Bugtraq: by date

Wednesday, 28 January
- RE: virus handling Rainer Gerhards
- Re: RFC: virus handling 3APA3A
Friday, 30 January
- http://www.smashguard.org Hilmi Ozdoganoglu
- MDKSA-2004:006-1 - Updated gaim packages fix multiple vulnerabilities Mandrake Linux Security Team
- Advisory ! Mr Serbia
Wednesday, 28 January
- outbreak warning: new Myydoom.B is out Gadi Evron
Thursday, 29 January
- Re: RFC: virus handling Sascha Wilde
Tuesday, 27 January
- Re: Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 Matus UHLAR - fantomas
Thursday, 29 January
- Re: new WIN virus? markus-1977_at_gmx.net
- RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) Andrey G. Sergeev (AKA Andris)
- Re: new WIN virus? pna.lists
Saturday, 31 January
- Mydoom DDoS attack time table Gadi Evron
Wednesday, 28 January
- Re: [Full-Disclosure] outbreak warning: new Myydoom.B is out Gadi Evron
- MS to stop allowing passwords in URLs McAllister, Andrew
Thursday, 29 January
- Re: RFC: virus handling Pavel Levshin
- Re: Major hack attack on the U.S. Senate Mariusz Woloszyn
- Re: new WIN virus? Atom 'Smasher'
Wednesday, 28 January
- Re: RFC: virus handling Jeremy Mates
Thursday, 29 January
- Re: new WIN virus? Atom 'Smasher'
- Web Blog 1.1 Remote Execute Commands Bug ActualMInd
Wednesday, 28 January
- Re: RFC: virus handling Piotr KUCHARSKI
Sunday, 1 February
- [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl Matt Zimmerman
Thursday, 29 January
- Re: new WIN virus? K-OTiK Security
Wednesday, 28 January
- Re: vulnerabilities of postscript printers Georg Lutz
- Re: Oracle toplink mapping workbench password algorithm Martin
Sunday, 1 February
- CoDeX-W0rm - what happened here? Chuck Rock
Saturday, 31 January
- sqwebmail web login Marco Marabelli
Sunday, 1 February
- 0verkill - little simple vulnerability. Adam Zabrocki
Saturday, 31 January
- [FLSA-2004:1193] Updated ethereal resolves security vulnerabilites Jesse Keating
Sunday, 1 February
- [SCSA-027] PHP-Nuke 6.9 SQL Injection Vulnerability advisory_at_security-corporation.com
Saturday, 31 January
- another Trojan with the ADO hole? + a twist in the story Gadi Evron
Wednesday, 28 January
- Re: RFC: virus handling Patrick Proniewski
Saturday, 31 January
- [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) Jesse Keating
Sunday, 1 February
- Vulnerabilities in Crob FTP Server V3.5.1 Zero_X www.lobnan.de Team
Thursday, 29 January
- Re: Oracle toplink mapping workbench password algorithm Pete Finnigan
Friday, 30 January
- Refuting tall-tales and stories about the Mydoom worms Gadi Evron
Thursday, 29 January
- Symlink Vulnerability in GNU libtool <1.5.2 Stefan Nordhausen
Wednesday, 28 January
- Re: RFC: virus handling Craig Morrison
Saturday, 31 January
- Directory Traversal in Aprox PHP Portal. Zero_X www.lobnan.de Team
Thursday, 29 January
- Re: new WIN virus? Gregor Lawatscheck
Wednesday, 28 January
- Re: virus handling Mike Healan
Saturday, 31 January
- BUG IN APACHE HTTPD SERVER (current version 2.0.47) Vietnamese Security Group
Wednesday, 28 January
- Re: RFC: virus handling John Fitzgibbon
Friday, 30 January
- Denial Of Service in ChatterBox 2.0 Donato Ferrante
Wednesday, 28 January
- Re: RFC: virus handling Daniele Orlandi
Monday, 2 February
- [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V2.0 lion
Wednesday, 28 January
- Re: RFC: virus handling Pavel Kankovsky
- Re: RFC: virus handling Dave Aronson
Friday, 30 January
- Re: vulnerabilities of postscript printers Dragos Ruiu
Wednesday, 28 January
- Re: Fw: phpBB privmsg.php XSS vulnerability patch. Micheal Cottingham
Thursday, 29 January
- PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior Cedric Cochin
Monday, 2 February
- ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability ZetaLabs
- [waraxe-2004-SA#001] - Script injection in GBook for Php-Nuke ver. 1.0 Janek Vind
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Andr� Malo
Tuesday, 3 February
- Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior Cedric Cochin
- Re: Symlink Vulnerability in GNU libtool <1.5.2 Joseph S. Myers
- Re: Symlink Vulnerability in GNU libtool <1.5.2 Stefan Nordhausen
- X-Cart vulnerability Philip
- RE: http://www.smashguard.org Dave Paris
- [SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit Martin Schulze
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Vietnamese Security Group
- Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Cisco Systems Product Security Incident Response Team
Monday, 2 February
- RE: virus handling Shaun Bertrand
- RE: MS to stop allowing passwords in URLs Fergus Brooks
- Re: MS to stop allowing passwords in URLs N407ER
- Re: MS to stop allowing passwords in URLs Dave Warren
Tuesday, 3 February
- getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] Gadi Evron
- Re: RFC: virus handling James C. Slora Jr.
