Bugtraq: by thread

Bugtraq: by thread

Previous period

222 messages starting Jun 24 97 and ending Dec 31 98
Date index | Thread index | Author index

iParty can be shut down remotely HD Moore (Nov 30)
Re: RedHat 5.2 lrzsz-0.12.14-5 have serious security hole Uwe Ohse (Nov 30)
- Re: RedHat 5.2 lrzsz-0.12.14-5 have serious security hole Yuri Kuzmenko (Dec 01)
- John the Ripper v1.6 Solar Designer (Dec 02)
- Security Bulletins Digest (fwd) Patrick Oonk (Dec 03)
new hijack software: hunt-1.0 Pavel Krauz (Dec 01)
FW: Security Bulletins Digest Patrick Oonk (Dec 01)
Re: Security bugs in Excite for Web Servers 1.1 Gurjeet Clair (Dec 01)
- Re: Security bugs in Excite for Web Servers 1.1 Andrew Pitman (Dec 01)
- Remote Tools w/Exceed v.6.0.1.0 fer 95 Sparks, Michael ME (Dec 02)
ANNOUNCE: Free Newsletter for IT Professionals Security Research Team (Dec 01)
Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Robby Dunkerson (Dec 03)
- <Possible follow-ups>
- Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Shaw, Daniel J. (Dec 03)
- Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Adam Shiffman (Dec 03)
RSI.0012.12-03-98.SOLARIS.MKCOOKIE RSI Advise (Dec 03)
- Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE Pavel Kankovsky (Dec 04)
- <Possible follow-ups>
- Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE Readwin, Neil (Dec 07)
  - Exploitable buffer overflow in bootpd (most unices) Willem Pinckaers (Jun 24)
    - Re: Exploitable buffer overflow in bootpd (most unices) Chris Evans (Dec 13)
    - Triteal release updated CDE with security fixes Alan Cox (Dec 13)
    - Wietse's Postfix (was VMailer) software release Wietse Venema (Dec 13)
  - Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE Chris Wedgwood (Dec 10)
  - FW: ISSalert: ISS Security Advisory: HP JetDirect TCP/IP problems Phear Me (Dec 11)
  - Pine 4.05 patches GvS (Dec 12)
  - Microsoft's Network Monitor - Buffer Overrun / Page Fault / mnemonix (Dec 12)
[SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0 Security Research Team (Dec 03)
- Breaking into houses to steal the security systems... Was: Dr. Mudge (Dec 03)
- <Possible follow-ups>
- Re: [SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0 robert.flannigan () PLATINUM COM (Dec 07)
  - Call For Papers Marco de Vivo [UCV] (Dec 07)
  - Lousy password handling in BreezeCOM Mr. SteelFire (Dec 10)
    - Re: Lousy password handling in BreezeCOM Thilo Hille (Dec 10)
    - NSA paper on computer security Kragen (Dec 11)
    - about the ip header id Salvatore Sanfilippo (Dec 14)
    - Learning security Kevin M. Myer (Dec 14)
  - Administrivia Aleph One (Dec 10)
    - RealSystem passwords Guy Cohen (Dec 10)
    - Titan 3.0 Released Aleph One (Dec 10)
    - Vulnerability in IRIX fcagent daemon SGI Security Coordinator (Dec 10)
    - Linux 2.0.36: The stuff that was 'fixed quietly' [Summary] Alan Cox (Dec 10)
    - Microsoft Security Bulletin (MS98-018) Aleph One (Dec 10)
bootpd remote vulnerability John McDonald (Dec 04)
- hping, a tcp pinger antirez (Nov 30)
- Re: bootpd remote vulnerability Irwin Tillman (Dec 04)
- <Possible follow-ups>
- Re: bootpd remote vulnerability Crispin Cowan (Dec 05)
  - Cheops Mark Spencer (Dec 07)
  - Re: bootpd remote vulnerability John McDonald (Dec 07)
  - Security Bulletins Digest (fwd) Patrick Oonk (Dec 07)
Interesting bug in SecurID software (fwd) Chip Christian (Dec 07)
[Debian] Re: fte-console has root compromise bug] Aleph One (Dec 07)
Re: Breaking into houses to steal the security systems... Christopher Klaus (Dec 07)
Re: about the ip header id Vern Paxson (Dec 14)
Nmap network auditing/exploring tool V. 2.00 released Fyodor (Dec 15)
- Re: Nmap network auditing/exploring tool V. 2.00 released Sherwood Botsford (Dec 21)
