Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

329 messages starting Jan 01 04 and ending Jan 30 04
Date index | Thread index | Author index

• MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability Mandrake Linux Security Team (Jan 01)
• multiple payload handling flaws in isakmpd, again Thomas Walpuski (Jan 01)
  • Re: multiple payload handling flaws in isakmpd, again Thomas Walpuski (Jan 01)
• Announcing Userland Exec the grugq (Jan 01)
• Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity Matt Zimmerman (Jan 01)
• Possible XSS vuln in VCard4J Just1n T1mberlake (Jan 01)
• Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV http-equiv () excite com (Jan 02)
  • <Possible follow-ups>
  • RE: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV tlarholm (Jan 02)
• Re: Switch Off Multiple Vulnerabilities Peter Winter-Smith (Jan 02)
  • <Possible follow-ups>
  • Switch Off Multiple Vulnerabilities Peter Winter-Smith (Jan 02)
• xsok local games exploit c0wboy () 0x333 (Jan 02)
• DoS in GoodTech Telnet Server 4.0.103 Donato Ferrante (Jan 02)
• Microsoft Word Protection Bypass Thorsten Delbrouck-Konetzko (Jan 02)
  • RE: Microsoft Word Protection Bypass Jerry Shenk (Jan 06)
  • <Possible follow-ups>
  • Re: Microsoft Word Protection Bypass Thorsten Delbrouck-Konetzko (Jan 07)
    • RE: Microsoft Word Protection Bypass Eric Lawrence (Jan 07)
  • Re: Microsoft Word Protection Bypass Vladimir Katalov (Jan 08)
• include() vuln in EasyDynamicPages v.2.0 Vietnamese Security Group (Jan 02)
• PostNuke Issues (0.726 && Possibly Older) JeiAr (Jan 05)
• Webcam Watchdog Stack Overflow Vulnerability Peter Winter-Smith (Jan 05)
• [SCSA-025] Invision Power Board SQL Injection Vulnerability advisory (Jan 05)
• xsok local games exploit (2) c0wboy () 0x333 (Jan 05)
• newsPHP v216 patch Dariusz 'Officerrr' Kolasinski (Jan 05)
• HotNews arbitary file inclusion Dariusz 'Officerrr' Kolasinski (Jan 05)
• [SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution Martin Schulze (Jan 05)
• Re: Linux kernel mremap vulnerability Paul Starzetz (Jan 05)
  • <Possible follow-ups>
  • Linux kernel mremap vulnerability Paul Starzetz (Jan 05)
• Announcing adore-ng 0.31 Stealth (Jan 05)
• [CLA-2004:799] Conectiva Security Announcement - kernel Conectiva Updates (Jan 05)
• [SECURITY] [DSA 407-1] New ethereal packages fix several vulnerabilities Martin Schulze (Jan 05)
• TSLSA-2004-01 - kernel Trustix Security Advisor (Jan 05)
• [ESA-20040105-001] 'kernel' bug and security fixes. EnGarde Secure Linux (Jan 05)
• [SECURITY] [DSA 408-1] New screen packages fix group utmp exploit Martin Schulze (Jan 05)
• [RHSA-2003:417-01] Updated kernel resolves security vulnerability bugzilla (Jan 05)
• SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:001) Thomas Biege (Jan 05)
• vBulletin Forum 2.3.xx calendar.php SQL Injection Qianwei Hu (Jan 06)
• [SECURITY] [DSA 409-1] New bind packages fix denial of service Matt Zimmerman (Jan 06)
• Immunix Secured OS 7.3 kernel update Immunix Security Team (Jan 06)
• [SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability Matt Zimmerman (Jan 06)
• [SECURITY] [DSA 412-1] New nd packages fix buffer overflows Matt Zimmerman (Jan 06)
• Multiple Vulnerabilities in Phorum 3.4.5 Calum Power (Jan 06)
  • <Possible follow-ups>
  • Multiple Vulnerabilities in Phorum 3.4.5 Fredrik Björk (Jan 23)
• [CLA-2004:800] Conectiva Security Announcement - lftp Conectiva Updates (Jan 06)
• [SECURITY] [DSA 410-1] New libnids packages fix buffer overflow Matt Zimmerman (Jan 06)
• Linux kernel do_mremap() proof-of-concept exploit code Christophe Devine (Jan 06)
  • Re: Linux kernel do_mremap() proof-of-concept exploit code Bruno Lustosa (Jan 06)
