bugtraq 2002/05
By Author

Starting: Wed May 01 2002 - 08:23:11 PDT
Ending: Sun Jun 02 2002 - 17:37:35 PDT

• .-=D3FC0N/=-.
  • Re: MS02-023 does not patch actual issue! (Thu May 16 2002 - 08:46:18 PDT)
• 2c79cbe14ac7d0b8472d3f129fa1df55at_private
  • YoungZSoft CMailServer overflow, PATCH + WAREZ!@#! (Tue May 21 2002 - 14:49:54 PDT)
• 3APA3A
  • Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Fri May 17 2002 - 10:23:42 PDT)
  • Re: Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Tue May 14 2002 - 00:47:01 PDT)
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Fri May 10 2002 - 05:28:54 PDT)
• Alun Jones
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Thu May 09 2002 - 06:13:51 PDT)
• Anders Nordby
  • Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 00:55:21 PDT)
• Andreas Sandblad
  • IE dot bug - Sandblad advisory #7 (Sun May 19 2002 - 07:45:15 PDT)
  • Opera javascript protocoll vulnerability [Sandblad advisory #6] (Wed May 15 2002 - 09:57:59 PDT)
• Andrew Clover
  • Re: Update and comments on the MS02-023 patch, holes still remain (Fri May 17 2002 - 02:27:37 PDT)
  • Re: GOBBLES SECURITY ADVISORY #33 (Sat May 11 2002 - 08:04:46 PDT)
• Andrew Hintz (Drew)
  • SafeWeb Vulnerability - Fingerprinting Websites Using Traffic Analysis (Thu May 09 2002 - 22:56:37 PDT)
• Andrew.Lopackiat_private
  • Cisco IDS Device Manager 3.1.1 Advisory (Fri May 24 2002 - 11:42:07 PDT)
• awacs
  • 2 security problem Quantum SNAP server (Thu May 30 2002 - 01:45:09 PDT)
• Bao Dai Nhan
  • Another vulnerability in hosting controller (Sun May 19 2002 - 03:10:50 PDT)
• Beck Mr.R
  • Re: Misformated message header causes msn messenger to crash (Thu May 23 2002 - 13:58:12 PDT)
• Ben Bucksch
  • Beonex Communicator 0.8-pre based on Mozilla 1.0-branch released (Fri May 03 2002 - 18:59:15 PDT)
• Ben Laurie
  • Re: Yahoo Messenger - Multiple Vulnerabilities (Mon May 27 2002 - 12:48:04 PDT)
  • Unfortunate interaction between EZMLM and MessageLabs virus scanning (Tue May 07 2002 - 09:17:02 PDT)
• Benjamin Keller
  • FW: New Macromedia Security Zone Bulletins Posted (Thu May 09 2002 - 18:31:05 PDT)
• big bon
  • Re: Logitech Keyboard Insecurity (Fri May 03 2002 - 07:01:54 PDT)
• Binken, Rens
  • KPMG-2002018: Pointsec for PalmOS PIN disclosure (Tue May 07 2002 - 02:41:19 PDT)
• Blue Boar
  • Re: GOBBLES SECURITY ADVISORY #33 (Fri May 10 2002 - 20:31:06 PDT)
• Boyce, Nick
  • FW: HP-UX security bulletins digest (Thu May 30 2002 - 06:24:43 PDT)
• BrainRawt .
