bugtraq 2001/04
By Thread

Starting: Wed Dec 31 1969 - 15:59:59 PST
Ending: Tue May 01 2001 - 09:29:50 PDT

• (no subject) (Wed Dec 31 1969 - 16:00:00 PST)
• Re: [COVERT-2001-02] Globbing Vulnerabilities in Multiple FTP Daemons Chris Evans (Wed Apr 11 2001 - 15:12:57 PDT)
• Re: PIX Firewall 5.1 DoS Vulnerability Scott Raymond (Wed Apr 11 2001 - 16:22:33 PDT)
  • Re: PIX Firewall 5.1 DoS Vulnerability Adam Rothschild (Fri Apr 13 2001 - 11:00:15 PDT)
    • Re: PIX Firewall 5.1 DoS Vulnerability Mipam (Mon Apr 16 2001 - 07:01:59 PDT)
    • Re: PIX Firewall 5.1 DoS Vulnerability Carson Gaspar (Wed Apr 18 2001 - 12:47:40 PDT)
  • Re: PIX Firewall 5.1 DoS Vulnerability Snow, Corey (Thu Apr 19 2001 - 08:50:26 PDT)
• Re: flaw in RH ``mkpasswd'' command Thomas Roessler (Wed Apr 11 2001 - 17:02:45 PDT)
• Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Joey Hess (Wed Apr 11 2001 - 19:07:24 PDT)
  • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems teespy (Fri Apr 13 2001 - 09:42:33 PDT)
    • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Marcus Butler (Mon Apr 16 2001 - 12:55:57 PDT)
  • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Tom Perrine (Fri Apr 13 2001 - 10:32:10 PDT)
  • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Mark (Mookie) (Mon Apr 16 2001 - 04:14:05 PDT)
    • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Renaud Deraison (Mon Apr 16 2001 - 13:40:48 PDT)
    • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Tom Perrine (Mon Apr 16 2001 - 14:16:52 PDT)
  • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Hugo van der Kooij (Mon Apr 16 2001 - 03:11:21 PDT)
  • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems SpaceTime (Thu Apr 19 2001 - 05:34:32 PDT)
    • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Bryan K. Watson (Fri Apr 20 2001 - 10:24:16 PDT)
    • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Michael A. Nunes (Sun Apr 22 2001 - 11:13:32 PDT)
      • Re: multiple vulnerabilities in Alcatel Speed Touch DSL modems Matthew Schalit (Mon Apr 23 2001 - 15:52:19 PDT)
• Re: Solaris Xsun buffer overflow vulnerability Alan Coopersmith (Wed Apr 11 2001 - 21:18:47 PDT)
  • Re: Solaris Xsun buffer overflow vulnerability Casper Dik (Thu Apr 12 2001 - 00:19:32 PDT)
• IOS and NTP Damir Rajnovic (Thu Apr 12 2001 - 01:18:58 PDT)
• Apache Win32 8192 chars string bug Auriemma Luigi (Thu Apr 12 2001 - 04:56:49 PDT)
• PROGENY-SA-2001-04: OpenSSH subject to traffic analysis Progeny Security Team (Thu Apr 12 2001 - 12:03:53 PDT)
• FTPD Globbing vulnerability in Solaris 8 John Weidley (Thu Apr 12 2001 - 12:54:02 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:31.ntpd FreeBSD Security Advisories (Thu Apr 12 2001 - 13:58:18 PDT)
• Re: ntp-4.0.99k23 had been updated Sylvain Robitaille (Thu Apr 12 2001 - 14:24:30 PDT)
• Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! Crist Clark (Thu Apr 12 2001 - 15:26:42 PDT)
  • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! Jasper Jans (Thu Apr 12 2001 - 01:17:37 PDT)
  • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! Half Adder (Fri Apr 13 2001 - 06:45:05 PDT)
  • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! ghandi (Fri Apr 13 2001 - 09:33:29 PDT)
  • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! Konrad Rieck (Mon Apr 16 2001 - 12:13:13 PDT)
  • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! Warning3 (Mon Apr 16 2001 - 23:44:49 PDT)
    • Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit ! elliptic (Wed Apr 18 2001 - 01:49:14 PDT)
• Solaris ipcs vulnerability Marc Maiffret (Thu Apr 12 2001 - 18:07:08 PDT)
  • Re: Solaris ipcs vulnerability Scott Howard (Fri Apr 13 2001 - 16:10:04 PDT)
  • Re: Solaris ipcs vulnerability ARAI Yuu (Mon Apr 16 2001 - 09:32:03 PDT)
  • Re: Solaris ipcs vulnerability Mike Batchelor (Mon Apr 16 2001 - 07:22:15 PDT)
  • Re: Solaris ipcs vulnerability Neil W Rickert (Mon Apr 16 2001 - 05:43:04 PDT)
    • Re: Solaris ipcs vulnerability Dan Astoorian (Tue Apr 17 2001 - 08:52:23 PDT)
  • Re: Solaris ipcs vulnerability SChoe (Mon Apr 16 2001 - 13:47:01 PDT)
