bugtraq 2001/09
By Thread

Starting: Sun Sep 02 2001 - 11:44:44 PDT
Ending: Sat Sep 29 2001 - 23:51:59 PDT

• verizon wireless website gaping privacy holes Marc Slemko (Sat Sep 01 2001 - 18:36:20 PDT)
  • Re: verizon wireless website gaping privacy holes Gareth Owen (Sun Sep 02 2001 - 13:31:20 PDT)
    • Re: verizon wireless website gaping privacy holes Steve Shockley (Sat Sep 01 2001 - 23:32:09 PDT)
    • Re: verizon wireless website gaping privacy holes Russell Handorf (Sun Sep 02 2001 - 23:50:44 PDT)
  • RE: verizon wireless website gaping privacy holes Jeff Carnahan (Sun Sep 02 2001 - 23:36:14 PDT)
  • Re: verizon wireless website gaping privacy holes Mark Parry (Mon Sep 03 2001 - 10:10:20 PDT)
    • Re: verizon wireless website gaping privacy holes Kevin Fu (Tue Sep 04 2001 - 05:37:20 PDT)
• Re: Vulnerability in credit union's E-statement feature Scott Dier (Sat Sep 01 2001 - 22:10:39 PDT)
  • Re: Vulnerability in credit union's E-statement feature Hugo van der Kooij (Sat Sep 01 2001 - 11:34:23 PDT)
    • Re: Vulnerability in credit union's E-statement feature Crispin Cowan (Sun Sep 02 2001 - 14:16:29 PDT)
• POP3Lite 0.2.3b minor client side DoS and message injection Daniel Roethlisberger (Sun Sep 02 2001 - 18:43:45 PDT)
• Possible Issue with Netinfo and Mac OS X Benjamin Gardiner (Sun Sep 02 2001 - 19:22:50 PDT)
  • Re: Possible Issue with Netinfo and Mac OS X Ethan Benson (Mon Sep 03 2001 - 02:33:23 PDT)
    • Re: Possible Issue with Netinfo and Mac OS X Matthew Seaman (Mon Sep 03 2001 - 09:18:12 PDT)
  • Re: Possible Issue with Netinfo and Mac OS X Marukka (Mon Sep 03 2001 - 01:07:39 PDT)
    • Re: Possible Issue with Netinfo and Mac OS X Marc Liyanage (Mon Sep 03 2001 - 14:37:37 PDT)
  • RE: Possible Issue with Netinfo and Mac OS X Dixie Flatline (Mon Sep 03 2001 - 04:57:26 PDT)
  • Re: Possible Issue with Netinfo and Mac OS X kang (Mon Sep 03 2001 - 03:24:11 PDT)
  • Re: Possible Issue with Netinfo and Mac OS X Stuart Moore (Mon Sep 03 2001 - 11:49:28 PDT)
• [SNS Advisory No.41] iPlanet Messaging Server 5.1(evaluation copy) Buffer Overflow Vulnerability snsadvat_private (Sun Sep 02 2001 - 19:51:43 PDT)
• RE: Programmer claims MS eBook Reader Cracked òÑÇÉÎ íÉÈÁÉÌ àÒØÅ×ÉÞ (Sun Sep 02 2001 - 22:04:17 PDT)
• S/Key keyinit(1) authentication (lack thereof) + sudo(1) Frank Tobin (Sun Sep 02 2001 - 11:16:18 PDT)
  • Re: S/Key keyinit(1) authentication (lack thereof) + sudo(1) Derek Martin (Mon Sep 03 2001 - 07:18:58 PDT)
  • Re: S/Key keyinit(1) authentication (lack thereof) + sudo(1) Wietse Venema (Tue Sep 04 2001 - 07:48:39 PDT)
    • Re: S/Key keyinit(1) authentication (lack thereof) + sudo(1) Frank Tobin (Tue Sep 04 2001 - 15:06:32 PDT)
• SuSE Security Announcement: nkitb/nkitserv/telnetd Sebastian Krahmer (Mon Sep 03 2001 - 05:58:04 PDT)
• FW: HP-UX series 800 10.X patch digest Boyce, Nick (Mon Sep 03 2001 - 03:15:55 PDT)
• fucking basilix bug Karol Wiesek (Mon Sep 03 2001 - 06:49:15 PDT)
• Re: Fw: easy remote detection of a running tripwire for webpages syst em Matthew Wakeling (Mon Sep 03 2001 - 01:15:24 PDT)
• KaZaa/Morpheus non-exploits Walter Hop (Mon Sep 03 2001 - 15:42:47 PDT)
• hpux warez auto300526at_private (Mon Sep 03 2001 - 11:13:03 PDT)
  • RE: hpux warez Stefaan A Eeckels (Tue Sep 04 2001 - 08:25:21 PDT)
