bugtraq 2003/04
By Thread

Starting: Mon Mar 31 2003 - 17:24:55 PST
Ending: Wed Apr 30 2003 - 14:45:13 PDT

• [VulnWatch] 3Com OfficeConnect Remote 812 ADSL router exposes internal LAN computer's ports during outbound and inbound TCP and UDP sessions Michael Puchol (Mon Mar 31 2003 - 15:25:13 PST)
• [Full-Disclosure] [RHSA-2003:084-01] Updated vsftpd packages re-enable tcp_wrappers support bugzillaat_private (Tue Apr 01 2003 - 07:59:11 PST)
• serious vulnerability present. all doomed. over. Security Experts, Liability Limited (Tue Apr 01 2003 - 14:11:09 PST)
• [Full-Disclosure] [RHSA-2003:095-03] New samba packages fix security vulnerabilities bugzillaat_private (Tue Apr 01 2003 - 07:56:56 PST)
• [Full-Disclosure] [RHSA-2003:101-01] Updated OpenSSL packages fix vulnerabilities bugzillaat_private (Tue Apr 01 2003 - 07:50:06 PST)
• [Full-Disclosure] SRT2003-04-01-1231 - Progress DLC overflows KF (Tue Apr 01 2003 - 04:49:41 PST)
• Re: IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability panicat_private (Tue Apr 01 2003 - 07:25:07 PST)
• [SCSA-015] Remote Denial of Service Vulnerability in PowerFTP Grégory (Mon Mar 31 2003 - 22:54:17 PST)
• [Full-Disclosure] [RHSA-2003:091-01] Updated kerberos packages fix various vulnerabilities bugzillaat_private (Wed Apr 02 2003 - 01:57:39 PST)
• [VulnWatch] [INetCop Security Advisory] Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. dong-h0un U (Wed Apr 02 2003 - 09:55:30 PST)
• [ANNOUNCE] Apache 2.0.45 Released Lars Eilebrecht (Tue Apr 01 2003 - 23:38:28 PST)
• re:3com RAS 1500 Remote vulnerabilities. Jan Kachlik (Tue Apr 01 2003 - 05:11:03 PST)
• Phorum 3.4 Cross Site Scripting Peter (Wed Apr 02 2003 - 05:19:44 PST)
  • Re: Phorum 3.4 Cross Site Scripting Brian Moon (Thu Apr 03 2003 - 06:45:01 PST)
• [INetCop Security Advisory] Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. dong-h0un U (Wed Apr 02 2003 - 09:55:30 PST)
• @(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function Sir Mordred (Tue Apr 01 2003 - 02:54:43 PST)
  • @(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function sir.mordredat_private (Wed Apr 02 2003 - 03:46:02 PST)
• RE: Netscape and Opera crash via java Zelena Endre (Wed Apr 02 2003 - 04:53:56 PST)
  • RE: Netscape and Opera crash via java Richard H. Cotterell (Thu Apr 03 2003 - 18:32:38 PST)
• Inaccurate Reports Concerning PHP Vulnerabilities mattmurphyat_private (Tue Apr 01 2003 - 16:26:17 PST)
• Viewpoint Server Ben Maynard (Tue Apr 01 2003 - 05:23:54 PST)
• IkonBoard v3.1.1: arbitrary command execution Nick Cleaton (Tue Apr 01 2003 - 08:49:38 PST)
• @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Sir Mordred (Tue Apr 01 2003 - 04:29:57 PST)
  • @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function sir.mordredat_private (Wed Apr 02 2003 - 03:47:18 PST)
  • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Goran Krajnovic (Wed Apr 02 2003 - 22:39:03 PST)
    • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Javi Lavandeira (Fri Apr 04 2003 - 11:45:39 PST)
      • Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function Jon Ribbens (Fri Apr 04 2003 - 12:20:13 PST)
• OpenSSH 3.6.1 released Markus Friedl (Tue Apr 01 2003 - 12:21:41 PST)
• [SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit Martin Schulze (Wed Apr 02 2003 - 07:10:56 PST)
• Css in Xoops module glossary 1.3.x magistrat (Tue Apr 01 2003 - 05:08:28 PST)
• XSS in Python Documentation Server euronymous (Wed Apr 02 2003 - 08:07:09 PST)
• BEA WebLogic internal hostname disclosure Michael Hendrickx (Wed Apr 02 2003 - 01:27:10 PST)
  • Re: BEA WebLogic internal hostname disclosure Kurt Seifried (Thu Apr 03 2003 - 01:00:37 PST)
• [Full-Disclosure] Sendmail parseaddr security vulnerability on IRIX SGI Security Coordinator (Wed Apr 02 2003 - 13:36:56 PST)
• Microsoft Terminal Services vulnerable to MITM-attacks. Erik Forsberg (Tue Apr 01 2003 - 14:05:44 PST)
  • RE: Microsoft Terminal Services vulnerable to MITM-attacks. Larry Seltzer (Wed Apr 02 2003 - 16:09:10 PST)
  • Re: Microsoft Terminal Services vulnerable to MITM-attacks. Henrik Storner (Thu Apr 03 2003 - 21:32:39 PST)
  • Re: Microsoft Terminal Services vulnerable to MITM-attacks. Carlos Branco (Thu Apr 10 2003 - 07:18:37 PDT)
• Re: PHP-Nuke block-Forums.php subject vulnerabilities Frog Man (Tue Apr 01 2003 - 02:48:28 PST)
• MDKSA-2003:040 - Updated Eterm packages fix escape sequence insecurities Mandrake Linux Security Team (Tue Apr 01 2003 - 09:07:24 PST)
• Re: NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability Alan Kong (Mon Mar 31 2003 - 22:35:29 PST)
• Java and Javascript David F. Madrid (Tue Apr 01 2003 - 18:08:25 PST)
• Re: Oracle JDBC: Inconsistent handling of timestamps Peter J. Holzer (Wed Apr 02 2003 - 01:17:30 PST)
• [Full-Disclosure] SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read KF (Wed Apr 02 2003 - 09:28:19 PST)
• [Full-Disclosure] [RHSA-2003:128-01] Updated Eye of GNOME packages fix vulnerability bugzillaat_private (Thu Apr 03 2003 - 00:07:20 PST)
• [Full-Disclosure] [RHSA-2003:060-01] Updated NetPBM packages fix multiple vulnerabilities bugzillaat_private (Thu Apr 03 2003 - 00:08:26 PST)
• [Full-Disclosure] SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow KF (Thu Apr 03 2003 - 01:43:57 PST)
• [Full-Disclosure] passlogd sniffer remote buffer overflow root exploit. dong-h0un U (Thu Apr 03 2003 - 08:24:44 PST)
  • Re: passlogd sniffer remote buffer overflow root exploit. Dragos Ruiu (Thu Apr 03 2003 - 21:55:25 PST)
• Re: Webserver CVS (In)Security Brian Hatch (Tue Apr 01 2003 - 11:56:12 PST)
  • Re: Webserver CVS (In)Security Crist J. Clark (Tue Apr 01 2003 - 22:09:05 PST)
  • Re: Webserver CVS (In)Security Andrew Brown (Tue Apr 01 2003 - 14:33:35 PST)
• [Full-Disclosure] [RHSA-2003:109-03] Updated balsa and mutt packages fix vulnerabilities bugzillaat_private (Thu Apr 03 2003 - 12:34:39 PST)
