Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

396 messages starting Apr 01 03 and ending Apr 30 03
Date index | Thread index | Author index

• NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability NSFCOSU Security Team (Apr 01)
  • Re: NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability Alan Kong (Apr 02)
• [RHSA-2003:034-01] Updated dhcp packages fix possible packet storm bugzilla (Apr 01)
• Ericsson Mobile Phones Security Contact? Ollie Whitehouse (Apr 01)
• GLSA: krb5 & mit-krb5 (200303-28) Daniel Ahlberg (Apr 01)
• serious vulnerability present. all doomed. over. Security Experts, Liability Limited (Apr 01)
• GLSA: openafs (200303-26) Daniel Ahlberg (Apr 02)
• FreeBSD Security Advisory FreeBSD-SA-03:07.sendmail FreeBSD Security Advisories (Apr 02)
• [RHSA-2003:084-01] Updated vsftpd packages re-enable tcp_wrappers support bugzilla (Apr 02)
• Re: IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability panic (Apr 02)
• MiniPortal subj (Apr 02)
• Fwd: QuickTime 6.1 for Windows is available Bryan Blackburn (Apr 02)
• iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player iDEFENSE Labs (Apr 02)
• [RHSA-2003:095-03] New samba packages fix security vulnerabilities bugzilla (Apr 02)
• Immunix Secured OS 7+ openssl update Immunix Security Team (Apr 02)
• Buffer Overflow in Broker FTP Server subj (Apr 02)
  • Re: Buffer Overflow in Broker FTP Server Knud Erik Højgaard (Apr 10)
• Sambar Server "Buffer OverFlow" Vulnerabilities Lorenzo Manuel Hernandez Garcia-Hierro (Apr 02)
• [RHSA-2003:101-01] Updated OpenSSL packages fix vulnerabilities bugzilla (Apr 02)
• BRS WebWeaver: full disclosure euronymous (Apr 02)
• TYPSoft FTP Server subj (Apr 02)
• Immunix Secured OS 7+ samba update Immunix Security Team (Apr 02)
  • <Possible follow-ups>
  • Immunix Secured OS 7+ samba update Immunix Security Team (Apr 07)
• [SCSA-015] Remote Denial of Service Vulnerability in PowerFTP Grégory (Apr 02)
• [ANNOUNCE] Apache 2.0.45 Released Lars Eilebrecht (Apr 02)
• re:3com RAS 1500 Remote vulnerabilities. Jan Kachlik (Apr 02)
• Phorum 3.4 Cross Site Scripting Stöckli (Apr 02)
  • Re: Phorum 3.4 Cross Site Scripting Hagen Kühnel - HagK (Apr 03)
  • <Possible follow-ups>
  • Re: Phorum 3.4 Cross Site Scripting Brian Moon (Apr 03)
• [INetCop Security Advisory] Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. dong-h0un U (Apr 02)
• @(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function Sir Mordred (Apr 02)
• Re: Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall Peter Pentchev (Apr 02)
• RE: Netscape and Opera crash via java Zelena Endre (Apr 02)
  • RE: Netscape and Opera crash via java Richard H. Cotterell (Apr 04)
    • Re: Netscape and Opera crash via java Dan Harkless (Apr 12)
• Inaccurate Reports Concerning PHP Vulnerabilities mattmurphy () kc rr com (Apr 02)
• Viewpoint Server Ben Maynard (Apr 02)
• IkonBoard v3.1.1: arbitrary command execution Nick Cleaton (Apr 02)
• @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Sir Mordred (Apr 02)
  • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Goran Krajnovic (Apr 03)
    • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Jedi/Sector One (Apr 04)
    • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Javi Lavandeira (Apr 04)
      • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Jon Ribbens (Apr 04)
• OpenSSH 3.6.1 released Markus Friedl (Apr 02)
• [SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit Martin Schulze (Apr 02)
• Css in Xoops module glossary 1.3.x magistrat (Apr 02)
• XSS in Python Documentation Server euronymous (Apr 02)
• [RHSA-2003:091-01] Updated kerberos packages fix various vulnerabilities bugzilla (Apr 02)
• BEA WebLogic internal hostname disclosure Michael Hendrickx (Apr 02)
  • Re: BEA WebLogic internal hostname disclosure Kurt Seifried (Apr 03)
