bugtraq 2001/10
By Thread

Starting: Mon Oct 01 2001 - 12:10:09 PDT
Ending: Thu Nov 01 2001 - 10:20:03 PST

• RAZOR advisory: multiple Sendmail vulnerabilities Michal Zalewski (Mon Oct 01 2001 - 08:57:12 PDT)
• Security Update: [CSSA-2001-SCO.21] Open Unix, UnixWare 7: dtaction argument buffer overflow sco-securityat_private (Mon Oct 01 2001 - 10:58:05 PDT)
• Security Update: [CSSA-2001-SCO.23] Open Unix, UnixWare 7: dtsession environment buffer overflow sco-securityat_private (Mon Oct 01 2001 - 11:10:18 PDT)
• Security Update: [CSSA-2001-SCO.22] Open Unix, UnixWare 7: dtprintinfo environment buffer overflow sco-securityat_private (Mon Oct 01 2001 - 11:08:00 PDT)
• WinMySQLadmin 1.1 Store MySQL password in clear text acz [iSecureLabs] (Tue Oct 02 2001 - 00:54:57 PDT)
• ISS Security Advisory: Multi-Vendor Format String Vulnerability in ToolTalk Service X-Force (Tue Oct 02 2001 - 09:08:19 PDT)
• OpenUNIX 8 & Unixware possible local root Aycan Irican (Mon Oct 01 2001 - 22:54:42 PDT)
  • RE: OpenUNIX 8 & Unixware possible local root Cushing, David (Wed Oct 03 2001 - 08:12:52 PDT)
    • Re: OpenUNIX 8 & Unixware possible local root KF (Wed Oct 03 2001 - 10:01:00 PDT)
  • Re: OpenUNIX 8 & Unixware possible local root Rob Bartlett - CPRE EMEA (Wed Oct 03 2001 - 09:59:13 PDT)
  • RE: OpenUNIX 8 & Unixware possible local root Bob Dog (Wed Oct 03 2001 - 10:21:20 PDT)
  • Re: OpenUNIX 8 & Unixware possible local root Aycan Irican (Wed Oct 03 2001 - 10:57:34 PDT)
  • RE: OpenUNIX 8 & Unixware possible local root Bob Dog (Wed Oct 03 2001 - 15:07:43 PDT)
    • Re: OpenUNIX 8 & Unixware possible local root ARAI Yuu (Thu Oct 04 2001 - 06:20:44 PDT)
  • RE: OpenUNIX 8 & Unixware possible local root Lamont Granquist (Thu Oct 04 2001 - 11:57:26 PDT)
  • Re: OpenUNIX 8 & Unixware possible local root Scott J (Thu Oct 04 2001 - 07:23:39 PDT)
• Vulnerability 3358, "IBM HACMP Port Scan Denial of Service Vulnerability" Michael S Soukup (Tue Oct 02 2001 - 09:24:46 PDT)
• Security problems in some looking glasses! Zvezdelin Vladov (Mon Oct 01 2001 - 13:10:08 PDT)
• [CLA-2001:428] Conectiva Linux Security Announcement - groff secureat_private (Tue Oct 02 2001 - 12:56:40 PDT)
• Conectiva Linux important support information securityat_private (Tue Oct 02 2001 - 13:26:07 PDT)
• results of semi-automatic source code audit geneticsat_private (Tue Oct 02 2001 - 14:59:09 PDT)
  • Re: results of semi-automatic source code audit todd+1 (Tue Oct 02 2001 - 18:29:03 PDT)
    • RE: results of semi-automatic source code audit Matt Block (Wed Oct 03 2001 - 12:14:32 PDT)
• AIM 0day DoS Tony Lambiris (Tue Oct 02 2001 - 15:53:55 PDT)
  • RE: AIM 0day DoS BlueJAMC (Wed Oct 03 2001 - 09:47:47 PDT)
    • Re: AIM 0day DoS Don (Fri Oct 05 2001 - 06:12:02 PDT)
  • Fw: AIM 0day DoS Jason Barbour (Wed Oct 03 2001 - 14:46:52 PDT)
    • Re: Fw: AIM 0day DoS Vadim Berezniker (Wed Oct 03 2001 - 17:21:51 PDT)
  • Re: AIM 0day DoS Don (Sat Oct 06 2001 - 09:55:07 PDT)
• Cisco Security Advisory: Cisco PIX Firewall Authentication Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Wed Oct 03 2001 - 08:30:00 PDT)
• security bulletins digest IT Resource Center (Tue Oct 02 2001 - 03:54:20 PDT)
  • security bulletins digest IT Resource Center (Thu Oct 04 2001 - 03:55:45 PDT)
  • security bulletins digest IT Resource Center (Tue Oct 23 2001 - 04:34:13 PDT)
• Full-xploiting PHP Nuke RoMaN SoFt / LLFB (Wed Oct 03 2001 - 07:40:31 PDT)
