security.bugtraq (date)

security.bugtraq (date)

January 31, 2003

Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability, security
Mirror of the SecurityFocus BID, Nicob
[RHSA-2003:020-09] Updated kerberos packages fix vulnerability in ftp client, bugzilla
[RHSA-2003:020-10] Updated kerberos packages fix vulnerability in ftp client, redhat-announce-list-admin

January 30, 2003

Re: 3Ware 3DM denial of service attack, Jason Giglio
"Compaq Web Agent" management session can be re-used without the need to perform authentication, Eitan Caspi
Apache Jakarta Tomcat 3 URL parsing vulnerability, Jouko Pynnonen
3Ware 3DM denial of service attack, Neulinger, Nathan
Response to David Litchfield on Responsible Disclosure and Infosec Research, Jason Coombs
RE: MSDE contained in..., Bruce McLeod
Re: David Litchfield talks about the SQL Worm in the Washington Post, auto68182
Re: iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords, auto68182
Re: Zorum Portal (PHP), MightyE
[VulnDiscuss] Re: proftpd <=1.2.7rc3 DoS, ????????? `??????' ??????
Microsoft RPC Locator Buffer Overflow Vulnerability (#NISR29012003), NGSSoftware Insight Security Research

January 29, 2003

SPIKE Proxy 1.4.7 is now available, Dave Aitel
(no subject), backed . up . by . 2048 . bit . encryption
Re: David Litchfield talks about the SQL Worm in the Washington Post, David Litchfield
Re: Local root vuln in SuSE 8.0 plptools package, Roman Drahtmueller
Re[2]: Zorum Portal (PHP), Messer
iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords, iDEFENSE Labs
David Litchfield talks about the SQL Worm in the Washington Post, Richard M. Smith
Re: dotproject Remote Code Execution Vulnerability : Patch, Frog Man
Local root vuln in SuSE 8.0 plptools package, Carl Livitt
[OpenPKG-SA-2003.008] OpenPKG Security Advisory (mysql), OpenPKG
[SECURITY] [DSA 246-1] New tomcat packages fix information exposure and cross site scripting, Martin Schulze
dotproject Remote Code Execution Vulnerability, mindwarper
MIT Kerberos FTP client remote shell commands execution, Fozzy [Hackademy Audit]

January 28, 2003

MITKRB5-SA-2003-001: Multiple vulnerabilities in old releases of MIT Kerberos, Ken Raeburn
VERITAS Software Technical Advisory (fwd), Dave Ahmad
Tech Article: HTTP Content Filter Analysis - Finjan SurfinGate V5.6, ivan.buetler@xxxxxxx
Cisco Security Advisory: Cisco Security Advisory: Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061, Cisco Systems Product Security Incident Response Team
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, trent dilkie
[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood, Martin Schulze
[VulnDiscuss] CERT, Mark Litchfield
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Erik Enge
Black Hat Announcements, Jeff Moss
ProxyView default undocumented password, Michael Brown
Incorrect Certificate Validation in Java Secure Socket Extension, Alex Loots
RE: Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Brett Moore
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Albert Sunseri

January 27, 2003

MDKSA-2003:011 - Updated fetchmail packages fix remote exploit vulnerability, Mandrake Linux Security Team
[ANNOUNCE] WaveLock 1.0 Released, Marco Peretti
Security Issues in Rediff Bol Messenger, S G Masood
Re: Mailman: cross-site scripting bug, Axel Beckert - ecos gmbh
[SCSA-003] Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan, Grégory
Re: Mailman: cross-site scripting bug, Barry Warsaw
Re: New security tool: ike-scan (IPsec IKE scanner) released, Philipp Wuensche
[ESA-20030127-001] MySQL vulnerabilities, EnGarde Secure Linux
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Ron DuFresne
[ESA-20030127-002] fetchmail-ssl: heap overflow vulnerability, EnGarde Secure Linux
[ESA-20030127-002] fetchmail-ssl: heap overflow vulnerability, EnGarde Secure Linux
[ESA-20030127-001] MySQL vulnerabilities, EnGarde Secure Linux
New security tool: ike-scan (IPsec IKE scanner) released, Roy Hills
RE: Eudora Message Deletion Weakness, Bojan Zdrnja
Re: graphical stats of new SQL worm, abretten
[SECURITY] [DSA 244-1] New noffle packages fix buffer overflows, Martin Schulze
dotproject Remote File Access Vulnerability, mindwarper
Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities, Wojciech Purczynski
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Ron DuFresne
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, moksha faced
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jason Coombs
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Schmehl, Paul L
graphical stats of new SQL worm, Mark J. Lastdrager
Hypermail buffer overflows, Ulf Harnhammar
[VulnDiscuss] Re: Zorum Portal (PHP), Frog Man
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Ron DuFresne