- Re: sqwebmail web login Antonio Messina
Monday, 2 February
- Re: RFC: virus handling David F. Skoll
- Re: [security] Re: Major hack attack on the U.S. Senate rsh_at_idirect.com
Tuesday, 3 February
- Re: MS to stop allowing passwords in URLs Vinny Abello
- Re: Major hack attack on the U.S. Senate Christian Vogel
- Re: sqwebmail web login scott.jefferd_at_cantire.com
Monday, 2 February
- Re: sqwebmail web login Brian Bothwell
Tuesday, 3 February
- Re: MS to stop allowing passwords in URLs Ansgar -59cobalt- Wiechers
- RE: MS to stop allowing passwords in URLs Francis Favorini
- Les Commentaires (PHP) Include file Himeur Nourredine
- Remote crash of Chaser game <= 1.50 Luigi Auriemma
- Hysterical first technical alert from US-CERT Larry Seltzer
- RE: MS to stop allowing passwords in URLs Andrew Harwood
Monday, 2 February
- DIMVA 2004 deadline extended Thomas Biege
Tuesday, 3 February
- Re: RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) Peter J. Holzer
- Re: MS to stop allowing passwords in URLs 3APA3A
Monday, 2 February
- Re: MS to stop allowing passwords in URLs Dave McCormick
Tuesday, 3 February
- Sandblad #12: Inject javascript url in history list (revisited) Andreas Sandblad
- Re: RFC: virus handling Dave Clendenan
- Re: MS to stop allowing passwords in URLs Nick FitzGerald
- Re: RFC: virus handling Matthew Dharm
- RE: CoDeX-W0rm - what happened here? Michael Marziani
- Re: CoDeX-W0rm - what happened here? Charley Hamilton
- RE: RFC: virus handling David Brodbeck
- RE: MS to stop allowing passwords in URLs Thor Larholm
- Decompression Bombs Matthias Leu
Monday, 2 February
- Re: MS to stop allowing passwords in URLs Sam Schinke
Tuesday, 3 February
- Re: MS to stop allowing passwords in URLs Paul Smith
- Re: http://www.smashguard.org Nicholas Weaver
- RE: MS to stop allowing passwords in URLs Richard M. Smith
- Web Crossing 4.x/5.x Denial of Service Vulnerability Peter Winter-Smith
- Re: Major hack attack on the U.S. Senate Ron DuFresne
- RE: MS to stop allowing passwords in URLs Joe Weisenberger
- Re: MS to stop allowing passwords in URLs David B Harris
- RE: MS to stop allowing passwords in URLs (Summary) McAllister, Andrew
- Re: Major hack attack on the U.S. Senate Daniel.Capo_at_tco.net.br
- RE: Major hack attack on the U.S. Senate David Schwartz
- Multiple Vulnerabilities in PHPX mantra_at_lkm-zx.net
- Re: Technical Details of Urlcount.cgi Vulnerability Tom Hanlin
- Re: RFC: virus handling Volker Kuhlmann
- Re: Symlink Vulnerability in GNU libtool <1.5.2 Scott James Remnant
- Re: Fw: phpBB privmsg.php XSS vulnerability patch. Truthless
- [SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) Martin Schulze
Wednesday, 4 February
- Re: [Full-Disclosure] smbmount disrupts Windows file sharing. Daniel Kabs [ML]
Tuesday, 3 February
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) langtuhaohoa caothuvolam
Wednesday, 4 February
- TYPSoft FTP Server 1.10 may be crashed intuit bug_hunter
Tuesday, 3 February
- RE: [Full-Disclosure] smbmount disrupts Windows file sharing. Steve Wray
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] James A. Thornton
- Re: [security] Re: Major hack attack on the U.S. Senate Bernie, CTA
Monday, 2 February
- smbmount disrupts Windows file sharing. Daniel Kabs [ML]
Tuesday, 3 February
- Re: RFC: virus handling Casper Dik
Wednesday, 4 February
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Andr� Malo
- ZH2004-04SA (security advisory): Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro ZetaLabs
- iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability labs
- Re: CoDeX-W0rm - what happened here? Simon
- rxgoogle.cgi XSS Vulnerability. Shaun Colley
- Re: MS to stop allowing passwords in URLs Gunnar
Tuesday, 3 February
- Re: http://www.smashguard.org Leon Harris
Wednesday, 4 February
- RE: CoDeX-W0rm - what happened here? James C Slora Jr
Tuesday, 3 February
- RE: Hysterical first technical alert from US-CERT Eggers, Bill A [LTD]
Wednesday, 4 February
- Re: Snort-inline Federico Petronio
- Re: Hysterical first technical alert from US-CERT Valdis.Kletnieks_at_vt.edu
- Re: sqwebmail web login Tim Nelson
- Re: RFC: virus handling Ben Wheeler
- Re: Hysterical first technical alert from US-CERT Valdis.Kletnieks_at_vt.edu
- Re: getting rid of outbreaks and spam (junk) James Riden
Monday, 2 February
- Security Advisory: CSS Vulnerability in Web Froums Server 1.6 nimber
Wednesday, 4 February
- RE: Hysterical first technical alert from US-CERT Larry Seltzer
- RE: MS to stop allowing passwords in URLs NESTING, DAVID M (SBCSI)
- announce: new mailing list - application security research - from vulnerabilities to code injection. Gadi Evron
- Re: Symlink Vulnerability in GNU libtool <1.5.2 Stefan Nordhausen
Thursday, 5 February
- [PINE-CERT-20040201] reference count overflow in shmat() Joost Pol
- IRIX userland binary vulnerabilities update SGI Security Coordinator
- IBM cloudscape SQL Database (DB2J) vulnerable to remote command injection Marc Schoenefeld
- FreeBSD Security Advisory FreeBSD-SA-04:02.shmat FreeBSD Security Advisories
- Re: http://www.smashguard.org Seth Arnold
- [SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities Martin Schulze
Wednesday, 4 February
- Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer NGSoftware Insight Security Research
Tuesday, 3 February
- Re: MS to stop allowing passwords in URLs Sam Schinke
Wednesday, 4 February
- Re: Hysterical first technical alert from US-CERT Philip Rowlands
- RE: Hysterical first technical alert from US-CERT - CERT#25304 Steen Larsen
- RE: Hacking USB Thumbdrives, Thumprint authentication markus-1977_at_gmx.net
- Re: TYPSoft FTP Server 1.10 may be crashed Maxim Polyakov
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Dan Yefimov
Thursday, 5 February
- [CLA-2004:811] Conectiva Security Announcement - libtool Conectiva Updates
- [RHSA-2004:020-01] Updated mailman packages close cross-site scripting vulnerabilities bugzilla_at_redhat.com
- OpenBSD IPv6 remote kernel crash Thor Larholm
- Checkpoint 4.1 Vulnerability Macroscape Solutions
Wednesday, 4 February
- Re: X-Cart vulnerability Dmitry
Thursday, 5 February
- Two checkpoint fw-1/vpn-1 vulns Bj�rnar Bj�rgum Larsen
Tuesday, 3 February
- Re: Symlink Vulnerability in GNU libtool <1.5.2 jsm_at_polyomino.org.uk
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] der Mouse
Wednesday, 4 February
- MDKSA-2004:009 - Updated glibc packages fix resolver vulnerabilities Mandrake Linux Security Team
Thursday, 5 February
- Remote crash Xlight ftp server 1.52 intuit e.b.