  • Re: Linux kernel do_mremap() proof-of-concept exploit code Alexandre Hautequest (Jan 06)
  • Re: Linux kernel do_mremap() proof-of-concept exploit code Angelo Dell'Aera (Jan 07)
    • Re: Linux kernel do_mremap() proof-of-concept exploit code D Lambrou (Jan 07)
  • <Possible follow-ups>
  • RE: Linux kernel do_mremap() proof-of-concept exploit code tlarholm (Jan 06)
• Linux mremap bug correction Paul Starzetz (Jan 06)
• Vuln in PHPGEDVIEW 2.61 Multi-Problem Vietnamese Security Group (Jan 06)
• [SECURITY] [DSA 413-1] New Linux 2.4.18 packages fix locate root exploit Martin Schulze (Jan 06)
• Lotus Notes Domino 6.0.2 (linux) faulty default permissions Rene (Jan 06)
• FirstClass Client 7.1: Command Execution via Email Web Link Richard Maudsley (Jan 06)
• [SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha) Martin Schulze (Jan 07)
• [SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal Matt Zimmerman (Jan 07)
• ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
• SnapStream PVS LITE Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
• [SECURITY] [DSA 415-1] New zebra packages fix denial of service Matt Zimmerman (Jan 07)
• [slackware-security] Kernel security update (SSA:2004-006-01) Slackware Security Team (Jan 07)
• EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
• RealNetworks fails to address Cross-Site Scripting in RealOne Player Arman Nayyeri (Jan 07)
• [SECURITY] [DSA 414-1] New jabber packages fix denial of service Matt Zimmerman (Jan 07)
• [RHSA-2004:001-01] Updated Ethereal packages fix security issues bugzilla (Jan 07)
• [CLA-2004:801] Conectiva Security Announcement - ethereal Conectiva Updates (Jan 07)
• [OpenPKG-SA-2004.001] OpenPKG Security Advisory (inn) OpenPKG (Jan 08)
• Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Jan 08)
• [SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak Matt Zimmerman (Jan 08)
• Yahoo Instant Messenger Long Filename Downloading Buffer Overflow Tri Huynh (Jan 08)
• [SECURITY] INN: Buffer overflow in control message handling Russ Allbery (Jan 08)
• SGI Advanced Linux Environment security update #8 SGI Security Coordinator (Jan 08)
• MDKSA-2004:001 - Updated kernel packages fix local root vulnerability Mandrake Linux Security Team (Jan 08)
• Openssl proof of concept code? Lachniet, Mark (Jan 08)
• [SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha) Martin Schulze (Jan 09)
• [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection Martin Schulze (Jan 09)
• [slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01) Slackware Security Team (Jan 09)
• Windows FTP Server Format String Vulnerability Peter Winter-Smith (Jan 09)
• bzip2 bombs still causes problems in antivirus-software Dr. Peter Bieringer (Jan 09)
• Directory Traversal in Accipiter Direct Server 6.0 Bassett, Mark (Jan 12)
• [RHSA-2004:003-01] Updated CVS packages fix minor security issue bugzilla (Jan 12)
• Remote Code Execution in ezContents Zero_X www . lobnan . de Team (Jan 12)
• [Fwd: [TH-research] OT: Israeli Post Office break-in] Gadi Evron (Jan 12)
  • <Possible follow-ups>
  • RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] John . Airey (Jan 13)
• [SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution Martin Schulze (Jan 12)
• DameWare Mini Remote Control < v3.73 remote exploit by kralor] Iván Rodriguez Almuiña (Jan 12)
• Abuse report email for CitiBank/CitiCards? winstrel (Jan 12)
  • Re: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 12)
  • <Possible follow-ups>
  • FW: Abuse report email for CitiBank/CitiCards? Sullivan, Barbra A (Jan 12)
    • Re: FW: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 12)
      • Re: FW: Abuse report email for CitiBank/CitiCards? Jim Gonzalez (Jan 13)
      • How to track a Phisher... Re: FW: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 13)