  • LevCGI.coms NetPad 1.0.2 multiple vulnerabilities (Mon May 13 2002 - 18:44:28 PDT)
• Brian Eckman
  • Re: cqure.net.20020408.netware_nwftpd.a (Wed May 08 2002 - 11:54:43 PDT)
• bugzillaat_private
  • [RHSA-2002:094-08] Updated tcpdump packages fix buffer overflow (Thu May 30 2002 - 05:52:01 PDT)
  • [RHSA-2002:084-17] Updated nss_ldap packages fix pam_ldap vulnerability (Mon May 27 2002 - 00:56:21 PDT)
  • [RHSA-2002:092-11] Buffer overflow in UW imap daemon (Fri May 24 2002 - 12:00:57 PDT)
  • [RHSA-2002:047-10] Updated fetchmail packages available (Tue May 21 2002 - 06:16:21 PDT)
  • [RHSA-2002:078-04] Updated mpg321 packages available (Thu May 16 2002 - 11:21:51 PDT)
  • [RHSA-2002:079-13] Updated Mozilla packages fix a security issue (Wed May 15 2002 - 12:15:59 PDT)
  • [RHSA-2002:065-13] Updated sharutils package fixes uudecode issue (Tue May 14 2002 - 07:44:59 PDT)
  • [RHSA-2002:081-06] perl-Digest-MD5 UTF8 bug results in incorrect MD5 sums (Fri May 10 2002 - 10:33:24 PDT)
  • [RHSA-2002:086-05] Netfilter information leak (Thu May 09 2002 - 06:46:09 PDT)
  • [RHSA-2002:070-08] Updated mod_python packages available (Wed May 08 2002 - 11:09:36 PDT)
  • [RHSA-2002:064-12] Updated Nautilus for symlink vulnerability writing metadata files (Thu May 02 2002 - 11:58:04 PDT)
  • [RHSA-2002:070-06] Updated mod_python packages available (Thu May 02 2002 - 01:59:52 PDT)
  • [RHSA-2002:062-08] Insecure DocBook stylesheet option (Wed May 01 2002 - 05:17:44 PDT)
• Burc Yildirim
  • 1st Linux and Free Software Festival - Ankara 2002 (Thu May 09 2002 - 01:47:34 PDT)
• ByteRage
  • Re: Problems with various windows FTP servers (Tue May 28 2002 - 00:32:03 PDT)
• capzlockat_private
  • CAPZLOCK SECURITY ADVISORY NO. 1 (Mon May 20 2002 - 07:29:32 PDT)
• Chad Loder
  • Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Fri May 17 2002 - 02:38:16 PDT)
• Charles M. Richmond
  • Re: eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy dis play name buffer overflow vulnerability (Wed May 01 2002 - 05:34:13 PDT)
• CHINANSL Security Team
  • Windows 2000 Server IIS 5.0 .ASP Overflow Exploit (Sat May 04 2002 - 08:42:52 PDT)
• Christian decoder Holler
  • Re: Flaw caused by default rulesets in many desktop firewalls under windows (Sat May 11 2002 - 07:43:23 PDT)
  • Flaw caused by default rulesets in many desktop firewalls under windows (Fri May 10 2002 - 11:44:15 PDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: CBOS - Improving Resilience to DoS Attacks (Thu May 23 2002 - 13:20:00 PDT)
  • Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability (Thu May 23 2002 - 13:25:00 PDT)
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco IP Telephones (Wed May 22 2002 - 09:00:00 PDT)
  • Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities (Wed May 15 2002 - 12:30:00 PDT)
  • Cisco Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability (Wed May 15 2002 - 12:30:00 PDT)
  • Cisco Security Advisory: NTP vulnerability (Wed May 08 2002 - 09:38:48 PDT)
• Coppage, Ross
  • ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 11:10:32 PDT)
• Corey J. Steele
  • Re: cqure.net.20020412.bordermanager_36_mv1.a (Fri May 10 2002 - 11:05:26 PDT)
• COULOMBE, TROY
  • Catalyst 4000 (Mon May 20 2002 - 09:38:25 PDT)
• Crist J. Clark
  • Re: ps under FreeBSD (Sun May 19 2002 - 01:14:38 PDT)
  • Re: ps under FreeBSD (Sun May 19 2002 - 01:18:38 PDT)
• Damir Rajnovic
  • Cisco IOS ICMP redirect DoS - Cisco's response (Tue May 21 2002 - 10:45:40 PDT)
• Daniel Nyström
  • [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS (Thu May 30 2002 - 15:21:30 PDT)
• Dave Ahmad
  • Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior (fwd) (Mon May 20 2002 - 13:46:26 PDT)
  • (SSRT0822) Security Bulletin - Compaq & Java Proxy/VM Potential Security Vulnerabilities (fwd) (Tue May 14 2002 - 18:49:44 PDT)
  • GOBBLES SECURITY ADVISORY #33 (Fri May 10 2002 - 11:44:48 PDT)
  • Re: OpenBSD local DoS and root exploit (Thu May 09 2002 - 08:27:40 PDT)
  • Administrivia (Sun May 05 2002 - 19:27:55 PDT)
  • FW: Fscan advisory (fwd) (Wed May 01 2002 - 09:46:39 PDT)
• Dave Oliver
  • Re: Intel D845HV/WN/PT series motherboard vulnerability (Fri May 03 2002 - 06:22:37 PDT)
• David Endler
  • US TurboLinux Security Severely Out of Date (Thu May 30 2002 - 11:40:01 PDT)
  • Evolution of Cross-Site Scripting Attacks (Mon May 20 2002 - 09:52:34 PDT)
• david evlis reign
  • [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd (Tue May 21 2002 - 19:06:43 PDT)
• David Litchfield
  • To Provide a Patch or to Service Pack? (Wed May 29 2002 - 10:39:14 PDT)
• David McKenzie
  • RE: MS02-023 does not patch actual issue! (Thu May 16 2002 - 10:54:07 PDT)
• Dax Kelson
  • Re: Linux kernel 2.4 "weak end host" issue (previously discussed here as "arp problem") (Sat May 11 2002 - 01:31:47 PDT)
• der Mouse
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Fri May 10 2002 - 20:23:45 PDT)
• Dug Song
  • Re: Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 09:34:49 PDT)
• ellipse
  • Re: To Provide a Patch or to Service Pack? (Thu May 30 2002 - 01:16:21 PDT)
• Emre Yildirim
  • Re: ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 11:01:25 PDT)
• ERRor
  • dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Wed May 15 2002 - 04:11:32 PDT)
  • dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability (Tue May 14 2002 - 01:26:30 PDT)
• Felix von Leitner
  • Linux kernel 2.4 "weak end host" issue (previously discussed here as "arp problem") (Thu May 09 2002 - 11:03:05 PDT)
• Florian Hobelsberger / BlueScreen
  • Lysias Lidik Webserver suffers from a Directory Traversal Vulnerability (Tue May 07 2002 - 18:27:19 PDT)
• Florian Weimer
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 06:39:41 PDT)
• fozzyat_private
  • OpenBSD local DoS and root exploit (Thu May 09 2002 - 06:11:31 PDT)
• Frank
  • b2 php remote command execution (Mon May 06 2002 - 03:13:37 PDT)
• Frank Hecker
  • Fix for Mozilla XMLHttpRequest file disclosure vulnerability (Thu May 02 2002 - 20:58:55 PDT)
• Frank Knobbe
  • Re: Flaw caused by default rulesets in many desktop firewalls under windows (Fri May 10 2002 - 20:34:45 PDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-02:26.accept (Wed May 29 2002 - 09:36:31 PDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:27.rc (Wed May 29 2002 - 09:36:35 PDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:25.bzip2 (Mon May 20 2002 - 09:08:14 PDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:24.k5su (Mon May 20 2002 - 09:08:02 PDT)
• FX
  • Cisco IOS ICMP redirect DoS (Tue May 21 2002 - 03:37:09 PDT)
• Gabriel A. Maggiotti
  • Re: Phorum 3.3.2a remote command execution (Sat May 18 2002 - 11:58:19 PDT)
• George Capehart
  • Re: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 07:52:55 PDT)
• George Staikos
  • Re: route of #phrack is a funny man! (Thu May 23 2002 - 19:09:22 PDT)
• Georgi Guninski
  • Re: To Provide a Patch or to Service Pack? (Thu May 30 2002 - 07:31:53 PDT)
  • Re: Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Tue May 14 2002 - 08:38:51 PDT)
• gobblesat_private
  • [GOBBLES] reflections on talkd hole (Thu May 23 2002 - 21:31:33 PDT)
  • route of #phrack is a funny man! (Tue May 21 2002 - 08:49:47 PDT)
  • Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Sat May 11 2002 - 21:08:08 PDT)