  • Re: Solaris ipcs vulnerability Robert Sink (Mon Apr 16 2001 - 13:48:06 PDT)
    • Re: Solaris ipcs vulnerability Robert Varga (Tue Apr 17 2001 - 03:30:17 PDT)
    • Re: Solaris ipcs vulnerability Filipe Almeida (Tue Apr 17 2001 - 05:41:05 PDT)
    • Re: Solaris ipcs vulnerability Sven C. Koehler (Tue Apr 17 2001 - 04:58:17 PDT)
  • Re: Solaris ipcs vulnerability Robert G. Ferrell (Tue Apr 17 2001 - 05:26:16 PDT)
• [LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more. ET LoWNOISE (Thu Apr 12 2001 - 21:28:48 PDT)
• mkpasswd: acutally its worse than just not many passwords zenith parsec (Thu Apr 12 2001 - 22:29:42 PDT)
• Trend Micro Interscan VirusWall 3.01 vulnerability eEye Digital Security (Fri Apr 13 2001 - 04:33:55 PDT)
• SUN SOLARIS FTP GLOBBING Johnny Cyberpunk (Fri Apr 13 2001 - 06:04:16 PDT)
• Re: SUN SOLARIS FTP Globbing Exploit Auriemma Luigi (Fri Apr 13 2001 - 05:10:02 PDT)
• PROGENY-SA-2001-02A: [UPDATE] ntpd remote buffer overflow Progeny Security Team (Fri Apr 13 2001 - 09:05:50 PDT)
• Administrivia: SECTOOLS, SECPAPERS, SECEVENTS, & SECPROD Elias Levy (Sun Apr 15 2001 - 22:55:16 PDT)
• QPC POPd Buffer Overflow Vulnerability SNS Research (Fri Apr 13 2001 - 12:12:23 PDT)
• Re: Reliant Unix 5.43 / 5.44 ICMP port unreachable problem Pablo Ruiz Garcia (Sat Apr 14 2001 - 07:55:58 PDT)
• Re: Apache Win32 8192 chars string bug: LOG FILES EMPTY Auriemma Luigi (Sun Apr 15 2001 - 15:44:38 PDT)
• Remote BSD ftpd glob exploit fish stiqz (Sat Apr 14 2001 - 13:41:43 PDT)
  • Re: Remote BSD ftpd glob exploit Przemyslaw Frasunek (Mon Apr 16 2001 - 01:45:19 PDT)
• QPC FTPd Directory Traversal and BoF Vulnerabilities SNS Research (Fri Apr 13 2001 - 12:13:17 PDT)
  • Re: QPC FTPd Directory Traversal and BoF Vulnerabilities Crono (Wed Apr 18 2001 - 02:21:53 PDT)
    • Re: QPC FTPd Directory Traversal and BoF Vulnerabilities Xander Teunissen (Wed Apr 18 2001 - 10:53:06 PDT)
• new advisory UkR hacking team (Sat Apr 14 2001 - 19:13:46 PDT)
  • Re: new advisory dynamo (Mon Apr 16 2001 - 06:45:50 PDT)
• [SECURITY] [DSA-047-1] multiple kernel problems debian-security-announceat_private (Sun Apr 15 2001 - 17:08:57 PDT)
• **SECURITY ADVISORY** - HylaFAX format string vulnerability Darren Nickerson (Sat Apr 14 2001 - 23:23:43 PDT)
• [SECURITY] [DSA-046-1] exuberant-ctags uses insecure temporary files debian-security-announceat_private (Sun Apr 15 2001 - 05:24:34 PDT)
• BubbleMon 1.31 Christer Öberg (Sun Apr 15 2001 - 16:12:53 PDT)
• Cisco Security Advisory: Catalyst 5000 Series 802.1x Vulnerability Cisco Systems Product Security Incident Response Team (Mon Apr 16 2001 - 09:16:11 PDT)
• Double clicking on innocent looking files may be dangerous Georgi Guninski (Mon Apr 16 2001 - 07:23:51 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Nexus (Mon Apr 16 2001 - 14:31:08 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Jurjen Oskam (Mon Apr 16 2001 - 13:23:20 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Vittal Aithal (Tue Apr 17 2001 - 02:10:30 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Riddoch, John ESSI-ISEP-3 (Tue Apr 17 2001 - 02:31:15 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Kuo, Jimmy (Tue Apr 17 2001 - 01:16:09 PDT)
    • Re: Double clicking on innocent looking files may be dangerous Georgi Guninski (Tue Apr 17 2001 - 10:39:46 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Philip Stoev (Tue Apr 17 2001 - 00:36:10 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Gary Flynn (Tue Apr 17 2001 - 06:25:42 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Michael C. Bazarewsky (Tue Apr 17 2001 - 13:47:27 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Gary Flynn (Wed Apr 18 2001 - 10:11:20 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Dzzie Z (Tue Apr 17 2001 - 13:51:22 PDT)
  • Re: Double clicking on innocent looking files may be dangerous [Co]Proc (Wed Apr 25 2001 - 00:19:45 PDT)
    • Re: Double clicking on innocent looking files may be dangerous Nicolas Gregoire (Thu Apr 26 2001 - 00:32:09 PDT)
  • Re: Double clicking on innocent looking files may be dangerous Elias Levy (Thu Apr 26 2001 - 22:38:42 PDT)