• Another security problem in Netgear FM114P ProSafe Wireless Router firmware Björn Stickler (Wed Apr 02 2003 - 09:58:57 PST)
• [SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit Martin Schulze (Thu Apr 03 2003 - 05:22:50 PST)
• [SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit Martin Schulze (Thu Apr 03 2003 - 06:44:30 PST)
• Security Update: [CSSA-2003-016.0] OpenLinux: sendmail sign extension buffer overflow (CERT CA-2003-12) securityat_private (Thu Apr 03 2003 - 10:21:11 PST)
• Using Java from Javascript David F. Madrid (Wed Apr 02 2003 - 14:02:06 PST)
• SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow KF (Thu Apr 03 2003 - 01:43:57 PST)
• Multiple vulnerabilities in AutomatedShops WebC shopping cart Carl Livitt (Thu Apr 03 2003 - 05:22:36 PST)
  • Re: Multiple vulnerabilities in AutomatedShops WebC shopping cart Carl Livitt (Fri Apr 04 2003 - 01:32:35 PST)
• SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read KF (Wed Apr 02 2003 - 09:28:19 PST)
• RE: Another security problem in Netgear FM114P ProSafe Wireless Router firmware (also level-one) Björn Stickler (Wed Apr 02 2003 - 12:57:57 PST)
• passlogd sniffer remote buffer overflow root exploit. dong-h0un U (Thu Apr 03 2003 - 08:24:44 PST)
• Sakki's guestbook V.1.01 script injection vulnerability. drG4njubas (Thu Apr 03 2003 - 06:05:22 PST)
• NetBIOS could be used as network flood amplier Francesco Vigo (Thu Apr 03 2003 - 09:21:21 PST)
  • RE: NetBIOS could be used as network flood amplier Russ (Thu Apr 03 2003 - 16:05:49 PST)
  • Re: NetBIOS could be used as network flood amplier Francesco Vigo (Fri Apr 04 2003 - 16:47:39 PST)
• [Full-Disclosure] Syscall implementation could lead to whether or not a file exists Andrew Griffiths (Wed Apr 02 2003 - 11:19:47 PST)
  • [Full-Disclosure] Syscall implementation could lead to whether or not a file exists Andrew Griffiths (Wed Apr 02 2003 - 11:19:47 PST)
  • [Full-Disclosure] Re: Syscall implementation could lead to whether or not a file exists Pavel Machek (Sun Apr 06 2003 - 13:31:47 PDT)
    • Re: [Full-Disclosure] Re: Syscall implementation could lead to whether or not a file exists andrewgat_private (Sun Apr 06 2003 - 16:32:03 PDT)
  • Re: [Full-Disclosure] Syscall implementation could lead to whether or not a file exists Arjan van de Ven (Mon Apr 07 2003 - 03:47:00 PDT)
• [SECURITY] [DSA 278-1] New sendmail packages fix denial of service Martin Schulze (Fri Apr 04 2003 - 05:08:30 PST)
• [SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution Martin Schulze (Fri Apr 04 2003 - 06:57:35 PST)
• Syscall implementation could lead to whether or not a file exists Andrew Griffiths (Wed Apr 02 2003 - 11:19:47 PST)
• NetBSD Security Advisory 2003-006: Cryptographic weaknesses in Kerberos v4 protocol NetBSD Security Officer (Fri Apr 04 2003 - 08:44:41 PST)
• [CLA-2003:613] Conectiva Security Announcement - snort Conectiva Updates (Fri Apr 04 2003 - 09:21:28 PST)
• TA-2003-03 Buffer Overflow Vulnerability in Hyperion FTP Server 3.0 Rushjoat_private (Fri Apr 04 2003 - 07:04:13 PST)
• [CLA-2003:614] Conectiva Security Announcement - sendmail Conectiva Updates (Fri Apr 04 2003 - 10:12:28 PST)
• AspJar guestbook script injection vulnerability. drG4njubas (Fri Apr 04 2003 - 06:00:59 PST)
• [VulnWatch] SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call KF (Fri Apr 04 2003 - 05:28:04 PST)
• SuSE Security Announcement: openssl (SuSE-SA:2003:024) Sebastian Krahmer (Fri Apr 04 2003 - 04:40:46 PST)
• Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Vladimir Katalov (Thu Apr 03 2003 - 22:59:12 PST)
• [Full-Disclosure] SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call KF (Fri Apr 04 2003 - 05:28:04 PST)
• An Alternate View of Recently Reported PHP Vulnerabilities Steven M. Christey (Thu Apr 03 2003 - 20:28:58 PST)
  • Re: An Alternate View of Recently Reported PHP Vulnerabilities Goran Krajnovic (Sat Apr 05 2003 - 02:23:39 PST)
• buffalo AirStation G54 - (WBR-G54 ) DoS Pavel shpac (Thu Apr 03 2003 - 15:30:16 PST)
• NetBSD Security Advisory 2003-009: sendmail buffer overrun in prescan() address parser NetBSD Security Officer (Fri Apr 04 2003 - 08:44:54 PST)
• [CLA-2003:616] Conectiva Security Announcement - dhcp Conectiva Updates (Fri Apr 04 2003 - 13:35:52 PST)
• [CLA-2003:617] Conectiva Security Announcement - file Conectiva Updates (Fri Apr 04 2003 - 13:58:35 PST)
• SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call KF (Fri Apr 04 2003 - 05:28:04 PST)
• LocalSystem account in Windows 2000/XP Pavel (Fri Apr 04 2003 - 13:41:44 PST)
  • RE: LocalSystem account in Windows 2000/XP Russ (Fri Apr 04 2003 - 14:50:27 PST)
• [CLA-2003:615] Conectiva Security Announcement - samba Conectiva Updates (Fri Apr 04 2003 - 11:11:06 PST)
• [VulnWatch] Abyss X1 1.1.2 remote crash Auriemma Luigi (Sat Apr 05 2003 - 04:21:48 PST)
• SignHere guestbook vulnerability. drG4njubas (Sat Apr 05 2003 - 01:07:05 PST)
• Abyss X1 1.1.2 remote crash Auriemma Luigi (Sat Apr 05 2003 - 04:21:48 PST)
• Two Invision Power Board 1.1.x vulns Gossi The Dog (Fri Apr 04 2003 - 14:56:40 PST)
• Interbase/Firebird - external file security bug Kotala Zdenìk (Sat Apr 05 2003 - 02:24:53 PST)
• [Full-Disclosure] Seti@home information leakage and remote compromise Berend-Jan Wever (Sun Apr 06 2003 - 03:10:08 PDT)
• [Full-Disclosure] Seti@home exploit Berend-Jan Wever (Sun Apr 06 2003 - 03:32:24 PDT)
• [SECURITY] [DSA 274-2] New mutt packages fix arbitrary code execution in potato Martin Schulze (Sun Apr 06 2003 - 23:05:45 PDT)
• [DDI-1013] Buffer Overflow in Samba allows remote root compromise Erik Parker (Mon Apr 07 2003 - 00:45:16 PDT)
• [CLA-2003:618] Conectiva Security Announcement - kernel Conectiva Updates (Mon Apr 07 2003 - 07:09:08 PDT)
• [SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation Martin Schulze (Mon Apr 07 2003 - 01:34:53 PDT)
