Bugtraq: by author

385 messages starting Nov 15 99 and ending Oct 31 99
Date index | Thread index | Author index


Adam and Christine Levin

Re: Oracle 8 root exploit Adam and Christine Levin (Nov 15)
Re: Oracle 8 root exploit Adam and Christine Levin (Nov 16)

Adam Szilveszter

NT SP 6 TCP protocol stack issue: Hotfix available Adam Szilveszter (Nov 17)

ah1 () SECURITYFOCUS COM

RealNetworks RealServer G2 buffer overflow - WORKAROUND (fwd) ah1 () SECURITYFOCUS COM (Nov 04)
Jet Vulnerability affect Office 95 users (fwd) ah1 () SECURITYFOCUS COM (Nov 17)
SQL Server 7.0 Linked Server Password Vulnerability (fwd) ah1 () SECURITYFOCUS COM (Nov 15)

Ahmed Ghandour

Re: Netscape communicator 4.x Javascript security flaw Ahmed Ghandour (Nov 26)
Netscape communicator 4.x Javascript security flaw Ahmed Ghandour (Nov 24)

Alain Thivillon

Re: your mail Alain Thivillon (Nov 11)

Alan Brown

Re: your mail Alan Brown (Nov 12)

Alan Cox

Re: BindView Security Advisory: SSR Denial of Service Alan Cox (Nov 24)
Re: local users can panic linux kernel (was: SuSE syslogd Alan Cox (Nov 22)
Re: local users can panic linux kernel (was: SuSE syslogd advisory) Alan Cox (Nov 19)
Re: BIND bugs of the month (fwd) Alan Cox (Nov 14)

Alan J. Wylie

Re: Windows NT update carries bug Alan J. Wylie (Nov 16)

Alan Olsen

Re: Oracle 8 root exploit Alan Olsen (Nov 19)

Alberto Solińo

Re: WFTPD v2.40 FTPServer remotely exploitable buffer overflow vulnerability Alberto Solińo (Nov 04)

Alec Muffett

ANN: Bruce v1.0 Early Access 1 - Available for downloa Alec Muffett (Nov 22)

Aleph One

ISSalert: ISS Security Advisory: Multiple Root Compromise Vulnerabilities in Oracle Application Server Aleph One (Nov 10)
[Debian] New version of nfs-server fixes remote exploit Aleph One (Nov 11)
CERT Advisory CA-99.14 - Multiple Vulnerabilities in BIND Aleph One (Nov 11)
[debian] New version of nis released Aleph One (Nov 02)
Microsoft Security Bulletin (MS99-049) Aleph One (Nov 12)
Removal of TCP Initial Sequence Number Patch Aleph One (Nov 17)
Microsoft Security Bulletin (MS99-048) Aleph One (Nov 11)
Security Bulletins Digest Aleph One (Nov 24)
[debian] New versions of lpr released Aleph One (Nov 02)
[Debian] New version of proftpd fixes remote exploits Aleph One (Nov 11)
[Debian] New version of bind released Aleph One (Nov 17)
Re-release of Microsoft Security Bulletin MS99-042 Aleph One (Nov 04)
Microsoft Security Bulletin (MS99-043) Aleph One (Nov 17)
Microsoft Security Bulletin (MS99-047) Aleph One (Nov 04)

Alessandro Rubini

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Alessandro Rubini (Nov 26)

Alexandre Oliva

Re: Amanda multiple vendor local root compromises Alexandre Oliva (Nov 02)
Re: [Re: Amanda multiple vendor local root compromises] Alexandre Oliva (Nov 02)
Re: Amanda multiple vendor local root compromises Alexandre Oliva (Nov 02)
Re: [Re: Amanda multiple vendor local root compromises] Alexandre Oliva (Nov 03)

Alfred Huger

Re: FTGate vulnerability. (fwd) Alfred Huger (Nov 10)
From the SCO website Alfred Huger (Nov 17)
SCO su patches Alfred Huger (Nov 28)
SCO Patches Alfred Huger (Nov 05)
Caldera Pine Advisory Alfred Huger (Nov 22)
DoS with sysklogd, glibc (Caldera) Alfred Huger (Nov 22)

Alun Jones

Re: WFTPD v2.40 FTPServer remotely exploitable buffer overflow vulnerability Alun Jones (Nov 02)

Andrey Cherezov

Re: Eserv 2.50 Web interface Server Directory Traversal Vulnerability Andrey Cherezov (Nov 08)

Andy Helsby

Re: MS Outlook alert : Cuartango Active Setup - Workaround Instructions Andy Helsby (Nov 09)

Anonymous

(no subject) Anonymous (Nov 10)
(no subject) Anonymous (Nov 19)
Re: CERT Advisory CA-99-14 Multiple Vulnerabilities in BIND Anonymous (Nov 12)

antirez () INVECE ORG

hping2 antirez () INVECE ORG (Nov 16)
more about IP ID antirez () INVECE ORG (Nov 20)