January 26, 2003

RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, jmcguire
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Curt Purdy
Re: [VulnDiscuss] Sapphire SQL Worm Analysis Complete, Ieong Sze Chung Ricci
XS(T) attack variants which can, in some cases, eliminate the need for TRACE, Amit Klein
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Joe Klein
RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Schmehl, Paul L
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Greg A. Woods
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Matt Smith
Tool: Sapphire SQL Worm Scanner, Marc Maiffret
Re: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Benjamin Krueger
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Rick Kelly
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Dick St.Peters
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Arne Vidstrom
Re: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Ron DuFresne
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Eloy A. Paris
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Colm MacCárthaigh
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Andrew Emerson
Sapphire SQL Worm Analysis Complete, Matthew Murphy
Re[2]: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Stephane - BasicLink
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jason Coombs
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Brian McGrogan
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Charles Miller
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jason Coombs
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Colm MacCárthaigh
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Dave Aitel

January 25, 2003

Re: [VulnDiscuss] RE: Re: [VulnDiscuss] eEye - SQL Sapphire Worm Analysis, Mark Litchfield
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, John Howie
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, trent dilkie
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Richard M. Smith
RE: SQL Sapphire Worm Analysis, trent dilkie
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jason Coombs
RE: SQL Sapphire Worm Analysis, Marc Maiffret
[VulnDiscuss] RE: Re: [VulnDiscuss] eEye - SQL Sapphire Worm Analysis, Marc Maiffret
Blackboard 5.x & patched 5.x systems Password Retrieval, Cory Michal
Cisco Security Advisory: MS SQL "Sapphire" Worm Mitigation Recommendations, Cisco Systems Product Security Incident Response Team
SQL Sapphire Worm Analysis, Marc Maiffret
Re: [VulnDiscuss] eEye - SQL Sapphire Worm Analysis, Mark Litchfield
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, cstone
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Patrick Finch
eEye - SQL Sapphire Worm Analysis, Steve W. Manzuik
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Byron Morton
Re: WinRAR buffer overflow vulnerability < (probleme), Vergoz Michael (SYSDOOR)
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, H D Moore
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Geoff Shively
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jeff Mills
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, George William Herbert
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Ed Blanchfield
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Tom Kyle
Fw: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Jeremy Kister
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Mike Tindor
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Umit Tiric
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Carlos Eduardo Vianna
ftls.org Guestbook 1.1 Script Injection, BrainRawt .
Re: [USG- SA- 2003.001] USG Security Advisory (slocate), Kevin Lindsay
MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!, Michael Bacarella
List Site Pro v2 user account Hijacking vulnerablity, StatiX Statix
RE: Mailman: cross-site scripting bug, Leif Sawyer

