bugtraq 2002/06
By Thread
Most recent messages
415 messages sorted by:
[ author ]
[ date ]
[ subject ]
Other mail archives
Starting: Sat Jun 01 2002 - 15:59:38 PDT
Ending: Sat Nov 23 2002 - 00:08:32 PST
- SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw 3APA3A (Sat Jun 01 2002 - 05:14:15 PDT)
- Self-Executing HTML: Internet Explorer 5.5 and 6.0 http-equivat_private (Sat Jun 01 2002 - 07:42:10 PDT)
- Re: Security Update: [CSSA-2002-SCO.23] Open UNIX 8.0.0 UnixWare 7.1.1 : ftpd allows data connection hijacking via PASV mode Tomasz Grabowski (Mon Jun 03 2002 - 09:56:57 PDT)
- QNX badc0dedat_private (Mon Jun 03 2002 - 09:56:21 PDT)
- Re: wbbboard 1.1.1 registration _new_users_vulnerability_ Frank Wein (Sun Jun 02 2002 - 05:57:33 PDT)
- BadBlue Web Server v1.7.0 Directory Contents Disclosure a b (Sat Jun 01 2002 - 21:33:38 PDT)
- Re: 2 security problem Quantum SNAP server awacsat_private (Sun Jun 02 2002 - 20:46:45 PDT)
- Security Update: [CSSA-2002-024.0] Volution Manager: Directory Administrator password in cleartext securityat_private (Mon Jun 03 2002 - 13:58:59 PDT)
- MIME::Tools Perl module and virus scanners David F. Skoll (Mon Jun 03 2002 - 13:19:58 PDT)
- [DER #11] - Remotey exploitable fmt string bug in squid david evlis reign (Mon Jun 03 2002 - 19:25:18 PDT)
- PFinger Buffer Overflow Vulnerability. dong-h0un U (Tue Jun 04 2002 - 08:14:54 PDT)
- Buffer overflow in MSIE gopher code Jouko Pynnonen (Tue Jun 04 2002 - 06:07:34 PDT)
- sql injection in Logisense software Akatosh (Tue Jun 04 2002 - 07:59:57 PDT)
- Entercept Ricochet Security Advisory: Solaris snmpdx Vulnerabilities Entercept Ricochet Team (Tue Jun 04 2002 - 09:28:49 PDT)
- [RHSA-2002:097-08] Updated xchat packages fix /dns vulnerability bugzillaat_private (Tue Jun 04 2002 - 12:24:50 PDT)
- SRT Security Advisory (SRT2002-06-04-1011): slurp zillion (Tue Jun 04 2002 - 09:45:33 PDT)
- SHOUTcast 1.8.9 bufferoverflow eSDee (Tue Jun 04 2002 - 10:32:12 PDT)
- [RHSA-2002:105-09] Updated bind packages fix denial of service attack bugzillaat_private (Tue Jun 04 2002 - 12:35:59 PDT)
- [RHSA-2002:083-22] Ghostscript command execution vulnerability bugzillaat_private (Tue Jun 04 2002 - 12:39:47 PDT)
- SRT Security Advisory (SRT2002-06-04-1711): SCO crontab zillion (Tue Jun 04 2002 - 14:32:08 PDT)
- Sun Security Bulletin #00219 Sun Security Coordination Team (Tue Jun 04 2002 - 16:02:02 PDT)
- IRIX rpc.passwd vulnerability SGI Security Coordinator (Tue Jun 04 2002 - 15:47:28 PDT)
- Re: More ELF Buggery silvio.cesareat_private (Tue Jun 04 2002 - 17:20:04 PDT)
- solaris lpd thing ron1n . (Mon Jun 03 2002 - 06:17:02 PDT)
- [CLA-2002:491] Conectiva Linux Security Announcement - tcpdump secureat_private (Wed Jun 05 2002 - 10:19:56 PDT)
- Security Update: [CSSA-2002-025.0] Linux: tcpdump AFS RPC and NFS packet vulnerabilities securityat_private (Wed Jun 05 2002 - 12:30:17 PDT)
- Three possible DoS attacks against some IOS versions. Andrew Vladimirov (Wed Jun 05 2002 - 10:52:15 PDT)
- Some vulnerabilities in the Telindus 11xx router series finelliat_private (Wed Jun 05 2002 - 10:43:00 PDT)
- [Bypassing JavaScript Filters - the Flash! Attack] Obscure (Wed Jun 05 2002 - 14:28:39 PDT)