• [OpenPKG-SA-2003.028] OpenPKG Security Advisory (samba) OpenPKG (Mon Apr 07 2003 - 09:05:27 PDT)
• Vignette Story Server sensitive information disclosure (a040703-1) @stake Advisories (Mon Apr 07 2003 - 09:13:24 PDT)
• Java Agent freezes Lotus Notes and Domino 6.0.1 Marc Schoenefeld (Sat Apr 05 2003 - 13:48:50 PST)
• [VulnWatch] Coppermine Photo Gallery remote compromise Berend-Jan Wever (Mon Apr 07 2003 - 09:47:57 PDT)
• [Full-Disclosure] Coppermine Photo Gallery remote compromise Berend-Jan Wever (Mon Apr 07 2003 - 09:47:57 PDT)
  • [Full-Disclosure] Coppermine Photo Gallery remote compromise Berend-Jan Wever (Mon Apr 07 2003 - 09:47:57 PDT)
• Coppermine Photo Gallery remote compromise Berend-Jan Wever (Mon Apr 07 2003 - 09:47:57 PDT)
• JpegX 2.0.0.3 Password Bypass Vulnerability JeiAr (Sat Apr 05 2003 - 13:16:30 PST)
• [Immunix-announce] Immunix Secured OS 7+ samba update Immunix Security Team (Mon Apr 07 2003 - 11:39:07 PDT)
• [Full-Disclosure] Dangerous permissions in unitedlinux Knud Erik Højgaard (Mon Apr 07 2003 - 11:02:12 PDT)
• Immunix Secured OS 7+ cvs update Immunix Security Team (Mon Apr 07 2003 - 12:25:31 PDT)
• [Immunix-announce] Immunix Secured OS 7+ cvs update Immunix Security Team (Mon Apr 07 2003 - 12:25:31 PDT)
• Immunix Secured OS 7+ samba update Immunix Security Team (Mon Apr 07 2003 - 11:39:07 PDT)
• [SECURITY] [DSA 280-1] New samba packages fix remote root exploit Martin Schulze (Mon Apr 07 2003 - 11:48:54 PDT)
• [CLA-2003:619] Conectiva Security Announcement - zlib Conectiva Updates (Mon Apr 07 2003 - 13:13:52 PDT)
• SuSE Security Announcement: samba (SuSE-SA:2003:025) Roman Drahtmueller (Mon Apr 07 2003 - 13:32:20 PDT)
• MDKSA-2003:044 - Updated samba packages fix remote root vulnerability Mandrake Linux Security Team (Mon Apr 07 2003 - 09:56:27 PDT)
• [Full-Disclosure] mIRC "dcc filename spoofing" Knud Erik Højgaard (Mon Apr 07 2003 - 11:05:10 PDT)
  • RE: [Full-Disclosure] mIRC "dcc filename spoofing" Gossi The Dog (Mon Apr 07 2003 - 16:40:33 PDT)
• [Immunix-announce] Immunix Secured OS 7+ Kerberos update Immunix Security Team (Mon Apr 07 2003 - 18:27:42 PDT)
• [Full-Disclosure] [RHSA-2003:137-01] New samba packages fix security vulnerability bugzillaat_private (Tue Apr 08 2003 - 00:02:06 PDT)
• [Full-Disclosure] [RHSA-2003:036-01] Updated mgetty packages available bugzillaat_private (Tue Apr 08 2003 - 05:17:20 PDT)
• Immunix Secured OS 7+ Kerberos update Immunix Security Team (Mon Apr 07 2003 - 18:27:42 PDT)
• Unchecked Buffer in Opera 7.02 David F.Madrid (Mon Apr 07 2003 - 18:41:02 PDT)
  • Re: Unchecked Buffer in Opera 7.02 nesumin (Thu Apr 10 2003 - 02:12:12 PDT)
• TSLSA-2003-0019 - samba Trustix Secure Linux Advisor (Tue Apr 08 2003 - 03:56:43 PDT)
• [Sorcerer-spells] SAMBA--SORCERER2003-04-08 Michael Walton (Tue Apr 08 2003 - 09:27:22 PDT)
• mIRC "dcc filename spoofing" Knud Erik Højgaard (Mon Apr 07 2003 - 11:05:10 PDT)
• AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Phil Cyc (Mon Apr 07 2003 - 05:23:47 PDT)
  • Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Phil Cyc (Tue Apr 08 2003 - 14:36:51 PDT)
  • Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss Hilko Bengen (Wed Apr 09 2003 - 06:55:47 PDT)
• Orplex guestbook script injection. drG4njubas (Mon Apr 07 2003 - 02:01:13 PDT)
• [CLA-2003:620] Conectiva Security Announcement - man Conectiva Updates (Mon Apr 07 2003 - 15:25:27 PDT)
• [SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution Martin Schulze (Tue Apr 08 2003 - 08:45:57 PDT)
• iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x iDEFENSE Labs (Tue Apr 08 2003 - 09:44:39 PDT)
• False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Mon Apr 07 2003 - 03:06:02 PDT)
  • [Full-Disclosure] Re: False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Thu Apr 17 2003 - 10:04:01 PDT)
  • Re: False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Thu Apr 17 2003 - 10:04:01 PDT)
• [Full-Disclosure] Multiple Vulnerabilities in libc RPC functions on IRIX SGI Security Coordinator (Tue Apr 08 2003 - 14:50:40 PDT)
• [Full-Disclosure] Exploit Code Released for Apache 2.x Memory Leak mattmurphyat_private (Tue Apr 08 2003 - 15:48:39 PDT)
  • Arp records in solaris Edward J. Aivazian (Fri Apr 11 2003 - 05:41:35 PDT)
• [Full-Disclosure] [RHSA-2003:137-02] New samba packages fix security vulnerability bugzillaat_private (Wed Apr 09 2003 - 01:27:15 PDT)
• [Full-Disclosure] [RHSA-2003:139-01] Updated httpd packages fix security vulnerabilities. bugzillaat_private (Wed Apr 09 2003 - 09:31:49 PDT)
• [Full-Disclosure] Samba Security Vulnerability on IRIX SGI Security Coordinator (Wed Apr 09 2003 - 11:02:42 PDT)
• [Immunix-announce] Immunix Secured OS 7+ PostgreSQL update WireX Security (Wed Apr 09 2003 - 21:35:25 PDT)
  • [Immunix-announce] Immunix Secured OS 7+ PostgreSQL update WireX Security Team (Thu Apr 10 2003 - 00:15:30 PDT)
• [Immunix-announce] Immunix Secured OS 7+ MySQL update WireX Security (Wed Apr 09 2003 - 21:37:55 PDT)
  • [Immunix-announce] Immunix Secured OS 7+ MySQL update WireX Security Team (Thu Apr 10 2003 - 00:16:12 PDT)
• Fwd: [Full-Disclosure] Samba Security Vulnerability on IRIX chris1at_private (Wed Apr 09 2003 - 17:38:26 PDT)
• samba 2.x call_trans2open() exploit noir sin (Tue Apr 08 2003 - 04:01:00 PDT)
• GLSA: setiathome (200304-03) Daniel Ahlberg (Wed Apr 09 2003 - 03:58:04 PDT)
• ISC guestbook script injection vulnerability. drG4njubas (Wed Apr 09 2003 - 08:03:55 PDT)
• Exploit Code Released for Apache 2.x Memory Leak mattmurphyat_private (Tue Apr 08 2003 - 15:48:39 PDT)
  • Re: Exploit Code Released for Apache 2.x Memory Leak Serban Murariu (Thu Apr 10 2003 - 01:50:37 PDT)
• Immunix Secured OS 7+ PostgreSQL update WireX Security (Wed Apr 09 2003 - 21:35:25 PDT)
  • Immunix Secured OS 7+ PostgreSQL update WireX Security Team (Thu Apr 10 2003 - 00:15:30 PDT)
• [ARL03-A16] Multiple Security Issues in phPay Ahmet Sabri ALPER (Wed Apr 09 2003 - 01:03:53 PDT)