January 24, 2003

Eudora Message Deletion Weakness, Blud Clot
Re: Attacking EFS through cached domain logon credentials, Todd Sabin
SpamAssassin / spamc+BSMTP remote buffer overflow, Timo Sirainen
Re: Nokia Product Security Contact?, Edsel Adap
[USG- SA- 2003.001] USG Security Advisory (slocate), inkubus
Re: New Web Vulnerability - Cross-Site Tracing, Andrew Clover
RE: DoS attack on Windows 2000 Terminal Server, Diogo Fernandes
[SECURITY] [DSA 241-1] New kdeutils packages fix several vulnerabilities, Martin Schulze
Vulnerability in edittag.pl, kers0r
Mailman: cross-site scripting bug, webmaster
[SECURITY] [DSA 243-1] New kdemultimedia packages fix several vulnerabilities, Martin Schulze
[SECURITY] [DSA 242-1] New kdebase packages fix several vulnerabilities, Martin Schulze
Test program for CVS double-free., Joe Testa
Re: Other Security Contacts Required (AutoDesk, Motorola and Vignette), Ollie Whitehouse
Nokia Product Security Contact?, Ollie Whitehouse
Another YabbSE Remote Code Execution Vulnerability, mindwarper
Re: SPRINT ADSL [Zyxel 645 Series Modem], FX
[VulnDiscuss] Re: New Web Vulnerability - Cross-Site Tracing, xss-is-lame
[VulnDiscuss] Re: TRACE used to increase the dangerous of XSS., Tim Greer
Re: TRACE used to increase the dangerous of XSS., Phrack
Re: New Web Vulnerability - Cross-Site Tracing, Steven M. Christey
DoS attack on Windows 2000 Terminal Server, Jonathan Hunter
RE: [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing, Steven M. Christey
Re: New Web Vulnerability - Cross-Site Tracing, xss-is-lame
[CLA-2003:562] Conectiva Linux Security Announcement - dhcp, secure

January 23, 2003

[VulnDiscuss] RE: [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing, Richard M. Smith
Re: New Web Vulnerability - Cross-Site Tracing, Steven M. Christey
5861 IP Filtering issues, Edward wilkinson
[CLA-2003:564] Conectiva Linux Security Announcement - libpng, secure
MDKSA-2003:009 - Updated cvs packages fix multiple vulnerabilities, Mandrake Linux Security Team
RE: TRACE used to increase the dangerous of XSS., Jason Coombs
Astaro Security Linux Firewall - HTTP Proxy vulnerability, Volker Tanger
Re: TRACE used to increase the dangerous of XSS., Peter Watkins
phpLinks mail() abuse Vulnerability, mindwarper
Re: SPRINT ADSL [Zyxel 645 Series Modem], Raymond Dijkxhoorn
[SECURITY] [DSA 240-1] New kdegames packages fix several vulnerabilities, Martin Schulze
[security@xxxxxxxxxxxxx: [slackware-security] New DHCP packages available], White Vampire
[OpenPKG-SA-2003.007] OpenPKG Security Advisory (wget), OpenPKG
Re: [VulnDiscuss] Re: TRACE used to increase the dangerous of XSS., Kevin Spett
SuSE Security Announcement: dhcp (SuSE-SA:2003:0006), Thomas Biege
IE chain vulnerability, Alex Loots
[VulnDiscuss] RE: TRACE used to increase the dangerous of XSS., Thor Larholm
DoS in Hotsync Manager (with network hotsync enabled), Gary H. Jones II
[VulnDiscuss] Re: TRACE used to increase the dangerous of XSS., Jeremiah Grossman
[CLA-2003:561] Conectiva Linux Security Announcement - cvs, secure
[SECURITY] [DSA 239-1] New kdesdk packages fix several vulnerabilities, Martin Schulze
SPRINT ADSL [Zyxel 645 Series Modem], http-equiv@xxxxxxxxxx
[SECURITY] [DSA 237-1] New kdenetwork packages fix several vulnerabilities, Martin Schulze
[SECURITY] [DSA 238-1] New kdepim packages fix several vulnerabilities, Martin Schulze
RE: TRACE used to increase the dangerous of XSS., Richard M. Smith
Re: [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing, Thor Larholm
Re: [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing, zeno
Re: TRACE used to increase the dangerous of XSS., Sverre H. Huseby
RE: TRACE used to increase the dangerous of XSS., Thor Larholm
RE: TRACE used to increase the dangerous of XSS., Thor Larholm
[OpenPKG-SA-2003.006] OpenPKG Security Advisory (python), OpenPKG
Re: New Web Vulnerability - Cross-Site Tracing, H D Moore
[security@xxxxxxxxxxxxx: [slackware-security] New CVS packages available], White Vampire
Re: TRACE used to increase the dangerous of XSS., Jeremiah Grossman
Re: TRACE used to increase the dangerous of XSS., Doug Monroe
Re: New Web Vulnerability - Cross-Site Tracing, Tim Greer
Re: New Web Vulnerability - Cross-Site Tracing, Jeremiah Grossman
Re: New Web Vulnerability - Cross-Site Tracing, Tim Greer
Re: New Web Vulnerability - Cross-Site Tracing, Jeremiah Grossman
[ANNOUNCE] Apache 2.0.44 Released, Lars Eilebrecht
Re: New Web Vulnerability - Cross-Site Tracing, Marc Slemko
[VulnDiscuss] Re: New Web Vulnerability - Cross-Site Tracing, xss-is-lame
[VulnDiscuss] RE: TRACE used to increase the dangerous of XSS., Jeremiah Grossman

