bugtraq 2002/08
By Subject

Starting: Wed Jul 31 2002 - 22:55:14 PDT
Ending: Thu Sep 05 2002 - 08:52:08 PDT

• "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1
  • Dave English (Fri Aug 16 2002 - 03:49:35 PDT)
  • Carl R Diliberto (Thu Aug 15 2002 - 10:18:27 PDT)
• @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL
  • Sir Mordred The Traitor (Mon Aug 19 2002 - 08:40:28 PDT)
• @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL
  • Steffen Dettmer (Thu Aug 22 2002 - 08:34:36 PDT)
  • Lamar Owen (Wed Aug 21 2002 - 08:02:51 PDT)
  • Sir Mordred The Traitor (Tue Aug 20 2002 - 07:28:49 PDT)
• @(#)Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL.
  • Sir Mordred The Traitor (Tue Aug 20 2002 - 08:01:34 PDT)
• @stake advisory: WS_FTP SITE CPWD Buffer Overflow vulnerability (a090902-1)
  • @stake advisories (Thu Aug 08 2002 - 09:20:15 PDT)
• [CLA-2002:515] Conectiva Linux Security Announcement - krb5
  • secureat_private (Wed Aug 07 2002 - 11:30:50 PDT)
• [CLA-2002:516] Conectiva Linux Security Announcement - openssl
  • secureat_private (Thu Aug 08 2002 - 11:15:02 PDT)
• [CLA-2002:519] Conectiva Linux Security Announcement - kde
  • secureat_private (Thu Aug 29 2002 - 11:56:31 PDT)
• [ESA-20020807-020] ASN.1 vulnerability fix corrections
  • EnGarde Secure Linux (Wed Aug 07 2002 - 14:00:03 PDT)
• [Full-Disclosure] [RHSA-2002:169-13] Updated ethereal packages are available
  • bugzillaat_private (Thu Aug 29 2002 - 07:43:19 PDT)
• [Full-Disclosure] Acrobat Reader symlink vulnerability on IRIX
  • SGI Security Coordinator (Wed Aug 14 2002 - 10:21:01 PDT)
• [Full-Disclosure] Additional bugs in gallery
  • avartat_private (Thu Aug 01 2002 - 04:40:10 PDT)
• [Full-Disclosure] AOL Instant Messenger - Away Setting and Snoopers
  • Andrew Pinski (Sun Aug 04 2002 - 19:21:05 PDT)
  • Andrew Pinski (Sun Aug 04 2002 - 19:21:05 PDT)
  • Matthew Murphy (Sun Aug 04 2002 - 18:56:31 PDT)
• [Full-Disclosure] Apache 2.0 vulnerability affects non-Unix platforms
  • Mark J Cox (Fri Aug 09 2002 - 14:07:52 PDT)
• [Full-Disclosure] BIND vulnerabilities in IRIX named
  • SGI Security Coordinator (Wed Aug 07 2002 - 14:51:40 PDT)
• [Full-Disclosure] Bulk Data Services (BDS) vulnerability on IRIX
  • SGI Security Coordinator (Mon Aug 12 2002 - 14:01:29 PDT)
• [Full-Disclosure] Clarification on Xitami DoS
  • Matthew Murphy (Sun Aug 04 2002 - 15:24:24 PDT)
  • Matthew Murphy (Sun Aug 04 2002 - 15:24:24 PDT)
• [Full-Disclosure] Cross-Site Scripting Attacks Possible At Multiple Webspace Provid ers
  • Matthew Murphy (Mon Aug 05 2002 - 21:19:12 PDT)
• [Full-Disclosure] Cross-Site Scripting Attacks Possible At Multiple Webspace Providers
  • Matthew Murphy (Mon Aug 05 2002 - 21:19:12 PDT)
• [Full-Disclosure] Cross-Site Scripting Issues in Falcon Web Server
  • Matthew Murphy (Thu Aug 08 2002 - 16:31:20 PDT)
• [Full-Disclosure] Eudora attachment spoof
  • Paul Szabo (Wed Aug 07 2002 - 14:49:20 PDT)
• [Full-Disclosure] Exploits Contributor Program
  • iMoolah (Mon Aug 12 2002 - 00:01:07 PDT)
• [Full-Disclosure] iDEFENSE Security Advisory: Cross-Site Scripting Vulnerabilities in Popular Web Applications
  • David Endler (Mon Aug 19 2002 - 05:39:49 PDT)
• [Full-Disclosure] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings
  • David Endler (Thu Aug 08 2002 - 01:27:40 PDT)
  • David Endler (Thu Aug 08 2002 - 01:27:40 PDT)
• [Full-Disclosure] IMAP4rev1 2000.283 allows access to system files
  • Guy Cohen (Sat Aug 10 2002 - 10:31:31 PDT)
• [Full-Disclosure] In regards to ... http://online.securityfocus.com/bid/5382
  • KF (Mon Aug 05 2002 - 12:22:18 PDT)
• [Full-Disclosure] iName/Mail.com security holes opens door to millions of e-mail accounts
  • Colt Peacemaker (Thu Aug 29 2002 - 02:22:54 PDT)
  • Andrew G. Tereschenko (Wed Aug 28 2002 - 20:07:41 PDT)
• [Full-Disclosure] iPlanet vulnerabilities on IRIX
  • SGI Security Coordinator (Thu Aug 01 2002 - 13:34:08 PDT)
  • SGI Security Coordinator (Thu Aug 01 2002 - 13:34:08 PDT)
• [Full-Disclosure] IRIX ftpd minor vulnerabilities
  • SGI Security Coordinator (Tue Aug 13 2002 - 16:12:19 PDT)
• [Full-Disclosure] it's all about timing
  • Don (Thu Aug 01 2002 - 12:27:59 PDT)
  • Rohny Jotton (Thu Aug 01 2002 - 11:15:08 PDT)
• [Full-Disclosure] JanaWeb
  • Matthew Murphy (Mon Aug 05 2002 - 18:42:05 PDT)
  • Matthew Murphy (Mon Aug 05 2002 - 18:42:05 PDT)
• [Full-Disclosure] L-Forum Vulnerability - SQL Injection
  • Matthew Murphy (Tue Aug 13 2002 - 19:53:04 PDT)
• [Full-Disclosure] L-Forum XSS and upload spoofing
  • Ulf Harnhammar (Tue Aug 13 2002 - 15:54:50 PDT)
• [Full-Disclosure] Local Root Exploit
  • Roman Drahtmueller (Sat Aug 10 2002 - 08:16:15 PDT)
  • gobblesat_private (Fri Aug 09 2002 - 15:54:32 PDT)
• [Full-Disclosure] MAC address change on SGI Origin 3000
  • SGI Security Coordinator (Wed Aug 14 2002 - 10:20:28 PDT)
• [Full-Disclosure] mantisbt security flaw
  • Joao Gouveia (Tue Aug 13 2002 - 05:49:41 PDT)
  • Joao Gouveia (Tue Aug 13 2002 - 05:49:41 PDT)
• [Full-Disclosure] more about IMAP
  • Guy Cohen (Sat Aug 10 2002 - 10:48:54 PDT)
• [Full-Disclosure] More Evil from MS (fwd)
  • Alif The Terrible (Fri Aug 02 2002 - 02:30:55 PDT)
• [Full-Disclosure] More OmniHTTPd Problems
  • Matthew Murphy (Sun Aug 25 2002 - 09:50:11 PDT)
• [Full-Disclosure] MSN Groups makes cross site scripting easy
  • Obscure (Sat Aug 03 2002 - 13:04:07 PDT)
• [Full-Disclosure] Multiple Vulnerabilities in CafeLog Weblog Package
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
• [Full-Disclosure] Netscape JRE vulnerability on IRIX
  • SGI Security Coordinator (Thu Aug 29 2002 - 13:00:38 PDT)
