Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

352 messages starting Oct 01 03 and ending Oct 31 03
Date index | Thread index | Author index

• GLSA: openssl (200309-19) Daniel Ahlberg (Oct 01)
• SuSE Security Announcement: mysql (SuSE-SA:2003:042) Sebastian Krahmer (Oct 01)
• [Full-Disclosure] [SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues debian-security-announce (Oct 01)
• MDKSA-2003:098 - Updated openssl packages fix vulnerabilities Mandrake Linux Security Team (Oct 01)
• [slackware-security] OpenSSL security update (SSA:2003-273-01) Slackware Security Team (Oct 01)
• Cisco Security Advisory: SSL Implementation Vulnerabilities Cisco Systems Product Security Incident Response Team (Oct 01)
• DCP Portal - 5.5 holes Lifo Fifo (Oct 01)
• Re: Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit) steve (Oct 01)
• SuSE Security Announcement: openssl (SuSE-SA:2003:043) Thomas Biege (Oct 01)
• NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL Ed Reed (Oct 01)
• ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability Pentest Security Advisories (Oct 01)
• ptl-2003-02: IBM DB2 INVOKE Command Stack Overflow Vulnerability Pentest Security Advisories (Oct 01)
• SuSE Security Announcement: lsh (SuSE-SA:2003:041) Sebastian Krahmer (Oct 01)
• Multiple vulnerabilities in WinShadow Bahaa Naamneh (Oct 01)
• NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL - revised url Ed Reed (Oct 01)
• Re: SSGbook (ASP) Terry Bankert (Oct 01)
• MOSDEF Initial Release dave (Oct 02)
• New OpenSSL remote vulnerability (issue date 2003/10/02) Patrik Hornik (Oct 02)
• New Tool: MetaCoretex (DB Security Scanner) visigoth (Oct 02)
• Visualroute Server - reverse tracerouting morning_wood (Oct 02)
• TSLSA-2003-0001 - openssl Tawie Security Advisor (Oct 02)
• Process Killing - Playing with PostThreadMessage Brett Moore (Oct 02)
  • Re: Process Killing - Playing with PostThreadMessage Thor Larholm (Oct 03)
    • Re: Process Killing - Playing with PostThreadMessage Maxime Ducharme (Oct 03)
  • <Possible follow-ups>
  • RE: Process Killing - Playing with PostThreadMessage Vitor Ventura (Oct 03)
• FreeBSD Security Advisory FreeBSD-SA-03:17.procfs FreeBSD Security Advisories (Oct 03)
• PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio] Joost Pol (Oct 03)
• Class-action suit points to Microsoft security flaws Richard M. Smith (Oct 03)
• Webmails + Internet Explorer can create unwanted javascript execution Jedi/Sector One (Oct 03)
  • RE: Webmails + Internet Explorer can create unwanted javascript execution Drew Copley (Oct 03)
  • Divine OpenMarket Content Server XSS Valgasu (Oct 03)
  • <Possible follow-ups>
  • Re: Webmails + Internet Explorer can create unwanted javascript execution Jason Munro (Oct 03)
    • Re: Webmails + Internet Explorer can create unwanted javascript execution Jedi/Sector One (Oct 03)
• exploiting fortigate firewall through webinterface Maarten Hartsuijker (Oct 03)
• Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable Michael Renzmann (Oct 03)
• Is it safe yet? HCTITS Security Division (Oct 03)
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities security (Oct 03)
• Half-Life 2 source code stolen through IE exploit Thor Larholm (Oct 03)
  • Re: Half-Life 2 source code stolen through IE exploit spackard (Oct 03)
  • <Possible follow-ups>
