bugtraq 2001/08
By Thread

Starting: Thu Jun 14 2001 - 08:53:17 PDT
Ending: Sat Sep 01 2001 - 09:32:38 PDT

• Buffer overflow in BestCrypt for Linux Carl Livitt (Thu Aug 09 2001 - 20:58:11 PDT)
• Re: New command execution vulnerability in myPhpAdmin Heikki Korpela (Tue Jul 31 2001 - 14:35:55 PDT)
• FW: Entrust - getAccess MARTAK,PAVEL (HP-Czechia,ex1) (Wed Aug 01 2001 - 00:04:10 PDT)
• Re: [RAZOR] Linux kernel IP masquerading vulnerability (_actual_ patch) Michal Zalewski (Wed Aug 01 2001 - 07:26:00 PDT)
  • Re: [RAZOR] Linux kernel IP masquerading vulnerability (_actual_ Darren Reed (Wed Aug 01 2001 - 16:55:09 PDT)
    • Re: [RAZOR] Linux kernel IP masquerading vulnerability (_actual_ Michal Zalewski (Wed Aug 01 2001 - 19:57:44 PDT)
• Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Josh Smith (Wed Aug 01 2001 - 09:03:58 PDT)
  • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Linux Mailing Lists (Wed Aug 01 2001 - 10:00:05 PDT)
  • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Jeremy C. Reed (Wed Aug 01 2001 - 12:05:11 PDT)
    • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Josh Smith (Wed Aug 01 2001 - 13:04:17 PDT)
    • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Jeffrey Denton (Fri Aug 03 2001 - 06:38:14 PDT)
  • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Olaf Bohlen (Wed Aug 01 2001 - 13:21:37 PDT)
    • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Jeremy C. Reed (Wed Aug 01 2001 - 13:55:39 PDT)
      • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Brian Smith (Wed Aug 01 2001 - 17:37:45 PDT)
      • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Dylan Griffiths (Thu Aug 02 2001 - 17:07:00 PDT)
      • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Felipe Franciosi (Mon Aug 06 2001 - 12:21:41 PDT)
    • Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate Nasir Simbolon (Wed Aug 01 2001 - 23:05:36 PDT)
• The Dangers of Allowing Users to Post Images Matt Block (Wed Aug 01 2001 - 09:26:34 PDT)
  • Re: The Dangers of Allowing Users to Post Images Paul de Vrieze (Wed Aug 01 2001 - 01:08:21 PDT)
  • Re: The Dangers of Allowing Users to Post Images Jason Bowman (Thu Aug 02 2001 - 18:50:57 PDT)
• Oracle 8.1.5 dbnsmp vulnerability Ismael Briones (Wed Aug 01 2001 - 10:14:07 PDT)
  • RE: Oracle 8.1.5 dbnsmp vulnerability Aaron C. Newman (Wed Aug 01 2001 - 11:12:22 PDT)
  • Re: Oracle 8.1.5 dbnsmp vulnerability Theo Van Dinter (Wed Aug 01 2001 - 13:22:52 PDT)
• Re: Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons Georgi Guninski (Wed Aug 01 2001 - 10:51:36 PDT)
• Re: URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0 Casper Dik (Wed Aug 01 2001 - 01:37:06 PDT)
• ANNOUNCE: RATS 1.1 (beta) ratsat_private (Wed Aug 01 2001 - 03:33:58 PDT)
  • ANNOUNCE: RATS 1.1 (beta) ratsat_private (Wed Aug 01 2001 - 03:33:58 PDT)
  • snmpd log files long names problems SECURITY (Thu Aug 02 2001 - 07:36:30 PDT)
    • Re: snmpd log files long names problems Tony Lambiris (Thu Aug 02 2001 - 21:36:34 PDT)
      • Re: snmpd log files long names problems Larry W. Cashdollar (Fri Aug 03 2001 - 08:16:21 PDT)
      • Re: snmpd log files long names problems Jeff 'fdiv_bug' Abbott (Fri Aug 03 2001 - 08:28:28 PDT)
    • Re: snmpd log files long names problems Tony Lambiris (Thu Aug 02 2001 - 21:36:34 PDT)
  • snmpd log files long names problems SECURITY (Thu Aug 02 2001 - 07:36:30 PDT)
• matrix screensvr(16 Bit CineMac Screen Saver Engine) - [input validation error?] knud_erik højgaard (Wed Aug 01 2001 - 16:39:11 PDT)
• Wvdial insecure conf? Qlo (Wed Aug 01 2001 - 09:39:32 PDT)
  • Re: Wvdial insecure conf? Stefan Riegelnik (Wed Aug 01 2001 - 17:22:40 PDT)
  • RE: Wvdial insecure conf? Black, Braden (Thu Aug 02 2001 - 07:46:35 PDT)
• Cisco Security Advisory: Vulnerabilities in Cisco SN 5420 Storage Routers Cisco_Systems_Product_Security_Incident_Response_Teamat_private (Wed Aug 01 2001 - 12:46:17 PDT)
• MS01-035 Hot Fix for IIS Joe Granto (Wed Aug 01 2001 - 06:24:12 PDT)
  • RE: MS01-035 Hot Fix for IIS Microsoft Security Response Center (Wed Aug 01 2001 - 18:04:15 PDT)
• new modification for telnetd for irix sneed hacker (Wed Aug 01 2001 - 14:37:01 PDT)
• F7-Enter bug details & workaround Hernan Ochoa (Wed Aug 01 2001 - 14:43:57 PDT)
  • RE: F7-Enter bug details & workaround Hernan Ochoa (Wed Aug 01 2001 - 17:45:59 PDT)
• HP Jetdirect passwords don't sync Will Backman (Wed Aug 01 2001 - 13:48:38 PDT)
  • Re: HP Jetdirect passwords don't sync Lim Ghee Lam (Wed Aug 01 2001 - 18:38:41 PDT)
• Security Update [CSSA-2001-026.0] Linux - Security problems in imp supinfo (Wed Aug 01 2001 - 14:32:39 PDT)
• suse: sdbsearch.cgi vulnerability Maurycy Prodeus (Wed Aug 01 2001 - 16:09:42 PDT)
• Re: Oracle 8.1.5 dbsnmp vulnerability SChoe (Wed Aug 01 2001 - 16:06:07 PDT)
• Local Vulnerability in dbsnmp binary in Oracle 8.1.6 - 8.1.7 - 9i Juan Manuel Pascual Escriba (Thu Aug 02 2001 - 00:27:27 PDT)
• vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6 Juan Manuel Pascual Escriba (Thu Aug 02 2001 - 00:57:26 PDT)
  • RE: vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6 Ron Cohen (Sat Aug 04 2001 - 18:04:09 PDT)
  • RE: vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6 Ron Cohen (Sun Aug 05 2001 - 04:27:09 PDT)
