Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

269 messages starting Jan 17 97 and ending Aug 02 99
Date index | Thread index | Author index

• ip stack bug exploit in windows klepto (Jan 20)
• cfingerd 1.3.2 Salvatore Sanfilippo -antirez- (Jul 01)
  • <Possible follow-ups>
  • Re: cfingerd 1.3.2 Larry W. Cashdollar (Jul 02)
  • Re: cfingerd 1.3.2 Andreas Bogk (Jul 03)
• COMPUTER SECURITY IN MEXICO DISC99 Juan Carlos Guel Lopez (Jul 01)
• Security problem with LPRng Chris Leishman (Jul 01)
  • <Possible follow-ups>
  • Re: Security problem with LPRng papowell () ASTART COM (Jul 05)
• BSD-fileflags stealth () DIONE IDS PL (Jul 02)
  • kod.c(kiss of death) ip stack bug in windows klepto (Jan 17)
  • Re: BSD-fileflags Darren Reed (Jul 04)
• Fwd: Information on MS99-022 Vanja Hrustic (Jul 03)
  • Re: Fwd: Information on MS99-022 Renaud Deraison (Jul 03)
    • Re: Fwd: Information on MS99-022 Darren Reed (Jul 04)
      • Re: Fwd: Information on MS99-022 Renaud Deraison (Jul 05)
      • Re: Fwd: Information on MS99-022 Darren Reed (Jul 05)
      • IGMP fragmentation bug in Windows 98/2000 Coolio (Jul 03)
      • Re: IGMP fragmentation bug in Windows 98/2000 Steve (Jul 08)
      • PR from MS about BO2K Christopher Schulte (Jul 10)
      • ip stack bug in windows kod.c(kiss of death) klepto (Jul 03)
      • Re: Fwd: Information on MS99-022 Renaud Deraison (Jul 05)
    • Re: Fwd: Information on MS99-022 Weld Pond (Jul 05)
  • Re: Fwd: Information on MS99-022 Darren Reed (Jul 04)
    • Re: Fwd: Information on MS99-022 Vanja Hrustic (Jul 04)
    • Re: Fwd: Information on MS99-022 Mike C. (Jul 04)
  • <Possible follow-ups>
  • Re: Fwd: Information on MS99-022 Marc (Jul 03)
  • Re: Fwd: Information on MS99-022 Russ (Jul 04)
  • Re: Fwd: Information on MS99-022 Aleph One (Jul 05)
• ISSalert: ISS Security Advisory: Bad Permissions on Passwords Stored by WebTrends Software aleph1 () UNDERGROUND ORG (Jul 04)
• Re, Re: BSD-fileflags stealth () DIONE IDS PL (Jul 04)
• Re: VMWare Advisory.. - exploit funkySh (Jul 05)
• L0pht 'Domino' Vulnerability is alive and well Aleph One (Jul 05)
  • <Possible follow-ups>
  • Re: L0pht 'Domino' Vulnerability is alive and well Weld Pond (Jul 06)
  • Re: L0pht 'Domino' Vulnerability is alive and well Pavel Ahafonau (Jul 07)
  • Re: L0pht 'Domino' Vulnerability is alive and well mtremblay () BAHNSO COM (Jul 08)
    • Re: L0pht 'Domino' Vulnerability is alive and well Ryan Thomas Tecco (Jul 09)
    • Communicator 4.[56]x, JavaScript used to bypass cookie settings Peter W (Jul 09)
      • (no subject) Anonymous (Jul 09)
      • Re: your mail Darren Reed (Jul 12)
      • Navigator cookie security Oliver Lineham (Jul 09)
      • Re: Communicator 4.[56]x, JavaScript used to bypass cookie settings Claudio Telmon (Jul 13)
      • Solaris 2.6/7 NTP permissions problem john_smith () RD QMS COM (Jul 14)
      • Privacy concerns in interMute John Temples (Jul 16)
      • Re: Solaris 2.6/7 NTP permissions problem Casper Dik (Jul 16)