  • RE: Half-Life 2 source code stolen through IE exploit Thor Larholm (Oct 03)
  • RE: Half-Life 2 source code stolen through IE exploit Thor Larholm (Oct 03)
    • Re: Half-Life 2 source code stolen through IE exploit jelmer (Oct 03)
  • RE: Half-Life 2 source code stolen through IE exploit Mattox, Norman (Oct 03)
• Free OverflowGuard Personal Edition Released Paul Webster (Oct 03)
• FreeBSD Security Advisory FreeBSD-SA-03:16.filedesc FreeBSD Security Advisories (Oct 03)
• [ESA-20031003-028] Potential OpenSSL DoS. EnGarde Secure Linux (Oct 03)
• [RHSA-2003:256-02] Updated Perl packages fix security issues. bugzilla (Oct 03)
• EartStation 5 P2P application contains malicious code random nut (Oct 03)
• Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS Seth Woolley (Oct 03)
• OpenServer 5.0.7 : OpenSSH: multiple buffer handling problems security (Oct 03)
• Minihttpserver File-Sharing for NET Directory Traversal Vulnerability Bahaa Naamneh (Oct 03)
• New IE crash: CSS + HTML arachnid__notdot_net (Oct 03)
  • RE: New IE crash: CSS + HTML Brian Paulson (Oct 03)
    • RE: New IE crash: CSS + HTML Russ Uhte (Lists) (Oct 03)
  • RE: New IE crash: CSS + HTML Drew Copley (Oct 03)
  • <Possible follow-ups>
  • RE: New IE crash: CSS + HTML Robert Ahnemann (Oct 03)
  • Re: New IE crash: CSS + HTML Sherlock (Oct 04)
    • Vulnerabilities in Easy File Sharing Web Server (1.2 NEW). nimber (Oct 06)
  • RE: New IE crash: CSS + HTML Paul Szabo (Oct 06)
• PINE-CERT-20030901: Integer Overflow in FreeBSD Kernel [fhold] Joost Pol (Oct 03)
• TSLSA-2003-0003 - openssl Tawie Security Advisor (Oct 03)
• patch for vulnerability in cgiemail Matt Riffle (Oct 03)
• Cisco LEAP Insecurities + POC evol (Oct 03)
• [CLA-2003:757] Conectiva Security Announcement - vixie-cron Conectiva Updates (Oct 03)
• [CLA-2003:758] Conectiva Security Announcement - vixie-cron Conectiva Updates (Oct 03)
• Cisco 6509 switch telnet vulnerability Chris Norton (Oct 03)
  • Re: Cisco 6509 switch telnet vulnerability Wendy Garvin (Oct 04)
  • Re: Cisco 6509 switch telnet vulnerability Bob Niederman (Oct 04)
    • Re: Cisco 6509 switch telnet vulnerability twig les (Oct 06)
• Cobalt RaQ Control Panel Cross Site Scripting Lorenzo Hernandez Garcia-Hierro (Oct 04)
  • <Possible follow-ups>
  • RE: Cobalt RaQ Control Panel Cross Site Scripting Steve Manzuik (Oct 06)
• FreeBSD Security Advisory FreeBSD-SA-03:18.openssl FreeBSD Security Advisories (Oct 04)
• OpenLinux: wu-ftpd fb_realpath() off-by-one bug security (Oct 04)
• EMML, EMGB : Include() hole Frog Man (Oct 04)
• PHP-Nuke v 6.7 + Windows = File Upload Frog Man (Oct 04)
• Conexant Access Runner DSL Console login bypass vulnerability Chris Norton (Oct 04)
• [CLA-2003:760] Conectiva Security Announcement - mplayer Conectiva Updates (Oct 06)
• [PAPER] Juggling with packets: floating data storage Wojciech Purczynski (Oct 06)
  • RE: [PAPER] Juggling with packets: floating data storage Alun Jones (Oct 08)
    • Re: [PAPER] Juggling with packets: floating data storage Nicholas Weaver (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Rick Wash (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage David Heigl (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Doug Moen (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Michal Zalewski (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Aron Nimzovitch (Oct 09)
