bugtraq 2000/03
By Thread

Starting: Wed Mar 01 2000 - 15:34:40 PST
Ending: Mon Mar 13 2000 - 01:57:57 PST

• Corel Linux 1.0 dosemu default configuration: Local root vuln suidat_private (Wed Dec 31 1969 - 15:59:59 PST)
  • Re: Corel Linux 1.0 dosemu default configuration: Local root vuln VaMPiRe, WHiTe (Thu Mar 02 2000 - 23:54:17 PST)
  • Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Seth R Arnold (Fri Mar 03 2000 - 10:33:51 PST)
  • Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Pavel Kankovsky (Sat Mar 04 2000 - 09:11:30 PST)
  • Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Nate Eldredge (Sun Mar 05 2000 - 14:13:45 PST)
  • Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Michael Meskes (Tue Mar 07 2000 - 02:53:15 PST)
• [SAFER 000229.EXP.1.3] Remote buffer overflow in Netscape Vanja Hrustic (Tue Feb 29 2000 - 09:48:10 PST)
• Re: W2K & ~25000+ temp files = crash + corruption? Robert M. Stockmann (Tue Feb 29 2000 - 17:43:30 PST)
• Re: SSH & xauth Peter Wemm (Tue Feb 29 2000 - 21:08:44 PST)
  • Re: SSH & xauth Cy Schubert - ITSD Open Systems Group (Thu Mar 02 2000 - 05:53:55 PST)
• Re: Disk (over)quota in Windows 2000 Mikael Olsson (Wed Mar 01 2000 - 00:11:00 PST)
  • Re: Disk (over)quota in Windows 2000 Sarkos Georgios (Wed Mar 01 2000 - 01:35:08 PST)
  • Re: Disk (over)quota in Windows 2000 Bret Piatt (Wed Mar 01 2000 - 08:10:45 PST)
  • Re: Disk (over)quota in Windows 2000 Joe Melhado (Wed Mar 01 2000 - 20:18:15 PST)
  • Re: Disk (over)quota in Windows 2000 Curtis Anderson, CNE, MCSE (Thu Mar 02 2000 - 07:08:47 PST)
  • Re: Disk (over)quota in Windows 2000 John Wiltshire (Wed Mar 01 2000 - 15:34:40 PST)
  • Re: Disk (over)quota in Windows 2000 David LeBlanc (Fri Mar 03 2000 - 09:05:43 PST)
• Re: How the password could be recover using FTP Mikael Olsson (Wed Mar 01 2000 - 00:30:13 PST)
• Re: xterm log file vulnerability Kris Kennaway (Wed Mar 01 2000 - 01:37:18 PST)
• Re: IIS dosn't check existance of local file before calling CGI Bronek Kozicki (Wed Mar 01 2000 - 03:25:44 PST)
• Re: Zonealarm exports sensitive data Dino Amato (Wed Mar 01 2000 - 04:15:50 PST)
• Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Derek Callaway (Wed Mar 01 2000 - 06:58:16 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Brett Lymn (Tue Feb 29 2000 - 16:38:02 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Eugene Teo (Thu Mar 02 2000 - 08:16:45 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Przemyslaw Frasunek (Wed Mar 01 2000 - 21:50:07 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Joe Shaw (Wed Mar 01 2000 - 21:34:12 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Derek Callaway (Thu Mar 02 2000 - 12:48:05 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Ronald Huizer (Sat Mar 04 2000 - 10:55:43 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Lamagra Argamal (Fri Mar 03 2000 - 11:53:41 PST)
  • Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Przemyslaw Frasunek (Fri Mar 03 2000 - 15:08:35 PST)
• Re: [Serv-U] Re: Serv-U FTP-Server v2.4a showing real path Rob Beckers (Wed Mar 01 2000 - 07:11:13 PST)
• IE 5.x allows executing arbitrary programs using .chm files Georgi Guninski (Wed Mar 01 2000 - 07:32:06 PST)
• ms activex setup ctl exploit. Mukund (Wed Mar 01 2000 - 07:43:47 PST)
• FW: W2K & ~25000+ temp files = crash + corruption? Jon St. Arnaud (Wed Mar 01 2000 - 09:12:39 PST)
• TrendMicro OfficeOffice Scan Jeff Stevens (Wed Mar 01 2000 - 10:04:24 PST)
• Re: BID 994,MS00-010 (Site Server Commerce Edition non-validated Steve.Kimbleat_private (Wed Mar 01 2000 - 10:54:07 PST)
  • Re: BID 994,MS00-010 (Site Server Commerce Edition non-validated Bertrand Schmitt (Wed Mar 01 2000 - 04:16:46 PST)
• FreeBSD Security Advisory: FreeBSD-SA-00:06.htdig FreeBSD Security Officer (Wed Mar 01 2000 - 11:26:26 PST)
• Re: man bugs might lead to root compromise (RH 6.1 and other Elias Levy (Wed Mar 01 2000 - 11:59:37 PST)
• [Debian] New version of nmh released Aleph One (Wed Mar 01 2000 - 12:52:48 PST)
• [Debian] New version of htdig released Aleph One (Wed Mar 01 2000 - 12:53:25 PST)
• Administrivia Elias Levy (Wed Mar 01 2000 - 14:39:33 PST)
• [XFree86 3.3.6] fix for race conditions in xterm logfile handling Branden Robinson (Wed Mar 01 2000 - 15:39:51 PST)
• How to Write Secure Code B Potter (Wed Mar 01 2000 - 16:51:48 PST)
• Distributing Patches in Email (was: RE: EZ Shopper 3.0 shopping Scott Blake (Wed Mar 01 2000 - 17:37:19 PST)
• fam Vulnerability SGI Security Coordinator (Wed Mar 01 2000 - 17:45:54 PST)
• Foundry Networks ServerIron sequence predictability fix soon to Andrew van der Stock (Wed Mar 01 2000 - 20:35:06 PST)
• Re: Addendum to Firewall-1 FTP Server Vulnerability Jacek Lipkowski (Thu Mar 02 2000 - 02:25:30 PST)
  • Re: Addendum to Firewall-1 FTP Server Vulnerability Mikael Olsson (Thu Mar 02 2000 - 13:53:54 PST)
• DNSTools v1.08 has no input validation Jonathan Leto (Thu Mar 02 2000 - 05:59:15 PST)
• Minor security problem in The Bat! 3APA3A (Thu Mar 02 2000 - 06:43:08 PST)
  • Re: Minor security problem in The Bat! Andrei Koulik (Sun Mar 05 2000 - 09:57:03 PST)
• Re: "Association of Responsible Internet Providers"? David Nesting (Thu Mar 02 2000 - 10:17:38 PST)
• infosrch.cgi vulnerability (IRIX 6.5) rpc (Thu Mar 02 2000 - 11:12:41 PST)
• X-Force Response to ISS RealSecure's ability to address modified X-Force (Thu Mar 02 2000 - 13:12:51 PST)
• MH also vulnerable to remote attack (was Re: nmh security update) Dan Harkless (Thu Mar 02 2000 - 16:37:37 PST)
• Re: [XFree86 3.3.6] fix for race conditions in xterm logfile Joel Klecker (Thu Mar 02 2000 - 16:52:09 PST)
  • Re: [XFree86 3.3.6] fix for race conditions in xterm logfile Olaf Kirch (Mon Mar 06 2000 - 01:35:05 PST)
