Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

435 messages starting Oct 01 02 and ending Oct 31 02
Date index | Thread index | Author index

• GLSA: tar Daniel Ahlberg (Oct 01)
• Insecure XML-RPC handling in Zope reveals the distribution physic al location. Rossen Raykov (Oct 01)
  • Re: Insecure XML-RPC handling in Zope reveals the distribution physic al location. BlueRaven (Oct 07)
• ASA-0000: GV Execution of Arbitrary Shell Commands Marc Bevand (Oct 01)
• GLSA: fetchmail Daniel Ahlberg (Oct 01)
• [CLA-2002:527] Conectiva Linux Security Announcement - python secure (Oct 01)
• Postnuke XSS patch Mark Grimes (Oct 01)
• NETGEAR FVS318 Information Disclosure Fab\\AIS (Oct 01)
• PPTP Dave Aitel (Oct 01)
• GLSA: unzip Daniel Ahlberg (Oct 01)
• Re: Another possible RFC 2046 vulnerability. Earl Hood (Oct 01)
• iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities David Endler (Oct 01)
• XSS bug in Compaq Insight Manager Http server Taylor Huff (Oct 01)
  • <Possible follow-ups>
  • RE: XSS bug in Compaq Insight Manager Http server Toni Lassila (Oct 05)
• [BUGZILLA] Security Advisory David Miller (Oct 01)
• MSIE:"SaveRef" turns Zone off Liu Die Yu (Oct 01)
  • <Possible follow-ups>
  • RE: MSIE:"SaveRef" turns Zone off Thor Larholm (Oct 02)
• [security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability (fwd) Dave Ahmad (Oct 01)
• Apache 2 Cross-Site Scripting mattmurphy () kc rr com (Oct 02)
• Citrix Published Application Brute Forcer wirepair (Oct 02)
• Solaris 2.6, 7, 8 Jonathan S (Oct 02)
  • Re: Solaris 2.6, 7, 8 Dave Ahmad (Oct 02)
    • Re: Solaris 2.6, 7, 8 buzheng (Oct 02)
      • Re: Solaris 2.6, 7, 8 tb0b (Oct 03)
      • Re: Solaris 2.6, 7, 8 Marco Ivaldi (Oct 03)
      • Re: Solaris 2.6, 7, 8 Sebastian (Oct 05)
    • Re: Solaris 2.6, 7, 8 Christopher X. Candreva (Oct 02)
    • Re: Solaris 2.6, 7, 8 Gert-Jan Hagenaars (Oct 03)
  • Re: Solaris 2.6, 7, 8 Ido Dubrawsky (Oct 03)
  • Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
    • Re: Solaris 2.6, 7, 8 Roy Kidder (Oct 03)
  • Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
  • <Possible follow-ups>
  • RE: Solaris 2.6, 7, 8 Sinan Eren (Oct 02)
  • Re: Solaris 2.6, 7, 8 Dan Diamond (Oct 03)
  • RE: Solaris 2.6, 7, 8 Morgan (Oct 04)
• Multiple Web Security Holes Frog Man (Oct 02)
• Postnuke XSS fixed Muhammad Faisal Rauf Danka (Oct 02)
  • Re: Postnuke XSS fixed Daniel Woods (Oct 02)
    • Re: Postnuke XSS fixed Sebastian Konstanty Zdrojewski (Oct 03)
  • <Possible follow-ups>
  • Re: Postnuke XSS fixed Muhammad Faisal Rauf Danka (Oct 03)
  • Re: Postnuke XSS fixed Muhammad Faisal Rauf Danka (Oct 07)
• wp-02-0012: Carello 1.3 Remote File Execution (Updated 1/10/2002) Matt Moore (Oct 02)
• wp-02-0011: Jetty CGIServlet Arbitrary Command Execution Matt Moore (Oct 02)
• iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability David Endler (Oct 02)
  • Re: iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability Wes Hardaker (Oct 03)
• wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server Matt Moore (Oct 02)
• MySimpleNews (PHP) Frog Man (Oct 02)
• phpWebSite XSS Vulnerability Sp . IC (Oct 02)
• Kill a Unisys Clearpath with nmap port scan Jonathan G. Lampe (Oct 02)
  • Re: Kill a Unisys Clearpath with nmap port scan Mike Shaw (Oct 05)
  • <Possible follow-ups>
  • Re: Kill a Unisys Clearpath with nmap port scan Michael.Kain (Oct 05)
• wp-02-0003: MySQL Locally Exploitable Buffer Overflow Matt Moore (Oct 02)
• [ESA-20021003-021] glibc: several security-related updates. EnGarde Secure Linux (Oct 03)
• [ESA-20021003-022] tar: directory traversal vulnerability. EnGarde Secure Linux (Oct 03)
• GLSA: gv Daniel Ahlberg (Oct 03)
• [CLA-2002:529] Conectiva Linux Security Announcement - XFree86 secure (Oct 03)
• Xerox DocuShare Internal IP address disclosure Ryan Purita (Oct 03)
• RE: CommonName Toolbar potentially exposes LAN web addresses Eric Stevens (Oct 03)
  • <Possible follow-ups>
  • CommonName Toolbar potentially exposes LAN web addresses Eric Stevens (Oct 03)
    • RE: CommonName Toolbar potentially exposes LAN web addresses Mustafa Deeb (Oct 03)
