Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

393 messages starting Jan 31 03 and ending Feb 28 03
Date index | Thread index | Author index

• silc question - insecure memory cdowns (Jan 31)
  • Re: silc question - insecure memory Florian Weimer (Feb 05)
• locator exploit Dave Aitel (Feb 01)
• GLSA: Mail-SpamAssasin Daniel Ahlberg (Feb 03)
  • Re: GLSA: Mail-SpamAssasin Eric Vollmer (Feb 03)
• GLSA: slocate Daniel Ahlberg (Feb 03)
• phpMyShop (php) Frog Man (Feb 03)
• myphpPagetool (php) Frog Man (Feb 03)
• Denial of service against Kazaa Media Desktop v2 Marc Ruef (Feb 03)
• ASA-0001: OpenBSD chpass/chfn/chsh file content leak Marc Bevand (Feb 03)
• Re: DoS against DHCP infrastructure with isc dhcrelay Thomas Lotterer (Feb 03)
• PHP-Nuke Avatar Code injection vulnerability delusion (Feb 03)
  • Re: PHP-Nuke Avatar Code injection vulnerability delusion (Feb 04)
• MDKSA-2003:013 - Updated MySQL packages fix DoS vulnerability Mandrake Linux Security Team (Feb 03)
• MDKSA-2003:012 - Updated vim packages fix arbitrary command execution vulnerability Mandrake Linux Security Team (Feb 03)
• BDT_AV200212140001: Insecure default: Using pam_xauth for su from sh-utils package Andreas Beck (Feb 03)
• Opera's Security Model is Highly Vulnerable (GM#002-OP) GreyMagic Software (Feb 04)
• Weak password protection in WebSphere 4.0.4 XML configuration export Jan P. Monsch (Feb 04)
• Sniffing Opera's Tracks (GM#006-OP) GreyMagic Software (Feb 04)
• Putting the "NSA Data Overwrite Standard" Legend to Death... Jonathan G. Lampe (Feb 04)
  • Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Simple Nomad (Feb 04)
    • Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Brian Hatch (Feb 04)
      • Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Kurt Seifried (Feb 04)
  • Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Stephen D. B. Wolthusen (Feb 04)
• Majordomo info leakage, all versions Marco van Berkum (Feb 04)
• [RHSA-2003:025-20] Updated 2.4 kernel fixes various vulnerabilities bugzilla (Feb 04)
• Opera Images (GM#004-OP) GreyMagic Software (Feb 04)
• RE: Preventing exploitation with rebasing Anonymous (Feb 04)
  • <Possible follow-ups>
  • Preventing exploitation with rebasing David Litchfield (Feb 05)
    • Re: Preventing exploitation with rebasing sd (Feb 04)
      • Re: Preventing exploitation with rebasing David Litchfield (Feb 04)
    • Re: Preventing exploitation with rebasing Eugene Tsyrklevich (Feb 04)
    • Re: Preventing exploitation with rebasing Torbjörn Hovmark (Feb 04)
    • Re: Preventing exploitation with rebasing dullien (Feb 05)
      • Re: Preventing exploitation with rebasing David Litchfield (Feb 04)
      • Re[2]: Preventing exploitation with rebasing dullien (Feb 04)
      • RE: Preventing exploitation with rebasing Jason Coombs (Feb 04)
    • Re: Preventing exploitation with rebasing Charlie Root (Feb 05)
      • Re: Preventing exploitation with rebasing David Litchfield (Feb 05)
      • Re: [VulnDiscuss] Re: Preventing exploitation with rebasing Halvar Flake (Feb 05)
      • Re: Preventing exploitation with rebasing Brian Hatch (Feb 05)
      • Re: Preventing exploitation with rebasing Alan DeKok (Feb 05)
      • Re: Can't Preventing exploitation with rebasing bugtraq (Feb 05)
      • Re[2]: Can't Preventing exploitation with rebasing dullien (Feb 05)
      • Observation on randomization/rebiasing... Nicholas Weaver (Feb 05)
      • RE: Observation on randomization/rebiasing... Jason Coombs (Feb 05)
      • Re: Preventing exploitation with rebasing Crispin Cowan (Feb 05)
      • Re: Preventing exploitation with rebasing David S Goldberg (Feb 05)
      • Re: Preventing exploitation with rebasing Alun Jones (Feb 05)