• Immunix Secured OS 7+ MySQL update WireX Security (Wed Apr 09 2003 - 21:37:55 PDT)
  • Immunix Secured OS 7+ MySQL update WireX Security Team (Thu Apr 10 2003 - 00:16:12 PDT)
• Re: Buffer Overflow in Broker FTP Server Knud Erik Højgaard (Tue Apr 08 2003 - 10:26:58 PDT)
• GLSA: apache (200304-01) Daniel Ahlberg (Wed Apr 09 2003 - 01:07:01 PDT)
• [CLA-2003:624] Conectiva Security Announcement - samba Conectiva Updates (Tue Apr 08 2003 - 15:34:38 PDT)
• [SECURITY] [DSA 269-2] New heimdal packages fix authentication failure Martin Schulze (Wed Apr 09 2003 - 08:56:36 PDT)
• Hyperion FTP server Remote DOS and unauthorised remote access. moran zavdi (Tue Apr 08 2003 - 12:07:46 PDT)
• PoPToP PPTP server remotely exploitable buffer overflow Timo Sirainen (Wed Apr 09 2003 - 09:19:33 PDT)
• GLSA: samba (200304-02) Daniel Ahlberg (Wed Apr 09 2003 - 01:44:11 PDT)
• Vulnerabilities in Portable Executable (PE) File Format For Win32 Architecture Exurity Inc. (Wed Apr 09 2003 - 06:51:36 PDT)
  • Protection against buffer overflows: when your anchor is washed away, then you are overflowed and refuse to RET Exurity Inc. (Fri Apr 11 2003 - 17:20:04 PDT)
• iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (ISA) S iDEFENSE Labs (Wed Apr 09 2003 - 12:49:14 PDT)
• [Full-Disclosure] xfsdump creates files insecurely on IRIX SGI Security Coordinator (Thu Apr 10 2003 - 10:04:21 PDT)
• working apache <= 2.0.44 DoS exploit for linux. Daniel Nyström (Thu Apr 10 2003 - 00:59:24 PDT)
  • Re: working apache <= 2.0.44 DoS exploit for linux. Paul Johnston (Fri Apr 11 2003 - 03:52:46 PDT)
• KDE Security Advisory: PS/PDF file handling vulnerability Dirk Mueller (Thu Apr 10 2003 - 06:16:02 PDT)
• Flaw in Microsoft VM Could Enable System Compromise K-Otik.com (Thu Apr 10 2003 - 11:48:21 PDT)
• [Full-Disclosure] [RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder bugzillaat_private (Thu Apr 10 2003 - 16:33:05 PDT)
• MDKSA-2003:038-1 - Updated 2.4 kernel packages fix ptrace vulnerability Mandrake Linux Security Team (Wed Apr 09 2003 - 22:27:36 PDT)
• GLSA: kde-3.x (200304-04) Daniel Ahlberg (Thu Apr 10 2003 - 08:35:01 PDT)
• [Full-Disclosure] IRIX ToolTalk Vulnerabilities Update SGI Security Coordinator (Fri Apr 11 2003 - 10:15:15 PDT)
• [Full-Disclosure] Brocade Firmware SNMP Vulnerability SGI Security Coordinator (Fri Apr 11 2003 - 14:47:52 PDT)
• [CLA-2003:625] Conectiva Security Announcement - openssl Conectiva Updates (Thu Apr 10 2003 - 13:07:08 PDT)
• Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability Integrigy Security Alerts (Thu Apr 10 2003 - 20:33:05 PDT)
• GLSA: kde-2.x (200304-05) Daniel Ahlberg (Fri Apr 11 2003 - 01:43:36 PDT)
• [Sorcerer-spells] KDE-SORCERER2003-04-12 Michael Walton (Sat Apr 12 2003 - 00:12:20 PDT)
• Medium Vulnerability in SNMP on Linsys BEFVP41 Branson Matheson (Wed Apr 09 2003 - 11:48:53 PDT)
• MacOS X DirectoryService Privilege Escalation (a041003-1) @stake Advisories (Thu Apr 10 2003 - 13:52:06 PDT)
• FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database. Stephen White (Wed Apr 09 2003 - 11:03:36 PDT)
• Buffer Overflow Vulnerability Found in MailMax Version 5 Dennis Rand (Fri Apr 11 2003 - 04:54:15 PDT)
• [SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation Martin Schulze (Thu Apr 10 2003 - 23:16:57 PDT)
• Re: Netscape and Opera crash via java Dan Harkless (Wed Apr 09 2003 - 16:36:01 PDT)
• [SECURITY] [DSA 284-1] New kdegraphics packages fix arbitrary command execution Martin Schulze (Sat Apr 12 2003 - 01:30:01 PDT)
• R7-0013: Heap Corruption in Gaim-Encryption Plugin Rapid 7 Security Advisories (Fri Apr 11 2003 - 22:40:59 PDT)
• PATCH: [CAN-2003-0132] Apache 2.0.44 Denial of Service Vulnerability William A. Rowe, Jr. (Fri Apr 11 2003 - 14:32:34 PDT)
• Ocean12 ASP Guestbook Manager v1.00 drG4njubas (Fri Apr 11 2003 - 05:29:16 PDT)
• repost: SRT2003-04-01-1231 - Progress DLC overflows KF (Wed Apr 09 2003 - 02:58:32 PDT)
• bitchx sources backdoored on distribution site Micha³ Szwaczko (Sat Apr 12 2003 - 17:45:17 PDT)
  • Re: bitchx sources backdoored on distribution site Neeko Oni (Mon Apr 14 2003 - 13:03:21 PDT)
• Multiple vulnerabilities in SheerDNS Jedi/Sector One (Sun Apr 13 2003 - 09:00:13 PDT)
• Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach Aviram Jenik (Sun Apr 13 2003 - 12:37:32 PDT)
• GLSA: kde-2.x (200304-05.1) Daniel Ahlberg (Mon Apr 14 2003 - 02:43:20 PDT)
• [Full-Disclosure] [RHSA-2003:126-01] Updated gtkhtml packages fix vulnerability bugzillaat_private (Mon Apr 14 2003 - 04:46:04 PDT)
• Web Wiz Site News realease v3.06 administration access. drG4njubas (Mon Apr 14 2003 - 06:19:03 PDT)
• FipsGuestbook Version 1.12.7 script injection. drG4njubas (Mon Apr 14 2003 - 06:19:03 PDT)
• [SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation Martin Schulze (Mon Apr 14 2003 - 06:19:06 PDT)
• ActivCard password cache memory leakage OTERO Hernan Gustavo EDS (Mon Apr 14 2003 - 07:32:27 PDT)
  • Re: ActivCard password cache memory leakage Massimo Cereda (Tue Apr 15 2003 - 07:59:04 PDT)
• [SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation Martin Schulze (Mon Apr 14 2003 - 07:35:27 PDT)
• Instaboard 1.3 SQL Injection Jim Dew (Mon Apr 14 2003 - 09:34:54 PDT)
• [Full-Disclosure] Multiple Vulnerabilities in BSD LPR Subsystem on IRIX SGI Security Coordinator (Mon Apr 14 2003 - 10:09:49 PDT)
• Windows 2003 win2k.sys vulnerability securityfocus.comat_private (Mon Apr 14 2003 - 11:38:33 PDT)
• [CLA-2003:626] Conectiva Security Announcement - mutt Conectiva Updates (Mon Apr 14 2003 - 12:59:34 PDT)
• bitchx sources trojaned - follow up Micha³ Szwaczko (Mon Apr 14 2003 - 13:17:26 PDT)
• nb1300 router - default settings expose password denote (Mon Apr 14 2003 - 17:34:13 PDT)
• BitchX trojan, the real follow up. Rob Andrews (Mon Apr 14 2003 - 18:44:36 PDT)