    • Re: CommonName Toolbar potentially exposes LAN web addresses Andrew Clover (Oct 07)
  • RE: CommonName Toolbar potentially exposes LAN web addresses Anders Blockmar (Oct 07)
• Buffer Overflow in IE/Outlook HTML Help NGS Insight Security Research (Oct 03)
• SSL certificate validation problems in Ximian Evolution Veit Wahlich (Oct 03)
• GLSA: python Daniel Ahlberg (Oct 03)
• [ESA-20021003-023] fetchmail-ssl: buffer overflows and broken boundary checks. EnGarde Secure Linux (Oct 03)
• Re: Kondara MNU/Linux Shin SHIRAHATA (Oct 03)
• Re: [VulnDiscuss] XSS bug in Compaq Insight Manager Http server sullo (Oct 03)
• Re: Postnuke XSS issues [correction] Brian E (Oct 03)
• iDEFENSE Security Advisory 10.03.2002: Apache 1.3.x shared memory scoreboard vulnerabilities David Endler (Oct 03)
• The Books Module for the PostNuke CMS XSS Vulnerability Pistone (Oct 03)
  • Re: The Books Module for the PostNuke CMS XSS Vulnerability Michael Schatz (Oct 11)
• phpMyNewsletter Frog Man (Oct 03)
• Notes on the SQL Cumulative patch David Litchfield (Oct 04)
  • Re: [VulnWatch] Notes on the SQL Cumulative patch Dave Aitel (Oct 03)
• rpcbind/fsr_efs/mv/errhook/uux vulnerabilities SGI Security Coordinator (Oct 04)
• [SECURITY] [DSA 169-1] New tomcat packages fix unintended source code disclosure Martin Schulze (Oct 04)
• phpLinkat XSS Security Bug Sp . IC (Oct 04)
  • <Possible follow-ups>
  • phpLinkat XSS Security Bug Sp . IC (Oct 05)
• [RHSA-2002:212-06] Updated packages fix PostScript and PDF security issue bugzilla (Oct 04)
• Cisco Secure Content Accelerator vulnerable to SSL worm Matt Zimmerman (Oct 04)
  • Re: Cisco Secure Content Accelerator vulnerable to SSL worm Mike Caudill (Oct 04)
• BearShare Directory Traversal Issue Resurfaces Aviram Jenik (Oct 04)
• Cisco Security Advisory: Predefined Restriction Tables Allow Calls to International Operator Cisco Systems Product Security Incident Response Team (Oct 04)
• SECURITY.NNOV: ikonboard 3.1.1 CSS 3APA3A (Oct 04)
  • Re: SECURITY.NNOV: ikonboard 3.1.1 CSS Rajkumar S. (Oct 07)
• WinXP Pro(Gold) Insecure System Restore File Permissions Makoto Shiotsuki (Oct 04)
• vulnerabilities in logsurfer Jan Kohlrausch (Oct 04)
• [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache) OpenPKG (Oct 04)
• injecting commands on a ptraced telnet/ssh session xenion (Oct 04)
  • Re: injecting commands on a ptraced telnet/ssh session Paul Starzetz (Oct 09)
• Vulnerabilitie in PowerFTP server Armand Morgan (Oct 05)
• [RHSA-2002:197-06] Updated glibc packages fix vulnerabilities in resolver bugzilla (Oct 05)
• [RHSA-2002:175-16] Updated nss_ldap packages fix buffer overflow bugzilla (Oct 05)
• Flash player can read local files jelmer (Oct 07)
• [CLA-2002:530] Conectiva Linux Security Announcement - apache secure (Oct 07)
• ArGoSoft Web-Mail security problem Z0rbaS (Oct 07)
• SuSE Security Announcement: mod_php4 (SuSE-SA:2002:036) Thomas Biege (Oct 07)
• phpSecurePages & Killer Protection ( PHP ) Frog Man (Oct 07)
• XSS bug in hotmail login page Peter Rdam (Oct 07)
  • <Possible follow-ups>
  • RE: XSS bug in hotmail login page Thor Larholm (Oct 07)
    • RE: XSS bug in hotmail login page Russell Harding (Oct 08)
      • Re: XSS bug in hotmail login page Inderjeet S Sodhi (Oct 09)
  • RE: XSS bug in hotmail login page Thor Larholm (Oct 08)
  • Re: XSS bug in hotmail login page Muhammad Faisal Rauf Danka (Oct 08)
    • Re: XSS bug in hotmail login page Berend-Jan Wever (Oct 08)
• SuSE Security Announcement: hylafax (SuSE-SA:2002:035) Thomas Biege (Oct 07)
• Filters on url shortening services Andrew Hodgson (Oct 07)
  • Re: Filters on url shortening services Florian Weimer (Oct 07)
    • Re: Filters on url shortening services Andrew Hodgson (Oct 07)
• SPIKE 2.7 Released: There's a party at my house, so bring the beer and follow me.... Dave Aitel (Oct 07)
• Re: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv juergen.daubert (Oct 07)
• macromedia flash mx bypasses cookie settings jelmer (Oct 07)
• NetBSD Security Advisory 2002-023: sendmail smrsh bypass vulnerability NetBSD Security Officer (Oct 08)