• Microsoft Terminal Services vulnerable to MITM-attacks. Erik Forsberg (Apr 02)
  • RE: Microsoft Terminal Services vulnerable to MITM-attacks. Larry Seltzer (Apr 03)
    • Re: Microsoft Terminal Services vulnerable to MITM-attacks. Erik Forsberg (Apr 03)
    • RE: Microsoft Terminal Services vulnerable to MITM-attacks. Devin Heitmueller (Apr 04)
      • Re: Microsoft Terminal Services vulnerable to MITM-attacks. Henrik Storner (Apr 04)
  • <Possible follow-ups>
  • Re: Microsoft Terminal Services vulnerable to MITM-attacks. Carlos Branco (Apr 11)
• Re: PHP-Nuke block-Forums.php subject vulnerabilities Frog Man (Apr 02)
• MDKSA-2003:040 - Updated Eterm packages fix escape sequence insecurities Mandrake Linux Security Team (Apr 02)
• Java and Javascript David F. Madrid (Apr 02)
• Re: Oracle JDBC: Inconsistent handling of timestamps Peter J. Holzer (Apr 02)
• Another security problem in Netgear FM114P ProSafe Wireless Router firmware Björn Stickler (Apr 03)
• [SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit Martin Schulze (Apr 03)
• [SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit Martin Schulze (Apr 03)
• Security Update: [CSSA-2003-016.0] OpenLinux: sendmail sign extension buffer overflow (CERT CA-2003-12) security (Apr 03)
• [RHSA-2003:128-01] Updated Eye of GNOME packages fix vulnerability bugzilla (Apr 03)
• Using Java from Javascript David F. Madrid (Apr 03)
• SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow KF (Apr 03)
  • Re: SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow Marius Popa Adrian (Apr 04)
• Multiple vulnerabilities in AutomatedShops WebC shopping cart Carl Livitt (Apr 03)
  • Re: Multiple vulnerabilities in AutomatedShops WebC shopping cart Carl Livitt (Apr 04)
• SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read KF (Apr 03)
• RE: Another security problem in Netgear FM114P ProSafe Wireless Router firmware (also level-one) Björn Stickler (Apr 03)
• [RHSA-2003:060-01] Updated NetPBM packages fix multiple vulnerabilities bugzilla (Apr 03)
• passlogd sniffer remote buffer overflow root exploit. dong-h0un U (Apr 03)
  • Re: passlogd sniffer remote buffer overflow root exploit. Dragos Ruiu (Apr 04)
• Sendmail parseaddr security vulnerability on IRIX SGI Security Coordinator (Apr 03)
• [RHSA-2003:109-03] Updated balsa and mutt packages fix vulnerabilities bugzilla (Apr 03)
• Sakki's guestbook V.1.01 script injection vulnerability. drG4njubas (Apr 03)
• NetBIOS could be used as network flood amplier Francesco Vigo (Apr 04)
  • <Possible follow-ups>
  • RE: NetBIOS could be used as network flood amplier Russ (Apr 04)
  • Re: NetBIOS could be used as network flood amplier Francesco Vigo (Apr 07)
• [SECURITY] [DSA 278-1] New sendmail packages fix denial of service Martin Schulze (Apr 04)
• [SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution Martin Schulze (Apr 04)
• Syscall implementation could lead to whether or not a file exists Andrew Griffiths (Apr 04)
• NetBSD Security Advisory 2003-006: Cryptographic weaknesses in Kerberos v4 protocol NetBSD Security Officer (Apr 04)
• [CLA-2003:613] Conectiva Security Announcement - snort Conectiva Updates (Apr 04)
• TA-2003-03 Buffer Overflow Vulnerability in Hyperion FTP Server 3.0 Rushjo () tripbit org (Apr 04)
• [CLA-2003:614] Conectiva Security Announcement - sendmail Conectiva Updates (Apr 04)
• AspJar guestbook script injection vulnerability. drG4njubas (Apr 04)
• SuSE Security Announcement: openssl (SuSE-SA:2003:024) Sebastian Krahmer (Apr 04)
• Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Vladimir Katalov (Apr 04)
• An Alternate View of Recently Reported PHP Vulnerabilities Steven M. Christey (Apr 04)
  • Re: An Alternate View of Recently Reported PHP Vulnerabilities Sascha Schumann (Apr 04)
  • Re: An Alternate View of Recently Reported PHP Vulnerabilities Goran Krajnovic (Apr 05)