Antonomasia

Re: Oracle 8 root exploit Antonomasia (Nov 15)

A. Steinmetz

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) A. Steinmetz (Nov 24)

Aviram Jenik

Palm Hotsync vulnerable to DoS attack Aviram Jenik (Nov 04)

Avri Schneider

Windows NT Spooler Service. Avri Schneider (Nov 07)

Balazs Scheidler

Re: DoS with sysklogd, glibc (Caldera) Balazs Scheidler (Nov 22)

Ben

Update on Auto_FTP Ben (Nov 12)
TooRcon Computer Security Expo Announces Pre-Registration Ben (Nov 28)

Ben Laurie

Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Ben Laurie (Nov 06)

Bill Fumerola

Re: Amanda multiple vendor local root compromises Bill Fumerola (Nov 01)
Re: FreeBSD 3.3's seyon vulnerability Bill Fumerola (Nov 09)

Bill Nottingham

[RHSA-1999:054-01] Security problems in bind Bill Nottingham (Nov 11)
[RHSA-1999:055-01] Denial of service attack in syslogd Bill Nottingham (Nov 19)
[RHSA-1999:053-01] new NFS server pacakges available (5.2, 4.2) Bill Nottingham (Nov 10)

BindView Advisory

SmartServer3 POP3 BindView Advisory (Nov 11)

BindView Security Advisory

BindView Security Advisory: SSR Denial of Service BindView Security Advisory (Nov 24)

Blake Frantz

Re: Tektronix PhaserLink Webserver Reveals Admin Password Blake Frantz (Nov 17)

Blue Boar

Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Blue Boar (Nov 05)
Overflow in tcplog.c (VD#3) Blue Boar (Nov 05)
thttpd 2.04 stack overflow (VD#6) Blue Boar (Nov 13)
Cisco NAT DoS (VD#1) Blue Boar (Nov 05)
Overflow in Alibaba Web Server 2.0 (VD#4) Blue Boar (Nov 06)
ICQ 2000 trojan/worm (VD#5) Blue Boar (Nov 06)
Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Blue Boar (Nov 07)
ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Blue Boar (Nov 13)

Bob Li

Re: Interscan VirusWall NT 3.23/3.3 buffer overflow. Bob Li (Nov 08)

Brendan Howes

Windows NT 4.0 Service Pack 6A Breaks IP Forwarding Brendan Howes (Nov 25)

Brent Paulson

Re: rpc.ttdbserverd on solaris 7 Brent Paulson (Nov 18)

Brian

default permissions for tin Brian (Nov 17)
Re: buffer overflow in HP JetDirect module (probably affects all HP printers with network support) Brian (Nov 19)

Brian Fundakowski Feldman

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Brian Fundakowski Feldman (Nov 14)

Brian Wellington

Re: your mail Brian Wellington (Nov 11)

Brock Tellier

Re: [Re: Amanda multiple vendor local root compromises] Brock Tellier (Nov 01)
Oracle 8i questions Brock Tellier (Nov 23)
Re: [Re: FreeBSD 3.3's seyon vulnerability] Brock Tellier (Nov 09)
FreeBSD 3.3's seyon vulnerability Brock Tellier (Nov 08)

Bronek Kozicki

Re: MS Outlook alert : Cuartango Active Setup Bronek Kozicki (Nov 09)
Re: WordPad/riched20.dll buffer overflow Bronek Kozicki (Nov 18)

Bruce A. Mah

Re: [Re: Amanda multiple vendor local root compromises] Bruce A. Mah (Nov 02)

bugz () NAZGUL COM

OS/390 Interlink Stack DoS with nmap bugz () NAZGUL COM (Nov 11)
Re: OS/390 Interlink Stack DoS with nmap bugz () NAZGUL COM (Nov 17)

canul

FICS buffer overflow canul (Nov 29)

Casper Dik

Re: WordPad/riched20.dll buffer overflow Casper Dik (Nov 30)

Chris Adams

Re: Security flaw in Cobalt RaQ2 cgiwrap Chris Adams (Nov 09)
Security flaw in Cobalt RaQ2 cgiwrap Chris Adams (Nov 08)

Chris Calabrese

Re: Oracle 8 root exploit Chris Calabrese (Nov 16)
Re: Oracle 8 root exploit Chris Calabrese (Nov 18)
Re: Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow Chris Calabrese (Nov 29)

Chris Tobkin

Re: Amanda multiple vendor local root compromises Chris Tobkin (Nov 01)

Christopher Rhodes

Re: WordPad/riched20.dll buffer overflow Christopher Rhodes (Nov 26)

Chris Yarnell

Re: BIND bugs of the month (fwd) Chris Yarnell (Nov 13)

Chuck Phillips

Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Chuck Phillips (Nov 07)