      • Re: [Full-Disclosure] Re: [PAPER] Juggling with packets: floating data storage Valdis . Kletnieks (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Michal Zalewski (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage Eugen Leitl (Oct 08)
      • Re: [PAPER] Juggling with packets: floating data storage der Mouse (Oct 09)
      • Re: [PAPER] Juggling with packets: floating data storage Darren Reed (Oct 10)
  • <Possible follow-ups>
  • Re: [PAPER] Juggling with packets: floating data storage Adeel Hussain (Oct 09)
    • Re: [PAPER] Juggling with packets: floating data storage Brandon Eisenmann (Oct 10)
• Weaknesses in LEAP Challenge/Response Joshua Wright (Oct 06)
  • Re: Weaknesses in LEAP Challenge/Response Sharad Ahlawat (Oct 07)
• Re: I have fixes for the Geeklog vulnerabilities Dirk Haun (Oct 06)
• FreeBSD Security Advisory FreeBSD-SA-03:15.openssh FreeBSD Security Advisories (Oct 06)
• Local root exploit in SuSE Linux 7.3Pro Stefan Nordhausen (Oct 06)
• Local root exploit in SuSE Linux 8.2Pro Stefan Nordhausen (Oct 06)
  • Re: Local root exploit in SuSE Linux 8.2Pro Roman Drahtmueller (Oct 06)
• JBoss 3.2.1: Remote Command Injection Marc Schoenefeld (Oct 06)
• GLSA: cfengine (200310-02) Kurt Lieber (Oct 06)
• GuppY : XSS, Files Reading/Writing Frog Man (Oct 06)
• SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. Larry W. Cashdollar (Oct 06)
• Verisign fighting back at ICANN Thor Larholm (Oct 06)
• Access Runner DSL Console vulnerability update Chris Norton (Oct 06)
  • JS/HTML code injection in File-Sharing for NET v1.5 and Forums Web Server v1.5 nimber (Oct 06)
• SA-20031006 slocate vulnerability Patrik Hornik (Oct 06)
• Update JBoss 308 & 321: Remote Command Injection Marc Schoenefeld (Oct 06)
• The joys of impurity (was: MOSDEF, InlineEgg) Alexander E. Cuttergo (Oct 06)
  • <Possible follow-ups>
  • Re: The joys of impurity (was: MOSDEF, InlineEgg) dave (Oct 07)
• Adobe SVG Viewer Active Scripting Bypass (GM#002-MC) GreyMagic Software (Oct 07)
• PeopleSoft Grid Option Vulnerability info (Oct 07)
• Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC) GreyMagic Software (Oct 07)
• IE 6 XML Patch Bypass Mindwarper * (Oct 07)
  • RE: IE 6 XML Patch Bypass GreyMagic Software (Oct 08)
• Medieval Total War <= 1.1 broadcast crash Luigi Auriemma (Oct 07)
• Medieval Total War <= 1.1 broadcast Connection expired Luigi Auriemma (Oct 07)
• Adobe SVG Viewer Local and Remote File Reading (GM#003-MC) GreyMagic Software (Oct 07)
• ZH2003-3SP (security patch): multiple vulnerabilities in mod_gzip 1.3.x debug mode Astharot (Oct 07)
• [RHSA-2003:278-01] Updated SANE packages fix remote vulnerabilities bugzilla (Oct 07)
• New FAQ on worm/worm containment Stuart Staniford (Oct 07)
• Betr.: IE 6 XML Patch Bypass Philip Wagenaar (Oct 08)
• ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front Astharot (Oct 08)
• Openoffice 1.1.0 DoS Marc Schoenefeld (Oct 08)
• PHP-Nuke SQL Injection mod (Oct 08)
  • Re: PHP-Nuke SQL Injection 3APA3A (Oct 08)
• HPUX dtprintinfo buffer overflow vulnerability Davide Del Vecchio (Oct 08)
• Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability Eiji James Yoshida (Oct 08)
• Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities jelmer (Oct 08)
  • <Possible follow-ups>
  • Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities Chris . Kulish (Oct 08)
• PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload info (Oct 08)
• PeopleSoft <Control><J> Information Disclosure info (Oct 08)
• Re: [Full-Disclosure] RE: [PAPER] Juggling with packets: floating data storage Michal Zalewski (Oct 08)
• [RHSA-2003:281-01] Updated MySQL packages fix vulnerability bugzilla (Oct 09)
• NetBSD Security Advisory 2003-016: Sendmail - another prescan() bug CAN-2003-0694 NetBSD Security Officer (Oct 09)
• NetBSD Security Advisory 2003-017: OpenSSL multiple vulnerabilities NetBSD Security Officer (Oct 09)
• NetBSD Security Advisory 2003-015: Remote and local vulnerabilities in XFree86 font libraries NetBSD Security Officer (Oct 09)
• Shattering By Example Brett Moore (Oct 10)
• Bad news on RPC DCOM vulnerability 3APA3A (Oct 10)
  • <Possible follow-ups>
  • RE: Bad news on RPC DCOM vulnerability VigilantMinds Security Operations Center (Oct 11)
  • Re: Bad news on RPC DCOM vulnerability K-OTiK Security (Oct 11)
  • Re: Bad news on RPC DCOM vulnerability Terence Runge (Oct 13)
    • Re: Bad news on RPC DCOM vulnerability Terence Runge (Oct 13)
• MDKSA-2003:099 - Updated sane packages fix remote vulnerabilities Mandrake Linux Security Team (Oct 10)
• [SECURITY] [DSA 394-1] New openssl095 packages fix denial of service Martin Schulze (Oct 11)
• Concern about Checkpoint and SSL Vulnerability seeker (Oct 11)
• SA-20031006 slocate buffer overflow - exploitation proof Patrik Hornik (Oct 11)
• TRACKtheCLICK Script Injection Vulnerabilities BrainRawt (Oct 11)
• Gallery 1.4 including file vulnerability Stöckli (Oct 11)
  • RE: Gallery 1.4 including file vulnerability Brent Meshier (Oct 13)
  • Re: Gallery 1.4 including file vulnerability Bharat Mediratta (Oct 13)
• *ADDENDUM* New AIM Expliot/Worm/Adware-script (realphx.com related) Michael A. Nunes (Oct 11)
• New AIM Expliot/Worm/Adware-script (realphx.com related) Michael A. Nunes (Oct 11)
  • Re: New AIM Expliot/Worm/Adware-script (realphx.com related) Thor Larholm (Oct 13)
• buffer overflow in IRCD software Piotr KUCHARSKI (Oct 13)
• myPHPCalendar : Informations Disclosure, File Include Frog Man (Oct 13)
• Remote root exploit for proftpd \n bug Carl Livitt (Oct 13)
• Tool Release: Xprobe2 0.2 Ofir Arkin (Oct 13)
• UK's Internet Infrastructure Open to Prying Eyes root (Oct 14)
• What software breaks because of this DNS feature? Richard M. Smith (Oct 14)
  • Re: What software breaks because of this DNS feature? Michael Sierchio (Oct 14)
    • Re: What software breaks because of this DNS feature? Kevin George (Oct 15)
  • <Possible follow-ups>
  • RE: What software breaks because of this DNS feature? Michael Wojcik (Oct 14)
    • RE: What software breaks because of this DNS feature? Rob Mayoff (Oct 14)
• Finjan Software Discovers a New Critical Vulnerability In Microsoft Hotmail Menashe Eliezer (Oct 15)
• LinkSys EtherFast Router Denial of Service Attack DigitalPranksters (Oct 15)
• [SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service Martin Schulze (Oct 15)
• [CLA-2003:762] Conectiva Security Announcement - glibc Conectiva Updates (Oct 15)
• Few issues previously unpublished in English 3APA3A (Oct 15)
• Gaim festival plugin exploit error (Oct 15)
  • Re: Gaim festival plugin exploit HCTITS Security Division (Oct 20)
    • Re: [Full-Disclosure] Re: Gaim festival plugin exploit Cael Abal (Oct 20)
    • Re: Gaim festival plugin exploit Randal L. Schwartz (Oct 20)