  • Re: An Alternate View of Recently Reported PHP Vulnerabilities dullien (Apr 05)
• buffalo AirStation G54 - (WBR-G54 ) DoS Pavel shpac (Apr 04)
• NetBSD Security Advisory 2003-009: sendmail buffer overrun in prescan() address parser NetBSD Security Officer (Apr 04)
• [CLA-2003:616] Conectiva Security Announcement - dhcp Conectiva Updates (Apr 04)
• [CLA-2003:617] Conectiva Security Announcement - file Conectiva Updates (Apr 04)
• SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call KF (Apr 04)
• LocalSystem account in Windows 2000/XP Pavel (Apr 04)
  • <Possible follow-ups>
  • RE: LocalSystem account in Windows 2000/XP Russ (Apr 05)
• [CLA-2003:615] Conectiva Security Announcement - samba Conectiva Updates (Apr 04)
• Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Muhammad Faisal Rauf Danka (Apr 04)
• SignHere guestbook vulnerability. drG4njubas (Apr 05)
• Abyss X1 1.1.2 remote crash Auriemma Luigi (Apr 05)
• Two Invision Power Board 1.1.x vulns Gossi The Dog (Apr 05)
• Interbase/Firebird - external file security bug Kotala ZdenÄ›k (Apr 05)
• [DDI-1013] Buffer Overflow in Samba allows remote root compromise Erik Parker (Apr 07)
• [CLA-2003:618] Conectiva Security Announcement - kernel Conectiva Updates (Apr 07)
• [SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation Martin Schulze (Apr 07)
• [OpenPKG-SA-2003.028] OpenPKG Security Advisory (samba) OpenPKG (Apr 07)
• Vignette Story Server sensitive information disclosure (a040703-1) @stake Advisories (Apr 07)
• Java Agent freezes Lotus Notes and Domino 6.0.1 Marc Schoenefeld (Apr 07)
• JpegX 2.0.0.3 Password Bypass Vulnerability JeiAr (Apr 07)
• Immunix Secured OS 7+ cvs update Immunix Security Team (Apr 07)
• [SECURITY] [DSA 280-1] New samba packages fix remote root exploit Martin Schulze (Apr 07)
• [CLA-2003:619] Conectiva Security Announcement - zlib Conectiva Updates (Apr 07)
• SuSE Security Announcement: samba (SuSE-SA:2003:025) Roman Drahtmueller (Apr 07)
• MDKSA-2003:044 - Updated samba packages fix remote root vulnerability Mandrake Linux Security Team (Apr 07)
• Coppermine Photo Gallery remote compromise Berend-Jan Wever (Apr 07)
• Immunix Secured OS 7+ Kerberos update Immunix Security Team (Apr 08)
• Unchecked Buffer in Opera 7.02 David F.Madrid (Apr 08)
  • Re: Unchecked Buffer in Opera 7.02 nesumin (Apr 11)
• [RHSA-2003:137-01] New samba packages fix security vulnerability bugzilla (Apr 08)
• TSLSA-2003-0019 - samba Trustix Secure Linux Advisor (Apr 08)
• [Sorcerer-spells] SAMBA--SORCERER2003-04-08 Michael Walton (Apr 08)
• mIRC "dcc filename spoofing" Knud Erik Højgaard (Apr 08)
• AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Phil Cyc (Apr 08)
  • Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Phil Cyc (Apr 10)
  • <Possible follow-ups>
  • Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Hilko Bengen (Apr 12)
• Orplex guestbook script injection. drG4njubas (Apr 08)
• [CLA-2003:620] Conectiva Security Announcement - man Conectiva Updates (Apr 08)
• [SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution Martin Schulze (Apr 08)
• [RHSA-2003:036-01] Updated mgetty packages available bugzilla (Apr 08)
• iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x iDEFENSE Labs (Apr 08)
• False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Apr 08)
  • Re: False-negatives in several Vulnerability Assessment tools Geoff Shively (Apr 08)
  • Re: False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Apr 17)
• Multiple Vulnerabilities in libc RPC functions on IRIX SGI Security Coordinator (Apr 10)
• samba 2.x call_trans2open() exploit noir sin (Apr 10)
• GLSA: setiathome (200304-03) Daniel Ahlberg (Apr 10)
• ISC guestbook script injection vulnerability. drG4njubas (Apr 10)
• Exploit Code Released for Apache 2.x Memory Leak mattmurphy () kc rr com (Apr 10)
  • Arp records in solaris Edward J. Aivazian (Apr 12)