Crispin Cowan

ImmuniX OS Security Alert: StackGuard 1.21 Released Crispin Cowan (Nov 09)
Re: Stack Shield 0.6 beta relased Crispin Cowan (Nov 01)
Re: WordPad/riched20.dll buffer overflow Crispin Cowan (Nov 27)
Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Crispin Cowan (Nov 23)
Buffer Overflow Survey Paper Crispin Cowan (Nov 22)
Re: rpc.nfsd exploit code Crispin Cowan (Nov 11)
Re: "Function pointer" attacks. Crispin Cowan (Nov 02)
Re: ImmuniX OS Security Alert: StackGuard 1.21 Released Crispin Cowan (Nov 10)
Re: Vulnerability in ImmuniX OS Security Alert: StackGuard 1.21Released Crispin Cowan (Nov 13)

CyberPsychotic

Re: Overflow in tcplog.c (VD#3) CyberPsychotic (Nov 04)
Re: Caldera Pine Advisory CyberPsychotic (Nov 18)

Cy Schubert - ITSD Open Systems Group

Re: local users can panic linux kernel (was: SuSE syslogd advisory) Cy Schubert - ITSD Open Systems Group (Nov 23)

Daniel Jacobowitz

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Daniel Jacobowitz (Nov 16)

Dan Stromberg

rpc.ttdbserverd on solaris 7 Dan Stromberg (Nov 16)

dark spyrit

Interscan VirusWall NT 3.23/3.3 buffer overflow. dark spyrit (Nov 07)
RealNetworks RealServer G2 buffer overflow. dark spyrit (Nov 04)
Re: RealNetworks RealServer G2 buffer overflow. (fwd) dark spyrit (Nov 16)
Exploit + temp patch for aVirt mail server 3.5. dark spyrit (Nov 02)
Re: hard-coded windows exploits dark spyrit (Nov 17)
Patch for VirusWall 3.23. dark spyrit (Nov 07)

Darren Reed

Re: local users can panic linux kernel (was: SuSE syslogd Darren Reed (Nov 23)
Re: local users can panic linux kernel (was: SuSE syslogd Darren Reed (Nov 24)
Re: local users can panic linux kernel (was: SuSE syslogd advisory) Darren Reed (Nov 20)

Dave Tarbatt - ACS

SUBST problem Dave Tarbatt - ACS (Nov 30)

David LeBlanc

Re: MS Outlook alert : Cuartango Active Setup David LeBlanc (Nov 08)

David R. Conrad

(no subject) David R. Conrad (Nov 11)
Re: BIND bugs of the month David R. Conrad (Nov 14)
Re: CERT Advisory CA-99.14 - Multiple Vulnerabilities in BIND David R. Conrad (Nov 11)

deepquest () NETSCAPE NET

Re: MacOS 9 and the MacOS Netware Client deepquest () NETSCAPE NET (Nov 15)
yet another security threat in MS OE 5 deepquest () NETSCAPE NET (Nov 13)
Re: MacOS 9 and the MacOS Netware Client deepquest () NETSCAPE NET (Nov 15)

Dennis W. Mattison

[Fwd: Printer Vulnerability: Tektronix PhaserLink Webserver gives Administrator Password] Dennis W. Mattison (Nov 16)
Re: [Fwd: Printer Vulnerability: Tektronix PhaserLink Webservergives Administrator Password] Dennis W. Mattison (Nov 18)

der Mouse

Re: networksolutions CRYPT-PW salt (was: Re: Insecure handling of NetSol maintainer passwords) der Mouse (Nov 11)
Re: local users can panic linux kernel (was: SuSE syslogdadvisory) der Mouse (Nov 24)

devbugs () APPLE COM

Re: Mac OS 9 Idle Lock Bug devbugs () APPLE COM (Nov 04)
Re: Mac OS 9 Idle Lock Bug devbugs () APPLE COM (Nov 03)

D. J. Bernstein

Re: BIND bugs of the month (spoofing secure Web sites?) D. J. Bernstein (Nov 14)
Re: BIND bugs of the month D. J. Bernstein (Nov 12)
Re: BIND bugs of the month (spoofing secure Web sites?) D. J. Bernstein (Nov 13)

echo8

flaw in dmesg under Solaris echo8 (Nov 09)

edi () GANYMED ORG

Unqualified Postings edi () GANYMED ORG (Nov 01)

eEye - Digital Security Team

Printer (spooler) Service Vulnerabilities eEye - Digital Security Team (Nov 04)

Ejovi Nuwere

(no subject) Ejovi Nuwere (Nov 09)

elfchief () LUPINE ORG

Re: Tektronix PhaserLink Webserver Reveals Admin Password elfchief () LUPINE ORG (Nov 18)

