Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

316 messages starting Nov 30 01 and ending Dec 31 01
Date index | Thread index | Author index

• ASI Oracle Security Alert: Oracle Home Environment Variable Validation Vulnerability Aaron C. Newman (Nov 30)
• ASI Oracle Security Alert: CHOWN Path Environment Variable Vulnerability Aaron C. Newman (Nov 30)
• Security Update: [CSSA-2001-SCO.36] Open UNIX, UnixWare 7: wu-ftpd ftpglob() vulnerability security (Nov 30)
• ASI Oracle Security Alert: Oracle Home Environment Variable Buffer Overflow Aaron C. Newman (Nov 30)
• Re: UUCP sirsyko (Dec 01)
  • Re: UUCP Casper Dik (Dec 02)
• easynews 1.5 let's remote users modify database markus arndt (Dec 01)
• Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Hasan Azam Diwan (Dec 01)
  • Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Travis Siegel (Dec 02)
  • Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability goba (Dec 02)
    • Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Morten Poulsen (Dec 03)
      • Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Jedi/Sector One (Dec 03)
  • <Possible follow-ups>
  • Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Patrick Cantwell (Dec 05)
• RE: def-2001-32 - Allaire JRun directory browsing vulnerability Johan Burati (Dec 01)
  • Re: def-2001-32 - Allaire JRun directory browsing vulnerability David Walker (Dec 03)
• Re: File extensions spoofable in MSIE download dialog static (Dec 02)
  • <Possible follow-ups>
  • Re: File extensions spoofable in MSIE download dialog cube (Dec 05)
  • RE: File extensions spoofable in MSIE download dialog Yngve Ã…dlandsvik (Dec 12)
• mIRC bug? Shustrik (Dec 02)
• Stack overflow in all Internet Explorer Versions!! tsr (Dec 02)
  • Re: Stack overflow in all Internet Explorer Versions!! Jonathan G. Lampe (Dec 03)
  • <Possible follow-ups>
  • RE: Stack overflow in all Internet Explorer Versions!! Mendez, Edgar (Dec 04)
  • RE: Stack overflow in all Internet Explorer Versions!! Microsoft Security Response Center (Dec 04)
• Phpnuke Cross site scripting vulnerability Cabezon Aurélien (Dec 02)
• [Security Announce] MDKSA-2001:077-2 - apache update for Single Network Firewall [Spam] Linux Mandrake Security Team (Dec 02)
• [SECURITY] [DSA-087-1] wu-ftpd buffer overflow in glob code Wichert Akkerman (Dec 02)
• Re: NAI Webshield SMTP for WinNT MIME header vuln that allows BadTrans to pass] Paul L Schmehl (Dec 02)
  • RE: NAI Webshield SMTP for WinNT MIME header vuln that allowsBadTrans to pass Jari Helenius (Dec 01)
• OpenBSD local DoS Rapid 7 Security Advisories (Dec 02)
  • Re: OpenBSD local DoS Brett Lymn (Dec 03)
• Re: iXsecurity.tool.smbproxy.1.0.0 Pavel Kankovsky (Dec 03)
  • Re[2]: iXsecurity.tool.smbproxy.1.0.0 3APA3A (Dec 04)
    • Re[3]: iXsecurity.tool.smbproxy.1.0.0 3APA3A (Dec 04)
• Buffer over flow on Outlook express for Macintosh Shikap (Dec 03)
• (BSDi/4.0-specific)uucp family exploit. (uucp/uuparams/uuname) Vade 79 (Dec 03)
• SSH Vulnerability Scan Niels Provos (Dec 03)
• SuSE Security Announcement: OpenSSH Sebastian Krahmer (Dec 03)
• Can anyone verify a core dump on /sbin/mingetty smackenz (Dec 03)
  • Message not available
    • Re: Can anyone verify a core dump on /sbin/mingetty - FOLLOW UP - Getty also dumping core Bill Weiss (Dec 03)
• Allaire JRun ACL bypassing/soure disclosure vulnerability Gregory Duchemin (Dec 03)
• Symlink attack with apmd of RH 7.2 Enrico Scholz (Dec 03)
• SpeedXess HASE-120 router default password profre (Dec 04)