- Possible Cross Site Scripting in Discuz! Board Cheng Peng Su
Wednesday, 4 February
- Re: getting rid of outbreaks and spam Thor Larholm
Thursday, 5 February
- [RHSA-2004:030-01] Updated NetPBM packages fix multiple temporary file vulnerabilities bugzilla_at_redhat.com
Wednesday, 4 February
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] Georg Schwarz
Thursday, 5 February
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) langtuhaohoa caothuvolam
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) William A. Rowe, Jr.
- Re: Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior Security Admin
- RE: Decompression Bombs David Bachtel
Wednesday, 4 February
- Re: Major hack attack on the U.S. Senate Thomas M. Payerle
Friday, 6 February
- Re: Two checkpoint fw-1/vpn-1 vulns Markus Wernig
- Re: Two checkpoint fw-1/vpn-1 vulns Mariusz Woloszyn
Thursday, 5 February
- Re: Hysterical first technical alert from US-CERT Stephen Samuel
- Re: Hysterical first technical alert from US-CERT Andreas Marx
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Seth Arnold
- Re: MS to stop allowing passwords in URLs Nick FitzGerald
Friday, 6 February
- formmail (PHP) Upload file using CSS Himeur Nourredine
Thursday, 5 February
- Re: Hysterical first technical alert from US-CERT Andrew Fried
Friday, 6 February
- Open Journal Blog Authenticaion Bypassing Vulnerability Tri Huynh
Thursday, 5 February
- RE: getting rid of outbreaks and spam (junk) Paul Murphy
- Re: Hysterical first technical alert from US-CERT Mary Landesman
- Linux 2.4.24 with vserver 1.24 exploit Markus M�ller
Friday, 6 February
- RE: Hacking USB Thumbdrives, Thumprint authentication Navaneetharangan
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Todd C. Campbell
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) Tyler Larson
- Re: getting rid of outbreaks and spam Dave Warren
Thursday, 5 February
- RE: Hysterical first technical alert from US-CERT Darragh Bailey
Friday, 6 February
- Re: Decompression Bombs [...missed something] Bipin Gautam.
- Re: Hysterical first technical alert from US-CERT Valdis.Kletnieks_at_vt.edu
- CactuSoft CactuShop 5.0 Lite shopping cart software backdoor S-Quadra Security Research
- Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior Adam Laurie
- Dotnetnuke Multiple Vulnerabilities Ferruh Mavituna
- RE: http://www.smashguard.org Hilmi Ozdoganoglu
- [SECURITY] [DSA 435-1] New mpg123 packages fix heap overflow Matt Zimmerman
Thursday, 5 February
- RE: [security] Re: Major hack attack on the U.S. Senate Larry Seltzer
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) Phan
- Re: RFC: virus handling Shawn McMahon
Friday, 6 February
- Biometric systems security [WAS: Re: Hacking USB Thumbdrives, Thumprint authentication] Gadi Evron
- [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts Tim Yamin
Saturday, 7 February
- Re: http://www.smashguard.org Theo de Raadt
- [Fwd: zyxel prestige ethernet information leakage] DiSToAGe
Friday, 6 February
- Re: Hacking USB Thumbdrives, Thumprint authentication Dave Aronson
- RE: getting rid of outbreaks and spam Larry Seltzer
Saturday, 7 February
- RE: Decompression Bombs Myron Davis
Monday, 9 February
- RE: Hacking USB Thumbdrives, Thumprint authentication David Brodbeck
Saturday, 7 February
- Re: Decompression Bombs [...missed something] Andreas Marx
- The Palace 3.x (Client) Stack Overflow Vulnerability Peter Winter-Smith
- Re: [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts Alexander GQ Gerasiov
Sunday, 8 February
- Eggrop bug cyborgirl_at_libero.it
- TrackMania Demo Denial of Service scrap
- PalmOS httpd accept() queue overflow DoS vulnerability. Shaun Colley
- [SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities Matt Zimmerman
Monday, 9 February
- clamav 0.65 remote DOS exploit Oliver Eikemeier
- Outbreak warning: possibly Mydoom.C Gadi Evron
Sunday, 8 February
- [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 Janek Vind
Monday, 9 February
- Re: clamav 0.65 remote DOS exploit Nigel Horne
Sunday, 8 February
- ptl-2004-01: Multiple vulnerabilities in Nokia phones Pentest Security Advisories
Monday, 9 February
- Re: clamav 0.65 remote DOS exploit Oliver Eikemeier
- Re: Decompression Bombs Brian Dessent
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) K-OTiK Security
Thursday, 5 February
- Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Wang Yun
Sunday, 8 February
- [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0 Janek Vind
Monday, 9 February
- RE: Decompression Bombs SBNelson_at_thermeon.com
- Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Disclosure From OSSI
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Gadi Evron
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Nick FitzGerald
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Seth Arnold
- RE: Outbreak warning: possibly Mydoom.C Thor Larholm
- Red-M Red-Alert Multiple Vulnerabilities Bruno Morisson
- [local problems] eTrust Virus Protection 6.0 InoculateIT for linux Rene
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) Guille -bisho-
- Re: TrackMania Demo Denial of Service Luigi Auriemma
- Brinkster Multiple Vulnerabilities Ferruh Mavituna
- Samba 3.x + kernel 2.6.x local root vulnerability Michal Medvecky
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Michael Kjorling
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Seth Arnold
- RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Larry Seltzer
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer David Schwartz
- Re: clamav 0.65 remote DOS exploit Stefan Triller
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Oliver Lavery
- Re: clamav 0.65 remote DOS exploit Mark Renouf
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Ward Taylor
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Patrick J. Volkerding
Saturday, 7 February
- Re: http://www.smashguard.org Crispin Cowan
- Re[2]: http://www.smashguard.org Andrey Kolishak
- Re: http://www.smashguard.org Nicholas Weaver
- HelpCtr - allow open any page or run Bartosz Kwitkowski
Monday, 9 February
- Re: Decompression Bombs Chris Green
Tuesday, 10 February
- Directory traversal in RealPlayer allows code execution Jouko Pynnonen
- Re: HelpCtr - allow open any page or run Bartosz Kwitkowski
- XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal Manuel L�pez
- Possible new cross zone scripting in IE Cheng Peng Su
- Re: HelpCtr - allow open any page or run N|ghtHawk
- ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS ACROS Security
Monday, 9 February
- Re: http://www.smashguard.org Theo de Raadt
- Re: Eggrop bug Jeff Fisher
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed
Tuesday, 10 February
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Gadi Evron
Monday, 9 February
- [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module. pokley
Tuesday, 10 February
- Re: clamav 0.65 remote DOS exploit Oliver Eikemeier
- Re: clamav 0.65 remote DOS exploit Dennis Freise
Monday, 9 February
- XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow icbm
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Peter Pentchev
- Re: Possible new cross zone scripting in IE http-equiv_at_excite.com
Sunday, 8 February
- Re: Hysterical first technical alert from US-CERT Shawn McMahon
Saturday, 7 February
- Why are postmasters distributing the MyDoom virus? Richard M. Smith
Tuesday, 10 February
- Re: Eggrop bug Giuseppe
- EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Marc Maiffret
- EEYE: Microsoft ASN.1 Library Bit String Heap Corruption Marc Maiffret
- Another Low Blow From Microsoft: MBSA Failure! dotsecure_at_hushmail.com
- MyDoom.A Machines : The new P2P Sharing Network ... K-OTiK Security
- RE: Another Low Blow From Microsoft: MBSA Failure! Drew Copley