- KPMG-2002019: BlackICE Agent not Firewalling After Standby Peter Gründl (Thu Jun 06 2002 - 05:13:22 PDT)
- eDonkey 2000 ed2k: URL Buffer Overflow Shane Hird (Wed Jun 05 2002 - 17:52:10 PDT)
- SuSE Security Announcement: bind9/bind9-beta (SuSE-SA:2002:021) Roman Drahtmueller (Wed Jun 05 2002 - 19:54:55 PDT)
- [ARL02-A12] PHP(Reactor) Cross Site Scripting Vulnerability Ahmet Sabri ALPER (Thu Jun 06 2002 - 07:09:44 PDT)
- Splatt Forum XSS MegaHz (Thu Jun 06 2002 - 06:01:29 PDT)
- [CLA-2002:494] Conectiva Linux Security Announcement - bind secureat_private (Thu Jun 06 2002 - 11:01:50 PDT)
- Microsoft Internet Explorer 'Folder View for FTP sites' Script Execution vulnerability Eiji James Yoshida (Thu Jun 06 2002 - 08:33:44 PDT)
- TSLSA-2002-0055 - tcpdump Trustix Secure Linux Advisor (Thu Jun 06 2002 - 07:05:32 PDT)
- Possible problems with patch MS02_025 for Exchange 2000 Ken Brown (Thu Jun 06 2002 - 07:18:29 PDT)
- Format String bug in TrACESroute 6.0 GOLD DownBload (Thu Jun 06 2002 - 13:13:39 PDT)
- RE: Microsoft Internet Explorer 'Folder View for FTP sites' Scrip t Execution vulnerability Thor Larholm (Thu Jun 06 2002 - 14:55:53 PDT)
- MediaMail vulnerability SGI Security Coordinator (Thu Jun 06 2002 - 14:26:35 PDT)
- CBMS: XSS and SQL Injection holes Ulf Harnhammar (Thu Jun 06 2002 - 16:26:40 PDT)
- [ESA-20020607-013] Remote buffer overflow in imap daemon EnGarde Secure Linux (Fri Jun 07 2002 - 07:16:55 PDT)
- Trad.Goth Advisory #1- Multiple Information Leaks in MTA's Nexus (Fri Jun 07 2002 - 02:44:56 PDT)
- @stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities Dave Ahmad (Fri Jun 07 2002 - 12:19:15 PDT)
- Pine 4.44 Privacy Patch Roger Marquis (Fri Jun 07 2002 - 15:13:18 PDT)
- [BUGZILLA] Security Advisory For Versions of Bugzilla 2.14 Prior To 2.14.2, 2.16 Prior To 2.16rc2 David Miller (Fri Jun 07 2002 - 23:50:12 PDT)
- Security holes in LokwaBB and W-Agora Frog Man (Sat Jun 08 2002 - 04:43:21 PDT)
- SeaNox Devwex - Denial of Service and Directory traversal Kistler Ueli (Sat Jun 08 2002 - 11:27:59 PDT)
- Problem with IP reporting - Belkin Cable/DSL router M Freitas (Sun Jun 09 2002 - 15:17:04 PDT)
- [ARL02-A15] Multiple Security Issues in MyHelpdesk Ahmet Sabri ALPER (Mon Jun 10 2002 - 04:50:47 PDT)
- [ARL02-A13] Multiple Security Issues in GeekLog Ahmet Sabri ALPER (Mon Jun 10 2002 - 04:41:43 PDT)
- remote DoS in Mozilla 1.0 Tom (Mon Jun 10 2002 - 01:20:06 PDT)
- [ARL02-A14] ZenTrack System Information Path Disclosure Vulnerability Ahmet Sabri ALPER (Mon Jun 10 2002 - 04:47:53 PDT)
- IRIX talkd vulnerability SGI Security Coordinator (Mon Jun 10 2002 - 10:43:10 PDT)
- Xinet K-Talk Appletalk(tm) xkas vulnerability on IRIX SGI Security Coordinator (Mon Jun 10 2002 - 13:46:55 PDT)
- [RHSA-2002:099-04] Updated mailman packages available bugzillaat_private (Mon Jun 10 2002 - 13:28:47 PDT)
- AlienForm2 CGI script: arbitrary file read/write Nick Cleaton (Mon Jun 10 2002 - 14:18:53 PDT)
- [RHSA-2002:100-03] Updated mailman packages available bugzillaat_private (Mon Jun 10 2002 - 13:27:52 PDT)
- Security Update: [CSSA-2002-SCO.24] Open UNIX 8.0.0 : BIND 9 Denial-of-Service vulnerability securityat_private (Mon Jun 10 2002 - 15:31:35 PDT)