  • Re: hpux warez Juan Vera (Tue Sep 04 2001 - 10:42:47 PDT)
• Re: Lotus Domino DoS solution Michel Arboi (Mon Sep 03 2001 - 05:31:23 PDT)
  • Re: Lotus Domino DoS solution Darren Davison (Tue Sep 04 2001 - 10:41:45 PDT)
• Re: INCORRECT PATCH REVISIONS: Re: Sun Security Bulletin #00207 Casper Dik (Tue Sep 04 2001 - 06:52:18 PDT)
• PGPsdk Key Validity Vulnerability Patrick Oonk (Tue Sep 04 2001 - 07:37:07 PDT)
  • Re: PGPsdk Key Validity Vulnerability Florian Weimer (Tue Sep 04 2001 - 09:17:52 PDT)
• [ Hackerslab bug_paper ] Informix-SQL application vulnerability s96192at_private (Tue Sep 04 2001 - 06:18:47 PDT)
  • Re: [ Hackerslab bug_paper ] Informix-SQL application vulnerability Gary L. Burnore (Tue Sep 04 2001 - 10:21:00 PDT)
  • Re: [ Hackerslab bug_paper ] Informix-SQL application vulnerability Craig Ruefenacht (Mon Sep 10 2001 - 13:16:40 PDT)
• Re: AOLserver 3.0 vulnerability Kriston Rehberg (Tue Sep 04 2001 - 07:37:34 PDT)
• Linux Administrator's Security Guide (LASG) updated Kurt Seifried (Mon Sep 03 2001 - 22:23:47 PDT)
• Telnet DoS Vulnerability in Marconi ATM Switch Software Christopher Kruslicky (Tue Sep 04 2001 - 10:02:05 PDT)
• Gauntlet Vulnerability aleph1at_private (Tue Sep 04 2001 - 22:17:17 PDT)
• BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem Gabriel Ambuehl (Tue Sep 04 2001 - 11:38:12 PDT)
• Highly respected OpenBSD, OpenSSH programmer censors website, cites DMCA Jon O . (Tue Sep 04 2001 - 17:08:11 PDT)
• ShopPlus Cart Kernel|X| (Wed Sep 05 2001 - 12:06:56 PDT)
• directorymanager bug Karol Wiesek (Wed Sep 05 2001 - 10:20:17 PDT)
• Announce: Cerberus Internet Scanner David Litchfield (Wed Sep 05 2001 - 10:49:51 PDT)
• [CLA-2001:419] Conectiva Linux Security Announcement - fetchmail secureat_private (Wed Sep 05 2001 - 12:31:37 PDT)
• pam limits drops privileges Tarhon-Onu Victor (Wed Sep 05 2001 - 14:37:52 PDT)
  • Re: pam limits drops privileges Chris Adams (Wed Sep 05 2001 - 21:16:05 PDT)
  • Re: pam limits drops privileges Lukasz Trabinski (Thu Sep 06 2001 - 01:27:50 PDT)
    • Re: pam limits drops privileges Tarhon-Onu Victor (Thu Sep 06 2001 - 06:39:42 PDT)
  • Re: pam limits drops privileges Lukasz Trabinski (Sun Sep 09 2001 - 09:53:13 PDT)
• %u encoding IDS bypass vulnerability Marc Maiffret (Wed Sep 05 2001 - 14:45:10 PDT)
• [CLA-2001:420] Conectiva Linux Security Announcement - mailman secureat_private (Wed Sep 05 2001 - 14:03:33 PDT)
• Various problems in Baltimore WebSweeper URL filtering edvice Security Services (Wed Sep 05 2001 - 01:57:27 PDT)
• Cisco Security Advisory: Cisco Secure Intrusion Detection System Signature Obfuscation Vulnerability Cisco Systems Product Security Incident Response Team (Wed Sep 05 2001 - 21:30:00 PDT)
• NetBSD Security Advisory 2001-015: Insufficient checking of lengths passed to kernel NetBSD Security Officer (Thu Sep 06 2001 - 09:57:42 PDT)
• NetBSD Security Advisory 2001-016: unsafe chdir usage in fts(3) NetBSD Security Officer (Thu Sep 06 2001 - 10:00:45 PDT)
• Guntella Built-in DoS Robert Stoll (Thu Sep 06 2001 - 09:52:30 PDT)
  • Re: Guntella Built-in DoS Brian Smith (Thu Sep 06 2001 - 13:05:36 PDT)
  • Re: Guntella Built-in DoS Walker Traylor (Thu Sep 06 2001 - 15:26:27 PDT)