    • Re: vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6 Pete Finnigan (Wed Aug 08 2001 - 02:05:20 PDT)
• Netaddress Secutity issue solved syed mohamed (Thu Aug 02 2001 - 11:32:36 PDT)
• Trend Micro InterScan VirusWall - AV control bypass pajaat_private (Thu Aug 02 2001 - 10:08:31 PDT)
• Advisory Update: Design Flaw in Linksys EtherFast 4-Port Cable/DSL Router hypoclear (Thu Aug 02 2001 - 11:37:26 PDT)
  • Re: Advisory Update: Design Flaw in Linksys EtherFast 4-Port Cable/DSL Router Mike Duncan (Thu Aug 02 2001 - 13:12:17 PDT)
• Re: SECURITY.NNOV: special devices access in multiple archivers Andreas Marx (Thu Aug 02 2001 - 02:11:44 PDT)
  • Re: SECURITY.NNOV: special devices access in multiple archivers Andreas Marx (Fri Aug 03 2001 - 04:43:06 PDT)
    • Re: SECURITY.NNOV: special devices access in multiple archivers Juergen P. Meier (Sat Aug 04 2001 - 10:32:11 PDT)
      • Re: SECURITY.NNOV: special devices access in multiple archivers Andreas Marx (Fri Aug 10 2001 - 10:07:03 PDT)
• vulnerability in otrcrep binary in Oracle 8.0.5. Juan Manuel Pascual Escriba (Thu Aug 02 2001 - 00:33:34 PDT)
• Outlook 2000 Rich Text information disclosure Dmitriy Kropivnitskiy (Thu Aug 02 2001 - 10:22:16 PDT)
• Code RED related problem Jimmy Gauvin (Thu Aug 02 2001 - 10:32:50 PDT)
• RE: cold fusion 5.0 cfrethrow exploit Jesse Noller (Thu Aug 02 2001 - 12:57:13 PDT)
• Roxen security alert: URL decoding vulnerable Peter Bortas (Thu Aug 02 2001 - 14:42:25 PDT)
• RE: Local Vulnerability in dbsnmp binary in Oracle 8.1.6-8.1.7-9i SChoe (Thu Aug 02 2001 - 15:44:24 PDT)
  • RE: Local Vulnerability in dbsnmp binary in Oracle 8.1.6-8.1.7-9i cwallat_private (Fri Aug 03 2001 - 08:36:18 PDT)
• FW: Security alert: Remote user can access any file jkowall (Thu Aug 02 2001 - 13:37:17 PDT)
• [Fwd: OpenUnix 8 dtaction dtprintinfo dtsession overflows] KF (Thu Aug 02 2001 - 02:17:28 PDT)
• Denial of Service in SHOUTcast Server 1.8.2 Linux/w32/? FraMe (Fri Aug 03 2001 - 01:29:20 PDT)
• SuSE Security Announcement: xmcd (SuSE-SA:2001:025) Thomas Biege (Fri Aug 03 2001 - 10:33:59 PDT)
• Re: Tivoli Management Framework Alert!!! Duct Tape (Fri Aug 03 2001 - 09:02:07 PDT)
  • Re: Tivoli Management Framework Alert!!! Henry Farkas (Fri Aug 03 2001 - 11:39:33 PDT)
• phpBB 1.4.0 bug leads to easy admin privileges kill-9at_private (Fri Aug 03 2001 - 12:51:28 PDT)
  • Re: phpBB 1.4.0 bug leads to easy admin privileges Paul Burney (Fri Aug 03 2001 - 15:01:36 PDT)
  • Re: phpBB 1.4.0 bug leads to easy admin privileges Joao Gouveia (Sat Aug 04 2001 - 12:10:18 PDT)
  • Re: phpBB 1.4.0 bug leads to easy admin privileges Kaneda Akira (Tue Aug 07 2001 - 22:30:24 PDT)
• 3 phpnuke bugs (2 possibly lead to admin privs) kill-9at_private (Fri Aug 03 2001 - 12:47:04 PDT)
• REPOST: A damaging local DoS in WinNT SP6a hypoclear (Fri Aug 03 2001 - 11:29:20 PDT)
• SurgeFTP admin account bruteforcable ByteRage (Sat Aug 04 2001 - 05:31:01 PDT)
  • Re: NE 4.0, 4.1 Response Header Overflow Evgeny Lev (Sun Aug 05 2001 - 15:35:42 PDT)
• Massive attack to Alcatel Speed Touch Home & Pro Andrea Costantino (Sat Aug 04 2001 - 18:21:58 PDT)
  • Re: Massive attack to Alcatel Speed Touch Home & Pro Casper Dik (Sun Aug 05 2001 - 03:40:32 PDT)
• Code Red Revision (fwd) Alfred Huger (Sat Aug 04 2001 - 22:11:47 PDT)
• CodeRedII - New non-variant codered worm - Analysis. Marc Maiffret (Sun Aug 05 2001 - 05:23:34 PDT)
• CodeRed II ARIS Incident Analysis aleph1at_private (Sun Aug 05 2001 - 09:00:43 PDT)
• Infection Notification aleph1at_private (Sun Aug 05 2001 - 09:50:22 PDT)
• CR vs. CoreBuilder John Nemeth (Sun Aug 05 2001 - 14:12:40 PDT)
• Re: Massive attack to Alcatel Speed Touch Home & Pro (fwd) Rick Byers (Sun Aug 05 2001 - 08:27:31 PDT)
• More impact from CRII Jon Austin (Sun Aug 05 2001 - 22:41:41 PDT)
• Security Update: [CSSA-2001-028.0] Linux - Tomcat security problems Support Info (Mon Aug 06 2001 - 08:55:20 PDT)
• Security Update [CSSA-2001-029.0] Linux - Squid configuration problems Support Info (Mon Aug 06 2001 - 08:57:07 PDT)
• Code Red affecting IIS and Proxy David Lamb (Mon Aug 06 2001 - 04:51:52 PDT)
• IIS keeps stopping, quite a large number of people affected by th is, why ?!?! David Rea (Mon Aug 06 2001 - 05:23:27 PDT)
  • Re: IIS keeps stopping, quite a large number of people affected by th is, why ?!?! Clint Byrum (Mon Aug 06 2001 - 16:46:45 PDT)
• ISS Security Advisory: Multiple Buffer Overflow Vulnerabilities i n Raytheon SilentRunner ISS XForce (Mon Aug 06 2001 - 14:22:47 PDT)
  • Re: ISS Security Advisory: Multiple Buffer Overflow Vulnerabilities in Raytheon SilentRunner Jack Hayes (Mon Aug 06 2001 - 16:01:46 PDT)
• Multiple vulnerabilities in Avaya Argent Office Jacek Lipkowski (Tue Aug 07 2001 - 05:35:52 PDT)
• ISS Security Advisory: Remote Vulnerabilities in Macromedia ColdF usion Example Applications ISS XForce (Tue Aug 07 2001 - 08:03:29 PDT)
• Adobe PDF files can be used as virus carriers Richard M. Smith (Tue Aug 07 2001 - 08:44:20 PDT)
  • Re: Adobe PDF files can be used as virus carriers Nick FitzGerald (Tue Aug 07 2001 - 12:45:52 PDT)
  • Re: Adobe PDF files can be used as virus carriers Brett Glass (Tue Aug 07 2001 - 21:23:17 PDT)
  • Re: Adobe PDF files can be used as virus carriers Lars Hecking (Thu Aug 09 2001 - 02:20:50 PDT)
• MS Windows Media Player ASF Marker Buffer Overflow Pauli Ojanpera (Tue Aug 07 2001 - 11:55:00 PDT)