  • Re: Full-xploiting PHP Nuke RoMaN SoFt / LLFB (Thu Oct 11 2001 - 02:58:59 PDT)
• NT Users SHOULD be CAREFULL when applying NT hotfixes "Multiple version problem inside NT Hotfixes" Adonis.No.Spam (Wed Oct 03 2001 - 12:58:53 PDT)
• IDS: On IDS Evasion, Vulnerabilities, and Vendor Hype Eric Hacker (Wed Oct 03 2001 - 19:21:27 PDT)
  • IDS: Re: On IDS Evasion, Vulnerabilities, and Vendor Hype Jackie Chan (Thu Oct 04 2001 - 19:50:16 PDT)
    • IDS: Re: On IDS Evasion, Vulnerabilities, and Vendor Hype Jeff Nathan (Mon Oct 08 2001 - 16:34:13 PDT)
• Patches for Solaris rpc.yppasswdd available David Foster (Thu Oct 04 2001 - 09:32:32 PDT)
• On IDS Evasion, Vulnerabilities, and Vendor Hype Eric Hacker (Thu Oct 04 2001 - 10:04:14 PDT)
• IDS: RE: On IDS Evasion, Vulnerabilities, and Vendor Hype Randy Taylor (Thu Oct 04 2001 - 10:52:16 PDT)
• RE: NT Users SHOULD be CAREFULL when applying NT hotfixes "Multip le version problem inside NT Hotfixes" Russ (Thu Oct 04 2001 - 16:47:10 PDT)
• Symantec LiveUpdate attacks FX (Fri Oct 05 2001 - 06:28:27 PDT)
• Symantec Security Response SecBul-10042001, Revision1, Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro security features Sym Security (Fri Oct 05 2001 - 08:13:27 PDT)
• OpenBSD bug Gustavo Ajzenman (Fri Oct 05 2001 - 15:26:07 PDT)
  • Re: OpenBSD bug Sebastian Stark (Tue Oct 09 2001 - 03:16:49 PDT)
• AIM Exploits Robbie Saunders (Sat Oct 06 2001 - 12:13:52 PDT)
  • RE: AIM Exploits Nate Pinchot (Mon Oct 08 2001 - 07:12:48 PDT)
• Bug found at W3Mail Webmail Emanuel Almeida (Sat Oct 06 2001 - 21:32:31 PDT)
  • Re: Bug found in ht://Dig htsearch CGI Geoff Hutchison (Sun Oct 07 2001 - 13:46:40 PDT)
• FW: [advisory] SSRT0767u Potential rpc.ttdbserverd buffer overflow Boren, Rich (SSRT) (Sat Oct 06 2001 - 08:47:11 PDT)
• Re: twlc advisory: all versions of php nuke are vulnerable... Bernd Schnitzer (Sat Oct 06 2001 - 17:05:20 PDT)
• Bug in Linux 2.4 / iptables MAC match module Chris Wilson (Mon Oct 08 2001 - 02:50:58 PDT)
• OS X 10.1 and localized desktop folder still vulnerable patpro (Sun Oct 07 2001 - 11:49:09 PDT)
• [ASGUARD-LABS] TYPSoft FTP Server v0.95 STOR/RETR Denial of Service Vulnerability J. Wagner (Mon Oct 08 2001 - 05:05:00 PDT)
• phpBB 1.4.2, Remote user is able to modify SQL query. Konrad Rieck (Sun Oct 07 2001 - 15:05:28 PDT)
• pam_limits.so Bug!! Devrim SERAL (Mon Oct 08 2001 - 06:52:57 PDT)
  • Re: pam_limits.so Bug!! Solar Designer (Mon Oct 08 2001 - 22:10:27 PDT)
• MDKSA-2001:079 - problems with devfs Linux Mandrake Security Team (Mon Oct 08 2001 - 09:57:03 PDT)
• Cisco CDP attacks FX (Tue Oct 09 2001 - 07:44:53 PDT)
• Cisco Systems - Vulnerability in CDP Damir Rajnovic (Tue Oct 09 2001 - 07:27:40 PDT)
  • Re: Cisco Systems - Vulnerability in CDP Damir Rajnovic (Fri Oct 12 2001 - 07:16:10 PDT)
  • Re: Cisco Systems - Vulnerability in CDP Damir Rajnovic (Sat Oct 13 2001 - 02:54:56 PDT)
• OpenProjects IRCD allows DNS spoofing Jukka Mutex (Tue Oct 09 2001 - 11:45:19 PDT)
  • Re: OpenProjects IRCD allows DNS spoofing Matthew S. Hallacy (Sun Oct 14 2001 - 06:28:17 PDT)
• Security Update: [CSSA-2001-SCO.24] OpenServer: shell here-documents allow various security breaches sco-securityat_private (Tue Oct 09 2001 - 10:55:26 PDT)
• Best Practices for Secure Development, v4 Razvan Peteanu (Tue Oct 09 2001 - 22:05:54 PDT)