  • Re: Guntella Built-in DoS Steven M. Bellovin (Thu Sep 06 2001 - 16:42:33 PDT)
• NetBSD Security Advisory 2001-017: sendmail(8) incorrect command line argument check NetBSD Security Officer (Thu Sep 06 2001 - 10:04:54 PDT)
• [CLA-2001:421] Conectiva Linux Security Announcement - mod_auth_mysql secureat_private (Thu Sep 06 2001 - 10:22:33 PDT)
• ISS Alert: Multiple Vendor IDS Unicode Bypass Vulnerability X-Force (Thu Sep 06 2001 - 10:53:33 PDT)
• Malformed Fragmented Packets DoS Dlink Firewall/Routers Fate Research Labs (Thu Sep 06 2001 - 16:54:06 PDT)
• SuSE Security Announcement: screen (SuSE-SA:2001:030) Roman Drahtmueller (Wed Sep 05 2001 - 09:35:09 PDT)
• rlmadmin v3.8M view file symlink vulnerability Digital Shadow (Fri Sep 07 2001 - 02:32:46 PDT)
• Exchange Public Folders Information Leakage Aviram Jenik (Fri Sep 07 2001 - 02:21:07 PDT)
• Microsoft Exchange + Norton AntiVirus leak local information Matthias Andree (Fri Sep 07 2001 - 02:46:02 PDT)
  • Re: Microsoft Exchange + Norton AntiVirus leak local information Sym Security (Wed Sep 12 2001 - 12:01:39 PDT)
• Re: tdforum 1.2 Messageboard 5-i's (Thu Sep 06 2001 - 21:21:57 PDT)
• *** Security Advisory *** Power UP HTML Steve Shepherd (Fri Sep 07 2001 - 10:57:43 PDT)
• Re: Microsoft Security Bulletin MS01-047 Craig Boston (Fri Sep 07 2001 - 12:55:40 PDT)
• ProFTPd and reverse DNS Matthew S . Hallacy (Fri Sep 07 2001 - 14:38:27 PDT)
  • Re: ProFTPd and reverse DNS Michael S. Fischer (Fri Sep 07 2001 - 17:16:14 PDT)
    • Re: ProFTPd and reverse DNS Noah (Fri Sep 07 2001 - 23:35:34 PDT)
  • Re: ProFTPd and reverse DNS The Flying Hamster (Sat Sep 08 2001 - 01:21:37 PDT)
  • Re: ProFTPd and reverse DNS Peter van Dijk (Sat Sep 08 2001 - 03:35:25 PDT)
    • RE: ProFTPd and reverse DNS Jeroen Massar (Sat Sep 08 2001 - 15:41:06 PDT)
  • Re: ProFTPd and reverse DNS Krzysztof Halasa (Sat Sep 08 2001 - 02:36:14 PDT)
  • Re: ProFTPd and reverse DNS Karsten W. Rohrbach (Tue Sep 11 2001 - 11:13:38 PDT)
• Bug in compile portion for older versions of CheckPoint Firewalls adarienat_private (Fri Sep 07 2001 - 18:18:31 PDT)
• sglMerchant Version 1.0 Alexey Sintsov (Fri Sep 07 2001 - 21:06:16 PDT)
• Insecure handling of notes in Slashcode jesus lovejones (Fri Sep 07 2001 - 22:06:32 PDT)
  • Re: Insecure handling of notes in Slashcode Anuff Joey (Sat Sep 08 2001 - 13:50:58 PDT)
  • Re: Insecure handling of notes in Slashcode Chris Nandor (Sun Sep 09 2001 - 07:48:40 PDT)
• Shopping Cart Version 1.23 Alexey Sintsov (Fri Sep 07 2001 - 22:31:26 PDT)
• Bug in remote GUI access in CheckPoint Firewall adarienat_private (Fri Sep 07 2001 - 18:40:42 PDT)
  • RE: Bug in remote GUI access in CheckPoint Firewall pestoat_private (Mon Sep 10 2001 - 12:06:41 PDT)
• Multiple vendor 'Taylor UUCP' problems. zen-parse (Sat Sep 08 2001 - 03:58:39 PDT)
• AOLserver exploit code qitest1 (Thu Sep 06 2001 - 10:39:40 PDT)
• Notice about seconds overroll - S7K bug Tonu Samuel (Sun Sep 09 2001 - 04:04:41 PDT)
  • Re: Notice about seconds overroll - S7K bug Robert Bihlmeyer (Wed Sep 12 2001 - 03:05:13 PDT)
    • Re: Notice about seconds overroll - S7K bug Tonu Samuel (Fri Sep 14 2001 - 11:27:24 PDT)
• PATCH to BIND-8.2.3 to get rid of the, unnecessary, and potentially dangerous fchown() calls Greg A. Woods (Sat Sep 08 2001 - 11:56:24 PDT)