• Potential security problem with mtr Viktor Fougstedt (Fri Mar 03 2000 - 07:42:24 PST)
  • Re: Potential security problem with mtr Rogier Wolff (Fri Mar 03 2000 - 15:40:38 PST)
  • Re: Potential security problem with mtr LaMont Jones (Fri Mar 03 2000 - 12:12:24 PST)
  • Re: Potential security problem with mtr Viktor Fougstedt (Fri Mar 03 2000 - 12:26:37 PST)
  • Re: Potential security problem with mtr Viktor Fougstedt (Sat Mar 04 2000 - 12:13:03 PST)
• Aol Instant Messenger DoS vulnerability hi im cruz (Fri Mar 03 2000 - 07:47:50 PST)
  • Re: Aol Instant Messenger DoS vulnerability Elias Levy (Mon Mar 06 2000 - 12:23:32 PST)
• TrendMicro OfficeScan, numerous security holes, Captain'z root (Fri Mar 03 2000 - 09:09:27 PST)
• Re: Distributing Patches in Email Dirk Nimmich (Fri Mar 03 2000 - 09:22:56 PST)
• Re: OfficeScan; additional observation Ben Greenbaum (Fri Mar 03 2000 - 11:21:27 PST)
  • Re: OfficeScan; additional observation Dan Schrader (Tue Mar 07 2000 - 10:36:54 PST)
• Pocsag remote access to client can't be disabled. Kuji (Fri Mar 03 2000 - 12:02:24 PST)
• Problem with MacOS 9 Multiple Users and Netware AFP Don Lambert (Fri Mar 03 2000 - 14:08:02 PST)
• Re: Distributing Patches in Email (was: RE: EZ Shopper 3.0 der Mouse (Fri Mar 03 2000 - 16:45:22 PST)
• NT Roaming Profiles blocked by NAV 7.x for Corp. Edition Peter Heath (Fri Mar 03 2000 - 20:57:04 PST)
• mtr-0.42 is out. Rogier Wolff (Sat Mar 04 2000 - 01:04:50 PST)
• OpenLinux 2.3: rpm_query harikiri (Sat Mar 04 2000 - 12:32:04 PST)
• (fwd) Dump/restore 0.4b15 released Derek Callaway (Sat Mar 04 2000 - 14:13:14 PST)
• Re: lynx - someone is deaf and blind ;) Kris Kennaway (Sat Mar 04 2000 - 22:09:06 PST)
  • Re: lynx - someone is deaf and blind ;) Mariusz Woloszyn (Tue Mar 07 2000 - 10:01:30 PST)
  • Re: lynx - someone is deaf and blind ;) Steve VanDevender (Wed Mar 08 2000 - 10:13:35 PST)
• ColdFusion Bug: Application.cfm shows full path vwaaijen (Sun Mar 05 2000 - 05:06:05 PST)
• Oracle installer problem Keyser Soze (Sun Mar 05 2000 - 18:32:06 PST)
• Roses Labs BisonWare FTP Advisory Conde Vampiro (Sun Mar 05 2000 - 20:17:04 PST)
• OFFICIAL RELEASE of the [device]\[device] advisory Zoa_Chien (Mon Mar 06 2000 - 02:13:23 PST)
• Re: Potential security problem with mtr - fixed Jeff Dafoe (Mon Mar 06 2000 - 07:24:56 PST)
• con\con is a old thing (anyway is cool) Ussr Labs (Mon Mar 06 2000 - 09:46:44 PST)
  • Re: con\con is a old thing (anyway is cool) Stephen White (Wed Mar 08 2000 - 07:01:53 PST)
  • Re: con\con is a old thing (anyway is cool) Elias Levy (Sat Mar 11 2000 - 14:43:21 PST)
• userv (security boundary tool) 1.0.0 released Ian Jackson (Mon Mar 06 2000 - 11:55:17 PST)
• [RHSA-2000:006-01] New nmh packages available bugzillaat_private (Mon Mar 06 2000 - 17:59:00 PST)
• Microsoft Security Bulletin (MS00-015) Microsoft Product Security (Mon Mar 06 2000 - 21:55:48 PST)