  • RE: Abuse report email for CitiBank/CitiCards? Lance James (Jan 13)
• PHP Manpage lookup directory transversal / file disclosing Cabezon Aurélien (Jan 12)
• SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM KF (Jan 12)
  • <Possible follow-ups>
  • Re: SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM Sym Security (Jan 12)
• [SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking Matt Zimmerman (Jan 12)
• SmoothWall Project Security Advisory SWP-2004:001 William Anderson (Jan 12)
• More phpGedView Vulnerabilities JeiAr (Jan 12)
• Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Cisco Systems Product Security Incident Response Team (Jan 13)
• [SECURITY] [DSA-422-1] multiple CVS improvements Wichert Akkerman (Jan 13)
• exploit for HD Soft Windows FTP Server 1.6 mandrag (Jan 13)
  • What is the point here? Alun Jones (Jan 19)
    • RE: What is the point here? Andrew Hintz ( Drew ) (Jan 19)
    • RE: What is the point here? ken kousky (Jan 19)
      • Re: What is the point here? Adam Shostack (Jan 20)
    • Re: What is the point here? Systems Administrator (Jan 19)
    • Re: What is the point here? Mariusz Woloszyn (Jan 20)
    • Re: What is the point here? Damian Menscher (Jan 20)
    • Re: What is the point here? Jason Coombs (Jan 21)
• MDKSA-2004:002 - Updated ethereal packages fix vulnerabilities Mandrake Linux Security Team (Jan 13)
• symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) Rene (Jan 13)
  • Re: symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) AntiVir Support (Jan 27)
• SuSE linux 9.0 YaST config Skribt [exploit] Rene (Jan 13)
• unauthorized deletion of IPsec (and ISAKMP) SAs in racoon Thomas Walpuski (Jan 13)
  • Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon itojun (Jan 14)
    • Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon itojun (Jan 16)
• Snort-inline Federico Petronio (Jan 13)
• Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 Luigi Auriemma (Jan 14)
• an article on the Israeli Post Office break-in Gadi Evron (Jan 14)
• nCipher Advisory #8: payShield library may verify bad requests nCipher Support (Jan 14)
• FishCart Integer Overflow / Rounding Error Michael Brennen (Jan 14)
• [RHSA-2004:007-01] Updated tcpdump packages fix various vulnerabilities bugzilla (Jan 14)
• Network Associates Product Security Contact Matt Moore (Jan 14)
• [RHSA-2004:006-01] Updated kdepim packages resolve security vulnerability bugzilla (Jan 14)
• KDE Security Advisory: VCF file information reader vulnerability Dirk Mueller (Jan 14)
• PhpDig 1.6.x: remote command execution FraMe (Jan 14)
• SUSE Security Announcement: tcpdump (SuSE-SA:2004:002) Sebastian Krahmer (Jan 14)
• Linux kernel mremap() bug update Paul Starzetz (Jan 15)
• [SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64) Martin Schulze (Jan 15)
• SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:003) Thomas Biege (Jan 15)
• [slackware-security] kdepim security update (SSA:2004-014-01) Slackware Security Team (Jan 15)
• January 15 is Personal Firewall Day, help the cause tlarholm (Jan 15)
• RapidCache Multiple Vulnerabilities Peter Winter-Smith (Jan 15)
• MDKSA-2004:003 - Updated kdepim packages fix vulnerability Mandrake Linux Security Team (Jan 15)
• [slackware-security] INN security update (SSA:2004-014-02) Slackware Security Team (Jan 15)
• OpenSSL ASN.1 parsing bugs PoC / brute forcer Bram Matthys (Syzop) (Jan 15)
• Re: Security bug in Xerox Document Centre K . Schleede (Jan 16)
• [OpenCA Advisory] Vulnerability in signature verification Michael Bell (Jan 16)
• The Bat! 2.01 memory corruption 3APA3A (Jan 16)
• [OpenPKG-SA-2004.002] OpenPKG Security Advisory (tcpdump) OpenPKG (Jan 16)
• phpShop Vulnerabilities JeiAr (Jan 16)