- [RHSA-2002:089-07] Relaxed LPRng job submission policy bugzillaat_private (Mon Jun 10 2002 - 13:29:53 PDT)
- Broken PMTUD in FreeBSD? Phil Dibowitz (Mon Jun 10 2002 - 12:52:56 PDT)
- Security Update: [CSSA-2002-SCO.25] OpenServer 5.0.5 OpenServer 5.0.6 : snmpd denial-of-service vulnerabilities. securityat_private (Mon Jun 10 2002 - 16:50:01 PDT)
- RHmask Andrew Griffiths (Tue Jun 11 2002 - 00:56:42 PDT)
- CGIscript.net - csNews.cgi - Multiple Vulnerabilities Steve Gustin (Tue Jun 11 2002 - 14:00:51 PDT)
- Security Update: [CSSA-2002-026.0] Linux: ghostscript arbitrary command execution securityat_private (Tue Jun 11 2002 - 18:16:26 PDT)
- SSI & CSS execution in MakeBook 2.2 DownBload (Wed Jun 12 2002 - 00:22:06 PDT)
- [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability Benoît Roussel (Wed Jun 12 2002 - 05:49:49 PDT)
- Oracle Reports Server Buffer Overflow (#NISR12062002B) NGSSoftware Insight Security Research (Wed Jun 12 2002 - 07:09:22 PDT)
- Oracle TNS Listener Buffer Overflow (#NISR12062002A) NGSSoftware Insight Security Research (Wed Jun 12 2002 - 07:05:44 PDT)
- [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability Benoît Roussel (Wed Jun 12 2002 - 05:58:37 PDT)
- Remote Hole in IRC Client and Stuff gobblesat_private (Wed Jun 12 2002 - 08:27:59 PDT)
- madcr: QnX 4.25 - multiples bof in suid/no suid files Egor Egorov (Wed Jun 12 2002 - 05:10:46 PDT)
- Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router Ismael Briones (Wed Jun 12 2002 - 10:17:11 PDT)
- A different type of sniffer: Hafiye Kullanici Tarum (Wed Jun 12 2002 - 12:51:45 PDT)
- ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612] Ryan Permeh (Wed Jun 12 2002 - 15:06:59 PDT)
- [SNS Advisory No.54] Active! mail Executing the Script upon the Opening of a Mail Message Vulnerability snsadvat_private (Wed Jun 12 2002 - 22:31:43 PDT)
- wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting Matt Moore (Thu Jun 13 2002 - 03:10:48 PDT)
- Remote DoS in AnalogX SimpleServer:www 1.16 Fort _ (Thu Jun 13 2002 - 05:21:21 PDT)
- CSS vulnerabilities in IMP 3.0 Brent J. Nordquist (Thu Jun 13 2002 - 07:01:00 PDT)
- simpleinit root exploit - file descriptor left open Patrick Smith (Wed Jun 12 2002 - 20:36:50 PDT)
- Re: Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases mattmurphyat_private (Wed Jun 12 2002 - 15:32:50 PDT)
- Microsoft releases critical fix that breaks their own software! Geoff Shively (Wed Jun 12 2002 - 22:58:31 PDT)
- VNA - .HTR HEAP OVERFLOW Mark Litchfield (Thu Jun 13 2002 - 12:32:45 PDT)
- Microsoft RASAPI32.DLL Mark Litchfield (Thu Jun 13 2002 - 14:23:59 PDT)
- [LBYTE] Ruslan Communications <BODY>Builder SQL modification Alexander Korchagin (Thu Jun 13 2002 - 08:47:03 PDT)
- Sensitive IM Security - MSN Message Sniffing SeungHyun Seo (Wed Jun 12 2002 - 23:54:05 PDT)
- Microsoft FrontPage vs Composer Netscape... S[h]iff - [ISR] - Infobyte Security Research (Thu Jun 13 2002 - 04:31:03 PDT)
- Flawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70 Mikael Olsson (Thu Jun 13 2002 - 09:57:07 PDT)
- ToorCon 2002 Call For Papers h1kari (Thu Jun 13 2002 - 15:41:42 PDT)
- +ALERT+ BACKDOOR IN MSN666 SNIFFER FOR SNIFFING MSN +ALERT+ gobblesat_private (Thu Jun 13 2002 - 16:42:57 PDT)