      • Re: Preventing exploitation with rebasing Deus, Attonbitus (Feb 06)
    • RE: Preventing exploitation with rebasing Riley Hassell (Feb 05)
    • Re: [VulnDiscuss] Preventing exploitation with rebasing Michal Zalewski (Feb 05)
  • Re: Preventing exploitation with rebasing David Litchfield (Feb 05)
    • Re: Preventing exploitation with rebasing Bugtraq User (Feb 05)
    • Re: Preventing exploitation with rebasing D.C. van Moolenbroek (Feb 05)
    • Re: Preventing exploitation with rebasing Michal Zalewski (Feb 05)
    • Re: Preventing exploitation with rebasing Todd Sabin (Feb 05)
      • Re: Preventing exploitation with rebasing Seth Breidbart (Feb 06)
      • Re: Preventing exploitation with rebasing Richard Moore (Feb 06)
      • Re: Preventing exploitation with rebasing Carolyn Meinel (Feb 07)
  • Re: Preventing exploitation with rebasing Dave Aitel (Feb 05)
  • Preventing exploitation with rebasing Fred Cohen (Feb 06)
    • RE: Preventing exploitation with rebasing Jason Coombs (Feb 07)
  • RE: Preventing exploitation with rebasing Ilya Dubinsky (Feb 07)
• dynamic and static code injection as well as population concept Peter Huang (Feb 04)
• Quake3 engine autodownload issues. Thilo Schulz (Feb 04)
• TOPo 1.43 and prior - Path Disclosure (in.php, out.php) Rynho Zeros Web (Feb 04)
• FreeBSD Security Advisory FreeBSD-SA-03:01.cvs FreeBSD Security Advisories (Feb 04)
• Unreal engine: results of my research Auriemma Luigi (Feb 05)
• RE: Opera: What's Next (GM#005-OP) Bjornar B. Larsen (Feb 05)
  • <Possible follow-ups>
  • Opera: What's Next (GM#005-OP) GreyMagic Software (Feb 05)
    • Re: Opera: What's Next (GM#005-OP) chorn (Feb 04)
• Exploit for CVS double free() for Linux pserver Igor Dobrovitski (Feb 05)
• The Advantages of Block-Based Protocol Analysis for Security Testing Dave Aitel (Feb 05)
• GLSA: qt-dcgui Daniel Ahlberg (Feb 05)
• SummerCon 2003 Official Announcement Mark F. Trumpbour (Feb 05)
• RE: To diversify and survive: the application of population biolo gy concept into computer Ballowe, Charles (Feb 05)
• [RHSA-2003:017-06] Updated PHP packages available bugzilla (Feb 05)
• GLSA: bladeenc Daniel Ahlberg (Feb 05)
• internet explorer local file reading jelmer (Feb 05)
  • Re: internet explorer local file reading Andreas Sandblad (Feb 05)
• To diversify and survive: the application of population biology concept into computer Peter Huang (Feb 05)
  • Re: To diversify and survive: the application of population biology concept into computer Crispin Cowan (Feb 03)
• Announce: Browser Security Test Released Alla Bezroutchko (Feb 05)
• [CLA-2003:567] Conectiva Linux Security Announcement - mcrypt secure (Feb 05)
• MDKSA-2003:014 - Updated kernel packages fix a number of bugs Mandrake Linux Security Team (Feb 05)
• Bladeenc 0.94.2 code execution Auriemma Luigi (Feb 05)
• RE: Tech Article: HTTP Content Filter Analysis - Finjan SurfinGate V5.6 Menashe Eliezer (Feb 05)
• PHPMyNewsLetter 0.6.11 - customize.php include problem Ueli Kistler (Feb 05)
• Phantom of the Opera (GM#003-OP) GreyMagic Software (Feb 05)
• Re: GLSA: Mail-SpamAssasin Mark Martinec (Feb 05)
• MDKSA-2003:015 - Updated slocate packages fix buffer overflow Mandrake Linux Security Team (Feb 05)
• [RHSA-2003:037-09] Updated Xpdf packages fix security vulnerability bugzilla (Feb 06)
• showHelp("file:") disables security in IE - Sandblad advisory #11 Andreas Sandblad (Feb 06)
• [RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading bugzilla (Feb 06)
• FW: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs (Feb 06)
  • <Possible follow-ups>
  • RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) John Howie (Feb 06)
    • Re: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Florian Weimer (Feb 06)
    • RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs (Feb 07)
      • RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs (Feb 07)
• [RHSA-2003:040-07] Updated openldap packages available bugzilla (Feb 06)
• Re: CuteFTP 5.0 XP, Buffer Overflow Kanatoko (Feb 06)
• FW-1 NG FP3 Bug - Data flow problem when transferring large files Igor U.Miturin (Feb 06)
• AbsoluteTelnet 2.00 buffer overflow. Knud Erik Højgaard (Feb 06)
• Preventing /*exploitation with*/ rebasing Riley Hassell (Feb 06)
  • Re: Preventing /*exploitation with*/ rebasing dullien (Feb 07)
    • Re: Preventing /*exploitation with*/ rebasing Shaun Clowes (Feb 08)
• RE: MSDE contained in... R. Michael Williams (Feb 06)
• Re: Weak password protection in WebSphere 4.0.4 XML configuration export Arun Kumar (Feb 06)
• RE: Observation on randomization/rebiasing... Michael Wojcik (Feb 06)
  • RE: Observation on randomization/rebiasing... Jason Coombs (Feb 06)
• HPUX Wall Buffer Overflow Scotty (Feb 07)
• [RHSA-2003:044-20] Updated w3m packages fix cross-site scripting issues bugzilla (Feb 07)
• [RHSA-2003:056-08] Updated kernel-utils packages fix setuid vulnerability bugzilla (Feb 07)
• Yet another plaintext attack to ZIP encryption scheme. alias (Feb 08)
• Buffer OverFlow in SQLBase 8.1.0 - NII Advisory Arjun Pednekar (Feb 10)
• Bug in Netgear FM114P Wireless Router firmware Björn Stickler (Feb 10)
• Gallery 1.3.3 error (Feb 10)
  • Re: Gallery 1.3.3 netsecurity (Feb 11)
• Eggdrop arbitrary connection vulnerability Paul Starzetz (Feb 10)
  • Re: Eggdrop arbitrary connection vulnerability D.C. van Moolenbroek (Feb 10)
  • Re: Eggdrop arbitrary connection vulnerability Matthew S. Hallacy (Feb 11)
• breakpoint the stack buffer overflow from executing malicious code like SQL Slammer worm Peter Huang (Feb 10)
• #!ICadv-02.09.03: nethack 3.4.0 local buffer overflow tsao_4sh0 (Feb 10)
  • Re: #!ICadv-02.09.03: nethack 3.4.0 local buffer overflow Peter Pentchev (Feb 11)
• Cedric Email Reader (PHP) MGhz (Feb 10)
• Domestic Security Enhancement Act of 2003 Jason Coombs (Feb 10)
  • Re: Domestic Security Enhancement Act of 2003 David Terrell (Feb 10)
• RTS CryptoBuddy Multiple Encryption Implementation Vulnerabilities Mike (Feb 10)
• Opera Username Buffer Overflow Vulnerability nesumin (Feb 10)
  • Re: Opera Username Buffer Overflow Vulnerability nesumin (Feb 17)
• Java-Applet crashes Opera 6.05 and 7.01 Marc Schoenefeld (Feb 10)
• iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix iDEFENSE Labs (Feb 10)
• RE: Astaro Security Linux Firewall - HTTP Proxy vulnerability Markus Hennig (Feb 10)
• Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Davide Del Vecchio (Feb 11)
  • Re: Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Fredrik Björk (Feb 13)
• Followup: breakpoint the stack buffer overflow from executing maliciouscode like SQL Slammer worm Peter Huang (Feb 11)
  • Code Red Revisited and Stack-Based Exception Handler Frame Bug Peter Huang (Feb 13)
    • Re: Code Red Revisited and Stack-Based Exception Handler Frame Bug Roland Postle (Feb 13)
• [SECURITY] [DSA 249-1] New w3mmee packages fix cookie information leak Martin Schulze (Feb 11)
• SECURITY.NNOV: Kaspersky Antivirus DoS 3APA3A (Feb 11)
• Field Notice - IOS Accepts ICMP Redirects in Non-default Configuration Settings Damir Rajnovic (Feb 11)
• [SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution Martin Schulze (Feb 11)
• SECURITY.NNOV: Far buffer overflow 3APA3A (Feb 11)
• Re: junkbuster 2.0-1 proxy relaying spam VU#150227 CERT(R) Coordination Center (Feb 11)
• SECURITY.NNOV: Windows NT 4.0/2000 cmd.exe long path buffer overflow/DoS 3APA3A (Feb 11)
• Epic Games threatens to sue security researchers Thor Larholm (Feb 11)