    • Re: Arp records in solaris Brad Arlt (Apr 14)
  • <Possible follow-ups>
  • Re: Exploit Code Released for Apache 2.x Memory Leak Serban Murariu (Apr 11)
• Immunix Secured OS 7+ PostgreSQL update WireX Security (Apr 10)
  • <Possible follow-ups>
  • Immunix Secured OS 7+ PostgreSQL update WireX Security Team (Apr 12)
• [ARL03-A16] Multiple Security Issues in phPay Ahmet Sabri ALPER (Apr 10)
• Immunix Secured OS 7+ MySQL update WireX Security (Apr 10)
  • <Possible follow-ups>
  • Immunix Secured OS 7+ MySQL update WireX Security Team (Apr 12)
• GLSA: apache (200304-01) Daniel Ahlberg (Apr 10)
• [CLA-2003:624] Conectiva Security Announcement - samba Conectiva Updates (Apr 10)
• [SECURITY] [DSA 269-2] New heimdal packages fix authentication failure Martin Schulze (Apr 10)
• [RHSA-2003:137-02] New samba packages fix security vulnerability bugzilla (Apr 10)
• Hyperion FTP server Remote DOS and unauthorised remote access. moran zavdi (Apr 10)
• PoPToP PPTP server remotely exploitable buffer overflow Timo Sirainen (Apr 10)
  • Re: PoPToP PPTP server remotely exploitable buffer overflow Dick St.Peters (Apr 11)
• GLSA: samba (200304-02) Daniel Ahlberg (Apr 10)
• Vulnerabilities in Portable Executable (PE) File Format For Win32 Architecture Exurity Inc. (Apr 10)
  • Protection against buffer overflows: when your anchor is washed away, then you are overflowed and refuse to RET Exurity Inc. (Apr 12)
• iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (ISA) S iDEFENSE Labs (Apr 10)
• Samba Security Vulnerability on IRIX SGI Security Coordinator (Apr 10)
• Disclosing information in Super GuestBook Over_G (Apr 10)
• Admin access in GuestBook r4 Over_G (Apr 10)
• working apache <= 2.0.44 DoS exploit for linux. Daniel Nyström (Apr 10)
  • Re: working apache <= 2.0.44 DoS exploit for linux. Paul Johnston (Apr 12)
• KDE Security Advisory: PS/PDF file handling vulnerability Dirk Mueller (Apr 10)
• Flaw in Microsoft VM Could Enable System Compromise K-Otik . com (Apr 10)
• MDKSA-2003:038-1 - Updated 2.4 kernel packages fix ptrace vulnerability Mandrake Linux Security Team (Apr 11)
• xfsdump creates files insecurely on IRIX SGI Security Coordinator (Apr 11)
• GLSA: kde-3.x (200304-04) Daniel Ahlberg (Apr 11)
• [CLA-2003:625] Conectiva Security Announcement - openssl Conectiva Updates (Apr 12)
• Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability Integrigy Security Alerts (Apr 12)
• GLSA: kde-2.x (200304-05) Daniel Ahlberg (Apr 12)
• [RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder bugzilla (Apr 12)
• Medium Vulnerability in SNMP on Linsys BEFVP41 Branson Matheson (Apr 12)
  • Re: Medium Vulnerability in SNMP on Linsys BEFVP41 Stefan Laudat (Apr 12)
• MacOS X DirectoryService Privilege Escalation (a041003-1) @stake Advisories (Apr 12)
• FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database. Stephen White (Apr 12)
• Buffer Overflow Vulnerability Found in MailMax Version 5 Dennis Rand (Apr 12)
• [SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation Martin Schulze (Apr 12)
• Brocade Firmware SNMP Vulnerability SGI Security Coordinator (Apr 12)
• IRIX ToolTalk Vulnerabilities Update SGI Security Coordinator (Apr 12)
• R7-0013: Heap Corruption in Gaim-Encryption Plugin Rapid 7 Security Advisories (Apr 12)
• PATCH: [CAN-2003-0132] Apache 2.0.44 Denial of Service Vulnerability William A. Rowe, Jr. (Apr 12)
• Ocean12 ASP Guestbook Manager v1.00 drG4njubas (Apr 12)
• repost: SRT2003-04-01-1231 - Progress DLC overflows KF (Apr 12)
• [Sorcerer-spells] KDE-SORCERER2003-04-12 Michael Walton (Apr 12)
• [SECURITY] [DSA 284-1] New kdegraphics packages fix arbitrary command execution Martin Schulze (Apr 12)
• [SECURITY] [DSA 274-2] New mutt packages fix arbitrary code execution in potato Martin Schulze (Apr 12)
• Multiple vulnerabilities in SheerDNS Jedi/Sector One (Apr 14)
• Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach Aviram Jenik (Apr 14)
• [SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation Martin Schulze (Apr 14)
• [SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation Martin Schulze (Apr 14)
• Instaboard 1.3 SQL Injection Jim Dew (Apr 14)
• Multiple Vulnerabilities in BSD LPR Subsystem on IRIX SGI Security Coordinator (Apr 14)
• bitchx sources backdoored on distribution site MichaÅ‚ Szwaczko (Apr 14)
  • Re: bitchx sources backdoored on distribution site Neeko Oni (Apr 14)
• Web Wiz Site News realease v3.06 administration access. drG4njubas (Apr 14)
• ActivCard password cache memory leakage OTERO Hernan Gustavo EDS (Apr 14)
  • <Possible follow-ups>
  • Re: ActivCard password cache memory leakage Massimo Cereda (Apr 15)
• GLSA: kde-2.x (200304-05.1) Daniel Ahlberg (Apr 14)
• [RHSA-2003:126-01] Updated gtkhtml packages fix vulnerability bugzilla (Apr 14)
• FipsGuestbook Version 1.12.7 script injection. drG4njubas (Apr 14)
• [CLA-2003:626] Conectiva Security Announcement - mutt Conectiva Updates (Apr 14)
• bitchx sources trojaned - follow up MichaÅ‚ Szwaczko (Apr 14)
• GLSA: kdegraphics-3.1.x (200304-04.1) Daniel Ahlberg (Apr 15)
• MDKSA-2003:046 - Updated gtkhtml packages fix vulnerability Mandrake Linux Security Team (Apr 15)
• [SCSA-016] Multiple vulnerabilities in Ez publish Grégory (Apr 15)
• nb1300 router - default settings expose password denote (Apr 15)
• [SECURITY] [DSA 287-1] New EPIC packages fix DoS and arbitrary code execution Martin Schulze (Apr 15)
• SRT2003-04-15-1029 - Progres BINPATHX overflow KF (Apr 15)
• BitchX trojan, the real follow up. Rob Andrews (Apr 15)
• MDKSA-2003:045 - Updated evolution packages fix multiple vulnerabilities Mandrake Linux Security Team (Apr 15)
• [SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato) Martin Schulze (Apr 15)
• Windows 2003 win2k.sys vulnerability securityfocus.com (Apr 15)
• Oddities in Windows ACL inheritance Nicolas RUFF (lists) (Apr 15)
• CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability CORE Security Technologies Advisories (Apr 15)
• Immunix Secured OS 7+ glibc update Immunix Security Team (Apr 15)
• Veritas BackupExec 9.0 may ship with upatched MS SQL Desktop Engine Marcus Beaman (Apr 15)
• SFAD03-001: iWeb Mini Web Server Remote Directory Traversal subversive (Apr 16)
• i cracked restriction of 'zone' in mozilla. Liu Die Yu (Apr 16)
  • Re: i cracked restriction of 'zone' in mozilla. Alla Bezroutchko (Apr 17)
• MDKSA-2003:047 - Updated xfsdump packages fix insecure file creation Mandrake Linux Security Team (Apr 16)
• Netgear Logging Vulnerability { } (Apr 16)
• MDKSA-2003:048 - Updated eog packages fix arbitrary command execution Mandrake Linux Security Team (Apr 16)
• [CLA-2003:627] Conectiva Security Announcement - ethereal Conectiva Updates (Apr 16)
• Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Ryan Emerle (Apr 16)
  • Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Roland Postle (Apr 17)
  • RE: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Steve Ryan (Apr 17)
  • <Possible follow-ups>
  • Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) mattmurphy (Apr 21)
• [SCSA-017] Directory Traversal Vulnerability in EZ Server Grégory (Apr 17)
• [SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution Martin Schulze (Apr 17)
• IE 6.0 - trivial crash Adam [ckkl] (Apr 17)
  • Re: IE 6.0 - trivial crash Richard Moore (Apr 17)
  • Re: IE 6.0 - trivial crash Geoff Shively (Apr 17)
• Vulnerability in rinetd Martin Schulze (Apr 17)
• [SECURITY] [DSA 289-1] New rinetd packages fix denial of service Martin Schulze (Apr 17)
• [SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability Martin Schulze (Apr 17)
• Web Wiz Forums all version db stealing Uziel aka nuJIurpuM (Apr 17)
• MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution Mandrake Linux Security Team (Apr 17)
• CrossSite Scripting @ Snitz Forums 2000 badwebmasters (Apr 17)
• Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Muhammad Faisal Rauf Danka (Apr 17)
• [CLA-2003:628] Conectiva Security Announcement - vixie-cron Conectiva Updates (Apr 17)
• Xinetd 2.3.10 Memory Leaks Steve Grubb (Apr 18)
• Exploit for PoPToP PPTP server einstein, dhtm (Apr 18)
  • Re: Exploit for PoPToP PPTP server - Linux version John Leach (Apr 22)
• Authentication flaw in microsoft SMB protocol seclab (Apr 19)
  • Re: Authentication flaw in microsoft SMB protocol Dave Aitel (Apr 19)
  • <Possible follow-ups>
  • RE: Authentication flaw in microsoft SMB protocol Jesper Johansson (Apr 22)
    • Re[2]: Authentication flaw in microsoft SMB protocol 3APA3A (Apr 23)
  • Re: Authentication flaw in microsoft SMB protocol Chris Wysopal (Apr 22)
• IE 6.0 - trivial crash - part II Adam [ckkl] (Apr 19)
  • IE / Outlook / MS SHLWAPI Render - more trivial crash Ramon Pinuaga Cascales (Apr 22)
    • RE : IE / Outlook / MS SHLWAPI Render - more trivial crash Gervaize Maquard (Apr 22)
      • Re: IE / Outlook / MS SHLWAPI Render - more trivial crash Berend-Jan Wever (Apr 23)
      • RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash kajbaf (Apr 29)
• Race in XP SCM Service Shutdown Mechanism Matthew Murphy (Apr 21)
• BadBlue Remote Administrative Access Vulnerability Matthew Murphy (Apr 21)
• ACER Travelmate 600 and 800 series - Smartcard flawed Implementation Leonard.Ong (Apr 21)
• MPCSoftWeb Guest Book vulnerabilities. drG4njubas (Apr 21)
• Monkey HTTPd Remote Buffer Overflow Matthew Murphy (Apr 21)
• Remote Vulnerabilties in mod_ntlm Matthew Murphy (Apr 21)
• PTNews v1.7.7 - Access to administrator functions without authentification scrap (Apr 21)
  • Re: PTNews v1.7.7 - Access to administrator functions without authentification Rui Pimenta (Apr 29)
• GLSA: snort (200304-05) Daniel Ahlberg (Apr 22)
• [NGSEC-2003-5] YABB SE, remote command execution labs (Apr 22)
• [CLA-2003:629] Conectiva Security Announcement - tcpdump Conectiva Updates (Apr 22)
• AN HTTPd Sample Script File Truncation Matthew Murphy (Apr 22)
• [SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions Martin Schulze (Apr 22)
• [SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution Martin Schulze (Apr 22)
• Stealth DMCA. Be afraid. Be very afraid... alaskan (Apr 22)
  • Re: [mail_lists] Stealth DMCA. Be afraid. Be very afraid... Jim (Apr 22)
  • Re: Stealth DMCA. Be afraid. Be very afraid... Darren Pilgrim (Apr 22)
• SRT2003-04-22-1336 - SAP DB Development Tools install flaw KF (Apr 22)
• XMB 1.8 Partagium SQL Injection Bug zeez (Apr 22)
• [CLA-2003:630] Conectiva Security Announcement - balsa Conectiva Updates (Apr 22)
• Defeating HTML "Encryption" rjfix (Apr 22)
• [RHSA-2003:032-01] Updated tcpdump packages fix various vulnerabilities bugzilla (Apr 23)
• Snort <=1.9.1 exploit truff (Apr 23)
• [SECURITY] [DSA 292-2] New mime-support packages fix temporary file race conditions Martin Schulze (Apr 23)
• Format strings vuln in CGIwrap b0f www . b0f . net (Apr 23)
  • <Possible follow-ups>
  • RE: Format strings vuln in CGIwrap Neulinger, Nathan (Apr 23)
• [SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution Martin Schulze (Apr 23)
• Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability Cisco Systems Product Security Incident Response Team (Apr 23)
• [SECURITY] [DSA 293-1] New kdelibs packages fix arbitrary command execution Martin Schulze (Apr 23)
• Security problems in gkrellm-newsticker Martin Schulze (Apr 23)
• Cracking preshared keys Michael Thumann (Apr 23)
  • Re: Cracking preshared keys Damir Rajnovic (Apr 23)
    • Re: Cracking preshared keys Derek (Apr 24)
    • Re: Cracking preshared keys Gary Flynn (Apr 24)
      • Re: Cracking preshared keys Michael Thumann (Apr 24)