• Security Update: [CSSA-2001-34.0] Linux: sendmail queue run privilege problem Support Info (Wed Oct 10 2001 - 08:05:48 PDT)
• Security Update: [CSSA-2001-035.0] Linux - Remote File View Problem in htdig Support Info (Tue Oct 09 2001 - 13:44:19 PDT)
• SuSE Security Announcement: lprold Sebastian Krahmer (Wed Oct 10 2001 - 08:53:00 PDT)
• [CLA-2001:429] Conectiva Linux Security Announcement - htdig secureat_private (Wed Oct 10 2001 - 14:19:33 PDT)
  • Re: [CLA-2001:429] Conectiva Linux Security Announcement - htdig Geoff Hutchison (Wed Oct 10 2001 - 20:00:21 PDT)
• [RHSA-2001:115-05] New Zope packages are available bugzillaat_private (Wed Oct 10 2001 - 15:44:53 PDT)
• Vulnerability: Cisco PIX Firewall Manager Florencio Umel (Wed Oct 10 2001 - 19:48:02 PDT)
• INCIDENT: WebCertificate.com hacked Simon Gales (Thu Oct 11 2001 - 05:57:40 PDT)
  • Re: INCIDENT: WebCertificate.com hacked Brett Glass (Thu Oct 11 2001 - 10:23:15 PDT)
• Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing kikkert security (Thu Oct 11 2001 - 02:37:48 PDT)
  • RE: Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing Richard M. Smith (Thu Oct 11 2001 - 11:18:55 PDT)
  • RE: Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing j jf (Sat Oct 13 2001 - 01:03:41 PDT)
• Vulnerabilities in Ipswitch IMail Server 7.04 Arne Vidstrom (Thu Oct 11 2001 - 13:01:26 PDT)
  • Re: Vulnerabilities in Ipswitch IMail Server 7.04 Ertan Kurt (Thu Oct 11 2001 - 14:32:12 PDT)
• Buffer Overflows Paper in Turkish. Murat Balaban (Thu Oct 11 2001 - 13:28:48 PDT)
• Security Update: [CSSA-2001-SCO.25] OpenServer: various scoadmin/sysadm subprograms have buffer overflows sco-securityat_private (Thu Oct 11 2001 - 13:55:50 PDT)
• Ipswitch Imail 7.04 vulnerabilities Niels Heinen (Thu Oct 11 2001 - 15:00:33 PDT)
• def-2001-29 andreas junestam (Fri Oct 12 2001 - 04:04:16 PDT)
• Dangers of posting images: Pretty examples bugtraq (Thu Oct 11 2001 - 11:42:16 PDT)
  • Re: Dangers of posting images: Pretty examples Dave Ahmad (Fri Oct 12 2001 - 11:59:13 PDT)
• Re: NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerability David Foster (Fri Oct 12 2001 - 15:49:42 PDT)
  • Re: NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerability David Foster (Fri Oct 26 2001 - 14:04:06 PDT)
• Bug in PostNuke 0.62, 0.63 and 0.64 (and possibly PHPnuke) Magnus Skjegstad (Fri Oct 12 2001 - 19:08:02 PDT)
  • Bug in PostNuke 0.62, 0.63 and 0.64 (and possibly PHPnuke) Francisco J. León (Sat Oct 13 2001 - 19:32:34 PDT)
• Re: hylafax Przemyslaw Frasunek (Sat Oct 13 2001 - 12:31:29 PDT)
  • Re: hylafax Lee Howard (Sun Oct 14 2001 - 20:52:33 PDT)
    • Re: hylafax Przemyslaw Frasunek (Sun Oct 14 2001 - 20:55:59 PDT)
• Microsoft To Prioritize Security Bugs Brian McWilliams (Mon Oct 15 2001 - 09:51:57 PDT)
• Administrivia: So Long, and Thanks for All the Fish Elias Levy (Mon Oct 15 2001 - 10:55:13 PDT)
• Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow sco-securityat_private (Mon Oct 15 2001 - 11:06:58 PDT)
• [SNS Advisory No.44] Trend Micro OfficeScan Corporate Edition(Virus Buster Corporate Edition) Configuration File Disclosure Vulnerability snsadvat_private (Mon Oct 15 2001 - 19:34:56 PDT)
• Novell Groupwise arbitrary file retrieval vulnerability Stuart McClure (Mon Oct 15 2001 - 16:26:48 PDT)
  • Re: Novell Groupwise arbitrary file retrieval vulnerability Matthew Firth (Mon Oct 15 2001 - 23:43:52 PDT)
• Security Update: [CSSA-2001-SCO.27] UnixWare 7: ftpd glob security vulnerability sco-securityat_private (Mon Oct 15 2001 - 14:46:22 PDT)