• [SX-20010320-2] - Microsoft ISA Server Denial of Service SecureXpert DIRECT Bulletin Service (Mon Apr 16 2001 - 08:47:59 PDT)
  • Re: [SX-20010320-2] - Microsoft ISA Server Denial of Service Richard M. Smith (Tue Apr 17 2001 - 04:32:57 PDT)
• OpenBSD 2.8 ftpd/glob exploit (breaks chroot) Tomas Kindahl (Mon Apr 16 2001 - 06:50:50 PDT)
  • Re: OpenBSD 2.8 ftpd/glob exploit (breaks chroot) Bill Sommerfeld (Wed Apr 18 2001 - 07:01:51 PDT)
    • Re: OpenBSD 2.8 ftpd/glob exploit (breaks chroot) Peter van Dijk (Wed Apr 18 2001 - 12:11:39 PDT)
    • Re: OpenBSD 2.8 ftpd/glob exploit (breaks chroot) Chris Evans (Wed Apr 18 2001 - 14:35:46 PDT)
    • Re: OpenBSD 2.8 ftpd/glob exploit (breaks chroot) Michal Zalewski (Wed Apr 18 2001 - 20:22:38 PDT)
• Microsoft Security Bulletin MS01-021 Microsoft Product Security (Mon Apr 16 2001 - 07:20:48 PDT)
• ActiveSync can access a locked workstation w/o unlocking Jeff.Samples (Mon Apr 16 2001 - 05:05:49 PDT)
  • Re: ActiveSync can access a locked workstation w/o unlocking Microsoft Security Response Center (Mon Apr 16 2001 - 13:36:44 PDT)
  • Re: ActiveSync can access a locked workstation w/o unlocking Melody Yoon - KF6RMW (Mon Apr 16 2001 - 13:51:35 PDT)
• Remote BSD ftpd exploit (revised) fish stiqz (Mon Apr 16 2001 - 00:07:25 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:32.ipfilter FreeBSD Security Advisories (Mon Apr 16 2001 - 12:37:22 PDT)
• [RHSA-2001:047-03] Linux kernel 2.2.19 now available, provides security fixes, enhancements bugzillaat_private (Mon Apr 16 2001 - 12:29:00 PDT)
  • Re: [RHSA-2001:047-03] Linux kernel 2.2.19 now available, provides security fixes, enhancements Viraj Alankar (Tue Apr 17 2001 - 19:10:20 PDT)
    • Re: [RHSA-2001:047-03] Linux kernel 2.2.19 now available, provides security fixes, enhancements Hugo van der Kooij (Wed Apr 18 2001 - 03:59:34 PDT)
• Immunix OS Security update for netscape Greg KH (Mon Apr 16 2001 - 16:50:11 PDT)
  • Re: Immunix OS Security update for netscape Atro Tossavainen (Fri Apr 20 2001 - 02:40:11 PDT)
    • Re: Immunix OS Security update for netscape Greg KH (Fri Apr 20 2001 - 08:34:08 PDT)
      • Re: Immunix OS Security update for netscape Crispin Cowan (Sat Apr 21 2001 - 11:42:57 PDT)
• Immunix OS Security update for pine Greg KH (Mon Apr 16 2001 - 16:50:45 PDT)
• qDefense Advisory: DCForum allows remote read/write/execute Franklin DeMatto (Mon Apr 16 2001 - 18:30:24 PDT)
  • Re: qDefense Advisory: DCForum allows remote read/write/execute Wolfgang Wiese (Tue Apr 17 2001 - 02:07:15 PDT)
    • Re: qDefense Advisory: DCForum allows remote read/write/execute Franklin DeMatto (Tue Apr 17 2001 - 07:20:09 PDT)
      • Re: qDefense Advisory: DCForum allows remote read/write/execute adminat_private (Tue Apr 17 2001 - 10:51:44 PDT)
  • Re: qDefense Advisory: DCForum allows remote read/write/execute MegaZone (Wed Apr 18 2001 - 13:40:49 PDT)
• Tempest Security Techonologies -- Adivsory #01/2001 -- Linux IPTables Cristiano Lincoln Mattos (Mon Apr 16 2001 - 15:52:28 PDT)
• SSE074: (SCO) UnixWare 7 NTP buffer overflow fix Albert Fu (Mon Apr 16 2001 - 16:48:00 PDT)
• Advisory for Xitami 2.4d7, 2.5d4 neme-dhcat_private (Tue Apr 17 2001 - 07:41:03 PDT)
  • Re: Advisory for Xitami 2.4d7, 2.5d4 Ewen McNeill (Wed Apr 18 2001 - 03:51:02 PDT)
• [SX-20010320-2b] - Followup re. Microsoft ISA Server Denial of Service SecureXpert DIRECT Bulletin Service (Tue Apr 17 2001 - 09:02:34 PDT)
• Advisory for Viking neme-dhcat_private (Tue Apr 17 2001 - 07:45:02 PDT)
• [CLA-2001:393] Conectiva Linux Security Announcement - netscape secureat_private (Tue Apr 17 2001 - 07:46:42 PDT)
• iPlanet Web Server 4.x Product Alert Santi Claus (Tue Apr 17 2001 - 05:42:47 PDT)
  • Re: iPlanet Web Server 4.x Product Alert Glen Shere (Tue Apr 17 2001 - 13:07:58 PDT)
    • Re: iPlanet Web Server 4.x Product Alert Perrier,Kent - PLANO (Wed Apr 18 2001 - 06:58:39 PDT)
• Advisory for GoAhead Webserver v2.1 neme-dhcat_private (Tue Apr 17 2001 - 07:50:09 PDT)
• Advisory for Lotus Domino webserver neme-dhcat_private (Tue Apr 17 2001 - 07:50:40 PDT)