• [Full-Disclosure] OmniHTTPd test.php Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:48:39 PDT)
• [Full-Disclosure] OmniHTTPd test.shtml Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:54:09 PDT)
• [Full-Disclosure] OpenSSL Vulnerabilities
  • Peter Bieringer (Thu Aug 01 2002 - 23:33:03 PDT)
  • Raju Mathur (Thu Aug 01 2002 - 21:09:12 PDT)
• [Full-Disclosure] OT: Snosoft vs HP
  • Ron DuFresne (Wed Jul 31 2002 - 22:18:20 PDT)
• [Full-Disclosure] phpReactor - Cross-Site Scripting via STYLE
  • Matthew Murphy (Sat Aug 24 2002 - 10:40:25 PDT)
• [Full-Disclosure] Release : ComLog 1.0, a WIN32 command prompt logger
  • Floydman (Wed Aug 14 2002 - 09:44:49 PDT)
• [Full-Disclosure] rpc.pcnfsd vulnerabilities on IRIX
  • SGI Security Coordinator (Thu Aug 01 2002 - 10:38:42 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries
  • securityat_private (Mon Aug 05 2002 - 17:12:27 PDT)
  • securityat_private (Mon Aug 05 2002 - 17:12:27 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd
  • securityat_private (Thu Aug 08 2002 - 17:01:17 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion and buffer overflow vulnerabilities
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg
  • securityat_private (Thu Aug 22 2002 - 13:32:34 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver
  • securityat_private (Fri Aug 23 2002 - 16:37:13 PDT)
  • securityat_private (Fri Aug 23 2002 - 16:37:13 PDT)
• [Full-Disclosure] Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow
  • securityat_private (Mon Aug 26 2002 - 16:44:47 PDT)
• [Full-Disclosure] Sun RPC xdr_array vulnerability
  • SGI Security Coordinator (Thu Aug 01 2002 - 09:47:00 PDT)
• [Full-Disclosure] Sun RPC xdr_array vulnerability on IRIX
  • SGI Security Coordinator (Fri Aug 16 2002 - 09:36:01 PDT)
• [Full-Disclosure] Unchecked Buffer in Jana Web Server
  • Matthew Murphy (Mon Aug 05 2002 - 15:38:45 PDT)
  • Matthew Murphy (Mon Aug 05 2002 - 15:38:45 PDT)
• [Full-Disclosure] WorldView vulnerability on IRIX
  • SGI Security Coordinator (Wed Aug 21 2002 - 15:47:04 PDT)
• [Full-Disclosure] Xitami Connection Flood Server Termination Vulnerability
  • Matthew Murphy (Fri Aug 02 2002 - 15:27:33 PDT)
  • Matthew Murphy (Fri Aug 02 2002 - 15:27:33 PDT)
• [luca.ercoliat_private: DoS against mysqld]
  • Rich Lafferty (Fri Aug 23 2002 - 10:07:08 PDT)
  • Simone Piunno (Fri Aug 23 2002 - 09:10:57 PDT)
• [Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis
  • Jeroen Latour (Sun Aug 18 2002 - 23:47:27 PDT)
• [Mantis Advisory/2002-02] Limiting output to reporters can be bypassed
  • Jeroen Latour (Sun Aug 18 2002 - 23:48:02 PDT)
• [Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation
  • Jeroen Latour (Sun Aug 18 2002 - 23:48:24 PDT)
• [Mantis Advisory/2002-04] Arbitrary code execution vulnerability in Mantis
  • Jeroen Latour (Sun Aug 18 2002 - 23:48:53 PDT)
• [Mantis Advisory/2002-05] Arbitrary code execution and file reading vulnerability in Mantis
  • Jeroen Latour (Sun Aug 18 2002 - 23:49:32 PDT)
• [Mantis Advisory/2002-06] Private bugs accessible in Mantis
  • Jeroen Latour (Fri Aug 23 2002 - 11:22:09 PDT)
• [Mantis Advisory/2002-07] Bugs in private projects listed on 'View Bugs'
  • Jeroen Latour (Fri Aug 23 2002 - 15:07:02 PDT)
• [security bulletin] SSRT2275 HP Tru64 UNIX - Potential Buffer Overflows & SSRT2229 Potential Denial of Service (fwd)
  • Dave Ahmad (Sat Aug 31 2002 - 10:47:56 PDT)
• [SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem
  • Martin Schulze (Mon Aug 26 2002 - 10:03:51 PDT)
• [SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution
  • Martin Schulze (Thu Aug 22 2002 - 13:34:25 PDT)
• [SECURITY] [DSA 157-1] New irssi-text packages fix denial of service
  • Martin Schulze (Fri Aug 23 2002 - 07:03:05 PDT)
• [SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution
  • Martin Schulze (Tue Aug 27 2002 - 06:01:44 PDT)
• [SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use
  • Martin Schulze (Wed Aug 28 2002 - 04:32:10 PDT)
• [slackware-security] Security updates for Slackware 8.1
  • Adam Young (Thu Aug 01 2002 - 19:50:00 PDT)
• [SNS Advisory No.55 rev.2] Eudora 5.x for Windows Buffer Overflow Vulnerability
  • John Pettitt (Thu Aug 08 2002 - 18:43:45 PDT)
  • Atsushi Nishimura (Wed Aug 07 2002 - 18:15:21 PDT)
• [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability
  • Kanatoko (Sat Aug 10 2002 - 11:25:36 PDT)
  • Kanatoko (Mon Aug 05 2002 - 23:49:24 PDT)
  • Hack Hawk (Mon Aug 05 2002 - 18:00:31 PDT)
  • snsadvat_private (Sun Aug 04 2002 - 23:24:25 PDT)
• [UPDATED] Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks
  • Stan Bubrouski (Thu Aug 22 2002 - 07:28:22 PDT)
• [VulnWatch] `admin' bug in upb
  • GooDWiN (Sun Aug 25 2002 - 07:20:13 PDT)
• [VulnWatch] Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A)
  • David Litchfield (Thu Aug 22 2002 - 11:43:56 PDT)
• [VulnWatch] Arbitrary File Creation/Overwrite with SQL Agent Jobs (SQL 2000 and 7) (#NISR19002002A)
  • NGSSoftware Insight Security Research (Mon Aug 19 2002 - 07:46:50 PDT)
• [VulnWatch] Bulk Data Services (BDS) vulnerability on IRIX
  • SGI Security Coordinator (Mon Aug 12 2002 - 14:01:29 PDT)
• [VulnWatch] FUDforum file access and SQL Injection
  • Ulf Harnhammar (Sun Aug 18 2002 - 09:07:43 PDT)
• [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings
  • Mike Caudill (Thu Aug 08 2002 - 15:14:25 PDT)
  • David Endler (Thu Aug 08 2002 - 01:27:40 PDT)
• [VulnWatch] iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow
  • David Endler (Wed Aug 28 2002 - 08:58:53 PDT)
• [VulnWatch] L-Forum Vulnerability - SQL Injection