• rcs2log Morten Welinder (Tue Aug 07 2001 - 13:10:05 PDT)
• Internal IP Address Disclosure in Microsoft-IIS 4.0 & 5.0 Marek Roy (Tue Aug 07 2001 - 21:54:55 PDT)
  • RE: Internal IP Address Disclosure in Microsoft-IIS 4.0 & 5.0 Marc Maiffret (Thu Aug 09 2001 - 13:22:39 PDT)
    • Re: Internal IP Address Disclosure in Microsoft-IIS 4.0 & 5.0 H D Moore (Thu Aug 09 2001 - 21:13:08 PDT)
  • RE: Internal IP Address Disclosure in Microsoft-IIS 4.0 & 5.0 Microsoft Security Response Center (Thu Aug 09 2001 - 10:24:52 PDT)
• Question: Tomcat 3.2.1 dir. traversal vuln. Gustav Jansen (Wed Aug 08 2001 - 03:57:29 PDT)
• ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow zen-parseat_private (Thu Aug 09 2001 - 05:14:03 PDT)
  • Re: ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow bendikat_private (Thu Aug 09 2001 - 10:55:56 PDT)
  • RE: ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow Vidovic,Zvonimir,VEVEY,GL-IS/CIS (Fri Aug 10 2001 - 01:24:06 PDT)
• ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password Daniel Roethlisberger (Wed Aug 08 2001 - 20:07:55 PDT)
  • RE: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password Daryl Maunder (Sun Aug 12 2001 - 01:39:50 PDT)
• Xerox N40 printers and Code Red worm andrew morgan (Thu Aug 09 2001 - 09:12:50 PDT)
  • Re: Xerox N40 printers and Code Red worm der Mouse (Thu Aug 09 2001 - 19:29:29 PDT)
    • Re: Xerox N40 printers and Code Red worm Derek Martin (Thu Aug 09 2001 - 21:04:08 PDT)
    • Re: Xerox N40 printers and Code Red worm Karsten M. Self (Sat Aug 11 2001 - 23:19:24 PDT)
  • Re: Xerox N40 printers and Code Red worm andrew morgan (Fri Aug 10 2001 - 09:11:51 PDT)
• Re: Solaris 8 libsldap exploit Amos Gouaux (Wed Aug 08 2001 - 22:14:17 PDT)
• FW: [iisanswers] IISAnswers Bulletin: NT4 Sites with Redirects can crash from Code Red Hugh Choudhury (Thu Aug 09 2001 - 10:55:49 PDT)
  • RE: [iisanswers] IISAnswers Bulletin: NT4 Sites with Redirects can crash from Code Red Jerry Vogler (Thu Aug 09 2001 - 14:55:37 PDT)
• [RHSA-2001:100-02] Updated Kerberos 5 packages now available bugzillaat_private (Thu Aug 09 2001 - 14:41:31 PDT)
• [RHSA-2001:098-05] Updated OpenLDAP packages available for Red Hat Linux 6.2, 7, and 7.1 bugzillaat_private (Thu Aug 09 2001 - 14:42:27 PDT)
• Re: ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow Paul Szabo (Thu Aug 09 2001 - 14:37:42 PDT)
• Security Update: [CSSA-2001-SCO.10]: OpenServer: /etc/telnetd buffer overflow tiggerat_private (Thu Aug 09 2001 - 11:23:05 PDT)
• Hi Resolution System Ltd's MacAdministrator 2.0.4fc4 Hidden Files Disclosure and Access Vulnerability MD5 (Wed Aug 08 2001 - 23:41:18 PDT)
• [RHSA-2001:099-06] New telnet packages available to fix buffer overflow vulnerabilities bugzillaat_private (Thu Aug 09 2001 - 15:15:51 PDT)
• Fetchmail security advisory antirez (Thu Aug 09 2001 - 15:03:41 PDT)
  • Re: Fetchmail security advisory Matt Zimmerman (Thu Aug 09 2001 - 17:40:57 PDT)
• Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below kill-9at_private (Fri Aug 10 2001 - 00:20:48 PDT)
  • Re: Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below Joao Gouveia (Fri Aug 10 2001 - 08:30:10 PDT)
• NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerability Nsfocus Security Team (Fri Aug 10 2001 - 01:49:42 PDT)
• Tool for cleaning up the obvious effects of the Code Red II worm Microsoft Security Response Center (Thu Aug 09 2001 - 22:17:41 PDT)
• Linksys router security fix hypoclear (Fri Aug 10 2001 - 06:00:35 PDT)
• Re: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password Peter Gutmann (Fri Aug 10 2001 - 06:55:35 PDT)
  • Re: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password Daniel Roethlisberger (Fri Aug 10 2001 - 12:48:56 PDT)
    • Re: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password Daniel Roethlisberger (Sat Aug 11 2001 - 12:23:13 PDT)
      • Re: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password David Smith (Sun Aug 12 2001 - 04:47:50 PDT)
• Can we afford full disclosure of security holes? Richard M. Smith (Fri Aug 10 2001 - 11:39:06 PDT)
  • Re: Can we afford full disclosure of security holes? aleph1at_private (Fri Aug 10 2001 - 12:15:38 PDT)
    • Re: Can we afford full disclosure of security holes? Bill Arbaugh (Fri Aug 10 2001 - 17:01:31 PDT)
  • RE: Can we afford full disclosure of security holes? Marc Maiffret (Fri Aug 10 2001 - 13:10:51 PDT)
  • Re: Can we afford full disclosure of security holes? Bill Arbaugh (Fri Aug 10 2001 - 16:30:45 PDT)
  • Re: Can we afford full disclosure of security holes? Ryan Russell (Fri Aug 10 2001 - 16:44:27 PDT)
  • RE: Can we afford full disclosure of security holes? bodzincmat_private (Fri Aug 10 2001 - 16:11:02 PDT)
  • Re: Can we afford full disclosure of security holes? Scott Blake (Fri Aug 10 2001 - 13:30:42 PDT)
  • RE: Can we afford full disclosure of security holes? Richard M. Smith (Fri Aug 10 2001 - 12:32:53 PDT)
  • Re: Can we afford full disclosure of security holes? antirez (Fri Aug 10 2001 - 12:32:23 PDT)
  • Re: Can we afford full disclosure of security holes? Alun Jones (Fri Aug 10 2001 - 12:53:07 PDT)
  • Re: Can we afford full disclosure of security holes? Chris Wolfe (Fri Aug 10 2001 - 17:20:02 PDT)