• Microsoft Windows Security Bulletin Summary October Giovanni Campagnoli (Oct 15)
  • Microsoft got it wrong Richard M. Smith (Oct 15)
    • Re: Microsoft got it wrong T.A. Adjuster (Oct 16)
  • <Possible follow-ups>
  • RE: Microsoft Windows Security Bulletin Summary October Thor Larholm (Oct 16)
• ColdFusion SQL Error Pages XSS Lorenzo Hernandez Garcia-Hierro (Oct 15)
• Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003) NGSSoftware Insight Security Research (Oct 16)
• Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack (Microsoft Security Bulletin MS03-047) Ory Segal (Oct 16)
• CSS Vulnerability in Bajie HTTP JServer Oliver Karow (Oct 16)
• Listbox And Combobox Control Buffer Overflow Brett Moore (Oct 16)
• OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Multiple security vulnerabilities in Xsco security (Oct 16)
• Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine Sintelli SINTRAQ (Oct 16)
• MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities Mandrake Linux Security Team (Oct 17)
• MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability Mandrake Linux Security Team (Oct 17)
• [CLA-2003:766] Conectiva Security Announcement - gdm Conectiva Updates (Oct 17)
• [CLA-2003:765] Conectiva Security Announcement - ircd Conectiva Updates (Oct 17)
  • Re: [CLA-2003:765] Conectiva Security Announcement - ircd Florian Weimer (Oct 17)
• Proof of concept for Windows Messenger Service overflow Hanabishi Recca (Oct 20)
• PHP-Nuke Path Disclosure Vulnerability Bahaa Naamneh (Oct 20)
• IE remote code execution Marcin Ulikowski (Oct 20)
  • Re: IE remote code execution Jouko Pynnonen (Oct 20)
  • <Possible follow-ups>
  • Re: IE remote code execution K-OTiK Security (Oct 20)
  • RE: IE remote code execution Thor Larholm (Oct 21)
• Opera HREF escaped server name overflow @stake Advisories (Oct 20)
• JAP Wins Court Victory Tarapia Tapioco (Oct 20)
• @stake tool announcement: RedFang 2.5: The Bluetooth Hunter Ollie Whitehouse (Oct 20)
• Geeklog exploit Jouko Pynnonen (Oct 20)
• Origo ASR-8100 ADSL router remote factory reset Theo Markettos (Oct 20)
• eMule 2.2 [0.29c] - Web Control Panel - DOS(Denial Of Service) The-Insider (Oct 20)
• [OpenPKG-SA-2003.045] OpenPKG Security Advisory (ircd) OpenPKG (Oct 20)
• Re: Multiple Heap Overflows in FTP Desktop Vlad M (Oct 20)
• ZH2003-31SA (security advisory): file inclusion vulnerability in cpCommerce Astharot (Oct 20)
• Unpatched Internet Explorer Bugs Liu Die Yu (Oct 20)
• ByteHoard Directory Traversal Vulnerability Sintelli SINTRAQ (Oct 20)
• [ANNOUNCE] mod_security 1.7 released Ivan Ristic (Oct 20)
• Multiple SQL Injection Vulnerabilities in DeskPRO Aviram Jenik (Oct 20)
• Get admin level on Goldlink script v3.0 Weke (Oct 20)
• Cross Site Java applets Marc Schoenefeld (Oct 20)
• Gast Arbeiter Privilege Escalation natok (Oct 21)
• Immunix Secured OS 7+ fetchmail update Immunix Security Team (Oct 21)
• SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version Sintelli SINTRAQ (Oct 21)
• OpenServer 5.0.5 : Insecure creation of files in /tmp security (Oct 21)
• Web Wiz Forums ver. 7.01 HEX (Oct 21)
  • <Possible follow-ups>
  • Re: Web Wiz Forums ver. 7.01 bruce (Oct 22)
• IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive Marc Schoenefeld (Oct 21)
• MS03-046 Microsoft Exchange 2000 Heap Overflow H D Moore (Oct 22)