      • Re: Cracking preshared keys Gary Flynn (Apr 24)
  • Re: Cracking preshared keys David Wagner (Apr 24)
    • Re: Cracking preshared keys Michael Thumann (Apr 24)
    • Re: Cracking preshared keys Curt Sampson (Apr 25)
    • Re: Cracking preshared keys Stefan Laudat (Apr 26)
  • <Possible follow-ups>
  • RE: Cracking preshared keys Rager, Anton (Anton) (Apr 24)
  • Re: Cracking preshared keys hank (Apr 25)
• RE: [cgiwrap-users] RE: Format strings vuln in CGIwrap Neulinger, Nathan (Apr 23)
• [RHSA-2003:076-01] Updated ethereal packages fix security vulnerabilities bugzilla (Apr 23)
• Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Apr 24)
• SQL injection in BttlxeForum SecurityTracker (Apr 24)
• BRS WebWeaver: Ftpd Lockdown via RETR cmd euronymous (Apr 24)
• SuSE Security Announcement: KDE (SuSE-SA:2003:026) Sebastian Krahmer (Apr 24)
• Internet Explorer Plugin.ocx heap overflow (#NISR24042003) NGSSoftware Insight Security Research (Apr 24)
• Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense Dmitry Maksimov (Apr 24)
• NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS NSFOCUS Security Team (Apr 24)
• Nokia IPSO Vulnerability Jonas Eriksson (Apr 24)
  • RE: Nokia IPSO Vulnerability Jorge Merlino (Apr 24)
    • Re: Nokia IPSO Vulnerability Damieon Stark (Apr 24)
      • Re: Nokia IPSO Vulnerability Shawn Duffy (Apr 24)
    • Re: Nokia IPSO Vulnerability Valdis . Kletnieks (Apr 24)
      • RE: Nokia IPSO Vulnerability Jorge Merlino (Apr 24)
  • <Possible follow-ups>
  • RE: Nokia IPSO Vulnerability Miller, Rick (Apr 24)
  • RE: Nokia IPSO Vulnerability Iain.King (Apr 24)
• Permanent crash in Opera 7.10 David F. Madrid (Apr 24)
  • Re: Permanent crash in Opera 7.10 Dmitrij Lukasevic (Apr 24)
• An Implementation of a Birthday Attack in a DNS Spoofing Ramon Izaguirre (Apr 24)
• DNS vulnerabilities in shared host environments Chris Leishman (Apr 24)
  • Re: DNS vulnerabilities in shared host environments Frank Tegtmeyer (Apr 24)
• SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. KF (Apr 24)
• [RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability bugzilla (Apr 24)
• [RHSA-2003:112-01] Updated squirrelmail packages fix cross-site scripting vulnerabilities bugzilla (Apr 24)
• address for postini security Hamby, Charles D. (Apr 24)
• PHP-Nuke 6.5 FINAL Cross Site Scripting Frog Man (Apr 24)
• [RHSA-2003:118-01] Updated mICQ packages fix vulnerability bugzilla (Apr 24)
• MDKSA-2003:051 - Updated ethereal packages fix remote vulnerability Mandrake Linux Security Team (Apr 25)
• [BUGZILLA] Security Advisory - XSS, insecure temporary filenames David Miller (Apr 25)
• Windows Server 2003 Security Guide available Michael Howard (Apr 25)
  • RE: Windows Server 2003 Security Guide available Jason Coombs (Apr 28)
    • RE: Windows Server 2003 Security Guide available David F. Skoll (Apr 29)
      • RE: Windows Server 2003 Security Guide available Uwe Betz (Apr 29)
      • Re: Windows Server 2003 Security Guide available Lucas Holt (Apr 29)
    • RE: Windows Server 2003 Security Guide available Frank Knobbe (Apr 29)
      • RE: Windows Server 2003 Security Guide available Jason Coombs (Apr 29)
  • <Possible follow-ups>
  • RE: Windows Server 2003 Security Guide available paul (Apr 29)
  • RE: Windows Server 2003 Security Guide available J.'LoneWolf' Mattsson (Apr 29)
• SonicWall Pro DoS? Greg Smith (Apr 25)
• Unauthorized reading files on phpSysInfo Albert Puigsech Galicia (Apr 25)
  • Re: Unauthorized reading files on phpSysInfo Wolter Kamphuis (Apr 25)
• XOOPS MyTextSanitizer CSS 1.3x & 2.x magistrat (Apr 25)
• Multiple SQL injection on OpenBB forums Albert Puigsech Galicia (Apr 25)
• Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update SGI Security Coordinator (Apr 25)
• Path disclosure and file access on WebAdmin David A . Pérez (Apr 25)