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Joe Blatz
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Marc Maiffret
- [CLA-2004:812] Conectiva Security Announcement - vim Conectiva Updates
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Tina Bird
- iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow iDefense Labs
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Marc Maiffret
- [CLA-2004:813] Conectiva Security Announcement - gaim Conectiva Updates
- Re: Why are postmasters distributing the MyDoom virus? David F. Skoll
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Guille -bisho-
- Re: vulnerabilities of postscript printers Nicolas Gregoire
Monday, 9 February
- RE: getting rid of outbreaks and spam Randal, Phil
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Dave Weis
- Re: Outbreak warning: possibly Mydoom.C (Now Doomjuice.A) K-OTiK Security
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Mary Landesman
Tuesday, 10 February
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Tim Eddy
- Microsoft Virtual PC Services Insecure Temporary File Creation Advisories
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Rainer Gerhards
- RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) Nick FitzGerald
- RE: Why are postmasters distributing the MyDoom virus? Harley David
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse
- RE: Another Low Blow From Microsoft: MBSA Failure! Joe DeMarco
- PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior Cedric Cochin
- Scope of latest RealPlayer vuln Simon Brady
- ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates ZetaLabs
Wednesday, 11 February
- [RHSA-2004:051-01] Updated mutt packages fix remotely-triggerable crash bugzilla_at_redhat.com
- Mutt-1.4.2 fixes buffer overflow. Thomas Roessler
Monday, 9 February
- Re: Hacking USB Thumbdrives, Thumprint authentication Eric Murray
- RE: Hacking USB Thumbdrives, Thumprint authentication Charles Clancy
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Felipe Franciosi
- Re: clamav 0.65 remote DOS exploit Khalid J Hosein
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Frank Louwers
Tuesday, 10 February
- RE: Hysterical first technical alert from US-CERT Stephen Martin
Friday, 6 February
- AIX password enumeration possible Scott J
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer John D. Hardin
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Interne t Explorer Johnson, Jeff FOR:EX
Wednesday, 11 February
- Re: MyDoom.A Machines : The new P2P Sharing Network ... Nicolas Gregoire
Tuesday, 10 February
- RE: Another Low Blow From Microsoft: MBSA Failure! Drew Copley
- Re: Hacking USB Thumbdrives, Thumprint authentication Eric 'MightyE' Stevens
- RE: Another Low Blow From Microsoft: MBSA Failure Eric Schultze
Wednesday, 11 February
- Re: HelpCtr - allow open any page or run Bartosz Kwitkowski
- Denial of Service in Monkey httpd <= 0.8.1 Luigi Auriemma
Tuesday, 10 February
- RE: Hacking USB Thumbdrives, Thumprint authentication David.Cross_at_ngc.com
- RE: Another Low Blow From Microsoft: MBSA Failure! Frank Knobbe
- Re: Decompression Bombs Bipin Gautam.
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Nexus
- RE: Samba 3.x + kernel 2.6.x local root vulnerability John.Airey_at_rnib.org.uk
Wednesday, 11 February
- ISS Security Brief: Microsoft ASN.1 Integer Manipulation Vulnerabilities X-Force
- SGI Advanced Linux Environment security update #10 SGI Security Coordinator
Monday, 9 February
- Re: Decompression Bombs Myron Davis
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse
- RE: Another Low Blow From Microsoft: MBSA Failure! Drew Copley
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption James Riden
Wednesday, 11 February
- XFree86 vulnerability exploit Bender
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Rainer Gerhards
- Internet Explorer and Microsoft clipboard poor security policy bool_at_gte.net
Tuesday, 10 February
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Tina Bird
- Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! morning_wood
- RE: Another Low Blow From Microsoft: MBSA Failure! Eric McCarty
Wednesday, 11 February
- Denial of Service in Ratbag's game engine Luigi Auriemma
- Re: AIX password enumeration possible alex medvedev
Tuesday, 10 February
- Re: Why are postmasters distributing the MyDoom virus? mgotts_at_2roads.com
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Alun Jones
Wednesday, 11 February
- Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow Berend-Jan Wever
- Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! Valdis.Kletnieks_at_vt.edu
- AIM worm spreading around? Moshe Jacobson
- Update - CheckPoint Vulnerabilities Mark Litchfield
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Urban Widmark
- [ GLSA 200402-02 ] XFree86 Font Information File Buffer Overflow Tim Yamin
Tuesday, 10 February
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Sam Schinke
Wednesday, 11 February
- OpenLinux: slocate local user buffer overflow please_reply_to_security_at_sco.com
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Peter Pentchev
- [ GLSA 200402-04 ] Gallery <= 1.4.1 and below remote exploit vulnerability Tim Yamin
- [ GLSA 200402-03 ] Monkeyd Denial of Service vulnerability Tim Yamin
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Drew Copley
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Timothy J.Miller
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Peter J. Holzer
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse
Wednesday, 11 February
- MDKSA-2004:011 - Updated NetPBM packages fix a number of temporary file bugs. Mandrake Linux Security Team
Thursday, 12 February
- Re: Update - CheckPoint Vulnerabilities Mark Litchfield
Tuesday, 10 February
- Re: Why are postmasters distributing the MyDoom virus? Georg Schwarz
Wednesday, 11 February
- CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability Jensen, Greg
Thursday, 12 February
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Oliver Schneider
- Re: Update - CheckPoint Vulnerabilities Nicob
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed
Wednesday, 11 February
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption peter.huang_at_ossecurity.ca
- MDKSA-2004:010 - Updated mutt packages fix remote crash Mandrake Linux Security Team
- aimSniff.pl file "deletion" (local) Martin
Thursday, 12 February
- FW: CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability Jensen, Greg
Wednesday, 11 February
- phpnuke 6.9 search module exploit. pokley
Thursday, 12 February
- Cross Site Scripting in VBulletin forum software Jamie Fisher
- iDEFENSE Security Advisory 02.11.04: XFree86 Font Information File Buffer Overflow II iDefense Labs
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Steve Friedl
- W2K source "leaked"? Gadi Evron
- RE: W2K source "leaked"? tlarholm_at_pivx.com
- [slackware-security] XFree86 security update (SSA:2004-043-02) Slackware Security Team
- [slackware-security] mutt security update (SSA:2004-043-01) Slackware Security Team
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Disclosure From OSSI
- Symlink vulnerabilities in mailmgr Marco van Berkum
Tuesday, 10 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Glynn Clements
Thursday, 12 February
- crob ftpd Denial of Service gsicht gsicht
Wednesday, 11 February
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Boyce, Nick
Thursday, 12 February
- RE: AIM worm spreading around? Tim Walraven
Wednesday, 11 February
- [SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying Matt Zimmerman
Thursday, 12 February
- RE: W2K source "leaked"? Drew Copley
- Re: Scope of latest RealPlayer vuln Simon Brady
Friday, 13 February
- Sami FTP Server 1.1.3 multiple vulnerabilities intuit e.b.