January 22, 2003

[VulnDiscuss] RE: TRACE used to increase the dangerous of XSS., Richard M. Smith
Updated patches for SGI Advisories 20020903-02-P and 20021103-01-P, SGI Security Coordinator
[OpenPKG-SA-2003.003] OpenPKG Security Advisory (vim), OpenPKG
[SCSA-001] Sambar Server Cross-Site Scripting vulnerability, Grégory
RE: TRACE used to increase the dangerous of XSS., Richard M. Smith
ISS Security Brief: PeopleSoft XML External Entities Vulnerability (fwd), Dave Ahmad
SuSE Security Announcement: susehelp (SuSE-SA:2003:005), Sebastian Krahmer
[OpenPKG-SA-2003.004] OpenPKG Security Advisory (cvs), OpenPKG
TRACE used to increase the dangerous of XSS., Jeremiah Grossman
Zorum Portal (PHP), MGhz
[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution, Martin Schulze
MDKSA-2003:010 - Updated printer-drivers packages fix local vulnerabilities, Mandrake Linux Security Team
Re: XSS (Cross Site Scripting) on FormMail.CGI, Scott Buchanan
[SECURITY] [DSA 235-1] New kdegraphics packages fix several vulnerabilities, Martin Schulze
[SECURITY] [DSA 234-1] New kdeadmin packages fix several vulnerabilities, Martin Schulze
Whitepaper - Detecting Wireless LAN MAC Address Spoofing, Joshua Wright
iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package, iDEFENSE Labs
WinRAR buffer overflow vulnerability, nesumin
Entercept Ricochet Advisory: Sun Solaris KCMS Library Service Daemon Arbitrary File Retrieval Vulnerability, Entercept Ricochet Team
YabbSE Remote Code Execution Vulnerability, mindwarper
New Web Vulnerability - Cross-Site Tracing, Pete Soderling
More Critical Vulnerabilities In PHP Topsites, JeiAr
RE: Attacking EFS through cached domain logon credentials, John Howie
GLSA: cvs, Daniel Ahlberg
PHPMyPub (PHP), Frog Man
Re: More information regarding Etherleak, Manuel Bouyer
Path Parsing Errata in Apache HTTP Server, mattmurphy@xxxxxxxxx
FTP delete file problem, K B
MyRoom (PHP), Frog Man
RUXCON - 12/13 April, 2003. SYDNEY, Australia., RuxCon
certificate x.509 and outlook express 6, fabio miotti