• mah-jong[v1.4]: server/client remote buffer overflow exploit. Vade 79 (Oct 22)
• IE6 CSS-Crash Andreas Boeckler (Oct 22)
  • <Possible follow-ups>
  • Re: IE6 CSS-Crash xenophi1e (Oct 22)
• [CLA-2003:768] Conectiva Security Announcement - fileutils Conectiva Updates (Oct 22)
• [CLA-2003:769] Conectiva Security Announcement - sane Conectiva Updates (Oct 22)
• "Local" and "Remote" considered insufficient Steven M. Christey (Oct 22)
  • Re: "Local" and "Remote" considered insufficient Ejovi Nuwere (Oct 23)
    • Re: "Local" and "Remote" considered insufficient Florian Weimer (Oct 23)
  • Re: "Local" and "Remote" considered insufficient Eric Knight (Oct 23)
• [LSD] Security vulnerability in SUN's Java Virtual Machine implementation Last Stage of Delirium (Oct 23)
  • Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation Alla Bezroutchko (Oct 27)
    • Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation Marc Schoenefeld (Oct 27)
• Shatter XP xenophi1e (Oct 23)
• CensorNet: Cross Site Scripting Vulnerability Richard Maudsley (Oct 23)
  • Message not available
    • Re: CensorNet: Cross Site Scripting Vulnerability Dan Searle (Oct 27)
      • Re: CensorNet: Cross Site Scripting Vulnerability Richard Maudsley (Oct 27)
• (Fw) : mIRC 6.12 (latest) DCC Exploit K-OTiK Security (Oct 23)
• HTML Help API - Privilege Escalation Brett Moore (Oct 24)
• Internet Explorer and Opera local zone restriction bypass Mindwarper * (Oct 24)
  • Re: Internet Explorer and Opera local zone restriction bypass Jort Slobbe (Oct 24)
    • Re: Internet Explorer and Opera local zone restriction bypass jelmer (Oct 27)
  • Re: Internet Explorer and Opera local zone restriction bypass Andreas Sandblad (Oct 27)
  • Re: Internet Explorer and Opera local zone restriction bypass Andreas Sandblad (Oct 27)
    • Re: Internet Explorer and Opera local zone restriction bypass jelmer (Oct 28)
  • <Possible follow-ups>
  • RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 27)
  • RE: Internet Explorer and Opera local zone restriction bypass Mindwarper * (Oct 27)
    • Re: Internet Explorer and Opera local zone restriction bypass Heikki Toivonen (Oct 27)
  • Re: Internet Explorer and Opera local zone restriction bypass Mohsen Hariri (Oct 27)
  • Re: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 27)
  • RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 28)
  • Re: Internet Explorer and Opera local zone restriction bypass Bipin Gautam hUNT3R (Oct 28)
  • Re: Internet Explorer and Opera local zone restriction bypass william schulze (Oct 30)
  • RE: Internet Explorer and Opera local zone restriction bypass Francis Favorini (Oct 30)
  • Re: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 30)
  • RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 30)
  • RE: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 31)
• [CLA-2003:771] Conectiva Security Announcement - anonftp Conectiva Updates (Oct 24)
• XLS Attack on AES (Rijndael) latte1 (Oct 24)
  • Re: XLS Attack on AES (Rijndael) Michael Sierchio (Oct 24)
    • Re: XLS Attack on AES (Rijndael) Christian Ruediger Bahls (Oct 27)
• SiteKiosk terminal software Zrekam (Oct 24)
  • Re: SiteKiosk terminal software Godwin Stewart (Oct 27)
• Buffer Overflow in Yahoo messenger Client Hat-Squad Security Team (Oct 27)
• sh-httpd `wildcard character' vulnerability dong-h0un U (Oct 27)