Thursday, 12 February
- RE: [Full-Disclosure] RE: W2K source "leaked"? Andre Ludwig
- Re: W2K source "leaked"? V�ctor
- Re: W2K source "leaked"? V�ctor
- Windows 2000 Source Leak Verified. Get ready for the havoc. dotsecure_at_hushmail.com
- Re: W2K source "leaked"? Zhenkai Liang
Friday, 13 February
- Re: W2K source "leaked"? telec_at_ureach.com
Thursday, 12 February
- Microsoft Windows 2000 source code leaked Marc Bejarano
- Windows2000 who relase the code? bladi
- RE: W2K source "leaked"? tlarholm_at_pivx.com
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Alun Jones
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Thor Lancelot Simon
Wednesday, 11 February
- Re: Samba 3.x + kernel 2.6.x local root vulnerability Darren Reed
Friday, 13 February
- TSLSA-2004-0006 - mutt Trustix Security Advisor
- MDKSA-2004:012 - Updated XFree86 packages fix buffer overflow vulnerabilities Mandrake Linux Security Team
Thursday, 12 February
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Andr� Malo
Friday, 13 February
- MDKSA-2004:013 - Updated mailman packages close various cross-site scripting vulnerabilities. Mandrake Linux Security Team
- Re: XFree86 vulnerability exploit Adam Langley
- [RHSA-2004:059-01] Updated XFree86 packages fix privilege escalation vulnerability bugzilla_at_redhat.com
- [RHSA-2004:048-01] Updated PWLib packages fix protocol security issues bugzilla_at_redhat.com
Thursday, 12 February
- Immunix Secured OS 7.3 XFree86 update Immunix Security Team
Wednesday, 11 February
- DallasCon 2004 Information Security Conference and Boot Camp Bruce Khodabakhsh
Friday, 13 February
- RE: ISS Security Rip: Microsoft ASN.1 (Half a sploit) kradhatman_at_hushmail.com
Thursday, 12 February
- vBulletin PHP Forum Version Rafel Ivgi, The-Insider
Wednesday, 11 February
- [FLSA-2004:1232] Updated slocate resolves security vulnerabilites Jesse Keating
Friday, 13 February
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer carlo_at_cs.dartmouth.edu
- RE: [Full-Disclosure] Re: W2K source "leaked"? Drew Copley
Thursday, 12 February
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Bill Stoddard
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Bill Gallagher
- Re: AIX password enumeration possible Sven Specker
Sunday, 15 February
- Symantec FireWall/VPN Appliance model 200 leak of security Davide Del Vecchio
Monday, 16 February
- Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate Dr. Peter Bieringer
- Exploit based on leaked code released. Christopher Carboni
- Broadcast client buffer-overflow in Purge Jihad <= 2.0.1 Luigi Auriemma
Sunday, 15 February
- problems with database files in 'SignatureDB' LynX
- Buffer overflow in mnoGoSearch Jedi/Sector One
- Re: Microsoft ASN.1 (Half a sploit) K-OTiK Security
- Xlight ftp server 1.52 RETR bug intuit e.b.
Friday, 13 February
- [SECURITY] [DSA 429-2] New gnupg packages fix cryptographic weakness Matt Zimmerman
Saturday, 14 February
- Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow Dr Andrew C Aitchison
Friday, 13 February
- ASP Portal Multiple Vulnerabilities Manuel L�pez
Monday, 16 February
- Misinformation in Security Advisories (ASN.1) John Compton
Saturday, 14 February
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Buck Huppmann
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Florian Weimer
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Michael Shigorin
Friday, 13 February
- Fwd: Re: NT/W2K Source leak Dragos Ruiu
- Re: W2K source "leaked"? Byron Copeland
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Joshua Levitsky
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption David Wilson
- RE: [inbox] W2K source "leaked"? Curt Purdy
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Axel Beckert - ecos gmbh
- RE: W2K source "leaked"? LordInfidel_at_directionweb.com
Thursday, 12 February
- RE: Hacking USB Thumbdrives, Thumprint authentication Lyal Collins
Sunday, 15 February
- buffer overflow in Robot FTP Server gsicht gsicht
Saturday, 14 February
- AllMyGuests PHP Code Injection vulnerability Pablo Santana
- AllMyVisitors PHP Code Injection vulnerability Pablo Santana
Sunday, 15 February
- LNSA-#2004-0001: mutt remote crash Vincenzo Ciaglia
Monday, 16 February
- Re: W2K source "leaked"? Ho Chaw Ming
Saturday, 14 February
- AllMyLinks PHP Code Injection vulnerability Pablo Santana
Monday, 16 February
- Another YabbSE SQL Injection backspace
- RE: Exploit based on leaked code released. tlarholm_at_pivx.com
Sunday, 15 February
- Bypassing PatchFinder 2 Edgar Barbosa
Monday, 16 February
- Re: Another YabbSE SQL Injection Mike Bobbitt
- Re: Misinformation in Security Advisories (ASN.1) Simon Brady
- Re: Misinformation in Security Advisories (ASN.1) evol_at_ruiner.halo.nu
- Re: Misinformation in Security Advisories (ASN.1) Ivan Arce
Saturday, 14 February
- Re: Asp Portal Multiple Vulnerabilities Manuel L�pez
- RE: [Full-Disclosure] Re: W2K source "leaked"? Nick FitzGerald
Monday, 16 February
- Re: Misinformation in Security Advisories (ASN.1) Steven M. Christey
- [ GLSA 200402-05 ] phpMyAdmin < 2.5.6-rc1 directory traversal attack Tim Yamin
- [ GLSA 200402-06 ] Linux kernel AMD64 ptrace vulnerability Tim Yamin
Tuesday, 17 February
- Denial Of Service in Vizer Web Server 1.9.1 Donato Ferrante
- YABB information leakage on failed login David Cantrell
- ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote arbitrary file retrieving ZetaLabs
Monday, 16 February
- KarjaSoft Sami HTTP Server 1.0.4 Buffer Overflow badpack3t
- APC 9606 SmartSlot Web/SNMP management card "backdoor" Dave Tarbatt
Saturday, 14 February
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") J.