• NetBSD Security Advisory 2002-015: (another) buffer overrun in libc/libresolv DNS resolver NetBSD Security Officer (Oct 08)
• NetBSD Security Advisory 2002-022: buffer overrun in pic(1) NetBSD Security Officer (Oct 08)
• SSGbook (ASP) Frog Man (Oct 08)
• [SECURITY] [DSA 172-1] New tkmail packages fix insecure temporary file creation Martin Schulze (Oct 08)
• [SECURITY] [DSA 169-1] New ht://Check packages fix cross site scripting problem Martin Schulze (Oct 08)
• NetBSD Security Advisory 2002-021: rogue vulnerability NetBSD Security Officer (Oct 08)
• Reset any user's password in VBZoom forums hish _ hish (Oct 08)
• [ESA-20021007-024] apache: potential DoS, cross-site scripting, and buffer overflow vulnerabilities. EnGarde Secure Linux (Oct 08)
• [SECURITY] [DSA 171-1] New fetchmail packages fix buffer overflows Martin Schulze (Oct 08)
• NetBSD Security Advisory 2002-019: Buffer overrun in talkd NetBSD Security Officer (Oct 08)
• Multiple Vendor PC firewall remote denial of services Vulnerability Yiming Gong (Oct 08)
  • <Possible follow-ups>
  • Re: Multiple Vendor PC firewall remote denial of services Vulnerability Sym Security (Oct 10)
• CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution (fwd) Dave Ahmad (Oct 08)
• [security bulletin] SSRT2208 - HP Tru64 UNIX /usr/sbin/routed Potential Security Vulnerability (fwd) Dave Ahmad (Oct 09)
• [RHSA-2002:215-09] Updated fetchmail packages fix vulnerabilities bugzilla (Oct 09)
• CSS on Microsoft Content Management Server overclocking_a_la_abuela (Oct 09)
• Flood ACK packets cause an IBM SecureWay FireWall DoS Mauro Flores (Oct 09)
• CfP: 19C3 Chaos Communication Congress 2002 Pluto (Oct 09)
• new vulnerability inPowerFTP Personal FTP Server securma massine (Oct 09)
• phpBB2 Showing users ip adresses Priamus (Oct 09)
  • Re: phpBB2 Showing users ip adresses Gerben Wijnja (Oct 10)
  • <Possible follow-ups>
  • Re: phpBB2 Showing users ip adresses nick84 (Oct 14)
• upload malicious file in VBZooM forums hish _ hish (Oct 09)
  • Re: upload malicious file in VBZooM forums M. Zeeshan Mustafa (Oct 10)
• Flood ACK packets cause AIX DoS Mauro Flores (Oct 09)
  • Re: Flood ACK packets cause AIX DoS Doug Brenner (Oct 09)
• [SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation Martin Schulze (Oct 09)
• GNU tar (Re: Allot Netenforcer problems, GNU TAR flaw) Solar Designer (Oct 09)
• Thor Larholm security advisory TL#004 Thor Larholm (Oct 09)
• [security bulletin] SSRT2339 (ypxfrd) and SSRT2368 (ypserv) HP Tru64 UNIX Potential Security Vulnerability (fwd) Dave Ahmad (Oct 09)
• Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server 'ken'@FTU (Oct 09)
• MDKSA-2002:064 - kdelibs update Mandrake Linux Security Team (Oct 09)
• XSS in Authoria HR Suite Max (Oct 09)
• Multiple vendor ypxfrd map handling vulnerability Janusz Niewiadomski (Oct 10)
• XSS bug in php(Reactor) Arab VieruZ (Oct 10)
• more silly bugs in cooolsoft 'personal ftp server' Knud Erik Højgaard (Oct 10)
• phpBBmod contains an open phpinfo Roland Verlander (Oct 10)
• TCP flood against NetGear FM114P Marc Ruef (Oct 10)
  • Re: TCP flood against NetGear FM114P Stephen Samuel (Oct 10)
• nylon 0.2 (0.3?) DoS 3APA3A (Oct 10)
• MondoSearch show the source of all files thefastkid (Oct 10)
  • <Possible follow-ups>
  • Re: MondoSearch show the source of all files Orp 664 (Oct 19)
• Multiple vulnerabilities in phpRank Jedi/Sector One (Oct 10)
• syslog-ng buffer overflow Holtzl Peter (Oct 10)
• XSS bug in Zorum 2.4 Arab VieruZ (Oct 10)
• R7-0004: Multiple Vendor Long ZIP Entry Filename Processing bugtraq-return-6791 (Oct 10)
• Plain text DDNS password in NetGear FM114P backups Marc Ruef (Oct 10)
• [RHSA-2002:207-14] Updated packages fix PostScript and PDF security issue bugzilla (Oct 10)
• Security Update: [CSSA-2002-SCO.40] OpenServer 5.0.5 OpenServer 5.0.6 : ypxfrd remote file access vulnerability security (Oct 11)
• XSS bug in PHPNuke 6.0 Arab VieruZ (Oct 11)
• prover of concept code of windows help overflow buzheng (Oct 11)
• [RHSA-2002:204-10] Updated squirrelmail packages close cross-site scripting vulnerabilities bugzilla (Oct 11)