• MDKSA-2001:080 - Zope update Linux Mandrake Security Team (Mon Oct 15 2001 - 16:12:20 PDT)
• [ ** Snes9x buffer overflow vulnerability ** ] Niels Heinen (Tue Oct 16 2001 - 07:37:34 PDT)
  • Re: [ ** Snes9x buffer overflow vulnerability ** ] Roman Drahtmueller (Tue Oct 16 2001 - 09:57:32 PDT)
  • Re: [ ** Snes9x buffer overflow vulnerability ** ] Scott Dier (Tue Oct 16 2001 - 09:03:05 PDT)
    • Re: [ ** Snes9x buffer overflow vulnerability ** ] Alistair Crooks (Tue Oct 16 2001 - 13:26:31 PDT)
    • Re: [ ** Snes9x buffer overflow vulnerability ** ] Christian Surchi (Tue Oct 16 2001 - 17:43:01 PDT)
  • Re: [ ** Snes9x buffer overflow vulnerability ** ] Mike Hoskins (Tue Oct 16 2001 - 12:05:13 PDT)
    • Re: [ ** Snes9x buffer overflow vulnerability ** ] Heikki Korpela (Tue Oct 16 2001 - 13:37:53 PDT)
• [RHSA-2001:114-04] Updated openssh packages available bugzillaat_private (Tue Oct 16 2001 - 09:30:58 PDT)
• [RHSA-2001:132-03] New util-linux packages available to fix /bin/login pam problem bugzillaat_private (Tue Oct 16 2001 - 12:15:53 PDT)
• Security Update: [CSSA-2001-SCO.28] Open UNIX, UnixWare 7: rpc.ttdbserverd format string vulnerability sco-securityat_private (Tue Oct 16 2001 - 16:15:06 PDT)
• ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability X-Force (Tue Oct 16 2001 - 19:42:22 PDT)
  • Mac OS X setuid root security hole rotaiv (Wed Oct 17 2001 - 09:53:13 PDT)
    • Re: Mac OS X setuid root security hole Florian Kohl (Wed Oct 17 2001 - 11:50:29 PDT)
    • Re: Mac OS X setuid root security hole Chris Adams (Wed Oct 17 2001 - 14:00:33 PDT)
    • Re: Mac OS X setuid root security hole Ken Schweigert (Wed Oct 17 2001 - 13:16:50 PDT)
    • Re: Mac OS X setuid root security hole Kee Hinckley (Wed Oct 17 2001 - 12:51:45 PDT)
    • Re: Mac OS X setuid root security hole Chris Adams (Sat Oct 20 2001 - 00:23:07 PDT)
      • Re: Mac OS X setuid root security hole Ryan Tucker (Sat Oct 20 2001 - 11:14:22 PDT)
• MDKSA-2001:081 - openssh update Linux Mandrake Security Team (Tue Oct 16 2001 - 15:56:15 PDT)
• Mac OS X v10.0.x J2SE v1.3 clipboard tapping vulnerability TAKAGI, Hiromitsu (Tue Oct 16 2001 - 18:45:18 PDT)
  • RE: Mac OS X v10.0.x J2SE v1.3 clipboard tapping vulnerability Thor Larholm (Thu Oct 18 2001 - 03:57:00 PDT)
• NON-Secure Credit card info transfer from time.com/pathfinder.com Bob Niederman (Tue Oct 16 2001 - 17:37:56 PDT)
  • fixed: Re: NON-Secure Credit card info transfer from time.com/pathfinder.com Bob Niederman (Thu Oct 25 2001 - 10:19:09 PDT)
• Attension acrobat PDF makers, Acrobat PDF protection is not that Secure Adonis.No.Spam (Tue Oct 16 2001 - 08:12:33 PDT)
• TSLSA-2001-0023 - OpenSSH Trustix Secure Linux Advisor (Wed Oct 17 2001 - 07:20:49 PDT)
• RE: NON-Secure Credit card info transfer from time.com/pathfinder .com jpaquinat_private (Wed Oct 17 2001 - 14:26:23 PDT)
• TSLSA-2001-0025 - util-linux Trustix Secure Linux Advisor (Wed Oct 17 2001 - 07:21:12 PDT)
• [Immunix-announce] Immunix OS update for OpenSSH Immunix Security Team (Wed Oct 17 2001 - 19:25:53 PDT)
• multiple looking-glasses input vulnerability barabasat_private (Thu Oct 18 2001 - 00:37:55 PDT)
  • RE: multiple looking-glasses input vulnerability arivanovat_private (Thu Oct 18 2001 - 23:53:32 PDT)
  • RE: multiple looking-glasses input vulnerability Zvezdelin Vladov (Tue Oct 23 2001 - 06:46:39 PDT)
