Bugtraq: by date

Previous period

Next period

301 messages starting Apr 30 01 and ending May 31 01
Date index | Thread index | Author index

Monday, 30 April

Re: x86 vulnerability ? Thomas Dullien

Tuesday, 01 May

Re: Proof of concept DoS against novell border manager enterprise edition 3.5 Matthew Firth
Re: iplanet calendar server 5.0p2 exposes Netscape Admin Servermaster password Adam Laurie
Announcing ptyfix Paul Szabo
Microsoft Security Bulletin MS01-023 Microsoft Product Security
Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access) Marc Maiffret

Wednesday, 02 May

Microsoft Media Player ASX Parser buffer overflow vulnerability Pauli Ojanpera
Re: Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access) Lincoln Yeoh
Permanently remove iis printer mapping railwayclubposse
Re: Announcing ptyfix Florian Weimer
Re: [SECURITY] [DSA 052-1] New sendfile packages fix root exploit Florian Weimer
[ESA-20010426-01] openssl vulnerabilities EnGarde Secure Linux
Predictable Initial Sequence Numbers Elias Levy
Windows 2000 .printer remote overflow proof of concept exploit Marc Maiffret
[RHSA-2001:058-04] Updated mount package available bugzilla
Solaris mailx Vulnerability Pablo Sor
COMPAQ Security Advisory SSRT1-85U Tru64 UNIX - xntpd overflow Elias Levy
Re: Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access) Wanderley J. Abreu Jr.
SSRT0716-01 Security Advisory - Compaq Presario & Active-X Elias Levy
Re: Windows 2000 .printer remote overflow proof of concept exploit Matt Power

Thursday, 03 May

Re: Permanently remove iis printer mapping Phillip Renouf
Re: Announcing ptyfix Casper Dik
Re: Permanently remove iis printer mapping David LeBlanc
Re: Permanently remove iis printer mapping Todd Ransom
minicom exploit zenith parsec
Re: Windows 2000 .printer remote overflow proof of concept exploi t Russ
Re: Windows 2000 .printer remote overflow proof of concept exploit David Litchfield
How to remove .printer mapping (WAS RE: Permanently remove IIS pr inter mapping) Turner, Keith
Re: Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Re mote SYSTEM Level Access) Dehner, Ben
Re: Permanently remove iis printer mapping railwayclubposse
Several Misbehaviors with the ICMP implementation (and the 'ping' utility) with MS based operating systems Ofir Arkin
IIS 5 remote exploit. dark spyrit
Re: Windows 2000 .printer remote overflow proof ofconcept exploit Nobuo Miwa
.printer vulnerability needs execute perms? mark
Cisco HSRP Weakness/DoS bashis
Vulnerabilities in CrushFTP Server joetesta
Re: Cisco HSRP Weakness/DoS Steven M. Bellovin
Potential DOS Vulnerability in WFTPD joetesta

Friday, 04 May

Re: Winamp 2.6x / 2.7x buffer overflow Tom Laermans

Saturday, 05 May

Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled. bashis
Re: Cisco HSRP Weakness/DoS bashis

Sunday, 06 May

IIS 5.0 PROPFIND DOS #2 Georgi Guninski

Monday, 07 May

Re: Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled. Stefan Laudat
Oracle's ADI 7.1.1.10.1 Major security hole Melanie Abbas
Fun with IP Identification Field Values (Identifying Older MS Based OSs) Ofir Arkin

Tuesday, 08 May

Advisory for MP3Mystic neme-dhc
Advisory for A1Stats neme-dhc
Vixie cron vulnerability Cade Cairns
Advisory for Electrocomm 2.0 neme-dhc
Advisory for Vdns neme-dhc
Advisory for Spynet Chat neme-dhc
MDKSA-2001:047 - pine update Linux Mandrake Security Team
Re: Advisory for Spynet Chat Amaury Jacquot
Re: Vixie cron vulnerability Edwin Chiu
Re: Vixie cron vulnerability Michal Zalewski
[ESA-20010508-01] glibc local vulnerability EnGarde Secure Linux

Wednesday, 09 May

def-2001-24: Windows 2000 Kerberos DoS Peter GrÃ¼ndl
Administrivia: Mail Problems Elias Levy

Thursday, 10 May

Immunix OS Security update for samba Greg KH
Samba 2.0.9 released - 2.0.8 did NOT fix the hole Andrew Tridgell
PROGENY-SA-2001-13: gFTP client potentially vulnerable to attack Progeny Security Team
[RHSA-2001:061-02] Updated nedit packages available bugzilla
[SECURITY] [DSA-055-1] gftp remote exploit debian-security-announce