January 21, 2003

Re: Opentype font file causes Windows to restart., Chris Ridd
Security Update: [CSSA-2003-005.0] Linux: canna buffer overflow and denial of service, security
GLSA: dhcp, Daniel Ahlberg
MDKSA-2003:007 - Updated dhcp packages fix remote code execution vulnerability, Mandrake Linux Security Team
PivX Multi-Vendor Game Server dDoS Advisory, Mike Kristovich
Re: Security Industry Under Scrutiny #4, Silvio Cesare
IRIX ToolTalk RPC Server Format String Vulnerability update, SGI Security Coordinator
Call For Papers -- RAID 2003, Joshua Haines
[RHSA-2002:202-25] Updated python packages fix predictable temporary file, redhat-announce-list-admin
Blackboard 5.x Password Retrieval, Pedram Amini
Re: MySQL 3.23.54a can be crased with a exploit for 3.23.53, Sergei Golubchik
MySQL 3.23.54a can be crased with a exploit for 3.23.53, Dennis Kruyt
Security Industry Under Scrutiny #4, sockz loves you
Re: php-nuke again ..., Pawel Kaczor
[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution, Martin Schulze
Re: Local/remote mpg123 exploit, Gabucino
Re: Bug in w-agora, Ian Clelland
Attacking EFS through cached domain logon credentials, Todd Sabin
Gabber 0.8.7 leaks presence information without user authorization, Greg Troxel
GLSA: fnord, Daniel Ahlberg
MDKSA-2002:073-1 - Updated krb5 packages fix incorrect initscripts, Mandrake Linux Security Team
Re: D-Link DWL-900AP+ Security Hole, Dan
Multiple PHP Topsites Vulnerabities found, Cyberarmy Application and Code Auditing Team
vSignup, vAuthenticate (PHP), Frog Man
[SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak, Martin Schulze
Security Update: [CSSA-2003-004.0] Linux: Multiple Security Vulnerabilities in the Common Unix Printing System (CUPS), security
GLSA: kde-2.2.x, Daniel Ahlberg
[SECURITY] [DSA 230-1] New bugzilla packages fix unauthorized data modification, Martin Schulze
DoS against DHCP infrastructure with isc dhcrelay, Florian Lohoff
RE: More information regarding Etherleak, Basil Hussain

January 20, 2003

Re: More information regarding Etherleak, Manuel Bouyer
Cyboards Remote Code Execution, mindwarper
CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library (fwd), Dave Ahmad
Microsoft-ds xploit (UDP/TCP)..., Daniel Nyström
Multiple Vulnerabilties In PHPLinks, JeiAr
[RHSA-2003:012-07] Updated CVS packages available, bugzilla
Advisory 01/2003: CVS remote vulnerability, Stefan Esser
phpPass (PHP), Frog Man

January 19, 2003

.: Sambar Server Cross-Site Scripting vulnerability :., galiarept [security-corp]
Re: NIS 2003 crash, Sym Security

January 18, 2003

CuteFTP 5.0 XP, Buffer Overflow, Lance Fitz-Herbert
[OpenPKG-SA-2003.002] OpenPKG Security Advisory (dhcpd), OpenPKG

January 17, 2003

[SECURITY] [DSA 231-1] New dhcp3 packages fix arbitrary code execution, Martin Schulze
RE: Opentype font file causes Windows to restart., Armstrong, Richard
Security Update: [CSSA-2003.003.0] Linux: wget directory traversal and buffer overrun vulnerabilities, security
Outreach Project Tool, Martin Eiszner
phpBB SQL Injection vulnerability, Ulf Harnhammar

January 16, 2003

Re: Bug in w-agora, Nicob
Re[2]: Local/remote mpg123 exploit, 3APA3A
Re: Local/remote mpg123 exploit, Daniel Kobras
[SECURITY] [DSA 229-1] New IMP packages fix SQL injection, Martin Schulze
[RHSA-2002:297-17] Updated vim packages fix modeline vulnerability, redhat-announce-list-admin
[RHSA-2003:011-07] Updated dhcp packages fix security vulnerabilities, redhat-announce-list-admin