• GLSA: kdegraphics-3.1.x (200304-04.1) Daniel Ahlberg (Mon Apr 14 2003 - 23:31:02 PDT)
• [SECURITY] [DSA 287-1] New EPIC packages fix DoS and arbitrary code execution Martin Schulze (Tue Apr 15 2003 - 03:00:38 PDT)
• [SCSA-016] Multiple vulnerabilities in Ez publish Grégory (Tue Apr 15 2003 - 04:53:25 PDT)
• [SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato) Martin Schulze (Tue Apr 15 2003 - 06:33:03 PDT)
• MDKSA-2003:045 - Updated evolution packages fix multiple vulnerabilities Mandrake Linux Security Team (Tue Apr 15 2003 - 08:12:00 PDT)
• MDKSA-2003:046 - Updated gtkhtml packages fix vulnerability Mandrake Linux Security Team (Tue Apr 15 2003 - 08:13:41 PDT)
• Oddities in Windows ACL inheritance Nicolas RUFF (lists) (Tue Apr 15 2003 - 08:51:36 PDT)
• SRT2003-04-15-1029 - Progres BINPATHX overflow KF (Tue Apr 15 2003 - 09:32:43 PDT)
• [Full-Disclosure] SRT2003-04-15-1029 - Progres BINPATHX overflow KF (Tue Apr 15 2003 - 09:32:43 PDT)
• [VulnWatch] SRT2003-04-15-1029 - Progres BINPATHX overflow KF (Tue Apr 15 2003 - 09:32:43 PDT)
• Immunix Secured OS 7+ glibc update Immunix Security Team (Tue Apr 15 2003 - 11:36:28 PDT)
• CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability CORE Security Technologies Advisories (Tue Apr 15 2003 - 12:01:41 PDT)
• [VulnWatch] CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability CORE Security Technologies Advisories (Tue Apr 15 2003 - 12:01:41 PDT)
• Veritas BackupExec 9.0 may ship with upatched MS SQL Desktop Engine Marcus Beaman (Tue Apr 15 2003 - 13:41:32 PDT)
• i cracked restriction of 'zone' in mozilla. Liu Die Yu (Tue Apr 15 2003 - 20:28:52 PDT)
  • Re: i cracked restriction of 'zone' in mozilla. Alla Bezroutchko (Thu Apr 17 2003 - 09:37:02 PDT)
• SFAD03-001: iWeb Mini Web Server Remote Directory Traversal subversive (Tue Apr 15 2003 - 21:27:08 PDT)
• Netgear Logging Vulnerability { } (Wed Apr 16 2003 - 07:13:11 PDT)
• MDKSA-2003:047 - Updated xfsdump packages fix insecure file creation Mandrake Linux Security Team (Wed Apr 16 2003 - 07:42:05 PDT)
• MDKSA-2003:048 - Updated eog packages fix arbitrary command execution Mandrake Linux Security Team (Wed Apr 16 2003 - 07:44:02 PDT)
• [CLA-2003:627] Conectiva Security Announcement - ethereal Conectiva Updates (Wed Apr 16 2003 - 12:05:06 PDT)
• Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Ryan Emerle (Wed Apr 16 2003 - 12:55:50 PDT)
  • Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Roland Postle (Wed Apr 16 2003 - 15:12:46 PDT)
  • RE: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) Steve Ryan (Wed Apr 16 2003 - 15:22:47 PDT)
  • Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) mattmurphyat_private (Mon Apr 21 2003 - 10:26:47 PDT)
• IE 6.0 - trivial crash Adam [ckkl] (Wed Apr 16 2003 - 15:17:45 PDT)
  • Re: IE 6.0 - trivial crash Geoff Shively (Thu Apr 17 2003 - 11:03:25 PDT)
• [SCSA-017] Directory Traversal Vulnerability in EZ Server Grégory (Wed Apr 16 2003 - 16:39:32 PDT)
• [SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability Martin Schulze (Wed Apr 16 2003 - 23:44:58 PDT)
• Vulnerability in rinetd Martin Schulze (Thu Apr 17 2003 - 02:44:13 PDT)
• [SECURITY] [DSA 289-1] New rinetd packages fix denial of service Martin Schulze (Thu Apr 17 2003 - 06:13:21 PDT)
• [SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution Martin Schulze (Thu Apr 17 2003 - 06:58:45 PDT)
• [Full-Disclosure] Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Muhammad Faisal Rauf Danka (Thu Apr 17 2003 - 11:17:10 PDT)
  • [Full-Disclosure] Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Muhammad Faisal Rauf Danka (Thu Apr 17 2003 - 11:17:10 PDT)
  • [Full-Disclosure] Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Muhammad Faisal Rauf Danka (Thu Apr 17 2003 - 11:17:10 PDT)
• Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Muhammad Faisal Rauf Danka (Thu Apr 17 2003 - 11:17:10 PDT)
• CrossSite Scripting @ Snitz Forums 2000 badwebmastersat_private (Thu Apr 17 2003 - 11:33:38 PDT)
• [CLA-2003:628] Conectiva Security Announcement - vixie-cron Conectiva Updates (Thu Apr 17 2003 - 12:29:35 PDT)
• Web Wiz Forums all version db stealing Uziel aka nuJIurpuM (Thu Apr 17 2003 - 12:45:39 PDT)
• MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution Mandrake Linux Security Team (Thu Apr 17 2003 - 14:02:34 PDT)
• Exploit for PoPToP PPTP server einstein, dhtm (Fri Apr 18 2003 - 07:27:58 PDT)
  • Re: Exploit for PoPToP PPTP server - Linux version John Leach (Tue Apr 22 2003 - 08:03:40 PDT)
• Xinetd 2.3.10 Memory Leaks Steve Grubb (Fri Apr 18 2003 - 09:18:36 PDT)
• IE 6.0 - trivial crash - part II Adam [ckkl] (Fri Apr 18 2003 - 13:19:11 PDT)
  • IE / Outlook / MS SHLWAPI Render - more trivial crash Ramon Pinuaga Cascales (Mon Apr 21 2003 - 15:07:20 PDT)
    • RE : IE / Outlook / MS SHLWAPI Render - more trivial crash Gervaize Maquard (Tue Apr 22 2003 - 13:29:58 PDT)
      • Re: IE / Outlook / MS SHLWAPI Render - more trivial crash Berend-Jan Wever (Wed Apr 23 2003 - 05:54:06 PDT)
      • RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash kajbaf (Tue Apr 29 2003 - 11:27:34 PDT)
• Authentication flaw in microsoft SMB protocol seclabat_private (Sat Apr 19 2003 - 06:24:33 PDT)
  • Re: Authentication flaw in microsoft SMB protocol Dave Aitel (Sat Apr 19 2003 - 09:11:33 PDT)
  • RE: Authentication flaw in microsoft SMB protocol Jesper Johansson (Mon Apr 21 2003 - 14:41:49 PDT)
  • Re: Authentication flaw in microsoft SMB protocol Chris Wysopal (Tue Apr 22 2003 - 08:24:24 PDT)
• [Full-Disclosure] Race in XP SCM Service Shutdown Mechanism Matthew Murphy (Sat Apr 19 2003 - 18:43:40 PDT)
• [VulnWatch] Race in XP SCM Service Shutdown Mechanism Matthew Murphy (Sat Apr 19 2003 - 18:43:40 PDT)
• Race in XP SCM Service Shutdown Mechanism Matthew Murphy (Sat Apr 19 2003 - 18:43:40 PDT)
• MPCSoftWeb Guest Book vulnerabilities. drG4njubas (Sun Apr 20 2003 - 06:15:51 PDT)