• SUSEconfig weakens Postfix chroot security Matthias Andree (Dec 04)
• security issue with lpd (fwd) Jose Nazario (Dec 04)
• REVISION: Security Update: [CSSA-2001-SCO.24.1] OpenServer: shell here-documents allow various security breaches security (Dec 04)
• NMRC Advisory - Multiple Valicert Problems Information Anarchy 2K01 (Dec 04)
• [Fwd: OpenSSH 3.0.2 fixes UseLogin vulnerability] Jimmy Wiklund (Dec 04)
• RE: NAI Webshield SMTP for WinNT MIME header vuln Alan Monaghan (Dec 04)
  • RE: NAI Webshield SMTP for WinNT MIME header vuln Eric Chien (Dec 06)
• [SECURITY] [DSA-089-1] several problems in icecast-server Wichert Akkerman (Dec 05)
• [SECURITY] [DSA-088-1] improper character escaping in fml Wichert Akkerman (Dec 05)
• Update on NMRC's Valicert Advisory Information Anarchy 2K01 (Dec 05)
• [SECURITY] [DSA-091-1] OpenSSH UseLogin vulnerability Wichert Akkerman (Dec 05)
• Many vulnerabilities in LSF 4.0 Tomasz Grabowski (Dec 05)
  • <Possible follow-ups>
  • Re: Many vulnerabilities in LSF 4.0 Greg Reid (Dec 07)
• Re: IE Denial of service (sorta) Jeff Sampson (Dec 05)
  • <Possible follow-ups>
  • IE Denial of service (sorta) zeno (Dec 05)
• IPRoute Fragmentation Denial of Service Vulnerability Chris Gragsone (Dec 05)
• Small flaw in Outlook Express Raistlin (Dec 05)
• Axis Network Camera known default password vulnerability Chris Gragsone (Dec 05)
  • <Possible follow-ups>
  • Re: Axis Network Camera known default password vulnerability Torgeir Hansen (Dec 06)
  • Re: Axis Network Camera known default password vulnerability Joacim Tullberg (Dec 06)
• Microsoft's Outlook Express 6 "E-mail attachment security" Flawed Arie Slob (Dec 05)
• [RHSA-2001:161-08] Updated OpenSSH packages available bugzilla (Dec 05)
• [SECURITY] [DSA-092-1] local root in wmtv Wichert Akkerman (Dec 06)
• Flawed outbound packet filtering in various personal firewalls Tom Liston (Dec 06)
  • <Possible follow-ups>
  • Re: Flawed outbound packet filtering in various personal firewalls Te Smith (Dec 06)
  • Re: Flawed outbound packet filtering in various personal firewalls Robert Graham (Dec 11)
• security bulletins digest IT Resource Center (Dec 06)
  • <Possible follow-ups>
  • security bulletins digest IT Resource Center (Dec 12)
• Security Update: [CSSA-2001-SCO.37] Open UNIX, UnixWare 7: xterms in saved CDE sessions security (Dec 06)
• [SECURITY] [DSA-090-1] xtel symlink vulnerabilities Wichert Akkerman (Dec 06)
• SuSE Security Announcement: openssh (SuSE-SA:2001:045) (re-released SuSE-SA:2001:044) Roman Drahtmueller (Dec 06)
• Microsoft Security Bulletin MS01-057 Microsoft Product Security (Dec 06)
• RE: Another IE denial of service attack Timothy Luce (Dec 06)
  • RE: Another IE denial of service attack Joshua Merchant (Dec 07)
• Red Faction Server/Client DOS sh0 (Dec 07)
• UDP DoS attack in Win2k via IKE c0redump (Dec 07)
  • Re: UDP DoS attack in Win2k via IKE Darren Reed (Dec 08)
  • Re: UDP DoS attack in Win2k via IKE Marcelo Bartsch (Dec 12)
    • Re: UDP DoS attack in Win2k via IKE Emre Yildirim (Dec 12)
  • <Possible follow-ups>
  • UDP DoS attack in Win2k via IKE c0redump (Dec 11)
• Crashing X scott (Dec 07)
  • Re: Crashing X John Scimone (Dec 08)
    • Re: Crashing X KF (Dec 10)
      • Re: Crashing X Paul Starzetz (Dec 11)
  • Re: Crashing X Seth Arnold (Dec 08)
    • Re: Crashing X Matthieu Herrb (Dec 08)
  • Re: Crashing X munehiro (Dec 08)
  • <Possible follow-ups>
  • Re: Crashing X Joe Schmoe (Dec 11)
• Minor IE issue KRUSE PETER, Teliadk (Dec 07)