  • Matthew Murphy (Tue Aug 13 2002 - 19:53:04 PDT)
• [VulnWatch] Local Root Exploit
  • gobblesat_private (Fri Aug 09 2002 - 15:54:32 PDT)
• [VulnWatch] Lynx CRLF Injection
  • Ulf Harnhammar (Sun Aug 18 2002 - 17:17:04 PDT)
• [VulnWatch] Microsoft Internet Explorer Legacy Text Control Buffer Overflow (#NISR26082002)
  • NGSSoftware Insight Security Research (Mon Aug 26 2002 - 04:57:59 PDT)
• [VulnWatch] Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002)
  • NGSSoftware Insight Security Research (Fri Aug 02 2002 - 17:55:57 PDT)
• [VulnWatch] Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B)
  • David Litchfield (Thu Aug 15 2002 - 20:14:04 PDT)
• [VulnWatch] Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A)
  • David Litchfield (Thu Aug 15 2002 - 20:11:16 PDT)
• [VulnWatch] More OmniHTTPd Problems
  • Matthew Murphy (Sun Aug 25 2002 - 09:50:11 PDT)
• [VulnWatch] MSN Groups makes cross site scripting easy
  • Obscure (Sat Aug 03 2002 - 13:04:07 PDT)
• [VulnWatch] Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)
  • NGSSoftware Insight Security Research (Mon Aug 19 2002 - 08:04:27 PDT)
• [VulnWatch] Multiple Vulnerabilities in CafeLog Weblog Package
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
• [VulnWatch] new bugs in MyWebServer
  • D4rkGr3y (Wed Aug 14 2002 - 12:40:55 PDT)
• [VulnWatch] OmniHTTPd test.php Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:48:39 PDT)
• [VulnWatch] OmniHTTPd test.shtml Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:54:09 PDT)
• [VulnWatch] Oracle Listener Control Format String Vulnerabilities (#NISR14082002)
  • NGSSoftware Insight Security Research (Wed Aug 14 2002 - 01:18:29 PDT)
• [VulnWatch] RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code
  • Florian Weimer (Mon Aug 05 2002 - 07:46:11 PDT)
• [VulnWatch] RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines
  • Florian Weimer (Mon Aug 05 2002 - 07:55:04 PDT)
• [VulnWatch] SPIKE 2.5 and associated vulns
  • Dave Aitel (Mon Aug 05 2002 - 17:02:44 PDT)
• [VulnWatch] Sun RPC xdr_array vulnerability on IRIX
  • SGI Security Coordinator (Fri Aug 16 2002 - 09:36:01 PDT)
• [VulnWatch] uuuppz.com - Advisory 002 - mIRC $asctime overflow
  • James Martin (Tue Aug 27 2002 - 06:58:50 PDT)
• [Ximian Updates] Hyperlink handling in Gaim allows arbitrary code to be executed
  • Ximian GNOME Security Team (Fri Aug 30 2002 - 10:14:24 PDT)
• `admin' bug in upb
  • GooDWiN (Sun Aug 25 2002 - 07:20:13 PDT)
• Abyss 1.0.3 directory traversal and administration bugs
  • Auriemma Luigi (Thu Aug 22 2002 - 14:18:08 PDT)
• Accessing remote/local content in IE (GM#009-IE)
  • GreyMagic Software (Fri Aug 23 2002 - 04:18:21 PDT)
• Additional bugs in gallery
  • Bharat Mediratta (Thu Aug 01 2002 - 10:50:22 PDT)
  • Bharat Mediratta (Thu Aug 01 2002 - 10:50:22 PDT)
• Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS
  • Stan Bubrouski (Sun Aug 04 2002 - 08:48:49 PDT)
• Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities
  • Stan Bubrouski (Mon Aug 19 2002 - 16:20:20 PDT)
• Advisory: DoS in WebEasyMail +more possible?
  • Stan Bubrouski (Mon Aug 19 2002 - 17:54:24 PDT)
• Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks
  • Stan Bubrouski (Sun Aug 04 2002 - 09:25:31 PDT)
• AOL Instant Messenger - Away Setting and Snoopers
  • Mark Shirley (Sun Aug 04 2002 - 22:35:24 PDT)
  • Mark Shirley (Mon Aug 05 2002 - 00:29:23 PDT)
  • Remington Winters (Sun Aug 04 2002 - 23:10:39 PDT)
  • Matthew Murphy (Mon Aug 05 2002 - 00:09:23 PDT)
  • Matthew Murphy (Sun Aug 04 2002 - 18:56:31 PDT)
• AOL Instant Messenger Heap Overflow
  • JasonBrown777at_private (Sun Aug 25 2002 - 11:27:39 PDT)
  • Matthew Murphy (Fri Aug 23 2002 - 17:35:57 PDT)
• Apache 2.0 vulnerability affects non-Unix platforms
  • Mark J Cox (Fri Aug 09 2002 - 14:07:52 PDT)
  • Mark J Cox (Fri Aug 09 2002 - 14:07:52 PDT)
• Apache 2.0.39 directory traversal and path disclosure bug
  • Auriemma Luigi (Fri Aug 16 2002 - 10:01:29 PDT)
• Arbitrary code execution problem in Achievo
  • Jeroen Latour (Thu Aug 22 2002 - 14:28:39 PDT)
• Arbitrary Command Execution on Distributor SQL Server 2000 machines (#NISR22002002A)
  • Cesar (Thu Aug 22 2002 - 15:54:29 PDT)
  • David Litchfield (Thu Aug 22 2002 - 11:43:56 PDT)
• Arbitrary File Creation/Overwrite with SQL Agent Jobs (SQL 2000 and 7) (#NISR19002002A)
  • NGSSoftware Insight Security Research (Mon Aug 19 2002 - 07:46:50 PDT)
• Belkin F5D6130 Wireless Network Access Point SNMP Request Denial Of Service Vulnerability
  • wlanman (Sun Aug 25 2002 - 19:46:33 PDT)
• Blazix 1.2 jsp view and free protected folder access
  • Auriemma Luigi (Sat Aug 24 2002 - 13:20:59 PDT)
• bugtraqat_private list issues [2]
  • 3APA3A (Wed Aug 21 2002 - 05:50:25 PDT)
• Bypassing cookie restrictions in IE 5+6
  • GreyMagic Software (Tue Aug 06 2002 - 10:05:29 PDT)
  • Christopher G. Lewis (Tue Aug 06 2002 - 13:21:48 PDT)
  • Jelmer (Sat Aug 03 2002 - 18:43:14 PDT)
• CERN Proxy Server: Cross-Site Scripting Vulnerability
  • TAKAGI, Hiromitsu (Sun Aug 11 2002 - 16:41:40 PDT)
• Cisco IOS exploit PoC
  • FX (Thu Aug 22 2002 - 01:03:10 PDT)
• Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Aug 14 2002 - 08:00:00 PDT)
• Cisco Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Aug 07 2002 - 09:19:07 PDT)
• Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Mon Aug 12 2002 - 08:00:00 PDT)
• Clarification on Xitami DoS
  • Matthew Murphy (Sun Aug 04 2002 - 15:24:24 PDT)
  • Steven M. Christey (Mon Aug 05 2002 - 09:46:13 PDT)
  • Steven M. Christey (Mon Aug 05 2002 - 09:46:13 PDT)
  • Muhammad Faisal Rauf Danka (Sun Aug 04 2002 - 16:15:19 PDT)