      • (no subject) sbr (Jul 14)
      • joe 2.8 makes world-readable DEADJOE Trevor Johnson (Jul 17)
      • Re: your mail hal (Jul 19)
    • [LoWNOISE] Lotus Domino ET LoWNOISE (Jul 09)
• Administrivia Aleph One (Jul 05)
  • <Possible follow-ups>
  • Administrivia Aleph One (Jul 05)
  • Administrivia Aleph One (Jul 05)
  • Administrivia Aleph One (Jul 06)
• Pandora v4 Announcement Simple Nomad (Jul 06)
• Re: kod.c / moyari.c( ICMP-type13 ) DEF CON ZERO WINDOW (Jul 06)
  • Re: kod.c / moyari.c for linux Chris Wicklein (Jul 07)
  • sockd loopback rieger () AT IBM COM (Jul 07)
    • Re: sockd loopback Jordan Ritter (Jul 08)
• NT Login Default Folder Vulnerability Ben Greenbaum (Jul 06)
  • Re: NT Login Default Folder Vulnerability wazza () ARO EE CIT AC NZ (Jul 06)
  • Re: NT Login Default Folder Vulnerability Dimitry Andric (Jul 07)
  • <Possible follow-ups>
  • Re: NT Login Default Folder Vulnerability Russ (Jul 06)
• Microsoft Security Bulletin (MS99-024) Patrick, Mannion (Jul 06)
• Netscape Enterprise Server SSL Handshake Bug aleph1 () UNDERGROUND ORG (Jul 06)
• PGP 6.5.1 has been released Cody Brownstein (Jul 06)
  • Re: PGP 6.5.1 has been released Nick_ (Jul 07)
  • Security Bulletins Digest aleph1 () UNDERGROUND ORG (Jul 08)
  • <Possible follow-ups>
  • Re: PGP 6.5.1 has been released Steven M. Bellovin (Jul 07)
    • Re: PGP 6.5.1 has been released Kenneth Albanowski (Jul 12)
  • Re: PGP 6.5.1 has been released ___Viper___ _ (Jul 11)
    • Re: PGP 6.5.1 has been released Mark Wooding (Jul 13)
  • Re: PGP 6.5.1 has been released Joel Eriksson (Jul 13)
• MS Chap v2 analysis Paul Leach (Jul 07)
  • Re: MS Chap v2 analysis David Wagner (Jul 12)
  • <Possible follow-ups>
  • Re: MS Chap v2 analysis Burton Rosenberg (Jul 07)
    • Re: MS Chap v2 analysis Peter J. Holzer (Jul 08)
  • Re: MS Chap v2 analysis Paul Leach (Jul 07)
    • Re: MS Chap v2 analysis David Wagner (Jul 12)
• Re: BUGTRAQ:// Re: PGP 6.5.1 has been released Nick_ (Jul 08)
• Re: sockd loopback Wei Lu (Jul 08)
• America Online Token Hole Kevin Mack (Jul 08)
  • Re: America Online Token Hole John Schuster (Jul 12)
    • Re: America Online Token Hole Zero Divide (Jul 14)
    • NMRC Advisory: Netware 5 Client Hijacking Simple Nomad (Jul 15)
• Exploit of rpc.cmsd Bob Todd (Jul 09)
  • Re: Exploit of rpc.cmsd Andy Polyakov (Jul 09)
  • Re: Exploit of rpc.cmsd Andy Polyakov (Jul 10)
  • Re: Exploit of rpc.cmsd Andy Polyakov (Jul 11)
  • Re: Exploit of rpc.cmsd John Hall (Jul 12)
    • Re: Exploit of rpc.cmsd Aleph One (Jul 13)
      • Re: Exploit of rpc.cmsd Casper Dik (Jul 14)
      • Re: Exploit of rpc.cmsd Dan Astoorian (Jul 15)
      • Re: Exploit of rpc.cmsd Casper Dik (Jul 15)
  • Re: Exploit of rpc.cmsd John Hall (Jul 12)
  • <Possible follow-ups>
  • Re: Exploit of rpc.cmsd Stephen C Woods (Jul 10)
  • Re: Exploit of rpc.cmsd Casper Dik (Jul 14)
• MacOS system encryption algorithm Dawid adix Adamski (Jul 10)
• Re: IGMP fragmentation bug in Windows 98/2000 Ochani, Steve (Jul 10)