• Ssdpsrv.exe in WindowsME milo omega (Wed Oct 17 2001 - 17:46:29 PDT)
  • Re: Ssdpsrv.exe in WindowsME Stefan Laudat (Thu Oct 18 2001 - 13:11:29 PDT)
    • Re: Ssdpsrv.exe in WindowsME Mark Watts (Fri Oct 19 2001 - 02:11:30 PDT)
    • Re: Ssdpsrv.exe in WindowsME Florian Weimer (Fri Oct 19 2001 - 23:35:09 PDT)
  • RE: Ssdpsrv.exe in WindowsME Martin L. Drury Jr. (Fri Oct 19 2001 - 05:21:58 PDT)
    • RE: Ssdpsrv.exe in WindowsME Nick FitzGerald (Fri Oct 19 2001 - 17:46:54 PDT)
  • Re: Ssdpsrv.exe in WindowsME ~ (Sat Oct 20 2001 - 03:02:10 PDT)
• def-2001-30 andreas junestam (Thu Oct 18 2001 - 07:16:20 PDT)
• Flaws in recent Linux kernels Rafal Wojtczuk (Thu Oct 18 2001 - 10:35:40 PDT)
  • RE: Flaws in recent Linux kernels Demitrious Kelly (Thu Oct 18 2001 - 12:51:24 PDT)
  • Re: Flaws in recent Linux kernels Martin Kacer (Fri Oct 19 2001 - 07:47:13 PDT)
    • Re: Flaws in recent Linux kernels Mariusz Woloszyn (Mon Oct 22 2001 - 02:19:25 PDT)
      • Re: Flaws in recent Linux kernels Pavel Kankovsky (Fri Oct 26 2001 - 07:22:50 PDT)
    • Re: Flaws in recent Linux kernels Solar Designer (Tue Oct 23 2001 - 05:52:38 PDT)
      • Re: Flaws in recent Linux kernels Scott Dier (Tue Oct 23 2001 - 12:49:54 PDT)
  • Re: Flaws in recent Linux kernels Thomas Fischbacher (Thu Oct 25 2001 - 10:47:28 PDT)
    • Re: Flaws in recent Linux kernels Mariusz Woloszyn (Fri Oct 26 2001 - 03:55:11 PDT)
      • Re: Flaws in recent Linux kernels Thomas Fischbacher (Fri Oct 26 2001 - 04:29:41 PDT)
• [SECURITY] [DSA 082-1] News Xvt packages fix buffer overflow Martin Schulze (Thu Oct 18 2001 - 06:24:21 PDT)
• [SECURITY] [DSA 083-1] New procmail packages fix insecure signal handling Martin Schulze (Thu Oct 18 2001 - 06:26:02 PDT)
• [SECURITY] [DSA 080-1] New ht://Dig packages fix vulnerability Martin Schulze (Tue Oct 16 2001 - 23:13:27 PDT)
• [CLA-2001:430] Conectiva Linux Security Announcement - apache secureat_private (Thu Oct 18 2001 - 13:58:18 PDT)
• GroupWise Padlock Speculative Info Simple Nomad (Thu Oct 18 2001 - 10:23:35 PDT)
• [SECURITY] [DSA 081-2] No w3m packages for powerpc available Martin Schulze (Thu Oct 18 2001 - 07:16:52 PDT)
• [SECURITY] [DSA 081-1] New w3m packages fix buffer overflow Martin Schulze (Thu Oct 18 2001 - 06:23:09 PDT)
• [RHSA-2001:129-05] New kernel 2.4 packages are available bugzillaat_private (Thu Oct 18 2001 - 15:42:01 PDT)
• Security Update: [CSSA-2001-036.0] Linux - Several Linux Kernel Security Problems Support Info (Thu Oct 18 2001 - 16:11:27 PDT)
• OSX remote root dotslashat_private (Wed Oct 17 2001 - 23:56:10 PDT)
• TSLSA-2001-0026 - OpenSSH Trustix Secure Linux Advisor (Fri Oct 19 2001 - 00:28:40 PDT)
• TSLSA-2001-0028 Trustix Secure Linux Advisor (Fri Oct 19 2001 - 08:40:40 PDT)
• Immunix OS update for OpenSSH Immunix Security Team (Thu Oct 18 2001 - 11:22:17 PDT)
• OSX remote root *more info* dotslashat_private (Wed Oct 17 2001 - 20:13:46 PDT)
  • Re: OSX remote root *more info* ghandi (Sat Oct 20 2001 - 01:47:58 PDT)
• [ESA-20011019-01] Two apache vulnerabilities EnGarde Secure Linux (Fri Oct 19 2001 - 09:16:02 PDT)
• [ESA-20011019-02] kernel: Local DoS and root compromise EnGarde Secure Linux (Fri Oct 19 2001 - 09:16:32 PDT)
• Minor IE vulnerability: about: URLs Clover Andrew (Fri Oct 19 2001 - 08:13:55 PDT)
  • Re: Minor IE vulnerability: about: URLs Nick FitzGerald (Fri Oct 19 2001 - 15:42:54 PDT)
