Bugtraq: by date

Tuesday, 1 June
- OSVDB Post Go-Live Update, 3000 Stable Entries jkouns_at_opensecurityfoundation.org
- RE: LinkSys WRT54G administration page availble to WAN Alan W. Rateliff, II
- Re: Possible bug in PHPNuke and other CMS Luca Falavigna
- Re: LinkSys WRT54G administration page availble to WAN Steffen Mueller
- Re: Possible bug in PHPNuke and other CMS Peter Hagstrøm
Monday, 31 May
- RE: LinkSys WRT54G administration page availble to WAN Alan W. Rateliff, II
Tuesday, 1 June
- Re: [Full-Disclosure] Possible bug in PHPNuke and other CMS Sam Bashton
- Mollensoft Lightweight FTP Server CWD Buffer Overflow Aviram Jenik
Monday, 31 May
- Re: LinkSys WRT54G administration page availble to WAN Matthew Caron
Tuesday, 1 June
- Re: LinkSys WRT54G administration page availble to WAN Matthew Gillespie
- Firebird Database Remote Database Name Overflow Aviram Jenik
Saturday, 29 May
- RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability Roman Medina
Monday, 31 May
- Re: Possible bug in PHPNuke and other CMS Alexander GQ Gerasiov
Tuesday, 1 June
- [Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle Squid
- [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier Squid
- [Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke Squid
- Re: LinkSys WRT54G administration page availble to WAN Valdis.Kletnieks_at_vt.edu
- MITKRB5-SA-2004-001: buffer overflows in krb5_aname_to_localname Tom Yu
- Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability Lupe Christoph
- MDKSA-2004:053 - Updated xpcd package fix vulnerabilities Mandrake Linux Security Team
- MDKSA-2004:055 - Updated apache2 package fix vulnerability in mod_ssl Mandrake Linux Security Team
- MDKSA-2004:054 - Updated mod_ssl package fix remote vulnerability Mandrake Linux Security Team
Wednesday, 2 June
- TSSA-2004-008 - apache tinysofa Security Team
- TSSA-2004-009 - kerberos5 tinysofa Security Team
- TSLSA-2004-0031 - apache Trustix Security Advisor
- TSLSA-2004-0032 - kerberos Trustix Security Advisor
- [SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access Matt Zimmerman
- Additional information on WRT54G administration page Alan W. Rateliff, II
- Re: LinkSys WRT54G administration page availble to WAN Jason Munro
- MS KB article suggests turning off encrypted passwords for Mac clients Steve Shockley
- ERRATA: [ GLSA 200405-25 ] tla: Multiple vulnerabilities in included libneon Thierry Carrez
- RE: Additional information on WRT54G administration page Mike Riella
- Remote SMTP authentication audit tool? Byron Pezan
- RE: LinkSys WRT54G administration page availble to WAN Humes, David G.
- [SECURITY] [DSA 499-2] New rsync packages fix directory traversal bug Matt Zimmerman
- Format String Vulnerability in Tripwire Paul Herman
- [Fwd: Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird] KF (lists)
- Mkdir buffer overflow vulnerability in Unix Seventh Edition. Tim Newsham
Thursday, 3 June
- Phishing for Opera (GM#007-OP) GreyMagic Software
- DoS vuln in various versions of Linksys routers. b0f www.b0f.net
- Simple Yahoo! Mail Cross-Site Scripting (GM#006-MC) GreyMagic Software
- TREND MICRO: The Protector Becomes The Vector [technical exercise: cross-application-scripting] http-equiv_at_excite.com
- PHP Include Exploit in Mail Manage EX v3.1.8 and maybe others. JvdR
- DOS@Orenosv CoolICE
- Netgear WG602 Accesspoint vulnerability Tom Knienieder
- RE: Remote SMTP authentication audit tool? Evans, Arian
- [SECURITY] [DSA 513-1] New log2mail packages fix format string vulnerabilities Matt Zimmerman
- NetBSD Security Advisory 2004-008: CVS server vulnerability NetBSD Security-Officer
- Re: LinkSys WRT54G administration page availble to WAN Peter Becker
- Re: Format String Vulnerability in Tripwire Ron Forrester
- MDKSA-2004:056 - Updated krb5 packages fix buffer overflow vulnerabilities Mandrake Linux Security Team
- UPDATED: MITKRB5-SA-2004-001: krb5_aname_to_localname Tom Yu
- [FLSA-2004:1620] Updated cvs resolves security vulnerabilities Jesse Keating
- HERT Relaunch gaius
Friday, 4 June
- RE: PING: Outlook 2003 Spam Spencer, Mark
Thursday, 3 June
- CPANEL Vuln : HTML injection qbann targ
Friday, 4 June
- NYC Security Shindig Version 2.0 (with punch and pie!) Dave Aitel
Thursday, 3 June
- Cross-site scripting vulnerability in Crafy Syntax Live Help 2.7.3 and below John C. Hennessy
- RE: Remote SMTP authentication audit tool? Bojan Zdrnja
Friday, 4 June
- Re: Possible bug in PHPNuke and other CMS BlueRaven
- Re: Netgear WG602 Accesspoint vulnerability Mathias Kuester