  • Re: sh-httpd `wildcard character' vulnerability Richard Brittain (Oct 28)
• New Vulnerability Joshua P. Miller (Oct 27)
• Musicqueue multiple local vulnerabilities dong-h0un U (Oct 27)
• a dangerous fast spreading (yet simple) trojan horse. Gadi Evron (Oct 27)
  • Re: a dangerous fast spreading (yet simple) trojan horse. Andreas Reich (Oct 27)
    • Re: a dangerous fast spreading (yet simple) trojan horse. Craig Holmes (Oct 27)
  • <Possible follow-ups>
  • Re: a dangerous fast spreading (yet simple) trojan horse. K-OTiK Security (Oct 27)
• Dansie Shopping Cart Discloses Installation Path to Remote Users Dr`Ponidi Haryanto (Oct 27)
• Some serious security holes in 'The Bat!' Bipin Gautam hUNT3R (Oct 27)
• Java 1.4.2_02 InsecurityManager JVM crash Marc Schoenefeld (Oct 27)
  • Re: Java 1.4.2_02 InsecurityManager JVM crash Francisco Andrades (Oct 27)
    • Re: Java 1.4.2_02 InsecurityManager JVM crash Marc Schoenefeld (Oct 27)
• MDKSA-2003:096-1 - Updated apache2 packages fix CGI scripting deadlock Mandrake Linux Security Team (Oct 27)
• Libnids <= 1.17 buffer overflow Rafal Wojtczuk (Oct 27)
• Advanced Poll : PHP Code Injection, File Include, Phpinfo Frog Man (Oct 27)
• SGI Advanced Linux Environment security update #4 SGI Security Coordinator (Oct 27)
• SGI Advanced Linux Environment security update #3 SGI Security Coordinator (Oct 27)
• Norton Internet Security 2003 XSS DigitalPranksters (Oct 27)
• Les Visiteurs v2.0.1 code injection vulnerability Matthieu Peschaud (Oct 27)
• Root Directory Listing on RH default apache tfm (Oct 27)
  • Re: Root Directory Listing on RH default apache Stephen Samuel (Oct 29)
• SGI Advanced Linux Environment security update #2 SGI Security Coordinator (Oct 27)
• Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation Michael Earls (Oct 27)
• Remote overflow in thttpd advisories(-at-)texonet.com (Oct 27)
• [slackware-security] fetchmail security update (SSA:2003-300-02) Slackware Security Team (Oct 27)
• [slackware-security] gdm security update (SSA:2003-300-01) Slackware Security Team (Oct 27)
• Nachi/Welchia/LovSan.D version 2 appears to be spreading Young, Keith (Oct 27)
  • Re: Nachi/Welchia/LovSan.D version 2 appears to be spreading Peter Kieser (Oct 28)
• [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache) OpenPKG (Oct 28)
• Re: a dangerous fast spreading (yet simple) trojan horse (Now IRC.Trojan.Fgt) K-OTiK Security (Oct 28)
• Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability Oliver Karow (Oct 28)
• [securemac] Local vulnerability: MacOSX Screensaver locking bypass. kang (Oct 28)
• Mac OS X Systemic Insecure File Permissions @stake Advisories (Oct 28)
• Mac OS X Arbitrary File Overwrite via Core Files @stake Advisories (Oct 28)
• Mac OS X Long argv[] buffer overflow @stake Advisories (Oct 28)
  • Re: Mac OS X vulnerabilities Thor Larholm (Oct 28)
    • Re: Mac OS X vulnerabilities Joshua Levitsky (Oct 29)
      • Re: Mac OS X vulnerabilities Radoslav Dejanovic (Oct 30)
      • Re: Mac OS X vulnerabilities Mike Stark (Oct 30)
• Local root vuln in kpopup b0f www . b0f . net (Oct 28)
• RE: Norton Internet Security Blocked Sites XSS Sym Security (Oct 28)
• Wildcard exportfs issue in NFS on IRIX SGI Security Coordinator (Oct 28)
• FirstClass 7.1 HTTP Server: Remote Directory Listing Richard Maudsley (Oct 28)
  • <Possible follow-ups>