  - Re: Nmap network auditing/exploring tool V. 2.00 released Olaf Selke (Dec 22)
    - Re: Nmap network auditing/exploring tool V. 2.00 released Lamont Granquist (Dec 22)
    - Re: Nmap network auditing/exploring tool V. 2.00 released Casper Dik (Dec 23)
- <Possible follow-ups>
- Re: Nmap network auditing/exploring tool V. 2.00 released Jefferson Ogata (Dec 22)
[In]security in USR TotalSwitch Adam Maloney (Dec 15)
- DCC HiJacking patch for BitchX 75p1 Alessio Orlandi (Oct 18)
  - Re: DCC HiJacking patch for BitchX 75p1 Andy Dills (Dec 21)
  - Re: DCC HiJacking patch for BitchX 75p1 Ben Winslow (Dec 21)
  - Re: DCC HiJacking patch for BitchX 75p1 mikey (Dec 22)
    - Re: DCC HiJacking patch for BitchX 75p1 YounGoat (Dec 22)
- Re: [In]security in USR TotalSwitch Lou Anschuetz (Dec 21)
- <Possible follow-ups>
- Re: [In]security in USR TotalSwitch Adam Maloney (Dec 21)
Re: Microsoft's Network Monitor - Buffer Overrun / Page Fault / V Friedrichs, Oliver (Dec 15)
Security Bulletins Digest (fwd) Patrick Oonk (Dec 16)
ANNOUNCEMENT: SAFER Back Issues Security Research Team (Dec 16)
OSS nice tmp race Stefan Laudat (Dec 16)
- wordperfect 8 for linux security Edsel Adap (Dec 18)
  - new tcp scan method antirez (Dec 17)
  - Re: wordperfect 8 for linux security Dug Song (Dec 18)
  - Re: wordperfect 8 for linux security Keith Owens (Dec 18)
  - Irc: another funny stuff. In some irc clients dcc may be hijacked. awgn () COSMOS IT (Dec 19)
  - ValueClick CGI Vulnerability Philip Stoev (Dec 19)
  - FTP.SODRE.NET Hacked... Eggdrop Modified.. Geoffrey Huntley (Dec 19)
    - Re: FTP.SODRE.NET Hacked... Eggdrop Modified.. Matt Hallacy (Dec 19)
  - ip header id patched. awgn () COSMOS IT (Dec 19)
  - ValueClick Ellen (Dec 19)
- Re: OSS nice tmp race Pavel Kankovsky (Dec 18)
  - Re: OSS nice tmp race Dr. Mudge (Dec 18)
- Re: OSS nice tmp race Joel Eriksson (Dec 18)
- OSS nice tmp race the razor of love (Dec 18)
- <Possible follow-ups>
- Re: OSS nice tmp race Crispin Cowan (Dec 20)
- Re: OSS nice tmp race X-Force (Dec 21)
  - AOL client uses IP tunneling Aviram Jenik (Dec 21)
  - Re: your mail Craig A. Huegen (Dec 21)
    - Re: your mail Alan Cox (Dec 22)
Irix tape devices + logs + su Harhalakis Stefanos (Dec 16)
- DoS caused by lpd Kevin K. Sochacki (Dec 18)
- Re: Irix tape devices + logs + su Valdis.Kletnieks () VT EDU (Dec 18)
  - Re: Irix tape devices + logs + su Harhalakis Stefanos (Dec 19)
- Re: Irix tape devices + logs + su Bas van der Vlies (Dec 20)
Verifying file data integrity using L6 gilbert () PGCI CA (Dec 17)
- Re: Verifying file data integrity using L6 Ng Pheng Siong (Dec 18)
- <Possible follow-ups>
- Re: Verifying file data integrity using L6 James R Grinter (Dec 20)
- Re: Verifying file data integrity using L6 Marc SCHAEFER (Dec 20)
  - Re: Verifying file data integrity using L6 Curt Sampson (Dec 21)
  - Why you should avoid world-writable directories D. J. Bernstein (Dec 21)
    - Re: Why you should avoid world-writable directories Darren Reed (Dec 22)
    - Re: Why you should avoid world-writable directories Alan Cox (Dec 22)
    - Re: Why you should avoid world-writable directories Casper Dik (Dec 23)
    - Re: Why you should avoid world-writable directories Martin Forssen (Dec 23)
    - Linux PAM (up to 0.64-2) local root compromise Michal Zalewski (Dec 23)
    - Re: Linux PAM (up to 0.64-2) local root compromise Savochkin Andrey Vladimirovich (Dec 24)
    - 3COM Documentation backdoors in CB3500 Pedro Ribeiro (Dec 23)
    - New perl module Net::RawIP Sergey V. Kolychev (Dec 22)
    - Update on Cisco IOS 12.0 security bug John Bashinski (Dec 22)
    - Re: New perl module Net::RawIP route () RESENTMENT INFONEXUS COM (Dec 22)
    - [SecureXpert Labs Advisory SX-98.12.23-01] Widespread DoS Richard Reiner (Dec 23)
    - Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Updated) Anonymous (Dec 23)
    - Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Casper Dik (Dec 24)
    - Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Dima Volodin (Dec 25)
    - Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Lamont Granquist (Dec 28)
    - Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Igor Schein (Dec 28)
    - Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Casper Dik (Dec 28)
    - A few more fingerprinting techniques - time and netmask David G. Andersen (Dec 28)
    - Microsoft Security Bulletin (MS98-020) aleph1 () UNDERGROUND ORG (Dec 23)
    - Security Flaw in Cookies Implementation Oliver Lineham (Dec 23)
    - Re: Why you should avoid world-writable directories Gonzo Granzeau (Dec 22)
    - Re: Why you should avoid world-writable directories Kragen Sitaker (Dec 22)
  - CERT Advisory CA-98.13 - TCP/IP Denial of Service aleph1 () UNDERGROUND ORG (Dec 21)
- Re: Verifying file data integrity using L6 der Mouse (Dec 22)
- Re: Verifying file data integrity using L6 Jim Dennis (Dec 24)
RELEASE // Trinux: A Linux Security Toolkit 0.47 Matthew Franz (Dec 17)
Sun Security Bulletin #00182 (fwd) Patrick Oonk (Dec 17)
Sun Security Bulletin #00180 (fwd) Patrick Oonk (Dec 17)
Sun Security Bulletin #00181 (fwd) Patrick Oonk (Dec 17)
Re: Learning security [SUMMARY] Aleph One (Dec 17)
- Remote Explorer David LeBlanc (Dec 23)
Administrivia: FAQ Aleph One (Dec 17)
L0pht NFR N-Code Modules Updated Dr. Mudge (Dec 18)
Re: wordperfect 8 for linux security Peter W (Dec 19)
Re: ValueClick Trev (Dec 19)
Re: FTP.SODRE.NET Hacked. Mr. M (Dec 19)
secure-linux patch for 2.1.131 condor () SEKURE ORG (Dec 20)
ie4 messes around with referrer-string bungle (Dec 20)
Re: Ircii-epic: Irc: another funny stuff. In some irc clients dcc Ben Winslow (Dec 20)
PostFix security Problem bobk (Dec 20)
Re: Irix logs + su pmws () GMX NET (Dec 21)
Claimed Postfix Vulnerabilities Wietse Venema (Dec 21)
- <Possible follow-ups>
- Re: Claimed Postfix Vulnerabilities der Mouse (Dec 21)
- Re: Claimed Postfix Vulnerabilities bobk (Dec 23)
Fwd: Re: 3com Entropy (Dec 21)
- Re: Fwd: Re: 3com Eric Wanner (Dec 21)
- Re: 3com Eric Forcey (Dec 21)
Microsoft Security Bulletin (MS98-019) (fwd) Rattle (Dec 21)
Linux tcplogd hack able to log any tcp portscan attack (nmap2) phroid (Dec 21)
Re: Why you should avoid world-writable directories Ben Laurie (Dec 22)
- Re: Why you should avoid world-writable directories Darren Reed (Dec 22)
- Re: Why you should avoid world-writable directories Rich Burroughs (Dec 22)
- Re: Why you should avoid world-writable directories Wietse Venema (Dec 22)
- <Possible follow-ups>
- Re: Why you should avoid world-writable directories Nick Maclaren (Dec 22)
- Re: Why you should avoid world-writable directories Jason Thorpe (Dec 24)
  - Re: Why you should avoid world-writable directories Alan Cox (Dec 24)
  - Administrivia Aleph One (Dec 26)
  - Nlog 1.1b released - security holes fixed HD Moore (Dec 26)
    - referer problems... Spencer Portee - Yard Productions (Dec 26)
- Re: Why you should avoid world-writable directories Jason Thorpe (Dec 24)
  - Re: Why you should avoid world-writable directories Bill Paul (Dec 26)
    - Re: Why you should avoid world-writable directories Robert Watson (Dec 27)
Cisco IOS 12.0 security bug and workaround John Bashinski (Dec 22)
- Re: Cisco IOS 12.0 security bug and workaround Jason Ackley (Dec 22)
Postfix design directions Wietse Venema (Dec 22)
- Re: Postfix design directions Chris Adams (Dec 23)
- Re: Postfix design directions Peter van Dijk (Dec 23)
  - Re: Postfix design directions Wietse Venema (Dec 23)