Elias Levy

Re: BIND bugs of the month (spoofing secure Web sites?) Elias Levy (Nov 15)
Re: rpc.ttdbserverd on solaris 7 In-reply-to: Your message of &quot;Tue, 16 Nov 1999 14:34:41 PST.&quot; <3831DC01.BFE5B400 () nis acs uci edu> Elias Levy (Nov 19)
UnixWare 7's dtappgather Elias Levy (Nov 03)
Re: Unqualified Postings Elias Levy (Nov 03)
Re: Oracle 8 root exploit Elias Levy (Nov 16)
Re: Interscan VirusWall NT 3.23/3.3 buffer overflow. Elias Levy (Nov 09)
Printer Vulnerabilities (Tektronix and JetDirect) Elias Levy (Nov 23)
MS Outlook alert : Cuartango Active Setup Elias Levy (Nov 08)
BIND NXT Bug Vulnerability Elias Levy (Nov 10)

Eric Schultze

Fwd: Caching of passwords revealed after installing SP6 Eric Schultze (Oct 31)

Fabian Kroenner

Re: Windows NT update carries bug Fabian Kroenner (Nov 16)

Firstname Lastname

Re: your mail Firstname Lastname (Nov 12)

Frank Crawford

Re: [Re: Amanda multiple vendor local root compromises] Frank Crawford (Nov 03)

gabriel rosenkoetter

Re: Mac OS 9 Idle Lock Bug gabriel rosenkoetter (Oct 29)

George

NTmail and VRFY George (Nov 30)

Georgi Guninski

Default IE 5.0 security settings allow frame spoofing Georgi Guninski (Nov 30)
IE 5.0 XML HTTP redirect problems Georgi Guninski (Nov 22)
IE 5.0 vulnerabilities using HTTP redirection Georgi Guninski (Nov 04)
IE 5.0 and Windows Media Player ActiveX object allow checking the existence of local files and directories Georgi Guninski (Nov 14)

Gerardo Richarte

Vulnerability in ImmuniX OS Security Alert: StackGuard 1.21 Released Gerardo Richarte (Nov 11)
Re: WordPad/riched20.dll buffer overflow Gerardo Richarte (Nov 18)
Re: ImmuniX OS Security Alert: StackGuard 1.21 Released Gerardo Richarte (Nov 10)
Re: WordPad/riched20.dll buffer overflow Gerardo Richarte (Nov 24)
Re: hard-coded windows exploits Gerardo Richarte (Nov 17)
Re: WordPad/riched20.dll buffer overflow Gerardo Richarte (Nov 24)

Glynn Clements

Re: WordPad/riched20.dll buffer overflow Glynn Clements (Nov 27)

Goetz Babin-Ebell

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Goetz Babin-Ebell (Nov 24)

Greg Francis

Re: AW: Mac OS 9 Idle Lock Bug Greg Francis (Nov 01)

Gregory A Lundberg

Re: wu-ftpd bug Gregory A Lundberg (Nov 29)
Re: [RHSA-1999:054-01] Security problems in bind Gregory A Lundberg (Nov 13)

gregory duchemin

NEUROCOM: Nashuatec D445/435 vulnerabilities updated gregory duchemin (Nov 16)

Gregory Neil Shapiro

Re: Sendmail 8.x.x - any user may rebuild aliases database Gregory Neil Shapiro (Nov 22)
Re: Sendmail 8.8.x - time to upgrade? Gregory Neil Shapiro (Nov 22)

Guy Cohen

BigIP - bigconf.cgi holes Guy Cohen (Jun 13)
Re: BigIP - bigconf.cgi holes Guy Cohen (Nov 10)

Gwendolynn ferch Elydyr

F5 Networks Security Advisory (fwd) Gwendolynn ferch Elydyr (Nov 10)

Halcyon Skinner

NetBeans/ Forte' Java IDE HTTP vulnerability Halcyon Skinner (Nov 23)

hayward () SLOTHMUD ORG

Re: WU-FTPD hayward () SLOTHMUD ORG (Nov 12)

Ian Turner

Re: Amanda multiple vendor local root compromises Ian Turner (Nov 01)

iarce

Re: WFTPD v2.40 FTPServer remotely exploitable buffer overflow vulnerability iarce (Nov 04)

Iván Arce

Re: ImmuniX OS Security Alert: StackGuard 1.21 Released Iván Arce (Nov 10)

James J. Capone

NeoPlanet Saves all emails in Plain text James J. Capone (Nov 03)

Jared Still

Re: Oracle 8 root exploit Jared Still (Nov 16)

Jason Spence

Re: WordPad/riched20.dll buffer overflow Jason Spence (Nov 28)
Page table protection on Intel Jason Spence (Nov 26)

Jay Schimke

Microsoft/CERT IIS ODBC/RDS/IIS Advisory (MS98-004) Jay Schimke (Nov 01)

Jeff Bilicki

[Cobalt] Security Advisory - cgiwrap Jeff Bilicki (Nov 09)
[ COBALT ] Security Advisory - Sendmail Jeff Bilicki (Nov 24)
[ COBALT ] Security Advisory - syslog Jeff Bilicki (Nov 20)
[ Cobalt ] Security Advisory - Bind Jeff Bilicki (Nov 12)

