Vulnwatch: by author

_at_stake advisories
- Oracle9iAS Web Cache Denial of Service (a102802-1) (Oct 28 2002)
Abraham Lincoln
- NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability (Oct 16 2002)
Aviram Jenik
- TFTPD32 Buffer Overflow Vulnerability (Long filename) (Nov 18 2002)
- TFTPD32 Directory Traversal Vulnerability (Nov 18 2002)
Casper Aleva
- Potential DOS attack with Web-CyrAdm. (Dec 29 2002)
Chris Wysopal
- Administrivia (Dec 10 2002)
CORE Advisories
- CORE-20021005: Vulnerability Report For Linksys Devices (Dec 10 2002)
D4rkGr3y
- TFTP Server DoS (Oct 24 2002)
Dave Aitel
- [Immunity, Inc.]Vulnerability: RPC Service DoS (port 135/tcp) on Windows 2000 SP3 (Oct 18 2002)
David Endler
- iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File (Nov 19 2002)
- iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability (Nov 19 2002)
- iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa (Nov 11 2002)
- iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS (Nov 08 2002)
- iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server (Nov 08 2002)
- iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan (Nov 06 2002)
- iDEFENSE Security Advisory 11.04.02b: Denial of Service Vulnerability in Xeneo Web Server (Nov 03 2002)
- iDEFENSE Security Advisory 11.04.02a: Pablo FTP Server DoS Vulnerability (Nov 03 2002)
- iDEFENSE Security Advisory 11.01.02: Buffer Overflow Vulnerability in Abuse (Nov 01 2002)
- iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability (Oct 31 2002)
- iDEFENSE Security Advisory 10.31.02b: Prometheus Application Framework Code Injection (Oct 31 2002)
- iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router (Oct 31 2002)
- iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server (Oct 24 2002)
- iDEFENSE Security Advisory 10.16.02: Denial of Service in Sabre Desktop Reservation Client for Windows (Oct 16 2002)
- iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone (Oct 15 2002)
David Litchfield
- Microsoft SQL Server Webtasks privilege upgrade (#NISR17102002) (Oct 17 2002)
dev-null_at_no-id.com
- IPSwitch, Inc. WS_FTP Server (Oct 25 2002)
dong-h0un U
- Directory traversing bug in 'myServer' webserver. (Dec 11 2002)
- Remote Heap malloc/free & multiple Overflow vulnerability in WSMP3. (Nov 25 2002)
Erik Parker
- (Correction) Netscreen SSH1 CRC32 Compensation Denial of service (Nov 01 2002)
- Netscreen SSH1 CRC32 Compensation Denial of service (Nov 01 2002)
GreyMagic Software
- Vulnerable cached objects in IE (9 advisories in 1) (Oct 22 2002)
- Internet Explorer : The D-Day (Oct 15 2002)
guejez
- perlbot 1.9.2 - Remote Command Execution (Oct 21 2002)
- SCAN Associates Advisory: madhater perlbot 1.0 beta - Remote Command Execution (Oct 18 2002)
- SCAN Associates Advisory: Molly 0.5 - Remote Command Execution (Oct 18 2002)
iDEFENSE Labs
- iDEFENSE Security Advisory 12.23.02: Integer Overflow in pdftops (Dec 23 2002)
- iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) (Dec 19 2002)
K. K. Mookhey
- Password Disclosure in Cryptainer (Dec 16 2002)
- Buffer Overflow in iSMTP Gateway (Nov 11 2002)
- Weak Password Encryption Scheme in MS SQL Server (Nov 01 2002)
kalif_at_hushmail.com
- Virgil CGI Scanner Vulnerability (Oct 22 2002)
Kurt Seifried
- Re: proftpd <=1.2.7rc3 DoS (Dec 10 2002)
labs_at_NGSEC
- iPlanet WebServer, remote root compromise (Nov 18 2002)
li0n
- [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002) (Nov 04 2002)
Marc Maiffret
- Macromedia Shockwave Flash Malformed Header Overflow #2 (Dec 16 2002)
- PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability (Dec 11 2002)
- Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities (Nov 19 2002)
- EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities (Nov 12 2002)
marek.rouchal_at_infineon.com
- ClearCase DoS vulnerabilty (Nov 22 2002)
Mark Litchfield
- Re: IDEFENSE DOS in Linksys BEFSR41 EtherFast Cable/DSL Router + More issues DLINK & LINKSYS (Nov 01 2002)
matt_at_anzen.com