Friday, 11 May

Re: Windows 2000 .printer remote overflow proof of concept exploit.... Shawn Kleinart
Re: Fun with IP Identification Field Values (Identifying Older MS Based OSs) marvin
Re: Fun with IP Identification Field Values (Identifying Older MS Based OSs) Denis Ducamp
Re: Fun with IP Identification Field Values (Identifying Older MS Based OSs) Aaron Campbell
Re: Winamp 2.6x / 2.7x buffer overflow ByteRage
Re: Microsoft Media Player ASX Parser buffer overflow vulnerability ByteRage
Denicomp REXECD/RSHD Denial of Service Vulnerability SNS Research
another exploit for cfingerd. venomous
Re: .printer vulnerability needs execute perms? Bronek Kozicki
[SECURITY] [DSA-054-1] cron local root exploit debian-security-announce
Windows 2000 .printer remote overflow - webexplt.pl problem! Crussaider
Vulnerabilty in TYPsoft FTP server SosPiro

Monday, 14 May

MDKSA-2001:048 - cups update Linux Mandrake Security Team
MDKSA-2001:049 - Zope update Linux Mandrake Security Team
MDKSA-2001:050 - vixie-cron update Linux Mandrake Security Team
security hole in os groupware suite PHProjekt Albrecht Guenther
Hexyn / Securax Advisory #15,16,17,18,19 Tom Tom
Advisory for Jana server neme-dhc
RH 7.0:/usr/bin/man exploit: gid man + more zenith parsec

Tuesday, 15 May

Becky! 2.00.05 Buffer Overflow Ichinose Sayo
IIS5 .printer exploit ported to perl and win32 Cyrus The Great
Re: Solaris /usr/bin/mailx exploit (SPARC) Casper Dik
Re: RH7.0: man local gid 15 (man) exploit Olaf Kirch
def-2001-25: Carello E-Commerce Arbitrary Command Execution Peter GrÃ¼ndl
Re: RH7.0: man local gid 15 (man) exploit [UNCONFIRMED] Zarêbski
Microsoft Security Bulletin MS01-026 Microsoft Product Security
iPlanet Web Server 4.1 SP 4-7 Product Alert Santi Claus
Re: RH7.0: man local gid 15 (man) exploit solar
NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error Vulnerability Nsfocus Security Team
Corsaire Limited Security Advisory - Symantec/Axent NetProwler 3. 5.x password restrictions Martin O'Neal
security hole in os groupware suite PHProjekt Albrecht Guenther
Corsaire Limited Security Advisory - Symantec/Axent NetProwler 3. 5.x database configuration Martin O'Neal
IRIX rpc.espd Buffer Overflow SGI Security Coordinator
Re: Fun with IP Identification Field Values (Identifying Older MSBased OSs) Crist Clark
Re: Windows 2000 .printer remote overflow proof of concept exploit.... Joshua Dodds
[RHSA-2001:065-05] New Zope packages are available bugzilla
Personal Web Sharing remote stop Jass Seljamaa
Re: Vixie cron vulnerability Olaf Kirch
Re: Vixie cron vulnerability Kris Kennaway
Re: [BUGTRAQ] Windows 2000 .printer remote overflow - webexplt.plproblem! Paul Cardon
[RHSA-2001:044-08] New samba packages available to fix /tmp races bugzilla
Re: Administrivia: Move to EZMLM aleph1
Re: Solaris /usr/bin/mailx exploit (SPARC) Johann Klasek
Re: Vixie cron vulnerability Wichert Akkerman
RE: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error V ulnerability Andrew Thomas
SuSE Security Announcement: cron Sebastian Krahmer
3COM OfficeConnect DSL router vulneratibilities inc
IIS Exploit Filip Maertens
ISS Advisory: Remote Buffer Overflow Vulnerability in IRIX Embedded Support Partner Infrastructure X-Force
Re: Solaris /usr/bin/mailx exploit (SPARC) Andrew Hilborne
Sendfile daemon bugs psheep
Rumpus FTP DoS Jass Seljamaa
Re: Solaris /usr/bin/mailx exploit (SPARC) Greg A. Woods
Re: Solaris /usr/bin/mailx exploit (SPARC) Dan Astoorian
DCForum Password File Manipukation Vulnerability (qDefense Advisory Number QDAV-5-2000-2) Franklin DeMatto