  • RE: Can we afford full disclosure of security holes? Guy Helmer (Fri Aug 10 2001 - 14:20:26 PDT)
  • Re: Can we afford full disclosure of security holes? Randy Taylor (Fri Aug 10 2001 - 13:06:43 PDT)
  • Re: Can we afford full disclosure of security holes? Scott Blake (Fri Aug 10 2001 - 13:30:42 PDT)
• Re: Local Vulnerability in dbsnmp binary Oracle Security Alerts (Fri Aug 10 2001 - 16:17:03 PDT)
• Re: [vor] Re: Can we afford full disclosure of security holes? Richard Forno (Fri Aug 10 2001 - 12:50:01 PDT)
• Re: Vulnerability in otrcrep in Oracle 8.0.5 Oracle Security Alerts (Fri Aug 10 2001 - 16:12:38 PDT)
• Re: UDP packet handling weird behaviour of various operating systems Lisa Napier (Fri Aug 10 2001 - 17:46:43 PDT)
• Re: Vulnerability in oracle binary in Oracle 8.0.5-8.1.6 Oracle Security Alerts (Fri Aug 10 2001 - 16:08:47 PDT)
• RE: [vor] Re: Can we afford full disclosure of security holes? Lyle (Fri Aug 10 2001 - 18:18:47 PDT)
• Administrivia: Full Disclosure Debate aleph1at_private (Fri Aug 10 2001 - 17:42:10 PDT)
• Sambar Telnet Proxy/Server multiple vulnerablietis kyprizel (Mon Aug 13 2001 - 09:55:38 PDT)
• Sample implementation of new WEP weakness Anton Rager (Sun Aug 12 2001 - 09:23:43 PDT)
• Various problems in Baltimore's WEBSweeper Script filtering eDvice Security Services (Sun Aug 12 2001 - 07:42:14 PDT)
• Local exploit for TrollFTPD-1.26 zen-parse (Sun Aug 12 2001 - 20:22:22 PDT)
  • Re: Local exploit for TrollFTPD-1.26 Jedi/Sector One (Frank DENIS) (Mon Aug 13 2001 - 02:22:49 PDT)
• Phrack57 if out. aleph1at_private (Sun Aug 12 2001 - 23:47:37 PDT)
• Are your mod_rewrite rules doing what you expect? Jeff Workman (Sun Aug 12 2001 - 18:46:26 PDT)
  • RE: Are your mod_rewrite rules doing what you expect? Riddoch, John ESITI-ISEP-3 (Mon Aug 13 2001 - 08:00:17 PDT)
• SIX-webboard 2.01 "show files" vulnerability Hannibal Lector (Mon Aug 13 2001 - 09:15:33 PDT)
• NetCode NC Book 0.2b remote command execution vulnerability Hannibal Lector (Mon Aug 13 2001 - 12:14:38 PDT)
• [CLA-2001:411] Conectiva Linux Security Announcement - windowmaker secureat_private (Mon Aug 13 2001 - 14:13:46 PDT)
• Security Update: [CSSA-2001-30.0] Linux - Telnet AYT remote exploit Support Info (Mon Aug 13 2001 - 16:45:59 PDT)
• MDKSA-2001:069 - openldap update Linux Mandrake Security Team (Mon Aug 13 2001 - 21:27:35 PDT)
• MDKSA-2001:068 - telnet update Linux Mandrake Security Team (Mon Aug 13 2001 - 21:26:56 PDT)
• long url overflow in IE6 public preview on WinME Joseph Mallett (Mon Aug 13 2001 - 17:57:27 PDT)
  • Re: long url overflow in IE6 public preview on WinME Riemer Palstra (Tue Aug 14 2001 - 08:15:44 PDT)
    • Re: long url overflow in IE6 public preview on WinME Joseph Mallett (Tue Aug 14 2001 - 14:09:51 PDT)
    • Re: long url overflow in IE6 public preview on WinME Ryan Russell (Tue Aug 14 2001 - 15:20:52 PDT)
• Fwd: ZyXEL Prestige 642 Router Administration Interface Vulnerability Daniel Roethlisberger (Tue Aug 14 2001 - 09:45:32 PDT)
• X White Paper Released Ofir Arkin (Mon Aug 13 2001 - 21:09:11 PDT)
• Security problems with Dell Latitude C800 Notebook BIOSes Bernhard Rosenkraenzer (Tue Aug 14 2001 - 08:28:36 PDT)
  • Re: Security problems with Dell Latitude C800 Notebook BIOSes Raymond M. Reskusich (Tue Aug 14 2001 - 11:56:43 PDT)
  • Re: Security problems with Dell Latitude C800 Notebook BIOSes Andrea Arcangeli (Tue Aug 14 2001 - 16:37:41 PDT)
• Fwd: Security Alert: Groupwise - Action Required Mike Shaw (Tue Aug 14 2001 - 19:39:06 PDT)
  • Re: Fwd: Security Alert: Groupwise - Action Required Bob Fiero (Wed Aug 15 2001 - 04:51:43 PDT)
• HTML Form Protocol Attack Jochen Topf (Wed Aug 15 2001 - 00:20:19 PDT)
  • Re: HTML Form Protocol Attack Barnaby Gray (Wed Aug 15 2001 - 12:37:55 PDT)
    • Re: HTML Form Protocol Attack Jesse Ruderman (Wed Aug 15 2001 - 16:36:37 PDT)
    • Re: HTML Form Protocol Attack Sevo Stille (Wed Aug 15 2001 - 15:58:09 PDT)
      • Re: HTML Form Protocol Attack Barnaby Gray (Wed Aug 15 2001 - 18:49:12 PDT)
      • Re: HTML Form Protocol Attack Jim Paris (Wed Aug 15 2001 - 20:04:49 PDT)
      • Re: HTML Form Protocol Attack Barnaby Gray (Thu Aug 16 2001 - 05:04:26 PDT)
      • Re: HTML Form Protocol Attack Mark van Walraven (Thu Aug 16 2001 - 15:16:07 PDT)
      • Re: HTML Form Protocol Attack Gustavo Molina (Wed Aug 15 2001 - 20:30:49 PDT)
    • Re: HTML Form Protocol Attack Bruno Treguier (Thu Aug 16 2001 - 06:26:05 PDT)
      • RE: HTML Form Protocol Attack Bennett Samowich (Thu Aug 16 2001 - 11:32:27 PDT)
  • RE: HTML Form Protocol Attack Bennett Samowich (Fri Aug 17 2001 - 11:17:02 PDT)
• qmail starttls patch does not seed the random number generator Felix von Leitner (Tue Aug 14 2001 - 17:57:36 PDT)
  • Re: qmail starttls patch does not seed the random number generator Wojciech Purczynski (Wed Aug 15 2001 - 08:02:15 PDT)
    • Re: qmail starttls patch does not seed the random number generator Jack Lloyd (Wed Aug 15 2001 - 10:42:05 PDT)
      • Re: qmail starttls patch does not seed the random number generator Scott Renfro (Thu Aug 16 2001 - 10:22:10 PDT)
      • Re: qmail starttls patch does not seed the random number generator D. J. Bernstein (Sun Aug 19 2001 - 10:29:58 PDT)
  • Re: qmail starttls patch does not seed the random number generator Brian Hatch (Wed Aug 15 2001 - 08:56:37 PDT)