• Xtreme ASP Photo Gallery posidron (Jan 16)
• Multiple MetaDot Vulnerabilities [ All Versions ] JeiAr (Jan 16)
• [SECURITY] [DSA 424-1] New mc packages fix buffer overflow Matt Zimmerman (Jan 16)
• HP printers and currency anti-copying measures Richard M. Smith (Jan 17)
  • Re: HP printers and currency anti-copying measures Andre Oppermann (Jan 19)
  • RE: HP printers and currency anti-copying measures Larry Seltzer (Jan 19)
  • <Possible follow-ups>
  • RE: HP printers and currency anti-copying measures Kevin E. Casey (Jan 19)
    • Re: HP printers and currency anti-copying measures mightye[removethis] (Jan 20)
      • Re: HP printers and currency anti-copying measures Sami Haahtinen (Jan 21)
      • Re: HP printers and currency anti-copying measures Darren Reed (Jan 22)
      • Re: HP printers and currency anti-copying measures Sasha (Jan 21)
• SRT2004-01-17-0425 - Ultr () VNC local SYSTEM access. KF (Jan 17)
  • Happy belated Personal Firewall day - SRT2004-01-17-0628 - Agnitum Optpost firewall allows Local SYSTEM access KF (Jan 19)
• Mambo OS v4.5/v4.6: remote command execution FraMe (Jan 19)
• Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory scrap (Jan 19)
• new outbreak warning - Bagle Gadi Evron (Jan 19)
• Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Serafino Sorrenti (Jan 19)
  • Re: Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Scott Gifford (Jan 20)
• [SECURITY] [DSA 426-1] New netpbm-free packages fix insecure temporary file creation Matt Zimmerman (Jan 19)
• [SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) Martin Schulze (Jan 19)
• Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB Marc Schoenefeld (Jan 19)
• Directories management bypassing in Goahead webserver <= 2.1.8 Luigi Auriemma (Jan 19)
• New release of Patchfinder2 (windows rootkit detector) Joanna Rutkowska (Jan 19)
• Resources consumption in Goahead webserver <= 2.1.8 Luigi Auriemma (Jan 19)
• Denial of service in Getware's built-in webserver (Webcam Live and Photohost) Luigi Auriemma (Jan 19)
• Networker 6.0 - possible symlink attack Rene (Jan 19)
• [ESA-20040119-002] 'tcpdump' multiple vulnerabilities. EnGarde Secure Linux (Jan 19)
• Re: Get admin rights using Doro (pdf creator) the_sz (Jan 19)
• Bagle worm status + more blocking information Gadi Evron (Jan 19)
  • <Possible follow-ups>
  • RE: Bagle worm status + more blocking information David Brodbeck (Jan 19)
• Yabb SE SQL Injection backspace (Jan 19)
• a method for bypassing cookie restrictions in web browsers Michal Zalewski (Jan 19)
  • Re: a method for bypassing cookie restrictions in web browsers Dave McKinney (Jan 19)
    • Re: a method for bypassing cookie restrictions in web browsers Michal Zalewski (Jan 20)
• RE: ISA Server 2000 - Vulnerability in H.323 Filter Can Cause Rem ote Code Execution (816458) Alan Monaghan (Jan 19)
• [SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities Matt Zimmerman (Jan 19)
• More info on blocking the Bagle worm Gadi Evron (Jan 19)
• RE: What is the point here? PM Systems - Rick Woehler (Jan 19)
• NETCam webserver Directory traversal bug Rafel Ivgi, The-Insider (Jan 20)
• [SuSE 9.0] possible symlink attacks in some scripts Rene (Jan 20)
  • <Possible follow-ups>
  • Re: [SuSE 9.0] possible symlink attacks in some scripts Thomas Biege (Jan 22)
• [CLA-2004:809] Conectiva Security Announcement - screen Conectiva Updates (Jan 20)
• [CLA-2004:810] Conectiva Security Announcement - kdepim Conectiva Updates (Jan 20)
• [CLA-2004:808] Conectiva Security Announcement - cvs Conectiva Updates (Jan 20)
• vBulletin Security Vulnerability gcf (Jan 20)
  • RE: vBulletin Security Vulnerability Ferruh Mavituna (Jan 20)
• [SECURITY] [DSA 428-1] New slocate packages fix buffer overflow Matt Zimmerman (Jan 20)