• Digital Unix 4.0x msgchk multiple vulnerabilities SeungHyun Seo (Sun Sep 09 2001 - 19:54:07 PDT)
  • FW: Digital Unix 4.0x msgchk multiple vulnerabilities Boyce, Nick (Wed Sep 12 2001 - 02:54:41 PDT)
• Re: CERT Advisory CA-2001-25 Steve Watt (Sun Sep 09 2001 - 21:30:51 PDT)
  • Re: CERT Advisory CA-2001-25 (smap overflow) Keith Young (Mon Sep 10 2001 - 10:32:50 PDT)
    • Re: CERT Advisory CA-2001-25 (smap overflow) Keith Young (Sun Sep 16 2001 - 10:00:52 PDT)
    • Re: CERT Advisory CA-2001-25 (smap overflow) mod seven (Mon Sep 24 2001 - 16:19:50 PDT)
  • RE: CERT Advisory CA-2001-25 Jeremy Epstein (Mon Sep 10 2001 - 12:20:39 PDT)
    • RE: CERT Advisory CA-2001-25 Carson Gaspar (Mon Sep 10 2001 - 17:59:44 PDT)
  • Re: CERT Advisory CA-2001-25 Ian Finlay (Mon Sep 10 2001 - 10:03:52 PDT)
    • Re: CERT Advisory CA-2001-25 arkat_private (Tue Sep 11 2001 - 03:14:10 PDT)
• Draft Bill on privacy/security -- requires certified security technologies in all devices Jon O . (Sun Sep 09 2001 - 15:01:40 PDT)
  • Re: Draft Bill on privacy/security -- requires certified security technologies in all devices David Alban (Mon Sep 10 2001 - 18:39:03 PDT)
• [RHSA-2001:103-04] Updated fetchmail packages available bugzillaat_private (Mon Sep 10 2001 - 09:07:34 PDT)
• More security problems in Apache on Mac OS X Jacques Distler (Mon Sep 10 2001 - 07:02:07 PDT)
  • Re: More security problems in Apache on Mac OS X Eric Bennett (Mon Sep 10 2001 - 16:44:05 PDT)
  • Re: More security problems in Apache on Mac OS X Paul Lieberman (Tue Sep 11 2001 - 15:37:08 PDT)
    • Re: More security problems in Apache on Mac OS X Jeremey A. Mates (Tue Sep 11 2001 - 19:13:25 PDT)
    • Re: More security problems in Apache on Mac OS X Jeremey A. Mates (Tue Sep 11 2001 - 19:01:09 PDT)
  • Re: More security problems in Apache on Mac OS X Kee Hinckley (Tue Sep 11 2001 - 23:22:36 PDT)
• [RHSA-2001:106-06] New sendmail packages available which fix a local root exploit bugzillaat_private (Mon Sep 10 2001 - 09:08:26 PDT)
• RUS-CERT Advisory 2001-09:01 Florian Weimer (Mon Sep 10 2001 - 07:53:52 PDT)
• [RHSA-2001:109-05] Updated xinetd package available for Red Hat Linux 7 and 7.1 bugzillaat_private (Mon Sep 10 2001 - 09:09:28 PDT)
  • [RHSA-2001:109-05] Updated xinetd package available for Red Hat Linux 7 and 7.1 bugzillaat_private (Mon Sep 10 2001 - 09:09:48 PDT)
• Security Update [CSSA-033.0]Linux - uucp argument handling problems Support Info (Mon Sep 10 2001 - 10:06:10 PDT)
• [RHSA-2001:107-07] New bugzilla packages are available bugzillaat_private (Mon Sep 10 2001 - 12:42:57 PDT)
• SuSE Security Announcement: apache-contrib (SuSE-SA:2001:31) Thomas Biege (Mon Sep 10 2001 - 10:25:02 PDT)
• DeCSS executable prime number Thomas C. Greene (Mon Sep 10 2001 - 21:57:53 PDT)
• IBM AIX: Buffer Overflow Vulnerabilities in lpd IBM MSS Advisory Service (Tue Sep 11 2001 - 04:00:58 PDT)
• NetOP School Admin Vulnerability for Windows 2000 Terminal Services and NT4 Jesse Smythe (Mon Sep 10 2001 - 19:11:05 PDT)
• [CLA-2001:425] Conectiva Linux Security Announcement - uucp secureat_private (Tue Sep 11 2001 - 14:32:28 PDT)
• security alert: speechd from speechio.org Tyler Spivey (Tue Sep 11 2001 - 14:13:24 PDT)
• mailto links [Segmen] (Tue Sep 11 2001 - 10:50:34 PDT)