Jefferson Ogata

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Jefferson Ogata (Nov 23)
networksolutions CRYPT-PW salt (was: Re: Insecure handling of NetSol maintainer passwords) Jefferson Ogata (Nov 10)
Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Jefferson Ogata (Nov 08)
Re: Insecure handling of NetSol maintainer passwords Jefferson Ogata (Nov 09)

Jeremy Iverson

DNA-1999-001: NetTerm FTP Daemon vulnerabilities Jeremy Iverson (Nov 22)

Jeremy Kothe

Re: hardcoded windows exploits Jeremy Kothe (Nov 17)
Re: hardcoded windows exploits Jeremy Kothe (Nov 17)

Jesús López de Aguileta

Avirt Mail Server 3.3a or 3.5 remotely exploitable buffer overflow vulnerability Jesús López de Aguileta (Nov 02)

Jim Duncan

Re: Cisco NAT DoS (VD#1) Jim Duncan (Nov 28)

Jim Hebert

Pine: expanding env vars in URLs (seems to be fixed as of 4.21) Jim Hebert (Nov 17)

Jim Knoble

Re: Microsoft Security Bulletin (MS99-051) (fwd) Jim Knoble (Nov 29)

jlewis () LEWIS ORG

Insecure handling of NetSol maintainer passwords jlewis () LEWIS ORG (Nov 08)
Re: networksolutions CRYPT-PW salt (was: Re: Insecure handling of NetSol maintainer passwords) jlewis () LEWIS ORG (Nov 13)

Jochen Bauer

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Jochen Bauer (Nov 16)

John D. Hardin

Re: [RHSA-1999:054-01] Security problems in bind John D. Hardin (Nov 11)
Re: [RHSA-1999:054-01] Security problems in bind John D. Hardin (Nov 12)

John Madden

Re: Microsoft Security Bulletin (MS99-043) John Madden (Nov 18)

Jonas Eriksson

FreeBSD sysinstall Jonas Eriksson (Nov 20)

Jonathan A. Zdziarski

Oracle 8i Security Jonathan A. Zdziarski (Nov 02)

Joseph W. Breu

Re: 3Com cable modems / Mediaone Joseph W. Breu (Nov 29)

Ken Williams

Call for papers, Malicious Information Technology Ken Williams (Nov 05)

Kerb

Notifying Vendors Kerb (Nov 18)
More Alibaba Web Server problems... Kerb (Nov 03)

Kevork Belian

Remote DoS attack against Microsoft SQL Server 7.0 Kevork Belian (Nov 17)

Kitetoa

Re: Netscape Web Publisher Kitetoa (Nov 08)

Kurt Seifried

Re: BIND bugs of the month (spoofing secure Web sites?) Kurt Seifried (Nov 14)

Lamont Granquist

Re: Buffer overflow exploit in the alpha linux Lamont Granquist (Nov 15)

Luciano Martins

Avirt Mail Server 3.3a or 3.5 remotely exploitable buffer overflow vulnerability Luciano Martins (Nov 01)

Luis Henriques

3Com cable modems / Mediaone Luis Henriques (Nov 30)

m4rcyS

Re: FormHandler.cgi m4rcyS (Nov 16)

Malcolm Beattie

Re: local users can panic linux kernel (was: SuSE syslogd advisory) Malcolm Beattie (Nov 22)

Mandachi, Dorin (CCI-Omaha)

Re: 3Com cable modems / Mediaone Mandachi, Dorin (CCI-Omaha) (Nov 29)

Marc

Re: Windows NT Spooler Service. Marc (Nov 07)
Re: Remote D.o.S Attack in G6 FTP Server v2.0 (beta 4/5) Vulnerability Marc (Nov 17)
Re: Unqualified Postings Marc (Nov 01)

Marc Heuse

SuSE Security Announcement - new security tools Marc Heuse (Nov 26)

Marc Slemko

Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Marc Slemko (Nov 06)

Mariusz Marcinkiewicz

rpc.nfsd exploit code Mariusz Marcinkiewicz (Nov 10)
Re: rpc.nfsd exploit code Mariusz Marcinkiewicz (Nov 12)
undocumented bugs - nfsd Mariusz Marcinkiewicz (Nov 09)

Mariusz Woloszyn

Re: &quot;Function pointer&quot; attacks. Mariusz Woloszyn (Nov 03)

Mark

Re: MS Outlook alert : Cuartango Active Setup - Workaround Instructions Mark (Nov 08)

Mark Seiden

Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Mark Seiden (Nov 24)

Markus Friedl

ssh-1.2.27 fails to check size of RSA-key Markus Friedl (Nov 04)

Martin Mevald

Re: Oracle 8 root exploit Martin Mevald (Nov 15)

