Bugtraq: by author

464 messages starting Mar 26 03 and ending Mar 25 03
Date index | Thread index | Author index


오정욱

WebDAV exploit: using wide character decoder scheme 오정욱 (Mar 26)

Adam [ckkl]

IE - reading local files Adam [ckkl] (Mar 24)

admin

Re: PHPNuke viewpage.php allows Remote File retrieving admin (Mar 27)
Re: PHPNuke viewpage.php allows Remote File retrieving admin (Mar 26)

Advisories

Safeboot PC Security User Emuneration Vulnerability Advisories (Mar 20)

Alan Coopersmith

Re: Cobalt RaQ server appliances Alan Coopersmith (Mar 03)

Albert Puigsech Galicia

Cross-Referencing Linux vulnerability Albert Puigsech Galicia (Mar 11)

Albert Sunseri

Re: BIND 9.2.2 Vulnerabilities? Albert Sunseri (Mar 04)

Aleksey Sintsov

Wordit Logbook Version 0.98b3 Aleksey Sintsov (Mar 07)

Alexander Kiwerski

Re: PROBLEMS WITH WINDOWS SHORTCUTS Alexander Kiwerski (Mar 17)

Andreas Beck

Obfuscating sensitive data? (was: response to tax software not encrypting tax info) Andreas Beck (Mar 14)

Andreas Hofmeister

Re: Siemens *35 and 45 series phones SMS Danial of Service Andreas Hofmeister (Mar 04)

Andreas Marx

Re: response to tax software not encrypting tax info Andreas Marx (Mar 15)

Andrew G. Tereschenko

Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Andrew G. Tereschenko (Mar 11)
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Andrew G. Tereschenko (Mar 08)

Andrzej Szombierski

linux kmod/ptrace bug - details Andrzej Szombierski (Mar 19)

Angelo Rosiello

xscreensaver exploit for Redhat 7.3 Angelo Rosiello (Mar 06)

Arhont Information Security

SNMP security issues in D-Link DSL Broadband Modem/Router Arhont Information Security (Mar 27)
Security issues in D-Link DSL-300/DSL-300G+ Broadband Modem/Router Arhont Information Security (Mar 31)

Auriemma Luigi

Edonkey and Overnet resources consumption Auriemma Luigi (Mar 21)
Emule 0.27b remote crash Auriemma Luigi (Mar 25)

auto40951

response to tax software not encrypting tax info auto40951 (Mar 13)
uploader.php script auto40951 (Mar 04)

Avri Schneider

Potential PGP signature verification problem? Avri Schneider (Mar 12)

Axis Product Security

Axis Video and Camera Servers - System log access and file access/overwrite via HTTP/CGI Axis Product Security (Mar 25)

Ben Laurie

[ADVISORY] Timing Attack on OpenSSL Ben Laurie (Mar 17)

Bennett Todd

Re: sendmail 8.12.8 available Bennett Todd (Mar 07)

bit_logic

3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet bit_logic (Mar 05)

Blud Clot

Re: Security responsible at AOL Blud Clot (Mar 03)

Bodo Moeller

[OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding Bodo Moeller (Mar 19)

Bojan Zdrnja

Easy DoS on Kaspersky Anti-Hacker v1.0 Bojan Zdrnja (Mar 19)

BrainRawt .

CGI-City's CCLOG Script Injection Vulns BrainRawt . (Mar 29)
CGI-City's CCGuestBook Script Injection Vulns BrainRawt . (Mar 29)
CGI Citys CCLOG and CCGuestbook Script Injection Vulns Fixed!!! BrainRawt . (Mar 31)

Brett Moore

RE: Microsoft Security Advisory MS 03-007 Brett Moore (Mar 18)

Brian Hatch

Stunnel: RSA timing attacks / key discovery Brian Hatch (Mar 21)

Bryan Blackburn

Fwd: APPLE-SA-2003-03-03 sendmail Bryan Blackburn (Mar 04)
Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL Bryan Blackburn (Mar 25)

bugsman () libero it

MySQL user can be changed to root bugsman () libero it (Mar 08)

bugzilla

[RHSA-2003:095-02] New samba packages fix security vulnerabilities bugzilla (Mar 25)
[RHSA-2003:098-00] Updated 2.4 kernel fixes vulnerability bugzilla (Mar 17)
[RHSA-2003:120-01] Updated sendmail packages fix vulnerability bugzilla (Mar 31)
[RHSA-2003:073-06] Updated sendmail packages fix critical security issues bugzilla (Mar 03)
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities bugzilla (Mar 20)
[RHSA-2003:051-01] Updated kerberos packages fix various vulnerabilities bugzilla (Mar 27)
[RHSA-2003:054-00] Updated rxvt packages fix various vulnerabilites bugzilla (Mar 17)
[RHSA-2003:108-01] Updated Evolution packages fix multiple vulnerabilities bugzilla (Mar 21)
[RHSA-2003:072-08] Updated Gnome-lokkit packages fix vulnerability bugzilla (Mar 17)
[RHSA-2003:062-11] Updated OpenSSL packages fix timing attack bugzilla (Mar 06)
[RHSA-2003:039-06] Updated im packages fix insecure handling of temporary files bugzilla (Mar 06)
[] New samba packages fix security vulnerabilities bugzilla (Mar 18)
[RHSA-2003:042-07] Updated squirrelmail packages close cross-site scripting vulnerabilities bugzilla (Mar 05)
[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder bugzilla (Mar 19)
[RHSA-2003:086-07] Updated file packages fix vulnerability bugzilla (Mar 07)

caf

Re: Buffer overflows in ircII-based clients caf (Mar 25)