Wednesday, 16 May

Cable-Router AR220e Portmapper Security-Flaw Axel Hammer
PHPSlash : potential vulnerability in URL blocks tobozo tagada
SuSE Security Announcement: cron (SuSE-SA:2001:17) Roman Drahtmueller
Re: Solaris /usr/bin/mailx exploit (SPARC) Greg A. Woods
Re: 3COM OfficeConnect DSL router vulneratibilities James Renken
Re: Corsaire Limited Security Advisory - Symantec/Axent NetProwler 3. 5.x database configuration Sym Security
OmniHTTPd Pro Denial of Service Vulnerability SNS Research
iPlanet - Netscape Enterprise Web Publisher Buffer Overflow Marc Maiffret
iis exploit (fixed) Hux Flux
MDKSA-2001:047-1 - pine update Linux Mandrake Security Team
Re: Personal Web Sharing remote stop Terje Bless
Re: Cisco HSRP Weakness/DoS Damir Rajnovic
Nsfocus advisory testing Aldo Albuquerque - SeguranÃ§a de Sistemas
RE: Microsoft IIS CGI Filename Decode Error Vulnerability d0gman !
RE: Windows 2000 .printer remote overflow proof of concept exploit.... Christopher Gerg
Fingerprinting Linux Kernel 2.4.x based machines using ICMP (and IPID) Ofir Arkin
Re: RH7.0: man local gid 15 (man) exploit Colin Watson
Re: Solaris /usr/bin/mailx exploit (SPARC) Tobias J. Kreidl
About the new IIS %252c bug. neme-dhc
[RE: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error V ulnerability] e-Security Chap
Microsoft IIS CGI Filename Decode Error Vulnerability Adriano Maia
MS01-026 - proof of concept - Followup Filip Maertens
Test for last IIS-escape vulnerability Leif Jakob
MUAs that delete spoolfiles (was Solaris /usr/bin/mailx exploit (SPARC)) Rich Lafferty
IIS4/5 CGI decode hole, [patched] perl exploit for win32/unix Cyrus The Great
Re: RH7.0: man local gid 15 (man) exploit aleph1
Microsoft IIS FTP DoS -- MS01-026 Critical Watch Bugtraqqer
%25c double-parse vulnerability exploitable via email yehuda
Re: Personal Web Sharing remote stop Ron Trenka
Re: DCForum Password File Manipukation Vulnerability (qDefense Advisory Number QDAV-5-2000-2) David Choi
Re: iis exploit (fixed) A . Ramos
Re: RH7.0: man local gid 15 (man) exploit Stephen Shirley
Remote Desktop DoS altomo
RE: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error V ulnerability] Adriano Dias
Re: Personal Web Sharing remote stop Terje Bless
RE: About the new IIS %252c bug. Matt Rudge
logitech wireless devices: man-in-the-middle attack Axel Hammer
Microsoft Security Bulletin MS01-027 Microsoft Product Security
[RHSA-2001:060-04] Updated Kerberos 5 packages available bugzilla
Re: Personal Web Sharing remote stop Peter Bierman

Thursday, 17 May

[RHSA-2001:063-02] Updated gnupg packages available bugzilla
Re: Solaris /usr/bin/mailx exploit (SPARC) Greg A. Woods
Re: RH7.0: man local gid 15 (man) exploit PJ
UNICODE2 (2708) Security COnfera
Re: Personal Web Sharing remote stop Terje Bless
Re: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error Vulnerability Nsfocus Security Team
def-2001-26: IIS WebDav Lock Method Memory Leak DoS Peter GrÃ¼ndl
Re: Solaris /usr/bin/mailx exploit (SPARC) Casper Dik
IIS Decode Michael Vassiliadis
IIS CGI Filename decode error = financial industry server vulnerability Curt Wilson
Microsoft IIS CGI Filename Decode Error V - How to Adriano Dias
Cisco Security Advisory: Cisco Content Service Switch 11000 Series FTP Vulnerability Cisco Systems Product Security Incident Response Team
Immunix OS Security update for minicom Greg KH
IIS Decode Aldo Albuquerque - SeguranÃ§a de Sistemas
SuSE Security Announcement: kernel (SuSE-SA:2001:18) Roman Drahtmueller