  • Re: Advisory for Lotus Domino webserver Javier Fernandez-Sanguino Peña (Tue Apr 17 2001 - 10:32:18 PDT)
• Advisory for SimpleServer:WWW (analogX) neme-dhcat_private (Tue Apr 17 2001 - 07:51:29 PDT)
• Re: Double clicking on innocent looking files may be da ngerous Michael Wojcik (Tue Apr 17 2001 - 10:37:21 PDT)
  • Re: Double clicking on innocent looking files may be da ngerous Nick FitzGerald (Mon Apr 23 2001 - 01:26:55 PDT)
• ntp and AIX Fernan Rodriguez Cespedes (Tue Apr 17 2001 - 09:05:45 PDT)
• Re: ActiveSync can access a locked workstation w/o unlo cking Snow, Corey (Tue Apr 17 2001 - 08:53:55 PDT)
• Eudora file leakage problem (still) Magnus Bodin (Tue Apr 17 2001 - 21:23:56 PDT)
• [SECURITY] [DSA-048-1] samba symlink attacks debian-security-announceat_private (Tue Apr 17 2001 - 17:14:41 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:33.ftpd-glob FreeBSD Security Advisories (Tue Apr 17 2001 - 12:09:42 PDT)
• Immunix OS Security update for samba Chris Wright (Tue Apr 17 2001 - 18:40:31 PDT)
• Samba 2.0.8 security fix tridgeat_private (Tue Apr 17 2001 - 17:06:48 PDT)
  • Re: Samba 2.0.8 security fix Boyce, Nick (Wed Apr 18 2001 - 10:09:16 PDT)
    • Re: Samba 2.0.8 security fix tridgeat_private (Wed Apr 18 2001 - 20:42:49 PDT)
• MDKSA-2001:037 - kernel update Linux Mandrake Security Team (Tue Apr 17 2001 - 13:31:46 PDT)
• Innfeed Buffer Overflow Enrique A. Sanchez Montellano (Wed Apr 18 2001 - 00:46:26 PDT)
  • Re: Innfeed Buffer Overflow Hugo van der Kooij (Wed Apr 18 2001 - 11:44:29 PDT)
  • Re: Innfeed Buffer Overflow Russ Allbery (Wed Apr 18 2001 - 23:01:25 PDT)
• Cyberscheduler remote root compromise Enrique A. Sanchez Montellano (Wed Apr 18 2001 - 00:39:09 PDT)
• IBM MSS Outside Advisory Redistribution: IBM AIX: Buffer Overflow Vulnerability in (x)ntp IBM MSS Advisory Service (Wed Apr 18 2001 - 03:59:09 PDT)
• TSLSA-#2001-0005 - samba tslat_private (Wed Apr 18 2001 - 07:42:40 PDT)
• iplanet calendar server 5.0p2 exposes Netscape Admin Server master password Adam Laurie (Wed Apr 18 2001 - 07:01:15 PDT)
• Netscape SmartDownload 1.3 Buffer Overflow Vulnerability Alfred Huger (Wed Apr 18 2001 - 16:18:02 PDT)
• [SECURITY] [DSA-048-1] remote cfingerd exploit debian-security-announceat_private (Wed Apr 18 2001 - 18:24:33 PDT)
• Microsoft Security Bulletin MS01-022 Microsoft Product Security (Wed Apr 18 2001 - 19:27:05 PDT)
• IRIX BIND Vulnerabilities SGI Security Coordinator (Wed Apr 18 2001 - 15:02:32 PDT)
• Security Advisory: samaba security problems CSSA-2001-015.0 Caldera Support Information (Wed Apr 18 2001 - 12:55:22 PDT)
• PROGENY-SA-2001-05: Samba /tmp vulnerabilities Progeny Security Team (Wed Apr 18 2001 - 11:03:54 PDT)
• VMware symlink problems Paul Starzetz (Wed Apr 18 2001 - 09:05:49 PDT)
  • Re: VMware symlink problems peterwat_private (Thu Apr 19 2001 - 14:57:54 PDT)
• Oracle8 denial of service r0otat_private (Wed Apr 18 2001 - 16:16:20 PDT)
  • Re: Oracle8 denial of service Tibor Gemes (Tue Apr 24 2001 - 02:28:37 PDT)
  • Re: Oracle8 denial of service Guy Poizat (Wed Apr 25 2001 - 01:50:20 PDT)
  • Re: Oracle8 denial of service James W. Abendschan (Thu Apr 26 2001 - 13:14:41 PDT)
    • Re: Re: Oracle8 denial of service Siddhartha Jain (Fri Apr 27 2001 - 07:30:08 PDT)
  • Re: Oracle8 denial of service Steve Blair (Sat Apr 28 2001 - 11:16:53 PDT)
    • Re: Oracle8 denial of service Ron Cohen (Sat Apr 28 2001 - 16:13:18 PDT)
• Insecure directory handling in KFM file manager Paul Starzetz (Wed Apr 18 2001 - 12:40:49 PDT)
• Hole in Netopia's Mac OS X Timbuktu Macintosh Security (Wed Apr 18 2001 - 21:52:32 PDT)
• Re: Double clicking on innocent looking files Frank Heyne (Wed Apr 18 2001 - 02:10:06 PDT)
  • Re: Double clicking on innocent looking files John H. Robinson, IV (Thu Apr 19 2001 - 20:31:40 PDT)
• [SECURITY] [DSA-046-2] exuberant-ctags for sparc was incorrectly built debian-security-announceat_private (Thu Apr 19 2001 - 02:06:50 PDT)
• SECURITY.NNOV: The Bat! <cr> bug 3APA3A (Wed Apr 18 2001 - 06:04:56 PDT)
  • Re: SECURITY.NNOV: The Bat! <cr> bug -mat- filid brandy (Sat Apr 21 2001 - 11:19:00 PDT)