  • Matthew Murphy (Sun Aug 04 2002 - 16:29:37 PDT)
  • Muhammad Faisal Rauf Danka (Sun Aug 04 2002 - 16:45:13 PDT)
  • Matthew Murphy (Sun Aug 04 2002 - 16:29:37 PDT)
  • Muhammad Faisal Rauf Danka (Sun Aug 04 2002 - 16:15:19 PDT)
• code injection in gallery
  • avartat_private (Thu Aug 01 2002 - 09:28:27 PDT)
• CodeCon 2003 Call for Papers
  • Len Sassaman (Tue Aug 06 2002 - 23:31:42 PDT)
• Comment on DMCA, Security, and Vuln Reporting
  • Burton M. Strauss III (Fri Aug 02 2002 - 15:02:51 PDT)
  • Stephen Samuel (Fri Aug 02 2002 - 10:58:25 PDT)
  • Keith T. Morgan (Thu Aug 01 2002 - 06:43:21 PDT)
• Comment on DMCA, Security, and Vuln Reporting]
  • Declan McCullagh (Thu Aug 01 2002 - 07:12:29 PDT)
  • Declan McCullagh (Thu Aug 01 2002 - 07:12:29 PDT)
• CORE-20020618: Vulnerabilities in Windows SMB (DoS)
  • Iván Arce (Thu Aug 22 2002 - 16:41:39 PDT)
• Cross-Site Scripting Attacks Possible At Multiple Webspace Providers
  • Matthew Murphy (Mon Aug 05 2002 - 21:19:12 PDT)
• Cross-Site Scripting Issues in Falcon Web Server
  • Matthew Murphy (Thu Aug 08 2002 - 16:31:20 PDT)
  • Matthew Murphy (Thu Aug 08 2002 - 16:31:20 PDT)
• CSS bug in Winamp
  • Chris (Fri Aug 09 2002 - 09:39:24 PDT)
  • DownBload (Sun Aug 04 2002 - 15:40:35 PDT)
• Delete arbitrary files using Help and Support Center [MSRC 1198dg]
  • Shane Hird (Wed Aug 14 2002 - 17:13:04 PDT)
• DoS against mysqld
  • Bob Castleberry (Fri Aug 23 2002 - 10:01:18 PDT)
  • luca.ercoliat_private (Fri Aug 23 2002 - 03:19:19 PDT)
• EEYE: Macromedia Shockwave Flash Malformed Header Overflow
  • Will Bryant (Tue Aug 13 2002 - 07:09:35 PDT)
  • Drew (Mon Aug 12 2002 - 15:11:59 PDT)
  • Carlos Laviola (Sun Aug 11 2002 - 03:13:32 PDT)
  • Richard M. Smith (Fri Aug 09 2002 - 15:16:33 PDT)
  • Tim Jackson (Fri Aug 09 2002 - 14:50:08 PDT)
  • Mike Chambers (Fri Aug 09 2002 - 14:44:27 PDT)
  • Scott Lampert (Fri Aug 09 2002 - 12:44:38 PDT)
  • ismail donmez (Fri Aug 09 2002 - 12:26:50 PDT)
  • Marc Maiffret (Thu Aug 08 2002 - 17:26:20 PDT)
• EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow
  • Marc Maiffret (Thu Aug 08 2002 - 17:26:23 PDT)
• Enableing java logging in MSIE is dangerous
  • Jelmer (Sat Aug 17 2002 - 11:30:40 PDT)
• ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability
  • Ricochetat_private (Mon Aug 12 2002 - 06:40:04 PDT)
• Eudora attachment spoof
  • Paul Szabo (Wed Aug 07 2002 - 14:49:20 PDT)
• Exploiting the Google toolbar (GM#001-MC)
  • GreyMagic Software (Mon Aug 19 2002 - 16:20:40 PDT)
  • GreyMagic Software (Thu Aug 08 2002 - 07:49:14 PDT)
• FactoSystem CMS Contains Multiple Vulnerabilities
  • Matthew Murphy (Fri Aug 30 2002 - 17:36:14 PDT)
• Fate Research Labs Advisory: Retrieve SHOUTcast Admin Password Through GET /
  • Loki (Tue Aug 06 2002 - 12:30:55 PDT)
• Formal Response to HP
  • ATD (Wed Jul 31 2002 - 21:56:54 PDT)
  • ATD (Wed Jul 31 2002 - 21:56:54 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:34.rpc
  • Adam Sampson (Thu Aug 01 2002 - 01:31:10 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:34.rpc [REVISED]
  • FreeBSD Security Advisories (Thu Aug 01 2002 - 05:34:24 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:35.ffs
  • FreeBSD Security Advisories (Mon Aug 05 2002 - 16:47:17 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:36.nfs
  • FreeBSD Security Advisories (Mon Aug 05 2002 - 16:50:07 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:37.kqueue
  • FreeBSD Security Advisories (Mon Aug 05 2002 - 16:52:02 PDT)
• FreeBSD Security Advisory FreeBSD-SA-02:38.signed-error
  • FreeBSD Security Advisories (Mon Aug 19 2002 - 05:56:22 PDT)
• FUDforum file access and SQL Injection
  • Ulf Harnhammar (Sun Aug 18 2002 - 09:07:43 PDT)
• Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release
  • Lamar Owen (Fri Aug 23 2002 - 20:35:59 PDT)
• GLSA: ethereal
  • Daniel Ahlberg (Fri Aug 30 2002 - 01:22:44 PDT)
• HiverCon 2002, Ireland - Earlybird registration now available
  • Mark Anderson (Thu Aug 01 2002 - 09:03:58 PDT)
• IceWarp Webmail XSS
  • DarC KonQuesT (Wed Aug 14 2002 - 19:23:43 PDT)
• iDEFENSE Security Advisory: iSCSI Default Configuration File Settings
  • David Endler (Thu Aug 08 2002 - 01:27:40 PDT)
  • David Endler (Thu Aug 08 2002 - 01:27:40 PDT)
• iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow
  • David Endler (Wed Aug 28 2002 - 08:58:53 PDT)
• IE [with Google Toolbar installed] crash
  • Mark Healey (Fri Aug 16 2002 - 00:48:11 PDT)
  • Chuck (Fri Aug 16 2002 - 01:13:31 PDT)
  • Bill Fryberger (Thu Aug 15 2002 - 10:31:50 PDT)
  • Adam [onet] (Thu Aug 15 2002 - 01:08:21 PDT)
• IE bug not fixed - update
  • Sanford Olson (Thu Aug 29 2002 - 17:52:04 PDT)
  • Brian Taylor (Mon Aug 26 2002 - 23:57:06 PDT)
• IE SSL Exploit
  • Mike Benham (Mon Aug 12 2002 - 01:04:13 PDT)
• IE SSL Vulnerability
  • Charles Miller (Sun Aug 18 2002 - 22:46:07 PDT)
  • robert walker (Thu Aug 15 2002 - 16:11:22 PDT)
  • Balazs Scheidler (Thu Aug 08 2002 - 08:28:57 PDT)
  • Torbjörn Hovmark (Wed Aug 07 2002 - 02:58:04 PDT)
  • Balazs Scheidler (Thu Aug 08 2002 - 04:38:46 PDT)
  • Torbjörn (Thu Aug 08 2002 - 13:29:59 PDT)
  • Pidgorny, Slav (Wed Aug 07 2002 - 21:23:18 PDT)
  • Mike Benham (Mon Aug 05 2002 - 16:03:29 PDT)
• IE SSL Vulnerability (Konqueror affected too)
  • Thomas C. Greene (Sun Aug 11 2002 - 22:41:11 PDT)
• Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG
  • aleph1at_private (Mon Aug 12 2002 - 10:45:26 PDT)
• Incorrect Dichotomy - Was: It takes two to tango
  • Matthew White (Wed Jul 31 2002 - 19:32:39 PDT)
• Information disclosure on mod_auth ( apache 1.3.26 ) ?