Friday, 18 May

Re: IIS Decode Brian
Security update: [CSSA-2001-17.0] gnupg - private key retrieval vulnerability Caldera Support Information
Turbolinux Security Advisories TurboLinux Security Team
Re: Solaris /usr/bin/mailx exploit (SPARC) Greg A. Woods
tmp-races in ARCservIT Unix Client Jonas Eriksson
ASLabs-2001-01: Multiple Security Problems in eEye SecureIIS Alliance Security Labs
TrendMicro Interscan VirusWall RegGo.dll BOf Nobuo Miwa
Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Wietse Venema
Tamersahin.net Security Announcement: Debian 2.2 is 2.2r3 Ftpd Daemon Buffer Owerflow Vulnerability Tamer Sahin
Security Update: [CSSA-2001-018.0] samba /tmp problems Caldera Support Information
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Greg A. Woods
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Olaf Kirch
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Steven M. Bellovin
dqs 3.2.7 local root exploit. dex dex

Saturday, 19 May

Re: Personal Web Sharing remote stop Erik Neuenschwander
Re: dqs 3.2.7 local root exploit. Roman Drahtmueller
Re: dqs 3.2.7 local root exploit. Drake Diedrich
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Wietse Venema
Re: Mail delivery privileges Peter W
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Dan Stromberg
Unsafe assumptions (Re: Mail delivery...) Olaf Titz
RE: ASLabs-2001-01: Multiple Security Problems in eEye SecureIIS Marc Maiffret
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Greg A. Woods
Netscape Enterprise Server 4 Method and URI overflow Robert Cardona
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Cy Schubert - ITSD Open Systems Group
Re: Mail delivery privileges (was: Solaris /usr/bin/mailx exploit) Lyle Seaman
Re: Mail delivery privileges Henrik Nordstrom

Monday, 21 May

Re: Unsafe assumptions (Re: Mail delivery...) Marcus Meissner
ANNOUNCEMENT: RATS-0.9 (C/C++ Security Scanner) RATS Development Team
Re: Mail delivery privileges David Wagner
Aladdin eSafe Gateway script filter bypass eDvice Security Services
Microsoft Security Bulletin MS01-028 Microsoft Product Security
[Security Announce] MDKSA-2001:040-1 - samba update Linux Mandrake Security Team
[Security Announce] MDKSA-2001:033-2 - openssh update Linux Mandrake Security Team
[RHSA-2001:069-02] Updated man package fixing security problems available bugzilla
[RHSA-2001:070-02] Updated mktemp packages available bugzilla
"Flawfinder" available for use David Wheeler

Tuesday, 22 May

[Announce] Apache 1.3.20 Released Jonas Eriksson
Cisco Security Advisory: More multiple vulnerabilities in CBOS Cisco Systems Product Security Incident Response Team
SpyAnywhere Authentication Bypassing Vulnerabilities SNS Research
[SRT2001-09] - vi and crontab -e /tmp issues Richard Johnson
[SRT2001-10] - scoadmin /tmp issues Richard Johnson
[SRT2001-10] - scoadmin /tmp issues Richard Johnson
Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator Oracle Security Alerts
Logitech vulnerability (DoS, man-in-the-middle-attack) - Resend Axel Hammer

Wednesday, 23 May

security bulletins digest IT Resource Center
HP OpenView NNM v6.1 buffer overflow Jonas Eriksson
Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW) Loggins, Ron G
Re: [SRT2001-10] - scoadmin /tmp issues Matt Schalit
Re: [SRT2001-10] - scoadmin /tmp issues KRFinisterre
undocumented 3Com Netbuilder II SNMP ILMI commnity Juan Manuel Pascual Escriba
Vulnerability in viewsrc.cgi joetesta

Thursday, 24 May

Elevation of privileges with debug registers on Win2K Georgi Guninski
IPC@Chip Security Siberian
Nortan Antivirus 2000 Poproxy.exe problem bugtraq
in.fingerd follows sym-links on Solaris 8 Lukasz Luzar
Cisco Security Advisory: IOS Reload after Scanning Vulnerability Cisco Systems Product Security Incident Response Team
Re: in.fingerd follows sym-links on Solaris 8 Matthew R. Potter
RE: Nortan Antivirus 2000 Poproxy.exe problem Matthew Connor
Re: in.fingerd follows sym-links on Solaris 8 Lyndon Nerenberg
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS ByteRage

Friday, 25 May

Re: in.fingerd follows sym-links on Solaris 8 Lukasz Luzar
Advisory for Freestyle Chat server neme-dhc
TSLSA-2001-0006: Samba tsl
Re: Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator Pavel Machek
Microsoft Security Bulletin MS00-079 (version 2.0) Microsoft Product Security
Security Bug in InoculateIT for Linux (fwd) Chris Wilson
MDKSA-2001:046-1 - kdelibs update Linux Mandrake Security Team
MDKSA-2001:052 - ncurses update Linux Mandrake Security Team