• [Full-Disclosure] BadBlue Remote Administrative Access Vulnerability Matthew Murphy (Sun Apr 20 2003 - 14:28:18 PDT)
• [VulnWatch] BadBlue Remote Administrative Access Vulnerability Matthew Murphy (Sun Apr 20 2003 - 14:28:18 PDT)
• BadBlue Remote Administrative Access Vulnerability Matthew Murphy (Sun Apr 20 2003 - 14:28:18 PDT)
• [Full-Disclosure] Monkey HTTPd Remote Buffer Overflow Matthew Murphy (Sun Apr 20 2003 - 14:34:03 PDT)
• [VulnWatch] Monkey HTTPd Remote Buffer Overflow Matthew Murphy (Sun Apr 20 2003 - 14:34:03 PDT)
• Monkey HTTPd Remote Buffer Overflow Matthew Murphy (Sun Apr 20 2003 - 14:34:03 PDT)
• ACER Travelmate 600 and 800 series - Smartcard flawed Implementation Leonard.Ongat_private (Sun Apr 20 2003 - 21:10:43 PDT)
• Remote Vulnerabilties in mod_ntlm Matthew Murphy (Mon Apr 21 2003 - 10:11:43 PDT)
• [Full-Disclosure] Remote Vulnerabilties in mod_ntlm Matthew Murphy (Mon Apr 21 2003 - 10:11:43 PDT)
• [VulnWatch] Remote Vulnerabilties in mod_ntlm Matthew Murphy (Mon Apr 21 2003 - 10:11:43 PDT)
• PTNews v1.7.7 - Access to administrator functions without authentification scrap (Mon Apr 21 2003 - 13:49:01 PDT)
  • Re: PTNews v1.7.7 - Access to administrator functions without authentification Rui Pimenta (Tue Apr 29 2003 - 05:57:05 PDT)
• [VulnWatch] PTNews v1.7.7 - Access to administrator functions without authentification scrap (Mon Apr 21 2003 - 13:49:01 PDT)
• [Full-Disclosure] AN HTTPd Sample Script File Truncation Matthew Murphy (Mon Apr 21 2003 - 15:24:46 PDT)
  • [Full-Disclosure] Office 2000 bug, Regristration Alex Elger (Tue Apr 22 2003 - 06:29:34 PDT)
• [VulnWatch] AN HTTPd Sample Script File Truncation Matthew Murphy (Mon Apr 21 2003 - 15:24:46 PDT)
• AN HTTPd Sample Script File Truncation Matthew Murphy (Mon Apr 21 2003 - 15:24:46 PDT)
• Stealth DMCA. Be afraid. Be very afraid... alaskanat_private (Mon Apr 21 2003 - 15:37:36 PDT)
  • Re: [mail_lists] Stealth DMCA. Be afraid. Be very afraid... Jim (Tue Apr 22 2003 - 12:03:09 PDT)
  • Re: Stealth DMCA. Be afraid. Be very afraid... Darren Pilgrim (Tue Apr 22 2003 - 13:48:46 PDT)
• GLSA: snort (200304-05) Daniel Ahlberg (Tue Apr 22 2003 - 00:41:58 PDT)
• [SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution Martin Schulze (Tue Apr 22 2003 - 02:41:46 PDT)
• [NGSEC-2003-5] YABB SE, remote command execution labs@NGSEC (Tue Apr 22 2003 - 03:28:23 PDT)
• [SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions Martin Schulze (Tue Apr 22 2003 - 07:24:46 PDT)
• [CLA-2003:629] Conectiva Security Announcement - tcpdump Conectiva Updates (Tue Apr 22 2003 - 08:14:59 PDT)
• XMB 1.8 Partagium SQL Injection Bug zeezat_private (Tue Apr 22 2003 - 10:08:38 PDT)
• SRT2003-04-22-1336 - SAP DB Development Tools install flaw KF (Tue Apr 22 2003 - 12:00:58 PDT)
• [VulnWatch] SRT2003-04-22-1336 - SAP DB Development Tools install flaw KF (Tue Apr 22 2003 - 12:00:58 PDT)
• [Full-Disclosure] SRT2003-04-22-1336 - SAP DB Development Tools install flaw KF (Tue Apr 22 2003 - 12:00:58 PDT)
• Defeating HTML "Encryption" rjfixat_private (Tue Apr 22 2003 - 12:40:42 PDT)
• [CLA-2003:630] Conectiva Security Announcement - balsa Conectiva Updates (Tue Apr 22 2003 - 14:02:11 PDT)
• [Full-Disclosure] Secunia Research: Xeneo Web Server URL Encoding Denial of Service Carsten H. Eiram (Wed Apr 23 2003 - 00:49:56 PDT)
  • Re: [Full-Disclosure] Secunia Research: Xeneo Web Server URL Encoding Denial of Service badpack3t (Wed Apr 23 2003 - 09:31:03 PDT)
    • Re: [Full-Disclosure] Secunia Research: Xeneo Web Server URL Encoding Denial of Service GaLiaRePt (Wed Apr 23 2003 - 10:55:43 PDT)
    • Re: [Full-Disclosure] Secunia Research: Xeneo Web Server URL Encoding Denial of Service Hotmail (Wed Apr 23 2003 - 11:41:23 PDT)
• [VulnWatch] Secunia Research: Xeneo Web Server URL Encoding Denial of Service Carsten H. Eiram (Wed Apr 23 2003 - 00:49:56 PDT)
• [Full-Disclosure] [VulnWatch] Secunia Research: Xeneo Web Server URL Encoding Denial of Service Carsten H. Eiram (Wed Apr 23 2003 - 00:49:56 PDT)
  • [Full-Disclosure] [VulnWatch] Secunia Research: Xeneo Web Server URL Encoding Denial of Service Carsten H. Eiram (Wed Apr 23 2003 - 00:49:56 PDT)
• Cracking preshared keys Michael Thumann (Wed Apr 23 2003 - 03:35:15 PDT)
  • Re: Cracking preshared keys Damir Rajnovic (Wed Apr 23 2003 - 12:46:37 PDT)
    • Re: Cracking preshared keys Derek (Wed Apr 23 2003 - 20:30:31 PDT)
  • Re: Cracking preshared keys David Wagner (Wed Apr 23 2003 - 17:08:32 PDT)
    • Re: Cracking preshared keys Michael Thumann (Thu Apr 24 2003 - 12:31:48 PDT)
  • RE: Cracking preshared keys Rager, Anton (Anton) (Thu Apr 24 2003 - 11:36:44 PDT)
  • Re: Cracking preshared keys hankat_private (Thu Apr 24 2003 - 23:48:24 PDT)
• Snort <=1.9.1 exploit truff (Wed Apr 23 2003 - 06:26:39 PDT)
• [SECURITY] [DSA 292-2] New mime-support packages fix temporary file race conditions Martin Schulze (Wed Apr 23 2003 - 06:48:48 PDT)
• Security problems in gkrellm-newsticker Martin Schulze (Wed Apr 23 2003 - 06:52:51 PDT)
• [SECURITY] [DSA 293-1] New kdelibs packages fix arbitrary command execution Martin Schulze (Wed Apr 23 2003 - 07:13:08 PDT)
• [Full-Disclosure] [RHSA-2003:032-01] Updated tcpdump packages fix various vulnerabilities bugzillaat_private (Wed Apr 23 2003 - 07:56:41 PDT)
• Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability Cisco Systems Product Security Incident Response Team (Wed Apr 23 2003 - 08:00:00 PDT)
• [SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution Martin Schulze (Wed Apr 23 2003 - 09:00:12 PDT)
• Format strings vuln in CGIwrap b0f www.b0f.net (Wed Apr 23 2003 - 09:05:32 PDT)
• RE: Format strings vuln in CGIwrap Neulinger, Nathan (Wed Apr 23 2003 - 09:59:15 PDT)
• RE: [cgiwrap-users] RE: Format strings vuln in CGIwrap Neulinger, Nathan (Wed Apr 23 2003 - 10:04:43 PDT)
• Nokia IPSO Vulnerability Jonas Eriksson (Wed Apr 23 2003 - 11:27:20 PDT)