• [RHSA-2001:164-08] Updated secureweb packages available bugzilla (Dec 07)
• re: comphack - Compaq Insight Manager Remote SYSTEM shell Boren, Rich (SSRT) (Dec 07)
• Security Update: [CSSA-2001-SCO.38] OpenServer: lpstat buffer overflow security (Dec 07)
• SECURITY.NNOV: file locking and security (group policy DoS on Windows 2000 domain) 3APA3A (Dec 07)
  • Re: SECURITY.NNOV: file locking and security (group policy DoS on Windows 2000 domain) Seth Arnold (Dec 08)
    • Re[2]: SECURITY.NNOV: file locking and security (group policy DoS on Windows 2000 domain) 3APA3A (Dec 10)
• Weak Encryption Vulnerability in Pathways Homecare shoeboy (Dec 08)
• Re: Vulnerabilities in PGPMail.pl Markus Bertheau (Dec 08)
• Lotus Domino Web server vulnerability Sebastien EXT-MICHAUD (Dec 08)
• kebi-Webmail Solution vulnerability (Tested) Secret (Dec 08)
• Microsoft Security Bulletin MS01-057 (version 2.0) Microsoft Product Security (Dec 08)
• Winsock RSHD/NT 2.20.00 CPU overusage when invalid data is send martin rakhmanoff (Dec 10)
• AIO vulnerability David Rufino (Dec 10)
• New Macromedia Security Zone Bulletins Posted Macromedia Security Alert (Dec 10)
• Windows hack for Web-surfing privacy Thomas C. Greene (Dec 10)
• Netscape engineers are weenies? s1gnal_9 (Dec 10)
  • Re: Netscape engineers are weenies? NyQuist (Dec 11)
• Security Update: [CSSA-2001-SCO.35.1] REVISION: OpenServer: setcontext and sysi86 vulnerabilities security (Dec 11)
• Microsoft IIS/5 bogus Content-length bug. Ivan Hernandez Puga (Dec 11)
  • RE: Microsoft IIS/5 bogus Content-length bug. Eric Fleischman (Dec 12)
• Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls security (Dec 11)
• CSVForm (Perl CGI) Remote Execution Vulnerability Jason Gomes (Dec 11)
• SPAMMERS DELIGHT: as feeble as feeble can be http-equiv () excite com (Dec 11)
  • Re: SPAMMERS DELIGHT: as feeble as feeble can be Gert-Jan Hagenaars (Dec 11)
• Microsoft IIS/5 bogus Content-length bug Memory attack Ivan Hernandez Puga (Dec 11)
• Cross-Frame, About Pluggable Protocol, Security Zone Spoofing the Pull (Dec 11)
• [CLA-2001:445] Conectiva Linux Security Announcement - mailman secure (Dec 11)
• Mail Essentials reveals identity of first BCC recipient Ronan Waide (Dec 12)
  • Re: Mail Essentials reveals identity of first BCC recipient Jörgen Persson (Dec 12)
  • <Possible follow-ups>
  • Re: Mail Essentials reveals identity of first BCC recipient J Leon (Dec 24)
• [SECURITY] [DSA-093-1] postfix memory exhaustion Wichert Akkerman (Dec 12)
• Microsoft IIS/5.0 Content-Length DoS (proved) Ivan Hernandez Puga (Dec 12)
• [xforce () iss net: ISSalert: ISS Advisory: Buffer Overflow in /bin/login] Dan Stromberg (Dec 12)
  • Re: [xforce () iss net: ISSalert: ISS Advisory: Buffer Overflow in /bin/login] Wietse Venema (Dec 12)
• Silly 'script' hardlink bug - fixed Marco van Berkum (Dec 12)
• Silly 'script' hardlink bug Marco van Berkum (Dec 12)
  • Re: Silly 'script' hardlink bug Michael Shigorin (Dec 13)
• CERT Advisory CA-2001-34 Buffer Overflow in System V Derived Login CERT Advisory (Dec 12)
  • Re: CERT Advisory CA-2001-34 Buffer Overflow in System V Derived Login Florian Weimer (Dec 13)
  • Re: CERT Advisory CA-2001-34 Buffer Overflow in System V Derived Login Scott Howard (Dec 14)
    • Re: CERT Advisory CA-2001-34 Buffer Overflow in System V Derived Login Bill Clawson (Dec 15)
  • <Possible follow-ups>
  • Re: CERT Advisory CA-2001-34 Buffer Overflow in System V Derived Login Derrick Scholl (Dec 14)