- Another small DoS on Mozilla <= 1.0 through pop3 Tim the Enchanter (Fri Jun 14 2002 - 05:22:24 PDT)
- Security Update: [CSSA-2002-SCO.26] OpenServer 5.0.6a : squid compressed DNS answer message boundary failure securityat_private (Thu Jun 13 2002 - 16:59:03 PDT)
- Another cgiemail bug sec (Fri Jun 14 2002 - 07:20:55 PDT)
- Microsoft SQL Server 2000 pwdencrypt() buffer overflow martin rakhmanoff (Fri Jun 14 2002 - 06:24:11 PDT)
- Lumigent Log Explorer 3.xx extended stored procedures buffer overflow martin rakhmanoff (Fri Jun 14 2002 - 06:05:15 PDT)
- UPDATE UPDATE UPDATE UPDATE UPDATE UPDATE gobblesat_private (Fri Jun 14 2002 - 08:25:19 PDT)
- Re: MSN666 "backdoor" Seunghyun Seo (Fri Jun 14 2002 - 09:04:53 PDT)
- IGMP denial of service vulnerability Krishna N. Ramachandran (Fri Jun 14 2002 - 03:45:22 PDT)
- Follow-up on Lumigent Log Explorer 3.xx extended stored procedures buffer overflow Murray S. Mazer (Fri Jun 14 2002 - 11:08:27 PDT)
- Mewsoft Auction, PHP Classifieds and eFax.com - CrossSiteScripting issues § o m e 1 (Fri Jun 14 2002 - 11:15:05 PDT)
- Re: Flawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70 Mikael Olsson (Fri Jun 14 2002 - 00:11:24 PDT)
- XSS in CiscoSecure ACS v3.0 Dave Palumbo (Fri Jun 14 2002 - 13:39:44 PDT)
- ALERT: Xitami 2.5b5 Matthew Murphy (Fri Jun 14 2002 - 13:22:21 PDT)
- RE: wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Sc ripting Francis Favorini (Fri Jun 14 2002 - 13:18:08 PDT)
- malicious PHP source injection I'm I (Sat Jun 15 2002 - 09:15:15 PDT)
- Fore/Marconi ATM Switch 'land' vulnerability Seeker of Truth (Fri Jun 14 2002 - 16:35:41 PDT)
- GOBBLES Reflection on the msn666 Hole gobblesat_private (Sat Jun 15 2002 - 09:33:02 PDT)
- KPMG-2002020: Resin view_source.jsp Arbitrary File Reading Peter Gründl (Mon Jun 17 2002 - 00:16:18 PDT)
- KPMG-2002021: Resin Large Parameter Denial of Service Peter Gründl (Mon Jun 17 2002 - 00:23:42 PDT)
- ZyXEL 642R(-11) AJ.6 SYN-ACK, SYN-FIN DoS Kistler Ueli (Mon Jun 17 2002 - 05:59:11 PDT)
- nCipher Advisory #3: MSCAPI keys erroneously module-protected - update nCipher Support (Mon Jun 17 2002 - 08:27:00 PDT)
- nCipher Advisory #4: Console Java apps can leak passphrases on Windows nCipher Support (Mon Jun 17 2002 - 08:27:46 PDT)
- ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server X-Force (Mon Jun 17 2002 - 08:57:36 PDT)
- Directory Traversal in Wolfram Research's webMathematica Andrew Badr (Mon Jun 17 2002 - 09:22:09 PDT)
- Another small metacharacter bug in Penguin Traceroute v1.0 Marco van Berkum (Mon Jun 17 2002 - 05:03:43 PDT)
- Re: Remote Compromise Vulnerability in Apache HTTP Server David Litchfield (Mon Jun 17 2002 - 10:07:51 PDT)
- External access to Netgear RP114 "firewall" auto353237at_private (Mon Jun 17 2002 - 05:13:36 PDT)
- Apache httpd: vulnerability with chunked encoding Mark J Cox (Mon Jun 17 2002 - 10:21:15 PDT)
- Cisco Security Advisory: Cable Modem Termination System Authentication Bypass Cisco Systems Product Security Incident Response Team (Mon Jun 17 2002 - 12:00:00 PDT)
- Follow: ZyXEL 642R-11 AJ.6 service DoS -- additional informations Kistler Ueli (Mon Jun 17 2002 - 11:09:41 PDT)