  • <Possible follow-ups>
  • Re: Epic Games threatens to sue security researchers Mark Rein (Feb 11)
  • Re: Epic Games threatens to sue security researchers dave (Feb 11)
• Re: SPRINT ADSL [Zyxel 645 Series Modem] http-equiv () excite com (Feb 11)
• Security bug in CGI::Lite::escape_dangerous_chars() function Ronald F. Guilmette (Feb 11)
  • <Possible follow-ups>
  • Re: Security bug in CGI::Lite::escape_dangerous_chars() function tee (Feb 12)
    • Re: Security bug in CGI::Lite::escape_dangerous_chars() function John Madden (Feb 13)
  • RE: Security bug in CGI::Lite::escape_dangerous_chars() function Hard Coder (Feb 13)
• MDKSA-2002:062-1 - Updated postgresql packages fix various buffer overflows Mandrake Linux Security Team (Feb 12)
• [LSD] Codes for Java and JVM security vulnerabilities Last Stage of Delirium (Feb 12)
• [RHSA-2003:029-06] Updated lynx packages fix CRLF injection vulnerability bugzilla (Feb 12)
• IRIX IP denial-of-service fixes and tunings SGI Security Coordinator (Feb 12)
• iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a iDEFENSE Labs (Feb 12)
• Abyss WebServer Brute Force Vulnerability thomas adams (Feb 12)
• CodeCon Registration Deadline Approaching Len Sassaman (Feb 12)
• libIM.a buffer overflow vulnerability Shiva Persaud (Feb 12)
• Solaris Signals Jon Masters (Feb 12)
  • Re: Solaris Signals Frank v Waveren (Feb 13)
    • Re: Solaris Signals ari (Feb 14)
      • Re: Solaris Signals Casper Dik (Feb 14)
  • <Possible follow-ups>
  • Re: Solaris Signals Jon Masters (Feb 13)
• Lotus Domino DOT Bug Allows for Source Code Viewing Faz (Feb 12)
  • <Possible follow-ups>
  • Re: Lotus Domino DOT Bug Allows for Source Code Viewing JRedmond (Feb 13)
• Cross Site Scripting Advisory. uk2sec (Feb 12)
• HPUX disable buffer overflow vulnerability Davide Del Vecchio (Feb 13)
  • Re: HPUX disable buffer overflow vulnerability Marc1 (Feb 13)
  • <Possible follow-ups>
  • HPUX disable buffer overflow vulnerability HP S/W Security Team (Feb 14)
• [CLA-2003:568] Conectiva Linux Security Announcement - mozilla secure (Feb 13)
• [RHSA-2003:035-10] Updated PAM packages fix bug in pam_xauth module bugzilla (Feb 13)
• [RHSA-2003:015-05] Updated fileutils package fixes race condition in recursive operations bugzilla (Feb 13)
• New freeware tools available from WebCohort Eyal Udassin (Feb 13)
• [SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak Martin Schulze (Feb 13)
• Getting stored passwords in plain text from CheetaChat b0f www . b0f . net (Feb 13)
• MDKSA-2003:016 - Updated util-linux packages provide stronger randomness in mcookie Mandrake Linux Security Team (Feb 14)
• [SECURITY] [DSA 251-1] New w3m packages fix cookie information leak Martin Schulze (Feb 14)
• IndyNews - PhpNuke module: several problems Elisa Manara (Feb 14)
• Re: Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Jørgensen (Feb 14)
• @stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack @stake Advisories (Feb 14)
• Riched20.DLL attribute label buffer overflow vulnerability Jie Dong (Feb 17)
  • Re: Riched20.DLL attribute label buffer overflow vulnerability Thor Larholm (Feb 21)
    • Re: Riched20.DLL attribute label buffer overflow vulnerability Raistlin (Feb 24)
  • <Possible follow-ups>
  • Re: Riched20.DLL attribute label buffer overflow vulnerability 3APA3A (Feb 18)
  • Re: Riched20.DLL attribute label buffer overflow vulnerability Marc Ruef (Feb 25)
• The First Honeyd Challenge Niels Provos (Feb 17)
• Oracle unauthenticated remote system compromise (#NISR16022003a) NGSSoftware Insight Security Research (Feb 17)
• [immune advisory] Mulitple vulnerabilities found in BisonFTP Immune Advisory (Feb 17)
• GLSA: mailman Daniel Ahlberg (Feb 17)
• Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b) NGSSoftware Insight Security Research (Feb 17)
• Oracle9i Application Server Format String Vulnerability (#NISR16022003d) NGSSoftware Insight Security Research (Feb 17)
• Oracle TZ_OFFSET Remote System Buffer Overrun (#NISR16022003c) NGSSoftware Insight Security Research (Feb 17)
• Lotus Domino Web Server iNotes Overflow (#NISR17022003b) NGSSoftware Insight Security Research (Feb 17)
• Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) NGSSoftware Insight Security Research (Feb 17)
• Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) NGSSoftware Insight Security Research (Feb 17)
• Oracle bfilename function buffer overflow vulnerability (#NISR16022003e) NGSSoftware Insight Security Research (Feb 17)
• Domino Advisories UPDATE Mark Litchfield (Feb 17)
• PHP Security Advisory: CGI vulnerability in PHP version 4.3.0 Jani Taskinen (Feb 17)
• Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability security (Feb 17)
• GLSA: syslinux Daniel Ahlberg (Feb 17)
• [SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency Martin Schulze (Feb 17)
• GLSA: w3m Daniel Ahlberg (Feb 17)
• /usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX choi sungwoon (Feb 17)
  • Re: /usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX Keith Stevenson (Feb 19)
  • <Possible follow-ups>
  • Re: /usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX Shiva Persaud (Feb 18)
• [argv] BitchX-353 Vulnerability argv (Feb 17)
• [SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability Tamer Sahin (Feb 18)
• php-Board (php) Frog Man (Feb 18)
• DotBr (PHP) Frog Man (Feb 18)
• Presentation on Writing Secure Programs for Linux and Unix in Maryland dwheeler (Feb 18)
• GLSA: nethack Daniel Ahlberg (Feb 18)
• [OpenPKG-SA-2003.010] OpenPKG Security Advisory (php) OpenPKG (Feb 18)
• Kietu ( PHP ) Frog Man (Feb 18)
• [OpenPKG-SA-2003.009] OpenPKG Security Advisory (w3m) OpenPKG (Feb 18)
• [OpenPKG-SA-2003.011] OpenPKG Security Advisory (lynx) OpenPKG (Feb 18)
• D-Forum (PHP) Frog Man (Feb 18)
• SuSE Security Announcement: imp (SuSE-SA:2003:0008) Thomas Biege (Feb 18)
• SuSE Security Announcement: mod_php4 (SuSE-SA:2003:0009) Thomas Biege (Feb 18)
• CSSA-2003-007.0 Advisory withdrawn. Re: Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability security (Feb 18)
• Re: CSSA-2003-007.0 Advisory withdrawn. Mark J Cox (Feb 18)
• MDKSA-2003:017 - Updated pam packages fix root authorization handling in pam_xauth module Mandrake Linux Security Team (Feb 18)
• MDKSA-2003:018 - Updated apcupsd packages fix buffer overflow and remove vulnerability Mandrake Linux Security Team (Feb 18)
• Cpanel 5 and below remote command execution and local root vulnerabilities pokleyzz (Feb 19)
• GLSA: mod_php php Daniel Ahlberg (Feb 19)
• [ESA-20030219-003] Several PHP vulnerabilities EnGarde Secure Linux (Feb 19)
• [OpenPKG-SA-2003.012] OpenPKG Security Advisory (dhcpd) OpenPKG (Feb 19)
• NSPW 2003 Call For Papers Abe Singer (Feb 19)
• OpenSSL 0.9.7a and 0.9.6i released Jonas Eriksson (Feb 19)
• GLSA: mod_php (200302-09.1) Daniel Ahlberg (Feb 19)
• [OpenPKG-SA-2003.013] OpenPKG Security Advisory (openssl) OpenPKG (Feb 19)
• RE: Ericsson HM220dp ADSL modem Insecure Web Administration Vulne rability EAB (Feb 19)
  • <Possible follow-ups>
  • RE: Ericsson HM220dp ADSL modem Insecure Web Administration Vulne rability EAB (Feb 25)
• [SNS Advisory No.61] Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerability snsadv () lac co jp (Feb 19)
• Master Servers: yet another DDoS... Auriemma Luigi (Feb 20)
  • Re: Master Servers: yet another DDoS... Greg Steuck (Feb 21)
• myphpnuke xss Tacettin Karadeniz (Feb 20)
• MDKSA-2003:019 - Updated php packages fix buffer overflow vulnerability Mandrake Linux Security Team (Feb 20)