Thursday, 3 June
- RE: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability James C Slora Jr
- [openwebmail] Fw: Re: XSS bug. A. Ramos
Friday, 4 June
- RE: PING: Outlook 2003 Spam http-equiv_at_excite.com
- Re: Format String Vulnerability in Tripwire Ron Forrester
Thursday, 3 June
- Re: Netgear WG602 Accesspoint vulnerability Lupe Christoph
Friday, 4 June
- [ GLSA 200406-01 ] Ethereal: Multiple security problems Thierry Carrez
Thursday, 3 June
- Re: LinkSys WRT54G administration page availble to WAN Paul Wouters
Friday, 4 June
- Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite Integrigy Security
- The Linksys WRT54G "security problem" doesn't exist David Pipe
- [SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc) Martin Schulze
- Colin McRae Rally 04 broadcast clients crash Luigi Auriemma
- Re: LinkSys WRT54G administration page availble to WAN Jerry Zwanenburg
- bss-based buffer overflow in l2tpd Thomas Walpuski
- [ GLSA 200406-02 ] tripwire: Format string vulnerability Thierry Carrez
- Re: Format String Vulnerability in Tripwire Ron Forrester
Saturday, 5 June
- [ GLSA 200406-03 ] sitecopy: Multiple vulnerabilities in included libneon Thierry Carrez
- Re: [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier Remy Wetzels
Friday, 4 June
- Re: The Linksys WRT54G "security problem" doesn't exist caldcv_at_students.fccj.org
- Bank of America security e-mail address caldcv_at_students.fccj.org
Saturday, 5 June
- RE: The Linksys WRT54G "security problem" doesn't exist Alan W. Rateliff, II
Friday, 4 June
- Re: The Linksys WRT54G "security problem" doesn't exist insecure
Saturday, 5 June
- Administrivia: Summer autoreply troll David Ahmad
- [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities Matt Zimmerman
- Re: Netgear WG602 Accesspoint vulnerability Jaco Swart
Monday, 7 June
- TREND MICRO: The Protector Becomes The Vector Take II http-equiv_at_excite.com
- Re: Netgear WG602 Accesspoint vulnerability RISKO Gergely
Sunday, 6 June
- Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Jelmer
Saturday, 5 June
- Re: Netgear WG602 Accesspoint vulnerability James Garrison
- Linksys WRT54G - Advice for european users Christer Palm
- Re: Netgear WG602 Accesspoint vulnerability auron_at_lomcn.co.uk
Sunday, 6 June
- RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Jelmer
Monday, 7 June
- Linksys BEFSR41 DHCP vulnerability server leaks network data Lance Armstrong
Sunday, 6 June
- Re: Bank of America security e-mail address Marc Bejarano
Saturday, 5 June
- Re: [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier Squid
- cPanel mod_php suEXEC Taint Vulnerability Rob Brown
Monday, 7 June
- MS ISA SP2 out last month Paul Appleby
Saturday, 5 June
- Re: Netgear WG602 Accesspoint vulnerability James Garrison
Monday, 7 June
- OBJECT Bugs or Features James C Slora Jr
Sunday, 6 June
- RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Larry Seltzer
Monday, 7 June
- Re: Netgear WG602 Accesspoint vulnerability Hostmaster
- [product-security@apple.com: APPLE-SA-2004-06-07 Security Update 2004-06-07] David Ahmad
- Multiple vulnerabilities PHP-Nuke Dark Bicho
Sunday, 6 June
- RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Chris Carlson
Monday, 7 June
- Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Gadi Evron
- RE: Linksys WRT54G - Advice for european users Connor, Ethan M. W
- RE: The Linksys WRT54G "security problem" doesn't exist David Gillett
Saturday, 5 June
- n0t Marcin Ulikowski
- SMC 7008ABRv2 and 7004VBRv1 updated firmware corrects port 1900 issue. user86
- RE: [Full-Disclosure] Re: Netgear WG602 Accesspoint vulnerability Jan-Peter Koopmann
Sunday, 6 June
- Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities lw_at_wszia.edu.pl
- Linksys Web Camera File Inclusion Vuln John Doe
Tuesday, 8 June
- Various crashs and fun in Race Driver 1.20 Luigi Auriemma
- RE: Multiple vulnerabilities PHP-Nuke Jeruvy
- Re: OBJECT Bugs or Features Nick FitzGerald
- Vulnerability: Arbitrary File Access & DoS in Crystal Reports Imperva Application Defense Center
- U.S. Robotics Broadband Router 8003 admin password visible Fernando Sanchez
- Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities Matt Zimmerman
- RE: Linksys WRT54G - Advice for european users micm
Monday, 7 June
- KM-2004-01: Cross-Site Scripting in Blosxom writeback Kyle Maxwell
Tuesday, 8 June
- Re: OBJECT Bugs or Features http-equiv_at_excite.com
- Aspell 'word-list-compress' stack overflow vulnerability Shaun Colley
- unauthorized deletion of IPsec SAs in isakmpd, still Thomas Walpuski