Sunday, 15 February
- Re: ISS Security Rip: Microsoft ASN.1 (Half a sploit) Valdis.Kletnieks_at_vt.edu
Monday, 16 February
- Re: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) Valdis.Kletnieks_at_vt.edu
- Re: Misinformation in Security Advisories (ASN.1) Anthony Saffer
- Re: [Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate Valdis.Kletnieks_at_vt.edu
- Re: [work] Re: W2K source "leaked"? opticfiber
- RE: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) first last
Tuesday, 17 February
- ASN.1 telephony critical infrastructure warning - VOIP Gadi Evron
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP Michal Zalewski
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP 3APA3A
- ASN.1 vulnerability -is- on Win98 Joshua Levitsky
- RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP Zak Dechovich
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP daniel uriah clemens
- Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS thiago.vazquez_at_light.com.br
- Broker FTP DoS (Message Server) Aviram Jenik
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Alun Jones
Monday, 16 February
- Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow Steffen Kluge
Tuesday, 17 February
- iDEFENSE Security Advisory 02.17.04: Ipswitch IMail LDAP Daemon Remote Buffer Overflow iDefense Labs
- Beagle.b@mm spreading at a steady pace. dotsecure_at_hushmail.com
Wednesday, 18 February
- Second critical mremap() bug found in all Linux kernels Paul Starzetz
Tuesday, 17 February
- CesarFTP 0.99 : 100% employment of computer resources intuit e.b.
Wednesday, 18 February
- EarlyImpact ProductCart shopping cart software multiple security vulnerabilities S-Quadra Security Research
Tuesday, 17 February
- SNMP community string disclosure in Linksys WAP55AG NN Poster
- ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro) ZetaLabs
Wednesday, 18 February
- ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files retrieving ZetaLabs
- [slackware-security] metamail security update (SSA:2004-049-02) Slackware Security Team
- TSLSA-2004-0007 - kernel Trustix Security Advisor
- [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities bugzilla_at_redhat.com
- WebCortex Webstores2000 version 6.0 multiple security vulnerabilities Nick Gudov
- [SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc) Martin Schulze
- [ GLSA 200402-07 ] Clamav 0.65 DoS vulnerability Tim Yamin
- [SECURITY] [DSA 440-1] New Linux 2.4.17 packages fix several local root exploits (powerpc/apus) Martin Schulze
- [slackware-security] Kernel security update (SSA:2004-049-01) Slackware Security Team
Monday, 16 February
- Re: Microsoft ASN.1 (Half a sploit) WebHead
Wednesday, 18 February
- [SECURITY] [DSA 439-1] New Linux 2.4.16 packages fix several local root exploits (arm) Martin Schulze
- Re: Second critical mremap() bug found in all Linux kernels Steve Bremer
Monday, 16 February
- Remote Administrator 2.x: highly possible remote hole or backdoor Pavel Levshin
Wednesday, 18 February
- [SECURITY] [DSA 441-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) Martin Schulze
Monday, 16 February
- OT: reports of a Trojan horse in the Arrow project Gadi Evron
Wednesday, 18 February
- article: Alleged Trojan horse in Israeli Anti-Ballistic Missile System Gadi Evron
Tuesday, 17 February
- Re: Misinformation in Security Advisories (ASN.1) Slawek
- Re: AIX password enumeration possible Darren Tucker
Wednesday, 18 February
- Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities Massimo Arrigoni
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" Fredrik Bj�rk
- metamail format string bugs and buffer overflows Ulf H�rnhammar
Tuesday, 17 February
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS Thomas M. Payerle
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP Florian Weimer
- Smallftpd 1.0.3 DoS intuit e.b.