• Gregory Neil Shapiro
  • File Locking Local Denial of Service; Impact on sendmail (Thu May 23 2002 - 16:42:27 PDT)
• GreyMagic Software
  • Reading ANY local file in Opera (GM#001-OP) (Mon May 27 2002 - 04:33:38 PDT)
  • MS02-023 does not patch actual issue! (Thu May 16 2002 - 01:55:32 PDT)
  • UPDATE (1-May-2002): Reading local files in Netscape 6 and Mozilla (GM#001-NS) (Sat May 04 2002 - 02:43:59 PDT)
• Guillaume PELAT
  • Re: ps under FreeBSD (Sun May 19 2002 - 02:51:08 PDT)
  • Grsecurity problem - modifying "read-only kernel" (Fri May 17 2002 - 01:07:31 PDT)
• Guy Van Sanden
  • SECURITY vulnerability in ECS-K7S5A(L) boards (Thu May 30 2002 - 00:27:17 PDT)
• hdlkhaat_private
  • *****SPAM***** Hosting Controller still have dangerous bugs! (Fri May 17 2002 - 02:10:51 PDT)
• hkvrg thdftghr
  • VP-ASP shopping cart software. (Mon May 27 2002 - 01:54:00 PDT)
  • VP-ASP shopping cart software. (Mon May 27 2002 - 01:54:00 PDT)
• http-equivat_private
  • Classic Cross Site Scripting: Gibson Research Corporation (Wed May 01 2002 - 09:34:47 PDT)
• Information Anarchy 2K01
  • Two (2) Critical Path inJoin V4.0 Directory Server Issues (Fri May 10 2002 - 11:55:24 PDT)
• InterWN Labs
  • Hole in AOL Instant Messenger (Wed May 08 2002 - 16:01:26 PDT)
• Ismael Briones
  • Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router (Mon May 27 2002 - 09:02:29 PDT)
• isoxat_private
  • Information Disclosure Vulnerability in IDS 0.8x (Tue May 28 2002 - 13:21:20 PDT)
  • Plain Text Password Vulnerability in Winamp 2.80 (Sat May 18 2002 - 21:41:33 PDT)
• Jakub Filonik
  • ps under FreeBSD (Sat May 18 2002 - 11:40:38 PDT)
• Jeff Franklin
  • Re: wu-imap buffer overflow condition (Fri May 10 2002 - 17:34:58 PDT)
• Joe Testa
  • R7-0003: Nautilus Symlink Vulnerability (Thu May 02 2002 - 13:13:50 PDT)
• John Howie
  • RE: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 14:56:06 PDT)
• John.Aireyat_private
  • RE: MS02-023 does not patch actual issue! (Fri May 17 2002 - 01:05:11 PDT)
  • RE: MS02-023 does not patch actual issue! (Fri May 17 2002 - 06:34:59 PDT)
• Johnathan Nightingale
  • Multiple Vulnerabilities in CISCO VoIP Phones (Wed May 22 2002 - 08:50:50 PDT)
• Jonas Eriksson
  • Potential security issues in Ethereal (Wed May 29 2002 - 07:54:35 PDT)
  • OpenSSH 3.2.3 released (fwd) (Mon May 27 2002 - 11:19:29 PDT)
  • OpenSSH 3.2.2 released (fwd) (Thu May 16 2002 - 23:42:42 PDT)
  • Re: OpenBSD local DoS and root exploit (Thu May 09 2002 - 09:54:31 PDT)
• Jonas Ländin
  • iXsecurity.20020404.4d_webserver.a (Thu May 02 2002 - 17:37:45 PDT)
• Jonathan Lamberson
  • Microsoft Active Directory security vulnerability (Thu May 23 2002 - 07:55:46 PDT)
• Julien Vanegue
  • Re: More ELF buggery... (Fri May 31 2002 - 09:02:46 PDT)
• Kanatoko
  • MatuFtpServer Remote Buffer Overflow and Possible DoS (Tue May 21 2002 - 21:13:00 PDT)
• Keary Suska
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Thu May 09 2002 - 11:37:36 PDT)
• Ken Weaverling
  • Re: Xerox DocuTech problems (Sat May 18 2002 - 19:04:19 PDT)
• Ken.Williamsat_private
  • Re: eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy dis play name buffer overflow vulnerability (Wed May 01 2002 - 13:51:15 PDT)
• keyboardhackerat_private
  • Logitech Keyboard Insecurity (Thu May 02 2002 - 11:27:51 PDT)
• kikaijuat_private
  • Re: Xerox DocuTech problems (Fri May 17 2002 - 18:26:45 PDT)
• KJK::Hyperion
  • Nearly undocumented NT security feature - the solution to executable attachments? (Tue May 07 2002 - 13:28:33 PDT)
  • Re: Logitech Keyboard Insecurity (Fri May 03 2002 - 18:35:14 PDT)
