Previous period

Next period

164 messages starting Jan 01 03 and ending Mar 31 03
Date index | Thread index | Author index

• Potential disclosure of sensitive information in Netscape 7.0 email client Michael Puchol (Jan 01)
• WinAmp v.3.0: buffer overflow D4rkGr3y (Jan 04)
• CuteFTP: buffer overflow D4rkGr3y (Jan 04)
• EServ/2.97 remote DoS D4rkGr3y (Jan 04)
• AN HTTPd v.1.41e: DoS, CSS, real patch attack D4rkGr3y (Jan 04)
• A security vulnerability in S8Forum NaSsEr .M.Sh (Jan 05)
• Multible Vulns in PlatinumFTP server matrix (Jan 06)
• PDS: Integer overflow in FreeBSD kernel Joost Pol (Jan 06)
• Opentype font file causes Windows to restart. Andrew (Jan 06)
  • Re: Opentype font file causes Windows to restart. Tiina Anita Muukkonen (Jan 06)
  • Re: Opentype font file causes Windows to restart. Kaspar Brand (Jan 09)
• Etherleak: Ethernet frame padding information leakage (A010603-1) @stake Advisories (Jan 06)
• E-theni (PHP) Frog Man (Jan 06)
• [INetCop Security Advisory] Remote format string vulnerability in Tanne. dong-h0un yoU (Jan 07)
• IMP 2.x SQL injection vulnerabilities Jouko Pynnonen (Jan 08)
• WebIntelligence session hijacking vulnerability Dirk Van Droogenbroeck (Jan 09)
• Efficient Networks 5861 DSL Router Greg Bolshaw (Jan 10)
• More information regarding Etherleak Ofir Arkin (Jan 10)
• vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges. NaSsEr .M.Sh (Jan 10)
• BitKeeper remote shell command execution/local vulnerability Maurycy Prodeus (Jan 11)
• *ALERT* INCLUDING EXPLOIT: Advisory / Exploit for mpg123 gobbles (Jan 13)
• Assorted Trend Vulns Rev 2.0 Rod Boron (Jan 14)
  • RE: Assorted Trend Vulns Rev 2.0 Shayne Sivley (Jan 14)
• Directory traversal vulnerabilities found in NITE ftp-server version 1.83 matrix (Jan 15)
• Followup to Gobbles post Rain Forest Puppy (Jan 15)
• CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library (fwd) Rain Forest Puppy (Jan 15)
• phpBB SQL Injection vulnerability Ulf Harnhammar (Jan 16)
• Multible vulnerabilities found in Shambala Server version 4.5 matrix (Jan 18)
• ISS Security Brief: PeopleSoft XML External Entities Vulnerability X-Force (Jan 20)
• Advisory 01/2003: CVS remote vulnerability Stefan Esser (Jan 20)
• iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package iDEFENSE Labs (Jan 21)
• Directory Traversal vulnerability found in Enceladus Server Suite version 3.9 matrix (Jan 21)
• Multiple MySQL bugs Rain Forest Puppy (Jan 21)
• IE chain vulnerability Alex Loots (Jan 22)
• Path Parsing Errata in Apache HTTP Server mattmurphy () kc rr com (Jan 22)
• TRACE used to increase the dangerous of XSS. Jeremiah Grossman (Jan 22)
• administrivia: cross-site tracing Rain Forest Puppy (Jan 22)
• CERT Advisory CA-2003-03 Buffer Overflow in Windows Locator Service (fwd) Rain Forest Puppy (Jan 23)
• Re: New Web Vulnerability - Cross-Site Tracing xss-is-lame (Jan 24)
• eEye - SQL Sapphire Worm Analysis Steve W. Manzuik (Jan 25)
  • Re: [VulnDiscuss] eEye - SQL Sapphire Worm Analysis Mark Litchfield (Jan 25)
• ISS Security Brief: Microsoft SQL Slammer Worm Propagation X-Force (Jan 25)
• Tool: Sapphire SQL Worm Scanner Marc Maiffret (Jan 25)
• Hypermail buffer overflows Ulf Harnhammar (Jan 26)
• Multiple vulnerabilities found in PlatinumFTPserver V1.0.7 matrix (Jan 26)
• Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities Wojciech Purczynski (Jan 27)
• Slapper/Sapphire Vulnerable non-Microsoft products Chris Wysopal (Jan 28)
• Slapper/Sapphire Vulnerable non-Microsoft products (update) Chris Wysopal (Jan 28)
• MIT Kerberos FTP client remote shell commands execution Fozzy [Hackademy Audit] (Jan 28)
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords iDEFENSE Labs (Jan 29)
• Microsoft RPC Locator Buffer Overflow Vulnerability (#NISR29012003) NGSSoftware Insight Security Research (Jan 30)
• Apache Jakarta Tomcat 3 URL parsing vulnerability Jouko Pynnonen (Jan 30)
  • <Possible follow-ups>
  • Apache Jakarta Tomcat 3 URL parsing vulnerability Jouko Pynnonen (Jan 30)
• myphpPagetool (php) Frog Man (Feb 02)
• phpMyShop (php) Frog Man (Feb 03)
• Banner Buffer Overflows found in Multible FTP Clients matrix (Feb 04)
• Opera's Security Model is Highly Vulnerable (GM#002-OP) GreyMagic Software (Feb 04)