Mary Ann Davidson

Potential vulnerability in Oracle Mary Ann Davidson (Nov 18)

Matt Conover

[w00giving '99 #3, w00news] UnixWare 7's /var/sadm Matt Conover (Nov 11)
[w00giving '99 #6]: UnixWare 7's Xsco Matt Conover (Nov 25)
[w00giving '99 #7]: UnixWare 7's xlock Matt Conover (Nov 25)
[w00giving '99 #5 and w00news]: UnixWare 7's su Matt Conover (Nov 25)

Matt White

MacOS 9 and the MacOS Netware Client Matt White (Nov 14)

Metal Hurlant

Re: Netscape communicator 4.x Javascript security flaw Metal Hurlant (Nov 26)

Michael Almond

SCO Security Bulletin 99.17 Michael Almond (Nov 05)

Michal Zalewski

bash 1.x - command substitution bug Michal Zalewski (Dec 12)
Sendmail 8.8.x - time to upgrade? Michal Zalewski (Jul 14)
Sendmail 8.x.x - any user may rebuild aliases database Michal Zalewski (Dec 12)
Re: lynx 2.8.x - 'special URLs' anti-spoofing protection is weak Michal Zalewski (Nov 18)
Re: bash 1.x - command substitution bug Michal Zalewski (Jul 14)
Re: local users can panic linux kernel (was: SuSE syslogd advisory) Michal Zalewski (Jul 16)

michele sensalari

THE 12th ANNUAL FIRST CONFERENCE on COMPUTER SECURITY michele sensalari (Nov 11)

Microsoft Product Security Response Team

Microsoft Security Bulletin MS99-047, Patch Available for &quot;Malfor med Spooler Request&quot; Vulnerability Microsoft Product Security Response Team (Nov 08)

Mikael Olsson

Re: IE4/5 &quot;file://&quot; buffer overflow Mikael Olsson (Nov 09)

Mike Boto

Netscape Communicator 4.7 - Navigator Overflows Mike Boto (Nov 24)
Netscape Communicator 4.7 - Navigator Overflows Mike Boto (Nov 27)

Mike Eldridge

Re: AW: Mac OS 9 Idle Lock Bug Mike Eldridge (Nov 01)

Mike Iglesias

Re: BIND NXT Bug Vulnerability Mike Iglesias (Nov 10)

Mike Johnson

Re: F5 Networks Security Advisory (fwd) Mike Johnson (Nov 11)

Mixter

serious Qpopper 3.0 vulnerability Mixter (Nov 29)
local users can panic linux kernel (was: SuSE syslogd advisory) Mixter (Nov 18)

Mnemonix

WU-FTPD Mnemonix (Nov 11)
Re: Netscape Web Publisher Mnemonix (Nov 07)
Re: WordPad/riched20.dll buffer overflow Mnemonix (Nov 19)
FormHandler.cgi Mnemonix (Nov 11)
Oracle Web Listener Mnemonix (Nov 25)
Re: WordPad/riched20.dll buffer overflow Mnemonix (Nov 23)

monti

Re: Amanda multiple vendor local root compromises monti (Nov 01)

nascheme () ENME UCALGARY CA

Re: RFP9906 - Services.exe DoS in NT 4 (RFPoison) nascheme () ENME UCALGARY CA (Nov 01)

Nathan Neulinger

Re: Security flaw in Cobalt RaQ2 cgiwrap Nathan Neulinger (Nov 08)

nblasgen () NICK REFRACT COM

Re: Netscape Web Publisher nblasgen () NICK REFRACT COM (Nov 07)

Nick Craig-Wood

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Nick Craig-Wood (Nov 18)

Nobuo Miwa

MDaemon 2.7 J DoS Nobuo Miwa (Nov 29)

Oezguer Kesim

[squid] exploit for external authentication problem Oezguer Kesim (Nov 03)

Olaf Kirch

Re: undocumented bugs - nfsd Olaf Kirch (Nov 10)
Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Olaf Kirch (Nov 24)
Re: [linux-security] Re: undocumented bugs - nfsd Olaf Kirch (Nov 11)

Oystein Viggen

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Oystein Viggen (Nov 16)

Pat Hayden

Re: buffer overflow in HP JetDirect module (probably affects all HP printers with network support) Pat Hayden (Nov 20)

Paul Boyer

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Paul Boyer (Nov 24)

Pauli Ojanpera

WordPad/riched20.dll buffer overflow Pauli Ojanpera (Nov 18)

Pavel Kankovsky

Re: Pine: expanding env vars in URLs (seems to be fixed as of 4.21) Pavel Kankovsky (Nov 22)

pedward () WEBCOM COM

Re: WordPad/riched20.dll buffer overflow pedward () WEBCOM COM (Nov 26)
Re: F5 Networks Security Advisory (fwd) pedward () WEBCOM COM (Nov 11)
Re: Insecure handling of NetSol maintainer passwords pedward () WEBCOM COM (Nov 10)
Re: F5 Networks Security Advisory (fwd) pedward () WEBCOM COM (Nov 10)

Peter Kane

Re: Windows NT update carries bug Peter Kane (Nov 16)

Peter W

Re: BIND bugs of the month (spoofing secure Web sites?) Peter W (Nov 13)

Peter Walker

Re: [Re: Amanda multiple vendor local root compromises] Peter Walker (Nov 01)

Posick, Steve

Re: Oracle Web Listener Posick, Steve (Nov 29)

.rain.forest.puppy.