  • Alex Muntada (Thu Aug 22 2002 - 02:07:36 PDT)
  • Hector A. Paterno (Fri Aug 16 2002 - 18:12:32 PDT)
• Input validation attack in php-affiliate-v1.0
  • MOD (Thu Aug 15 2002 - 14:08:37 PDT)
• Insufficient Verification of Client Certificates in IIS 5.0 pre sp3
  • Johan Persson (Mon Aug 19 2002 - 07:40:41 PDT)
• Internet explorer can read local files
  • Jelmer (Sat Aug 17 2002 - 10:57:32 PDT)
• iPlanet vulnerabilities on IRIX
  • SGI Security Coordinator (Thu Aug 01 2002 - 13:34:08 PDT)
• IPSwitch IMail ADVISORY/EXPLOIT/PATCH
  • Tom Fischer (Thu Aug 01 2002 - 11:19:57 PDT)
• IPv4 mapped address considered harmful
  • Peter J. Holzer (Fri Aug 23 2002 - 00:54:56 PDT)
  • Jun-ichiro itojun Hagino (Thu Aug 22 2002 - 09:18:40 PDT)
• It takes two to tango
  • Bryan Fansler (Thu Aug 01 2002 - 08:46:57 PDT)
  • choose.a.usernameat_private (Thu Aug 01 2002 - 08:00:05 PDT)
  • Brooke, O'neil (EXP) (Thu Aug 01 2002 - 06:54:08 PDT)
  • Bryan Fansler (Thu Aug 01 2002 - 08:46:57 PDT)
  • choose.a.usernameat_private (Thu Aug 01 2002 - 08:00:05 PDT)
  • Brooke, O'neil (EXP) (Thu Aug 01 2002 - 06:54:08 PDT)
  • Ron DuFresne (Wed Jul 31 2002 - 23:06:43 PDT)
  • Ron DuFresne (Wed Jul 31 2002 - 23:06:43 PDT)
• it's all about [timing] responsibility
  • Ogle Ron (Rennes) (Sat Aug 03 2002 - 09:46:43 PDT)
• it's all about timing
  • Steven M. Christey (Wed Jul 31 2002 - 22:45:46 PDT)
  • Steven M. Christey (Wed Jul 31 2002 - 22:45:46 PDT)
  • Steven M. Christey (Wed Jul 31 2002 - 22:45:46 PDT)
  • Colin Stefani (Thu Aug 01 2002 - 12:09:19 PDT)
  • Tom Perrine (Thu Aug 01 2002 - 09:57:37 PDT)
  • Georgi Guninski (Thu Aug 01 2002 - 06:03:33 PDT)
  • Georgi Guninski (Thu Aug 01 2002 - 06:03:33 PDT)
  • Steven M. Christey (Wed Jul 31 2002 - 22:45:46 PDT)
• it's all about timing (wasn't that a John Denver song?)
  • Gibby McCaleb (Thu Aug 01 2002 - 09:54:05 PDT)
• JanaWeb
  • Matthew Murphy (Mon Aug 05 2002 - 18:42:05 PDT)
• KDE Security Advisory: Konqueror SSL vulnerability
  • Waldo Bastian (Sun Aug 18 2002 - 21:17:14 PDT)
• kerberos rpc xdr_array
  • david evlis reign (Fri Aug 02 2002 - 07:05:20 PDT)
• Kerio Mail Server Multiple Security vulnerabilities
  • Abraham Lincoln (Wed Aug 28 2002 - 17:35:56 PDT)
  • Jaroslav Snajdr (Tue Aug 27 2002 - 08:44:30 PDT)
  • Abraham Lincoln (Mon Aug 19 2002 - 10:07:40 PDT)
• Kerio Personal Firewall DOS Vulnerability
  • Abraham Lincoln (Mon Aug 26 2002 - 06:59:22 PDT)
• L-Forum Vulnerability - SQL Injection
  • Matthew Murphy (Tue Aug 13 2002 - 19:53:04 PDT)
  • Matthew Murphy (Tue Aug 13 2002 - 19:53:04 PDT)
• L-Forum XSS and upload spoofing
  • Ulf Harnhammar (Tue Aug 13 2002 - 15:54:50 PDT)
• Lcc-win32 infos diffusion
  • Auriemma Luigi (Fri Aug 02 2002 - 14:07:35 PDT)
• LG Electronics LG3001f router
  • Bromirski, Lukasz (Wed Aug 21 2002 - 02:10:33 PDT)
• LG Electronics LG3100p router
  • Lukasz Bromirski (Thu Aug 22 2002 - 01:19:04 PDT)
• Light Security Advisory: Remotely-exploitable code execution
  • J. S. Connell (Thu Aug 22 2002 - 12:06:50 PDT)
• List of mirrors carrying trojaned OpenSSH
  • Tomi Nylund (Thu Aug 01 2002 - 09:56:22 PDT)
• Lynx CRLF Injection
  • Ulf Harnhammar (Sun Aug 18 2002 - 17:17:04 PDT)
• Lynx CRLF Injection, part two
  • Alberto Devesa (Fri Aug 23 2002 - 02:09:21 PDT)
  • Ulf Harnhammar (Thu Aug 22 2002 - 10:32:59 PDT)
• Macromedia Flash plugin can read local files
  • Jelmer (Wed Aug 07 2002 - 20:43:02 PDT)
• Macromedia Shockwave Flash Malformed Header Overflow
  • Martin O'Neal (Thu Aug 29 2002 - 23:28:09 PDT)
• Manipulating Microsoft SQL Server Using SQL Injection
  • Aaron C. Newman (Wed Aug 28 2002 - 09:38:02 PDT)
• mantisbt security flaw
  • Joao Gouveia (Tue Aug 13 2002 - 05:49:41 PDT)
• MDKSA-2002:038-1 - bind update
  • Mandrake Linux Security Team (Thu Aug 15 2002 - 07:54:00 PDT)
• MDKSA-2002:046-1 - openssl update
  • Mandrake Linux Security Team (Tue Aug 06 2002 - 17:12:36 PDT)
• MDKSA-2002:047 - util-linux update
  • Mandrake Linux Security Team (Thu Aug 08 2002 - 17:21:03 PDT)
• MDKSA-2002:048 - mod_ssl update
  • Mandrake Linux Security Team (Thu Aug 08 2002 - 17:22:42 PDT)
• MDKSA-2002:049 - libpng update
  • Mandrake Linux Security Team (Tue Aug 13 2002 - 16:47:50 PDT)
• MDKSA-2002:050 - glibc update
  • Mandrake Linux Security Team (Tue Aug 13 2002 - 16:49:33 PDT)
• MDKSA-2002:051 - xchat update
  • Mandrake Linux Security Team (Wed Aug 14 2002 - 15:55:11 PDT)
• MDKSA-2002:052 - sharutils update
  • Mandrake Linux Security Team (Wed Aug 14 2002 - 15:56:46 PDT)
• MDKSA-2002:053 - xinetd update
  • Mandrake Linux Security Team (Mon Aug 26 2002 - 16:44:59 PDT)
• MDKSA-2002:054 - gaim update
  • Mandrake Linux Security Team (Thu Aug 29 2002 - 13:26:36 PDT)
• MDKSA-2002:055 - hylafax update
  • Mandrake Linux Security Team (Thu Aug 29 2002 - 13:30:27 PDT)
• Microsoft Internet Explorer 'Folder View for FTP sites' Script Execution vulnerability
  • Eiji James Yoshida (Sat Aug 03 2002 - 09:44:25 PDT)
• Microsoft Internet Explorer Legacy Text Control Buffer Overflow (#NISR26082002)
  • NGSSoftware Insight Security Research (Mon Aug 26 2002 - 04:57:59 PDT)
• Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002)