  • Re: IGMP fragmentation bug in Windows 98/2000 Thomas 'Balu' Walter (Jul 13)
• Linux 2.0.37 segment limit bug Solar Designer (Jul 11)
• Re: [RHSA-1999:017-01] Potential security problem in Red Hat 6.0 net-tools. (fwd) David Wagner (Jul 11)
• aix 4.2 4.3.1, adb GZ Apple (Jul 12)
  • Re: aix 4.2 4.3.1, adb Mike Austin (Jul 13)
  • Root Perms Gained with Patrol SNMP Agent 3.2 (all others?) Andrew Alness (Jul 13)
  • Announcing First Annual ToorCon Ben (Jul 13)
  • ircd exploit in ircu based code Kevin Day (Jul 13)
    • Re: ircd exploit in ircu based code Kev (Jul 15)
  • About IGMP and another exploit for Windows95x/98x Hector Leon (Jul 13)
    • credit (was Re: About IGMP and another exploit for Windows95x/98x) Max Vision (Jul 14)
  • Re: aix 4.2 4.3.1, adb Troy A. Bollinger (Jul 13)
  • DoS attack on AT&T Wireless text-messaging service Peter Gamache (Jul 14)
  • BO2K Aleph One (Jul 15)
  • <Possible follow-ups>
  • Re: aix 4.2 4.3.1, adb Peter.Fredriksson () Skriptor com (Jul 13)
  • Re: aix 4.2 4.3.1, adb Troy A. Bollinger (Jul 15)
• DCOM Security references David LeBlanc (Jul 12)
• Re: IGMP fragmentation bug Aleph One (Jul 13)
  • [Ann/CfP] SANE 2000 - May 22-25, 2000 (2nd Int'l System Administration & Networking Conference) Fred Donck (Jul 13)
  • Re: IGMP fragmentation bug - another behavior Serg `Ice` Tsyganenko (Jul 13)
• Bug in Axent 5.0 Aleph One (Jul 13)
  • <Possible follow-ups>
  • Bug in Axent 5.0 Steve Jackson (Jul 15)
• Re: IGMP fragmentation bug - another behavior Paul Murphy (Jul 14)
• Re: Solaris libc exploit Brandon Hume (Jul 14)
  • <Possible follow-ups>
  • Re: Solaris libc exploit Scott Weikart (Jul 15)
• Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 14)
  • linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Domingos Bruges (Jun 30)
    • Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Marcelo Roccasalva (Jul 21)
  • Re: ircd exploit in ircu based code (fwd) Matt Hallacy (Jul 15)
    • Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 16)
  • Logic Error in Management Edition NetWare install script for Dr. Sololomon's Bayard G. Bell (Jul 16)
  • AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 16)
    • CERT Advisory CA-99.08 - cmsd Aleph One (Jul 16)
    • Re: AMaViS virus scanner for Linux - root exploit Kurt Seifried (Jul 17)
      • Re: AMaViS virus scanner for Linux - root exploit Ian Whalley (Jul 19)
    • Swish-e Jean-Georges Estiot (Jul 17)
    • Re: AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 18)
      • Re: AMaViS virus scanner for Linux - root exploit Jim Hebert (Jul 19)
      • tiger vulnerability Ellen L Mitchell (Jul 20)
    • iplogger Ymas problem Salvatore Sanfilippo -antirez- (Jul 18)
    • Re: AMaViS virus scanner for Linux - root exploit Christian Bricart (Jul 19)
• Re: Root Perms Gained with Patrol SNMP Agent 3.2 (all others?) Alia (Jul 14)
  • <Possible follow-ups>
  • Re: Root Perms Gained with Patrol SNMP Agent 3.2 (all others?) Aleph One (Jul 21)
