Bugtraq: by author

395 messages starting Dec 23 99 and ending Dec 27 99
Date index | Thread index | Author index


Aaron Sigel

FYI, SCO Security patches available. Aaron Sigel (Dec 23)

A Bloke

IRCnet IRCD 2.0x Reboot Bug A Bloke (Dec 15)

Adam Simms

Error in System Policies Adam Simms (Dec 10)

Ajax

Re: Wmmon under FreeBSD Ajax (Dec 21)

Alain Thivillon

serious Lotus Domino HTTP denial of service Alain Thivillon (Dec 21)

Alan Cox

Re: The "Mac DoS Attack," a Scheme for Blocking Internet Connections Alan Cox (Dec 29)
Re: Various Errors in Slackware Alan Cox (Dec 22)
Re: BUG? Non-root user can configure traffic shaper (2.2.13) (fwd) Alan Cox (Dec 27)

Alec Kosky

Re: HP Secure Web Console Alec Kosky (Dec 01)

Aleph One

xsw 1.24 remote buffer overflow Aleph One (Dec 09)
Microsoft Security Bulletin (MS99-060) Aleph One (Dec 22)
w00giving #8] Solaris 2.7's snoop Aleph One (Dec 06)
[Debian] New version of htdig released Aleph One (Dec 10)
Sun Security Bulletin #00190 Aleph One (Dec 09)
CERT Advisory CA-99.15 - Buffer Overflows in SSH Daemon and RSAREF2 Library Aleph One (Dec 14)
[Debian] New version of sendmail released Aleph One (Dec 07)
Security Vulnerability in VVOS TGP Aleph One (Dec 14)
Microsoft Security Bulletin (MS99-061) Aleph One (Dec 21)
HP-UX: Security Vulnerability in wu-ftp Aleph One (Dec 13)
Microsoft Security Bulletin (MS99-057) Aleph One (Dec 16)
Microsoft Security Bulletin (MS99-055) Aleph One (Dec 09)
ISSalert: ISS Security Advisory: Buffer Overflow in Solaris Snoop Aleph One (Dec 09)
Re: Reinventing the wheel (aka "Decoding Netscape Mail passwords") Aleph One (Dec 16)
Microsoft Security Bulletin (MS99-054) Aleph One (Dec 02)
Microsoft Security Bulletin (MS99-050) Aleph One (Dec 09)
CERT Advisory CA-99-17 Denial-of-Service Tools Aleph One (Dec 29)
Microsoft Security Bulletin (MS99-056) Aleph One (Dec 16)
Microsoft Security Bulletin (MS99-058) Aleph One (Dec 21)
Microsoft Security Bulletin (MS99-053) Aleph One (Dec 02)
Corrected URL in Security Bulletin MS99-052 Aleph One (Nov 30)
ISS Security Advisory: Buffer Overflow in Netscape Enterprise and FastTrack Authentication Procedure Aleph One (Dec 01)

Alexey Chetroi

Re: ftp conversions exploit Alexey Chetroi (Dec 23)

Alfred Huger

Solaris sadmind Buffer Overflow Vulnerability Alfred Huger (Dec 10)
From the SCO Security Page Alfred Huger (Dec 06)
Clarification needed on the snoop vuln(s) Alfred Huger (Dec 09)
Privacy hole in Go Express Search Alfred Huger (Dec 13)
Clarification needed on the snoop vuln(s) (fwd) Alfred Huger (Dec 09)

Andrea Arcangeli

Re: Big problem on linux 2.0 Andrea Arcangeli (Dec 14)
[patch] Re: Big problem on 2.0.x? Andrea Arcangeli (Dec 14)

Andrew Brown

Re: majordomo local exploit Andrew Brown (Dec 30)

Andrew Frith

Re: Groupwise Web Interface Andrew Frith (Dec 22)

Andrew_Kunz () TDGROUP COM

Re: Security Patches for Slackware 7.0 Available (fwd) Andrew_Kunz () TDGROUP COM (Dec 01)

Andrew Malcolm

Recent postings about SCO UnixWare 7 Andrew Malcolm (Dec 15)

Anthony D. Urso

Re: Solaris sadmind Buffer Overflow Vulnerability Anthony D. Urso (Dec 12)

antirez () INVECE ORG

Re: FTP denial of service attack antirez () INVECE ORG (Dec 09)
Re: FTP denial of service attack antirez () INVECE ORG (Dec 07)

Arne Vidstrom

Windows NT Task Scheduler vulnerability allows user to administrator elevation Arne Vidstrom (Dec 01)

Arvel Hathcock

Apologies to USSRLABS Arvel Hathcock (Dec 03)
Fwd: RE: Multiples Remotes DoS Attacks in MDaemon Server v2.8.5.0 Vulnerability Arvel Hathcock (Nov 30)

asl () USA ALCATEL COM

Trend Micro InterScan VirusWall SMTP bug asl () USA ALCATEL COM (Dec 27)