Saturday, 26 May

Remote vulnerabilities in OmniHTTPd astral
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS ByteRage
GuildFTPD v0.97 Directory Traversal / Weak password encryption ByteRage

Sunday, 27 May

FormatGuard Crispin Cowan

Monday, 28 May

CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption ByteRage
[ESA-20010509-01] pine temporary file handling vulnerabilities EnGarde Secure Linux
def-2001-27: GuildFTPD Buffer Overflow and Memory Leak DoS andreas junestam
Netscape Security Contact? Crispin Cowan
Vulnerability discovered in SpearHead NetGap eDvice Security Services
undocumented 3com Netbuilder II SNMP ILMI vulnerability Juan Manuel Pascual Escriba
[synnergy] - Solaris mailtool(1) buffer overflow vulnerability dethy
Re: in.fingerd follows sym-links on Solaris 8 J. Bol
TWIG SQL query bugs Luki Rustianto
directorypro.cgi , directory traversal Marshal
Webmin Doesn't Clean Env (root exploit) J. Nick Koston
Microsoft Windows Media Player Buffer Overflow Vulnerability Pauli Ojanpera
Re: Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator David Howe
Re: in.fingerd follows sym-links on Solaris 8 Joep Vesseur
Re: in.fingerd follows sym-links on Solaris 8 Darren Moffat
RE: Nortan Antivirus 2000 Poproxy.exe problem Franklin DeMatto
RE: Nortan Antivirus 2000 Poproxy.exe problem Tom Laermans
Re: Nortan Antivirus 2000 Poproxy.exe problem gattaca
Re: Nortan Antivirus 2000 Poproxy.exe problem Eric Chien
Re: Nortan Antivirus 2000 Poproxy.exe problem Craig Bernstein
Re: Netscape Security Contact? Kevin Fu
solaris 2.6, 7 yppasswd vulnerability Jose Nazario

Tuesday, 29 May

insecure signal handler design Michal Zalewski
Unsafe Signal Handling in Sendmail Michal Zalewski
sendmail 8.11.4 and 8.12.0.Beta10 available (fwd) Jonas Eriksson
feeble.hey!dora.exploit part.II http-equiv () excite com
DynFX POPd Denial of Service Vulnerability SNS Research
Re: Webmin Doesn't Clean Env (root exploit) Marcus Meissner
[synnergy] - GnuPG remote format string vulnerability fish stiqz
SuSE Security Announcement: man (SuSE-SA:2001:019) Roman Drahtmueller
Aladdin eSafe Gateway Filter Bypass - Updated Advisory eDvice Security Services
Aladdin eSafe Gateway Script-filtering Bypass through Unicode Vulnerability eDvice Security Services
Aladdin eSafe Gateway Script-filtering Bypass through HTML tags eDvice Security Services

Wednesday, 30 May

NetBSD Security Advisory 2001-006: Denial of service using bogus fragmented IPv4 packets security-officer
NetBSD Security Advisory 2001-008: Processes can gain "Supervisor" privileges on sh3. security-officer
NetBSD Security Advisory 2001-007: IP Filter may incorrectly pass packets security-officer
'unicode' vs URL encoding. Cris Bailiff
RE: [synnergy] - Solaris mailtool(1) buffer overflow vulnerability SChoe
Re: Returned post for bugtraq () securityfocus com Dan Stromberg
Re: TrendMicro Interscan VirusWall RegGo.dll BOf Nobuo Miwa
Re: insecure signal handler design Magosányi
Re: Webmin Doesn't Clean Env (root exploit) Eugene Tsyrklevich
Re: TWIG SQL query bugs Ben Efros
SpoonFTP Buffer Overflow Vulnerabilities SNS Research

Thursday, 31 May

Immunix OS Security update for man Immunix Security Team
Immunix OS Security update for kerberos Immunix Security Team
Immunix OS Security Advisory Procedures Crispin Cowan
Immunix OS Security update for GnuPG Immunix Security Team
Re: solaris 2.6, 7 yppasswd vulnerability Matt Power
MDKSA-2001:053 - gnupg update Linux Mandrake Security Team
Imp-2.2.4 temporary files Jarno Huuskonen
Yahoo/Hotmail scripting vulnerability, worm propagation mparcens
Apache Software Foundation Server compromised, resecured. (fwd) Jonas Eriksson
Re: TWIG SQL query bugs Ryan Fox
Re: TWIG SQL query bugs Ben Laurie

Previous period

Next period