- Re: ZyXEL 642R(-11) AJ.6 SYN-ACK, SYN-FIN DoS -- 643R testing Kistler Ueli (Mon Jun 17 2002 - 10:47:27 PDT)
- PHP source injection in osCommerce Tim Vandermeerch (Sun Jun 16 2002 - 08:36:03 PDT)
- Solaris 8 Screensaver Issue? Jon Masters (Sun Jun 16 2002 - 21:45:24 PDT)
- malicious PHP source injection in phpBB morris Chang (Sun Jun 16 2002 - 06:29:51 PDT)
- ISS X-Force response (fwd) Dave Ahmad (Mon Jun 17 2002 - 12:48:20 PDT)
- Security Update: [CSSA-2002-027.0] Linux: fetchmail imap message count vulnerability securityat_private (Mon Jun 17 2002 - 15:01:50 PDT)
- tracesex.pl : TrACESroute 6.0 GOLD local format string exploit thc [@drug.org] (Mon Jun 17 2002 - 20:01:04 PDT)
- Metacart vuln. Tacettin Karadeniz (Tue Jun 18 2002 - 04:20:48 PDT)
- Wellenreiter-v1.4 introduces ESSID-bruteforcing Moser Max (Tue Jun 18 2002 - 06:31:03 PDT)
- Vulnerability Coordination David Litchfield (Mon Jun 17 2002 - 18:22:52 PDT)
- Apache Web Server Chunk Handling vulnerability on IRIX SGI Security Coordinator (Tue Jun 18 2002 - 09:24:47 PDT)
- DeepMetrix LiveStats javascript injection securityat_private (Mon Jun 17 2002 - 16:05:11 PDT)
- 4D 6.7 DOS and Buffer Overflow Vulnerability Alfred Goldberg (Tue Jun 18 2002 - 09:59:54 PDT)
- Re: Catalyst 4000 - Cisco's Response Mike Caudill (Mon Jun 17 2002 - 23:33:27 PDT)
- ColdFusion MX Cross Site Scripting vulnerability Ory Segal (Tue Jun 18 2002 - 10:15:39 PDT)
- (more) Advanced SQL Injection Chris Anley (Tue Jun 18 2002 - 11:25:16 PDT)
- Mandrake 8.2 msec security issue Spot (Mon Jun 17 2002 - 14:35:28 PDT)
- WebBBS 5.0 (andlater versions) vulnerable: allow commands execution via "followup" bug nerf gr0up nerf (Tue Jun 18 2002 - 11:39:58 PDT)
- Fixed version of Apache 1.3 available Dave Ahmad (Tue Jun 18 2002 - 15:26:38 PDT)
- Security Update: [CSSA-2002-SCO.27] UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability securityat_private (Tue Jun 18 2002 - 15:37:31 PDT)
- procmail heap overflow flatline (Tue Jun 18 2002 - 17:38:08 PDT)
- Cisco Security Advisory: Buffer Overflow in UNIX VPN Client Cisco Systems Product Security Incident Response Team (Wed Jun 19 2002 - 07:00:00 PDT)
- [AP] Cisco vpnclient buffer overflow methodic (Wed Jun 19 2002 - 08:50:13 PDT)
- RE: New script-kiddie looking scan David Jacoby (Wed Jun 19 2002 - 05:55:58 PDT)
- Shoutcast Admin password bruteforce tool David Jacoby (Wed Jun 19 2002 - 06:11:07 PDT)
- Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002) David Litchfield (Wed Jun 19 2002 - 06:47:33 PDT)
- Cisco Security Advisory: Cisco ONS15454 IP TOS Bit Vulnerability Cisco Systems Product Security Incident Response Team (Wed Jun 19 2002 - 09:22:14 PDT)
- KPMG-2002024: Apache Tomcat Path Disclosure Peter Gründl (Wed Jun 19 2002 - 02:38:38 PDT)
- DoS on irssi 0.8.4 Ripe (Tue Jun 18 2002 - 21:07:58 PDT)
- SuSE Security Announcement: Apache (SuSE-SA:2002:022) Olaf Kirch (Wed Jun 19 2002 - 09:27:53 PDT)
- BasiliX multiple vulnerabilities Ulf Harnhammar (Tue Jun 18 2002 - 16:37:42 PDT)
- [ESA-20020619-014] 'apache' chunk handling overflow vulnerability EnGarde Secure Linux (Wed Jun 19 2002 - 04:48:30 PDT)
- [OpenPKG-SA-2002.004] OpenPKG Security Advisory (apache) OpenPKG (Wed Jun 19 2002 - 09:02:21 PDT)