  • Re: qmail starttls patch does not seed the random number generator Frederik Vermeulen (Thu Aug 16 2001 - 13:47:36 PDT)
• webridge application suite gives up too much error information on Internal Server Error john.leitchat_private (Wed Aug 15 2001 - 01:50:51 PDT)
• MS patch-scanner for Win-NT, 2K, IIS, SQL Thomas C. Greene (Wed Aug 15 2001 - 02:18:06 PDT)
• BID 3161: other ZyXEL Prestige routers affected too Daniel Roethlisberger (Wed Aug 15 2001 - 11:47:02 PDT)
  • RE: BID 3161: other ZyXEL Prestige routers affected too Tracy Martin (Wed Aug 15 2001 - 20:26:28 PDT)
• Groupwise Webaccess, NetWare web server, and Novell Simple Nomad (Wed Aug 15 2001 - 12:16:54 PDT)
  • Re: Groupwise Webaccess, NetWare web server, and Novell James Dore (Thu Aug 16 2001 - 06:44:50 PDT)
• CERT Advisory CA-2001-24 CERT Advisory (Wed Aug 15 2001 - 11:08:04 PDT)
• MPSA - Another security tool from MS Alex S. Sachetti Araujo (Wed Aug 15 2001 - 16:50:14 PDT)
• [ESA-20010816-01] fetchmail-ssl memory overwrite vulnerability EnGarde Secure Linux (Thu Aug 16 2001 - 06:35:38 PDT)
• MS-DOS Filename/Directory Vulnerability Felipe Moniz (Thu Aug 16 2001 - 19:08:16 PDT)
  • Re: MS-DOS Filename/Directory Vulnerability Seth Arnold (Thu Aug 16 2001 - 16:32:00 PDT)
    • RE: MS-DOS Filename/Directory Vulnerability Troy Murray (Thu Aug 16 2001 - 19:07:19 PDT)
    • Re: MS-DOS Filename/Directory Vulnerability Alun Jones (Fri Aug 17 2001 - 06:05:35 PDT)
• [LoWNOISE] Tomcat 3.2.1 ..0 DoS (WinNT) ET LoWNOISE (Thu Aug 16 2001 - 16:10:09 PDT)
  • Re: [LoWNOISE] Tomcat 3.2.1 ..0 DoS (WinNT) Charles Miller (Fri Aug 17 2001 - 03:43:20 PDT)
• NSFOCUS SA2001-06 : Microsoft IIS ssinc.dll Buffer Overflow Vulnerability Nsfocus Security Team (Thu Aug 16 2001 - 18:22:06 PDT)
• Relaying in MDAEMON. buggzy (Thu Aug 16 2001 - 22:42:24 PDT)
  • Re: Relaying in MDAEMON. buggzy (Fri Aug 17 2001 - 00:19:58 PDT)
    • Re: Relaying in MDAEMON. Alun Jones (Fri Aug 17 2001 - 08:12:31 PDT)
• Arkeia Possible remote root & information leakage quentynat_private (Fri Aug 17 2001 - 01:32:08 PDT)
  • RE: Arkeia Possible remote root & information leakage Neil Curri (Fri Aug 17 2001 - 08:32:36 PDT)
  • Re: Arkeia Possible remote root & information leakage Joe Glass (Fri Aug 17 2001 - 10:13:28 PDT)
  • Re: Arkeia Possible remote root & information leakage quentynat_private (Sun Aug 19 2001 - 10:28:25 PDT)
• SuSE Security Announcement: fetchmail (SuSE-SA:2001:026) Thomas Biege (Fri Aug 17 2001 - 01:25:43 PDT)
• [Real Security] Advisory for Nudester 1.10 Gary (Thu Aug 16 2001 - 20:10:22 PDT)
  • [Real Security] Advisory for Nudester 1.10 Gary (Thu Aug 16 2001 - 23:34:40 PDT)
    • Re: [Real Security] Advisory for Nudester 1.10 ovix blue (Sat Aug 18 2001 - 22:18:09 PDT)
• Relaying in MDaemon Arvel Hathcock (Fri Aug 17 2001 - 08:49:04 PDT)
  • Re: Relaying in MDaemon Tabor J. Wells (Fri Aug 17 2001 - 15:26:40 PDT)
    • RE: Relaying in MDaemon ((UPDATED ALEPH)) JNJ (Sat Aug 18 2001 - 16:47:07 PDT)
• [ASGUARD-LABS] glFTPD v1.23 DOS Attack Jan Wagner (Fri Aug 17 2001 - 09:29:56 PDT)
• Security Update: [CSSA-2001-031.0] Linux -security issues in ucd-snmp Support Info (Fri Aug 17 2001 - 14:31:17 PDT)
  • HTML email "bug", of sorts. Alex Prestin (Sat Aug 18 2001 - 03:17:25 PDT)
    • Re: HTML email "bug", of sorts. John D. Hardin (Sat Aug 18 2001 - 21:40:05 PDT)
    • RE: HTML email "bug", of sorts. Russell Garrett (Sun Aug 19 2001 - 01:30:47 PDT)
    • Re: HTML email "bug", of sorts. thomas.roweat_private (Sat Aug 18 2001 - 20:10:36 PDT)
      • Re: HTML email "bug", of sorts. Thorat_private (Sun Aug 19 2001 - 16:49:27 PDT)
      • RE: HTML email "bug", of sorts. David LeBlanc (Sun Aug 19 2001 - 12:39:34 PDT)
    • Re: HTML email "bug", of sorts. role+bugtraqat_private (Sun Aug 19 2001 - 10:25:50 PDT)
    • Re: HTML email "bug", of sorts. james_kelleyat_private (Sun Aug 19 2001 - 13:05:01 PDT)
    • Re: HTML email "bug", of sorts. Daryl Banttari (Sun Aug 19 2001 - 11:31:03 PDT)
    • Re: HTML email "bug", of sorts. Alex Prestin (Sun Aug 19 2001 - 13:19:12 PDT)
      • Re[2]: HTML email "bug", of sorts. Walter Hop (Mon Aug 20 2001 - 02:26:02 PDT)
      • Re[2]: HTML email "bug", of sorts. Mark Tinberg (Mon Aug 20 2001 - 17:39:24 PDT)
      • Re: HTML email "bug", of sorts. Peter W (Tue Aug 21 2001 - 03:39:12 PDT)
      • Re: HTML email "bug", of sorts. Bear Giles (Mon Aug 20 2001 - 14:33:26 PDT)
      • Re: HTML email "bug", of sorts. Sean Straw / PSE (Mon Aug 20 2001 - 21:41:24 PDT)
      • Re: HTML email "bug", of sorts. Curt Sampson (Tue Aug 21 2001 - 01:33:43 PDT)
    • Re: HTML email "bug", of sorts. Jon Masters (Sun Aug 19 2001 - 07:15:06 PDT)
    • Re: HTML email "bug", of sorts. Jeffrey W. Baker (Sat Aug 18 2001 - 20:30:04 PDT)
    • Re: HTML email "bug", of sorts. Jason Haar (Sun Aug 19 2001 - 21:57:59 PDT)
      • Re: HTML email "bug", of sorts. Thorat_private (Mon Aug 20 2001 - 11:22:37 PDT)
      • Re: HTML email "bug", of sorts. John Fitzgibbon (Mon Aug 20 2001 - 20:55:29 PDT)
    • RE: HTML email "bug", of sorts. Ben Yu (Mon Aug 20 2001 - 17:22:03 PDT)
    • Re: HTML email "bug", of sorts. Sean Straw / PSE (Mon Aug 20 2001 - 21:20:55 PDT)
    • Re: HTML email "bug", of sorts. Jeffrey W. Dronenburg (Tue Aug 21 2001 - 10:58:02 PDT)
• Relay Test mdaemonat_private (Fri Aug 17 2001 - 15:09:32 PDT)