  • Re: mailto links C. Cooke (Tue Sep 11 2001 - 15:38:31 PDT)
  • RE: mailto links Craig Humphrey (Tue Sep 11 2001 - 15:21:08 PDT)
  • Re: mailto links [Segmen] (Wed Sep 12 2001 - 00:37:35 PDT)
  • Re: mailto links Martin Stricker (Wed Sep 12 2001 - 14:54:39 PDT)
    • Re: mailto links Scott Buchanan (Wed Sep 12 2001 - 21:54:43 PDT)
  • RE: mailto links Lennard Bakker (Wed Sep 12 2001 - 01:48:34 PDT)
• Textor Webmasters Ltd (listrec.pl) Alexey Sintsov (Tue Sep 11 2001 - 21:01:24 PDT)
• [SNS Advisory No.42] Trend Micro InterScan eManager for NT Multiple Program Buffer Overflow Vulnerability snsadvat_private (Tue Sep 11 2001 - 23:01:24 PDT)
• EFTP Version 2.0.7.337 vulnerabilities ByteRage (Wed Sep 12 2001 - 04:36:22 PDT)
• Is there user Anna at your host ? Alexander A. Kelner (Wed Sep 12 2001 - 07:17:41 PDT)
  • Re: Is there user Anna at your host ? Josha Bronson (Wed Sep 12 2001 - 10:12:56 PDT)
  • RE: Is there user Anna at your host ? Andrew Hatfield (Wed Sep 12 2001 - 09:52:28 PDT)
  • Re: Is there user Anna at your host ? ET LoWNOISE (Wed Sep 12 2001 - 12:02:07 PDT)
  • Re: Is there user Anna at your host ? Tobias J. Kreidl (Wed Sep 12 2001 - 11:20:05 PDT)
    • Re: Is there user Anna at your host ? Ram'on Reyes Carri'on (Thu Sep 13 2001 - 08:32:02 PDT)
  • Re: Is there user Anna at your host ? Mariusz Woloszyn (Thu Sep 13 2001 - 01:30:33 PDT)
  • Re: Is there user Anna at your host ? Bill Munger (Thu Sep 13 2001 - 10:32:59 PDT)
    • Re: Is there user Anna at your host ? Heikki Korpela (Thu Sep 13 2001 - 11:08:09 PDT)
  • Re: Is there user Anna at your host ? Tobias J. Kreidl (Thu Sep 13 2001 - 10:06:50 PDT)
• Cisco Security Advisory: Vulnerable SSL implementation in iCDN Cisco Systems Product Security Incident Response Team (Wed Sep 12 2001 - 09:04:35 PDT)
• FREAK SHOW: Outlook Express 6.00 http-equivat_private (Wed Sep 12 2001 - 10:39:29 PDT)
• MDKSA-2001:073-1 - xli/xloadimage update Linux Mandrake Security Team (Wed Sep 12 2001 - 14:10:16 PDT)
• Hushmail.com accounts vulnerable to script attack. onesemicolonat_private (Wed Sep 12 2001 - 17:31:03 PDT)
  • Re: Hushmail.com accounts vulnerable to script attack. Brian Smith (Thu Sep 13 2001 - 08:57:15 PDT)
    • Re: Hushmail.com accounts vulnerable to script attack. Friday Germany (Thu Sep 13 2001 - 22:08:14 PDT)
  • Re: Hushmail.com accounts vulnerable to script attack. Brian Smith (Tue Sep 18 2001 - 18:04:11 PDT)
• Myownemail.com accounts vulnerable to script attack. onesemicolonat_private (Wed Sep 12 2001 - 17:30:28 PDT)
• leak of information in counterpane/Bruce Schneier's Password Safe program Valentin Butanescu (Wed Sep 12 2001 - 18:20:15 PDT)
• Bank of America Online Banking Security Brad Will (Thu Sep 13 2001 - 22:03:10 PDT)
  • Re: Bank of America Online Banking Security Eric N. Valor (Fri Sep 14 2001 - 12:57:54 PDT)
• Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc) Syed Mohamed A (Fri Sep 14 2001 - 10:27:49 PDT)
• RE: Security Vulnerability with Microsoft Index Server 2.0(Sample file reveals file info, physical path etc) Matthew Reams (Fri Sep 14 2001 - 11:24:07 PDT)
• Majordomo default vulns Marco van Berkum (Fri Sep 14 2001 - 02:24:27 PDT)
• Proof-Of-Concept Perl Script for Bugtraq-ID: #3334 Mario Schmidt (Sat Sep 15 2001 - 11:17:22 PDT)