• Phantom of the Opera (GM#003-OP) GreyMagic Software (Feb 04)
• Opera Images (GM#004-OP) GreyMagic Software (Feb 04)
• Opera: What's Next (GM#005-OP) GreyMagic Software (Feb 04)
• Sniffing Opera's Tracks (GM#006-OP) GreyMagic Software (Feb 04)
• Unreal engine: results of my research Auriemma Luigi (Feb 05)
• Re: CuteFTP 5.0 XP, Buffer Overflow Kanatoko (Feb 06)
• Buffer OverFlow in SQLBase 8.1.0 - NII Advisory Arjun Pednekar (Feb 10)
• Java-Applet crashes Opera 6.05 and 7.01 Marc Schoenefeld (Feb 10)
• iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix iDEFENSE Labs (Feb 10)
• Security bug in CGI::Lite::escape_dangerous_chars() function Ronald F. Guilmette (Feb 11)
• iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a iDEFENSE Labs (Feb 12)
• libIM.a buffer overflow vulnerability. Shiva Persaud (Feb 14)
• @stake Advisory: TruBlueEnvironment Privilege Escalation Attack @stake Advisories (Feb 14)
• php-Board (php) Frog Man (Feb 17)
• DotBr (PHP) Frog Man (Feb 17)
• Kietu ( PHP ) Frog Man (Feb 17)
• D-Forum (PHP) Frog Man (Feb 17)
• Oracle unauthenticated remote system compromise (#NISR16022003a) NGSSoftware Insight Security Research (Feb 17)
• Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b) NGSSoftware Insight Security Research (Feb 17)
• Oracle TZ_OFFSET Remote System Buffer Overrun (#NISR16022003c) NGSSoftware Insight Security Research (Feb 17)
• Oracle9i Application Server Format String Vulnerability (#NISR16022003d) NGSSoftware Insight Security Research (Feb 17)
• [SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability Tamer Sahin (Feb 17)
• Mulitple vulnerabilities found in BisonFTP Immune Advisory (Feb 17)
• [immune advisory] Mulitple vulnerabilities found in BisonFTP Immune Advisory (Feb 17)
• Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) NGSSoftware Insight Security Research (Feb 17)
• Lotus Domino Web Server iNotes Overflow (#NISR17022003b) NGSSoftware Insight Security Research (Feb 17)
• Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) NGSSoftware Insight Security Research (Feb 17)
• Oracle bfilename function buffer overflow vulnerability (#NISR16022003e) NGSSoftware Insight Security Research (Feb 17)
• Domino Advisories UPDATE Mark Litchfield (Feb 17)
• PHP Security Advisory: CGI vulnerability in PHP version 4.3.0 Jani Taskinen (Feb 17)
• More Lotus Domino Advisories Mark Litchfield (Feb 18)
• Cpanel 5 and below remote command execution and local root vulnerabilities pokleyzz (Feb 18)
• [SCSA-005] Proxomitron Naoko Long Path Buffer Overflow/DoS Grégory Le Bras | Security Corporation (Feb 19)
• Myguestbook (PHP) Frog Man (Feb 21)
• CERT Advisory CA-2003-06 Multiple vulnerabilities in SIP/VoIP Rain Forest Puppy (Feb 21)
• Rogue buffer overflow Ulf Harnhammar (Feb 21)
• WihPhoto (PHP) Frog Man (Feb 23)
• Terminal Emulator Security Issues H D Moore (Feb 24)
• QuickTime/Darwin Streaming Administration Server - Multiple Vulnerabilities @stake Advisories (Feb 24)
• Nokia 6210 DoS SMS Issue @stake Advisories (Feb 25)
• Secunia Research: Opera browser Cross Site Scripting Jakob Balle (Feb 26)
• ISMAIL (All Versions) Remote Buffer Overrun NGSSoftware Insight Security Research (Feb 27)
• MS-Windows ME IE/Outlook/HelpCenter critical vulnerability Fozzy [Hackademy Audit] (Feb 27)
• Invision Power Board (PHP) Frog Man (Feb 27)
• iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing iDEFENSE Labs (Feb 27)
• [SCSA-008] Cross Site Scripting & Script Injection Vulnerability in PY-Livredor Gregory Le Bras | Security Corporation (Mar 02)
• WebChat (PHP) Frog Man (Mar 03)
• Implementation flaws in Adobe Document Server for Reader Extensions info (Mar 03)
• GTcatalog (PHP) Frog Man (Mar 03)
• ISS Security Brief: Remote Sendmail Header Processing Vulnerability X-Force (Mar 03)
• ISS Security Brief: Snort RPC Preprocessing Vulnerability X-Force (Mar 03)
• iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) iDEFENSE Labs (Mar 04)
• shopfactory shopping cart Maarten Hartsuijker (Mar 05)
• Multible vulnerabilities found in Forum Web Server v1.60 matrix (Mar 06)
• [SCSA-009] Remote Command Execution Vulnerability in PHP Ping Gregory Le Bras | Security Corporation (Mar 06)