  • Re: FirstClass 7.1 HTTP Server: Remote Directory Listing Graham Morley (Oct 30)
• mod_security 1.7RC1 to 1.7.1 vulnerability Adam Dyga (Oct 28)
• STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability advisory (Oct 29)
• possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI itojun (Oct 29)
  • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI Colm MacCarthaigh (Oct 29)
    • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI der Mouse (Oct 29)
      • Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI Colm MacCarthaigh (Oct 29)
• TelCondex SimpleWebserver Buffer Overflow Oliver Karow (Oct 29)
• RE: Mac OS X vulnerabilities ['Virus checked"] Thor Larholm (Oct 29)
  • <Possible follow-ups>
  • RE: Mac OS X vulnerabilities ['Virus checked"] graham . coles (Oct 29)
    • Re: Mac OS X vulnerabilities ['Virus checked"] Steve Clement (Oct 29)
      • Re: Mac OS X vulnerabilities ['Virus checked"] Adam Shostack (Oct 29)
      • Re: Mac OS X vulnerabilities ['Virus checked"] Ragnar Sundblad (Oct 29)
      • Re: Mac OS X vulnerabilities ['Virus checked"] Kurt Harvey (Oct 30)
  • Re: Mac OS X vulnerabilities ['Virus checked"] graham . coles (Oct 29)
  • Re: Mac OS X vulnerabilities ['Virus checked"] Chris Wysopal (Oct 29)
• [SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution Martin Schulze (Oct 29)
• [CLA-2003:773] Conectiva Security Announcement - libnids Conectiva Updates (Oct 29)
• E107 DoS vulnerability Blademaster (Oct 29)
• Immunix Secured OS 7+ apache update Immunix Security Team (Oct 29)
• Re: Mac OS X vulnerabilities James Kelly (Oct 30)
  • Re: Mac OS X vulnerabilities gabriel rosenkoetter (Oct 30)
    • Re: Mac OS X vulnerabilities Lyndon Nerenberg (Oct 30)
      • Re: Mac OS X vulnerabilities gabriel rosenkoetter (Oct 30)
  • Re: Mac OS X vulnerabilities Adam Shostack (Oct 31)
• [OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql) OpenPKG (Oct 30)
• Multiple Vulnerabilities in Led-Forums ProXy - (Oct 30)
• IE bug: loading HTML under a graphic file name - summary Gadi Evron (Oct 30)
• Serious Sam is not so serious Luigi Auriemma (Oct 30)
• WU-FTPD 2.6.2 Freezer Angelo Rosiello (Oct 31)
  • Re: WU-FTPD 2.6.2 Freezer Seth Arnold (Oct 31)
• Mimail.C Alan (Oct 31)
• GLSA: apache (200310-04) Rajiv Aaron Manglani (Oct 31)
• Advisory: Sun's jre/jdk 1.4.2 multiple vulernabilities in linux installers Stan Bubrouski (Oct 31)
• IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scripting IRM Advisories (Oct 31)
• VMWare GSX Server Authentication Server Buffer Overflow Vulnerability - Update Darryl Swofford (Oct 31)
• Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue advisories (Oct 31)
• Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues advisories (Oct 31)
• SUSE Security Announcement: thttpd (SuSE-SA:2003:044) Thomas Biege (Oct 31)
• Redirection and refresh parses local file Liu Die Yu (Oct 31)
• VMware GSX Server and ESX Server OpenSSL vulnerability patches VMware (Oct 31)
• DoS in Plug and Play Web Server Proxy Server Oliver Karow (Oct 31)
• Console Root On OSX up to 10.2.8 Jason Storm (Oct 31)
• Macos 10.2.8 Adam Shostack (Oct 31)
• Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads Virginity Security (Oct 31)
• Re: Mimail.C (Denial of Service Attack) K-OTiK Security (Oct 31)
• New Varient Of Irc Worm Spreading Craig Holmes (Oct 31)

Previous period

Next period