• more detail and summary of kod.c (igmp bug for windows) klepto (Jul 14)
• Shared memory DoS's Mike Perry (Jul 14)
  • Re: Shared memory DoS's Dustin Marquess (Jul 15)
  • Re: Shared memory DoS's (Redhat retraction) Mike Perry (Jul 15)
    • Re: Shared memory DoS's (Redhat retraction) Jim Dennis (Jul 19)
    • Linux +ipchains+ ping -R Andrej Todosic (Jul 22)
      • Re: Linux +ipchains+ ping -R Scott (Jul 23)
      • Update to Microsoft Security Bulletin (MS99-025) aleph1 () UNDERGROUND ORG (Jul 23)
    • Re: Shared memory DoS's (Redhat retraction) Wietse Venema (Jul 22)
    • Alert: RDS IIS vulnerability/fix .rain.forest.puppy. (Jul 23)
  • Re: Shared memory DoS's Dick St.Peters (Jul 15)
  • Re: Shared memory DoS's Nicolas V. Chernyy (Jul 15)
    • Re: Shared memory DoS's Mike Perry (Jul 17)
  • Mail relay vulnerability in RedHat 5.0, 5.1, 5.2 David Luyer (Jul 16)
    • Re: Mail relay vulnerability in RedHat 5.0, 5.1, 5.2 Ollivier Robert (Jul 19)
    • Re: Mail relay vulnerability in RedHat 5.0, 5.1, 5.2 Matt Dunn (Jul 22)
      • Re: Mail relay vulnerability in RedHat 5.0, 5.1, 5.2 Daniele Orlandi (Jul 24)
  • Re: Shared memory DoS's Glynn Clements (Jul 16)
    • Re: Shared memory DoS's Mike Perry (Jul 16)
  • Re: Shared memory DoS's Howard Kaye (Jul 19)
    • Samba 2.0.5 security fixes Andrew Tridgell (Jul 20)
    • Re: Shared memory DoS's Richard Shetron (Jul 20)
    • Delegate creates directories writable for anyone Olaf Seibert (Jul 21)
    • Administrivia Aleph One (Jul 22)
  • SNMP communities in 3Com HiPer Arcs (maybe other 3Com products?) Jeff Mcadams (Jul 20)
  • Correction to Microsoft Security Bulletin MS99-025 aleph1 () UNDERGROUND ORG (Jul 20)
• Netscan.org has updated thier lamest networks on the net page Bill Sehmel (Jul 15)
• Checkpoint FW-1 identification Tim Hirst (Jul 16)
  • Re: Checkpoint FW-1 identification Jochen Bauer (Jul 17)
• IIS respond private address Nobuo Miwa (Jul 16)
  • <Possible follow-ups>
  • Re: IIS respond private address Nobuo Miwa (Jul 20)
• to prevert port scanning in linux 2.0.x Salvatore Sanfilippo -antirez- (Jul 17)
• improper chroot in dbmlparser.exe robert qdial (Jul 17)
• Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Bram Stroker (Jul 17)
• Re: Microsoft Security Bulletin (MS99-025) Horsfall, William A (Jul 19)
  • <Possible follow-ups>
  • Re: Microsoft Security Bulletin (MS99-025) Bjørnar B. Larsen (Jul 19)
• SGI arrayd default security configuration SGI Security Coordinator (Jul 19)
• [support_feedback () us-support external hp com: Security Bulletins Digest] Patrick Oonk (Jul 20)
• old gnu finger bugs CS/Physics student (Jul 21)
• Re: Delegate creates directories writable for anyone KOJIMA Hajime (Jul 21)
• First reflections on security of MSN Messenger Dmitri Alperovitch (Jul 22)
• Re: ping -R causes kernel panic on a forwarding machine ( 2.2.5 a nd 2 .2.10) Andrej Todosic (Jul 22)
  • Re: ping -R causes kernel panic on a forwarding machine ( 2.2.5 a nd 2 .2.10) Richard Bouska (Jul 22)