    • Re: SECURITY.NNOV: The Bat! <cr> bug Nick FitzGerald (Sun Apr 22 2001 - 16:06:21 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Peter van Dijk (Mon Apr 23 2001 - 13:35:46 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Nick FitzGerald (Wed Apr 25 2001 - 01:42:34 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Chris Thompson (Mon Apr 23 2001 - 13:38:16 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug William D. Colburn (aka Schlake) (Mon Apr 23 2001 - 22:19:46 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug hurtta+z3at_private (Tue Apr 24 2001 - 03:26:34 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Nick FitzGerald (Wed Apr 25 2001 - 01:42:34 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Rich Lafferty (Wed Apr 25 2001 - 10:01:34 PDT)
    • Re: SECURITY.NNOV: The Bat! <cr> bug 3APA3A (Mon Apr 23 2001 - 01:46:23 PDT)
      • Re: SECURITY.NNOV: The Bat! <cr> bug Maxim Masiutin (Mon Apr 23 2001 - 03:40:38 PDT)
• AGAIN: Tested on Windows 98 with 'free' Opera 5.02 Build 856a (No Java Runtime Environment installed) http-equivat_private (Thu Apr 19 2001 - 00:01:30 PDT)
• SuSE Security Announcement: sudo (SuSE-SA:2001:13) Thomas Biege (Thu Apr 19 2001 - 02:54:51 PDT)
• SuSE Security Announcement: nedit (SuSE-SA:2001:14) Thomas Biege (Thu Apr 19 2001 - 02:56:33 PDT)
• [SECURITY] [DSA-048-2] samba for sparc was incorrectly built debian-security-announceat_private (Thu Apr 19 2001 - 02:14:43 PDT)
• [CLA-2001:394] Conectiva Linux Security Announcement - kernel secureat_private (Thu Apr 19 2001 - 10:42:38 PDT)
• PROGENY-SA-2001-07: Netscape Navigator fails to protect privacy Progeny Security Team (Thu Apr 19 2001 - 17:26:36 PDT)
• [SECURITY] [DSA 050-1] New version sendfile fix local root exploit debian-security-announceat_private (Thu Apr 19 2001 - 17:29:02 PDT)
• CheckBO Win9x memo overflow Auriemma Luigi (Thu Apr 19 2001 - 15:32:50 PDT)
• OpenBSD 2.8patched Apache vuln! zvz (Thu Apr 19 2001 - 11:34:26 PDT)
• [RHSA-2001:052-02] FTP iptables vulnerability in 2.4 kernel bugzillaat_private (Thu Apr 19 2001 - 13:00:00 PDT)
• Re: Oracle8 denial of service (fwd) Stephen Oberther (Fri Apr 20 2001 - 07:12:47 PDT)
  • Re: Oracle8 denial of service (fwd) James W. Abendschan (Fri Apr 20 2001 - 13:04:25 PDT)
• Apology: Advisory numbering confusion Olle Segerdahl (Fri Apr 20 2001 - 06:31:03 PDT)
• [CLA-2001:395] Conectiva Linux Security Announcement - samba secureat_private (Thu Apr 19 2001 - 12:09:04 PDT)
• Bug in Cisco CBOS v2.3.0.053 Povl H. Pedersen (Fri Apr 20 2001 - 02:56:17 PDT)
  • Re: Bug in Cisco CBOS v2.3.0.053 Damir Rajnovic (Fri Apr 20 2001 - 12:55:55 PDT)
    • Re: Bug in Cisco CBOS v2.3.0.053 Matthew Rench (Mon Apr 23 2001 - 09:05:00 PDT)
• PROGENY-SA-2001-06: Remote vulnerability in cfingerd Progeny Security Team (Thu Apr 19 2001 - 13:58:30 PDT)
• XML scripting in IE, Outlook Express Georgi Guninski (Fri Apr 20 2001 - 04:39:48 PDT)
  • Re: XML scripting in IE, Outlook Express Toni Lassila (Sun Apr 22 2001 - 22:45:37 PDT)
    • Re: XML scripting in IE, Outlook Express Georgi Guninski (Wed Apr 25 2001 - 07:08:26 PDT)
      • Re: XML scripting in IE, Outlook Express Ken Pfeil (Wed Apr 25 2001 - 09:34:22 PDT)
      • Re: XML scripting in IE, Outlook Express Rick Updegrove (Thu Apr 26 2001 - 20:01:14 PDT)
      • Re: XML scripting in IE, Outlook Express Rick Updegrove (Sat Apr 28 2001 - 21:28:10 PDT)
      • Re: XML scripting in IE, Outlook Express David LeBlanc (Thu Apr 26 2001 - 07:40:26 PDT)
  • Re: XML scripting in IE, Outlook Express Leif Sawyer (Wed Apr 25 2001 - 09:45:49 PDT)
  • Re: XML scripting in IE, Outlook Express Francis Favorini (Wed Apr 25 2001 - 10:39:39 PDT)
  • Re: XML scripting in IE, Outlook Express Farley, Tim (ISSAtlanta) (Wed Apr 25 2001 - 10:07:48 PDT)
  • Re: XML scripting in IE, Outlook Express http-equivat_private (Thu Apr 26 2001 - 09:10:14 PDT)
    • Re: XML scripting in IE, Outlook Express Ben Ford (Mon Apr 30 2001 - 10:25:31 PDT)
• SuSE Security Announcement: hylafax (SuSE-SA:2001:15) Thomas Biege (Fri Apr 20 2001 - 02:39:14 PDT)
• [RHSA-2001:050-04] Updated mgetty packages available bugzillaat_private (Fri Apr 20 2001 - 11:04:00 PDT)