• Fwd: CERT Advisory CA-2003-05 Multiple Vulnerabilities in Oracle Servers Muhammad Faisal Rauf Danka (Feb 20)
• Call For Papers Announcement: Black Hat Briefings Amsterdam Jeff Moss (Feb 20)
• New version of ike-scan (IPsec IKE scanner) available - v1.1 Roy Hills (Feb 20)
• XSS and Path Disclosure in Sage euronymous (Feb 20)
• [ESA-20030220-004] MySQL double free vulnerability EnGarde Secure Linux (Feb 20)
• [ESA-20030220-005] OpenSSL timing-based attack vulnerability EnGarde Secure Linux (Feb 20)
• Cisco IOS OSPF exploit FX (Feb 20)
  • Re: Cisco IOS OSPF exploit Mike Caudill (Feb 21)
    • Re: Cisco IOS OSPF exploit KF (Feb 23)
• GLSA: openssl (200302-10) Daniel Ahlberg (Feb 20)
• [RHSA-2003:057-06] Updated shadow-utils packages fix exposure bugzilla (Feb 20)
• GLSA: bitchx (200302-11) Daniel Ahlberg (Feb 20)
• [saag] Of potential interest -- Citibank tries to gag crypto bug disclosure (fwd) Dave Ahmad (Feb 20)
• login_ldap security announcement Peter Werner (Feb 20)
• phpBB Security Bugs Lucas Armstrong (Feb 20)
  • Re: phpBB Security Bugs Konrad Rieck (Feb 21)
    • Re: phpBB Security Bugs Christian Vogel (Feb 23)
  • <Possible follow-ups>
  • Re: phpBB Security Bugs Lucas Armstrong (Feb 23)
• PHPNuke SQL Injection Lucas Armstrong (Feb 20)
  • Re: PHPNuke SQL Injection Martin Eiszner (Feb 21)
  • Re: PHPNuke SQL Injection / General SQL Injection David Walker (Feb 21)
    • Re: PHPNuke SQL Injection / General SQL Injection MightyE (Feb 23)
  • <Possible follow-ups>
  • RE: PHPNuke SQL Injection Oriol Carreas (Feb 21)
• [CLA-2003:569] Conectiva Linux Security Announcement - kde secure (Feb 20)
• Cisco Security Advisory: Multiple Product Vulnerabilities found by PROTOS SIP Test Suite Cisco Systems Product Security Incident Response Team (Feb 21)
• MDKSA-2003:021 - Updated krb5 packages fix vulnerability in FTP client Mandrake Linux Security Team (Feb 21)
• Perl2Exe EXEs Can Be Decompiled (update) Domainbox, Tim Abenath (Feb 21)
  • Re: Perl2Exe EXEs Can Be Decompiled (update) Kain (Feb 23)
• Myguestbook (PHP) Frog Man (Feb 21)
• [RHSA-2003:041-12] Updated VNC packages fix replay and cookie vulnerabilities bugzilla (Feb 21)
• Bypassing Personal Firewalls xenophi1e (Feb 21)
  • RE: Bypassing Personal Firewalls Drew Copley (Feb 21)
    • RE: Bypassing Personal Firewalls Oliver Lavery (Feb 21)
      • RE: Bypassing Personal Firewalls Drew Copley (Feb 21)
  • Re: Bypassing Personal Firewalls Shaun Clowes (Feb 23)
    • Re: Bypassing Personal Firewalls Johan Verrept (Feb 24)
      • Re: Bypassing Personal Firewalls Shaun Clowes (Feb 24)
    • Re: Bypassing Personal Firewalls Zow (Feb 24)
  • Re: Bypassing Personal Firewalls Darwin (Feb 28)
  • <Possible follow-ups>
  • RE: Bypassing Personal Firewalls John Howie (Feb 23)
  • RE: Bypassing Personal Firewalls Oliver Lavery (Feb 24)
  • Re: Bypassing Personal Firewalls Torbjörn Hovmark (Feb 24)
  • RE: Bypassing Personal Firewalls John Howie (Feb 24)
• [SECURITY] [DSA 252-1] New slocate packages fix local root exploit Martin Schulze (Feb 21)
• Re: twlc advisory: all versions of php nuke are vulnerable... Jessica Smith (Feb 21)
• MDKSA-2003:020 - Updated openssl packages fix timing-based attack vulnerability Mandrake Linux Security Team (Feb 21)
• Rogue buffer overflow Ulf Harnhammar (Feb 21)
• TSLSA-2003-0005 - openssl Trustix Secure Linux Advisor (Feb 21)
• buffer overrun in zlib 1.1.4 Richard Kettlewell (Feb 23)
  • Re: buffer overrun in zlib 1.1.4 Carlo Marcelo Arenas Belon (Feb 24)
  • Re: buffer overrun in zlib 1.1.4 Thamer Al-Harbash (Feb 24)
• [SCSA-007] Cross Site Scripting Vulnerabilities in WWWBoard Grégory (Feb 23)
• [SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan Grégory (Feb 23)