• PHP-Nuke 6.0 (& 6.5?) : Serious SQL Injection Security Holes Frog Man (Mar 06)
• Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue Martin O'Neal (Mar 07)
• Etnereal Advisory (Guninski #60) Steve (Mar 08)
• Re: Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue http-equiv () excite com (Mar 08)
• Postnuke v 0.723 SQL injection and directory traversing saleh (Mar 09)
• .MHT Buffer Overflow in Internet Explorer Tom Tanaka (Mar 10)
• ISS Security Brief: PeopleSoft PeopleTools Remote Command Execution Vulnerability X-Force (Mar 10)
• PHP-Nuke 6.0 & 6.5RC2 SQL Injection Again Frog Man (Mar 10)
• SOHO Routefinder 550 VPN, DoS and Buffer Overflow Peter Kruse (Mar 11)
• pgp4pine stack overflow vulnerability Eric AUGE (Mar 12)
• PivX Advisory MK002A Intuit TurboTax Information Disclosure Vulnerability Mkristovich (Mar 13)
• PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability Mkristovich (Mar 13)
• R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication Rapid 7 Security Advisories (Mar 13)
• R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow Rapid 7 Security Advisories (Mar 13)
• R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression Rapid 7 Security Advisories (Mar 13)
• Sun ONE (iPlanet) Application Server Connector Module Overflow @stake Advisories (Mar 13)
• Nokia SGSN (DX200 Based Network Element) SNMP issue @stake Advisories (Mar 13)
• OpenSSL Private Key Disclosure Chris Wysopal (Mar 13)
• Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. dong-h0un U (Mar 17)
• ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! dong-h0un U (Mar 17)
• ePolicy Orchestrator Format String Vulnerability (a031703-1) @stake Advisories (Mar 17)
• Fwd: Ptrace hole / Linux 2.2.25 Immo 'FaUl' Wehrenberg (Mar 17)
• S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server Lluis Mora (Mar 17)
• Microsoft IIS 5.0 WebDAV remote buffer overflow Chris Wysopal (Mar 17)
• [SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb Gregory Le Bras | Security Corporation (Mar 17)
• Tru64 Unix (various versions) stdio vulnerability Arrigo Triulzi (Mar 18)
• Windows Scripting Engine issue Chris Wysopal (Mar 19)
• EEYE: XDR Integer Overflow Marc Maiffret (Mar 19)
• CORE-2003-03-04-01: Multiple vulnerabilities in Ximian 's Evolution Mail User Agent CORE SECURITY TECHNOLOGIES ADVISORIES (Mar 19)
• iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine iDEFENSE Labs (Mar 19)
• CORE-20030304-02: Vulnerability in Mutt Mail User Agent CORE Security Technologies Advisories (Mar 20)
• New attack vectors and a vulnerability dissection of MS03-007 David Litchfield (Mar 21)
• iis 0day exploit Rafael Nuñez (Mar 21)
• PHP-Nuke : banners.php Frog Man (Mar 22)
• PHP-Nuke, 'News' module : Big Security Holes Frog Man (Mar 22)
• Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Vladimir Katalov (Mar 24)
• 3com RAS 1500 Remote vulnerabilities. Piotr Chytla (Mar 24)
• This is the WebDav Exploit ffs Rafael Nuñez (Mar 24)
• Emule 0.27b remote crash Auriemma Luigi (Mar 25)
• Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue Martin O'Neal (Mar 26)
• Administrivia: acceptable postings Chris Wysopal (Mar 26)
• NSFOCUS SA2003-01: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability NSFCOSU Security Team (Mar 27)
• [SCSA-012] Multiple vulnerabilities in Sambar Server Gregory Le Bras | Security Corporation (Mar 27)
• CORE-2003-0306: RealPlayer PNG deflate heap corruption vulnerability CORE Security Technologies Advisories (Mar 28)
• CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome CORE Security Technologies Advisories (Mar 28)
• Alexandria-dev / sourceforge multiple vulnerabilities Thomas Kristensen (Mar 28)
• sendmail 8.12.9 available Claus Assmann (Mar 29)
• Sendmail: -1 gone wild Michal Zalewski (Mar 29)
• [SCSA-014] Remote Denial of Service Vulnerability in EZ Server Gregory Le Bras | Security Corporation (Mar 31)
• NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability NSFCOSU Security Team (Mar 31)
• NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability NSFCOSU Security Team (Mar 31)
• [DDI-1012] Malformed request causes denial of service in HP Instant TopTools Erik Parker (Mar 31)

Previous period

Next period