AVsearch

Re: Follow UP AltaVista AVsearch (Dec 30)

Bayard G. Bell

Re: Groupewise Web Interface Bayard G. Bell (Dec 21)
Re: Groupewise Web Interface Bayard G. Bell (Dec 21)

Ben Greenbaum

Subst.exe carelessness (fwd) Ben Greenbaum (Nov 30)
Re: Remote DoS/Access Attack in Internet Anywhere Mail Server(POP 3) v2.3.1 Ben Greenbaum (Dec 28)

Benjamin Congdon

Re: [w00giving '99 #11] IMail's password encryption scheme Benjamin Congdon (Dec 22)

bert hubert

Re: FTP denial of service attack bert hubert (Dec 07)

Beto

Re: ssh-1.2.27 exploit Beto (Dec 15)
Re: ssh 1.2.27 exploit Beto (Dec 16)

BindView Security Advisory

BindView Security Advisory: Vulnerability in Windows NT's SYSKEY feature BindView Security Advisory (Dec 16)

bjr

[david () slackware com: New Patches for Slackware 7.0 Available] bjr (Nov 30)
[david () slackware com: New Patches for Slackware 4.0 Available] bjr (Nov 30)

Bohemian

Fw: NAV2000 Email Protection DoS Bohemian (Dec 17)

bow

RealMedia Server 5.0 Crasher (rmscrash.c) bow (Dec 22)

Brad Powell

Re: Solaris sadmind Buffer Overflow Vulnerability Brad Powell (Dec 10)
Re: sadmind again Brad Powell (Dec 10)

Bram Kerkhof

Lotus Notes HTTP cgi-bin vulnerability: possible workaround Bram Kerkhof (Dec 22)

Brian

Re: Groupewise Web Interface Brian (Dec 21)
Re: Groupewise Web Interface Brian (Dec 21)
Re: Groupwise Web Interface Brian (Dec 21)

Brian Eckman

Re: ISS Security Advisory: Buffer Overflow in Netscape Enterprise andFastTrack Authentication Procedure Brian Eckman (Dec 08)

Brock Sides

Re: ISS Security Advisory: Buffer Overflow in Netscape Enterprise and FastTrack Authentication Procedure Brock Sides (Dec 03)
Re: majordomo local exploit Brock Sides (Dec 29)

Brock Tellier

Apologies for wierd email Brock Tellier (Dec 05)
Re: SCO OpenServer Security Status Brock Tellier (Dec 21)
UnixWare 7 gethostbyname() overflow Brock Tellier (Dec 02)
Re: UnixWare local pis exploit (mkpis as well) Brock Tellier (Dec 29)
UnixWare local pis exploit Brock Tellier (Dec 27)
FreeBSD 3.3 xsoldier root exploit Brock Tellier (Dec 15)
Netscape FastTrack httpd remote exploit Brock Tellier (Dec 31)
UnixWare pkg* command exploits Brock Tellier (Dec 04)
FreeBSD 3.3 gated-3.1.5 local exploit Brock Tellier (Nov 30)
Fundamental flaw in UnixWare 7 security Brock Tellier (Dec 10)
Several FreeBSD-3.3 vulnerabilities Brock Tellier (Nov 30)
UnixWare 7 uidadmin exploit + discussion Brock Tellier (Dec 02)
Solaris 2.7 dmispd local/remote problems Brock Tellier (Dec 22)
IBM NetStation/UnixWare local root exploit Brock Tellier (Dec 27)
Solaris 2.x chkperm/arp vulnerabilities Brock Tellier (Nov 30)
majordomo local exploit Brock Tellier (Dec 28)
UnixWare and the dacread permission Brock Tellier (Dec 03)
UnixWare coredumps follow symlinks Brock Tellier (Dec 02)
UnixWare gain root with non-su/gid binaries Brock Tellier (Dec 03)
UnixWare i2odialogd remote root exploit Brock Tellier (Dec 21)
UnixWare read/modify users' mail Brock Tellier (Dec 03)
Re: [Re: Several FreeBSD-3.3 vulnerabilities] Brock Tellier (Dec 01)
UnixWare rtpm exploit + discussion Brock Tellier (Dec 30)

Bryan Blackburn

Fwd: Sun Security Bulletin #00191 Bryan Blackburn (Dec 29)
Fwd: Sun Security Bulletin #00192 Bryan Blackburn (Dec 29)

bugtraq () NS DOOMSDAY COM

Re: Default IE 5.0 security settings allow frame spoofing bugtraq () NS DOOMSDAY COM (Dec 01)

Casper Dik

Re: procmail / Sendmail - five bugs Casper Dik (Dec 23)
Re: Solaris 2.x chkperm/arp vulnerabilities Casper Dik (Dec 03)
Re: sadmind exploits (remote sparc/x86) Casper Dik (Dec 10)