    • Re: Minor IE vulnerability: about: URLs Julian Hall (Tue Oct 23 2001 - 10:45:15 PDT)
  • Re: Minor IE vulnerability: about: URLs Pedro Miller Rabinovitch (Fri Oct 19 2001 - 14:47:07 PDT)
    • Re: Minor IE vulnerability: about: URLs Simon Kornblith (Sat Oct 20 2001 - 06:34:25 PDT)
  • Re: Minor IE vulnerability: about: URLs Clover Andrew (Wed Oct 24 2001 - 06:15:55 PDT)
• [ESA-20011019-03] xinetd: Several potential vulnerabilities EnGarde Secure Linux (Fri Oct 19 2001 - 09:17:05 PDT)
• Problem with Microsoft Security Bulletin MS01-052 Stephen C Burns (Fri Oct 19 2001 - 07:28:15 PDT)
• Webcart v.8.4 rootat_private (Thu Oct 18 2001 - 20:29:24 PDT)
• [RHSA-2001:116-03] Updated diffutils packages available bugzillaat_private (Fri Oct 19 2001 - 00:54:43 PDT)
• Claris Emailer buffer over flow vulnerabirity awacs (Fri Oct 19 2001 - 02:53:45 PDT)
• Immunix OS update Linux Kernel Immunix Security Team (Fri Oct 19 2001 - 18:32:57 PDT)
• [Immunix-announce] Immunix OS update Linux Kernel Immunix Security Team (Fri Oct 19 2001 - 18:32:57 PDT)
• gm4 format strings on OSX dotslashat_private (Sat Oct 20 2001 - 12:22:31 PDT)
  • Re: gm4 format strings on OSX Peter Pentchev (Sun Oct 21 2001 - 18:32:23 PDT)
    • Re: gm4 format strings on OSX Peter Pentchev (Sun Oct 21 2001 - 19:21:15 PDT)
• Javascript in IE may spoof the whole screen Georgi Guninski (Sun Oct 21 2001 - 09:01:21 PDT)
  • Re: Javascript in IE may spoof the whole screen http-equivat_private (Sun Oct 21 2001 - 12:46:24 PDT)
  • Re: Javascript in IE may spoof the whole screen Julian Hall (Tue Oct 23 2001 - 10:54:03 PDT)
    • Re: Javascript in IE may spoof the whole screen Miguel Angel Rodriguez Jodar (Tue Oct 23 2001 - 14:23:40 PDT)
  • RE: Javascript in IE may spoof the whole screen Thor Larholm (Wed Oct 24 2001 - 03:10:06 PDT)
• Overriding qouta limits in Linux kernel Wojciech Purczyñski (Mon Oct 22 2001 - 01:43:13 PDT)
• Security BugWare Advisory Yann (Mon Oct 22 2001 - 08:06:21 PDT)
  • Re: Security BugWare Advisory Vinci Chou (Mon Oct 22 2001 - 19:58:45 PDT)
• [RHSA-2001:132-04] New util-linux packages available to fix /bin/login pam problem bugzillaat_private (Mon Oct 22 2001 - 06:00:48 PDT)
• [Advisory iSecureLabs] Network Query Tool remote command execution Cabezon Aurélien (Sun Oct 21 2001 - 17:15:43 PDT)
• [RHSA-2001:114-05] Updated openssh packages available bugzillaat_private (Mon Oct 22 2001 - 06:00:38 PDT)
• Non-standard usage of HTTP proxy servers Alexander Yurchenko (Sun Oct 21 2001 - 17:34:24 PDT)
  • Re: Non-standard usage of HTTP proxy servers Keith Young (Mon Oct 22 2001 - 08:48:49 PDT)
  • Re: Non-standard usage of HTTP proxy servers Philip Stoev (Mon Oct 22 2001 - 09:08:59 PDT)
• [RHSA-2001:113-03] New squid packages available to fix FTP-based DoS bugzillaat_private (Mon Oct 22 2001 - 06:01:41 PDT)
• Sun Security Bulletin #209 Jay D. Dyson (Mon Oct 22 2001 - 17:23:48 PDT)
• Sun Security Bulletin #00208 Jay D. Dyson (Mon Oct 22 2001 - 15:35:51 PDT)
  • Re: Sun Security Bulletin #00208 Jay Sekora (Tue Oct 23 2001 - 10:06:53 PDT)
    • Re: Sun Security Bulletin #00208 Stanley G. Bubrouski (Wed Oct 24 2001 - 06:30:03 PDT)
    • Re: Sun Security Bulletin #00208 Avery Buffington (Wed Oct 24 2001 - 10:33:43 PDT)
  • Re: Sun Security Bulletin #00208 Stanley G. Bubrouski (Wed Oct 24 2001 - 12:31:26 PDT)
• SuSE Security Announcement: shadow/login (SuSE-SA:2001:034) Roman Drahtmueller (Tue Oct 23 2001 - 09:52:52 PDT)