Wednesday, 9 June
- Re: OBJECT Bugs or Features Nick FitzGerald
Tuesday, 8 June
- Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. JvdR
Wednesday, 9 June
- Trend Officescan local privilege escalation Donald Reid
- Re: n0t Michal Zalewski
- SUSE Security Announcement: cvs (SuSE-SA:2004:015) Thomas Biege
Tuesday, 8 June
- Major Cpanel Expliot HTML Injection Virtual Nova Web Hosting services virtualnova.net
- Potential Security Flaw in Symantec Gateway Security 360R Dev Null
Wednesday, 9 June
- Advisory 09/2004: More CVS remote vulnerabilities Stefan Esser
- TSSA-2004-010 - squid tinysofa Security Team
- RE: Question About Ethics and Full Disclosure Joe Klein
Tuesday, 8 June
- Re: Linksys WRT54G - Advice for european users Richard Bjerregaard
Wednesday, 9 June
- [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability Kurt Lieber
- Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability Cisco Systems Product Security Incident Response Team
- RE: OBJECT Bugs or Features Michael Wojcik
- [FULL DISCLOSURE] ASPDOTNETSTOREFRONT Improper Session Validation Tom
Monday, 7 June
- Re: OBJECT Bugs or Features Valdis.Kletnieks_at_vt.edu
Wednesday, 9 June
- Metasploit Framework v2.1 H D Moore
- [FULL DISCLOSURE] ASPDOTNETSTOREFRONT Cross-Site Scripting Vulnerability Tom
- SUSE Security Announcement: squid (SuSE-SA:2004:016) Thomas Biege
- MDKSA-2004:059 - Updated squid packages fix remotely exploitable vulnerability Mandrake Linux Security Team
- ADVISORY: ASPDOTNETSTOREFRONT Improper Upload Validation Tom
- [ GLSA 200406-05 ] Apache: Buffer overflow in mod_ssl Thierry Carrez
Tuesday, 8 June
- RE: OBJECT Bugs or Features James C Slora Jr
Wednesday, 9 June
- Mkdir exploit for PDP-11 doesn't work Jonathan S
Monday, 7 June
- FreeBSD Security Advisory FreeBSD-SA-04:12.jailroute FreeBSD Security Advisories
Wednesday, 9 June
- Re: unauthorized deletion of IPsec SAs in isakmpd, still Thomas Walpuski
- MDKSA-2004:058 - Updated cvs packages fix multiple vulnerabilities Mandrake Linux Security Team
Tuesday, 8 June
- Re: Multiple vulnerabilities PHP-Nuke Squid
Thursday, 10 June
- [SECURITY] [DSA 517-1] New CVS packages fix buffer overflow Martin Schulze
- Edimax 7205APL msl_at_velmans-industries.nl
- [security bulletin] SSRT3456 HP-UX ftp remote unauthorized access Boren, Rich (SSRT)
- [ GLSA 200406-06 ] CVS: additional DoS and arbitrary code execution vulnerabilities Kurt Lieber
- Blackboard Learning System - Stealing documents out of the digital dropbox Maarten Verbeek
- [Full-Disclosure] FD info prompts M$ to summon the FBI on spy-vertisers http-equiv_at_excite.com
- 10 Month Old Vulnerability Continues to Be Core For Exploits Drew Copley
- RE: Question About Ethics and Full Disclosure Syste Op
- RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) Drew Copley
- MDKSA-2004:060 - Updated ksymoops packages fix symlink vulnerability Mandrake Linux Security Team
- EEYE: RealPlayer embd3260.dll Error Response Heap Overflow Derek Soeder
Wednesday, 9 June
- Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. JvdR
Thursday, 10 June
- TSLSA-2004-0033 - squid Trustix Security Advisor
Wednesday, 9 June
- Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. Mike Healan
Thursday, 10 June
- [0xbadc0ded #04] smtp.proxy <= 1.1.3 Joel Eriksson
- RE: Question About Ethics and Full Disclosure Drew Copley
Wednesday, 9 June
- Re: Question About Ethics and Full Disclosure Stefan de Bruijn
Thursday, 10 June
- RE: Potential Security Flaw in Symantec Gateway Security 360R Symantec Product Security Team
- RE: [Fwd: [Full-Disclosure] COELACANTH: Phreak Phishing Expedition] Drew Copley
- RE: COELACANTH: Phreak Phishing Expedition] Thor Larholm
- [ GLSA 200406-07 ] Subversion: Remote heap overflow Kurt Lieber
Friday, 11 June
- [SNS Advisory No.74] Webmin Access Control Rule Bypass Vulnerability snsadv
Thursday, 10 June
- FOUND: COELACANTH: Phreak Phishing Expedition http-equiv_at_excite.com
- Notes: COELACANTH: Phreak Phishing Expedition http-equiv_at_excite.com
Friday, 11 June
- Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. Hillel Himovich
- [OpenPKG-SA-2004.028] OpenPKG Security Advisory (subversion) OpenPKG
- Re: Blackboard Learning System - [addition] Maarten Verbeek
- RE: COELACANTH: Phreak Phishing Expedition] Thor Larholm
- Multiple vulnerabilities in RealPlayer (#NISR11062004) NGSSoftware Insight Security Research
- SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition http-equiv_at_excite.com
- RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition Drew Copley
- Re: Potential Security Flaw in Symantec Gateway Security 360R ed p
- RE: [Full-Disclosure] RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition Jelmer
- RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition Nick FitzGerald
Saturday, 12 June
- MS web designers -- "What Security Initiative?" Nick FitzGerald
Friday, 11 June
- [FMADV] Subversion <= 1.04 Heap Overflow ned
Saturday, 12 June
- RE: Multiple vulnerabilities PHP-Nuke Jeruvy
Friday, 11 June
- Eudora SPAM Issues.. ICI Security Team
- [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache) OpenPKG
Thursday, 10 June
- SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition http-equiv_at_excite.com
Wednesday, 9 June
- MDKSA-2004:056-1 - Updated krb5 packages fix buffer overflow vulnerabilities Mandrake Linux Security Team
Friday, 11 June
- [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) OpenPKG
- [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3] Janek Vind
- COELACANTH: After Math http-equiv_at_excite.com
- COELACANTH: After Math http-equiv_at_excite.com
Saturday, 12 June
- Re: Potential Security Flaw in Symantec Gateway Security 360R Dev Null
Saturday, 5 June
- Re: The Linksys WRT54G "security problem" doesn't exist caldcv_at_students.fccj.org
Sunday, 6 June
- PHP escapeshellarg Windows Vulnerability Daniel Fabian
Wednesday, 9 June
- RE: Linksys WRT54G - Advice for european users Connor, Ethan M. W
- Skype URI callto username overflow Hillel Himovich
- Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: GOTO Masanori
Thursday, 10 June
- COELACANTH: Phreak Phishing Expedition http-equiv_at_excite.com
Thursday, 3 June
- New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection Rusty Chiles
Sunday, 13 June
- Advisory 10/2004: Chora CVS/SVN Viewer remote vulnerability Stefan Esser
Monday, 14 June
- [SECURITY] [DSA 518-1] New kdelibs packages fix URI handler vulnerabilities Martin Schulze
Sunday, 13 June
- Infosec News Blog m5754074_at_volubis.com
- Linksys Web Camera Cross-site Scripting Vuln Tyler Guenter aka scriptX
- Antivirus/Trojan/Spyware scanners DoS! Bipin Gautam
Monday, 14 June
- Multiple Antivirus Scanners DoS attack. bipin gautam
Sunday, 13 June
- VP-ASP Shopping Cart Multiple Vulnerabilities Thomas Ryan
- VICE emulator format string vulnerability Spiro Trikaliotis
Monday, 14 June
- Re: Multiple Antivirus Scanners DoS attack. Ethy H. Brito
Sunday, 13 June
- Antivirus/Trojan/Spyware scanners DoS [summary] Bipin Gautam
Monday, 14 June
- Re: Eudora SPAM Issues.. (Followup) ICI Security Team
Saturday, 12 June
- Re: Mkdir exploit for PDP-11 doesn't work Denis Solaro
Friday, 11 June
- NetBSD kernel swapctl(2) vulnerability Evgeny Demidov
Monday, 14 June
- IRIX syssgi system call vulnerability and other security fixes SGI Security Coordinator
- RE: Antivirus/Trojan/Spyware scanners DoS! Romulo M. Cholewa
- authentication bug in KAME's racoon Thomas Walpuski
- RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection Romulo M. Cholewa
- Re: MS web designers -- "What Security Initiative?" Greg Kujawa
- RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection Drew Copley
Sunday, 13 June
- Re: Eudora SPAM Issues.. Greg A. Woods
Monday, 14 June
- RE: Multiple Antivirus Scanners DoS attack. Messer, Jon
- [security bulletin] SSRT4717 rev.0 HP Tru64 UNIX SSL/TLS Potential Remote Denial of Service (DoS) Boren, Rich (SSRT)
Tuesday, 15 June
- MAGIC XSS INTO THE DNS: coelacanth http-equiv_at_excite.com
- RE: Multiple Antivirus Scanners DoS attack. Bo Rasmussen
- ActiveX control download and redirection Martijn Brinkers
- Re: authentication bug in KAME's racoon Michal Ludvig
Monday, 14 June
- Unprivilegued settings for FreeBSD kernel variables Radko Keves
- Re: MS web designers -- "What Security Initiative?" Nick FitzGerald
Tuesday, 15 June
- Web Wiz Forums Registration Rules XSS Vulnerability Ferruh Mavituna
- RE: Internet Explorer Remote Null Pointer Crash(mshtml.dll) Thor Larholm
- [ GLSA 200406-09 ] Horde-Chora: Remote code execution Thierry Carrez
- Symantec Enterprise Firewall DNSD cache poisoning Vulnerability fryxar
- [ GLSA 200406-08 ] Squirrelmail: Another XSS vulnerability Thierry Carrez
- [SECURITY] [DSA 519-1] New CVS packages fix several potential security problems Martin Schulze
- [ GLSA 200406-10 ] Gallery: Privilege escalation vulnerability Thierry Carrez
Friday, 11 June
- [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability snsadv
Monday, 14 June
- RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection Jelmer