• Statically Detecting Likely Buffer Overflow Vulnerabilities aleph1at_private (Sat Sep 15 2001 - 15:41:18 PDT)
• Detecting Format-String Vulnerabilities with Type Qualifiers aleph1at_private (Sat Sep 15 2001 - 15:50:44 PDT)
• advisory Kernel|X| (Sat Sep 15 2001 - 17:44:51 PDT)
• ARCserve 6.61 Share Access Vulnerability ron (Sat Sep 15 2001 - 21:27:07 PDT)
  • RE: ARCserve 6.61 Share Access Vulnerability Paulo Filipe Mira (Mon Sep 17 2001 - 09:02:56 PDT)
  • RE: ARCserve 6.61 Share Access Vulnerability David Sexton (Mon Sep 17 2001 - 03:31:43 PDT)
  • Re: ARCserve 6.61 Share Access Vulnerability ron (Mon Sep 17 2001 - 12:14:58 PDT)
• MySQL (was Re: Notice about seconds overroll - S7K bug) Dennis Murphy (Sun Sep 16 2001 - 13:24:30 PDT)
  • Re: MySQL (was Re: Notice about seconds overroll - S7K bug) Radu Rendec (Mon Sep 17 2001 - 05:34:48 PDT)
  • RE: MySQL (was Re: Notice about seconds overroll - S7K bug) Rowan Kerr (Mon Sep 17 2001 - 13:10:14 PDT)
• Yet another path disclosure vulnerability KK Mookhey (Mon Sep 17 2001 - 02:02:08 PDT)
• AW: ARCserve 6.61 Share Access Vulnerability Marcus Bednorz (Mon Sep 17 2001 - 01:09:44 PDT)
• Problems in Forte Developer 6 dbx and install docs Scott Schwartz (Mon Sep 17 2001 - 11:05:23 PDT)
  • Re: Problems in Forte Developer 6 dbx and install docs Casper Dik (Tue Sep 18 2001 - 03:46:11 PDT)
• Lotus Notes: File attachments may be extracted regardless of document security jjoreat_private (Mon Sep 17 2001 - 11:52:52 PDT)
  • Re: Lotus Notes: File attachments may be extracted regardless of document security Katherine_Spanbauerat_private (Mon Sep 17 2001 - 18:19:39 PDT)
• aa.com not encrypting customer transaction data Chris Fairbourne (Mon Sep 17 2001 - 10:39:06 PDT)
• Re: FW: aa.com not encrypting customer transaction data (KMM508728C0KM) AA Webmaster (Tue Sep 18 2001 - 05:41:33 PDT)
  • Re: aa.com not encrypting customer transaction data (KMM508728C0KM) Karsten W. Rohrbach (Tue Sep 18 2001 - 09:43:05 PDT)
• Re: New Worm ? Yuri Robbers (Tue Sep 18 2001 - 08:29:51 PDT)
• OpenSSH: sftp & bypassing keypair auth restrictions Peter W (Tue Sep 18 2001 - 05:24:07 PDT)
• SECURITY RISK: ZyXEL ADSL Router 642R - WAN filter bypass from internal network Kistler Ueli (Tue Sep 18 2001 - 02:39:33 PDT)
• MDKSA-2001:077 - apache update Linux Mandrake Security Team (Tue Sep 18 2001 - 10:45:36 PDT)
• Nimda Worm Dave Ahmad (Tue Sep 18 2001 - 17:49:43 PDT)
• New vulnerability in IIS4.0/5.0 ALife // BERG (Wed Sep 19 2001 - 02:38:16 PDT)
  • Re: New vulnerability in IIS4.0/5.0 Dave Ahmad (Wed Sep 19 2001 - 12:50:02 PDT)
    • Re: New vulnerability in IIS4.0/5.0 César González (Wed Sep 19 2001 - 14:30:42 PDT)
    • Re: New vulnerability in IIS4.0/5.0 Paul McGovern (Thu Sep 20 2001 - 20:58:36 PDT)
  • Re: New vulnerability in IIS4.0/5.0 C?sar Gonz?lez (Wed Sep 19 2001 - 12:34:59 PDT)
  • RE: New vulnerability in IIS4.0/5.0 Microsoft Security Response Center (Wed Sep 19 2001 - 19:12:16 PDT)
• Websphere cookie/sessionid predictable Marc Heuse (Wed Sep 19 2001 - 10:43:39 PDT)
  • RE: Websphere cookie/sessionid predictable Dawes, Rogan (ZA - Johannesburg) (Thu Sep 20 2001 - 04:13:37 PDT)
    • Re: Websphere cookie/sessionid predictable Arun Kumar (Fri Sep 28 2001 - 15:34:48 PDT)