Chip Salzenberg

Re: majordomo local exploit Chip Salzenberg (Dec 29)

Chris

Re: Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT Chris (Dec 23)

Chris Paget

Re: NT WinLogon VM contains plaintext password visible in admin mode Chris Paget (Dec 09)
Re: NT WinLogon VM contains plaintext password visible in admin mode Chris Paget (Dec 08)

Christopher Schulte

Re: majordomo local exploit Christopher Schulte (Dec 28)
Re: Insecure default permissions for MailMan Professional Edition, Christopher Schulte (Dec 03)

Christopher X. Candreva

Re: majordomo local exploit Christopher X. Candreva (Dec 29)

Cody T. - hhp

Whois.cgi - ADVISORY. Cody T. - hhp (Nov 09)
WebWho+ ADVISORY Cody T. - hhp (Dec 26)

Coolio

Re: majordomo local exploit Coolio (Dec 29)

Craig Ruefenacht

Re: Solaris 2.x chkperm/arp vulnerabilities Craig Ruefenacht (Dec 06)

Dagmar d'Surreal

I erred *argh* Dagmar d'Surreal (Dec 21)
Various Errors in Slackware Dagmar d'Surreal (Dec 21)

Dan Groscost

Re: serious Qpopper 3.0 vulnerability Dan Groscost (Nov 30)

Daniel P. Stasinski

PC-Cillin 6.x DoS Attack Daniel P. Stasinski (Dec 30)

Daniel P. Zepeda

SSH 1 Why? Daniel P. Zepeda (Dec 14)

dark spyrit

Netscape Communicator 4.7 exploit [NT/win2k]. dark spyrit (Dec 03)

Darren Reed

Re: FTP denial of service attack Darren Reed (Dec 07)
FTP denial of service attack Darren Reed (Dec 07)
Re: FTP denial of service attack Darren Reed (Dec 08)
FTP DoS - PORT and PASV effected. Darren Reed (Dec 07)
Re: FTP denial of service attack Darren Reed (Dec 07)
Re: FTP denial of service attack Darren Reed (Dec 07)

Dave Dittrich

Re: Analysis of "stacheldraht" Dave Dittrich (Dec 31)
Analysis of trin00 Dave Dittrich (Dec 07)
Analysis of Tribe Flood Network Dave Dittrich (Dec 07)
Re: Analysis of "stacheldraht" Dave Dittrich (Dec 31)
Analysis of "stacheldraht" Dave Dittrich (Dec 30)

David Ford

Re: Various Errors in Slackware David Ford (Dec 21)

David F. Skoll

More on Red Hat 6.1 sysklogd David F. Skoll (Dec 19)

David LeBlanc

Re: NT WinLogon VM contains plaintext password visible in admin mode David LeBlanc (Dec 07)
Re: Microsoft Security Bulletin (MS99-051) (fwd) David LeBlanc (Dec 04)
Re: Microsoft Security Bulletin (MS99-051) (fwd) David LeBlanc (Nov 30)
Re: Local user can fool another to run executable. .CNT/.GID/.HLP M$WINNT David LeBlanc (Dec 07)

David Litchfield

Re: The money: protocol in Internet Explorer David Litchfield (Dec 21)

David Litchfield (Cerberus Information Security, Ltd)

A note on CIS and some new tools David Litchfield (Cerberus Information Security, Ltd) (Dec 03)

David Malone

Re: ftp conversions exploit David Malone (Dec 22)

David Schwartz

Re: sshd1 allows unencrypted sessions regardless of server policy David Schwartz (Dec 15)

David Zverina

Re: HP Secure Web Console David Zverina (Dec 02)

der Mouse

Re: Wmmon under FreeBSD der Mouse (Dec 27)
Re: Analysis of Tribe Flood Network der Mouse (Dec 09)
Re: Netscape password scrambling der Mouse (Dec 20)
Re: FTP denial of service attack der Mouse (Dec 08)
Re: strace can lie der Mouse (Dec 27)
Re: The "Mac DoS Attack," a Scheme for Blocking Internet Connections der Mouse (Dec 30)
Re: FTP denial of service attack der Mouse (Dec 07)
Re: FTP denial of service attack der Mouse (Dec 08)
Re: sshd1 allows unencrypted sessions regardless of server policy der Mouse (Dec 14)

Desi Hacker

Re: ftp conversions exploit Desi Hacker (Dec 21)

Dominic Mitchell

Re: Wmmon under FreeBSD Dominic Mitchell (Dec 24)

Doug Monroe

Re: ISS Security Advisory: Buffer Overflow in Netscape Enterprise and FastTrack Authentication Procedure Doug Monroe (Dec 02)

Doug Siebert

Fix for HP-UX automountd/autofs exploit (fwd) Doug Siebert (Dec 30)

Dustin Miller

Re: new IE5 remote exploit Dustin Miller (Dec 06)
Re: FTP denial of service attack Dustin Miller (Dec 07)