- Solaris 8 Screensaver Issue Jon Masters (Tue Jun 18 2002 - 21:45:17 PDT)
- Remote Apache 1.3.x Exploit gobblesat_private (Wed Jun 19 2002 - 12:45:24 PDT)
- Fw: ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server Mark Litchfield (Wed Jun 19 2002 - 22:02:45 PDT)
- Implications of Apache vuln for Oracle Tina Bird (Wed Jun 19 2002 - 14:57:53 PDT)
- bugtraqat_private list issues 3APA3A (Thu Jun 20 2002 - 03:00:51 PDT)
- TSLSA-2002-0056 - apache Trustix Secure Linux Advisor (Thu Jun 20 2002 - 08:01:38 PDT)
- Acrobat reader 4.05 temporary files Jarno Huuskonen (Thu Jun 20 2002 - 00:25:16 PDT)
- Apache Exploit Stefan Esser (Thu Jun 20 2002 - 01:30:48 PDT)
- KPMG-2002025: Apache Tomcat Denial of Service Peter Gründl (Thu Jun 20 2002 - 02:08:08 PDT)
- Xitami Web Server (32-bit) 2.5b4 Plaintext Administrator Password Storage ace (Wed Jun 19 2002 - 19:35:14 PDT)
- IRIX xfsmd vulnerability SGI Security Coordinator (Thu Jun 20 2002 - 08:12:02 PDT)
- Half-life fake players bug Auriemma Luigi (Thu Jun 20 2002 - 12:00:03 PDT)
- Source Injection into PHPAddress Chris Huebsch (Wed Jun 19 2002 - 06:37:54 PDT)
- [RHSA-2002:103-13] Updated Apache packages fix chunked encoding issue Terry A Jeeves (Wed Jun 19 2002 - 18:49:01 PDT)
- [LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities Last Stage of Delirium (Thu Jun 20 2002 - 15:19:51 PDT)
- Security Update: [CSSA-2002-028.0] Linux: dhcpd dynamic DNS format string vulnerability securityat_private (Wed Jun 19 2002 - 14:43:59 PDT)
- ISS Apache Advisory Response Klaus, Chris (ISSAtlanta) (Thu Jun 20 2002 - 15:06:03 PDT)
- bugtraqat_private list issue: NcFTPd Mike Gleason (Thu Jun 20 2002 - 15:53:23 PDT)
- Pirch 98 Link Handling Buffer Overflow David Rude II (Fri Jun 21 2002 - 01:48:48 PDT)
- MDKSA-2002:039 - apache update Mandrake Linux Security Team (Thu Jun 20 2002 - 15:11:58 PDT)
- VPN and Q318138 Lucas, Mark J. (Thu Jun 20 2002 - 16:01:01 PDT)
- [SECURITY] Remote exploit for 32-bit Apache HTTP Server known jwoolleyat_private (Thu Jun 20 2002 - 21:54:53 PDT)
- [AP] YaBB Cross-Site Scripting vulnerability methodic (Fri Jun 21 2002 - 08:08:24 PDT)
- AdvServer DoS elaborate ruse (Fri Jun 21 2002 - 12:22:53 PDT)
- MDKSA-2002:039-1 - apache update Mandrake Linux Security Team (Fri Jun 21 2002 - 11:19:08 PDT)
- ISS Advisory clarification Klaus, Chris (ISSAtlanta) (Fri Jun 21 2002 - 13:15:53 PDT)
- DPGS allows any file to be overwritten b0iler (Fri Jun 21 2002 - 22:59:35 PDT)
- [slackware-security] new apache/mod_ssl packages available Dave Ahmad (Fri Jun 21 2002 - 13:57:54 PDT)
- Apache Vulnerability through a Proxy? Ulf Bahrenfuss (Fri Jun 21 2002 - 01:56:29 PDT)
- Ending a few arguments with one simple attachment. gobblesat_private (Fri Jun 21 2002 - 21:44:43 PDT)
- blowchunks - protecting existing apache servers until upgrades arrive Cris Bailiff (Fri Jun 21 2002 - 23:19:54 PDT)
- MDKSA-2002:039-2 - apache update (revised) Mandrake Linux Security Team (Sat Jun 22 2002 - 13:06:22 PDT)
- Sharity Cifslogin Buffer Overflow (arguments) Alex Hernandez (Mon Jun 24 2002 - 05:19:52 PDT)
- Re: Half-life fake players bug (update) Auriemma Luigi (Mon Jun 24 2002 - 12:47:34 PDT)