January 15, 2003

NIS 2003, Pavel P .
Multiple XSS in Geeklog 1.3.7, snooq
D-Link DWL-900AP+ Security Hole, Jason Tedesco
Re: More information regarding Etherleak, Peter Turczak
MDKSA-2003:006 - Updated OpenLDAP packages fix multiple vulnerabilities, Mandrake Linux Security Team
[SECURITY] [DSA 229-2] New IMP packages fix SQL injection and typo, Martin Schulze
stunnel - exploit, Darell Esfandia
[OpenPKG-SA-2003.001] OpenPKG Security Advisory (png), OpenPKG
Security Update: [CSSA-2003-SCO.2] UnixWare 7.1.1 : multiple vulnerabilities in BIND (CERT CA-2002-31), security
Re: Local/remote mpg123 exploit, 3APA3A
php-nuke again ..., Karol Więsek
Re: Local/remote mpg123 exploit / 3APAPAPA insights, gobbles
Re: Local/remote mpg123 exploit, Benjamin Tober
[RHSA-2002:288-22] Updated MySQL packages fix various security issues, bugzilla
MDKSA-2003:005 - Updated leafnode packages fix remote DoS vulnerability, Mandrake Linux Security Team
Re: IMP 2.x SQL injection vulnerabilities, Sylvain Robitaille
RAID 2003 CFP, Joshua Haines
Vulnerability in WebCollection Plus (TM), f0urtyfive

January 14, 2003

[RHSA-2003:001-16] Updated PostgreSQL packages fix security issues and bugs, bugzilla
[RHSA-2003:010-10] Updated PostgreSQL packages fix buffer overrun vulnerabilities, bugzilla
SuSE Security Announcement: libpng (SuSE-SA:2003:0004), Thomas Biege
MDKSA-2003:004 - Updated KDE packages fix multiple vulnerabilities, Mandrake Linux Security Team

January 13, 2003

Buffer Overflow in uucp of SunOS 5.8, hipnosis hipnosis
Local/remote mpg123 exploit, gobbles
SIGCHLD problem in Stunnel, Jonas Eriksson
Bug in w-agora, sonyy
GLSA: mod_php php, Daniel Ahlberg
A patch for "Windows WM_TIMER Message Handling flaw" causes random crashes on Windows NT, Tomasz Ostrowski
[RHSA-2002:295-07] Updated CUPS packages fix various vulnerabilities, bugzilla
[SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit, Martin Schulze
[RHSA-2003:006-06] Updated libpng packages fix buffer overflow, redhat-announce-list-admin

January 12, 2003

Vulnerabilties in Xynph FTP Server 1.0, Zero-X www.lobnan.de Team
isc dhcpd 3.0 format string exploit, VOID.AT Security
XSS (Cross Site Scripting) on FormMail.CGI, Rynho Zeros Web
[VSA0303] Half-Life StatsMe remote (root) hole, VOID.AT Security
[VSA0302] Half-Life Adminmod remote (root) hole, VOID.AT Security

January 11, 2003

[VSA0306] YABBSE 1.4.1 SQL Injection Bugs, VOID.AT Security
[VSA0302] Half-Life Adminmod remote (root) hole, VOID.AT Security
middleman-1.2 and prior off-by-one bug, qitest1
Re: ps information leak in FreeBSD, David M. Wilson
Re: A security vulnerability in S8Forum, David Wilson
[VSA0303] Half-Life StatsMe remote (root) hole, VOID.AT Security
[SECURITY] [DSA 225-1] New tomcat packages fix source disclosure vulnerability, Martin Schulze
Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin, 3APA3A
Request for assistance: trying to find Zardoz Security Digest Files, Curator at The 'Security Digest' Archives
MDKSA-2003:002 - Updated xpdf packages fix integer overflow vulnerability, Mandrake Linux Security Team
Mambo Site Server Remote Code Execution, mindwarper
BitKeeper remote shell command execution/local vulnerability, Maurycy Prodeus
Mambo Site Server Remote Code Execution, Mindwarper

January 10, 2003

Security Update: [CSSA-2003-SCO.1] UnixWare 7.1.1 Open UNIX 8.0.0 : command line argument buffer overflow in ps, security
Security Update: [CSSA-2003-002.0] Linux: Webmin Cross-site Scripting and Session ID Spoofing Vulnerabilities, security
[VulnDiscuss] Re: Efficient Networks 5861 DSL Router, Andrew Hodgson
real one player /intel signal processing library/ windows xp, simon59
[VSA0305] HLTV remote DoS, VOID.AT Security
[VSA0304] Half-Life Client remote hole via Adminmod plugin, VOID.AT Security
[VSA0301] Half-Life Clanmod remote (root) hole, VOID.AT Security
More information regarding Etherleak, Ofir Arkin
BRS WebWeaver FTP Server vulnerabilities, euronymous
MDKSA-2003:001 - Updated CUPS packages fix multiple vulnerabilities, Mandrake Linux Security Team
MDKSA-2003:003 - Updated dhcpcd packages fix character expansion vulnerability, Mandrake Linux Security Team
Efficient Networks 5861 DSL Router, Greg Bolshaw