  • Do these patches fix the rpc.cmsd hole? Tim Ramsey (Jul 22)
  • L0pht Heavy Industries - AntiSniff Alex Yu (Jul 23)
  • Trojan Horse Guard - Cassandra GOLD Release. Jonathan James (Jul 23)
  • Troff dangerous. Pawel Wilk (Jul 23)
    • New way to pay in advance for ToorCon '99 in San Diego, California Ben (Jul 24)
    • Re: Troff dangerous. CyberPsychotic (Jul 25)
    • Re: Troff dangerous. Pavel Kankovsky (Jul 25)
      • Re: Troff dangerous. Warner Losh (Jul 27)
    • Re: Troff dangerous. Julian Squires (Aug 02)
      • Re: Troff dangerous. Olaf Kirch (Jul 26)
      • IBM-ERS Security Vulnerability Alert: IBM AIX: Non-root users can cause the system to crash ibm-ers () ERS IBM COM (Jul 26)
  • Redhat 6.0 cachemgr.cgi lameness daniel () NEWS GUS NET (Jul 23)
    • Re: Redhat 6.0 cachemgr.cgi lameness Henrik Nordstrom (Jul 25)
• Re: New Allaire Security Zone Bulletins and KB Articles Matt Chapman (Jul 24)
• (How) Does AntiSniff do what is claimed? Nick Lamb (Jul 24)
  • Re: (How) Does AntiSniff do what is claimed? Paul Boyer (Jul 25)
  • Re: (How) Does AntiSniff do what is claimed? Jon Marler (Jul 25)
    • Re: (How) Does AntiSniff do what is claimed? David Luyer (Jul 26)
    • Re: (How) Does AntiSniff do what is claimed? Trevor Schroeder (Jul 27)
  • Re: (How) Does AntiSniff do what is claimed? Trevor Schroeder (Jul 25)
  • Re: (How) Does AntiSniff do what is claimed? Ian Goldberg (Jul 26)
  • word 97 macrovirus protection problem thomas lakofski (Jul 26)
    • Re: word 97 macrovirus protection problem Emils Klotins (Jul 28)
    • New ActiveX security problems in Windows 98 PCs David N. Murray (Jul 29)
    • Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code Mnemonix (Jul 30)
  • Linux 2.2.10 ipchains Advisory Thomas Lopatic (Jul 27)
  • <Possible follow-ups>
  • Re: (How) Does AntiSniff do what is claimed? der Mouse (Jul 26)
    • Re: (How) Does AntiSniff do what is claimed? Dr. Mudge (Jul 27)
• Re: Troff dangerous. John Robert LoVerso (Jul 25)
  • Re: Troff dangerous. Nic Bellamy (Jul 25)
    • Re: Troff dangerous. Aaron Campbell (Jul 26)
  • Re: Troff dangerous. Olaf Kirch (Jul 26)
  • <Possible follow-ups>
  • Re: Troff dangerous. Joel Eriksson (Jul 25)
    • Re: Troff dangerous. Pete (Jul 25)
      • Re: Troff dangerous. Robert Watson (Jul 27)
    • Re: Troff dangerous. Yozo Toda (Jul 25)
    • Re: Troff dangerous. Eric Moore (Jul 25)
      • Re: Troff dangerous. Ville Nummela (Jul 27)
  • Re: Troff dangerous. Jason Thorpe (Jul 25)
    • Retrieving RDS Data... Wanderley J. Abreu Jr (Jul 26)
    • Re: Troff dangerous. Bob Beck (Jul 26)
  • Re: Troff dangerous. Ronny Cook (Jul 25)
  • Re: Troff dangerous. Steven M. Bellovin (Jul 26)
  • Re: Troff dangerous. Groovy Pants Gus (Jul 26)
• Re: Alert: RDS IIS vulnerability/fix Wanderley J. Abreu Junior (Jul 25)
  • Re: Alert: RDS IIS vulnerability/fix .rain.forest.puppy. (Jul 25)
• All Hail The AntiAntiSniffer Sniffer! Mike Perry (Jul 25)
  • <Possible follow-ups>