- Re: ASN.1 telephony critical infrastructure warning - VOIP RJ Auburn
- Re: ASN.1 telephony critical infrastructure warning - VOIP Michael H. Warfield
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS James Green
- Re[2]: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP 3APA3A
Wednesday, 18 February
- bid: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability kquest_at_toplayer.com
Tuesday, 17 February
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP Michael Samuel
Wednesday, 18 February
- Multiple WinXP kernel vulns can give user mode programs kernel mode privileges first last
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" Charles R. Anderson
- RE: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability kquest_at_toplayer.com
- APC Security Advisory - Static factory password vulnerability security.advisory_at_apcc.com
- Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) K-OTiK Security
- Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability Zone Labs Product Security
- Aol Instant Messenger/Microsoft Internet Explorer remote code execution Michael Evanchik
- MDKSA-2004:014 - Updated metamail packages fix buffer overflow vulnerabilities Mandrake Linux Security Team
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS Keith Clifton
- Re: Second critical mremap() bug found in all Linux kernels Dan Yefimov
- PunkBuster SQL Injection Attack Just1n T1mberlake
Thursday, 19 February
- Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges 3APA3A
- RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges Alun Jones
- [SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390) Martin Schulze
Wednesday, 18 February
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS Frank Louwers
Thursday, 19 February
- RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges first last
- iMail 8.05 LDAP service remote exploit Iv�n Rodriguez Almui�a
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS Tom
- APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. David Monosov
- Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities Cisco Systems Product Security Incident Response Team
- RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution Thor Larholm
Wednesday, 18 February
- Re: SNMP community string disclosure in Linksys WAP55AG Hugo van der Kooij
Thursday, 19 February
- NetBSD Security Advisory 2004-001: Insufficient packet validation in racoon IKE daemon NetBSD Security-Officer
- NetBSD Security Advisory 2004-004: shmat reference counting bug NetBSD Security-Officer
- LiveJournal XSS Joshua Miller
Wednesday, 18 February
- SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:005) Thomas Biege
Thursday, 19 February
- EEYE: ZoneLabs SMTP Processing Buffer Overflow Marc Maiffret
- NetBSD Security Advisory 2004-003: OpenSSL 0.9.6 ASN.1 parser vulnerability NetBSD Security-Officer
Wednesday, 18 February
- Re: ASN.1 vulnerability -is- on Win98 Joshua Levitsky
Tuesday, 17 February
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") Peter J. Holzer
Wednesday, 18 February
- Re: [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities Ulrich Keil
Thursday, 19 February
- NetBSD Security Advisory 2004-002: Inconsistent IPv6 path MTU discovery handling NetBSD Security-Officer
Wednesday, 18 February
- Re: Microsoft ASN.1 (Half a sploit) Joshua Levitsky
- Re: Second critical mremap() bug found in all Linux kernels Jared M Breland
- RE: Remote Administrator 2.x: highly possible remote hole or back door LordInfidel_at_directionweb.com
- RE: Second critical mremap() bug found in all Linux kernels tlarholm_at_pivx.com
Thursday, 19 February
- RE: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. Miskell, Craig
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. Keith Clifton
- PGP signatures on recent NetBSD Security Advisories NetBSD Security-Officer
- OpenLinux: mpg123 remote denial of service and heap-based buffer overflow please_reply_to_security_at_sco.com
- OpenLinux: Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 please_reply_to_security_at_sco.com
- OpenLinux: Fetchmail 6.2.4 and earlier remote dennial of service please_reply_to_security_at_sco.com
- OpenLinux: Multiple vulnerabilities were discovered in the saned daemon please_reply_to_security_at_sco.com
- [SECURITY] [DSA 443-1] New xfree86 packages fix multiple vulnerabilities Matt Zimmerman
Friday, 20 February
- [SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64) Martin Schulze
- [CLA-2004:820] Conectiva Security Announcement - kernel Conectiva Updates
- fix for recently disclosed Oracle interval conversion overflows? Marc Bejarano
- [CLA-2004:821] Conectiva Security Announcement - XFree86 Conectiva Updates
Thursday, 19 February
- article: Theft of Client Information at a Major Israeli Bank's "Information Fortress". Gadi Evron
- Hotfix for new mremap vulnerability Pavel harry_x Pal�t
- Re: SNMP community string disclosure in Linksys WAP55AG Robbie Stone
- Re: SNMP community string disclosure in Linksys WAP55AG Nicolai van der Smagt
- Re: Remote Administrator 2.x: highly possible remote hole or backdoor Pavel Levshin
- Bank of America contact Lance James
Friday, 20 February
- RE: Remote Administrator 2.x: highly possible remote hole or back door mgotts_at_2roads.com
Thursday, 19 February
- is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) Stuart Moore
Friday, 20 February
- Remote Buffer Overflow in PSOProxy 0.91 Donato Ferrante
- RE: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) Drew Copley
- OpenLinux: Perl Safe.pm unsafe access please_reply_to_security_at_sco.com
- Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) http-equiv_at_excite.com
- LNSA-#2004-0002: Fetchmail 6.2.4 and earlier remote denial of service Vincenzo Ciaglia
- LNSA-#2004-0003: Linux Kernel Vincenzo Ciaglia
- RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) Drew Copley
Sunday, 22 February
- GateKeeper Pro 4.7 buffer overflow Iv�n Rodriguez Almui�a
- FYI: CAIF Format Specification Oliver Goebel
Saturday, 21 February
- [SECURITY] [DSA 436-2] New mailman packages fix bug introduced in DSA 436-1 Matt Zimmerman
Sunday, 22 February
- [SECURITY] [DSA 448-1] New pwlib packages fix multiple vulnerabilities Matt Zimmerman
Saturday, 21 February
- [SECURITY] [DSA 446-1] New synaesthesia packages fix insecure file creation Matt Zimmerman
Sunday, 22 February
- [SECURITY] [DSA 447-1] New hsftp packages fix format string vulnerability Matt Zimmerman
- lbreakout2 < 2.4beta-2 local exploit Li0n7_at_voila.fr
- Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Steven M. Christey
Monday, 23 February
- TSLSA-2004-0008 - kernel Trustix Security Advisor
- nCipher Advisory #9: Host-side attackers can access secret data nCipher Support
- SUSE Security Announcement: xf86/XFree86 (SuSE-SA:2004:006) Thomas Biege
Wednesday, 18 February
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" brandon pierce
Saturday, 21 February
- [SECURITY] [DSA 445-1] New lbreakout2 packages fix buffer overflow Matt Zimmerman
Monday, 23 February
- Remote server crash in Team Factor <= 1.25 Luigi Auriemma
Saturday, 21 February
- PSOProxy <= 0.91 remote buffer overflow (exploit) li0n7
Monday, 23 February
- [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 Janek Vind
- Re: Bank of America Contact Lance James
- Remote Buffer Overflow in Avirt Voice 4.0 Donato Ferrante
- Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users Tomasz Grabowski
- Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution Tomasz Grabowski
Friday, 20 February
- Windows XP explorer.exe heap overflow. sunglasses_at_bay-watch.com
Monday, 23 February
- Somewhat new SQL Injection concept T�nu Samuel
- ezBoard Cross Site Scripting Vulnerability Cheng Peng Su
- Multiple Remote Buffer Overflow in Avirt Soho 4.3 Donato Ferrante
- Re: lbreakout2 < 2.4beta-2 local exploit Steve Kemp
Sunday, 22 February
- 3Com DSL Router Long Request DoS exploit. Shaun Colley
Saturday, 21 February
- Cross Site Scripting in WebzEdit Cheng Peng Su
Monday, 23 February
- RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP David Wilson
Friday, 20 February
- Re: Hotfix for new mremap vulnerability Marc-Christian Petersen
Monday, 23 February
- Re: Bank of America Contact Jon W
- Re: Remote Administrator 2.x: highly possible remote hole or back door Ari Gordon-Schlosberg
- Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution Mariusz Woloszyn
- Re: Windows XP explorer.exe heap overflow. Chris Calabrese
- RE: Windows XP explorer.exe heap overflow. Michael Wojcik
- Web Crossing 4.x/5.x Denial of Service Vulnerability (FIX) Peter Winter-Smith
- blocking gzip encoded files Darwin Mecham
- Mac OS X pppd format string vulnerability Advisories
- Re: blocking gzip encoded files mgotts_at_2roads.com
- TYPSoft FTP Server 1.10 multiple vulnerabilities intuit e.b.