Wednesday, 16 June
- TSLSA-2004-0034 - kernel Trustix Security Advisor
- [ GLSA 200406-12 ] Webmin: Multiple vulnerabilities Kurt Lieber
- Cisco Security Advisory: Cisco IOS Malformed BGP packet causes reload Cisco Systems Product Security Incident Response Team
Tuesday, 15 June
- Re: Unprivilegued settings for FreeBSD kernel variables Dag-Erling Smørgrav
Wednesday, 16 June
- First documented cell phone virus //no code or 0-days// just info System Administrator
- RE: Multiple Antivirus Scanners DoS attack. Brian Christmas
- Re: Symantec Enterprise Firewall DNSD cache poisoning Vulnerability Sym Security
Tuesday, 15 June
- Re: authentication bug in KAME's racoon Thomas Walpuski
Wednesday, 16 June
- Caveat Lector: Beastie Boys Evil Dragos Ruiu
- Linux Kernel i2c Integer Overflow Vulnerability Shaun Colley
- Re: Multiple Antivirus Scanners DoS attack. Tucker
Tuesday, 15 June
- Problem With IP Logging In Invision Power Board? GulfTech Security
Wednesday, 16 June
- [ GLSA 200406-11 ] Horde-IMP: Input validation vulnerability Kurt Lieber
Tuesday, 15 June
- webauction bq_at_phk.at
- Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: GOTO Masanori
Wednesday, 16 June
- Checkpoint Firewall-1 IKE Vendor ID information leakage Roy Hills
Tuesday, 15 June
- Re: Multiple Antivirus Scanners DoS attack. jspanitz_at_erols.com
Wednesday, 16 June
- Is predictable spam filtering a vulnerability? R Armiento
- IBM acpRunner Activex Dangerous Methods Vulnerability Drew Copley
- "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability Drew Copley
Thursday, 22 April
- phpMyChat 0.14.5 HEX
Wednesday, 16 June
- SUSE Security Announcement: kernel (SuSE-SA:2004:017) Thomas Biege
Thursday, 17 June
- [ GLSA 200406-13 ] Squid: NTLM authentication helper buffer overflow Kurt Lieber
- XSS in Snitz Forum 2000 Pete Foster
Wednesday, 16 June
- [SECURITY] [DSA 520-1] New krb5 packages fix buffer overflows Matt Zimmerman
- Re: Linux Kernel i2c Integer Overflow Vulnerability Alexander Nyberg
Thursday, 17 June
- Re: authentication bug in KAME's racoon Michal Ludvig
Wednesday, 16 June
- Fwd : FD/IE: Popup object fakes the location field liudieyu_at_umbrella.name
Tuesday, 15 June
- Singapore password file exploit Mr. Anderson
Friday, 18 June
- RE: Caveat Lector: Beastie Boys Evil Chris Merkel
- TSLSA-2004-0035 - kernel Trustix Security Advisor
Thursday, 17 June
- "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability Drew Copley
- Re: Caveat Lector: Beastie Boys Evil jonspanos_at_yahoo.com
- Re: Unprivilegued settings for FreeBSD kernel variables Eygene A. Ryabinkin
- Re: Unprivilegued settings for FreeBSD kernel variables Manuel Bouyer
- Re: Is predictable spam filtering a vulnerability? Joel Eriksson
- RE: Is predictable spam filtering a vulnerability? Aaron Cake
- Re: Caveat Lector: Beastie Boys Evil Shaun Lipscombe
- RE: Is predictable spam filtering a vulnerability? Hamlesh Motah
Friday, 18 June
- Re: Unprivilegued settings for FreeBSD kernel variables Jason V. Miller
Wednesday, 16 June
- Re: Problem With IP Logging In Invision Power Board? Brian Dessent
Friday, 18 June
- Re: Symantec Enterprise Firewall DNSD cache poisoning Vulnerability Peter Jelver
Thursday, 17 June
- Re: Linux Kernel i2c Integer Overflow Vulnerability Greg KH
Friday, 18 June
- USB risks (continued) Gadi Evron
Thursday, 17 June
- Re: Is predictable spam filtering a vulnerability? David F. Skoll
Friday, 18 June
- Re: Unprivilegued settings for FreeBSD kernel variables Christian Ullrich
Wednesday, 16 June
- Re: Caveat Lector: Beastie Boys Evil KF (lists)
Friday, 18 June
- TSL-2004-0036 - kerberos Trustix Security Advisor
Thursday, 17 June
- Re: Linux Kernel i2c Integer Overflow Vulnerability Shaun Colley
- [ GLSA 200406-14 ] aspell: Buffer overflow in word-list-compress Thierry Carrez
Friday, 18 June
- Starwood security contacts Liu, Jinsong
Thursday, 17 June
- Virus scan attack Nate Nord
- Re: MAGIC XSS INTO THE DNS: coelacanth qazxdrgb_at_hotmail.com
- RE: Caveat Lector: Beastie Boys Evil Wolf, Glenn
- RE: Antivirus/Trojan/Spyware scanners DoS! secfocuslist_at_yahoo.com
Wednesday, 16 June
- Re: Multiple Antivirus Scanners DoS attack. Jacek Osiecki
Thursday, 17 June
- Re: Unprivilegued settings for FreeBSD kernel variables Ivaylo Kostadinov
- Re: Is predictable spam filtering a vulnerability? Ilya Sher
Friday, 18 June
- exploiting overflowed kmalloc() memory? infamous41md_at_hotpop.com
Sunday, 6 June
- [SECURITY] [DSA 516-1] New odbc-postgresql packages fix denial of service Martin Schulze