• OpenOffice 1.0.1 Race condition during installation. Larry W. Cashdollar (Oct 11)
• Outlook Express Remote Code Execution in Preview Pane (S/MIME) Aviram Jenik (Oct 11)
• KDE Security Advisory: KGhostview Arbitary Code Execution Dirk Mueller (Oct 11)
• KDE Security Advisory: kpf Directory traversal Dirk Mueller (Oct 11)
• [SNS Advisory No.56] TSAC Web package/IIS 5.1 connect.asp Cross-site Scripting Vulnerability snsadv (Oct 11)
• Multiple firewalls ruleset bypass through FTP. Again. (CERT VU#328867) Mikael Olsson (Oct 11)
• Security hole in kpf - KDE personal fileserver. Ajay R Ramjatan (Oct 12)
• [SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability Tamer Sahin (Oct 12)
• Security Update: [CSSA-2002-SCO.39] OpenServer 5.0.5 OpenServer 5.0.6 : Buffer Overflow in Multiple DNS Resolver Libraries security (Oct 12)
• Multiple XSS vulnerabilites in PHPNuke Bruno Morisson (Oct 12)
• R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service Rapid 7 Security Advisories (Oct 12)
• Long URL crashes My Web Server 1.0.2 Marc Ruef (Oct 12)
• CALL FOR PAPERS - SANTA DIED LAST YEAR staff (Oct 14)
• Input requested for second edition of "Firewalls and Internet Security" Steve Bellovin (Oct 14)
• GLSA: nss_ldap Daniel Ahlberg (Oct 14)
• GLSA: heimdal Daniel Ahlberg (Oct 14)
• GLSA: net-snmp Daniel Ahlberg (Oct 14)
• ECHU Alert #3 : Meunity 1.1 script injection vulnerability das (Oct 14)
• Researcher seeking 'phage' and other security mailing list archives Curator at Security Digest Archive (Oct 14)
• Directory traversal in Daniel Arenz' Mini Server Marc Ruef (Oct 14)
• [SECURITY] [DSA 174-1] New heartbeat packages fix buffer overflows Martin Schulze (Oct 14)
• GLSA: sendmail Daniel Ahlberg (Oct 14)
• Pyramid Research Project - ghttpd security advisorie pyramid-rp (Oct 14)
• J2EE EJB privacy leak and DOS. Sylvia (Oct 14)
  • Re: J2EE EJB privacy leak and DOS. Rudolf Schreiner (Oct 15)
  • <Possible follow-ups>
  • RE: J2EE EJB privacy leak and DOS. Alan Rouse (Oct 15)
    • Re: J2EE EJB privacy leak and DOS. Ari Gordon-Schlosberg (Oct 16)
  • RE: J2EE EJB privacy leak and DOS. Sylvia Else (Oct 18)
• [RHSA-2002:194-18] Command execution vulnerability in dvips bugzilla (Oct 14)
• Pyramid Research Project - atphttpd security advisorie pyramid-rp (Oct 14)
• SuSE Security Announcement: Heartbeat (SuSE-SA:2002:037) Olaf Kirch (Oct 14)
• Multiple Symantec Firewall Secure Webserver timeout DoS AI-SEC Security Advisories (Oct 14)
  • <Possible follow-ups>
  • Re: Multiple Symantec Firewall Secure Webserver timeout DoS Sym Security (Oct 15)
• Symantec Enterprise Firewall Secure Webserver info leak AI-SEC Security Advisories (Oct 14)
  • <Possible follow-ups>
  • Re: Symantec Enterprise Firewall Secure Webserver info leak Sym Security (Oct 15)
• Security vulnerabilities in Polycom ViaVideo Web component advisory (Oct 14)
• Long URL causes TelCondex SimpleWebServer to crash Marc Ruef (Oct 14)
• Coolsoft PowerFTP <= v2.24 Denial of Service (Linux Source) a b (Oct 14)
• GLSA: apache Daniel Ahlberg (Oct 15)
• Internet Explorer : The D-Day GreyMagic Software (Oct 15)
• GLSA: tomcat Daniel Ahlberg (Oct 15)
• securitybugware new network tool Jitsu-Disk (Oct 15)
• MDKSA-2002:065 - unzip update Mandrake Linux Security Team (Oct 15)
• Ingenium Admin Password Vulnerability Brian Enigma (Oct 15)
• "Camera/Shy the Steganographical Browser" ttudia () yahoo com tw (Oct 15)
  • <Possible follow-ups>
  • RE: "Camera/Shy the Steganographical Browser" the Pull (Oct 15)
• rpcbind/fsr_efs/mv/errhook/uux vulnerabilities update SGI Security Coordinator (Oct 15)
• TheServer log file access password in cleartext w/vendor resolution. Larry W. Cashdollar (Oct 15)
• A full event log does not send administrative alerts Eitan Caspi (Oct 15)
• [RHSA-2002:196-09] Updated xinetd packages fix denial of service vulnerability bugzilla (Oct 15)
• Who Need Friends ? IE & MSN expose contact list & other info drorshalev (Oct 15)
  • <Possible follow-ups>
  • RE: Who Need Friends ? IE & MSN expose contact list & other info Thor Larholm (Oct 16)
• Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches Jacek Lipkowski (Oct 15)
  • Re: Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches Mike Scher (Oct 16)
    • Re: Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches Jacek Lipkowski (Oct 17)
• [SECURITY] [DSA 175-1] New syslog-ng packages fix buffer overflow Martin Schulze (Oct 15)
• iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone David Endler (Oct 15)
• CoolForum v 0.5 beta shows content of PHP files scrap (Oct 15)
  • Re: CoolForum v 0.5 beta shows content of PHP files David Woods (Oct 16)
• MDKSA-2002:066 - tar update Mandrake Linux Security Team (Oct 15)
• iDEFENSE Security Advisory 10.16.02: Denial of Service in Sabre Desktop Reservation Client for Windows David Endler (Oct 16)
• NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability Abraham Lincoln (Oct 16)
• Linux Security Protection System Bosko Radivojevic (Oct 16)
• Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow Cisco Systems Product Security Incident Response Team (Oct 16)
• X Windows zlib/MIT-SHM/huge font DoS vulnerabilities SGI Security Coordinator (Oct 16)
• Designing Shellcode Demystified Murat Balaban (Oct 16)
• phptonuke allows Remote File Retrieving Zero-X ScriptKiddy (Oct 16)
  • Re: phptonuke allows Remote File Retrieving BlueRaven (Oct 17)
• [SECURITY] [DSA 176-1] New gv packages fix buffer overflow Martin Schulze (Oct 16)
• [CLA-2002:533] Conectiva Linux Security Announcement - XFree86 secure (Oct 16)
• [CLA-2002:531] Conectiva Linux Security Announcement - fetchmail secure (Oct 16)
• Apache 1.3.26 David Wagner (Oct 16)
• MSN Moster Strike Back ?! drorshalev (Oct 16)
• [CLA-2002:532] Conectiva Linux Security Announcement - sendmail secure (Oct 16)
• [GIS 2002021001] SkyStream EMR5000 DVB router DoS. Global InterSec Research (Oct 16)
• Openwall GNU/*/Linux (Owl) 1.0 release Solar Designer (Oct 16)
• New buffer overflow in plaetDNS securma massine (Oct 17)
• NFS Denial of Service advisory from Sun m g (Oct 17)
  • Re: NFS Denial of Service advisory from Sun Edsel Adap (Oct 18)
• Re: NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability Te Smith (Oct 17)
• [SECURITY] [DSA 178-1] New Heimdal packages fix remote command execution Martin Schulze (Oct 17)
• GLSA: ggv Daniel Ahlberg (Oct 17)
• [SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable Martin Schulze (Oct 17)
  • Re: [SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable Samuele Giovanni Tonon (Oct 17)
• Microsoft SQL Server Webtasks privilege upgrade (#NISR17102002) David Litchfield (Oct 17)
• Linux Kernel Exploits / ABFrag daniel . roberts (Oct 17)
  • Re: Linux Kernel Exploits / ABFrag h2g . sec . list (Oct 17)
  • Re: Linux Kernel Exploits / ABFrag dr john halewood (Oct 17)
  • <Possible follow-ups>
  • Re: Linux Kernel Exploits / ABFrag huang po (Oct 17)
    • Re: Linux Kernel Exploits / ABFrag Cedric Blancher (Oct 17)
  • Re: Linux Kernel Exploits / ABFrag Muhammad Faisal Rauf Danka (Oct 19)
• PGP Corporation Beta License Agreement er t (Oct 17)
  • Re: PGP Corporation Beta License Agreement Juraj Bednar (Oct 17)
  • <Possible follow-ups>
  • Re: PGP Corporation Beta License Agreement Jon Callas (Oct 18)
• [RHSA-2002:206-12] New kernel fixes local security issues bugzilla (Oct 17)
• [RHSA-2002:205-15] New kernel fixes local security issues bugzilla (Oct 17)
• TSLSA-2002-0068-kernel Trustix Secure Linux Advisor (Oct 17)
• [RHSA-2002:210-06] New kernel 2.2 packages fix local vulnerabilities bugzilla (Oct 17)
• Solution: Kill a Unisys Clearpath with nmap port scan Michael.Kain (Oct 17)
• TSLSA-2002-0069-apache Trustix Secure Linux Advisor (Oct 18)
• New buffer overflow in PlanetDNS securma massine (Oct 18)
• Microsoft Windows Media Player for Sparc/Solaris vulnerability Samuel Tardieu (Oct 18)
• [SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow Martin Schulze (Oct 18)
• [Immunity, Inc.]Vulnerability: RPC Service DoS (port 135/tcp) on Windows 2000 SP3 Dave Aitel (Oct 18)
• KaZaA David Krum (Oct 18)
  • Re: KaZaA Nicholas C. Weaver (Oct 18)