• [SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability advisory (Jan 20)
• WebTrends Reporting Center Path Disclosure vulnerability Oliver Karow (Jan 20)
• 2Wire-Gateway Cross Site Scripting and Directory Transversal bug in SSL Form Rafel Ivgi, The-Insider (Jan 20)
• OwnServer 1.0 Directory Transversal Vulnerability Rafel Ivgi, The-Insider (Jan 20)
• Internet Explorer - Multiple Vulnerabilities Rafel Ivgi, The-Insider (Jan 20)
  • <Possible follow-ups>
  • RE: Internet Explorer - Multiple Vulnerabilities Thor Larholm (Jan 21)
    • Re: [Full-Disclosure] RE: Internet Explorer - Multiple Vulnerabilities Berend-Jan Wever (Jan 21)
• Mephistoles Httpd 0.6.0final XSS Donato Ferrante (Jan 21)
• TSLSA-2004-0005 - slocate Trustix Security Advisor (Jan 21)
• Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers Cisco Systems Product Security Incident Response Team (Jan 21)
• [Fwd: [TH-research] Bagle remote uninstall] Gadi Evron (Jan 21)
• [RHSA-2004:034-01] Updated mc packages resolve buffer overflow vulnerability bugzilla (Jan 21)
• Honeyd Security Advisory 2004-001: Remote Detection Via Simple Probe Packet Niels Provos (Jan 21)
• WebcamXP v1.06.945 Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 21)
• Paper announcement: Is finding security holes a good idea? Eric Rescorla (Jan 22)
  • Re: Paper announcement: Is finding security holes a good idea? Oliver Friedrichs (Jan 22)
  • Re: Paper announcement: Is finding security holes a good idea? Benjamin Franz (Jan 22)
  • Re: Paper announcement: Is finding security holes a good idea? Kurt Seifried (Jan 22)
  • Re: Paper announcement: Is finding security holes a good idea? Robert Lemos (Jan 22)
  • Re: Paper announcement: Is finding security holes a good idea? Christopher E. Cramer (Jan 22)
  • <Possible follow-ups>
  • RE: Paper announcement: Is finding security holes a good idea? Daniel Whelan (Jan 22)
• [ GLSA 200401-02 ] Honeyd remote detection vulnerability via a probe packet Tim Yamin (Jan 22)
• Hijacking Apache 2 via mod_perl Steve Grubb (Jan 22)
  • Re: Hijacking Apache 2 via mod_perl Ben Laurie (Jan 22)
    • Re[2]: Hijacking Apache 2 via mod_perl 3APA3A (Jan 22)
      • Re: Hijacking Apache 2 via mod_perl Ben Laurie (Jan 22)
      • Re: Hijacking Apache 2 via mod_perl André Malo (Jan 22)
      • Re: Hijacking Apache 2 via mod_perl Steve G (Jan 22)
      • Re: Hijacking Apache 2 via mod_perl jon schatz (Jan 23)
      • Re: Hijacking Apache 2 via mod_perl Matthew Wakeling (Jan 24)
      • Re: Re[2]: Hijacking Apache 2 via mod_perl Steve G (Jan 22)
  • Re: Hijacking Apache 2 via mod_perl Lupe Christoph (Jan 22)
• yet another new phising scam Gadi Evron (Jan 22)
• TBE - the banner engine server-side script execution vulnerability Ed J. Aivazian (Jan 22)
• AV products vulnerability [Fwd: [TH-research] Upx hack tool] Gadi Evron (Jan 22)
• Need for Speed Hot pursuit 2 <= 242 client's buffer overflow Luigi Auriemma (Jan 22)
• Major hack attack on the U.S. Senate Richard M. Smith (Jan 22)
  • Re: Major hack attack on the U.S. Senate ~Kevin Davis³ (Jan 23)
    • Re: Major hack attack on the U.S. Senate rsh (Jan 24)
    • Re: Major hack attack on the U.S. Senate Kirk Spencer (Jan 24)
      • Re: Major hack attack on the U.S. Senate Crispin Cowan (Jan 26)
    • Re: Major hack attack on the U.S. Senate Daniel . Capo (Jan 24)
      • Re: Major hack attack on the U.S. Senate Dinesh Nair (Jan 24)
      • Re: Major hack attack on the U.S. Senate ed (Jan 24)
  • Re: Major hack attack on the U.S. Senate Brian C. Lane (Jan 23)
    • Re: Major hack attack on the U.S. Senate Kevin Reardon (Jan 24)
    • Re: [work] Re: Major hack attack on the U.S. Senate opticfiber (Jan 24)