- Security Update: [CSSA-2002-029.0] Linux: Apache Web Server Chunk Handling Vulnerability securityat_private (Fri Jun 21 2002 - 17:01:28 PDT)
- Re: Upcoming OpenSSH vulnerability Solar Designer (Tue Jun 25 2002 - 11:53:04 PDT)
- OpenSSH vulnerability John Williams (Mon Jun 24 2002 - 19:35:57 PDT)
- cqure.net.20020521.netware_nwftpd_fmtstr Patrik Karlsson (Tue Jun 25 2002 - 12:52:57 PDT)
- Caucho Resin Path Disclosure security-protocolsat_private (Mon Jun 24 2002 - 19:44:35 PDT)
- IRIX nveventd vulnerability SGI Security Coordinator (Mon Jun 24 2002 - 13:24:07 PDT)
- Upcoming OpenSSH vulnerability Theo de Raadt (Mon Jun 24 2002 - 14:00:10 PDT)
- Salescart vuln. Tacettin Karadeniz (Fri Jun 21 2002 - 13:44:24 PDT)
- phpsquidpass: unauthorized user deleting ppp-design (Sun Jun 23 2002 - 08:50:20 PDT)
- A DoS against IE in W2K and XP? You Make the Call... 'ken'@FTU (Mon Jun 24 2002 - 19:31:04 PDT)
- ISS Advisory: OpenSSH Remote Challenge Vulnerability X-Force (Wed Jun 26 2002 - 06:56:07 PDT)
- New Paper - Violating Database Enforced Security Mechanisms Chris Anley (Mon Jun 24 2002 - 11:19:04 PDT)
- Noguska Nola 1.1.1 [ Intranet Business Management Software ] sindhiat_private (Mon Jun 24 2002 - 23:54:20 PDT)
- IRIX pmpost vulnerability SGI Security Coordinator (Mon Jun 24 2002 - 14:36:35 PDT)
- MDKSA-2002:040 - openssh update Mandrake Linux Security Team (Mon Jun 24 2002 - 19:41:17 PDT)
- ssh environment - circumvention of restricted shells ari (Mon Jun 24 2002 - 17:08:12 PDT)
- Acrobat reader 5.05 temp file insecurity Paul Szabo (Mon Jun 24 2002 - 14:33:42 PDT)
- Remote buffer overflow in resolver code of libc Mark Lastdrager (Wed Jun 26 2002 - 00:37:16 PDT)
- Formatstring Vulnerability in decfingerd 0.7 isox (Tue Jun 25 2002 - 03:12:27 PDT)
- Re: apache-scalp.c Michael A. Williams (Tue Jun 25 2002 - 13:18:45 PDT)
- Apache Chunked Vulnerability on Many Dell Servers running NT? gregat_private (Tue Jun 25 2002 - 12:32:17 PDT)
- [CLA-2002:500] Conectiva Linux Security Announcement - openssh secureat_private (Tue Jun 25 2002 - 13:13:44 PDT)
- Security Update: [CSSA-2002-SCO.30] UnixWare 7.1.1 Open UNIX 8.0.0 : dtprintinfo buffer overflow with Help search securityat_private (Tue Jun 25 2002 - 17:34:08 PDT)
- Now Online OWASP Guide to Building Secure Web Applications The Owasp Project (Tue Jun 25 2002 - 12:40:32 PDT)
- SuSE Security Announcement: OpenSSH (SuSE-SA:2002:023) Olaf Kirch (Tue Jun 25 2002 - 09:11:09 PDT)
- [ESA-20020625-015] openssh: introduce privilege separation into sshd EnGarde Secure Linux (Mon Jun 24 2002 - 23:27:30 PDT)
- Apache mod_ssl off-by-one vulnerability Jedi/Sector One (Mon Jun 24 2002 - 13:47:47 PDT)
- Administrivia: Recent list delays Dave Ahmad (Wed Jun 26 2002 - 15:01:03 PDT)
- OpenSSH Security Advisory (adv.iss) Markus Friedl (Wed Jun 26 2002 - 07:41:50 PDT)
- XSS in HTDIG Howard Yeend (Wed Jun 26 2002 - 01:38:48 PDT)
- Revised OpenSSH Security Advisory (adv.iss) Markus Friedl (Wed Jun 26 2002 - 12:08:10 PDT)
- [sp00fed packet] Whois vulnerability Zeux (Thu Jun 27 2002 - 05:00:43 PDT)
- Xitami 2.5 Beta Errors.gsl Script Injection Vulnerabilities Matthew Murphy (Wed Jun 26 2002 - 23:43:01 PDT)
- Cluestick Advisory #000 cluestickat_private (Thu Jun 27 2002 - 00:43:56 PDT)