  • RE: KaZaA Brenna Primrose (Oct 18)
  • Re: KaZaA Alex Lambert (Oct 18)
  • Re: KaZaA eD\\/ARd0 F/\\KEn^M3 (Oct 19)
  • <Possible follow-ups>
  • RE: KaZaA Christopher Wagner (Oct 18)
• interSEC security advisory - Multiple bugs in Web602 web server Jan Kachlik (Oct 18)
• New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums Nir Adar (Oct 18)
• SCAN Associates Advisory: perlbot 1.9.2 - Remote Command Execution guejez (Oct 18)
• Ambiguities in TCP/IP - firewall bypassing Paul Starzetz (Oct 18)
  • Re: Ambiguities in TCP/IP - firewall bypassing Alan DeKok (Oct 18)
    • Re: Ambiguities in TCP/IP - firewall bypassing Benjamin Krueger (Oct 18)
      • Re: Ambiguities in TCP/IP - firewall bypassing Alun Jones (Oct 18)
      • RE: Ambiguities in TCP/IP - firewall bypassing John Fitzgerald (Oct 19)
      • Re: Ambiguities in TCP/IP - firewall bypassing Tony Finch (Oct 19)
      • Re: Ambiguities in TCP/IP - firewall bypassing Alan DeKok (Oct 18)
      • Re: Ambiguities in TCP/IP - firewall bypassing Luis Bruno (Oct 19)
      • Re: Ambiguities in TCP/IP - firewall bypassing Lyndon Nerenberg (Oct 21)
  • Re: Ambiguities in TCP/IP - firewall bypassing Florian Weimer (Oct 18)
    • Re: Ambiguities in TCP/IP - firewall bypassing cbrenton (Oct 19)
    • Re: Ambiguities in TCP/IP - firewall bypassing Aaron Hopkins (Oct 19)
      • Re: Ambiguities in TCP/IP - firewall bypassing Florian Weimer (Oct 22)
  • Re: Ambiguities in TCP/IP - firewall bypassing David Wagner (Oct 19)
  • RE: Ambiguities in TCP/IP - firewall bypassing Ofir Arkin (Oct 22)
• vBulletin XSS Security Bug Sp . IC (Oct 18)
  • RE: vBulletin XSS Security Bug Alex Yu (Oct 21)
• SCAN Associates Advisory: madhater perlbot 1.0 beta - Remote Command Execution guejez (Oct 18)
• GLSA: tetex Daniel Ahlberg (Oct 18)
• [RHSA-2002:192-13] Updated Mozilla packages fix security vulnerabilities bugzilla (Oct 18)
• [security bulletin] SSRT0818U HP Tru64 UNIX V5.1A zlib Potential Security Vulnerability (fwd) Dave Ahmad (Oct 18)
• Full zone information disclosure on top level domain name servers Max (Oct 18)
  • <Possible follow-ups>
  • Re: Full zone information disclosure on top level domain name servers Måns Nilsson (Oct 19)
    • Re: Full zone information disclosure on top level domain name servers Jim Reid (Oct 21)
• Chrooting Daemons and System Processes HOWTO Jonathan A. Zdziarski (Oct 18)
• Re: 3Com TelnetD COMPLETE CODE bladebla (Oct 19)
• GLSA: groff Daniel Ahlberg (Oct 19)
• [SECURITY] [DSA 180-1] New NIS packages fix information leak Martin Schulze (Oct 21)
• AN HTTPD SOCKS4 username Buffer Overflow Vulnerability Kanatoko (Oct 21)
• MSIE:"SaveRef" cracks "(VictimWindow).document.write" Liu Die Yu (Oct 21)
  • Re: MSIE:"SaveRef" cracks "(VictimWindow).document.write" jelmer (Oct 21)
  • Re: MSIE:"SaveRef" cracks "(VictimWindow).document.write" jelmer (Oct 21)
• NOCC: XSS Ulf Harnhammar (Oct 21)
  • Re: [VulnWatch] NOCC: XSS ppp-design (Oct 21)
    • Re: [VulnWatch] NOCC: XSS Ulf Harnhammar (Oct 21)
• SuSE Security Announcement: postgresql (SuSE-SA:2002:038) Thomas Biege (Oct 21)
• XSS vulnerabilites in Pafiledb ersatz (Oct 21)
• Reproducing the MS DCE-RPC DOS. Joe Testa (Oct 21)
• D-Link Access Point DWL-900AP+ TFTP Vulnerability security (Oct 21)
• fragrouter trojan matt (Oct 21)
• Security Update: [CSSA-2002-SCO.41] UnixWare 7.1.1 Open UNIX 8.0.0 : rcp of /proc causes denial-of-service security (Oct 21)
• LinuxSecurity Brasil Magazine Online - Second Edition Renato Murilo Langona (Oct 21)
• Sniffing Administrator's Password in Symantec Firewall/VPN Appliance V. 200R Juan de la Fuente Costa (Oct 22)
  • <Possible follow-ups>
  • Re: Sniffing Administrator's Password in Symantec Firewall/VPN Appliance V. 200R Sym Security (Oct 22)
• [SECURITY] [DSA 181-1] New mod_ssl packages fix cross site scripting Martin Schulze (Oct 22)
• Vulnerable cached objects in IE (9 advisories in 1) GreyMagic Software (Oct 22)
  • Re: Vulnerable cached objects in IE (9 advisories in 1) jelmer (Oct 22)
    • RE: Vulnerable cached objects in IE (9 advisories in 1) GreyMagic Software (Oct 23)