• Regarding Sun Microsystems Security/Patch Announcements. Jay D. Dyson (Tue Oct 23 2001 - 10:19:23 PDT)
• Remote DoS in 6tunnel awayzzz (Tue Oct 23 2001 - 08:48:08 PDT)
• Red Hat 7.2 GnuPG signed RPM verification fails on distribution files Kurt Seifried (Tue Oct 23 2001 - 02:17:16 PDT)
• SSH deja vu Max Parke (Tue Oct 23 2001 - 10:17:21 PDT)
  • Re: SSH deja vu Michal Zalewski (Tue Oct 23 2001 - 13:14:15 PDT)
    • Re: SSH deja vu Lucian Hudin (Tue Oct 23 2001 - 14:18:06 PDT)
      • Re: SSH deja vu Michal Zalewski (Tue Oct 23 2001 - 16:11:01 PDT)
• FW: ASI Oracle Security Alert: 3 new security alerts Aaron C. Newman (Tue Oct 23 2001 - 12:38:46 PDT)
• Check Point VPN-1 SecuRemote Flaw Kratter, Dave (Tue Oct 23 2001 - 14:07:05 PDT)
  • RE: Check Point VPN-1 SecuRemote Flaw Gordon, Paul (Tue Oct 23 2001 - 19:26:25 PDT)
  • RE: Check Point VPN-1 SecuRemote Flaw Andy Fiddaman (Wed Oct 24 2001 - 00:54:28 PDT)
• Sun Security Bulletin #00210 (fwd) Jay D. Dyson (Tue Oct 23 2001 - 15:25:08 PDT)
• Apache suexec Stefanos Harhalakis (Tue Oct 23 2001 - 14:41:05 PDT)
  • Re: Apache suexec Pavel Kankovsky (Fri Oct 26 2001 - 04:33:16 PDT)
• Sun Security Bulletin #00211 (fwd) Jay D. Dyson (Tue Oct 23 2001 - 16:45:29 PDT)
• SuSE Security Announcement: htdig (SuSE-SA:2001:035) Thomas Biege (Wed Oct 24 2001 - 03:21:12 PDT)
• Advisory: Corrupt RPM Query Vulnerability zen-parse (Wed Oct 24 2001 - 06:10:02 PDT)
  • Re: Advisory: Corrupt RPM Query Vulnerability Roman Drahtmueller (Wed Oct 24 2001 - 11:44:47 PDT)
• [RHSA-2001:124-04] Updated mod_auth_pgsql packages available bugzillaat_private (Wed Oct 24 2001 - 08:00:15 PDT)
• Cross-site Scripting Flaw in webalizer MASA (Wed Oct 24 2001 - 06:18:14 PDT)
• [CLA-2001:431] Conectiva Linux Security Announcement - openssh secureat_private (Wed Oct 24 2001 - 13:21:16 PDT)
• Oracle Trace Collection Security Vulnerability Oracle Security Alerts (Wed Oct 24 2001 - 13:02:18 PDT)
• Oracle9iAS Web Cache Overflow Vulnerability Oracle Security Alerts (Wed Oct 24 2001 - 13:06:36 PDT)
• Oracle File Overwrite Security Vulnerability Oracle Security Alerts (Wed Oct 24 2001 - 12:59:12 PDT)
• Hidden requests to Apache smiler (Wed Oct 24 2001 - 13:09:59 PDT)
  • Re: Hidden requests to Apache Rasmus Bøg Hansen (Wed Oct 24 2001 - 23:00:51 PDT)
    • Re: Hidden requests to Apache Bob Niederman (Thu Oct 25 2001 - 10:09:38 PDT)
  • Re: Hidden requests to Apache Lorenzo Pulici (Wed Oct 24 2001 - 23:58:53 PDT)
  • Re: Hidden requests to Apache Jurjen Oskam (Thu Oct 25 2001 - 00:28:56 PDT)
• VB6 Backcolor loop causes 100% CPU usage Austin Ensminger (Wed Oct 24 2001 - 21:54:57 PDT)
• RWhoisd remote format string vulnerability root (Thu Oct 25 2001 - 10:23:53 PDT)
• Pc-to-Phone vulnerability - broken by design Arthur Hagen (Wed Oct 24 2001 - 23:31:23 PDT)
• Weak authentication in iBill's Password Management CGI MK Ultra (Thu Oct 25 2001 - 12:21:37 PDT)
• samba root exploit in RedHat gabriel maggiotti (Thu Oct 25 2001 - 16:10:45 PDT)
• Samba Exploit Code Dave Ahmad (Thu Oct 25 2001 - 20:33:23 PDT)
• Invalid RDP Data DoS code Martins, Luciano (AR - Buenos Aires) (Fri Oct 26 2001 - 09:03:35 PDT)
• SuSE Security Announcement: kernel (SuSE-SA:2001:036) Roman Drahtmueller (Fri Oct 26 2001 - 09:31:01 PDT)
• MDKSA-2001:082 - kernel22 update Linux Mandrake Security Team (Fri Oct 26 2001 - 10:00:28 PDT)