• MDKSA-2001:091 - passwd update Mandrake Linux Security Team (Dec 12)
• [CLA-2001:444] Conectiva Linux Security Announcement - sasl secure (Dec 12)
• Browsers fails on big image count Pavel Titov (Dec 12)
• Webseal 3.8 Matthew Lane (Dec 13)
• Security Update [CSSA-2001-042.0] Linux - Remote vulnerability in OpenSSH Support Info (Dec 13)
• IBM WebSphere on UNIX security alert ! Tunkelo Heikki (extern) (Dec 13)
  • Re: IBM WebSphere on UNIX security alert ! Christer Palm (Dec 13)
• SMC Barricade's dodgy "DMZ" feature Dustin Harriman (Dec 13)
• PATCH: Vulnerabilities in LSF Greg Reid (Dec 13)
• Kikkert Security Advisory: Potentially serious security flaw in Citrix Client Kikkert Security (Dec 13)
• EFTP 2.0.8.346 directory content disclosure Ertan Kurt (Dec 13)
• WRSHDNT 2.21.00 CPU overusage martin rakhmanoff (Dec 13)
• ATPhttpd 0.4 DoS Vulnerability Tamer Sahin (Dec 13)
• Older Webmin install /tmp KF (Dec 13)
• Zyxel Prestige 681 and 1600 (possibly other?) remote DoS Przemyslaw Frasunek (Dec 14)
  • Re: Zyxel Prestige 681 and 1600 (possibly other?) remote DoS Przemyslaw Frasunek (Dec 18)
    • Re: IIS 5.0 Content Length DOS vulnerability Eric Maiwald (Dec 18)
• MDKSA-2001:092 - openssh update Mandrake Linux Security Team (Dec 14)
• klprfax_filter symlink vulnerability wang yuan (Dec 14)
  • Re: klprfax_filter symlink vulnerability George Staikos (Dec 14)
• MSIE may download and run progams automatically Jouko Pynnonen (Dec 14)
  • Re: MSIE may download and run progams automatically Richard Welty (Dec 14)
• Update: FTP "Network Place" with saved password will reveal cached password Aaron Heck (Dec 14)
• FTP "Network Place" with saved password will reveal cached password Aaron Heck (Dec 14)
• Security Update: [CSSA-2001-SCO.40] OpenServer: /bin/login and /etc/getty argument buffer overflow security (Dec 14)
• Security Update: [CSSA-2001-042.1] Linux - Local vulerability in OpenSSH Support Info (Dec 14)
• MSIE6 can read local files jelmer (Dec 15)
• Win ME, Apache/1.3.20 and PHP/4.0.4pl1 Source disclosure Vulnerability Bill Q (Dec 15)
• [RHSA-2001:160-09] Updated glibc packages are available bugzilla (Dec 15)
• PHPNuke holes frog frog (Dec 15)
  • Re: PHPNuke holes rolphin (Dec 17)
• RE: FTP "Network Place" with saved password will reveal cached pa ssword jones, gerald (Dec 15)
• HP-UX setuid rlpdaemon induced to make illicit file writes G . Borglum (Dec 15)
• Trust issues with RH and Debian package managers dfeldman (Dec 15)
• Sun Solaris login bug patches out James Lick (Dec 15)
  • Re: Sun Solaris login bug patches out Mookie (Dec 17)
• SpiDynamics WebInspect - Keeping Track of its Users? A . S . (Dec 15)
  • Re: SpiDynamics WebInspect - Keeping Track of its Users? Caleb Sima (Dec 17)
• *ALERT* "Unix Manual" PHP-Script allows arbitrary code execution Florian Hobelsberger / BlueScreen (Dec 15)
• ATPhttpd 0.4 DoS Vulnerability (POC exploit) methodic (Dec 17)
• Novell Groupwise servlet gateway default username and password AGray (Dec 17)
• [Security] PHP 4.1.0 available Zeev Suraski (Dec 17)
• [SECURITY] [DSA-094-1] mailman cross-site scripting problem Wichert Akkerman (Dec 17)
• Re: xmms/xchat full access shared memory segments (and Mozilla) Ian Freislich (Dec 17)
  • <Possible follow-ups>
  • Re: xmms/xchat full access shared memory segments (and Mozilla) Ian Freislich (Dec 17)
• Dangerous information in CentraOne Log files, possible user impersonation zedfly (Dec 17)
• Phpnuke module.php vulnerability and php error_reporting issue Cabezon Aurélien (Dec 17)