  • Re: All Hail The AntiAntiSniffer Sniffer! Christopher Abad (Jul 26)
• Antisniff thoughts *Hobbit* (Jul 25)
  • Re: Antisniff thoughts David Dyer-Bennet (Jul 26)
  • Re: Antisniff thoughts + AASS Patch Mike Perry (Jul 26)
  • Re: Antisniff thoughts Craig H. Rowland (Jul 26)
  • <Possible follow-ups>
  • Re: Antisniff thoughts blue0ne (Jul 26)
  • Re: Antisniff thoughts Wolfram Schmidt (Jul 27)
• Re: [linux-security] [RHSA-1999:023-01] Potential security problem in gnumeric 0.23 Edward S. Marshall (Jul 25)
  • <Possible follow-ups>
  • Re: [linux-security] [RHSA-1999:023-01] Potential security problem in gnumeric 0.23 Miguel de Icaza (Jul 29)
    • Re: [linux-security] [RHSA-1999:023-01] Potential security problem in gnumeric 0.23 David Schwartz (Jul 30)
      • Re: [linux-security] [RHSA-1999:023-01] Potential security problem in gnumeric 0.23 Rogier Wolff (Jul 31)
• Re: Redhat 6.0 cachemgr.cgi lameness Kerb (Jul 25)
  • Re: Redhat 6.0 cachemgr.cgi lameness Daniel Fonseca (Jul 27)
  • Re: Redhat 6.0 cachemgr.cgi lameness Henrik Nordstrom (Jul 27)
  • <Possible follow-ups>
  • Re: Redhat 6.0 cachemgr.cgi lameness Henrik Nordstrom (Jul 30)
• Cracking Win2K EFS -- Whitepaper Mark (Jul 26)
  • Security Bulletins Digest V. T. Mueller (Jul 26)
  • Re: Cracking Win2K EFS -- Whitepaper Bronek Kozicki (Jul 27)
• Re: Mail relay vulnerability in RedHat 5.0, 5.1, 5.2 Callison, James P (Jul 26)
• Re: Groff dangerous (was Re: Troff dangerous.) Kragen Sitaker (Jul 26)
• Re: Simple DOS attack on FW-1 David Taylor (Jul 29)
  • Internet Explorer 5.0 HTML Applications Bryan Batchelder (Jul 30)
  • World writable root owned script in SalesBuilder (RedHat 6.0) smaster () SAIL IT (Jul 30)
  • Possible Denial Of Service using DNS smaster () SAIL IT (Jul 30)
  • Re: Simple DOS attack on FW-1 Jeff Roberson (Jul 30)
  • <Possible follow-ups>
  • Re: Simple DOS attack on FW-1 Scott, Richard (Jul 30)
  • Re: Simple DOS attack on FW-1 Jason R. Rhoads (Jul 30)
• FW-1 DOS attack: PART II Spitzner, Lance (Jul 29)
• Re: New Allaire Security Zone Bulletins and KB Article x-empt [ lvhc / lou ] (Jul 29)
  • <Possible follow-ups>
  • Re: New Allaire Security Zone Bulletins and KB Article Matt Chapman (Jul 30)
• Linux masquerading + traffic shaper Theodor Milkov (Jul 30)
  • Re: Linux masquerading + traffic shaper John M. Flinchbaugh (Jul 30)
• Remotely Lock Up Gauntlet 5.0 Mike Frantzen (Jul 30)
• Re: ms oledb data links Microsoft Product Security Response Team (Jul 30)
• [RHSA-1999:025-01] Potential misuse of squid cachemgr.cgi Bill Nottingham (Jul 30)
• Netscape Enterprise Server yeilds source of JHTML Mnemonix (Jul 30)
• Some comments on http://www.microsoft.com/security/Bulletins/ms99-026faq.asp Mnemonix (Jul 30)
• Update: MS Office 97 Vulnerability Microsoft Product Security Response Team (Jul 30)
• Re: NT DoS on FW-1 (fwd) Matt (Jul 30)
• CERT Advisory CA-99.10 - Insecure Default Configuration on RaQ2 Servers Aleph One (Jul 31)

Previous period

Next period