• Public ICQ servers based DDoS FreeHermit (Sun Mar 05 2000 - 12:04:34 PST)
• another fatal bug in NT/2000 "Command Prompt" I/O Michael Wojcik (Fri Oct 26 2001 - 11:35:42 PDT)
  • Re: another fatal bug in NT/2000 "Command Prompt" I/O Chris Gaver Behrens (Fri Oct 26 2001 - 15:04:42 PDT)
  • Re: another fatal bug in NT/2000 "Command Prompt" I/O IIJIMA Hiromitsu (Sun Oct 28 2001 - 21:36:13 PST)
• The two bugs in Linux kernel: an interesting analogy Pavel Kankovsky (Fri Oct 26 2001 - 07:34:12 PDT)
• RWhoisd patched nimrood (Fri Oct 26 2001 - 11:24:06 PDT)
• IBM AIX: Buffer oveflow vulnerability in CDE DtSvc library IBM MSS Advisory Service (Mon Oct 29 2001 - 16:33:40 PST)
• cgi vulnerability supdavid (Tue Oct 30 2001 - 07:04:23 PST)
• [SNS Advisory No.45]Manpower Japan Potential Personal Information Leak Vulnerability snsadvat_private (Tue Oct 30 2001 - 00:54:38 PST)
• SuSE Security Announcement: squid (SuSE-SA:2001:037) Roman Drahtmueller (Tue Oct 30 2001 - 03:41:09 PST)
• LB5000 Cookie filter vulnerability Chen Jun (Mon Oct 29 2001 - 22:56:55 PST)
• [SNS Advisory No.46]IBM AIX dtprintinfo Buffer Overflow Vulnerability snsadvat_private (Tue Oct 30 2001 - 00:54:40 PST)
• Ikonboard Cookie filter vulnerability Chen Jun (Mon Oct 29 2001 - 22:56:55 PST)
• [Advisory] SSRT0766 Potential Buffer Overflow for Compaq Insight Manager XE (only) Boren, Rich (SSRT) (Mon Oct 29 2001 - 14:28:54 PST)
• [RHSA-2001:141-05] Updated webalizer packages available bugzillaat_private (Tue Oct 30 2001 - 11:56:35 PST)
• [Advisory] SSRT0738 OpenVMS Security Mandatory Update, OVMSMUP03 Boren, Rich (SSRT) (Tue Oct 30 2001 - 13:21:52 PST)
• Web Forum Account Hijacking Vuln. Aj Effin Reznor (Tue Oct 30 2001 - 11:42:17 PST)
• Lotus Domino Default Navigator Protection By-pass (#NISR29102001B) NGSSoftware Insight Security Research (Tue Oct 30 2001 - 18:40:36 PST)
• Lotus Domino Web Administrator Template ReplicaID Access (#NISR29102001A) NGSSoftware Insight Security Research (Tue Oct 30 2001 - 18:40:31 PST)
• [RHSA-2001:102-10] New teTeX packages available bugzillaat_private (Tue Oct 30 2001 - 12:34:54 PST)
• Lotus Domino View ACL by-pass (#NISR29102001C) NGSSoftware Insight Security Research (Tue Oct 30 2001 - 18:40:40 PST)
  • Re: Lotus Domino View ACL by-pass (#NISR29102001C) Bas Welman (Wed Oct 31 2001 - 02:52:57 PST)
  • Re: Lotus Domino View ACL by-pass (#NISR29102001C) Russell Handorf (Wed Oct 31 2001 - 12:03:51 PST)
  • Re: Lotus Domino View ACL by-pass (#NISR29102001C) Darren Davison (Wed Oct 31 2001 - 15:30:29 PST)
• SuSE Security Announcement: uucp (SuSE-SA:2001:38) Thomas Biege (Wed Oct 31 2001 - 08:47:27 PST)
• MacOS 9.2, Internet Explorer, Local Vulnerability Neeko Oni (Wed Oct 31 2001 - 09:48:05 PST)
• Bug in scp v3.0.1 Jonathan A. Zdziarski (Tue Oct 30 2001 - 21:18:47 PST)
  • Re: Bug in scp v3.0.1 Matt Forrest (Wed Oct 31 2001 - 12:53:47 PST)
  • Re: Bug in scp v3.0.1 Brad Arlt (Wed Oct 31 2001 - 12:42:18 PST)
  • Re: Bug in scp v3.0.1 Nate Eldredge (Wed Oct 31 2001 - 13:30:37 PST)
    • RE: Bug in scp v3.0.1 Jonathan A. Zdziarski (Wed Oct 31 2001 - 13:40:37 PST)
• [RHSA-2001:138-10] Comprehensive Printing Update bugzillaat_private (Wed Oct 31 2001 - 15:00:22 PST)
• Fuse Talk vulnerability Anthony Cole (Wed Oct 31 2001 - 17:26:55 PST)

Last message date: Thu Nov 01 2001 - 10:20:03 PST
Archived on: Thu Nov 01 2001 - 10:20:06 PST

This archive was generated by hypermail 2b30 : Thu Nov 01 2001 - 10:20:06 PST