Eduardo Cruz

Big problem on 2.0.x? Eduardo Cruz (Dec 09)

Edward Glowacki

AltaVista followup and monitor script Edward Glowacki (Dec 29)

Elgin Lee

Re: serious Qpopper 3.0 vulnerability Elgin Lee (Nov 30)

Elias Levy

CERT Advisory CA-99-16 Buffer Overflow in Sun Solstice AdminSuite Daemon sadmind Elias Levy (Dec 14)
(Possible) Linuxconf Remote Buffer Overflow Vulnerability Elias Levy (Dec 21)

Emiel Kollof

Re: SSH 1 Why? Emiel Kollof (Dec 15)

Emiliano Kargieman

Re: SSH 1 Why? Emiliano Kargieman (Dec 15)

Emil S Hansen

Re: SSH 1 Why? Emil S Hansen (Dec 16)

Erik Fichtner

Re: sadmind exploits (remote sparc/x86) Erik Fichtner (Dec 10)

Federico - Comnet S.A.

Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Federico - Comnet S.A. (Dec 15)

Francis Favorini

Re: SUBST problem Francis Favorini (Dec 01)

Gary McGraw

Netscape password scrambling Gary McGraw (Dec 20)

Geo.

Re: NTmail and VRFY Geo. (Dec 01)

Georgi Guninski

IE 5.01 vulnerabilities in external.NavigateAndFind() Georgi Guninski (Dec 22)

Gerardo Richarte

Re: Security Advisory: Buffer overflow in RSAREF2 Gerardo Richarte (Dec 02)
RSAREF2 buffer overflow patch Gerardo Richarte (Dec 10)
Security Advisory: Buffer overflow in RSAREF2 Gerardo Richarte (Dec 01)

GNSS Research Division

Re: HP Secure Web Console GNSS Research Division (Dec 03)
Re: HP Secure Web Console GNSS Research Division (Dec 03)

Greg A. Woods

Re: Wmmon under FreeBSD Greg A. Woods (Dec 29)

Gregory A Lundberg

Re: ftp conversions exploit Gregory A Lundberg (Dec 24)
Re: FTP denial of service attack Gregory A Lundberg (Dec 10)

Hank Pike

Re: Fw: NAV2000 Email Protection DoS Hank Pike (Dec 20)

Henrik Edlund

Re: majordomo local exploit Henrik Edlund (Dec 29)
Re: majordomo local exploit Henrik Edlund (Dec 29)

Henrik Nordstrom

Re: FTP denial of service attack Henrik Nordstrom (Dec 07)
Re: FTP DoS - PORT and PASV effected. Henrik Nordstrom (Dec 09)
Re: FTP denial of service attack Henrik Nordstrom (Dec 07)
Re: majordomo local exploit Henrik Nordstrom (Dec 30)

Herve DEBAR

CFP: RAID 2000 (3rd workshop - Recent Advances in Intrusion Detection) Herve DEBAR (Dec 22)

Holger van Lengerich

Re: Reinventing the wheel (aka "Decoding Netscape Mail passwords") Holger van Lengerich (Dec 20)

Hugo.van.der.Kooij () CAIW NL

Re: FTP denial of service attack Hugo.van.der.Kooij () CAIW NL (Dec 08)
Re: Big problem on 2.0.x? Hugo.van.der.Kooij () CAIW NL (Dec 10)

Iván Arce

Re: ssh 1.2.27 exploit Iván Arce (Dec 15)
Re: SSH 1 Why? Iván Arce (Dec 16)
Re: ssh-1.2.27 exploit Iván Arce (Dec 13)
SSH-1.2.27 & RSAREF2 exploit Iván Arce (Dec 14)
ssh/rsaref bo exploit code Iván Arce (Dec 16)
Re: SSH-1.2.27 & RSAREF2 exploit Iván Arce (Dec 15)

Jacob Langseth

Re: Analysis of trin00 Jacob Langseth (Dec 09)

Jake Luck

64bit Sol7 on Ultra1 < 200mhz bug Jake Luck (Dec 11)

Jarek Kutylowski

ssh-1.2.27 exploit Jarek Kutylowski (Dec 13)

Jarle Aase

Statement: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Jarle Aase (Dec 16)

Jason Mills

Re: Big problem on 2.0.x? Jason Mills (Dec 13)

Jay Sherry

Re: Local user can fool another to run executable. .CNT/.GID/.HLP M$WINNT Jay Sherry (Dec 07)

Jefferson Ogata

Re: majordomo local exploit Jefferson Ogata (Dec 29)

Jens Frank

Re: Lotus Notes HTTP cgi-bin vulnerability: possible workaround Jens Frank (Dec 23)

Jeremy Kothe

new IE5 remote exploit Jeremy Kothe (Dec 05)