  • NGSSoftware Insight Security Research (Fri Aug 02 2002 - 17:55:57 PDT)
• Microsoft SQL Server Agent Jobs Vulnerabilities (#NISR15002002B)
  • Chip Andrews (Mon Aug 26 2002 - 12:26:30 PDT)
  • David Litchfield (Mon Aug 26 2002 - 12:10:06 PDT)
  • Brent Glover (Sun Aug 25 2002 - 14:01:12 PDT)
  • David Litchfield (Thu Aug 15 2002 - 20:14:04 PDT)
• Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A)
  • David Litchfield (Thu Aug 15 2002 - 20:11:16 PDT)
• Microsoft Terminal Server Client Buffer Overrun (A082802-1)
  • @stake Advisories (Wed Aug 28 2002 - 13:57:07 PDT)
• MidiCart Shopping Cart Software database vulnerability
  • Dimitri Sekhniashvili (Wed Aug 07 2002 - 01:22:51 PDT)
• MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system
  • Tom Yu (Fri Aug 02 2002 - 11:24:24 PDT)
• More DBCC overruns SQL SEVER 2000
  • Mark Litchfield (Wed Aug 21 2002 - 18:42:59 PDT)
• More OmniHTTPd Problems
  • Matthew Murphy (Sun Aug 25 2002 - 09:50:11 PDT)
• More on Shatter
  • Chris Paget (Fri Aug 23 2002 - 03:52:38 PDT)
• More Vulnerabilities with Pingtel xpressa SIP-based IP phones
  • Ofir Arkin (Tue Aug 20 2002 - 14:12:16 PDT)
• Mozilla FTP View Cross-Site Scripting Vulnerability
  • Eiji James Yoshida (Mon Aug 05 2002 - 17:08:20 PDT)
• MS SQL Server Hello Overflow NASL script
  • Dave Aitel (Wed Aug 07 2002 - 08:10:19 PDT)
• MSN Groups makes cross site scripting easy
  • Obscure (Sat Aug 03 2002 - 13:04:07 PDT)
• Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)
  • NGSSoftware Insight Security Research (Mon Aug 19 2002 - 08:04:27 PDT)
• Multiple Cyan Chat Exploits
  • chip (Fri Aug 02 2002 - 15:31:47 PDT)
• Multiple security vulnerabilities inside Microsoft File Transfer Manager ActiveX control (<4.0) [buffer overflow, arbitrary file upload/download]
  • Andrew G. Tereschenko (Sat Aug 17 2002 - 16:40:22 PDT)
• Multiple Vulnerabilities in CafeLog Weblog Package
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
  • Matthew Murphy (Tue Aug 13 2002 - 10:36:53 PDT)
• nCipher Advisory #5: C_Verify validates incorrect symmetric signatures
  • nCipher Support (Mon Aug 19 2002 - 09:20:29 PDT)
• NetBSD Security Advisory 2002-009: Multiple vulnerabilities in OpenSSL code
  • NetBSD Security Officer (Fri Aug 02 2002 - 10:33:30 PDT)
• NetBSD Security Advisory 2002-010: symlink race in pppd
  • NetBSD Security Officer (Fri Aug 02 2002 - 10:34:05 PDT)
• NetBSD Security Advisory 2002-011: Sun RPC XDR decoder contains buffer overflow
  • NetBSD Security Officer (Fri Aug 02 2002 - 10:34:28 PDT)
• new bugs in MyWebServer
  • D4rkGr3y (Wed Aug 14 2002 - 12:40:55 PDT)
• New l2tpd release 0.68
  • Jeff Mcadams (Tue Aug 13 2002 - 07:31:43 PDT)
• New SecurityFocus Lists
  • Hal Flynn (Mon Aug 19 2002 - 12:20:08 PDT)
• Nmap 3.00 Released -- http://www.insecure.org/
  • Fyodor (Thu Aug 01 2002 - 23:30:49 PDT)
• NOVL-2002-2961546 - SNMPv1 Trap and Request HandlingVulnerabilities
  • Ed Reed (Sat Aug 24 2002 - 05:01:13 PDT)
• NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack
  • Ed Reed (Mon Aug 12 2002 - 13:32:20 PDT)
• NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability
  • Ed Reed (Tue Aug 20 2002 - 09:06:57 PDT)
• NOVL-2002-2963307 - PERL Handler Vulnerability
  • Ed Reed (Tue Aug 20 2002 - 09:10:09 PDT)
• NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2
  • Ed Reed (Wed Aug 21 2002 - 12:50:01 PDT)
• NOVL-2002-FAQ - Novell Security Alerts Facts Sheet
  • Ed Reed (Mon Aug 12 2002 - 13:20:57 PDT)
• NTFS Hard Links Subvert Auditing (A081602-1)
  • @stake Advisories (Fri Aug 16 2002 - 07:16:24 PDT)
• OmniHTTPd test.php Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:48:39 PDT)
• OmniHTTPd test.shtml Cross-Site Scripting Issue
  • Matthew Murphy (Sun Aug 25 2002 - 08:54:09 PDT)
• OpenAFS Security Advisory 2002-001: Remote root vulnerability in OpenAFS servers
  • Derrick J Brashear (Sat Aug 03 2002 - 16:52:33 PDT)
• OpenBSD Security Advisory: Select Boundary Condition (fwd)
  • Jonas Eriksson (Mon Aug 12 2002 - 13:18:51 PDT)
• OpenSSH Security Advisory: Trojaned Distribution Files
  • Niels Provos (Thu Aug 01 2002 - 08:18:12 PDT)
• openssh-3.4p1.tar.gz distribution recently trojaned
  • Mikael Olsson (Thu Aug 01 2002 - 04:20:47 PDT)
• OpenSSL Security Altert - Remote Buffer Overflows
  • Scott Gifford (Wed Jul 31 2002 - 23:21:33 PDT)
• OpenSSL Vulnerabilities
  • Sami Dalouche (Thu Aug 15 2002 - 12:41:59 PDT)
  • Patrick Brauch (Thu Aug 15 2002 - 08:49:31 PDT)
  • Josh Welch (Fri Aug 02 2002 - 06:45:50 PDT)
  • Eric Rescorla (Thu Aug 01 2002 - 22:56:12 PDT)
  • troy (Thu Aug 01 2002 - 23:34:53 PDT)
• Opera FTP View Cross-Site Scripting Vulnerability
  • Eiji James Yoshida (Mon Aug 05 2002 - 17:08:47 PDT)
• Oracle Listener Control Format String Vulnerabilities (#NISR14082002)
  • NGSSoftware Insight Security Research (Wed Aug 14 2002 - 01:18:29 PDT)
• Origin of downloaded files can be spoofed in MSIE
  • Jouko Pynnonen (Wed Aug 28 2002 - 05:30:13 PDT)
• Phenoelit Advisory 0815 ++ -- Brick
  • Andrew Ferreira (Thu Aug 01 2002 - 07:04:32 PDT)
• PHP-Nuke v5.6 - Users can compromise admin accts
  • Ravish. (Fri Aug 16 2002 - 21:55:15 PDT)
• PHP-Nuke v5.6 - Users can compromise admin accts.