• Kris Warkentin
  • Re: Multiple vulnerabilities in QNX (Fri May 31 2002 - 19:23:35 PDT)
• Lance Spitzner
  • Reverse Challenge - Binary released (Sun May 05 2002 - 19:05:23 PDT)
  • Honeynet Project -> The Reverse Challenge (Wed May 01 2002 - 13:10:51 PDT)
• Larry Jones
  • Re: [DER ADV#8] - Local off by one in CVSD (Sun May 26 2002 - 12:23:16 PDT)
  • Re: [DER ADV#8] - Local off by one in CVSD (Sun May 26 2002 - 12:23:16 PDT)
• Lupe Christoph
  • Re: Netstd 3.07-17 multiple remote buffer overflows (Sat May 25 2002 - 02:01:47 PDT)
• Mandrake Linux Security Team
  • MDKSA-2002:037-1 - dhcp update (Thu May 30 2002 - 11:30:02 PDT)
  • MDKSA-2002:034 - imap update (Mon May 27 2002 - 15:55:21 PDT)
  • MDKSA-2002:037 - dhcp update (Wed May 29 2002 - 12:06:59 PDT)
  • MDKSA-2002:036 - fetchmail update (Tue May 28 2002 - 11:57:58 PDT)
  • MDKSA-2002:035 - perl-Digest-MD5 update (Tue May 28 2002 - 11:56:57 PDT)
  • MDKSA-2002:033 - webmin update (Tue May 21 2002 - 18:50:11 PDT)
  • MDKSA-2002:032 - tcpdump update (Thu May 16 2002 - 13:09:19 PDT)
  • MDKSA-2002:031 - fileutils update (Thu May 16 2002 - 13:08:19 PDT)
  • MDKSA-2002:030 - temporary fix for netfilter information leak (Thu May 09 2002 - 09:41:48 PDT)
• Marc Maiffret
  • ADVISORY: MSN Messenger OCX Buffer Overflow (Wed May 08 2002 - 16:00:03 PDT)
  • Macromedia Flash Activex Buffer overflow (Thu May 02 2002 - 17:17:22 PDT)
• Marcell Fodor
  • wu-imap buffer overflow condition (Fri May 10 2002 - 08:27:13 PDT)
• Markus Arndt
  • Phorum 3.3.2a has another bug for remote command execution (Sat May 18 2002 - 03:32:56 PDT)
  • Phorum 3.3.2a remote command execution (Fri May 17 2002 - 11:26:40 PDT)
  • Possible Buffer Overflow in ACDSee 4.0 (Fri May 10 2002 - 14:10:28 PDT)
• Martijn Boerwinkel
  • Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar (Sun May 26 2002 - 08:59:33 PDT)
• Martin Östlund
  • irssi backdoored. (Sat May 25 2002 - 07:58:05 PDT)
• Matt Conover
  • w00w00 on AOL Instant Messenger remote overflow #2 (Mon May 06 2002 - 08:50:37 PDT)
• Matt Moore
  • Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 (Wed May 22 2002 - 09:11:57 PDT)
• Matthew G. Marsh
  • Re: Linux kernel 2.4 "weak end host" issue Explained (Tue May 14 2002 - 07:47:22 PDT)
• Max
  • pks public key server DOS and remote execution (Fri May 24 2002 - 15:39:06 PDT)
• Michael Metz [SpeedPartner]
  • Security-risk on gridscan.com (Fri May 24 2002 - 15:01:34 PDT)
• Michal Zalewski
  • Re: addition: CVS off by one (Sat May 25 2002 - 14:24:39 PDT)
• Mike Crane
  • Re: Patrol security bugs (Tue May 07 2002 - 14:07:01 PDT)
• Muhammad Faisal Rauf Danka
  • Re: Scanners and unpublished vulnerabilities - Full Disclosure (Wed May 29 2002 - 04:13:20 PDT)
  • Re: Plain Text Password Vulnerability in Winamp 2.80 (Mon May 20 2002 - 18:49:35 PDT)
• Muller Zsolt
  • Re: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 03:03:57 PDT)
• Nate Eldredge
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 13:27:37 PDT)
• nCipher Support
  • nCipher Security Advisory #3: MSCAPI CSP Install Wizard (Mon May 13 2002 - 08:44:29 PDT)
• nexus-mailat_private
  • Fwd: [EXPL] Remote Exploit for UW-IMAPd Capability (IMAP4) (Wed May 29 2002 - 23:15:07 PDT)
• NGSEC Research Team
  • [NGSEC-2002-2] ISC DHCPDv3, remote root compromise (Wed May 08 2002 - 10:04:35 PDT)
• NGSSoftware Insight Security Research
  • Addendum to advisory #NISR29052002 (JRun buffer overflow) (Wed May 29 2002 - 09:37:28 PDT)
  • Macromedia JRUN Buffer overflow vulnerability (#NISR29052002) (Tue May 28 2002 - 22:33:23 PDT)
• Noam Rathaus
  • Re: VP-ASP shopping cart software. (Mon May 27 2002 - 11:38:46 PDT)