Joel Jaeggli

Re: The &quot;Mac DoS Attack,&quot; a Scheme for Blocking Internet Connections Joel Jaeggli (Dec 30)

John Copeland

The &quot;Mac DoS Attack,&quot; a Scheme for Blocking Internet Connections John Copeland (Dec 29)

John Riddoch

Re: Ultimate Bulletin Board v5.3x? Bug John Riddoch (Nov 30)

John Viega

Re: Reinventing the wheel (aka &quot;Decoding Netscape Mail passwords&quot;) John Viega (Dec 16)

Jon Mitchell

HP Secure Web Console Jon Mitchell (Dec 01)

Jordan Ritter

Re: Analysis of &quot;stacheldraht&quot; Jordan Ritter (Dec 31)
Re: Windows NT LSA Remote Denial of Service Jordan Ritter (Dec 16)

Joseph Moran

Re: sshd1 allows unencrypted sessions regardless of server policy Joseph Moran (Dec 14)

Josh Higham

Re: serious Qpopper 3.0 vulnerability Josh Higham (Nov 30)

Keith Owens

Re: Announcement: Solaris loadable kernel module backdoor Keith Owens (Dec 22)

Keith Piepho

Re: ISS Security Advisory: Buffer Overflow in Netscape Enterprise and FastTrack Authentication Procedure Keith Piepho (Dec 02)

Keith Rice

Re: HP Secure Web Console Keith Rice (Dec 02)

Keith R. Jarvis

Re: ISS Security Advisory: Buffer Overflow in Netscape Enterprise Keith R. Jarvis (Dec 02)

Kenn Humborg

Re: Netscape password scrambling Kenn Humborg (Dec 20)

Kermit the Frog

gdm thing Kermit the Frog (Dec 05)

Kevin Hemenway

Re: FormHandler.cgi Kevin Hemenway (Dec 03)

Kevin_Lynch () LOTUS COM

Re: Lotus Domino HTTP denial of service attack Kevin_Lynch () LOTUS COM (Dec 27)

Kragen Sitaker

Re: Announcement: Solaris loadable kernel module backdoor Kragen Sitaker (Dec 27)

Kris Kennaway

Re: Microsoft Security Bulletin (MS99-051) (fwd) Kris Kennaway (Dec 01)
Re: FreeBSD 3.3 gated-3.1.5 local exploit Kris Kennaway (Dec 01)
Re: Several FreeBSD-3.3 vulnerabilities Kris Kennaway (Dec 01)

krisp

Re: new IE5 remote exploit krisp (Dec 06)

kyle () RAGEOUT ORG

NAV2000 Email Protection DoS kyle () RAGEOUT ORG (Dec 17)

Lamar Owen

PostgreSQL RPM's permission problems Lamar Owen (Dec 02)

Lamont Granquist

Re: ftp conversions exploit Lamont Granquist (Dec 27)
Re: sadmind exploits (remote sparc/x86) Lamont Granquist (Dec 10)

LaMont Jones

Re: Fix for HP-UX automountd/autofs exploit (fwd) LaMont Jones (Dec 31)

Larry W. Cashdollar

Re: Solaris 2.x chkperm/arp vulnerabilities Larry W. Cashdollar (Dec 01)

Lionman

Re: FICS buffer overflow Lionman (Nov 30)

LiquidK

idlescan (ip.id portscanner) LiquidK (Dec 03)

Loneguard

vibackup.sh Loneguard (Dec 31)
irix-soundplayer.sh Loneguard (Dec 31)
tftpserv.sh Loneguard (Dec 31)
bna,sh Loneguard (Dec 30)

Loneguard () SECURITYFOCUS COM

aserver.sh Loneguard () SECURITYFOCUS COM (Dec 30)

luciano

Infoseek Ultraseek Remote Buffer Overflow luciano (Dec 16)

Lucid Solutions

qpop3.0b20 and below - notes and exploit Lucid Solutions (Nov 30)

M. Adam Kendall

Re: serious Qpopper 3.0 vulnerability M. Adam Kendall (Dec 01)

Malartre

Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Malartre (Dec 14)

Marc

Re: Infoseek Ultraseek Remote Buffer Overflow Marc (Dec 16)

Marc Esipovich

Re: Announcement: Solaris loadable kernel module backdoor Marc Esipovich (Dec 22)

Marc Farnum Rendino

Re: The &quot;Mac DoS Attack,&quot; a Scheme for Blocking Internet Connections Marc Farnum Rendino (Dec 30)

Marcy Abene

scanner for rpc.sadmind Marcy Abene (Dec 10)
sadmind exploits (remote sparc/x86) Marcy Abene (Dec 10)

Mariusz Woloszyn

Re: Various Errors in Slackware Mariusz Woloszyn (Dec 22)
Re: Various Errors in Slackware Mariusz Woloszyn (Dec 22)

Mark Gross DSO

Re: HP Secure Web Console Mark Gross DSO (Dec 01)