Friday, 18 June
- Re: Is predictable spam filtering a vulnerability? Jon Fiedler
- Re: Is predictable spam filtering a vulnerability? David F. Skoll
- Re: USB risks (continued) RSnake
- ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS Erik Sperling Johansen
- Re: Unprivilegued settings for FreeBSD kernel variables Valdis.Kletnieks_at_vt.edu
Thursday, 17 June
- Re: Is predictable spam filtering a vulnerability? Gadi Evron
Friday, 18 June
- RE: Is predictable spam filtering a vulnerability? Romulo M. Cholewa
- RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition Jelmer
- Re: Is predictable spam filtering a vulnerability? Jason Coombs
- RE: Is predictable spam filtering a vulnerability? Andrew Hunter
Saturday, 19 June
- Internet Scanner 7 Restriction Bypass Vulnerability Chris Hurley
Thursday, 17 June
- RE: Antivirus/Trojan/Spyware scanners DoS! Security List
Friday, 18 June
- Re: Unprivilegued settings for FreeBSD kernel variables Henning Brauer
Wednesday, 16 June
- Re: Caveat Lector: Beastie Boys Evil PC Sage
Friday, 18 June
- RE: Is predictable spam filtering a vulnerability? Lance James
- Re: Caveat Lector: Beastie Boys Evil Hamilton Frail
- Re: Is predictable spam filtering a vulnerability? Bill Burge
- Re: Is predictable spam filtering a vulnerability? Sean Straw / PSE
- Script injection in DNSONE appliance c3rb3r
- Re: Unprivilegued settings for FreeBSD kernel variables blexim
Friday, 11 June
- RE: COELACANTH: Phreak Phishing Expedition] Jelmer
Thursday, 17 June
- SUSE Security Announcement: subversion (SuSE-SA:2004:018) security_at_suse.de
- time Greg Obremski
- Re: Is predictable spam filtering a vulnerability? krispykringle_at_gentoo.org
Friday, 18 June
- Re: Unprivilegued settings for FreeBSD kernel variables Jason V. Miller
- Re: Caveat Lector: Beastie Boys Evil Ron Thigpen
Monday, 7 June
- MDKSA-2004:057 - Updated tripwire packages fix format string vulnerability Mandrake Linux Security Team
Friday, 11 June
- [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability snsadv
Tuesday, 15 June
- Re: Multiple Antivirus Scanners DoS attack. Yosif Sleman
Friday, 18 June
- [ GLSA 200406-15 ] Usermin: Multiple vulnerabilities Thierry Carrez
Saturday, 19 June
- Re: Is predictable spam filtering a vulnerability? Kyle Wheeler
Sunday, 20 June
- TSSA-2004-011 - kernel tinysofa Security Team
Monday, 21 June
- XSS vulnerability in Sqwebmail 4.0.4 Luca Legato
- DLINK 614+, script injection vulnerability c3rb3r
- IE/0DAY -> Insider Prototype liudieyu_at_umbrella.name
Sunday, 20 June
- ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability Kurczaba Associates advisories
- Re: Multiple Antivirus Scanners DoS attack. Jason Haar
Saturday, 19 June
- Re: Virus scan attack Joao B. Diehl
Sunday, 20 June
- Multiple osTicket exploits! Guy Pearce
Friday, 18 June
- Code execution in the Unreal Engine through \secure\ packet Luigi Auriemma
Sunday, 20 June
- NETGEAR FVS318 Web-Based Administration DoS Kurczaba Associates advisories
Monday, 21 June
- Re: Is predictable spam filtering a vulnerability? Chris Brown
Saturday, 19 June
- Security flaw in rssh Derek Martin
Sunday, 20 June
- Unusual Activity in Ad-aware 6 Personal, Build 6.181 fedhead
Saturday, 19 June
- [SECURITY] [DSA 522-1] New super packages fix format string vulnerability Matt Zimmerman
Monday, 21 June
- SGI Advanced Linux Environment 3 Security Update #4 SGI Security Coordinator
Tuesday, 22 June
- Re: Virus scan attack Vincent Archer
- Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 Steve Ryan
Sunday, 20 June
- Antivirus/Trojan/Spyware scanners DoS! No Spam
Monday, 21 June
- SGI Advanced Linux Environment 2.4 security update #22 SGI Security Coordinator
- RE: COELACANTH: Phreak Phishing Expedition] Drew Copley
- Re: [Full-Disclosure] [SECURITY] [DSA 139-1] New super packages fix local root exploit gobbles_at_hushmail.com
Tuesday, 22 June
- linux kernel IEEE1394(Firewire) driver integer overflow vulnerabilities infamous41md_at_hotpop.com
Monday, 21 June
- Re: exploiting overflowed kmalloc() memory? infamous42md_at_hotpop.com
Tuesday, 22 June
- Administrivia: Technical difficulties David Ahmad
Monday, 21 June
- mcafee dat corrupted? (was: Virus scan attack) Diyan Christian
Tuesday, 22 June
- Re: Virus Scan Attack Paul Knibbs
Monday, 21 June
- [ESA-20040621-005] 'kernel' Several vulnerabilities EnGarde Secure Linux
Saturday, 19 June
- Re: Unprivilegued settings for FreeBSD kernel variables Wietse Venema
Tuesday, 22 June