• (BisonWare FTP Server V3.5 Roses Labs Security Advisory) is a old Ussr Labs (Mon Mar 06 2000 - 23:27:40 PST)
• @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Weld Pond (Tue Mar 07 2000 - 06:10:03 PST)
  • Re: @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Dustin Miller (Tue Mar 07 2000 - 18:56:28 PST)
  • Re: @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Weld Pond (Wed Mar 08 2000 - 06:13:05 PST)
• PGP Signatures security BUG! Povl H. Pedersen (Tue Mar 07 2000 - 06:29:00 PST)
  • Re: PGP Signatures security BUG! Tobias Haustein (Wed Mar 08 2000 - 01:49:11 PST)
  • Re: PGP Signatures security BUG! Tobias Haustein (Wed Mar 08 2000 - 03:53:48 PST)
  • Re: PGP Signatures security BUG! Werner Koch (Wed Mar 08 2000 - 02:32:41 PST)
  • Re: PGP Signatures security BUG! Steven M. Bellovin (Wed Mar 08 2000 - 10:10:39 PST)
  • Re: PGP Signatures security BUG! Salzman, Noah (Wed Mar 08 2000 - 09:53:39 PST)
  • Re: PGP Signatures security BUG! Eric Murray (Wed Mar 08 2000 - 08:50:45 PST)
  • Re: PGP Signatures security BUG! Povl H. Pedersen (Thu Mar 09 2000 - 00:07:08 PST)
  • Re: PGP Signatures security BUG! Florian Weimer (Fri Mar 10 2000 - 10:11:58 PST)
• Re: Caldera OpenLinux 2.3 rpm_query Olaf Kirch (Tue Mar 07 2000 - 07:36:56 PST)
• NAI/McAfee Viruscan Engine does not scan .VBS files by default Bram Kerkhof (Tue Mar 07 2000 - 09:08:42 PST)
  • Re: NAI/McAfee Viruscan Engine does not scan .VBS files by default Roy Voortman (Wed Mar 08 2000 - 07:53:42 PST)
  • Re: NAI/McAfee Viruscan Engine does not scan .VBS files by default Eric Chien (Wed Mar 08 2000 - 01:50:54 PST)
  • Re: NAI/McAfee Viruscan Engine does not scan .VBS files by default Paul Hoffman (Thu Mar 09 2000 - 17:05:48 PST)
  • Re: NAI/McAfee Viruscan Engine does not scan .VBS files by default Roy Voortman (Fri Mar 10 2000 - 00:04:07 PST)
• Re: dump buffer overflow Lamagra Argamal (Tue Mar 07 2000 - 13:14:32 PST)
  • Re: dump buffer overflow Przemyslaw Frasunek (Wed Mar 08 2000 - 01:38:47 PST)
  • Re: dump buffer overflow Warner Losh (Wed Mar 08 2000 - 19:07:59 PST)
  • Re: dump buffer overflow Kris Kennaway (Wed Mar 08 2000 - 14:41:04 PST)
• TFN2K Analysis - Update 1.3 Jason Barlow (Tue Mar 07 2000 - 14:58:40 PST)
• RealServer exposes internal IP addresses tschweikleat_private (Wed Mar 08 2000 - 03:41:33 PST)
  • Re: RealServer exposes internal IP addresses Doug Monroe (Thu Mar 09 2000 - 08:18:37 PST)
• Re: NAI/McAfee Viruscan Engine does not scan .VBS files by defau Nick FitzGerald (Wed Mar 08 2000 - 04:30:49 PST)
• New online publication: "Computer Vulnerabilities" Eric Knight (Wed Mar 08 2000 - 06:29:54 PST)
• [SAFER 000309.EXP.1.4] StarScheduler (StarOffice) vulnerabilities Vanja Hrustic (Wed Mar 08 2000 - 09:36:56 PST)