Markus Friedl

sshd1 allows unencrypted sessions regardless of server policy Markus Friedl (Dec 14)
Re: sshd1 allows unencrypted sessions regardless of server policy Markus Friedl (Dec 15)

Martin K. Petersen

Re: gdm thing Martin K. Petersen (Dec 06)

Martin Peter

WebSphere protections from installation Martin Peter (Dec 02)

marvin () NSS NU

Re: idlescan (ip.id portscanner) marvin () NSS NU (Dec 04)

Matt

Fw: Re-release of Microsoft Security Bulletin MS99-046 Matt (Dec 25)

Matt Barrie

Re: Analysis of Tribe Flood Network Matt Barrie (Dec 08)

Matt Conover

Norton Email Protection Remote Overflow (Addendum) Matt Conover (Dec 20)
[w00giving '99 #11] IMail's password encryption scheme Matt Conover (Dec 20)

Matus \

Re: IRCnet IRCD 2.0x Reboot Bug Matus \ (Dec 15)

Maurycy Prodeus

Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below - notes and exploit] Maurycy Prodeus (Dec 17)

Max Vision

Re: Analysis of &quot;stacheldraht&quot; + arachNIDS Max Vision (Dec 31)
Re: Netscape FastTrack httpd remote exploit Max Vision (Dec 31)

Michael Almond

SCO OpenServer Security Status Michael Almond (Dec 20)

Michael Gerdts

Solaris WBEM 1.0: plaintext password stored in world readable file Michael Gerdts (Dec 06)

Michael H. Warfield

Re: sshd1 allows unencrypted sessions regardless of server policy Michael H. Warfield (Dec 14)

Michal Zalewski

procmail / Sendmail - five bugs Michal Zalewski (Dec 23)
Re: procmail / Sendmail - five bugs Michal Zalewski (Dec 22)

Microsoft Product Security

Microsoft Security Bulletin (MS99-059) Microsoft Product Security (Dec 20)
Re-release of Microsoft Security Bulletin MS99-046 Microsoft Product Security (Dec 23)

Microsoft Product Security Response Team

Third Party Software Affected by IIS &quot;Escape Character Parsing&quot; V ulnerability Microsoft Product Security Response Team (Dec 28)
Re: The money: protocol in Internet Explorer Microsoft Product Security Response Team (Dec 22)

Mikael Olsson

Re: [w00giving '99 #11] IMail's password encryption scheme Mikael Olsson (Dec 22)

Mike Ireton

Re: Big problem on 2.0.x? Mike Ireton (Dec 10)

Misha Dankov

strace can lie Misha Dankov (Dec 28)

Mixter

Re: Analysis of Tribe Flood Network Mixter (Dec 11)
Re: Analysis of Tribe Flood Network Mixter (Dec 08)

Mnemonix

Re: Local user can fool another to run executable. .CNT/.GID/.HLP M$WINNT Mnemonix (Nov 07)

Mudge

L0pht Advisory: initscripts-4.48-1 RedHat Linux 6.1 Mudge (Dec 27)

Mullen, Patrick

Re: idlescan (ip.id portscanner) Mullen, Patrick (Dec 07)

NAI Labs

Windows NT LSA Remote Denial of Service NAI Labs (Dec 16)

Nicholas Brawn

Re: Fwd: Norton Email Protection Remote Overflow (Addendum) Nicholas Brawn (Dec 20)

Niels Provos

Re: Security Advisory: Buffer overflow in RSAREF2 Niels Provos (Dec 04)

Nobuo Miwa

CommuniGatePro 3.1 for NT DoS Nobuo Miwa (Dec 03)
Re: Multiples Remotes DoS Attacks in MDaemonServer v2.8.5.0Vulnerability Nobuo Miwa (Dec 01)

NTMail Support

Re: NTmail and VRFY NTMail Support (Dec 01)

Olaf Kirch

Re: majordomo local exploit Olaf Kirch (Dec 29)

Olaf Seibert

Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below - notes and exploit] Olaf Seibert (Dec 20)

Pauli Ojanpera

Local user can fool another to run executable. .CNT/.GID/.HLP M$WINNT Pauli Ojanpera (Dec 06)

Paulo Licio de Geus

Re: FTP denial of service attack Paulo Licio de Geus (Dec 09)

Paul Schinder

Re: The &quot;Mac DoS Attack,&quot; a Scheme for Blocking Internet Connections Paul Schinder (Dec 30)

Pavel Kankovsky

Re: Announcement: Solaris loadable kernel module backdoor Pavel Kankovsky (Dec 28)

Pavel Machek

strace can lie Pavel Machek (Dec 25)
Re: sshd1 allows unencrypted sessions regardless of server policy Pavel Machek (Dec 14)

pedward () WEBCOM COM

Re: Announcement: Solaris loadable kernel module backdoor pedward () WEBCOM COM (Dec 21)