  • RE: Nokia IPSO Vulnerability Jorge Merlino (Thu Apr 24 2003 - 09:32:50 PDT)
  • RE: Nokia IPSO Vulnerability Miller, Rick (Thu Apr 24 2003 - 15:09:14 PDT)
• [Full-Disclosure] Re: Xeneo Webserver Vulnerability badpack3t (Wed Apr 23 2003 - 11:30:14 PDT)
• BRS WebWeaver: Ftpd Lockdown via RETR cmd euronymous (Wed Apr 23 2003 - 11:47:43 PDT)
• DNS vulnerabilities in shared host environments Chris Leishman (Wed Apr 23 2003 - 11:50:50 PDT)
  • Re: DNS vulnerabilities in shared host environments Frank Tegtmeyer (Thu Apr 24 2003 - 11:58:37 PDT)
• [Full-Disclosure] [RHSA-2003:076-01] Updated ethereal packages fix security vulnerabilities bugzillaat_private (Wed Apr 23 2003 - 13:22:30 PDT)
• SQL injection in BttlxeForum SecurityTracker (Wed Apr 23 2003 - 19:05:30 PDT)
• [VulnWatch] NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS NSFOCUS Security Team (Wed Apr 23 2003 - 21:02:43 PDT)
• [Full-Disclosure] NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS NSFOCUS Security Team (Wed Apr 23 2003 - 21:02:43 PDT)
• NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS NSFOCUS Security Team (Wed Apr 23 2003 - 21:02:43 PDT)
• Permanent crash in Opera 7.10 David F. Madrid (Thu Apr 24 2003 - 03:21:13 PDT)
  • Re: Permanent crash in Opera 7.10 Dmitrij Lukasevic (Thu Apr 24 2003 - 14:16:08 PDT)
• SuSE Security Announcement: KDE (SuSE-SA:2003:026) Sebastian Krahmer (Thu Apr 24 2003 - 03:47:00 PDT)
• Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Thu Apr 24 2003 - 08:00:00 PDT)
• [VulnWatch] Internet Explorer Plugin.ocx heap overflow (#NISR24042003) NGSSoftware Insight Security Research (Thu Apr 24 2003 - 09:14:59 PDT)
• Internet Explorer Plugin.ocx heap overflow (#NISR24042003) NGSSoftware Insight Security Research (Thu Apr 24 2003 - 09:14:59 PDT)
• Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense Dmitry Maksimov (Thu Apr 24 2003 - 09:46:54 PDT)
• address for postini security Hamby, Charles D. (Thu Apr 24 2003 - 13:15:13 PDT)
• [Full-Disclosure] [RHSA-2003:112-01] Updated squirrelmail packages fix cross-site scripting vulnerabilities bugzillaat_private (Thu Apr 24 2003 - 13:38:22 PDT)
• [Full-Disclosure] [RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability bugzillaat_private (Thu Apr 24 2003 - 13:58:35 PDT)
• [Full-Disclosure] [RHSA-2003:118-01] Updated mICQ packages fix vulnerability bugzillaat_private (Thu Apr 24 2003 - 14:03:23 PDT)
• PHP-Nuke 6.5 FINAL Cross Site Scripting Frog Man (Thu Apr 24 2003 - 14:24:59 PDT)
• SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. KF (Thu Apr 24 2003 - 14:45:38 PDT)
• [VulnWatch] SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. KF (Thu Apr 24 2003 - 14:45:38 PDT)
• [Full-Disclosure] SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. KF (Thu Apr 24 2003 - 14:45:38 PDT)
• SonicWall Pro DoS? Greg Smith (Thu Apr 24 2003 - 16:04:13 PDT)
• MDKSA-2003:051 - Updated ethereal packages fix remote vulnerability Mandrake Linux Security Team (Thu Apr 24 2003 - 18:16:48 PDT)
• Cross site scripting in Onecenter forum 4.0 David F. Madrid (Thu Apr 24 2003 - 19:01:17 PDT)
• Windows Server 2003 Security Guide available Michael Howard (Thu Apr 24 2003 - 21:35:54 PDT)
  • [Full-Disclosure] RE: Windows Server 2003 Security Guide available Jason Coombs (Fri Apr 25 2003 - 14:27:01 PDT)
    • Re: [Full-Disclosure] RE: Windows Server 2003 Security Guide available Greg Steuck (Sun Apr 27 2003 - 11:56:57 PDT)
  • RE: Windows Server 2003 Security Guide available Jason Coombs (Fri Apr 25 2003 - 14:27:01 PDT)
  • RE: Windows Server 2003 Security Guide available paul (Tue Apr 29 2003 - 00:16:21 PDT)
  • RE: Windows Server 2003 Security Guide available J.'LoneWolf' Mattsson (Mon Apr 28 2003 - 19:17:30 PDT)
  • RE: Windows Server 2003 Security Guide available Uwe Betz (Tue Apr 29 2003 - 09:39:46 PDT)
  • Re: Windows Server 2003 Security Guide available Lucas Holt (Tue Apr 29 2003 - 12:45:59 PDT)
• Unauthorized reading files on phpSysInfo Albert Puigsech Galicia (Fri Apr 25 2003 - 00:22:23 PDT)
• Multiple SQL injection on OpenBB forums Albert Puigsech Galicia (Fri Apr 25 2003 - 00:22:48 PDT)
• [BUGZILLA] Security Advisory - XSS, insecure temporary filenames David Miller (Fri Apr 25 2003 - 01:40:33 PDT)
• [VulnWatch] True Galerie 1.0 : Admin Access & File Copy Frog Man (Fri Apr 25 2003 - 05:21:47 PDT)
• XOOPS MyTextSanitizer CSS 1.3x & 2.x magistrat (Fri Apr 25 2003 - 08:25:29 PDT)
• Path disclosure and file access on WebAdmin David A. Pérez (Fri Apr 25 2003 - 09:36:14 PDT)
• [Full-Disclosure] Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update SGI Security Coordinator (Fri Apr 25 2003 - 10:44:27 PDT)
• Re: Exploit for PopPToP PPTP server - Working version blightninjasat_private (Fri Apr 25 2003 - 11:45:08 PDT)
• Microsoft IIS Integrated Authentication skybristolat_private (Fri Apr 25 2003 - 13:10:54 PDT)
  • Re: Microsoft IIS Integrated Authentication Michael.vonGlasowat_private (Tue Apr 29 2003 - 06:12:01 PDT)
• Invision Power Board Plaintext Password Disclosure Vuln JeiAr (Fri Apr 25 2003 - 13:17:20 PDT)
• [Full-Disclosure] Vulnerability in nsd LDAP Implementation on IRIX SGI Security Coordinator (Fri Apr 25 2003 - 14:26:25 PDT)
• [Full-Disclosure] NII Advisory - Path Disclosure in Cold Fusion MX Server Network Intelligence India Pvt. Ltd. (Fri Apr 25 2003 - 22:36:44 PDT)
• NII Advisory - Path Disclosure in Cold Fusion MX Server Network Intelligence India Pvt. Ltd. (Fri Apr 25 2003 - 22:36:44 PDT)
• Buffer overflow in Internet Explorer's HTTP parsing code Jouko Pynnonen (Sat Apr 26 2003 - 11:49:23 PDT)
• Album.pl Vulnerability - Remote Command Execution aresuat_private (Sat Apr 26 2003 - 11:50:29 PDT)
• [VulnWatch] 3com NBX IP Phone Call manager Denial of Service - Update Michael Scheidell (Sat Apr 26 2003 - 18:37:43 PDT)
• [Full-Disclosure] 3com NBX IP Phone Call manager Denial of Service - Update Michael Scheidell (Sat Apr 26 2003 - 18:37:43 PDT)