RFP9906 - Services.exe DoS in NT 4 (RFPoison) .rain.forest.puppy. (Nov 01)
Antidote to RFPoison--followup to RFP9906 .rain.forest.puppy. (Nov 05)
RFP9907: You, your servers, RDS, and thousands of script kiddies .rain.forest.puppy. (Nov 03)
mistake in &quot;Antidote for RFPoison&quot; (fwd) .rain.forest.puppy. (Nov 06)

Richard Trott

Re: BIND NXT Bug Vulnerability Richard Trott (Nov 10)

Rob

Re: Amanda multiple vendor local root compromises Rob (Nov 01)

Robert Watson

Re: [Re: Amanda multiple vendor local root compromises] Robert Watson (Nov 02)

Rob Gilde

Re: BigIP - bigconf.cgi holes Rob Gilde (Nov 10)
Re: BigIP - bigconf.cgi holes Rob Gilde (Nov 09)

Roger Fajman

BIND 8.2.2-P5 release announcement Roger Fajman (Nov 13)

Rogier Wolff

Re: F5 Networks Security Advisory (fwd) Rogier Wolff (Nov 12)
Re: rpc.nfsd exploit code Rogier Wolff (Nov 12)

Ronan Waide

Re: [Fwd: Printer Vulnerability: Tektronix PhaserLink Webserver gives Administrator Password] Ronan Waide (Nov 17)

Ron Parker

Re: WordPad/riched20.dll buffer overflow Ron Parker (Nov 23)

Savochkin Andrey Vladimirovich

Re: local users can panic linux kernel (was: SuSE syslogd advisory) Savochkin Andrey Vladimirovich (Nov 20)
Re: local users can panic linux kernel (was: SuSE syslogd Savochkin Andrey Vladimirovich (Nov 24)
Re: local users can panic linux kernel (was: SuSE syslogd Savochkin Andrey Vladimirovich (Nov 23)

scott

RFP9906 - Services.exe DoS in NT 4 (RFPoison) - Workaround scott (Nov 01)

Scott Zimmerman

Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Scott Zimmerman (Nov 24)

Sean Malloy

Ultimate Bulletin Board v5.3x? Bug Sean Malloy (Nov 29)

Sean Sosik-Hamor

Re: Insecure handling of NetSol maintainer passwords Sean Sosik-Hamor (Nov 11)

Sebastian

vwxploit.c unix port Sebastian (Nov 08)
Delegate 5.9.x - 6.0.x remote exploit (possibly others) Sebastian (Nov 13)
realown.c, unix port of realown.asm by dark spyrit Sebastian (Nov 04)

Sehmel, William C.

Fw: CERT Summary CS-99.04 Sehmel, William C. (Nov 24)

Seth R Arnold

Re: Remote D.o.S Attack in G6 FTP Server v2.0 (beta 4/5) Vulnerability Seth R Arnold (Nov 17)

Shafik Yaghmour

Re: local users can panic linux kernel (was: SuSE syslogdadvisory) Shafik Yaghmour (Nov 23)

sherrera () BASS CUESTA CC CA US

Re: MacOS 9 and the MacOS Netware Client sherrera () BASS CUESTA CC CA US (Nov 15)

Shok

[w00giving '99 #2] IMAIL POP server Shok (Nov 07)

Signal 11

3Com cable modems / Mediaone Signal 11 (Nov 27)

Simple Nomad

Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Simple Nomad (Nov 24)
Re: hard-coded windows exploits Simple Nomad (Nov 17)
Pandora v4 Beta 2 Software Simple Nomad (Nov 19)

Solar Designer

Re: WordPad/riched20.dll buffer overflow Solar Designer (Nov 29)
Re: CERT Advisory CA-99-14 Multiple Vulnerabilities in BIND Solar Designer (Nov 12)

Solar Eclipse

Re: WordPad/riched20.dll buffer overflow Solar Eclipse (Nov 22)
Re: WordPad/riched20.dll buffer overflow - Full Details Solar Eclipse (Nov 21)

Stephen White

Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Stephen White (Nov 06)

Steve D'Angona

Re: Oracle 8 root exploit Steve D'Angona (Nov 18)

Steven Champeon

Re: Guestbook.pl, sloppy SSI handling in Apache? (VD#2) Steven Champeon (Nov 07)