• Novell BorderManager 3.5 VPN Denial of Service Richard Bartlett (Fri Apr 20 2001 - 11:41:31 PDT)
  • Re: Novell BorderManager 3.5 VPN Denial of Service Randy Mclean (Thu Apr 26 2001 - 06:24:17 PDT)
• MDKSA-2001:040 - samba update Linux Mandrake Security Team (Fri Apr 20 2001 - 11:27:16 PDT)
• [FYI] Mac OS 9 Multiple Users weakness fixed (was: Mac OS 9 Multiple Users Control Panel Password Vulnerability) Terje Bless (Fri Apr 20 2001 - 06:05:14 PDT)
• Linux patches to solve /tmp race problem Donaldson, Matthew (Fri Apr 20 2001 - 05:58:07 PDT)
  • Re: Linux patches to solve /tmp race problem Christoph Hellwig (Sun Apr 22 2001 - 06:12:03 PDT)
    • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Sun Apr 22 2001 - 22:09:22 PDT)
      • Re: Linux patches to solve /tmp race problem Christoph Hellwig (Mon Apr 23 2001 - 03:02:28 PDT)
      • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Mon Apr 23 2001 - 06:25:17 PDT)
      • Re: Linux patches to solve /tmp race problem Tollef Fog Heen (Tue Apr 24 2001 - 01:15:01 PDT)
      • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Tue Apr 24 2001 - 03:43:30 PDT)
      • Re: Linux patches to solve /tmp race problem Tollef Fog Heen (Tue Apr 24 2001 - 06:34:24 PDT)
      • Re: Linux patches to solve /tmp race problem Valdis Kletnieks (Wed Apr 25 2001 - 07:05:58 PDT)
      • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Wed Apr 25 2001 - 08:44:18 PDT)
      • Re: Linux patches to solve /tmp race problem Valdis Kletnieks (Wed Apr 25 2001 - 08:58:49 PDT)
      • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Thu Apr 26 2001 - 06:40:37 PDT)
      • Re: Linux patches to solve /tmp race problem Michal Zalewski (Thu Apr 26 2001 - 03:08:51 PDT)
      • Re: Linux patches to solve /tmp race problem Kurt Seifried (Tue Apr 24 2001 - 23:04:03 PDT)
      • Re: Linux patches to solve /tmp race problem Tollef Fog Heen (Wed Apr 25 2001 - 09:25:08 PDT)
      • Re: Linux patches to solve /tmp race problem Crispin Cowan (Mon Apr 23 2001 - 17:50:39 PDT)
  • Re: Linux patches to solve /tmp race problem Chris Wright (Mon Apr 23 2001 - 15:30:42 PDT)
    • Re: Linux patches to solve /tmp race problem Donaldson, Matthew (Wed Apr 25 2001 - 21:35:28 PDT)
• Lucent security contact Mitchell Henderson (Fri Apr 20 2001 - 12:15:16 PDT)
  • Re: Lucent security contact Roger Fajman (Sun Apr 22 2001 - 11:46:08 PDT)
  • Re: Lucent security contact David J. Cavuto (Tue Apr 24 2001 - 07:43:43 PDT)
• PROGENY-SA-2001-08: Local root vulnerability in sendfiled Progeny Security Team (Fri Apr 20 2001 - 11:11:35 PDT)
• Microsoft Security Bulletin MS01-015 (version 2.0) Microsoft Product Security (Fri Apr 20 2001 - 17:40:18 PDT)
• Fw: [net-com] Bug in Mirc v5.82 Chris King (Sun Apr 22 2001 - 06:26:55 PDT)
  • Re: Fw: [net-com] Bug in Mirc v5.82 Gossi The Dog (Sun Apr 22 2001 - 12:58:27 PDT)
    • Re: Fw: [net-com] Bug in Mirc v5.82 Gossi The Dog (Mon Apr 23 2001 - 13:38:01 PDT)
  • Re: [net-com] Bug in Mirc v5.82 Chris Huseman (Sun Apr 22 2001 - 19:44:36 PDT)
• Mercury for NetWare POP3 server vulnerable to remote buffer overflow Przemyslaw Frasunek (Sat Apr 21 2001 - 01:52:15 PDT)
  • Re: Mercury for NetWare POP3 server vulnerable to remote buffer overflow Przemyslaw Frasunek (Sun Apr 22 2001 - 11:30:15 PDT)
    • Re: Mercury for NetWare POP3 server vulnerable to remote buffer overflow Atro Tossavainen (Tue Apr 24 2001 - 03:09:59 PDT)
      • Re: Mercury for NetWare POP3 server vulnerable to remote buffer overflow Przemyslaw Frasunek (Tue Apr 24 2001 - 23:32:40 PDT)
  • Re: Mercury for NetWare POP3 server vulnerable to remote buffer overflow Adam Osuchowski (Sun Apr 22 2001 - 11:33:28 PDT)
• Redhat 7 insecure umask Drew Jones (Fri Apr 20 2001 - 13:41:05 PDT)
  • Re: Redhat 7 insecure umask Rebecca Kastl (Sun Apr 22 2001 - 12:30:23 PDT)
    • Re: Redhat 7 insecure umask Rebecca Kastl (Tue Apr 24 2001 - 10:37:28 PDT)
    • Re: Redhat 7 insecure umask Warren Young (Tue Apr 24 2001 - 08:13:38 PDT)
  • Re: Redhat 7 insecure umask Jim Knoble (Sun Apr 22 2001 - 14:05:07 PDT)
• Re: Oracle 8 denial of service Dave Lee (Fri Apr 20 2001 - 12:13:39 PDT)