• Hotmail message view exploit [Digital-Vortex]@securityfocus.com (Sat Aug 18 2001 - 14:31:17 PDT)
  • Re: Hotmail message view exploit Jome (Sun Aug 19 2001 - 10:36:37 PDT)
  • Re: Hotmail message view exploit Scott Gifford (Sun Aug 19 2001 - 19:48:00 PDT)
• security bulletins digest IT Resource Center (Fri Aug 17 2001 - 03:56:43 PDT)
  • security bulletins digest IT Resource Center (Fri Aug 24 2001 - 04:16:10 PDT)
• Web "bug" workarounds Brian Ballsun-Stanton (Sun Aug 19 2001 - 17:01:18 PDT)
  • Re: Web "bug" workarounds Glynn Clements (Sun Aug 19 2001 - 20:11:14 PDT)
• tdforum 1.2 Messageboard 5-i's (Mon Aug 20 2001 - 01:27:16 PDT)
  • Re: tdforum 1.2 Messageboard 5-i's (Mon Aug 20 2001 - 14:30:03 PDT)
• SuSE Security Announcement: sdb (SuSE-SA:2001:027) Thomas Biege (Mon Aug 20 2001 - 06:44:03 PDT)
• JWSDK *add-on Phuong Nguyen (Mon Aug 20 2001 - 06:13:47 PDT)
  • Re: JWSDK *add-on KF (Sun Aug 19 2001 - 23:09:20 PDT)
• Multiple-Vendor-FTP-Vuln. (old?) Enrico Kern (Mon Aug 20 2001 - 06:20:35 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Michael Faurot (Mon Aug 20 2001 - 12:20:00 PDT)
    • Re: Multiple-Vendor-FTP-Vuln. (old?) Robert van der Meulen (Mon Aug 20 2001 - 15:12:46 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) skip (Mon Aug 20 2001 - 13:35:54 PDT)
    • RE: Multiple-Vendor-FTP-Vuln. (old?) jeev (Mon Aug 20 2001 - 14:29:30 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Bernhard Rosenkraenzer (Mon Aug 20 2001 - 10:36:11 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Scott Dier (Mon Aug 20 2001 - 13:35:06 PDT)
  • RE: Multiple-Vendor-FTP-Vuln. (old?) Michael Bellears (Mon Aug 20 2001 - 15:43:54 PDT)
  • RE: Multiple-Vendor-FTP-Vuln. (old?) Mike Jakubik (Mon Aug 20 2001 - 12:14:55 PDT)
  • RE: Multiple-Vendor-FTP-Vuln. (old?) E. van Elk (Mon Aug 20 2001 - 16:41:14 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Roman Drahtmueller (Mon Aug 20 2001 - 16:40:30 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Michael Faurot (Mon Aug 20 2001 - 20:54:43 PDT)
  • Re: Multiple-Vendor-FTP-Vuln. (old?) Dmitriy Kropivnitskiy (Tue Aug 21 2001 - 07:46:39 PDT)
• security problem in surf-net ASP Discussion Forum < 2.30 Mark Lastdrager (Mon Aug 20 2001 - 13:10:37 PDT)
• Lotus Domino DoS Ian Gulliver (Mon Aug 20 2001 - 14:19:32 PDT)
  • Re: Lotus Domino DoS 3APA3A (Tue Aug 21 2001 - 01:47:35 PDT)
  • Lotus Domino DoS solution Radoslav Dejanoviæ (Thu Aug 23 2001 - 00:31:37 PDT)
• MDKSA-2001:070 - gdm update Linux Mandrake Security Team (Mon Aug 20 2001 - 16:10:15 PDT)
• BSDi (3.0/3.1) reboot machine code as any user (non-specific) v9at_private (Mon Aug 20 2001 - 18:23:33 PDT)
• *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd) Dave Ahmed (Tue Aug 21 2001 - 09:04:08 PDT)
  • Re: *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd) Roman Drahtmueller (Tue Aug 21 2001 - 12:28:37 PDT)
  • sample exploit....Re: *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd) Lucian Hudin (Wed Aug 22 2001 - 11:02:33 PDT)
• Administrivia: HTML Email Thread aleph1at_private (Tue Aug 21 2001 - 11:48:50 PDT)
• [SNS Advisory No.38] Trend Micro Virus Buster (Ver.3.5x) Remote File Disclosure With IUSER Privilege Vulnerability snsadvat_private (Tue Aug 21 2001 - 13:09:07 PDT)
• IrDA semiremote vulnerability Paul Millar (Tue Aug 21 2001 - 13:38:01 PDT)
• [SNS Advisory No.39] WinWrapper Professional 2.0 Remote Arbitrary File Disclosure Vulnerability snsadvat_private (Tue Aug 21 2001 - 15:35:51 PDT)
• improper use of netfilter MIRROR target can cause DoS Fabian Melzow (Tue Aug 21 2001 - 15:02:08 PDT)
  • Re: improper use of netfilter MIRROR target can cause DoS Harald Welte (Sat Aug 25 2001 - 05:43:37 PDT)
• Bug in MAS90 Accounting Platform remote access? Administrator (Tue Aug 21 2001 - 16:35:56 PDT)
  • RE: Bug in MAS90 Accounting Platform remote access? mbwhiteat_private (Tue Aug 21 2001 - 23:07:29 PDT)
• Adobe Acrobat creates world writable ~/AdobeFnt.lst files Michael Paoli (Wed Aug 22 2001 - 05:55:46 PDT)
  • Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files Darren Moffat (Wed Aug 22 2001 - 10:35:07 PDT)
  • Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files wimat_private (Wed Aug 22 2001 - 11:54:46 PDT)
  • Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files Darren Moffat (Wed Aug 22 2001 - 13:34:19 PDT)
    • Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files Scott Howard (Wed Aug 22 2001 - 15:34:36 PDT)
  • Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files Darren Moffat (Thu Aug 23 2001 - 13:07:01 PDT)
• -- [ iSecureLabs BadBlue v1.02 beta for Windows 98, ME and 2000 Advisory ] -- acz [iSecureLabs] (Wed Aug 22 2001 - 07:28:49 PDT)
• bugtraq id 3133 Christian Julien (Wed Aug 22 2001 - 02:42:14 PDT)
• AVTronics InetServer DoS and BoF Vulnerabilities SNS Research (Wed Aug 22 2001 - 10:05:45 PDT)
• Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users AreS (Wed Aug 22 2001 - 15:14:10 PDT)
  • Re: Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users Gustavo Molina (Fri Aug 24 2001 - 06:36:20 PDT)
  • RE: Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users Richard M. Smith (Fri Aug 24 2001 - 10:36:24 PDT)
    • RE: Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users Chris (Fri Aug 24 2001 - 21:13:19 PDT)