Steven M. Bellovin

Re: BIND bugs of the month (spoofing secure Web sites?) Steven M. Bellovin (Nov 14)

Swen Persson

(no subject) Swen Persson (Nov 24)

Szilveszter Adam

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Szilveszter Adam (Nov 14)

Taeho Oh

Buffer overflow exploit in the alpha linux Taeho Oh (Nov 13)

Tellier, Brock

Amanda multiple vendor local root compromises Tellier, Brock (Oct 30)
hylafax-4.0.2 local exploit Tellier, Brock (Nov 03)
Oracle 8 root exploit Tellier, Brock (Nov 13)

Theo de Raadt

Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) Theo de Raadt (Nov 13)

Thomas Biege

SuSE Security Announcement Thomas Biege (Nov 16)
SuSE Security Announcement - syslogd (a1) Thomas Biege (Nov 18)
Re: hylafax-4.0.2 local exploit Thomas Biege (Nov 04)

Thomas Dullien

Re: WordPad/riched20.dll buffer overflow Thomas Dullien (Nov 23)
Re: hard-coded windows exploits Thomas Dullien (Nov 17)
Re: More Alibaba Web Server problems... Thomas Dullien (Nov 05)

Tim Jones

Netscape Web Publisher Tim Jones (Nov 06)

Tobias Haustein

buffer overflow in HP JetDirect module (probably affects all HP printers with network support) Tobias Haustein (Nov 19)

Todd C. Campbell

ProFTPd - mod_sqlpw.c Todd C. Campbell (Nov 19)

Tony Plastino

Re: Windows NT update carries bug Tony Plastino (Nov 16)

Trevor Schroeder

Re: Insecure handling of NetSol maintainer passwords Trevor Schroeder (Nov 10)

Ultor

ssh 1.2.27 limits patch Ultor (Nov 16)
Re: ssh 1.2.27 limits patch Ultor (Nov 16)

UNYUN

IE4/5 &quot;file://&quot; buffer overflow UNYUN (Nov 08)
another hole of Solaris7 kcms_configure UNYUN (Nov 29)
Irfan view 3.07 buffer overflow UNYUN (Nov 08)
Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow UNYUN (Nov 29)
Some holes for Win/UNIX softwares UNYUN (Nov 02)

User SCOTT

Re: WordPad/riched20.dll buffer overflow User SCOTT (Nov 18)

Ussr Labs

Remote DoS Attack in BisonWare FTP Server V3.5 Vulnerability Ussr Labs (Nov 24)
Remote DoS Attack in BFTelnet Server v1.1 for Windows NT Ussr Labs (Nov 04)
Multiples Remotes DoS Attacks in MDaemon Server v2.8.5.0 Vulnerability Ussr Labs (Nov 24)
Re: WordPad/riched20.dll buffer overflow Ussr Labs (Nov 19)
FTGate Version 2.1 Web interface Server Directory Traversal Vulnerability Ussr Labs (Nov 05)
Remote D.o.S Attack in ZetaMail 2.1 Mail POP3/SMTP Server Vulnerability Ussr Labs (Nov 19)
Multiples Remotes DoS Attacks in Artisoft XtraMail v1.11 Vulnerability Ussr Labs (Nov 10)
Remote DoS Attack in Vermillion FTP Daemon (VFTPD) v1.23 Vulnerability Ussr Labs (Nov 22)
Eserv 2.50 Web interface Server Directory Traversal Vulnerability Ussr Labs (Nov 04)
Re: WordPad/riched20.dll buffer overflow Ussr Labs (Nov 23)
NetCPlus SmartServer3 POP 3.51.1 EXPLOIT Ussr Labs (Nov 14)
Remote DoS Attack in WorldClient Server v2.0.0.0 Vulnerability Ussr Labs (Nov 24)
Remote DoS Attack in TransSoft's Broker Ftp Server v3.5 Vulnerability Ussr Labs (Nov 08)
Remote D.o.S Attack in G6 FTP Server v2.0 (beta 4/5) Vulnerability Ussr Labs (Nov 16)
Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability Ussr Labs (Nov 09)

v0rt

Re: Unqualified Postings v0rt (Nov 02)

vendicator () USA NET

&quot;Function pointer&quot; attacks. vendicator () USA NET (Nov 01)
Stack Shield 0.6 beta relased vendicator () USA NET (Nov 01)

Wanderley J. Abreu Jr.

Re: Unqualified Postings Wanderley J. Abreu Jr. (Nov 01)

Wietse Venema

Re: Fix for ssh-1.2.27 symlink/bind problem Wietse Venema (Nov 03)

William Daskaluk

Re: Ultimate Bulletin Board v5.3x? Bug William Daskaluk (Nov 30)

Williams, Ken

Windows NT update carries bug Williams, Ken (Nov 15)

Zachary Keane

Re: Mac OS 9 Idle Lock Bug Zachary Keane (Oct 31)