  • Re: Websphere cookie/sessionid predictable Job de Haas (Thu Sep 27 2001 - 10:22:59 PDT)
• Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336) Scott Walker Register (Wed Sep 19 2001 - 16:08:44 PDT)
• Security Update: [CSSA-2001-SCO.17] OpenServer: vi /tmp vulnerability sco-securityat_private (Wed Sep 19 2001 - 14:32:46 PDT)
• lotus domino server 5.08 is very gabby Frank.Boldewinat_private (Tue Sep 18 2001 - 23:47:40 PDT)
  • Re: lotus domino server 5.08 is very gabby Darren Davison (Thu Sep 20 2001 - 05:17:54 PDT)
• Vulnerability in SpoonFTP joetestaat_private (Thu Sep 20 2001 - 09:31:12 PDT)
• Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier) Przemyslaw Frasunek (Thu Sep 20 2001 - 12:48:34 PDT)
  • Re: Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier) David Terrell (Thu Sep 20 2001 - 14:59:39 PDT)
    • Re: Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier) Alexander Yurchenko (Thu Sep 20 2001 - 15:47:07 PDT)
    • Re: Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier) Emre Yildirim (Fri Sep 21 2001 - 11:47:55 PDT)
• UPDATE - Cisco Security Advisory: Multiple SSH vulnerabilities Cisco Systems Product Security Incident Response Team (Thu Sep 20 2001 - 12:03:04 PDT)
• SuSE Security Announcement: wmaker/WindowMaker (SuSE-SA:2001:032) Thomas Biege (Thu Sep 20 2001 - 14:55:31 PDT)
• Advisory: Half-Life remote buffer overflow vulnerability Stanley G. Bubrouski (Thu Sep 20 2001 - 17:53:51 PDT)
  • IRM Security Advisory: Xcache Path Disclosure Vulnerability advisoriesat_private (Fri Sep 21 2001 - 05:51:24 PDT)
• squid DoS Vladimir Ivaschenko (Fri Sep 21 2001 - 01:48:47 PDT)
• MDKSA-2001:078 - uucp update Linux Mandrake Security Team (Fri Sep 21 2001 - 08:56:08 PDT)
• script to find apache users gabriel maggiotti (Thu Sep 20 2001 - 18:27:43 PDT)
• Question about Local vulnerability in libutil derived with FreeBSD. Rumen Telbizov (Fri Sep 21 2001 - 02:31:12 PDT)
  • Re: Question about Local vulnerability in libutil derived with FreeBSD. Seth Arnold (Fri Sep 21 2001 - 09:45:52 PDT)
    • Re: Question about Local vulnerability in libutil derived with FreeBSD. Clifton Royston (Fri Sep 21 2001 - 11:53:06 PDT)
      • Re: Question about Local vulnerability in libutil derived with FreeBSD. Rick Kelly (Sat Sep 22 2001 - 15:55:58 PDT)
  • Re: Question about Local vulnerability in libutil derived with FreeBSD. Przemyslaw Frasunek (Fri Sep 21 2001 - 12:06:16 PDT)
• [RHSA-2001:072-14] Updated man package fixing GID security problems. bugzillaat_private (Fri Sep 21 2001 - 13:34:22 PDT)
• 3Com OfficeConnect 812/840 Router DoS exploit code Bruno Ratnieks (Fri Sep 21 2001 - 15:25:17 PDT)
  • Re: 3Com OfficeConnect 812/840 Router DoS exploit code Raistlin (Sun Sep 23 2001 - 02:09:48 PDT)
• Various problems in Baltimore MailSweeper Script filtering edvice Security Services (Sat Sep 22 2001 - 08:45:32 PDT)
• Response to "Path disclosure vulnerability in Oracle 9i and 8i Application Server" Oracle Security Alerts (Fri Sep 21 2001 - 16:04:03 PDT)
• Re: Bug in Apache 1.3.20 Server - Hackemate Research Grant Kaufmann (Sun Sep 23 2001 - 15:42:30 PDT)
• Release: RATS 1.2 and EGADS 0.7 ratsat_private (Sun Sep 23 2001 - 20:06:57 PDT)
• hylafax christer.obergat_private (Sun Sep 23 2001 - 02:50:45 PDT)