January 09, 2003

Re: ps information leak in FreeBSD, Damien Miller
Security Update: [CSSA-2003-001.0] Linux: fetchmail at-sign buffer overflow vulnerability, security
WebIntelligence session hijacking vulnerability, Dirk Van Droogenbroeck
[RHSA-2002:290-07] Updated Ethereal packages are available, redhat-announce-list-admin
Re: Opentype font file causes Windows to restart., Kaspar Brand

January 08, 2003

IMP 2.x SQL injection vulnerabilities, Jouko Pynnonen
Re: ps information leak in FreeBSD, Sean Kelly
RE: KaZaA - Bad Zone, Young, Keith
Re: KaZaA - Bad Zone, Thomas
Re: KaZaA - Bad Zone, Gideon12
Re[2]: Opentype font file causes Windows to restart., Andrew
a.shopKart Shopping Cart remote vulnerabilities, Ignacio Vazquez
IEHK Project, Valgasu
Re: ps information leak in FreeBSD, Crist J. Clark
Re: Directory traversal bug in Communigate Pro 4's Webmail service, Albert Bendicho
Re: A security vulnerability in S8Forum, Steve Watt
[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service, Martin Schulze
GLSA: libpng, Daniel Ahlberg
[VulnDiscuss] Tanne Remote format string exploit (Proof of Concept), dong-h0un yoU
Netscape Browsers Vulnerabilities on IRIX, SGI Security Coordinator

January 07, 2003

GLSA: lcdproc, Daniel Ahlberg
Re: Opentype font file causes Windows to restart., Vess Nedevski
Re: KaZaA - Bad Zone, tony
[VulnDiscuss] Re: Opentype font file causes Windows to restart., Philippe Letrait
Re: [VulnDiscuss] Re: Opentype font file causes Windows to restart - rename .TTF, Alan Olsen
Re: Opentype font file causes Windows to restart., Berend-Jan Wever
Re: Opentype font file causes Windows to restart., Kim Scarborough
FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc, FreeBSD Security Advisories
Re: [VulnDiscuss] Re: Opentype font file causes Windows to restart., Mark Litchfield
[VulnDiscuss] Re: Opentype font file causes Windows to restart - rename .TTF, Mark Litchfield
KaZaA - Bad Zone, David Krum
[VulnDiscuss] Re: Opentype font file causes Windows to restart., sysadmin
Re: Opentype font file causes Windows to restart., Floyd Russell
RE: Opentype font file causes Windows to restart., Ben Naylor
[VulnDiscuss] RE: Opentype font file causes Windows to restart., Discini, Sonny
Re: Opentype font file causes Windows to restart., dildog
Multiple cgihtml vulnerabilities, Chris Leishman
Re: ps information leak in FreeBSD, Jez Hancock
[SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution, Martin Schulze
[SECURITY] [DSA 223-1] New geneweb packages fix information exposure, Martin Schulze
[INetCop Security Advisory] Remote format string vulnerability in Tanne., dong-h0un yoU
GLSA: http-fetcher, Daniel Ahlberg
[VulnDiscuss] Re: Opentype font file causes Windows to restart., Andreas Marx
[RHSA-2002:283-09] Updated cyrus-sasl packages fix buffer overflows, redhat-announce-list-admin
Multiple Vulnerabilities in Sendmail on IRIX, SGI Security Coordinator
[VulnDiscuss] Re[2]: Opentype font file causes Windows to restart., Andrew
[VulnDiscuss] Re: Opentype font file causes Windows to restart., Berend-Jan Wever