• Obscure
  • Multiple Vulnerabilities in MDaemon + WorldClient (Tue May 07 2002 - 14:56:58 PDT)
• office
  • cross-site scripting bug of ViewCVS (Sat May 18 2002 - 17:32:24 PDT)
• Olaf Kirch
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 14:16:58 PDT)
• paskat_private
  • Informix SE-7.25 /lib/sqlexec Vulnerability (Wed May 29 2002 - 16:32:51 PDT)
• Patrick Michael Kane
  • Cisco ATA-186 admin password can be trivially circumvented (Thu May 09 2002 - 10:30:11 PDT)
• Patrik Karlsson
  • cqure.net.20020408.netware_nwftpd.a (Wed May 08 2002 - 03:01:15 PDT)
  • cqure.net.20020412.netware_client.a (Wed May 08 2002 - 03:02:01 PDT)
  • cqure.net.20020412.bordermanager_36_mv1.a (Wed May 08 2002 - 03:03:11 PDT)
  • cqure.net.20020412.netware_sdmr.a (Wed May 08 2002 - 03:02:34 PDT)
• Paul Cardon
  • Re: Logitech Keyboard Insecurity (Thu May 02 2002 - 15:15:54 PDT)
• Paul Starzetz
  • GNU rm fileutils race condition problems on SuSE (Thu May 16 2002 - 04:43:25 PDT)
  • Re: trusting user-supplied data (was Re: FreeBSD Security Advisory FreeBSD-SA-02:23.stdio) (Thu May 02 2002 - 10:35:02 PDT)
• Pedram Amini
  • AIM+ SpyWare (Fri May 31 2002 - 11:54:49 PDT)
• Pedro Paulo Ferreira Bueno
  • Re: Efficient Networks Contact info (Thu May 23 2002 - 08:51:23 PDT)
• Pedro Quintanilha
  • RE: TrendMicro Interscan VirusWall security problem (Mon May 27 2002 - 07:09:20 PDT)
  • TrendMicro Interscan VirusWall security problem (Fri May 24 2002 - 11:05:05 PDT)
• Peter Gründl
  • KPMG-2002017: Snapgear Lite+ Firewall Denial of Service (Thu May 02 2002 - 04:56:53 PDT)
• Philippe Biondi
  • [CARTSA-20020402] Linux Netfilter NAT/ICMP code information leak (Wed May 08 2002 - 06:35:27 PDT)
• Philippe de Brito
  • Opty-Way Enterprise includes MSDE with sa <blank> (Wed May 22 2002 - 10:07:38 PDT)
• Phuong Nguyen
  • Yahoo Messenger - Multiple Vulnerabilities (Mon May 27 2002 - 08:20:54 PDT)
• Pidgorny, Slav
  • Verisign PKI: anyone to subordinate CA (Sat May 18 2002 - 23:01:03 PDT)
• ppp-design
  • NOCC: cross-site-scripting bug (Tue May 14 2002 - 06:33:29 PDT)
• qitest1
  • Bug in mnogosearch-3.1.19 (Sat May 11 2002 - 10:08:15 PDT)
• quentynat_private
  • Netscreen 25 unauthorised reboot issue (Mon May 27 2002 - 10:33:31 PDT)
• REAVA, JEFFREY [IT/0200]
  • RE: Honeynet Project -> The Reverse Challenge (Thu May 02 2002 - 10:43:14 PDT)
• researchteamat_private
  • eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability (Mon May 20 2002 - 15:20:59 PDT)
• Richard Stanway
  • Remote quake 2 3.2x server cvar leak (Mon May 13 2002 - 19:48:05 PDT)
• richard.fuserat_private
  • Re: Logitech Keyboard Insecurity (Thu May 02 2002 - 16:41:16 PDT)
• Roger Safian
  • FIRST 2002 reminder (Thu May 09 2002 - 07:58:59 PDT)
• rogerskat_private
  • Re: eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy dis play name buffer overflow vulnerability (Wed May 01 2002 - 09:34:59 PDT)
• Ross Coppage
  • ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 08:55:22 PDT)
• Ry Jones
  • NTFS and PGP interact to expose EFS encrypted data (Wed May 08 2002 - 12:34:11 PDT)
• Scott Mackenzie
  • Gaim abritary Email Reading (Sat May 11 2002 - 21:52:56 PDT)
• SeazoN
  • wbbboard 1.1.1 registration _new_users_vulnerability_ (Sun May 26 2002 - 07:11:17 PDT)
• Sebastian Krahmer
  • SuSE Security Announcement: tcpdump/libpcap (SuSE-SA:2002:020) (Wed May 29 2002 - 05:40:32 PDT)
  • SuSE Security Announcement: shadow (SuSE-SA:2002:017) (Thu May 16 2002 - 03:49:00 PDT)
  • SuSE Security Announcement: sysconfig (SuSE-SA:2002:016) (Wed May 08 2002 - 03:35:35 PDT)
• secureat_private
  • [CLA-2002:490] Conectiva Linux Security Announcement - mozilla (Wed May 29 2002 - 13:05:00 PDT)