- Cisco Security Advisory: Scanning for SSH Can Cause a Crash Cisco Systems Product Security Incident Response Team (Thu Jun 27 2002 - 09:00:00 PDT)
- Cluestick Advisory #001 cluestickat_private (Thu Jun 27 2002 - 03:38:57 PDT)
- NetBSD Security Advisory 2002-006: buffer overrun in libc DNS resolver NetBSD Security Officer (Thu Jun 27 2002 - 10:14:34 PDT)
- Summary: IE DoS in W2K and XP 'ken'@FTU (Wed Jun 26 2002 - 18:48:35 PDT)
- Reminder Announcement - CSICON.NET CSICONdotNET (Wed Jun 26 2002 - 15:10:36 PDT)
- ALERT: Lil'HTTP Server (Summit Computer Networks) Matthew Murphy (Wed Jun 26 2002 - 10:48:37 PDT)
- How to reproduce OpenSSH Overflow. Joe Testa (Thu Jun 27 2002 - 10:15:12 PDT)
- [OpenPKG-SA-2002.005] OpenPKG Security Advisory (openssh) OpenPKG (Wed Jun 26 2002 - 13:34:24 PDT)
- FreeBSD Security Advisory FreeBSD-SA-02:28.resolv FreeBSD Security Advisories (Wed Jun 26 2002 - 12:08:17 PDT)
- Foundstone Advisory - Buffer Overflow in AnalogX SimpleServer:Shout (fwd) Dave Ahmad (Wed Jun 26 2002 - 14:15:48 PDT)
- NetBSD Security Advisory 2002-005: OpenSSH protocol version 2 challenge-response authentication NetBSD Security Officer (Thu Jun 27 2002 - 10:11:57 PDT)
- CERT VU #803539 Joost Pol (Thu Jun 27 2002 - 11:18:40 PDT)
- Security Update: [CSSA-2002-030.0] Linux: OpenSSH Vulnerabilities in Challenge Response Handling securityat_private (Thu Jun 27 2002 - 11:52:21 PDT)
- [RHSA-2002:127-18] Updated OpenSSH packages fix various security issues bugzillaat_private (Thu Jun 27 2002 - 14:47:53 PDT)
- Apache worm in the wild Domas Mituzas (Fri Jun 28 2002 - 04:01:32 PDT)
- wp-02-0002: 'WEB-INF' Folder accessible in Multiple Web Application Servers Matt Moore (Fri Jun 28 2002 - 08:27:40 PDT)
- H2K2 "Hacker" conference July 12-14 in New York City Michael Kaegler (Thu Jun 27 2002 - 23:08:29 PDT)
- [CLA-2002:502] Conectiva Linux Security Announcement - openssh secureat_private (Fri Jun 28 2002 - 11:28:56 PDT)
- wp-02-0009: Macromedia JRun Admin Server Authentication Bypass Matt Moore (Fri Jun 28 2002 - 08:37:04 PDT)
- OpenBSD 3.1 sshd remote root exploit Christophe Devine (Fri Jun 28 2002 - 11:02:54 PDT)
- TSL-2002-0058 - apache/mod_ssl Trustix Secure Linux Advisor (Fri Jun 28 2002 - 05:05:09 PDT)
- TSL-2002-0059 - openssh Trustix Secure Linux Advisor (Fri Jun 28 2002 - 05:06:50 PDT)
- apache-worm.c Domas Mituzas (Fri Jun 28 2002 - 13:28:46 PDT)
- [slackware-security] New OpenSSH packages available White Vampire (Wed Jun 26 2002 - 21:40:04 PDT)
- RE: ZyXEL SYN-ACK, SYN-FIN DoS Update Christopher Gripp (Thu Jun 27 2002 - 09:21:34 PDT)
- Sun statement on the OpenSSH Remote Challenge Vulnerability Darren J Moffat (Fri Jun 28 2002 - 14:12:47 PDT)
- efstool local root exploit clorox@ptrace-networks.net (Thu Jun 27 2002 - 17:46:39 PDT)
- SSI & CSS execution in E-Guest (1.1) & ZAP Book (v1.0.3) DownBload (Sat Jun 29 2002 - 02:58:21 PDT)
- Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT KF (Wed Jun 12 2002 - 22:24:39 PDT)
Last message date: Sat Nov 23 2002 - 00:08:32 PST
Archived on: Sat Nov 23 2002 - 00:08:37 PST
415 messages sorted by:
[ author ]
[ date ]
[ subject ]
Other mail archives
This archive was generated by hypermail 2b30
: Sat Nov 23 2002 - 00:08:37 PST