  • <Possible follow-ups>
  • RE: Vulnerable cached objects in IE (9 advisories in 1) Thor Larholm (Oct 23)
• Windows 2000 SNMP DoS Chris Anley (Oct 22)
• AIM 4.8.2790 remote file execution vulnerability Blud Clot (Oct 22)
• Call For Papers Announcement: Black Hat Windows Security Jeff Moss (Oct 22)
• MS WIN RPC DoS CODE FROM SPIKE v2.7 lion (Oct 22)
  • Re: MS WIN RPC DoS CODE FROM SPIKE v2.7 Dave Aitel (Oct 22)
• NetBSD Security Advisory 2002-026: Buffer overflow in kadmind daemon NetBSD Security Officer (Oct 22)
• MDKSA-2002:069 - gv update Mandrake Linux Security Team (Oct 22)
• Virgil CGI Scanner Vulnerability kalif (Oct 22)
• [ESA-20021022-026] local kernel vulnerabilities EnGarde Secure Linux (Oct 22)
• FlashFXP 1.4 Local Password Disclosure Vulnerability Blud Clot (Oct 22)
• gBook Frog Man (Oct 22)
• [OpenPKG-SA-2002.010] OpenPKG Security Advisory (apache) OpenPKG (Oct 23)
• [SecurityOffice] Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability Tamer Sahin (Oct 23)
• does Xandros have anyone answering the security phone? Eric L. Howard (Oct 23)
  • Re: does Xandros have anyone answering the security phone? KF (Oct 23)
• MDKSA-2002:070 - tetex update Mandrake Linux Security Team (Oct 23)
• MITKRB5-SA-2002-002: Buffer overflow in kadmind4 Tom Yu (Oct 23)
• Security Update: [CSSA-2002-036.0] Linux: remote buffer overflow in webalizer reverse lookup code security (Oct 23)
• XSS bug in MyMarket 1.71 qber66 (Oct 23)
  • Router DSL Dlink Linux (Oct 24)
    • Re: Router DSL Dlink Markus Garscha (Oct 24)
• R7-0008: IBM WebSphere Edge Server Caching Proxy Cross-Site Scripting Issues Rapid 7 Security Advisories (Oct 23)
• R7-0007: IBM WebSphere Edge Server Caching Proxy Denial of Service Rapid 7 Security Advisories (Oct 23)
• GLSA: xfree Daniel Ahlberg (Oct 24)
• TFTP Server DoS D4rkGr3y (Oct 24)
• [RHSA-2002:223-07] Updated ypserv packages fixes memory leak bugzilla (Oct 24)
• DH team: Norton Antivirus Corporate Edition Privilege Escalation 3APA3A (Oct 24)
• NetBSD Security Advisory 2002-025: trek(6) buffer overrun NetBSD Security Officer (Oct 24)
• Multiple issues in internet explorer/outlook John C. Hennessy (Oct 24)
• Security Update: [CSSA-2002-037.0] Linux: various packet handling vunerabilities in ethereal security (Oct 24)
• ABfrag followup / WITHOUT ATTACHMENT daniel . roberts (Oct 24)
• XSS vulnerability in Mojo Mail Sign-Up Form Daniel Boland (Oct 24)
• vpopmail CGIapps vpasswd vulnerabilities Ignacio Vazquez (Oct 24)
  • Re: vpopmail CGIapps vpasswd vulnerabilities Jeremy C. Reed (Oct 24)
• vpopmail CGIapps vadddomain multiple vulnerabilities Ignacio Vazquez (Oct 24)
• Reminder: Call for Papers IWIA 2003 Ends Soon Stephen D. B. Wolthusen (Oct 24)
• [SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability Tamer Sahin (Oct 24)
• [SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability Tamer Sahin (Oct 24)
• [SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability Tamer Sahin (Oct 24)
• MDKSA-2002:071 - kdegraphics update Mandrake Linux Security Team (Oct 24)
• MDKSA-2002:072 - mod_ssl update Mandrake Linux Security Team (Oct 24)
• iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server David Endler (Oct 24)
• GLSA: zope Daniel Ahlberg (Oct 25)
• IBM Infoprint Remote Management Simple DoS Toni Lassila (Oct 25)
  • Re: IBM Infoprint Remote Management Simple DoS Fredrik Björk (Oct 28)
• Security Update: [CSSA-2002-038.0] Linux: inn format string and insecure open vulnerabilities security (Oct 25)
• Sec-Tec advisory 24.10.02 Unauthorised file acces in Acuma's Acusend David Wray (Oct 25)
• IPSwitch, Inc. WS_FTP Server dev-null (Oct 25)
  • Re: IPSwitch, Inc. WS_FTP Server Alun Jones (Oct 25)
    • Re[2]: IPSwitch, Inc. WS_FTP Server 3APA3A (Oct 26)
• RE: DH team: Norton Antivirus Corporate Edition Privilege Escalation, http://online.securityfocus.com/archive/1/296979/2002-10-22/2002-10-28/0 Sym Security (Oct 25)
• Updated: MITKRB5-SA-2002-002: Buffer overflow in kadmind4 Tom Yu (Oct 26)
• TCP/IP Printer Configuration Utility for Apple.LaserWriter 12/640 PS security problem UkR security team™ (Oct 26)