  • [CLA-2002:489] Conectiva Linux Security Announcement - mailman (Fri May 24 2002 - 14:36:20 PDT)
  • [CLA-2002:487] Conectiva Linux Security Announcement - imap (Fri May 24 2002 - 07:33:06 PDT)
  • [CLA-2002:483] Conectiva Linux Security Announcement - dhcp (Thu May 09 2002 - 07:53:28 PDT)
  • [CLA-2002:481] Conectiva Linux Security Announcement - imlib (Wed May 08 2002 - 09:26:44 PDT)
  • [CLA-2002:480] Conectiva Linux Security Announcement - tcpdump (Tue May 07 2002 - 14:23:51 PDT)
  • [CLA-2002:477] Conectiva Linux Security Announcement - mod_python (Fri May 03 2002 - 13:37:11 PDT)
• securityat_private
  • Security Update: [CSSA-2002-SCO.23] Open UNIX 8.0.0 UnixWare 7.1.1 : ftpd allows data connection hijacking via PASV mode (Thu May 30 2002 - 11:30:43 PDT)
  • Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely (Tue May 28 2002 - 16:07:42 PDT)
  • Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely (Tue May 28 2002 - 16:05:40 PDT)
  • Security Update: [CSSA-2002-SCO.20] OpenServer 5.0.5 OpenServer 5.0.6 : popper buffer overflow and denial-of-service (Thu May 23 2002 - 16:53:09 PDT)
  • Security Update: [CSSA-2002-SCO.19] OpenServer 5.0.5 OpenServer 5.0.6 : yppasswdd remotely exploitable buffer overflow (Mon May 20 2002 - 17:55:25 PDT)
  • Security Update: [CSSA-2002-023.0] Linux: PHP multipart/form-data vulnerabilities (Fri May 17 2002 - 11:20:54 PDT)
  • Security Update: [CSSA-2002-022.0] Linux: OpenSSH ticket and token passing buffer overflow (Wed May 15 2002 - 16:53:33 PDT)
  • Security Update: [CSSA-2002-021.0] Linux: imapd buffer overflow when fetching partial mailbox attributes (Wed May 15 2002 - 13:02:30 PDT)
  • Security Update: [CSSA-2002-018.1] Linux: REVISED: Race condition in fileutils (Tue May 14 2002 - 13:28:29 PDT)
  • Security Update: [CSSA-2002-020.0] Linux: icecast buffer overflows and denial-of-service (Mon May 13 2002 - 14:28:15 PDT)
  • Security Update: [CSSA-2002-SCO.18] Open UNIX 8.0.0 UnixWare 7.1.1 : CDE /var/dt and subdirectories are writable by world (Wed May 08 2002 - 13:01:25 PDT)
  • Security Update: [CSSA-2002-SCO.17] OpenServer 5.0.5 : sar -o buffer overflow (Wed May 01 2002 - 18:03:15 PDT)
• Shea, Tim
  • Efficient Networks Contact info (Thu May 23 2002 - 06:37:00 PDT)
• Simon Ouellette
  • Multiple vulnerabilities in QNX (Fri May 31 2002 - 14:42:17 PDT)
• snsadvat_private
  • [SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically (Wed May 15 2002 - 23:20:37 PDT)
  • [SNS Advisory No.53] Webmin/Usermin Session ID Spoofing Vulnerability (Tue May 07 2002 - 22:20:32 PDT)
  • [SNS Advisory No.52] Webmin/Usermin Cross-site Scripting Vulnerability (Tue May 07 2002 - 22:20:26 PDT)
• Spybreak
  • Netstd 3.07-17 multiple remote buffer overflows (Fri May 24 2002 - 01:39:23 PDT)
• Stephanie Schiebert
  • [Fwd: Updated version of SSH Secure Shell available] (Thu May 23 2002 - 10:22:29 PDT)
• Stephen Cope
  • Re: Problems with various windows FTP servers (Tue May 28 2002 - 03:13:01 PDT)
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Fri May 10 2002 - 21:14:51 PDT)
• Steve Gustin
  • CGIscript.net - csPassword.cgi - Multiple Vulnerabilities (Wed May 29 2002 - 15:16:28 PDT)
  • 14+ CGIscript.net scripts - Path Disclosure (Fri May 17 2002 - 14:31:23 PDT)
• steven.sporenat_private
  • Security Implications of Novell eDirectory. (Thu May 30 2002 - 01:56:30 PDT)
• Summercon Admin
  • Summercon 2002 Announce (Wed May 08 2002 - 10:00:54 PDT)
• superpetzat_private
  • NetPad eq MALWARE, was: LevCGI.coms NetPad 1.0.2 multiple vulnerabilities (Tue May 14 2002 - 10:02:14 PDT)
• SUZUKI Yasuhiro