  • Re: Phpnuke module.php vulnerability and php error_reporting issue Mike Eheler (Dec 17)
• Re: MSIE may download and run progams automatically - NOT SO FAST http-equiv () excite com (Dec 17)
  • RE: MSIE may download and run progams automatically - NOT SO FAST jelmer (Dec 18)
    • Re: MSIE may download and run progams automatically - NOT SO FAST Georgi Guninski (Dec 18)
• [Global InterSec 2001121001] glibc globbing issues. Tom Parker (Dec 17)
  • Re: [Global InterSec 2001121001] glibc globbing issues. Solar Designer (Dec 21)
• webmin 0.91 ../.. problem A. Ramos (Dec 17)
  • Re: webmin 0.91 ../.. problem KF (Dec 17)
  • <Possible follow-ups>
  • Re: webmin 0.91 ../.. problem Mark van Reijn (Dec 19)
• Agoracgi v3.3e Cross Site Scripting Vulnerability Tamer Sahin (Dec 17)
• [ESA-20011217-01] 'glibc' globbing buffer overflow EnGarde Secure Linux (Dec 17)
• New Advisory + Exploit bugtraq (Dec 17)
• Buffer Overflow in System V Derived Login SGI Security Coordinator (Dec 17)
• Hot keys permissions bypass under XP Charles Chear (Dec 17)
• Microsoft Security Notification Service Microsoft (Dec 17)
• Advisory: popauth Paul Starzetz (Dec 17)
• Hosting.com Cross Site Scripting E M (Dec 17)
• MDKSA-2001:093 - kerberos update Mandrake Linux Security Team (Dec 17)
• Some analysis of Microsoft SQL Server 2000 stored procedure encryption shoeboy (Dec 18)
• wmcube-gdk is vulnerable to a local exploit corecode () corecode ath cx (Dec 18)
  • Re: wmcube-gdk is vulnerable to a local exploit Jake (Dec 19)
• Aktivate Shopping System Cross Site Scripting Vulnerability Tamer Sahin (Dec 18)
• FTPXQ default install read/write capabilities Brice Carlson (Dec 18)
• ProFTPD - Problems in file globbing, gives segmentation fault. Mattias _ (Dec 19)
  • Re: ProFTPD - Problems in file globbing, gives segmentation fault. Edsel Adap (Dec 19)
    • Re: ProFTPD - Problems in file globbing, gives segmentation fault. Rink Springer (Dec 19)
  • Re: ProFTPD - Problems in file globbing, gives segmentation fault. Markus Kovero (Dec 19)
  • Re: ProFTPD - Problems in file globbing, gives segmentation fault. Przemyslaw Frasunek (Dec 19)
  • Re: ProFTPD - Problems in file globbing, gives segmentation fault. Moritz Grimm (Dec 20)
• MAGIC Enterprise Multiple Vulnerabilities Stephan Holtwisch (Dec 19)
• [ph10 () cus cam ac uk: [Exim] Potential security problem] Tabor J. Wells (Dec 19)
• IRM Security Advisory 002: Netware Web Server Source Disclosure IRM Security Advisories (Dec 19)
  • Re: IRM Security Advisory 002: Netware Web Server Source Disclosure Matthew Firth (Dec 20)
  • <Possible follow-ups>
  • Re: IRM Security Advisory 002: Netware Web Server Source Disclosure eNowak IGF remote (Dec 20)
    • Re: IRM Security Advisory 002: Netware Web Server Source Disclosure Ulf Harnhammar (Dec 21)
      • Re: IRM Security Advisory 002: Netware Web Server Source Disclosure Alun Jones (Dec 21)
• HP Secure OS Software for Linux security bulletins digest IT Resource Center (Dec 19)
• PHPNuke 5 Cross Scripting Replugge [Rod] (Dec 19)
• Linux distributions and /bin/login overflow Anton Rager (Dec 19)
  • Re: Linux distributions and /bin/login overflow Roman Drahtmueller (Dec 20)
    • Re: Linux distributions and /bin/login overflow pof (Dec 21)
• Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, Site Spoofing Bug the Pull (Dec 19)
• Caramail.com : cross scripting frog frog (Dec 20)
• TSLSA-2001-0030 - openssh Trustix Secure Linux Advisor (Dec 20)
