet Explorer CERT Advisory (Feb 26)
• Anti Virus Mailscanners DOS Eduardo R. Maciel (Feb 26)
  • Re: Anti Virus Mailscanners DOS Piotr Klaban (Feb 26)
  • Re: Anti Virus Mailscanners DOS Jedi/Sector One (Feb 27)
  • Re: Anti Virus Mailscanners DOS Martin Lesser (Feb 27)
  • <Possible follow-ups>
  • Re: Anti Virus Mailscanners DOS David F. Skoll (Feb 27)
• BadBlue XSS vulnerabilities / Filesharing Server Worm Strumpf Noir Society (Feb 26)
• BadBlue Yet Another Directory Traversal Strumpf Noir Society (Feb 26)
• Re: Extracting a 3DES key from an IBM 4758 Todd Arnold (Feb 26)
• [Fwd: RE: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint fire wall]] Corey J. Steele (Feb 26)
• SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch) Tamer Sahin (Feb 26)
• Practical Exploitation of RC4 Weaknesses in WEP Environments h1kari (Feb 26)
• Re: Open Bulletin Board javascript bug. godminus (Feb 26)
  • RE: Open Bulletin Board javascript bug. Justin (Feb 28)
• Re: UPDATE: [wcolburn () nmt edu: SMTP relay through checkpoint fire wall] Menashe Eliezer (Feb 26)
• BUG: Kmail client DoS Andrey Kazakov (Feb 27)
• MDKSA-2002:016-1 - squid update Mandrake Linux Security Team (Feb 27)
• [RHSA-2002:029-09] New squid packages available bugzilla (Feb 27)
• Last Call for Papers - RAID 2002 Peter Mell (Feb 27)
• Century Software Term Exploit haiku (Feb 27)
• security advisory linux 2.4.x ip_conntrack_irc Harald Welte (Feb 27)
• Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general) 3APA3A (Feb 27)
• Cisco Security Advisory: Data Leak with Cisco Express Forwarding Cisco Systems Product Security Incident Response Team (Feb 27)
• SECURITY.NNOV: Special device access in The Bat! 3APA3A (Feb 27)
• Auto file execution vulnerability in Mac OS vm_converter (Feb 27)
• LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup 3APA3A (Feb 27)
• BPM STUDIO PRO 4.2 DOS DEVICE PATH VULNERABILITY ][-][UNTER (Feb 27)
• mod_ssl Buffer Overflow Condition (Update Available) Ed Moyle (Feb 27)
• Advisory 012002: PHP remote vulnerabilities security (Feb 28)
• [RHSA-2002:028-13] Updated 2.4 kernel available bugzilla (Feb 28)
• Using Environment for returning into Lib C Elie aka \"Lupin\" Bursztein (Feb 28)
• BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY ][-][UNTER (Feb 28)

Previous period

Next period