- Re: Postfix design directions Perry E. Metzger (Dec 23)
  - Re: Postfix design directions Wietse Venema (Dec 23)
- Re: Postfix design directions Richard Kail (Dec 23)
- Re: Postfix design directions Ewen McNeill (Dec 23)
Re: Ircii-epic: about dcc hijacking... (fwd) Ben Winslow (Dec 22)
- Re: Ircii-epic: about dcc hijacking... Illuminatus Primus (Dec 23)
Re: DCC HiJacking patch for BitchX 75p1 David Jay Meltzer (Dec 22)
- <Possible follow-ups>
- Re: DCC HiJacking patch for BitchX 75p1 Ambrose Feinstein (Dec 22)
Re: CERT Advisory CA-98.13 - TCP/IP Denial of Service Ulf Munkedal (Dec 23)
- Re: CERT Advisory CA-98.13 - TCP/IP Denial of Service David Schwartz (Dec 23)
- The grand-son of Cuartango Hole aleph1 () UNDERGROUND ORG (Dec 23)
- Re: CERT Advisory CA-98.13 - TCP/IP Denial of Service Guido van Rooij (Dec 24)
  - lame old finger bounce bug still exists in sparc 2.7 spoon (Dec 26)
  - Breeze Network Server remote reboot and other bogosity. //Stany (Dec 26)
  - [patch] fix for urandom read(2) not interruptible Andrea Arcangeli (Dec 27)
  - Re: CERT Advisory CA-98.13 - TCP/IP Denial of Service Jeff Roberson (Dec 28)
  - Oracle8 TNSLSNR DoS Jason Ackley (Dec 28)
  - ssh2 security problem (and patch) (fwd) Darren Reed (Dec 29)
  - Comparison of THC-SCAN v2.0 with Sandstorm PhoneSweep 1.02 Simson L. Garfinkel (Dec 29)
  - Local/remote exploit for SCO UNIX. leshka (Dec 29)
  - followup on yahoo pager security problem Neulinger, Nathan R. (Dec 29)
  - Nmap 2.02 released (fwd) Chris Tobkin (Dec 29)
  - netscan.org - broadcast ICMP list Troy Davis (Dec 29)
  - Administrivia Aleph One (Dec 30)
FW: Microsoft Security Bulletin (MS98-020) MJE (Dec 23)
Nlog v1.0 Released - Nmap 2.x log management / analyzing tool HD Moore (Dec 23)
- <Possible follow-ups>
- Re: Nlog v1.0 Released - Nmap 2.x log management / analyzing tool duke (Dec 24)
Re: Linux PAM (up to 0.64-2) local root compromise Darren J Moffat - Enterprise Services OS Product Support Group (Dec 24)
Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules plasmoid deep/thc/clb (Dec 24)
- another X-Mas present :) vh (Dec 24)
- Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Mark K. Pettit (Dec 24)
- 3Com HiPer ARC vulnerable to nestea attack Olaf Selke (Dec 25)
- Yahoo Pager - security bug w/ services 7,8 Nathan Neulinger (Dec 25)
- <Possible follow-ups>
- Re: Merry Christmas to Sun! (Was: L0pht NFR N-Code Modules Scott D. Yelich (Dec 24)
Re: [SecureXpert Labs Advisory SX-98.12.23-01] Widespread DoS Jordan Ritter (Dec 24)
Network Scan Vulnerability [SUMMARY] Aleph One (Dec 24)
Merry Christmas, and Happy Phrack 54. route () RESENTMENT INFONEXUS COM (Dec 25)
Vulnerability Dana Jones (Dec 25)
bnc exploit duke (Dec 26)
- Re: bnc exploit Fernando Ultremare (Dec 26)
Re: Security Flaw in Cookies Implementation der Mouse (Dec 26)
Re: Update on Cisco IOS 12.0 security bug der Mouse (Dec 26)
mysql: mysqld creates world readable logs.. Michael Widenius (Dec 27)
Re: Comparison of THC-SCAN v2.0 with Sandstorm PhoneSweep 1.02 nimrood (Dec 29)
- Re: Comparison of THC-SCAN v2.0 with Sandstorm PhoneSweep 1.02 Josh Bailey (Dec 30)
- SecureXpert Labs Advisory [SX-98.12.30-01] SecureXpert DIRECT Sender (Dec 30)
- nmap kills hylafax too. David Gale (Dec 30)
- Oracle8 TNSLSNR DoS [SUMMARY] Aleph One (Dec 31)
- <Possible follow-ups>
- Re: Comparison of THC-SCAN v2.0 with Sandstorm PhoneSweep 1.02 Ryan Russell (Dec 29)
- Re: Comparison of THC-SCAN v2.0 with Sandstorm PhoneSweep 1.02 der Mouse (Dec 29)
Re: netscan.org - broadcast ICMP list Adam Herscher (Dec 30)
- Simple nmap/inetd workaround John Hawkinson (Dec 30)
- Re: netscan.org - broadcast ICMP list W.C. (Dec 30)
- Revisiting ufsdump under Solaris 2.6 Anonymous (Dec 30)
SRP Pete Gonzalez (Dec 30)

Previous period