• WFTPD "Pro" 3.0 R4 Buffer Overflow Len Budney (Sun Apr 22 2001 - 13:20:00 PDT)
  • Re: WFTPD "Pro" 3.0 R4 Buffer Overflow Alun Jones (Mon Apr 23 2001 - 12:44:55 PDT)
    • GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow' Alun Jones (Tue Apr 24 2001 - 15:22:46 PDT)
      • Re: GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow' Alun Jones (Wed Apr 25 2001 - 14:43:48 PDT)
• [SECURITY] [DSA 051-1] New Netscape packages available debian-security-announceat_private (Mon Apr 23 2001 - 03:06:50 PDT)
• (SRPRE00004) WebCalendar 0.9.26 Asher Glynn (Mon Apr 23 2001 - 07:13:32 PDT)
• [SECURITY] [DSA 052-1] New sendfile packages fix root exploit debian-security-announceat_private (Mon Apr 23 2001 - 03:23:43 PDT)
• (SRPRE00002) phpSecurePages 0.23 beta Asher Glynn (Mon Apr 23 2001 - 07:14:18 PDT)
• Re: Multiple vendors FTP denial of service Alun Jones (Mon Apr 23 2001 - 07:27:20 PDT)
• (SRPRE00001) phpMyAdmin 2.1.0 and phpPgAdmin 2.2.1 Asher Glynn (Mon Apr 23 2001 - 07:15:00 PDT)
• Vulnerability in Viking Web Server joetestaat_private (Mon Apr 23 2001 - 17:59:22 PDT)
• ALCATEL Speed Touch PRO port redirect exploit Stefano Chiccarelli (Tue Apr 24 2001 - 01:15:32 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:35.licq FreeBSD Security Advisories (Mon Apr 23 2001 - 20:20:32 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01: FreeBSD Security Advisories (Mon Apr 23 2001 - 20:17:03 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:37.slrn FreeBSD Security Advisories (Mon Apr 23 2001 - 20:25:34 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:36.samba FreeBSD Security Advisories (Mon Apr 23 2001 - 20:22:44 PDT)
• security bulletins digest Oonk, Patrick (Tue Apr 24 2001 - 06:17:09 PDT)
• Advisory for perl webserver neme-dhcat_private (Tue Apr 24 2001 - 06:14:55 PDT)
  • Re: Advisory for perl webserver NESTING, DAVID M (SBCSI) (Wed Apr 25 2001 - 10:18:35 PDT)
  • Re: Advisory for perl webserver neme-dhcat_private (Thu Apr 26 2001 - 07:53:23 PDT)
• Advisory for Netcruiser neme-dhcat_private (Tue Apr 24 2001 - 06:13:55 PDT)
• Advisory for Small HTTP Server neme-dhcat_private (Tue Apr 24 2001 - 06:15:33 PDT)
• FreeBSD Security Advisory FreeBSD-SA-01:38.sudo FreeBSD Security Advisories (Mon Apr 23 2001 - 20:25:42 PDT)
• Re: x86 vulnerability ? Majid Almassari (Tue Apr 24 2001 - 15:44:01 PDT)
  • Re: x86 vulnerability ? Eric Hall (Tue Apr 24 2001 - 16:27:33 PDT)
  • Re: x86 vulnerability ? Andrew R. Reiter (Tue Apr 24 2001 - 15:03:27 PDT)
  • Re: x86 vulnerability ? Casper Dik (Wed Apr 25 2001 - 13:15:27 PDT)
• IPSwitch IMail 6.06 SMTP Remote System Access Vulnerability eEye Digital Security (Tue Apr 24 2001 - 17:32:40 PDT)
• MDKSA-2001:041 - hylafax update Linux Mandrake Security Team (Tue Apr 24 2001 - 19:18:00 PDT)
• OpenSSL-0.9.6a has security fixes Jim Knoble (Tue Apr 24 2001 - 12:40:07 PDT)
  • Re: OpenSSL-0.9.6a has security fixes Ariel Waissbein (Wed Apr 25 2001 - 11:33:13 PDT)
    • Re: OpenSSL-0.9.6a has security fixes Markus Friedl (Thu Apr 26 2001 - 00:10:14 PDT)
  • Re: OpenSSL-0.9.6a has security fixes Dan Riley (Thu Apr 26 2001 - 08:06:28 PDT)
  • Re: OpenSSL-0.9.6a has security fixes Steven M. Bellovin (Thu Apr 26 2001 - 10:08:18 PDT)
• Re. : x86 vulnerability Johnny Cyberpunk * (Wed Apr 25 2001 - 00:34:04 PDT)
  • Re: x86 vulnerability Florian Weimer (Thu Apr 26 2001 - 06:41:49 PDT)
    • Re: x86 vulnerability Matt Chapman (Thu Apr 26 2001 - 17:29:48 PDT)
      • Re: x86 vulnerability Matt Chapman (Thu Apr 26 2001 - 19:24:01 PDT)
    • Re: x86 vulnerability Solar Designer (Fri Apr 27 2001 - 20:56:44 PDT)
• Security advisory: krb5 ftpd buffer overflows Tom Yu (Wed Apr 25 2001 - 17:51:48 PDT)
• Vulnerabilities in RaidenFTPD Server joetestaat_private (Wed Apr 25 2001 - 18:13:06 PDT)
• [RHSA-2001:053-06] gftp format string vulnerability corrected bugzillaat_private (Wed Apr 25 2001 - 13:30:00 PDT)
• MDKSA-2001:042 - nedit update Linux Mandrake Security Team (Wed Apr 25 2001 - 12:33:10 PDT)
• IRIX /usr/lib/print/netprint local root symbols exploit. v9at_private (Wed Apr 25 2001 - 22:51:10 PDT)