  • Eric Stevens (Fri Aug 16 2002 - 12:56:10 PDT)
  • <-delusion-> (Thu Aug 15 2002 - 18:16:20 PDT)
  • Jelmer (Thu Aug 15 2002 - 16:08:17 PDT)
  • <-delusion-> (Thu Aug 15 2002 - 01:30:58 PDT)
• PHP: Bypass safe_mode and inject ASCII control chars with mail()
  • Ulf Harnhammar (Wed Aug 28 2002 - 15:05:43 PDT)
  • Wojciech Purczynski (Fri Aug 23 2002 - 00:30:40 PDT)
• phpReactor - Cross-Site Scripting via STYLE
  • Matthew Murphy (Sat Aug 24 2002 - 10:40:25 PDT)
• possible exploit: D-Link DI-804 unauthorized DHCP release from WAN
  • Roger McLaren (Thu Aug 22 2002 - 13:22:05 PDT)
  • Jens Jensen (Thu Aug 22 2002 - 00:06:48 PDT)
• Potential issue with Ethereal
  • Jonas Eriksson (Fri Aug 30 2002 - 11:30:52 PDT)
• REFRESH: EUDORA MAIL 5.1.1
  • Deus, Attonbitus (Mon Aug 05 2002 - 07:14:53 PDT)
• Remote Buffer Overflow Vulnerability in Sun RPC
  • Ricardo Quesada (Fri Aug 02 2002 - 12:28:49 PDT)
• Repost: Buffer overflow in Microsoft DirectX Files Viewer xweb.ocx (<2,0,16,15) ActiveX sample
  • Andrew G. Tereschenko (Fri Aug 16 2002 - 15:05:55 PDT)
• RETRY : newly released winamp 3 fails to address serious "execution of arbitrary" code issue when combined with MSIE6
  • Jelmer (Sat Aug 17 2002 - 11:36:17 PDT)
• RPC analysis
  • Charles Hannum (Thu Aug 01 2002 - 07:54:35 PDT)
• rpc.pcnfsd vulnerabilities on IRIX
  • SGI Security Coordinator (Thu Aug 01 2002 - 10:38:42 PDT)
• SAME LADY, DIFFERENT DRESS: Internet Explorer 6
  • http-equivat_private (Mon Aug 12 2002 - 19:36:26 PDT)
• SAP R/3 default password vulnerability
  • John Eisenschmidt (Tue Aug 27 2002 - 07:01:00 PDT)
  • Stefan Hoelzner (Sun Aug 25 2002 - 16:55:33 PDT)
• Security Advisory: Raptor Firewall Weak ISN Vulnerability
  • Kristof Philipsen (Fri Aug 02 2002 - 05:10:30 PDT)
• Security side-effects of Word fields
  • Kyle Duren (Tue Aug 27 2002 - 00:11:09 PDT)
  • Sean Smith (Tue Aug 27 2002 - 11:15:32 PDT)
  • Alex Gantman (Mon Aug 26 2002 - 14:23:22 PDT)
• Security Update 2002-08-02 for OpenSSL, Sun RPC, mod_ssl for OS X
  • onlyOODat_private (Sat Aug 03 2002 - 08:17:29 PDT)
• Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries
  • securityat_private (Mon Aug 05 2002 - 17:12:27 PDT)
• Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd
  • securityat_private (Thu Aug 08 2002 - 17:01:17 PDT)
• Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion and buffer overflow vulnerabilities
  • securityat_private (Mon Aug 19 2002 - 15:28:26 PDT)
• Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg
  • securityat_private (Thu Aug 22 2002 - 13:32:34 PDT)
• Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver
  • securityat_private (Fri Aug 23 2002 - 16:37:13 PDT)
• Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow
  • securityat_private (Mon Aug 26 2002 - 16:44:47 PDT)
• SECURITY.NNOV: Windows 2000 system partition weak default permissions
  • 3APA3A (Mon Aug 05 2002 - 08:52:02 PDT)
• SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0
  • http-equivat_private (Thu Aug 15 2002 - 21:10:42 PDT)
  • Robert Sullivan (Thu Aug 15 2002 - 12:04:51 PDT)
  • http-equivat_private (Wed Aug 14 2002 - 17:34:17 PDT)
  • http-equivat_private (Wed Aug 14 2002 - 17:34:17 PDT)
• SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0]
  • http-equivat_private (Tue Aug 20 2002 - 08:06:13 PDT)
  • http-equivat_private (Mon Aug 19 2002 - 20:53:40 PDT)
• SNMP vulnerability in AVAYA Cajun firmware
  • Jacek Lipkowski (Mon Aug 05 2002 - 10:01:24 PDT)
• Software vulnerability reporting survey
  • Tiina Havana (Mon Aug 05 2002 - 07:21:31 PDT)
• Solaris 2.6-8 SPARC Telnetd Vulnerability
  • Brendan C. Johnson (Wed Aug 21 2002 - 03:02:07 PDT)
• SPIKE 2.5 and associated vulns
  • Dave Aitel (Mon Aug 05 2002 - 17:02:44 PDT)
  • Dave Aitel (Mon Aug 05 2002 - 17:02:44 PDT)
• ssh trojaned
  • Rory Savage (Fri Aug 02 2002 - 08:24:49 PDT)
  • Fabrizio Siciliano (Thu Aug 01 2002 - 11:21:47 PDT)
• Subtle insinuations may be more than idle threats I'm afraid.