• IE5 (SP1) crash the X server on Solaris2.6 chinese edition Jing Shen (Dec 20)
• Windows XP security concerns Tomasz Polus (Dec 20)
  • RE: Windows XP security concerns Geoff Sweet (Dec 21)
    • RE: Windows XP security concerns Alun Jones (Dec 21)
• CERT Advisory CA-2001-36 Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers CERT Advisory (Dec 20)
• Multiple Remote Windows XP/ME/98 Vulnerabilities Marc Maiffret (Dec 20)
• RE: Internet Explorer Document.Open() Without Close() Cookie Stea ling, File Reading, Site Spoofing Bug Dawes, Rogan (ZA - Johannesburg) (Dec 20)
  • <Possible follow-ups>
  • RE: Internet Explorer Document.Open() Without Close() Cookie Stea ling, File Reading, Site Spoofing Bug Siddik, Syaefullah (Dec 20)
    • RE: Internet Explorer Document.Open() Without Close() Cookie Stea ling, File Reading, Site Spoofing Bug CDE Francis (Dec 26)
• Recent Advances in Intrusion Detection Symposium Peter Mell (Dec 20)
• TSLSA-2001-0029 - glibc Trustix Secure Linux Advisor (Dec 20)
• TSL-2001-0030 - openssh (updated) Trustix Secure Linux Advisor (Dec 20)
• MDKSA-2001:094 - libgtop update Mandrake Linux Security Team (Dec 20)
• MSIE DoS Using javascript Tom Micklovitch (Dec 20)
• [CERT-intexxia] pfinger Format String Vulnerability Benoît Roussel (Dec 20)
• Buffer Overflow in Oracle 9iAS (#NISR20122001) David Litchfield (Dec 20)
• Immunix OS 7.0 glibc update Immunix Security Team (Dec 20)
• MDKSA-2001:095 - glibc update Mandrake Linux Security Team (Dec 20)
• yet another fake exploit making rounds Michal Zalewski (Dec 20)
• CERT Advisory CA-2001-37 Buffer Overflow in UPnP Service On Microsoft Windows CERT Advisory (Dec 20)
• @stake advisory: Multiple overflow and format string vulnerabilities in in Microsoft SQL Server @stake advisories (Dec 20)
• [RHSA-2001:168-05] Updated Mailman packages available bugzilla (Dec 21)
• VIGILANTe advisory 2001003 : Atmel SNMP Non Public Community Stri ng DoS Vulnerability Frederic Brouille (Dec 21)
• D-Link DWL-1000AP can be compromised because of SNMP configuration Jonathan Strine (Dec 21)
• New MALDAL (or KERZAC) Worm Wins0ck ­Wins0ck (Dec 21)
• twlc advisory: plesk (psa) allows reading of .php files supergate (Dec 21)
• IE https certificate attack security (Dec 23)
  • Re: IE https certificate attack Dimitris Giannitsaros (Dec 24)
    • Re: IE https certificate attack e-matters GmbH - Securityteam (Dec 24)
      • Re: IE https certificate attack Geoff Joy (Dec 26)
  • Re: IE https certificate attack Przemyslaw Frasunek (Dec 25)
    • Re: IE https certificate attack Diego M. Vadell (Dec 25)
    • Re: IE https certificate attack Stephen Cope (Dec 25)
  • Re: IE https certificate attack Kevin van Haaren (Dec 25)
  • Re: IE https certificate attack Donald King (Dec 26)
  • RE: IE https certificate attack The Death (Dec 26)
  • <Possible follow-ups>
  • FW: IE https certificate attack August September (Dec 26)
• PGP Plugin for Outlook can send unencrypted messages Peter Trifonov (Dec 23)
  • Re: PGP Plugin for Outlook can send unencrypted messages wcne (Dec 26)
  • Re: PGP Plugin for Outlook can send unencrypted messages Will Price (Dec 29)
• GOBBLES CGI MARATHON #001 bugtraq (Dec 23)
• SuSE Security Announcement: glibc/shlibs, in.ftpd (SuSE-SA:2001:046) Roman Drahtmueller (Dec 24)
• [RHSA-2001:162-04] Updated namazu packages are available bugzilla (Dec 25)
  • Re: [RHSA-2001:162-04] Updated namazu packages are available NOKUBI Takatsugu (Dec 27)
• Possible hole in Win XP MS Client networking Daniel Swarbrick (Dec 25)