  • Re: IRIX /usr/lib/print/netprint local root symbols exploit. Dale Southard (Thu Apr 26 2001 - 15:47:27 PDT)
    • Re: IRIX /usr/lib/print/netprint local root symbols exploit. Atro Tossavainen (Fri Apr 27 2001 - 02:48:25 PDT)
      • Re: IRIX /usr/lib/print/netprint local root symbols exploit. Dale Southard (Fri Apr 27 2001 - 07:38:49 PDT)
  • Re: IRIX /usr/lib/print/netprint local root symbols exploit. Atro Tossavainen (Fri Apr 27 2001 - 02:44:37 PDT)
  • Re: IRIX /usr/lib/print/netprint local root symbols exploit. v9at_private (Fri Apr 27 2001 - 12:30:35 PDT)
  • Re: IRIX /usr/lib/print/netprint local root symbols exploit. Thomas-Martin Kruel (Sat Apr 28 2001 - 09:37:02 PDT)
• [SECURITY] [DSA 043-2] New versions of Zope fix vulnerabilities debian-security-announceat_private (Thu Apr 26 2001 - 00:50:05 PDT)
• /tmp races *Hobbit* (Thu Apr 26 2001 - 06:29:48 PDT)
• Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW) Ltlw0lf (Wed Apr 25 2001 - 11:59:16 PDT)
  • Re: Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW) Ltlw0lf (Mon Apr 30 2001 - 07:12:06 PDT)
    • Re: Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW) Justin Shore (Mon Apr 30 2001 - 19:26:44 PDT)
• [ESA-20010409-02] xntp i386 packages available securityat_private (Thu Apr 26 2001 - 09:48:08 PDT)
• Vulnerability in WebXQ Server joetestaat_private (Thu Apr 26 2001 - 13:49:38 PDT)
• [SECURITY] [DSA-053-1] nedit symlink attack debian-security-announceat_private (Thu Apr 26 2001 - 15:48:56 PDT)
• PROGENY-SA-2001-09: Vulnerabilities in FTP daemons Progeny Security Team (Thu Apr 26 2001 - 16:31:40 PDT)
• Microsoft ISA Server Vulnerability dark spyrit (Thu Apr 26 2001 - 14:16:45 PDT)
  • Re: Microsoft ISA Server Vulnerability Microsoft Security Response Center (Fri Apr 27 2001 - 07:54:08 PDT)
    • Re: Microsoft ISA Server Vulnerability dark spyrit (Fri Apr 27 2001 - 17:48:10 PDT)
• Re: Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW ) Francis Favorini (Fri Apr 27 2001 - 10:08:49 PDT)
• PROGENY-SA-2001-10: Older versions of NEdit make insecure use of temp files Progeny Security Team (Fri Apr 27 2001 - 08:28:36 PDT)
  • More nedit problems ? (was Re: PROGENY-SA-2001-10...) Jarno Huuskonen (Sat Apr 28 2001 - 01:50:16 PDT)
• Immunix OS Security update for gftp Greg KH (Fri Apr 27 2001 - 13:53:54 PDT)
• PerlCal (CGI) show files vulnerability Stan (Fri Apr 27 2001 - 05:50:23 PDT)
  • Re: PerlCal (CGI) show files vulnerability Stan (Sun Apr 29 2001 - 01:01:41 PDT)
• MDKSA-2001:044 - gftp update Linux Mandrake Security Team (Fri Apr 27 2001 - 15:24:54 PDT)
• Mirabilis ICQ WebFront Plug-in Denial of Service SNS Research (Fri Apr 27 2001 - 17:38:10 PDT)
  • SAP R/3 Web Application Server Demo for Linux: root exploit Jochen Hein (Sun Apr 29 2001 - 00:29:58 PDT)
• ISA Server update.. Barnaby Jack (Fri Apr 27 2001 - 19:19:45 PDT)
• MDKSA-2001:043 - rpmdrake update Linux Mandrake Security Team (Fri Apr 27 2001 - 15:24:18 PDT)
• Vulnerabilities in BRS WebWeaver joetestaat_private (Sat Apr 28 2001 - 16:57:20 PDT)
• Winamp 2.6x / 2.7x buffer overflow ByteRage (Sun Apr 29 2001 - 01:41:46 PDT)
• Vulnerabilities in Alex's FTP Server joetestaat_private (Sat Apr 28 2001 - 16:52:34 PDT)
• A Serious Security Vulnerability Found in BearShare (Directory Traversal) Aviram Jenik (Mon Apr 30 2001 - 00:06:00 PDT)
• Proof of concept DoS against novell border manager enterprise edition 3.5 honoriak (Sun Apr 29 2001 - 11:42:40 PDT)
• [RHSA-2001:059-03] Updated kdelibs packages fixing security problem and memory leaks available bugzillaat_private (Mon Apr 30 2001 - 10:35:00 PDT)
• @stake Security Advisory: Remote Vulnerabilities in Bugzilla (A043001-1) @stake advisories (Mon Apr 30 2001 - 13:07:31 PDT)
  • Re: @stake Security Advisory: Remote Vulnerabilities in Bugzilla (A043001-1) T. William Wells (Mon Apr 30 2001 - 15:28:23 PDT)
• Immunix OS Security update for gnupg Greg KH (Mon Apr 30 2001 - 17:17:03 PDT)

Last message date: Tue May 01 2001 - 09:29:50 PDT
Archived on: Tue May 01 2001 - 09:29:52 PDT

This archive was generated by hypermail 2b30 : Tue May 01 2001 - 09:29:52 PDT