  • swatch bug in throttle (Wed May 15 2002 - 05:48:40 PDT)
• Tamer Sahin
  • [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability (Sun May 26 2002 - 09:32:15 PDT)
  • [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2 (Mon May 27 2002 - 02:53:13 PDT)
  • [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability (Fri May 24 2002 - 06:20:19 PDT)
  • [SecurityOffice] Stronghold Secure Webserver Sample Script Path Disclosure Vulnerability (Mon May 20 2002 - 22:00:31 PDT)
• Terry Lavoie
  • RE: Multiple Vulnerabilities in MDaemon + WorldClient (Wed May 08 2002 - 12:53:59 PDT)
• The Dark Tangent
  • Announcing DEF CON 10! (Thu May 02 2002 - 21:25:25 PDT)
• the grugq
  • More ELF buggery... (Sun May 26 2002 - 09:59:54 PDT)
• Thomas Biege
  • SuSE Security Announcement: dhcp/dhcp-server (SuSE-SA:2002:019) (Wed May 22 2002 - 10:01:58 PDT)
  • Re: [security-intern] [securityat_private] FWD - GNU rm fileutils race condition problems on SuSE (Thu May 16 2002 - 05:03:02 PDT)
  • SuSE Security Announcement: lukemftp, nkitb, nkitserv (SuSE-SA:2002:018) (Thu May 16 2002 - 05:05:46 PDT)
  • SuSE Security Announcement: imlib (SuSE-SA:2002:015) (Tue May 07 2002 - 05:05:54 PDT)
• Thomas Seifert
  • Re: Phorum 3.3.2a remote command execution (Sat May 18 2002 - 17:12:51 PDT)
• Thor Larholm
  • RE: Update and comments on the MS02-023 patch, holes still remain (Fri May 17 2002 - 05:36:00 PDT)
  • Update and comments on the MS02-023 patch, holes still remain (Thu May 16 2002 - 07:20:08 PDT)
• Tina Bird
  • Re: Cisco Security Advisory: NTP vulnerability (fwd) (Thu May 09 2002 - 08:19:19 PDT)
• Tollef Fog Heen
  • Re: [DER ADV#8] - Local off by one in CVSD (Sat May 25 2002 - 13:30:05 PDT)
• Tom Gilder
  • Re: MS02-023 does not patch actual issue! (Thu May 16 2002 - 10:56:33 PDT)
• Torbjorn Kristoffersen
  • Re: ps under FreeBSD (Sun May 19 2002 - 19:29:37 PDT)
• uid0at_private
  • Re: Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 08:48:29 PDT)
  • Re: Xerox DocuTech problems (Fri May 17 2002 - 16:11:57 PDT)
• Ulf Harnhammar
  • CRLF Injection (Mon May 06 2002 - 15:12:10 PDT)
• underdocat_private
  • Misformated message header causes msn messenger to crash (Mon May 06 2002 - 08:04:13 PDT)
• Vanja Hrustic
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Thu May 09 2002 - 13:41:50 PDT)
• webmasterat_private
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (Wed May 29 2002 - 06:31:27 PDT)
  • Vulnerability in Novell Netware 5.0 (part1) (Wed May 29 2002 - 06:27:45 PDT)
  • Vulnerability in Novell Netware 5.0 (part 2) (Wed May 29 2002 - 06:29:59 PDT)
  • Gafware's CFXImage vulnerability (Wed May 29 2002 - 07:21:32 PDT)
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2) (Wed May 29 2002 - 06:32:29 PDT)
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3) (Wed May 29 2002 - 06:33:42 PDT)
• X-Force
  • ISS Alert: Microsoft SQL Spida Worm Propagation (Tue May 21 2002 - 14:31:24 PDT)
• Yuri A. Kabaenkov
  • Re: ps under FreeBSD (Sat May 18 2002 - 12:50:03 PDT)
• zeno
  • Re: XSS And Headers... (Sat May 25 2002 - 13:21:50 PDT)
  • "The Cross Site Scripting FAQ" (Tue May 21 2002 - 04:50:25 PDT)
• zillion
  • Mnews 1.22 PoC exploit (Fri May 31 2002 - 16:37:42 PDT)
  • Mnews 1.22 PoC exploit (Fri May 31 2002 - 16:37:42 PDT)
  • SRT Security Advisory (SRT2002-04-31-1159): Mnews (Fri May 31 2002 - 11:59:41 PDT)
  • AMANDA security issues (Mon May 27 2002 - 02:49:55 PDT)
  • AMANDA security issues (Mon May 27 2002 - 02:49:55 PDT)

Last message date: Sun Jun 02 2002 - 17:37:35 PDT
Archived on: Sun Jun 02 2002 - 17:37:38 PDT

This archive was generated by hypermail 2b30 : Sun Jun 02 2002 - 17:37:38 PDT