• Re: Exploit for PopPToP PPTP server - Working version blightninjas (Apr 25)
• Invision Power Board Plaintext Password Disclosure Vuln JeiAr (Apr 25)
• Microsoft IIS Integrated Authentication skybristol (Apr 25)
  • <Possible follow-ups>
  • Re: Microsoft IIS Integrated Authentication Michael . vonGlasow (Apr 29)
• Cross site scripting in Onecenter forum 4.0 David F. Madrid (Apr 25)
• Vulnerability in nsd LDAP Implementation on IRIX SGI Security Coordinator (Apr 25)
• Album.pl Vulnerability - Remote Command Execution aresu (Apr 26)
• Buffer overflow in Internet Explorer's HTTP parsing code Jouko Pynnonen (Apr 26)
• 3com NBX IP Phone Call manager Denial of Service - Update Michael Scheidell (Apr 28)
• GLSA: mgetty (200304-09) Daniel Ahlberg (Apr 28)
• GLSA: snort (200304-06) Daniel Ahlberg (Apr 28)
• [Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download. nesumin (Apr 28)
• IIS Security and Programming Countermeasures e-book Jason Coombs (Apr 28)
• GLSA: monkeyd (200304-07.1) Daniel Ahlberg (Apr 28)
• ATM on Linux Exploit Code Release (les, local) Angelo Rosiello (Apr 28)
• Qpopper v4.0.x poppassd local root exploit dong-h0un U (Apr 28)
• Buffer overflow in 3D-ftp Over_G (Apr 28)
• MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow D4rkGr3y (Apr 28)
• [Opera 7] Yet Another Story of "Phantom of the Opera" nesumin (Apr 28)
  • <Possible follow-ups>
  • RE: [Opera 7] Yet Another Story of "Phantom of the Opera" GreyMagic Software (Apr 30)
• s0h: Remote/Local exploit and patch for regedit.exe. descript (Apr 28)
• GLSA: pptpd (200304-08) Daniel Ahlberg (Apr 28)
• MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS D4rkGr3y (Apr 28)
  • <Possible follow-ups>
  • RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS William Pratt (Apr 28)
• CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall CORE Security Technologies Advisories (Apr 28)
• Pi3Web 2.0.1 DoS aT4r InsaN3 (Apr 28)
• Windows 2000 Security Hardening Guide Available Michael Howard (Apr 28)
• NII Advisory - Path Disclosure in Cold Fusion MX Server Network Intelligence India Pvt. Ltd. (Apr 28)
• Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) NGSSoftware Insight Security Research (Apr 29)
• [RHSA-2003:079-01] Updated zlib packages fix gzprintf buffer overflow vulnerability bugzilla (Apr 29)
• IdeaBox: Remote Command Execution euronymous (Apr 29)
• MDKSA-2003:052 - Updated snort packages fix remote vulnerability Mandrake Linux Security Team (Apr 29)
• "netscape navigator" is cracked. Liu Die Yu (Apr 29)
• Auerswald COMsuite/ Back Door Kroma Pierre (Apr 29)
• Coldfusion MX: Java in CFM causes Crash Marc Schoenefeld (Apr 29)
• [RHSA-2003:093-01] Updated MySQL packages fix vulnerabilities bugzilla (Apr 29)
• April appeared to be a month of IE bugs. Here's another one. ERRor (Apr 29)
• HPUX rexec buffer overflow vulnerability Davide Del Vecchio (Apr 29)
• Latest MS SQL Server vulnerabilities revealed Cesar (Apr 30)
• GLSA: balsa (200304-10) Daniel Ahlberg (Apr 30)
• Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Cisco Systems Product Security Incident Response Team (Apr 30)
• Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Damien Miller (Apr 30)
  • Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Valdis . Kletnieks (Apr 30)
• OpenSSH/PAM timing attack allows remote users identification Marco Ivaldi (Apr 30)
• [SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions Martin Schulze (Apr 30)
• [CLA-2003:614] REVISED: Conectiva Security Announcement - sendmail Conectiva Updates (Apr 30)
• [ESA-20030430-013] 'snort' stream4 preprocessor integer overflow vulnerability EnGarde Secure Linux (Apr 30)
• [CLA-2003:632] Conectiva Security Announcement - apache Conectiva Updates (Apr 30)
• [CLA-2003:633] Conectiva Security Announcement - glibc Conectiva Updates (Apr 30)

Previous period

Next period