- [ GLSA 200406-17 ] IPsec-Tools: authentication bug in racoon Thierry Carrez
- MDKSA-2004:061 - Updated dhcp packages fix buffer overflow vulnerabilities Mandrake Linux Security Team
- [CLA-2004:845] Conectiva Security Announcement - kernel Conectiva Updates
- Re: Virus scan attack Victor Julien
- ArbitroWeb v0.6 Javascript injection vulnerability Josh Gilmour
- Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 Greg Kujawa
Friday, 18 June
- [SECURITY] [DSA 521-1] New sup packages fix format string vulnerabilities Matt Zimmerman
Monday, 21 June
- RE: Antivirus/Trojan/Spyware scanners DoS! Ian Bergman
- Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password) Konstantin V. Gavrilenko
Tuesday, 22 June
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Martin Maèok
- Re: Caveat Lector: Beastie Boys Evil Jonas Mixter
Sunday, 20 June
- Re: Is predictable spam filtering a vulnerability? Luca Berra
Saturday, 19 June
- Re: Is predictable spam filtering a vulnerability? Crispin Cowan
Monday, 21 June
- SGI Advanced Linux Environment 3 Security Update #3 SGI Security Coordinator
Saturday, 19 June
- [SECURITY] [DSA 523-1] New www-sql packages fix buffer overflow Matt Zimmerman
Tuesday, 22 June
- Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 Noone_at_Nowhere.com
Monday, 21 June
- Re[2]: Caveat Lector: Beastie Boys Evil Matthew Leeds
Tuesday, 22 June
- DHCP Vuln // no code 0day // System Administrator
- Re: [security] Unusual Activity in Ad-aware 6 Personal, Build 6.181 Shawn McMahon
Sunday, 20 June
- [OT] Safe spam filtering methods (was: Is predictable spam filtering a vulnerability?) The Fungi
Monday, 21 June
- SGI Advanced Linux Environment 2.4 security update #21 SGI Security Coordinator
Tuesday, 22 June
- Re: Virus scan attack Joe Fubar
Sunday, 20 June
- Microsoft MN-500 Wireless Router Web-Based Administration DoS Kurczaba Associates advisories
Monday, 21 June
- Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 Russell J. Wood
- DLINK 704, script injection vulnerability c3rb3r
Saturday, 19 June
- Re: Is predictable spam filtering a vulnerability? Phil Barnett
Tuesday, 22 June
- Re: IE/0DAY -> Insider Prototype Fabricio A. Angeletti
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) David F. Skoll
Wednesday, 23 June
- MDKSA-2004:062 - Updated kernel packages fix multiple vulnerabilities Mandrake Linux Security Team
- Linux Broadcom 5820 Cryptonet Driver Integer Overflow infamous41md_at_hotpop.com
- Solution for bugtraq id 10570 (Epic Games Unreal Engine Memory Corruption Vulnerability) Gerco Dries
Tuesday, 22 June
- [SNS Advisory No.76] Printing from Internet Explorer Lets Users to Cause DoS snsadv
Wednesday, 23 June
- SUSE Security Announcement: dhcp-server (SuSE-SA:2004:019) Thomas Biege
Tuesday, 22 June
- RE: Unusual Activity in Ad-aware 6 Personal, Build 6.181 fedhead
Wednesday, 23 June
- Spammer jailed Ralph W. Reid
Thursday, 24 June
- vBulletin HTML Injection Vuln Cheng Peng Su
Wednesday, 23 June
- Re: Is predictable spam filtering a vulnerability? Sean Straw / PSE
- RE: COELACANTH: Phreak Phishing Expedition] Jelmer
- RE: Is predictable spam filtering a vulnerability? (silently drop ping messages) David Brodbeck
Thursday, 24 June
- Re: Is predictable spam filtering a vulnerability? (silently drop ping messages) Stephen Warren
- New ssharp version available stealth
- Re: Is predictable spam filtering a vulnerability? Valdis.Kletnieks_at_vt.edu
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Valdis.Kletnieks_at_vt.edu
- Rlpr Advisory jaguar_at_felinemenace.org
- [ GLSA 200406-19 ] giFT-FastTrack: remote denial of service attack Thierry Carrez
- WIndows XP UPNP exploit ArgoXP.c jocanor jocanor
- ZWS Newsletter & Mailing List Manager GaMeS GaMeS
- Re: Is predictable spam filtering a vulnerability? Michael A. Dickerson
- [ GLSA 200406-18 ] gzip: Insecure creation of temporary files Kurt Lieber
Wednesday, 23 June
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) der Mouse
Thursday, 24 June
- Re: Is predictable spam filtering a vulnerability? John Fitzgibbon
Wednesday, 23 June
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Sean Straw / PSE
- Vulnerability Alert Services Andy Cuff
- Security Advisory : FreeBSD local DoS Marceta Milos
Tuesday, 22 June
- Zone Labs response to "ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability" Zone Labs Product Security
Thursday, 24 June
- [security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack Boren, Rich (SSRT)
- Re: Is predictable spam filtering a vulnerability? Sean Straw / PSE
Friday, 25 June