Per Lejontand

Re: Multiple vulnerabilites in glFtpD (current versions) Per Lejontand (Dec 23)

Phillip Susi

Re: FTP denial of service attack Phillip Susi (Dec 08)

plasmoid

Announcement: Solaris loadable kernel module backdoor plasmoid (Dec 20)

Qpopper Support

Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below - notes and exploit] Qpopper Support (Dec 16)
Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below - notes and exploit] Qpopper Support (Dec 01)
Re: serious Qpopper 3.0 vulnerability Qpopper Support (Nov 30)

Rafael Rodrigues Obelheiro

Security Fixes for Slackware 4.0 Available (fwd) Rafael Rodrigues Obelheiro (Nov 30)
Security Patches for Slackware 7.0 Available (fwd) Rafael Rodrigues Obelheiro (Nov 30)
Re: Announcement: Solaris loadable kernel module backdoor Rainer Link (Dec 22)

.rain.forest.puppy.

Re: NT WinLogon VM contains plaintext password visible in admin mode .rain.forest.puppy. (Dec 14)
More info on MS99-061 (IIS escape character vulnerability) .rain.forest.puppy. (Dec 29)
Re: Ultimate Bulletin Board v5.3x? Bug .rain.forest.puppy. (Nov 30)

Ralf-Philipp Weinmann

Re: Announcement: Solaris loadable kernel module backdoor Ralf-Philipp Weinmann (Dec 26)

Randal L. Schwartz

Re: HP Secure Web Console Randal L. Schwartz (Dec 06)

Randy Mclean

Re: Groupewise Web Interface Randy Mclean (Dec 22)

Raymond Dijkxhoorn

Re: Groupewise Web Interface Raymond Dijkxhoorn (Dec 20)

Renaud Deraison

Re: FTP denial of service attack Renaud Deraison (Dec 07)

Richard Beels

Re: Groupewise Web Interface Richard Beels (Dec 23)

Richard M. Smith

The money: protocol in Internet Explorer Richard M. Smith (Dec 20)
Re: Warning to Bugtraq posters. Richard M. Smith (Dec 23)

Richard Sather

Re: GroupeWise Web Interface Richard Sather (Dec 21)

Richard Trott

Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below - notes and exploit] Richard Trott (Dec 16)

R. J. Wysocki

Re: SSH 1 Why? R. J. Wysocki (Dec 18)

Robert Horvick

Re: NT WinLogon VM contains plaintext password visible in admin m ode Robert Horvick (Dec 16)
NT WinLogon VM contains plaintext password visible in admin mode Robert Horvick (Dec 07)

Robert Watson

Re: [Re: Several FreeBSD-3.3 vulnerabilities] Robert Watson (Dec 02)

Rob Jones

Re: Reinventing the wheel (aka &quot;Decoding Netscape Mail passwords&quot;) Rob Jones (Dec 16)
Re: procmail / Sendmail - five bugs Rob Jones (Dec 20)
More Netscape Passwords Available. Rob Jones (Dec 21)

Roy Sigurd Karlsbakk

Re: Groupewise Web Interface Roy Sigurd Karlsbakk (Dec 23)

rudi carell

AltaVista rudi carell (Dec 29)
Follow UP AltaVista rudi carell (Dec 30)

Sacha Faust Bourque

Groupewise Web Interface Sacha Faust Bourque (Dec 19)
Re: Groupewise Web Interface Sacha Faust Bourque (Dec 21)

Sampo Savolainen

Re: strace can lie Sampo Savolainen (Dec 28)

satherrl () MAILPOINT DSSRG CURTIN EDU AU

Re: Groupewise Web Interface satherrl () MAILPOINT DSSRG CURTIN EDU AU (Dec 21)

Scott Morris

Re: IE 5.01 vulnerabilities in external.NavigateAndFind() Scott Morris (Dec 23)

security-alert () CISCO COM

Cisco Security Advisory: Cisco Cache Engine Authentication Vulnerabilities security-alert () CISCO COM (Dec 16)

Shane A. Macaulay

Re: w00giving #8] Solaris 2.7's snoop Shane A. Macaulay (Dec 09)

Shane Hird

Re: new IE5 remote exploit Shane Hird (Dec 07)

Shevek

$cf Security flaw Shevek (Dec 02)

Simple Nomad

Pandora for Linux Updated Simple Nomad (Dec 02)

S, Jared

Insecure default permissions for MailMan Professional Edition, version 3.0.18 S, Jared (Dec 01)

Speed

Re: SSH-1.2.27 & RSAREF2 exploit Speed (Dec 15)

Spidey

Re: majordomo local exploit Spidey (Dec 29)
Xsoldier xploit (was: FreeBSD 3.3 xsoldier root exploit) Spidey (Dec 15)

Stefan Aeschbacher

Re: Analysis of trin00 Stefan Aeschbacher (Dec 09)
Re: Analysis of trin00 Stefan Aeschbacher (Dec 09)