- fragrouter trojan (Oct 21 2002)
Matthew Murphy
- acFreeProxy Cross-Site Scripting Vulnerability/Possible DoS (Nov 23 2002)
- acFTP Authentication Issue (Nov 23 2002)
- LiteServe URL Decoding DoS (Nov 17 2002)
- LiteServe Directory Index Cross-Site Scripting (Nov 07 2002)
- PHP Information Functions May Allow Cross-Site Scripting (Oct 12 2002)
Matthias Andree
- Leafnode security announcement SA:2002:01 (Dec 29 2002)
- gfxboot allows boot password circumvention, SuSE 8.1 GRUB (Dec 13 2002)
mattmurphy_at_kc.rr.com
- Zeroo Folder Traversal Vulnerability (Nov 21 2002)
- Perception LiteServe HTTP CGI Disclosure Vulnerability (Nov 14 2002)
- KeyFocus KF Web Server File Disclosure Vulnerability (Nov 13 2002)
Michal Zalewski
- [RAZOR] Problems with mkstemp() (Dec 20 2002)
- RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability (Dec 17 2002)
Mitja Kolsek \(ACROS Lists\)
- Security Paper: Session Fixation Vulnerability in Web-based Applications (Dec 18 2002)
Muhammad Faisal Rauf Danka
- XSS in Postnuke Rogue release (0.72) (Nov 07 2002)
NetScreen Security Response Team
- Potential H.323 Denial of Service (Nov 25 2002)
- Predictable TCP Initial Sequence Numbers (Nov 25 2002)
- 'Malicious-URL' Feature may be Circumvented Using IP Fragmentation (Nov 25 2002)
NGSSoftware Insight Security Research
- RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002) (Dec 20 2002)
- PFinger 0.7.8 format string vulnerability (#NISR16122002B) (Dec 16 2002)
- zkfingerd 0.9.1 format string vulnerabilities (#NISR16122002A) (Dec 16 2002)
- Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002) (Nov 22 2002)
- Oracle iSQL*Plus buffer overflow vulnerability (#NISR04112002) (Nov 04 2002)
- Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002) (Oct 31 2002)
Ofir Arkin
- Paper Release: Security Risk Factors with IP Telephony based Networks (Nov 23 2002)
Peter Kruse
- Denial of Service vulnerability in VisNetic Website (Dec 11 2002)
Rain Forest Puppy
- Perl Safe.pm compartment reuse vuln (Nov 05 2002)
- Administrivia: where did your post go? (Oct 14 2002)
Rapid 7 Security Advisories
- R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (Dec 16 2002)
- R7-0008: IBM WebSphere Edge Server Caching Proxy Cross-Site Scripting Issues (Oct 23 2002)
- R7-0007: IBM WebSphere Edge Server Caching Proxy Denial of Service (Oct 23 2002)
Rob klein Gunnewiek
- proftpd <=1.2.7rc3 DoS (Dec 08 2002)
Stefan Esser
- Advisory 05/2002: Another Fetchmail Remote Vulnerability (Dec 13 2002)
- Advisory 04/2002: Multiple MySQL vulnerabilities (Dec 12 2002)
Steve W. Manzuik
- Foundstone Advisory (Nov 20 2002)
Steven M. Christey
- Directory Traversal Vulnerabilities in FTP Clients (Dec 10 2002)
subversive
- SFAD02-002: Calisto Internet Talker Remote DOS (Nov 24 2002)
Tamer Sahin
- [SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability (Dec 19 2002)
- [SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability (Dec 09 2002)
- [SecurityOffice] INweb Mail Server v2.01 Denial of Service Vulnerability (Nov 12 2002)
- [SecurityOffice] Hyperion Ftp Server v2.8.1 Directory Traversal Vulnerability (Nov 12 2002)
- [SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability (Oct 24 2002)
- [SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability (Oct 24 2002)
- [SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability (Oct 24 2002)
- [SecurityOffice] Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability (Oct 23 2002)
Ulf Harnhammar
- PHP-Nuke mail CRLF Injection vulnerabilities (Dec 20 2002)
- PHP-Nuke code execution and XSS vulnerabilities (Dec 16 2002)
- NOCC: XSS (Oct 20 2002)
Vagner Sacramento
- CAIS-ALERT: Vulnerability in the sending requests control of BIND (fwd) (Nov 23 2002)
X-Force
- ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability (Nov 25 2002)
- ISS Security Advisory: Multiple Remote Vulnerabilities in BIND4 and BIND8 (Nov 12 2002)
zel
- Netscreen Malicious URL feature can be bypassed by fragmenting the request (Nov 25 2002)