• 3com NBX IP Phone Call manager Denial of Service - Update Michael Scheidell (Sat Apr 26 2003 - 18:37:43 PDT)
• MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS D4rkGr3y (Sat Apr 26 2003 - 20:11:46 PDT)
  • RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS William Pratt (Mon Apr 28 2003 - 15:25:10 PDT)
    • RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS jasonk (Tue Apr 29 2003 - 18:07:45 PDT)
• MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow D4rkGr3y (Sat Apr 26 2003 - 20:27:01 PDT)
• [Opera 7] Yet Another Story of "Phantom of the Opera" nesumin (Sun Apr 27 2003 - 11:09:00 PDT)
  • RE: [Opera 7] Yet Another Story of "Phantom of the Opera" GreyMagic Software (Wed Apr 30 2003 - 09:56:22 PDT)
• [Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download. nesumin (Sun Apr 27 2003 - 11:09:01 PDT)
• GLSA: snort (200304-06) Daniel Ahlberg (Mon Apr 28 2003 - 00:07:58 PDT)
• [Full-Disclosure] IIS Security and Programming Countermeasures e-book Jason Coombs (Mon Apr 28 2003 - 00:22:10 PDT)
• IIS Security and Programming Countermeasures e-book Jason Coombs (Mon Apr 28 2003 - 00:22:10 PDT)
• GLSA: monkeyd (200304-07.1) Daniel Ahlberg (Mon Apr 28 2003 - 01:49:41 PDT)
• GLSA: pptpd (200304-08) Daniel Ahlberg (Mon Apr 28 2003 - 02:22:55 PDT)
• GLSA: mgetty (200304-09) Daniel Ahlberg (Mon Apr 28 2003 - 03:17:50 PDT)
• Buffer overflow in 3D-ftp Over_G (Mon Apr 28 2003 - 03:58:03 PDT)
• s0h: Remote/Local exploit and patch for regedit.exe. descript (Mon Apr 28 2003 - 07:10:21 PDT)
  • s0h: Remote/Local exploit and patch for regedit.exe. descript (Mon Apr 28 2003 - 07:06:16 PDT)
• Qpopper v4.0.x poppassd local root exploit dong-h0un U (Mon Apr 28 2003 - 07:12:44 PDT)
  • Re: Qpopper v4.0.x poppassd local root exploit Randall Gellens (Wed Apr 30 2003 - 04:35:20 PDT)
• ATM on Linux Exploit Code Release (les, local) Angelo Rosiello (Mon Apr 28 2003 - 07:20:00 PDT)
• Windows 2000 Security Hardening Guide Available Michael Howard (Mon Apr 28 2003 - 10:35:37 PDT)
• Pi3Web 2.0.1 DoS aT4r InsaN3 (Mon Apr 28 2003 - 11:17:11 PDT)
• [VulnWatch] CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall CORE Security Technologies Advisories (Mon Apr 28 2003 - 11:34:27 PDT)
• CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall CORE Security Technologies Advisories (Mon Apr 28 2003 - 11:34:27 PDT)
• MDKSA-2003:052 - Updated snort packages fix remote vulnerability Mandrake Linux Security Team (Mon Apr 28 2003 - 18:01:20 PDT)
• [Full-Disclosure] [RHSA-2003:079-01] Updated zlib packages fix gzprintf buffer overflow vulnerability bugzillaat_private (Tue Apr 29 2003 - 01:14:16 PDT)
• "netscape navigator" is cracked. Liu Die Yu (Tue Apr 29 2003 - 02:12:43 PDT)
• IdeaBox: Remote Command Execution euronymous (Tue Apr 29 2003 - 04:06:43 PDT)
• [VulnWatch] Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) NGSSoftware Insight Security Research (Tue Apr 29 2003 - 06:04:55 PDT)
• Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) NGSSoftware Insight Security Research (Tue Apr 29 2003 - 06:04:55 PDT)
• Coldfusion MX: Java in CFM causes Crash Marc Schoenefeld (Tue Apr 29 2003 - 08:52:53 PDT)
• Auerswald COMsuite/ Back Door Kroma Pierre (Tue Apr 29 2003 - 09:02:19 PDT)
• HPUX rexec buffer overflow vulnerability Davide Del Vecchio (Tue Apr 29 2003 - 10:51:12 PDT)
• April appeared to be a month of IE bugs. Here's another one. ERRor (Tue Apr 29 2003 - 11:23:15 PDT)
  • Re: April appeared to be a month of IE bugs. Here's another one. Cove Schneider (Tue Apr 29 2003 - 12:59:21 PDT)
• [Full-Disclosure] [RHSA-2003:093-01] Updated MySQL packages fix vulnerabilities bugzillaat_private (Tue Apr 29 2003 - 11:59:33 PDT)
• Latest MS SQL Server vulnerabilities revealed Cesar (Tue Apr 29 2003 - 15:49:35 PDT)
  • re:Latest MS SQL Server vulnerabilities revealed Michael - (Wed Apr 30 2003 - 09:04:05 PDT)
• Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Damien Miller (Tue Apr 29 2003 - 20:39:49 PDT)
  • Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) Darren Tucker (Wed Apr 30 2003 - 01:29:28 PDT)
• [SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit Martin Schulze (Wed Apr 30 2003 - 00:43:33 PDT)
• [SECURITY] [DSA 296-1] New kdebase packages fix arbitrary command execution Martin Schulze (Wed Apr 30 2003 - 04:02:03 PDT)
• Red Hat IA64 products still missing fixes for the ptrace vs kmod vulnerability Christoph Hellwig (Wed Apr 30 2003 - 04:28:57 PDT)
• GLSA: balsa (200304-10) Daniel Ahlberg (Wed Apr 30 2003 - 06:40:25 PDT)
• [Full-Disclosure] OpenSSH/PAM timing attack allows remote users identification Marco Ivaldi (Wed Apr 30 2003 - 07:34:27 PDT)
• OpenSSH/PAM timing attack allows remote users identification Marco Ivaldi (Wed Apr 30 2003 - 07:34:27 PDT)
• Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Cisco Systems Product Security Incident Response Team (Wed Apr 30 2003 - 08:30:00 PDT)
• [SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions Martin Schulze (Wed Apr 30 2003 - 08:44:26 PDT)
• [ESA-20030430-013] 'snort' stream4 preprocessor integer overflow vulnerability EnGarde Secure Linux (Wed Apr 30 2003 - 10:26:13 PDT)
• [ESA-20030430-014] 'tcpdump' multiple vulnerabilities EnGarde Secure Linux (Wed Apr 30 2003 - 10:26:33 PDT)
• [CLA-2003:632] Conectiva Security Announcement - apache Conectiva Updates (Wed Apr 30 2003 - 10:49:03 PDT)
• [CLA-2003:633] Conectiva Security Announcement - glibc Conectiva Updates (Wed Apr 30 2003 - 13:35:36 PDT)
• [CLA-2003:633] REVISED: Conectiva Security Announcement - glibc Conectiva Updates (Wed Apr 30 2003 - 14:24:16 PDT)
• [CLA-2003:635] Conectiva Security Announcement - balsa Conectiva Updates (Wed Apr 30 2003 - 14:45:13 PDT)

Last message date: Wed Apr 30 2003 - 14:45:13 PDT
Archived on: Thu May 01 2003 - 13:58:44 PDT

This archive was generated by hypermail 2b30 : Thu May 01 2003 - 13:58:44 PDT