• Open Source Security and Vendors Andreas Steinmetz (Dec 25)
• UPDATE: IE https certificate attack Stefan Esser (Dec 25)
• GOBBLES CGI MARATHON #002 bugtraq (Dec 25)
• Remote Root Hole in FreeBSD Ports bugtraq (Dec 25)
  • Re: Remote Root Hole in FreeBSD Ports Horms (Dec 27)
    • Re: Remote Root Hole in FreeBSD Ports networkingysistemas networkingysistemas xxx (Dec 29)
• GOBBLES CGI MARATHON #003 bugtraq (Dec 25)
• msql DoS Lesha Pavlov (Dec 26)
• Phoenix Sistemi Security Advisory: ELSA Lancom 1100 Office Security Problems Davide Del Vecchio (Dec 26)
• Too much misleading advice on the Universal Plug-and-Play security hole Richard M. Smith (Dec 26)
  • RE: Too much misleading advice on the Universal Plug-and-Play security hole Marc Maiffret (Dec 27)
    • RE: Too much misleading advice on the Universal Plug-and-Play security hole Richard M. Smith (Dec 29)
      • RE: Too much misleading advice on the Universal Plug-and-Play security hole David LeBlanc (Dec 30)
    • RE: Too much misleading advice on the Universal Plug-and-Play security hole Paul Schmehl (Dec 29)
    • Re: Too much misleading advice on the Universal Plug-and-Play security hole Matthew Caron (Dec 29)
• [ESA-20011227-01] stunnel format string vulnerability EnGarde Secure Linux (Dec 27)
• Lynx format string vulnerability in URL logging. Larry W. Cashdollar (Dec 27)
• Dangerous information in CentraOne log files - VENDOR RESPONSE JClark (Dec 27)
  • <Possible follow-ups>
  • RE: Dangerous information in CentraOne log files - VENDOR RESPONSE zedfly (Dec 28)
• [SECURITY] [DSA-095-1] gpm (gpm-root) format string vulnerabilities Robert van der Meulen (Dec 27)
• Stunnel: Format String Bug in versions <3.22 Brian Hatch (Dec 27)
• Vim backup Source Disclosure Vulnerability Chris Gragsone (Dec 28)
  • Re: Vim backup Source Disclosure Vulnerability Peter W (Dec 28)
• The easy way to turn off Universal Plug-and-Play in Windows Richard M. Smith (Dec 28)
  • Re: The easy way to turn off Universal Plug-and-Play in Windows Thor (Dec 28)
  • Re: The easy way to turn off Universal Plug-and-Play in Windows Thierry (Dec 29)
• [SNS Advisory No.47] DeleGate Cross Site Scripting Vulnerability snsadv () lac co jp (Dec 28)
• phrack #58 is out. staff_rs (Dec 28)
• PHP Rocket Add-in (file transversal vulnerability) John Doe (Dec 28)
• Active Perl path reveal antoan miroslavov (Dec 29)
  • <Possible follow-ups>
  • Re: Active Perl path reveal alan fong (Dec 31)
• Windows AIM Client Exploits Robbie Saunders (Dec 30)
• Possible security problem with Cisco ubr900 series routers secureks2002 (Dec 30)
• lastlines.cgi path traversal and command execution vulns BrainRawt . (Dec 30)
• gzip bug w/ patch.. greg (Dec 30)
  • Re: gzip bug w/ patch.. Tim J. Robbins (Dec 31)
  • Re: gzip bug w/ patch.. Wojtek Pilorz (Dec 31)
• DayDream BBS buffer overflows KF (Dec 30)
• Daydream BBS Format strings issue. KF (Dec 30)
• blackshell2: zml.cgi remote exploit blackshell (Dec 31)
• audiogalaxy...little problem.... josx (Dec 31)
• XP automatic recognition of Nokia as NIC? Geoff Lane (Dec 31)
  • Re: XP automatic recognition of Nokia as NIC? Thomas Cannon (Dec 31)
    • RE: XP automatic recognition of Nokia as NIC? Des Gibbons (Dec 31)
  • Re: XP automatic recognition of Nokia as NIC? natecars (Dec 31)
  • Re: XP automatic recognition of Nokia as NIC? Perry Harrington (Dec 31)
• IMail Web Service User Aliases / Mailing Lists Admin Vulnerability Zeeshan Mustafa (Dec 31)

Previous period

Next period