  • securityat_private (Thu Aug 15 2002 - 16:35:12 PDT)
• SUMMARY: Disabling Port 445 (SMB) Entirely
  • Jason Coombs (Fri Aug 30 2002 - 12:35:52 PDT)
  • Andrew Oman (Fri Aug 30 2002 - 10:21:34 PDT)
  • Andrew Oman (Fri Aug 30 2002 - 10:21:34 PDT)
  • Jason Coombs (Thu Aug 29 2002 - 17:05:14 PDT)
• Sun AnswerBook2 format string and other vulnerabilities
  • ghandi (Thu Aug 01 2002 - 15:31:40 PDT)
• Sun RPC xdr_array vulnerability
  • SGI Security Coordinator (Thu Aug 01 2002 - 09:47:00 PDT)
• SuSE Security Announcement: glibc (SuSE-SA:2002:031)
  • Roman Drahtmueller (Fri Aug 30 2002 - 10:13:29 PDT)
• SuSE Security Announcement: i4l (SuSE-SA:2002:030)
  • Sebastian Krahmer (Mon Aug 12 2002 - 03:27:55 PDT)
• SWServer 2.2 directory traversal bug
  • Bugtest (Wed Aug 28 2002 - 12:46:58 PDT)
• Terrible: Windows Media Player
  • http-equivat_private (Wed Aug 21 2002 - 17:38:05 PDT)
• The Large-Scale Threat of Bad Data in DNS
  • FORENSICS.ORG Security Coordinator (Fri Aug 09 2002 - 19:37:31 PDT)
• The SUPER bug
  • William Deich (Thu Aug 01 2002 - 20:06:15 PDT)
• Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities
  • Aaron Lu (Tue Aug 20 2002 - 10:30:39 PDT)
• Tiny3 vs Winhelp32 Bof
  • Brett Moore (Sun Aug 18 2002 - 19:14:02 PDT)
• TinySSL Vendor Statement: Basic Constraints Vulnerability
  • Adam Megacz (Sat Aug 10 2002 - 20:28:25 PDT)
• ToorCon Call for Papers 5 Day Notice
  • h1kari (Mon Aug 12 2002 - 13:38:06 PDT)
• ToorCon Computer Security Conference 2002 Announcement
  • h1kari (Thu Aug 22 2002 - 18:01:55 PDT)
  • h1kari (Thu Aug 22 2002 - 18:01:55 PDT)
• trillian buffer overflow
  • John C. Hennessy (Thu Aug 01 2002 - 14:52:11 PDT)
• Trillian XML parser buffer overflow
  • soulshock (Sat Aug 31 2002 - 13:30:51 PDT)
  • John C. Hennessy (Sat Aug 31 2002 - 04:29:32 PDT)
• Trivial root compromise in Gateway GS-400 NAS Servers
  • Quarantine (Thu Aug 15 2002 - 05:15:11 PDT)
  • Keith T. Morgan (Wed Aug 14 2002 - 11:38:55 PDT)
• trojan horse in recent openssh (version 3.4 portable 1)
  • Jim Breton (Thu Aug 01 2002 - 11:45:34 PDT)
  • Christian Bahls (Thu Aug 01 2002 - 05:17:36 PDT)
• TSLSA-2002-0067 - glibc
  • Trustix Secure Linux Advisor (Wed Aug 14 2002 - 07:25:02 PDT)
• Two more exploitable holes in the trillian irc module
  • joshat_private (Thu Aug 01 2002 - 18:10:37 PDT)
• Unchecked Buffer in Jana Web Server
  • Matthew Murphy (Mon Aug 05 2002 - 15:38:45 PDT)
• uuuppz.com - Advisory 002 - mIRC $asctime overflow
  • James Martin (Tue Aug 27 2002 - 06:58:50 PDT)
• vulnerabilities in scponly
  • Derek D. Martin (Mon Aug 19 2002 - 20:58:50 PDT)
• Vulnerability in Oracle
  • Gilles Parc (Sun Aug 11 2002 - 22:37:11 PDT)
• W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability (REPOST)
  • TAKAGI, Hiromitsu (Sat Aug 17 2002 - 12:10:45 PDT)
• Weak MySQL Default Configuration on Windows
  • Mike Bommarito (Sun Aug 18 2002 - 10:15:57 PDT)
• Web Shop Manager Security Vulnerability
  • Tacettin Karadeniz (Thu Aug 15 2002 - 03:15:37 PDT)
• Webmin Vulnerability Leads to Remote Compromise (RPC CGI)
  • Noam Rathaus (Fri Aug 30 2002 - 15:39:44 PDT)
  • Muhammad Faisal Rauf Danka (Fri Aug 30 2002 - 08:09:17 PDT)
  • Aviram Jenik (Wed Aug 28 2002 - 12:05:15 PDT)
• White paper: Exploiting the Win32 API.
  • Drew (Wed Aug 28 2002 - 10:25:08 PDT)
  • Rothe, Greg (G.A.) (Tue Aug 27 2002 - 10:00:05 PDT)
  • Paul Starzetz (Mon Aug 26 2002 - 07:47:12 PDT)
  • Kenn Humborg (Wed Aug 07 2002 - 10:18:15 PDT)
  • Marc Maiffret (Wed Aug 07 2002 - 00:01:13 PDT)
  • Andrey Kolishak (Wed Aug 07 2002 - 00:57:13 PDT)
  • Simos Xenitellis (Thu Aug 08 2002 - 05:11:11 PDT)
  • John Howie (Wed Aug 07 2002 - 09:33:16 PDT)
  • slack3r (Wed Aug 07 2002 - 09:13:29 PDT)
  • Adam Megacz (Wed Aug 07 2002 - 11:10:09 PDT)
  • Chris Calabrese (Wed Aug 07 2002 - 06:38:13 PDT)
  • Roland Kaufmann (Wed Aug 07 2002 - 06:49:23 PDT)
  • John Howie (Tue Aug 06 2002 - 10:44:17 PDT)
  • Chris Paget (Tue Aug 06 2002 - 09:13:57 PDT)
• Win32 API 'shatter' vulnerability found in VNC-based products
  • EXT-Bellers, Chris (Tue Aug 20 2002 - 19:55:40 PDT)
• Windows 2000 Service Pack 3 now available.
  • Javier Sanchez (Information Systems) (Wed Aug 07 2002 - 09:11:18 PDT)
  • Javier Sanchez (Information Systems) (Wed Aug 07 2002 - 09:11:18 PDT)
  • Nick FitzGerald (Thu Aug 01 2002 - 16:43:50 PDT)
  • Nick FitzGerald (Thu Aug 01 2002 - 16:43:50 PDT)
  • Darren Reed (Thu Aug 01 2002 - 17:19:18 PDT)
  • Nick FitzGerald (Thu Aug 01 2002 - 16:43:50 PDT)
  • Colin Stefani (Thu Aug 01 2002 - 14:43:42 PDT)
  • Leif Sawyer (Thu Aug 01 2002 - 09:48:10 PDT)
  • Leif Sawyer (Thu Aug 01 2002 - 09:48:10 PDT)
• Windows SMB DoS - Proof of concept
  • Frederic Deletang (Thu Aug 29 2002 - 04:58:35 PDT)
  • Frederic Deletang (Thu Aug 29 2002 - 04:58:35 PDT)
• Winhelp32 Remote Buffer Overrun
  • Drew (Tue Aug 06 2002 - 19:30:32 PDT)
  • Drew (Tue Aug 06 2002 - 19:48:13 PDT)
  • Mark Litchfield (Tue Aug 06 2002 - 12:23:38 PDT)
  • Jelmer (Thu Aug 01 2002 - 17:19:14 PDT)
  • Next Generation Insight Security Research Team (Thu Aug 01 2002 - 18:59:31 PDT)
• Xitami Connection Flood Server Termination Vulnerability
  • mattmurphyat_private (Fri Aug 02 2002 - 19:33:58 PDT)
  • Muhammad Faisal Rauf Danka (Fri Aug 02 2002 - 18:37:25 PDT)
  • Muhammad Faisal Rauf Danka (Fri Aug 02 2002 - 18:37:25 PDT)
  • Matthew Murphy (Fri Aug 02 2002 - 15:27:33 PDT)
• Xprobe2 - Tool & Paper release
  • Ofir Arkin (Fri Aug 02 2002 - 09:30:18 PDT)
• Yahoo Messenger Install Secuirty
  • Kyle Duren (Mon Aug 26 2002 - 23:48:35 PDT)
• Yet another SMB dos concept code
  • Kevin Gennuso (Thu Aug 29 2002 - 13:39:24 PDT)
  • Fabio Pietrosanti (naif) (Thu Aug 29 2002 - 08:11:18 PDT)
  • Huagang Xie (Wed Aug 28 2002 - 17:02:13 PDT)

Last message date: Thu Sep 05 2002 - 08:52:08 PDT
Archived on: Thu Sep 05 2002 - 08:52:12 PDT

This archive was generated by hypermail 2b30 : Thu Sep 05 2002 - 08:52:12 PDT