Stefan Laudat

Re: Analysis of Tribe Flood Network Stefan Laudat (Dec 10)

Stephen White

Re: Big problem on 2.0.x? Stephen White (Dec 11)

Steven Alexander

Re: [w00giving '99 #11] IMail's password encryption scheme Steven Alexander (Dec 22)
Re: [w00giving '99 #11] IMail's password encryption scheme Steven Alexander (Dec 21)
Re: [w00giving '99 #11] IMail's password encryption scheme Steven Alexander (Dec 23)
Remote DoS/Access Attack in Internet Anywhere Mail Server(POP 3) v2.3.1 Steven Alexander (Dec 27)
Re: Announcement: Solaris loadable kernel module backdoor Steven Alexander (Dec 23)
Warning to Bugtraq posters. Steven Alexander (Dec 22)
Re: Warning to bugtraq posters. Steven Alexander (Dec 22)

Steve Reid

Wmmon under FreeBSD Steve Reid (Dec 21)

Stewart Gebbie

Slackware 7.0 - login bug Stewart Gebbie (Dec 02)

suid

Security vulnerability in certain wu-ftpd (and derivitives) configurations (fwd) suid (Dec 19)
More details on the WU-FTPD configuration vulnerability. suid (Dec 21)
Multiple vulnerabilites in glFtpD (current versions) suid (Dec 22)

Taneli Huuskonen

Re: majordomo local exploit Taneli Huuskonen (Dec 29)

Terry

Re: Insecure default permissions for MailMan Professional Edition, Terry (Dec 03)

TeSd

Irix and TCP implementation TeSd (Dec 10)

Theo de Raadt

Re: FTP denial of service attack Theo de Raadt (Dec 07)
OpenBSD sslUSA26 advisory (Re: CORE-SDI: Buffer overflow in RSAREF2) Theo de Raadt (Dec 02)

The Tree of Life

Re: Multiple vulnerabilites in glFtpD (current versions) The Tree of Life (Dec 23)

The Wall

FTPPro insecuities The Wall (Dec 27)

Thillmann, Rolf

Re: HP Secure Web Console Thillmann, Rolf (Dec 28)

Tim

Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Tim (Dec 15)

Tim Adams

Re: Groupewise Web Interface Tim Adams (Dec 21)

Tim Hollebeek

Re: Reinventing the wheel (aka &quot;Decoding Netscape Mail passwords&quot;) Tim Hollebeek (Dec 16)

Todd C. Miller

Re: majordomo local exploit Todd C. Miller (Dec 28)

Trev

Re: Ultimate Bulletin Board v5.3x? Bug Trev (Dec 01)

UNYUN

VDO Live Player 3.02 Buffer Overflow UNYUN (Dec 12)

Ussr Labs

Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT Ussr Labs (Dec 22)
Remote DoS Attack in GoodTech Telnet Server NT v2.2.1 Vulnerability Ussr Labs (Dec 05)
Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt Ussr Labs (Dec 27)
Local / Remote GET Buffer Overflow Vulnerability in AnalogX SimpleServer:WWW HTTP Server v1.1 Ussr Labs (Dec 31)
Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability Ussr Labs (Dec 02)
Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Ussr Labs (Dec 13)
Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability Ussr Labs (Dec 20)
Local / Remote D.o.S Attack in CSM Mail Server for Windows 95/NT v.2000.08.A Ussr Labs (Dec 29)
Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Ussr Labs (Dec 15)
Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K Ussr Labs (Dec 28)
Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Ussr Labs (Dec 14)
Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP Server v2.5 for Win9x/NT Ussr Labs (Dec 30)

ussr secure

Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70Vulnerability ussr secure (Dec 16)

Vanja Hrustic

Reinventing the wheel (aka &quot;Decoding Netscape Mail passwords&quot;) Vanja Hrustic (Dec 15)

visi0n

Re: Big problem on linux 2.0 visi0n (Dec 11)
Big problem on linux 2.0 visi0n (Dec 11)

Wakko Ellington Warner-Warner III

Oops, my apologies. Wakko Ellington Warner-Warner III (Dec 15)
Re: SSH-1.2.27 & RSAREF2 exploit Wakko Ellington Warner-Warner III (Dec 15)

XB

FW: NT WinLogon VM contains plaintext password visible in admin mode XB (Dec 07)

Yamamoto, Fabio

Quake &quot;smurf&quot; - Quake War Utils Yamamoto, Fabio (Dec 21)

Yuri Kuzmenko

Re: BUG? Non-root user can configure traffic shaper (2.2.13) (fwd) Yuri Kuzmenko (Dec 27)
BUG? Non-root user can configure traffic shaper (2.2.13) (fwd) Yuri Kuzmenko (Dec 24)

Zhodiac

remote buffer overflow in miniSQL Zhodiac (Dec 27)