• GLSA: kth-krb Daniel Ahlberg (Oct 26)
• GLSA: mod_ssl Daniel Ahlberg (Oct 28)
• Re: Buffer overflow in kadmind4 Chris Barnes (Oct 28)
• Substitution of document signed under new American format ECDSA. Alexander Komlin (Oct 28)
• Oracle9iAS Web Cache Denial of Service (a102802-1) @stake advisories (Oct 28)
• Re: Privilege Escalation Vulnerability In phpBB 2.0.0 x x (Oct 28)
  • <Possible follow-ups>
  • Privilege Escalation Vulnerability In phpBB 2.0.0 nick84 (Oct 28)
• MDaemon SMTP/POP/IMAP server DoS D4rkGr3y (Oct 28)
  • RE: MDaemon SMTP/POP/IMAP server DoS Basil Hussain (Oct 29)
    • RE: MDaemon SMTP/POP/IMAP server DoS Robert Feldbauer (Oct 29)
  • <Possible follow-ups>
  • Re: MDaemon SMTP/POP/IMAP server DoS Muhammad Faisal Rauf Danka (Oct 29)
    • RE: MDaemon SMTP/POP/IMAP server DoS Basil Hussain (Oct 30)
• CISCO as5350 crashes with nmap connect scan Thomas Munn (Oct 28)
  • <Possible follow-ups>
  • Re: CISCO as5350 crashes with nmap connect scan Thomas Munn (Oct 29)
  • Re: CISCO as5350 crashes with nmap connect scan Thomas Munn (Oct 29)
  • Re: CISCO as5350 crashes with nmap connect scan Wendy Garvin (Oct 29)
• GLSA: ypserv Daniel Ahlberg (Oct 28)
• [SNS Advisory No.57] AN HTTPD Cross-site Scripting Vulnerability snsadv () lac co jp (Oct 28)
• [SECURITY] [DSA 182-1] New kghostview packages fix buffer overflow Martin Schulze (Oct 28)
• SCAN Associates Advisory : Multiple vurnerabilities on mailreader.com pokleyzz (Oct 28)
• dobermann FORUM (php) Frog Man (Oct 28)
  • <Possible follow-ups>
  • RE: dobermann FORUM (php) Mark Stunnenberg (Oct 29)
• Security Update: [CSSA-2002-040.0] Linux: uudecode performs inadequate checks on user-specified output files security (Oct 28)
• GLSA: krb5 Daniel Ahlberg (Oct 29)
• [ESA-20021029-027] mod_ssl cross-site scripting vulnerability. EnGarde Secure Linux (Oct 29)
• [ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED) EnGarde Secure Linux (Oct 29)
• Further problems with Arescom NetDSL-800 MSN Firmware version 5.4.x and up Justin Cervero (Oct 29)
• Security Update: [CSSA-2002-041.0] Linux: pam_ldap format string vulnerability security (Oct 29)
• Security Update: [CSSA-2002-039.0] Linux: bzip2 file creation and symbolic link vulnerabilities security (Oct 29)
• KRB5-SORCERER2002-10-27 Security Update ask33 (Oct 29)
• IP SmartSpoofing : How to bypass all IP filters relying on sourc e IP address Vincent Royer (Oct 29)
• Re: SUMMARY: Disabling Port 445 (SMB) Entirely dan hayden (Oct 29)
• Bypassing website filter in SonicWall Marc Ruef (Oct 29)
  • Re: Bypassing website filter in SonicWall Kurt Seifried (Oct 29)
  • Re: Bypassing website filter in SonicWall Robert Bihlmeyer (Oct 31)
• [SECURITY] [DSA 183-1] New krb5 packages fix buffer overflow Martin Schulze (Oct 29)
• MDKSA-2002:073 - krb5 update Mandrake Linux Security Team (Oct 29)
• Gimp: Erased sections of images print in some cases Clark Mills (Oct 29)
  • Re: Gimp: Erased sections of images print in some cases Robert Bihlmeyer (Oct 30)
  • Re: Gimp: Erased sections of images print in some cases Earl Hood (Oct 31)
• XXE (Xml eXternal Entity) attack Gregory Steuck (Oct 29)
  • Re: XXE (Xml eXternal Entity) attack Miles Sabin (Oct 30)
• GLSA: sharutils Daniel Ahlberg (Oct 30)
• [SECURITY] [DSA 184-1] New krb4 packages fix buffer overflow Martin Schulze (Oct 30)
• GLSA: pam_ldap Daniel Ahlberg (Oct 30)
• SuSE Security Announcement: syslog-ng (SuSE-SA:2002:039) Sebastian Krahmer (Oct 31)
• [SECURITY] [DSA 185-1] New heimdal packages fix buffer overflows Martin Schulze (Oct 31)
• SmartMail server DOS securma massine (Oct 31)
• SuSE Security Announcement: lprng/html2ps (SuSE-SA:2002:040) Sebastian Krahmer (Oct 31)
• Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002) NGSSoftware Insight Security Research (Oct 31)
  • Anyone know the security alert contact for 3com? Michael Scheidell (Oct 31)
• Security Update: [CSSA-2002-043.0] Linux: chfn (util-linux) temp file race vulnerability security (Oct 31)
• MDKSA-2002:074 - mozilla update Mandrake Linux Security Team (Oct 31)

Previous period

Next period