  • Re: hylafax Robert van der Meulen (Mon Sep 24 2001 - 09:54:12 PDT)
• Intershop4 MegaHz (Mon Sep 24 2001 - 09:58:46 PDT)
• Regarding: 3Com OfficeConnect 812/840 Router DoS exploit code Tom_Kinahanat_private (Mon Sep 24 2001 - 11:14:00 PDT)
  • Re: Regarding: 3Com OfficeConnect 812/840 Router DoS exploit code Raistlin (Tue Sep 25 2001 - 01:39:58 PDT)
• HACMP and port scans Eoin D. Fleming (Mon Sep 24 2001 - 14:27:13 PDT)
  • Re: HACMP and port scans Alex Polli (Tue Sep 25 2001 - 04:36:12 PDT)
    • Re: HACMP and port scans Andreas Siegert (Wed Sep 26 2001 - 01:14:40 PDT)
  • RE: HACMP and port scans Ali, Farrad (Tue Sep 25 2001 - 06:28:39 PDT)
    • RE: HACMP and port scans Steven Bishop (Fri Sep 28 2001 - 10:33:25 PDT)
  • Re: HACMP and port scans Andrew Leonard (Tue Sep 25 2001 - 11:08:23 PDT)
  • Re: HACMP and port scans Jordan Klein (Wed Sep 26 2001 - 09:31:28 PDT)
• twlc advisory: all versions of php nuke are vulnerable... supergateat_private (Mon Sep 24 2001 - 12:31:16 PDT)
  • Re: twlc advisory: all versions of php nuke are vulnerable... Magnus Skjegstad (Mon Sep 24 2001 - 21:41:14 PDT)
  • Re: twlc advisory: all versions of php nuke are vulnerable... Magnus Skjegstad (Tue Sep 25 2001 - 01:19:19 PDT)
  • Re: twlc advisory: all versions of php nuke are vulnerable... Paul Starzetz (Tue Sep 25 2001 - 04:40:37 PDT)
• Ports list Kurt Seifried (Mon Sep 24 2001 - 16:11:31 PDT)
• [RHSA-2001:110-05] Insecure setserial initscript bugzillaat_private (Wed Sep 26 2001 - 08:30:43 PDT)
  • Re: [RHSA-2001:110-05] Insecure setserial initscript Greg Woods (Wed Sep 26 2001 - 12:18:44 PDT)
• Vulnerabilities in QVT/Term joetestaat_private (Tue Sep 25 2001 - 21:13:17 PDT)
  • Re: Vulnerabilities in QVT/Term 3APA3A (Thu Sep 27 2001 - 06:17:40 PDT)
• 3Com® HomeConnect® Cable Modem Denial of Service Alex S. Harasic (Wed Sep 26 2001 - 08:19:19 PDT)
• Cisco Security Advisory: Cisco Secure PIX Firewall SMTP Filtering Vulnerability Cisco Systems Product Security Incident Response Team (Wed Sep 26 2001 - 08:30:00 PDT)
• OpenSSH Security Advisory (adv.option) Markus Friedl (Wed Sep 26 2001 - 14:18:23 PDT)
• Intershop 4 is vulnerable to a directory traversal (By Maarten Va n Horenbeeck) Christian Kahlo (Thu Sep 27 2001 - 08:07:22 PDT)
• format string attack on the alpha systems SeungHyun Seo (Thu Sep 27 2001 - 06:49:52 PDT)
• JRun 3.0 SP2 Vulnerability?? Kerry Steele (Thu Sep 27 2001 - 14:53:13 PDT)
• [CLA-2001:427] Conectiva Linux Security Announcement - mod_auth_pgsql secureat_private (Fri Sep 28 2001 - 07:37:29 PDT)
• [SNS Advisory No.43] PGP Keyserver Permissions Misconfiguration snsadvat_private (Fri Sep 28 2001 - 02:26:33 PDT)
• CARTSA-2001-03 Meteor FTPD 1.0 Directory Traversal brulez@cartel-info.fr (Thu Sep 27 2001 - 15:58:08 PDT)
• Two problems with Alexis/InternetPBX from COM2001 Clint Byrum (Thu Sep 27 2001 - 16:53:04 PDT)
• Vulnerability in Amtote International homebet self service wagering system. Gary O'leary-Steele (Sat Sep 29 2001 - 07:43:32 PDT)
• [U] SSRT0758 Compaq Insight Manager Security Advisory Boren, Rich (SSRT) (Fri Sep 28 2001 - 19:12:28 PDT)

Last message date: Sat Sep 29 2001 - 23:51:59 PDT
Archived on: Sat Sep 29 2001 - 23:52:00 PDT

This archive was generated by hypermail 2b30 : Sat Sep 29 2001 - 23:52:00 PDT