      • Re: [work] Re: Major hack attack on the U.S. Senate Jonathan A. Zdziarski (Jan 24)
  • <Possible follow-ups>
  • RE: Major hack attack on the U.S. Senate B. Kinney (Jan 24)
    • Message not available
      • RE: Major hack attack on the U.S. Senate bugtraq (Jan 24)
• vulnerabilities of postscript printers Bob Kryger (Jan 22)
  • Re: vulnerabilities of postscript printers Darren Reed (Jan 23)
    • Re: vulnerabilities of postscript printers Jim Knoble (Jan 24)
    • Re: vulnerabilities of postscript printers der Mouse (Jan 24)
    • Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
    • Re: vulnerabilities of postscript printers Elizabeth Zwicky (Jan 24)
      • Re: vulnerabilities of postscript printers Darren Reed (Jan 24)
      • Re: vulnerabilities of postscript printers Stephen Samuel (Jan 24)
    • Re: vulnerabilities of postscript printers Glynn Clements (Jan 24)
    • Re: vulnerabilities of postscript printers Nate Eldredge (Jan 24)
  • Re: vulnerabilities of postscript printers der Mouse (Jan 23)
    • Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
      • Re: vulnerabilities of postscript printers der Mouse (Jan 24)
      • Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
      • Re: vulnerabilities of postscript printers der Mouse (Jan 24)
    • Re: vulnerabilities of postscript printers Ian Farquhar - Network Security Group (Jan 28)
  • <Possible follow-ups>
  • Re: vulnerabilities of postscript printers Thomas M. Payerle (Jan 24)
  • Re: vulnerabilities of postscript printers Bob Beck (Jan 24)
    • Re: vulnerabilities of postscript printers Theo de Raadt (Jan 24)
• NetBus Pro Web Server Direcory Listing And Remote File Upload Rafel Ivgi, The-Insider (Jan 22)
• GeoHttpServer Authentification Bypass Vulnerability & D.O.S (Denial Of Service) Rafel Ivgi, The-Insider (Jan 22)
• FREESCO public http server - Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 22)
• NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities Rafel Ivgi, The-Insider (Jan 23)
• Finjan SurfinGate Vulnerability David Byrne (Jan 23)
  • <Possible follow-ups>
  • RE: Finjan SurfinGate Vulnerability Menashe Eliezer (Jan 27)
• QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities S-Quadra Security Research (Jan 23)
  • <Possible follow-ups>
  • Re: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities S-Quadra Security Research (Jan 26)
• Tiny Server 1.1 (1.0.5) Multiple Vulnerabilities Donato Ferrante (Jan 24)
• Oracle HTTP Server Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 24)
• MDKSA-2004:004 - Updated slocate packages fix vulnerability Mandrake Linux Security Team (Jan 24)
• [SST]ServU MDTM command remote buffero verflow adv icbm (Jan 24)
• MDKSA-2004:005 - Updated jabber packages fix DoS vulnerability Mandrake Linux Security Team (Jan 24)
• Resources consumption in Reptile webserver daily version Donato Ferrante (Jan 24)
• BWS v1.0b3 Directory Transversal Vulnerability Rafel Ivgi, The-Insider (Jan 24)
• Inrtra Forum Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 24)
• NextPlace.com E-Commerce ASP Engine Rafel Ivgi, The-Insider (Jan 26)
• Serv-U ftp 4.2 site chmod long_file_name exploit Qianwei Hu (Jan 26)
• Self-Executing FOLDERS: Windows XP Explorer Part V http-equiv () excite com (Jan 26)
  • Re: Self-Executing FOLDERS: Windows XP Explorer Part V mightye[removethis] (Jan 26)
  • <Possible follow-ups>
  • RE: Self-Executing FOLDERS: Windows XP Explorer Part V Thor Larholm (Jan 26)
    • Re: Self-Executing FOLDERS: Windows XP Explorer Part V Jelmer (Jan 27)
  • Re: Self-Executing FOLDERS: Windows XP Explorer Part V Liu Die Yu (Jan 27)
• Advisory 01/2004: 12 x Gaim remote overflows Stefan Esser (Jan 26)
• Directory traversal and XSS in BremsServer 1.2.4 Donato Ferrante (Jan 26)