• Weak Encryption Scheme in Telindus 112x eflorio (Feb 23)
• eject 2.0.10 vulnerability nordi (Feb 23)
• exploit for Cpanel 5 remote command execution. evilcow (Feb 23)
• GLSA: (200302-12) Daniel Ahlberg (Feb 23)
• O UT LO OK E XPRE SS 6 .00 : broken http-equiv () excite com (Feb 24)
  • <Possible follow-ups>
  • Re: O UT LO OK E XPRE SS 6 .00 : broken Thor Larholm (Feb 24)
• Webmin 1.050 - 1.060 remote exploit Carl Livitt (Feb 24)
• moxftp arbitrary code execution poc/advisory Knud Erik Højgaard (Feb 24)
• GLSA: usermin (200302-14) Daniel Ahlberg (Feb 24)
• FreeBSD Security Advisory FreeBSD-SA-03:03.syncookies FreeBSD Security Advisories (Feb 24)
• [SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2" snsadv () lac co jp (Feb 24)
• GLSA: apcupsd (200302-13) Daniel Ahlberg (Feb 24)
• sircd proof-of-concept / advisory Knud Erik Højgaard (Feb 24)
• poc zlib sploit just for fun :) Crazy Einstein (Feb 24)
  • Re: poc zlib sploit just for fun :) Kelledin (Feb 25)
  • <Possible follow-ups>
  • Re: poc zlib sploit just for fun :) Ralf S. Engelschall (Feb 27)
• [LSD] Win32 assembly components Last Stage of Delirium (Feb 24)
• multiple vulnerabilities in glftpd Karol WiÄ™sek (Feb 24)
• GLSA: tightvnc (200302-15) Daniel Ahlberg (Feb 24)
• Vulnerability for Platinum FTP version 1.0.11 Pui Kin Ser (Feb 24)
• Re[2]: PHPNuke SQL Injection / General SQL Injection alias (Feb 24)
• Mambo SiteServer exploit gains administrative privileges Simen Bergo (Feb 24)
• Nessus 2.0 is out Renaud Deraison (Feb 24)
• WihPhoto (PHP) Frog Man (Feb 24)
• Securing Windows 2000 Server Documentation Michael Howard (Feb 24)
• [SECURITY] [DSA 253-1] New OpenSSL packages fix timing-based attack vulnerability Martin Schulze (Feb 24)
• [CLA-2003:570] Conectiva Linux Security Announcement - openssl secure (Feb 24)
• Terminal Emulator Security Issues H D Moore (Feb 24)
  • Re: Terminal Emulator Security Issues Michael Jennings (Feb 25)
    • Re: Terminal Emulator Security Issues H D Moore (Feb 25)
      • Re: Terminal Emulator Security Issues Michael Jennings (Feb 26)
  • Re: Terminal Emulator Security Issues Juraj Ziegler (Feb 25)
• GLSA: vnc (200302-16) Daniel Ahlberg (Feb 24)
• Platform independent allocating sprintf (was Re: buffer overrun Forrest J. Cavalier III (Feb 24)
  • Re: Platform independent allocating sprintf (was Re: buffer overrun James Antill (Feb 25)
• MDKSA-2003:023 - Updated lynx packages fix CRLF injection vulnerability Mandrake Linux Security Team (Feb 25)
• QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities @stake Advisories (Feb 25)
  • <Possible follow-ups>
  • Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities Joe Testa (Feb 28)
• clarkconnect(d) information disclosure Knud Erik Højgaard (Feb 25)
• [RHSA-2003:053-10] Updated vte packages fix gnome-terminal vulnerability bugzilla (Feb 25)
• PHP code injection in CuteNews Over_G (Feb 25)
  • <Possible follow-ups>
  • Re: PHP code injection in CuteNews Steve Grubb (Feb 28)
• nCipher Advisory #7: Unexpected copies of imported software keys nCipher Support (Feb 25)
• [ESA-20030225-006] WebTool session ID spoofing vulnerability. EnGarde Secure Linux (Feb 25)
• Netscape 6/7 crashes by a simple stylesheet... jux (Feb 25)
  • Re: Netscape 6/7 crashes by a simple stylesheet... John Wofford (Feb 25)
    • Re: Netscape 6/7 crashes by a simple stylesheet... Peter Lindgren (Feb 26)
    • Re: Netscape 6/7 crashes by a simple stylesheet... Frankie (Feb 27)
  • Re: Netscape 6/7 crashes by a simple stylesheet... Raj Mathur (Feb 26)
  • Re: Netscape 6/7 crashes by a simple stylesheet... Greg Steuck (Feb 27)
  • <Possible follow-ups>
  • Re: Netscape 6/7 crashes by a simple stylesheet... jim . r . halfpenny (Feb 25)