January 06, 2003

Re: Opentype font file causes Windows to restart., Steven Tucker
A security vulnerability in S8Forum, nmsh_sa
Multiple Issues in Nettelephone Dialer, S G Masood
GLSA: dhcpcd, Daniel Ahlberg
Re: Opentype font file causes Windows to restart., Tiina Anita Muukkonen
Re: ipfilter denial of service problem, Darren Reed
Directory traversal bug in Communigate Pro 4's Webmail service, G.P.de.Boer
Re: ps information leak in FreeBSD, Sean Kelly
Fw: Opentype font file causes Windows to restart., Leonardo Rodrigues ( listas )
[VulnDiscuss] Re: Opentype font file causes Windows to restart., Matthew_J_Fredericks
Bookmar4U and Active PHP Bookmarks Vulnerabilities, itzhak
Re: Longshine WLAN Access-Point LCS-883R VU#310201, heydowns
Re: Opentype font file causes Windows to restart., Mark Litchfield
Re: OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS, Global InterSec Research
E-theni (PHP), Frog Man
GLSA: libmcrypt, Daniel Ahlberg
phpmynuke css and phpinfo() vuls, Mindwarper
DCP-Portal (PHP), Frog Man
Re: ipfilter denial of service problem, Russ Dill
ps information leak in FreeBSD, Cache
ipfilter denial of service problem, Yiming Gong
Longshine WLAN Access-Point LCS-883R VU#310201, Lukas Grunwald
[INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library., dong-h0un yoU
Etherleak: Ethernet frame padding information leakage (A010603-1), @stake Advisories
Remote root vuln in HSphere WebShell, Carl Livitt
OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS, mmhs
ps information leak in FreeBSD, Cache
Opentype font file causes Windows to restart., Andrew
PDS: Integer overflow in FreeBSD kernel, Joost Pol

January 05, 2003

S-plus /tmp usage, Paul Szabo

January 04, 2003

Re: [IPS] PUTTY SSH-Client Exploit, Owen Dunn
OpenTopic security hole, Frog Man
AN HTTPd v.1.41e: DoS, CSS, real patch attack, D4rkGr3y
Re: Potential disclosure of sensitive information in Netscape 7.0 email client, Markus Gaugusch
EServ/2.97 remote DoS, D4rkGr3y
CuteFTP: buffer overflow, D4rkGr3y
WinAmp v.3.0: buffer overflow, D4rkGr3y

January 03, 2003

Multiple libmcrypt vulnerabilities, Ilia A.
Another way to bypass Integrity Protection Driver ('subst' vuln), Jan Rutkowski
Pedestal Software Security Notice, Keith Woodard
[RHSA-2002:270-16] Updated pine packages available, bugzilla
fam Vulnerability Update, SGI Security Coordinator
Solaris 2.x /usr/sbin/wall Advisory, Brant Roman
[SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting, Martin Schulze
Re: JS Bug makes it possible to deliberately crash Pocket PC IE (fwd), angus
JS Bug makes it possible to deliberately crash Pocket PC IE, Christopher Sogge Røtnes
ical 3.7 remote dos, securma massine
Re: Potential disclosure of sensitive information in Netscape 7.0 email client, Blud Clot

January 02, 2003

[BUGZILLA] Security Advisory - remote database password disclosure, David Miller
Re: Filtering devices spotting, Darren Reed
SuSE Security Announcement: fetchmail (SuSE-SA:2003:001), Thomas Biege
N/X (PHP), Frog Man
[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem, Martin Schulze
Re: Potential disclosure of sensitive information in Netscape 7.0 email client, Bartek Raszczyk
SuSE Security Announcement: mysql (SuSE-SA:2003:003), Sebastian Krahmer
GLSA: leafnode, Daniel Ahlberg
GLSA: xpdf, Daniel Ahlberg
SuSE Security Announcement: cups (SuSE-SA:2003:002), Thomas Biege

January 01, 2003

Potential disclosure of sensitive information in Netscape 7.0 email client, Michael Puchol
Filtering devices spotting, Ed3f

News | FAQ | advertise