• [RHSA-2004:032-01] Updated Gaim packages fix various vulnerabiliies bugzilla (Jan 26)
• Re: Windows XP Explorer Executes Arbitrary Code in Folders Stuart Moore (Jan 26)
• ProxyNow! 2.x Multiple Overflow Vulnerabilities Peter Winter-Smith (Jan 26)
• New MiMail variant is DDoS'ing SCO.com tlarholm (Jan 27)
  • Re: New MiMail variant is DDoS'ing SCO.com Bob Toxen (Jan 28)
• MDKSA-2004:006 - Updated gaim packages fix multiple vulnerabilities Mandrake Linux Security Team (Jan 27)
• [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V1.0 lion (Jan 27)
• MDKSA-2004:007 - Updated mc packages fix buffer overflow vulnerability Mandrake Linux Security Team (Jan 27)
• [slackware-security] GAIM security update (SSA:2004-026-01) Slackware Security Team (Jan 27)
• [SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys Matt Zimmerman (Jan 27)
• Chaosreader: Trace TCP/UDP from snoop/tcpdump logs Brendan Gregg (Jan 27)
• MDKSA-2004:008 - Updated tcpdump packages fix several vulnerabilities Mandrake Linux Security Team (Jan 27)
• Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code lowhalo (Jan 27)
• [FLSA-2004:1187] Updated screen resolves security vulnerability Jesse Keating (Jan 27)
• Elevated scanning: TCP port 135 (RPC) AND 445 (Domain Services) Nicholas Weaver (Jan 27)
• GOOROO CROSSING: File Spoofing Internet Explorer 6 http-equiv () excite com (Jan 27)
  • RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 Oliver Lavery (Jan 27)
  • <Possible follow-ups>
  • RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 tlarholm (Jan 28)
• [ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability Tim Yamin (Jan 27)
• SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities KF (Jan 27)
• Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 Bharat Mediratta (Jan 27)
• GAIM Patch update Stefan Esser (Jan 28)
• [ GLSA 200401-04 ] GAIM 0.75 Remote overflows Tim Yamin (Jan 28)
• information and reverse engineering bits of the Mydoom worm Gadi Evron (Jan 28)
• [SECURITY] [DSA 430-1] New trr19 packages fix local games exploit Martin Schulze (Jan 28)
• RFC: virus handling Thomas Zehetbauer (Jan 28)
• Denial Of Service in SurfNOW 2.2 Donato Ferrante (Jan 28)
• phpBB privmsg.php XSS vulnerability patch. Shaun Colley (Jan 28)
• SRT2004-01-17-0227 - BlackICE allows local users to become SYSTEM KF (Jan 28)
• BRS WebWeaver Webserver Cross Site Scripting Vulnerability Oliver Karow (Jan 28)
• Oracle toplink mapping workbench password algorithm Pete Finnigan (Jan 28)
• ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving ZetaLabs (Jan 28)
• SGI Advanced Linux Environment security update #9 SGI Security Coordinator (Jan 29)
• new WIN virus? Atom 'Smasher' (Jan 29)
• Security Announcement: untrusted ELF library path in some cvsup binary RPMs Matthias Andree (Jan 29)
• ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving ZetaLabs (Jan 29)
• MacOS X TruBlueEnvironment Buffer Overflow @stake Advisories (Jan 29)
• ----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========---------- pask (Jan 29)
• ----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- pask (Jan 29)
• SUSE Security Announcement: gaim (SuSE-SA:2004:004) Thomas Biege (Jan 29)
• ----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- pask (Jan 29)
• [FLSA-2004:1207] Updated cvs resolves security vulnerability Jesse Keating (Jan 29)
• userland binary vulnerabilities on IRIX SGI Security Coordinator (Jan 29)
• Cisco Security Advisory: Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049) Cisco Systems Product Security Incident Response Team (Jan 29)
• Serv-U exploit Berend-Jan Wever (Jan 30)
• FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs FreeBSD Security Advisories (Jan 30)

Previous period

Next period