- Mac OS X stores login/Keychain/FileVault passwords on disk Matt Johnston
- Symantec DeepSight Threat Management System Analysis: Client-side Exploitation David Ahmad
- Microsoft and Security http-equiv_at_excite.com
Thursday, 24 June
- Security Advisory: FreeBSD local DoS Marceta Milos
Friday, 25 June
- format string vulnerability in Gnats Khan Shirani
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) der Mouse
- artmedic_links5 PHP Script (include path) vuln Adam n30n Simuntis
- multiple remote & local buffer overflows discovered in Drcatd Khan Shirani
- Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Seth Breidbart
- [ GLSA 200406-20 ] FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling Thierry Carrez
Thursday, 24 June
- Re: Is predictable spam filtering a vulnerability? The Fungi
Friday, 25 June
- [SECURITY] [DSA 525-1] New apache packages fix buffer overflow in mod_proxy Matt Zimmerman
- RE: Microsoft and Security Drew Copley
- RE: Is predictable spam filtering a vulnerability? David Brodbeck
- Zone Labs response to "ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability" Zone Labs Product Security
Thursday, 24 June
- Re: Caveat Lector: Beastie Boys Evil Valdis.Kletnieks_at_vt.edu
Saturday, 26 June
- Re: Microsoft and Security Radoslav DejanoviÄ‡
Monday, 21 June
- nCipher Advisory #10: Pass phrases are exposed in netHSM log files nCipher Support
Sunday, 27 June
- Lotus Notes URL argument injection vulnerability Jouko Pynnonen
Monday, 28 June
- Re: Microsoft and Security Justin Wheeler
Sunday, 27 June
- ISC DHCP overflows Gregory Duchemin
- Cross-Site Scripting CuteNews DarkBicho
- DLINK 614+ - SOHO routers, system DOS Gregory Duchemin
- ZH2004-14SA (security advisory):Sql Injection in Infinity WEB D'Amato Luigi
- RE: Caveat Lector: Beastie Boys Evil Ross M. W. Bennetts
- Full path disclosure csFAQ DarkBicho
- DLINK 614+ - SOHO routers, DHCP service DOS Gregory Duchemin
- MPlayer MeMPlayer.c c0ntex_at_open-security.org
- Multiple vulnerabilities PowerPortal DarkBicho
Monday, 28 June
- Java applet crashing with native assertion Marc Schoenefeld
- Scob infection statistics, etc.. Hubbard, Dan
- Re: Java applet crashing with native assertion Jack Lloyd
- JS.Scob.Trojan Source Code ... K-OTiK Security
Tuesday, 29 June
- SUPER SPOOF DELUXE Re: [Full-Disclosure] Microsoft and Security http-equiv_at_excite.com
- [ GLSA 200406-21 ] mit-krb5: Multiple buffer overflows in krb5_aname_to_localname Kurt Lieber
- DoS in popclient 3.0b6 Dean White
Monday, 28 June
- php codes injection in phpMyAdmin version 2.5.7. Nasir Simbolon
Tuesday, 29 June
- TSSA-2004-012 - apache tinysofa Security Team
Monday, 28 June
- Re: DLINK 614+ - SOHO routers, system DOS Gregory Duchemin
Tuesday, 29 June
- Re: Java applet crashing with native assertion Cesare D'Amico
Monday, 28 June
- Re: Java applet crashing with native assertion Przemyslaw Frasunek
Tuesday, 29 June
- BHO Trojan follow-up information Hubbard, Dan
- linux kernel Sbus PROM driver multiple integer overflows infamous41md_at_hotpop.com
- MDKSA-2004:063 - Updated libpng packages fix potential remote compromise Mandrake Linux Security Team
- [ GLSA 200406-22 ] Pavuk: Remote buffer overflow Kurt Lieber
- MDKSA-2004:065 - Updated apache packages fix buffer overflow vulnerability in mod_proxy Mandrake Linux Security Team
- MDKSA-2004:064 - Updated apache2 packages fix DoS vulnerability Mandrake Linux Security Team
Wednesday, 30 June
- Remote DoS vulnerability in Linux kernel 2.6.x Adam Osuchowski
- rsbac 1.2.3 jail security problems Bencsath Boldizsar
- Re: Java applet crashing with native assertion Luciano Miguel Ferreira Rocha
- Re: Java applet crashing with native assertion Cheese Whiz
Tuesday, 29 June
- Microsoft technologies. By default, non-HIPAA compliant? Anything But Microsoft
- Re: Java applet crashing with native assertion Defakto
Wednesday, 30 June
- RE: Microsoft technologies. By default, non-HIPAA compliant? Jeremy Epstein
Tuesday, 29 June
- SUPER SPOOF DELUXE Re: [Full-Disclosure] Microsoft and Security http-equiv_at_excite.com
Wednesday, 30 June
- DSL router Prestige 650HW-31 Sami Gascón
Tuesday, 29 June
- FW: [security bulletin] SSRT4758 rev. 0 HP-UX ObAM WebAdmin unauthorized access Boren, Rich (SSRT)
Wednesday, 30 June
- RE: Microsoft technologies. By default, non-HIPAA compliant? Cameron, Thomas
- Cisco Security Advisory: Cisco Collaboration Server Vulnerability Cisco Systems Product Security Incident Response Team

Last message date: Jun 30 2004
Archived on: Aug 14 2008 PDT