Tuesday, 24 February
- MDKSA-2004:015 - Updated kernel packages fix multiple vulnerabilities Mandrake Linux Security Team
- Remote server crash in Haegemonia <= 1.07 Luigi Auriemma
- FlexWATCH-Webs 2.2 (NTSC) Authorization Bypass Rafel Ivgi, The-Insider
Monday, 23 February
- iDEFENSE Security Advisory 02.23.04: Darwin Streaming Server Remote Denial of Service Vulnerability iDefense Labs
- STG Security Advisory: [SSA-20040217-06] Apache for cygwin directory traversal vulnerability advisory_at_stgsecurity.com
Tuesday, 24 February
- Re: Windows XP explorer.exe heap overflow. Eli K.
- Remote crash in Ghost Recon engine Luigi Auriemma
- Gigabyte Broadband Router - Multiple Vulnerabilities Rafel Ivgi, The-Insider
- Re: Bank of America Contact Eloy A. Paris
- Re: Windows XP explorer.exe heap overflow. Tim
- snort rules for ICQ http/https tunnels Alexander Antipov
- Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more) Luigi Auriemma
- Re: blocking gzip encoded files Josep L. Guallar-Esteve
- New ICQ WORM Rafel Ivgi, The-Insider
- RE: blocking gzip encoded files Gervase Markham
- Advisory 02/2004: Trillian remote overflows Stefan Esser
- BadBlue 2.4 Local Path Disclosure By phptest.php Rafel Ivgi, The-Insider
Monday, 23 February
- ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary files retrieving ZetaLabs
Tuesday, 24 February
- jgs webserver 0.1.0 Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider
Thursday, 19 February
- Alcatel Omniswitch 7000 series Michael Shekman
- MS ASN library is fraught not only with integer overflow, but also with stack overflow. flashsky fangxing
Wednesday, 25 February
- MDKSA-2004:016 - Updated mtools packages fix local root vulnerability Mandrake Linux Security Team
- RE: Windows XP explorer.exe heap overflow. Larry Seltzer
- Re: Windows XP explorer.exe heap overflow. Eli Kara
Tuesday, 24 February
- Fw: [Unpatched] The Bizex worm Thor Larholm
Wednesday, 25 February
- PSOProxy's exploit for Windows by Rosiello Security Angelo Rosiello
- Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 Ben
- Sandblad #13: Cross-domain exploit on zombie document with event handlers Andreas Sandblad
- MDKSA-2004:015-1 - Updated x86_64 kernel packages fix multiple vulnerabilities Mandrake Linux Security Team
- [RHSA-2004:063-01] Updated mod_python packages fix denial of service vulnerability bugzilla_at_redhat.com
- [RHSA-2004:091-01] Updated libxml2 packages fix security vulnerability bugzilla_at_redhat.com
Thursday, 26 February
- Denial Of Service in FreeChat 1.1.1a Donato Ferrante
- Dell OpenManage Web Server Heap Overflow wirepair
- [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability bkbll
- Dell OpenManage Web Server Heap Overflow (Pre-Auth) wirepair
- SmoothWall Project Security Advisory SWP-2004:002 William Anderson
- Serv-U "MDTM" buffer overflow PoC DoS exploit Shaun Colley
- SGI ProPack v2.4: Kernel fixes and security update SGI Security Coordinator
- Re: Windows XP explorer.exe heap overflow. Dragos Ruiu
- SGI Advanced Linux Environment security update #12 SGI Security Coordinator
- SGI Advanced Linux Environment security update #11 SGI Security Coordinator
- RE: Serv-U "MDTM" buffer overflow PoC DoS exploit Peter Buijsman
- Immunix Secured OS 7+ kernel update Immunix Security Team
- Nmap Security Scanner 3.50 Released Fyodor
- Extremail Security Problem Andrey Smirnov
- [SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips) Martin Schulze
Friday, 27 February
- Calife heap corrupt / potential local root exploit DownBload
- New version of ike-scan (IPsec IKE scanner) available - v1.6 Roy Hills
- iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass idlabs-advisories_at_idefense.com
- iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com
Thursday, 26 February
- EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow Marc Maiffret
Friday, 27 February
- Serv-U MDTM exploits Sam
- Multiple issues with Mac OS X AFP client Chris Adams
- Re: Calife heap corrupt / potential local root exploit Ollivier Robert
- Symantec Gateway Security Management Service Cross Site Scripting Brian_J_Soby_at_raytheon.com
- FreeBSD Security Advisory FreeBSD-SA-04:03.jail FreeBSD Security Advisories
- [HUC] Serv-U FTPD 2.x/3.x/4.x/5.x "MDTM" Command Remote Exploit lion
- Re: Calife heap corrupt / potential local root exploit Carson Gaspar
- Re: Calife heap corrupt / potential local root exploit Ollivier Robert
- [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows Matt Zimmerman
- Re: [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows Steve Kemp
Saturday, 28 February
- New phpBB ViewTopic.php Cross Site Scripting Vulnerability Cheng Peng Su
- Invision Power Board SQL injection! Knight Commander
- LAN SUITE Web Mail 602Pro Multiple Vulnerabilities Rafel Ivgi, The-Insider
- InnoMedia VideoPhone Authorization Bypass Rafel Ivgi, The-Insider
Friday, 27 February
- Re: Multiple issues with Mac OS X AFP client Chris Adams
Saturday, 28 February
- laptop security Gadi Evron
- Multiple WFTPD Denial of Service vulnerabilities axl rose
- Critical WFTPD buffer overflow vulnerability axl rose

Last message date: Feb 28 2004
Archived on: Oct 05 2008 PDT