• [ Hackerslab bug_paper ] Linux printtool get printer password Sheshep ankh Dubhe (Wed Mar 08 2000 - 11:43:43 PST)
  • Re: [ Hackerslab bug_paper ] Linux printtool get printer password Tuomas Jormola (Thu Mar 09 2000 - 04:57:53 PST)
• Realnetworks is trojaning people...again!!! pedwardat_private (Wed Mar 08 2000 - 14:36:25 PST)
  • Re: Realnetworks is trojaning people...again!!! Snorre Fagerland (Thu Mar 09 2000 - 00:45:19 PST)
• [TL-Security-Announce] mtr-0.41 and earlier TLSA2000003-1 (fwd) Katie Moussouris (Wed Mar 08 2000 - 17:47:44 PST)
• [TL-Security-Announce] man-1.5g-5 and earlier TLSA2000004-1 Jeremiah Johnson (Wed Mar 08 2000 - 19:07:17 PST)
• [TL-Security-Announce] htdig-3.1.2-1 and earlier TLSA200005-1 Katie Moussouris (Wed Mar 08 2000 - 19:41:19 PST)
• 12th Annual FIRST conference Roger Safian (Thu Mar 09 2000 - 06:23:56 PST)
• Enumerate Root Web Server Directory Vulnerability for IIS 4.0 Jason Lutz (Thu Mar 09 2000 - 07:32:07 PST)
• Realplayer update pedwardat_private (Thu Mar 09 2000 - 13:29:56 PST)
• Microsoft Security Bulletin (MS00-014) Microsoft Product Security (Thu Mar 09 2000 - 13:53:00 PST)
• [TL-Security-Announce] MySQL-3.22.27-5 and earlier TLSA200006-1 Katie Moussouris (Thu Mar 09 2000 - 15:28:02 PST)
• Microsoft Security Bulletin (MS00-008) Microsoft Product Security (Thu Mar 09 2000 - 17:40:58 PST)
• RealPlayer and Comet Cursor Keela Robison (Thu Mar 09 2000 - 19:10:04 PST)
  • Re: RealPlayer and Comet Cursor pedwardat_private (Thu Mar 09 2000 - 19:23:46 PST)
• The Comet Cursor Sarah MacArthur (Thu Mar 09 2000 - 20:37:36 PST)
• Network File Resource Vulnerability Eric Hacker (Thu Mar 09 2000 - 22:12:46 PST)
• Extending the FTP "ALG" vulnerability to any FTP client Mikael Olsson (Fri Mar 10 2000 - 01:54:16 PST)
  • Re: Extending the FTP "ALG" vulnerability to any FTP client Dug Song (Sat Mar 11 2000 - 13:05:45 PST)
• Linux patch for blocking buffer overflow based attacks massimoat_private (Fri Mar 10 2000 - 07:10:09 PST)
• ICQ remote DoS Philip Stoev (Fri Mar 10 2000 - 10:06:43 PST)
• Re: snmp problems still alive... Damir Rajnovic (Fri Mar 10 2000 - 10:23:30 PST)
• Many machines still vulnerable to ip fragment attacks Andrew Daviel (Fri Mar 10 2000 - 11:57:19 PST)
• 4 Netscape Navigator bugs Marc Slemko (Sat Mar 11 2000 - 00:04:27 PST)
• Kewlhair Security Advisory --DSL ROUTERS Andrew R. Siverly (Sat Mar 11 2000 - 02:14:42 PST)
• Fwd: The Bat! version 1.41 3APA3A (Sat Mar 11 2000 - 03:43:46 PST)
• TESO advisory -- atsadc krahmerat_private-POTSDAM.DE (Sat Mar 11 2000 - 06:32:17 PST)
• TESO advisory -- wmcdplay krahmerat_private-POTSDAM.DE (Sat Mar 11 2000 - 06:32:30 PST)
• New Solaris Vulnerability Calculator, Sun Mailing list, Jeremy Rauch (Mon Mar 13 2000 - 01:57:57 PST)

Last message date: Mon Mar 13 2000 - 01:57:57 PST
Archived on: Fri Apr 13 2001 - 15:39:43 PDT

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:39:43 PDT