  • Re: Netscape 6/7 crashes by a simple stylesheet... dwm (Feb 25)
• MDKSA-2003:022 - Updated vnc packages fix cookie vulnerability Mandrake Linux Security Team (Feb 25)
• VERITAS Software Technical Advisory (fwd) Dave Ahmad (Feb 25)
• [sorcerer-spells] ZLIB-SORCERER2003-02-25 Michael Walton (Feb 25)
• Nokia 6210 DoS SMS Issue @stake Advisories (Feb 25)
• Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II http-equiv () excite com (Feb 25)
  • Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II Jens Knoell (Feb 26)
  • <Possible follow-ups>
  • RE: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II Dike (Feb 26)
    • Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II D'Amato Luigi (Feb 27)
• Secunia Research: Opera browser Cross Site Scripting Jakob Balle (Feb 26)
  • Re: Secunia Research: Opera browser Cross Site Scripting Axel Beckert - ecos gmbh (Feb 27)
• SuSE Security Announcement: libmcrypt (SuSE-SA:2003:0010) Thomas Biege (Feb 26)
• SuSE Security Announcement: openssl (SuSE-SA:2003:011) Roman Drahtmueller (Feb 26)
• [VSA0307] Battlefield 1942 remote DoS VOID.AT Security (Feb 26)
  • Re: [VSA0307] Battlefield 1942 remote DoS VOID.AT Security (Feb 27)
• [VSA0308] Half-Life AMX-Mod remote (root) hole VOID.AT Security (Feb 26)
• Security Patchs for PHP Products #2 Frog Man (Feb 26)
• GOnicus System Administrator php injection Karol Wiesek (Feb 26)
• ./makeunicode2.py release announcement 0 0 (Feb 26)
• MDKSA-2003:026 - Updated shadow-utils packages fix improper mailspool ownership Mandrake Linux Security Team (Feb 27)
• MS-Windows ME IE/Outlook/HelpCenter critical vulnerability Fozzy (Feb 27)
  • <Possible follow-ups>
  • Re: MS-Windows ME IE/Outlook/HelpCenter critical vulnerability Fozzy (Feb 27)
• ISMAIL (All Versions) Remote Buffer Overrun NGSSoftware Insight Security Research (Feb 27)
• [SECURITY] [DSA 254-1] New NANOG traceroute packages fix buffer overflow Martin Schulze (Feb 27)
• Ecardis Password Reseting Vulnerability Haluk AYDIN (Feb 27)
• MDKSA-2003:025 - Updated webmin packages fix session ID spoofing vulnerability Mandrake Linux Security Team (Feb 27)
• Buffer Overrun Vulnerability in /sbin/ps on IRIX SGI Security Coordinator (Feb 27)
• SuSE Security Announcement: hypermail (SuSE-SA:2003:0012) Thomas Biege (Feb 27)
• iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing iDEFENSE Labs (Feb 27)
• Invision Power Board (PHP) Frog Man (Feb 27)
• Mandrake 9.0 local root exploit Priv8 Security (Feb 27)
  • Re: Mandrake 9.0 local root exploit KF (Feb 28)
  • Re: Mandrake 9.0 local root exploit Vincent Danen (Feb 28)
• [SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability Martin Schulze (Feb 27)
• [SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file Martin Schulze (Feb 28)
• NetPBM, multiple vulnerabilities Alan Cox (Feb 28)
• JRun: The Easiness of Session Fixation Christoph Schnidrig (Feb 28)
  • Re: The Easiness of Session Fixation Kevin Spett (Feb 28)
• axis2400 webcams Martin Eiszner (Feb 28)
  • RE: axis2400 webcams Barry Zubel (Feb 28)
• Netscape Communicator 4.x sensitive informations in configuration file Marc Ruef (Feb 28)
  • Re: Netscape Communicator 4.x sensitive informations in configuration file Byron York (Feb 28)
  • Re: Netscape Communicator 4.x sensitive informations in configuration file Nicolas RUFF (lists) (Feb 28)
  • <Possible follow-ups>
  • Re: Netscape Communicator 4.x sensitive informations in configuration file Paul Szabo (Feb 28)
• ftp.exe anf tftp.exe buffer overflows Max (Feb 28)
• typo3 issues Martin Eiszner (Feb 28)
• Security contact at SMC Charles M. Richmond (Feb 28)
  • <Possible follow-ups>
  • re: Security contact at SMC Gshively (Feb 28)

Previous period

Next period