• OWA over ssl shutting down IIS Andrew McQueen (Wed Aug 22 2001 - 15:22:17 PDT)
  • RE: OWA over ssl shutting down IIS Mihai PETROV (Thu Aug 23 2001 - 02:47:17 PDT)
  • RE: OWA over ssl shutting down IIS Mihai PETROV (Thu Aug 23 2001 - 10:44:26 PDT)
  • Quick temporary fix for OWA DOS Martin Dion (Sat Aug 25 2001 - 08:10:58 PDT)
• AOLserver 3.0 vulnerability Nate Haggard (Wed Aug 22 2001 - 15:51:45 PDT)
  • AOLserver 3.0 vulnerability Bob Rogers (Thu Aug 23 2001 - 05:55:00 PDT)
  • Re: AOLserver 3.0 vulnerability KF (Wed Aug 22 2001 - 19:02:55 PDT)
• Another sendmail exploit Alexander Yurchenko (Wed Aug 22 2001 - 17:40:02 PDT)
  • Re: Another sendmail exploit [local root compromise] Michael Kjorling (Thu Aug 23 2001 - 00:33:44 PDT)
• BSCW symlink vulnerability SQEHXLLBQUJXat_private (Wed Aug 22 2001 - 17:56:29 PDT)
• NetBSD Security Advisory 2001-013: OpenSSL PRNG weakness (up to 0.9.6a) NetBSD Security Officer (Wed Aug 22 2001 - 23:10:31 PDT)
• NetBSD Security Advisory 2001-014: dump(8) exposes 'tty' group NetBSD Security Officer (Wed Aug 22 2001 - 23:13:36 PDT)
• [CLA-2001:412] Conectiva Linux Security Announcement - sendmail secureat_private (Thu Aug 23 2001 - 07:31:40 PDT)
• Linux Kernel 2.2.x Silvio Mazzaro (Thu Aug 23 2001 - 15:31:30 PDT)
  • Re: Linux Kernel 2.2.x William D. Colburn (aka Schlake) (Thu Aug 23 2001 - 10:17:20 PDT)
  • Re: Linux Kernel 2.2.x Mariusz Woloszyn (Fri Aug 24 2001 - 02:54:31 PDT)
    • Re: Linux Kernel 2.2.x Wojtek Kaniewski (Fri Aug 24 2001 - 14:07:10 PDT)
• SuSE Security Announcement: sendmail (SuSE-SA:2001:028) Roman Drahtmueller (Thu Aug 23 2001 - 09:44:26 PDT)
• Respondus v1.1.2 stores passwords using weak encryption Desmond Irvine (Thu Aug 23 2001 - 12:24:57 PDT)
  • Re: Respondus v1.1.2 stores passwords using weak encryption E. van Elk (Thu Aug 23 2001 - 13:28:05 PDT)
  • Re: Respondus v1.1.2 stores passwords using weak encryption Philip Rowlands (Fri Aug 24 2001 - 03:55:45 PDT)
• Cisco Security Advisory: CBOS Web-based Configuration Utility Vulnerability Cisco Systems Product Security Incident Response Team (Thu Aug 23 2001 - 23:00:00 PDT)
  • Re: Cisco Security Advisory: CBOS Web-based Configuration Utility Vulnerability Joel Maslak (Fri Aug 24 2001 - 13:16:46 PDT)
  • RE: Cisco Security Advisory: CBOS Web-based Configuration Utility Vulnerability Snow, Corey (Fri Aug 24 2001 - 14:31:17 PDT)
• Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities Valentin Butanescu (Fri Aug 24 2001 - 00:44:18 PDT)
• [SNS Advisory No.40] TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability snsadvat_private (Fri Aug 24 2001 - 02:55:39 PDT)
• [CLA-2001:413] Conectiva Linux Security Announcement - telnet secureat_private (Fri Aug 24 2001 - 11:50:00 PDT)
• Security Update: [CSSA-2001-SCO.12] OpenServer: mana buffer overflow sco-securityat_private (Fri Aug 24 2001 - 11:55:37 PDT)
• IBM AIX Security Notification: Web site defacements IBM MSS Advisory Service (Fri Aug 24 2001 - 12:37:02 PDT)
• Security Update [CSSA-2001-032.0] Linux - sendmail instant root exploit Caldera Support Info (Fri Aug 24 2001 - 12:57:21 PDT)
• Tool prevents logging of default.ida (IIS / NT) Hardy Krause (Fri Aug 24 2001 - 14:59:31 PDT)
• Java Plugin 1.4 with JRE 1.3 -> Ignores certificates. Daniel Kasmeroglu (Fri Aug 24 2001 - 15:58:58 PDT)
• [Immunix-announce] ImmunixOS 7.0 sendmail update Immunix Security Team (Fri Aug 24 2001 - 17:25:34 PDT)
  • [Immunix-announce] ImmunixOS 7.0 sendmail update Immunix Security Team (Fri Aug 24 2001 - 17:25:34 PDT)
• ImmunixOS 7.0 sendmail update Immunix Security Team (Fri Aug 24 2001 - 17:25:34 PDT)
• Hardware defences against SYN flooding Thomas C. Greene (Fri Aug 24 2001 - 20:51:25 PDT)
  • Re: Hardware defences against SYN flooding Scott Walker Register (Thu Aug 30 2001 - 16:21:29 PDT)
• Security certificate negation by content provider Eddie Chandler (Sat Aug 25 2001 - 06:12:44 PDT)
  • Re: Security certificate negation by content provider Dave Ahmed (Sat Aug 25 2001 - 12:44:50 PDT)
• qpopper and pam.d Charles Chear (Sat Aug 25 2001 - 10:16:30 PDT)
  • Re: qpopper and pam.d Ron Bradburn (Sat Aug 25 2001 - 16:16:34 PDT)
• @Home network subject to DHCP hijacking Roadkill Randu (Sat Aug 25 2001 - 15:20:25 PDT)
  • Re: @Home network subject to DHCP hijacking Matthew Caron (Sat Aug 25 2001 - 19:43:10 PDT)
• SuSE 7.2 (& others) sendmail local xploit RoMaN SoFt / LLFB!! (Sun Aug 26 2001 - 02:45:39 PDT)
• security hole in os groupware suite PHProjekt Albrecht Guenther (Sun Aug 26 2001 - 13:39:06 PDT)
• LPRng/rhs-printfilters - remote execution of commands zen-parse (Mon Aug 27 2001 - 06:44:55 PDT)
  • Re: LPRng/rhs-printfilters - remote execution of commands Matt Bing (Mon Aug 27 2001 - 13:54:35 PDT)
• Eudora MUA: Risky practice Borja Marcos (Mon Aug 27 2001 - 00:36:49 PDT)
  • Re: Eudora MUA: Risky practice Will Bryant (Mon Aug 27 2001 - 09:27:39 PDT)
• Solaris Patchadd symlink exploit. Larry W. Cashdollar (Mon Aug 27 2001 - 09:17:52 PDT)
• ISS Advisory: Remote Buffer Overflow Vulnerability in HP-UX Line Printer Daemon X-Force (Mon Aug 27 2001 - 09:28:25 PDT)
• Dangerous temp file creation during installation of Netscape 6. Larry W. Cashdollar (Mon Aug 27 2001 - 10:55:27 PDT)
• WIN2000 and IIS Margaret CTR Rhodes (Mon Aug 27 2001 - 10:35:32 PDT)
  • Re: WIN2000 and IIS Marc Fossi (Mon Aug 27 2001 - 15:21:18 PDT)
• Re: Solaris Patchadd symlink exploit. Paul Szabo (Mon Aug 27 2001 - 14:06:08 PDT)
  • Netscape 6.01A ksh "here document" vulnerability. Larry W. Cashdollar (Tue Aug 28 2001 - 05:51:55 PDT)
• Security Update: [CSSA-2001-SCO.13] OpenServer: BIND buffer overflows sco-securityat_private (Mon Aug 27 2001 - 14:19:37 PDT)
• Security Update: [CSSA-2001-SCO.14] Open Unix, UnixWare: uidadmin buffer overflow sco-securityat_private (Mon Aug 27 2001 - 14:21:59 PDT)
• RE: Eudora MUA: Risky practice -> Security domains borjamat_private (Mon Aug 27 2001 - 18:11:48 PDT)
• javascript can write anything to windows98 registry Marcin Jackowski (Tue Aug 28 2001 - 01:21:10 PDT)
  • RE: javascript can write anything to windows98 registry Rob Lemos (Wed Aug 29 2001 - 08:33:21 PDT)
• easy remote detection of a running tripwire for webpages system johncybpkat_private (Tue Aug 28 2001 - 07:08:22 PDT)
  • Re: easy remote detection of a running tripwire for webpages system Gabriel Lawrence (Tue Aug 28 2001 - 20:28:49 PDT)
  • RE: easy remote detection of a running tripwire for webpages system Bennett Samowich (Wed Aug 29 2001 - 05:47:09 PDT)
• MDKSA-2001:071 - kernel 2.4 update Linux Mandrake Security Team (Tue Aug 28 2001 - 09:39:10 PDT)
• Security Update: [CSSA-2001-SCO.15] Open Unix: lpsystem buffer overflow sco-securityat_private (Tue Aug 28 2001 - 10:14:23 PDT)
• KaZaA / Morpheus Exploit??? (At least a way to get username and such) Jesse Sunday (Tue Aug 28 2001 - 12:34:03 PDT)
• [CLA-2001:415] Conectiva Linux Security Announcement - xloadimage secureat_private (Tue Aug 28 2001 - 07:21:27 PDT)
• [CLA-2001:416] Conectiva Linux Security Announcement - xinetd secureat_private (Wed Aug 29 2001 - 11:09:29 PDT)
• [CLA-2001:417] Conectiva Linux Security Announcement - openldap secureat_private (Wed Aug 29 2001 - 11:47:55 PDT)
• RUS-CERT Advisory 2001-08:01 Florian Weimer (Wed Aug 29 2001 - 10:24:49 PDT)
• ISS Advisory: Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon X-Force (Wed Aug 29 2001 - 12:02:12 PDT)
  • Re: ISS Advisory: Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon Emre Yildirim (Wed Aug 29 2001 - 17:09:29 PDT)
  • Re: ISS Advisory: Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon Keith Stevenson (Thu Aug 30 2001 - 06:19:58 PDT)
• Security Advisory for Bugzilla v2.13 and older David Miller (Wed Aug 29 2001 - 15:55:42 PDT)
• ImmunixOS 7.0 update for xinetd Immunix Security Team (Wed Aug 29 2001 - 18:31:09 PDT)
• xinetd 2.3.0 audit status Solar Designer (Wed Aug 29 2001 - 18:40:09 PDT)
• Kazaa and Morpehus Exploit (how to view their shared files) Mike Hunt (Wed Aug 29 2001 - 18:34:31 PDT)
  • Re: Kazaa and Morpehus Exploit (how to view their shared files) White Vampire (Wed Aug 29 2001 - 22:59:04 PDT)
• carol clickme: Outlook Express 6.00 http-equivat_private (Wed Aug 29 2001 - 20:25:39 PDT)
• eRisk Security Advisory: PhpMyExplorer vulnerable to directory traversal. Ben Ford (Wed Aug 29 2001 - 20:31:52 PDT)
  • Re: eRisk Security Advisory: PhpMyExplorer vulnerable to directory traversal. Ben Ford (Thu Aug 30 2001 - 12:04:44 PDT)
• [Immunix-announce] ImmunixOS 7.0 update for xinetd Immunix Security Team (Wed Aug 29 2001 - 18:31:09 PDT)
• Possible Denial of Service with PHP and Cyrus IMAP on BSDi 4.2 Administrator (MG) (Wed Aug 29 2001 - 22:38:18 PDT)
• [CLA-2001:418] Conectiva Linux Security Announcement - openssl secureat_private (Thu Aug 30 2001 - 12:11:54 PDT)
• Sun Security Bulletin #00206 (fwd) [Patches for in.lpd] Jay D. Dyson (Thu Aug 30 2001 - 14:06:30 PDT)
• Sun Security Bulletin #00207 (fwd) [Patches for snmpXdmid.] Jay D. Dyson (Thu Aug 30 2001 - 16:12:19 PDT)
• gnut gnutella client html injection pat_private (Thu Aug 30 2001 - 16:35:30 PDT)
• RE: easy remote detection of a running tripwire for webpages syst em Jonathan Sartin (Wed Aug 29 2001 - 01:27:11 PDT)
  • RE: easy remote detection of a running tripwire for webpages syst em Jordan K Wiens (Fri Aug 31 2001 - 05:17:00 PDT)
    • RE: easy remote detection of a running tripwire for webpages syst em Fernando Cardoso (Fri Aug 31 2001 - 07:56:21 PDT)
    • Re: easy remote detection of a running tripwire for webpages syst em Johnny Cyberpunk (Fri Aug 31 2001 - 09:03:40 PDT)
• Programmer claims MS eBook Reader Cracked Jon O . (Thu Aug 30 2001 - 12:15:48 PDT)
• MDKSA-2001:076 - xinetd update Linux Mandrake Security Team (Fri Aug 31 2001 - 14:06:39 PDT)
• MDKSA-2001:074 - WindowMaker update Linux Mandrake Security Team (Fri Aug 31 2001 - 14:05:29 PDT)
• Solaris LPD Exploit (fwd) Dave Ahmad (Fri Aug 31 2001 - 15:08:09 PDT)
• MDKSA-2001:072 - fetchmail update Linux Mandrake Security Team (Fri Aug 31 2001 - 14:04:11 PDT)
• MDKSA-2001:073 - xli update Linux Mandrake Security Team (Fri Aug 31 2001 - 14:04:47 PDT)
• MDKSA-2001:075 - sendmail update Linux Mandrake Security Team (Fri Aug 31 2001 - 14:06:01 PDT)
• Vulnerability in credit union's E-statement feature BlueJAMC (Fri Aug 31 2001 - 21:48:10 PDT)
• INCORRECT PATCH REVISIONS: Re: Sun Security Bulletin #00207 David Foster (Fri Aug 31 2001 - 14:53:33 PDT)

Last message date: Sat Sep 01 2001 - 09:32:38 PDT
Archived on: Sat Sep 01 2001 - 09:33:15 PDT

This archive was generated by hypermail 2b30 : Sat Sep 01 2001 - 09:33:15 PDT