Caleb Sima

SPI ADVISORY: Remote Administration of BEA WebLogic Server and Express Caleb Sima (Mar 17)

Charles M. Richmond

Re: SA-03:04.sendmail Bin Update Charles M. Richmond (Mar 05)

Christian "cycloon" Gut

Re: Siemens *35 and 45 series phones SMS Danial of Service Christian "cycloon" Gut (Mar 05)

Christopher McCrory

Re: MySQL user can be changed to root Christopher McCrory (Mar 11)

Christopher Warner

Re: PHPNuke viewpage.php allows Remote File retrieving Christopher Warner (Mar 26)

Claes Nyberg

OpenBSD lprm(1) exploit Claes Nyberg (Mar 08)

Claus Assmann

sendmail 8.12.8 available Claus Assmann (Mar 03)
sendmail 8.12.9 available Claus Assmann (Mar 29)

CORE SECURITY TECHNOLOGIES ADVISORIES

CORE-2003-03-04-01: Multiple vulnerabilities in Ximian 's Evolution Mail User Agent CORE SECURITY TECHNOLOGIES ADVISORIES (Mar 19)
CORE-20030304-02: Vulnerability in Mutt Mail User Agent CORE Security Technologies Advisories (Mar 20)
CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome CORE Security Technologies Advisories (Mar 28)
CORE-2003-0306: RealPlayer PNG deflate heap corruption vulnerability CORE Security Technologies Advisories (Mar 28)

Crazy Einstein

file(1) exploit code Crazy Einstein (Mar 06)

DaiTengu

Re: PHPNuke viewpage.php allows Remote File retrieving DaiTengu (Mar 25)

Dan Daggett

Re: PROBLEMS WITH WINDOWS SHORTCUTS Dan Daggett (Mar 20)

Dan Harkless

Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Dan Harkless (Mar 27)
Re: sendmail 8.12.9 available Dan Harkless (Mar 29)
Re: Obfuscating sensitive data? (was: response to tax software not encrypting tax info) Dan Harkless (Mar 14)

Daniel Ahlberg

GLSA: sendmail (200303-4) Daniel Ahlberg (Mar 04)
GLSA: sendmail (200303-27) Daniel Ahlberg (Mar 31)
GLSA: man (200303-13) Daniel Ahlberg (Mar 18)
GLSA: snort (200303-6.1) Daniel Ahlberg (Mar 08)
GLSA: tcpdump (200303-5) Daniel Ahlberg (Mar 05)
GLSA: kernel (200303-17) Daniel Ahlberg (Mar 21)
GLSA: ethereal (200303-10) Daniel Ahlberg (Mar 11)
GLSA: openssl (200303-15) Daniel Ahlberg (Mar 21)
GLSA: bitchx (200303-21) Daniel Ahlberg (Mar 24)
GLSA: openssl (200303-20) Daniel Ahlberg (Mar 24)
GLSA: vte (200303-2) Daniel Ahlberg (Mar 03)
GLSA: samba (200303-11) Daniel Ahlberg (Mar 17)
GLSA: mysqlcc (200303-7) Daniel Ahlberg (Mar 07)
GLSA: mod_ssl (200303-23) Daniel Ahlberg (Mar 25)
GLSA: mysql (200303-14) Daniel Ahlberg (Mar 18)
GLSA: eterm (200303-1) Daniel Ahlberg (Mar 03)
GLSA: stunnel (200303-24) Daniel Ahlberg (Mar 25)
GLSA: snort (200303-6) Daniel Ahlberg (Mar 06)
GLSA: dietlibc (200303-29) Daniel Ahlberg (Mar 31)
GLSA: rxvt (200303-16) Daniel Ahlberg (Mar 21)
GLSA: qpopper (200303-12) Daniel Ahlberg (Mar 17)
GLSA: mutt (200303-19) Daniel Ahlberg (Mar 24)
GLSA: glibc (200303-22) Daniel Ahlberg (Mar 25)
GLSA: evolution (200303-18) Daniel Ahlberg (Mar 21)
GLSA: zlib (200303-25) Daniel Ahlberg (Mar 28)

Daniel Alcántara de la Hoz

[IPS] osCommerce multiple XSS vulnerabilities Daniel Alcántara de la Hoz (Mar 20)

Dave Ahmad

[security bulletin] SSRT0845U HP Tru64 UNIX, HP-UX stdio Potential Security Vulnerability Dave Ahmad (Mar 18)
Snort RPC Vulnerability (fwd) Dave Ahmad (Mar 03)
Microsoft Security Bulletin MS03-009: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065) (fwd) Dave Ahmad (Mar 20)
[Snort-2003-001] Buffer overflow in Snort RPC preprocessor (fwd) Dave Ahmad (Mar 03)
CERT Advisory CA-2003-09 Buffer Overflow in Microsoft IIS 5.0 (fwd) Dave Ahmad (Mar 17)
potential buffer overflow in lprm (fwd) Dave Ahmad (Mar 05)

Dave Aitel

Re: Microsoft Security Advisory MS 03-007 Dave Aitel (Mar 18)
Re: IIS 5.0 WebDAV -Proof of concept-. Fully documented. Dave Aitel (Mar 25)
Re: Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit Dave Aitel (Mar 28)
Re: WebDAV exploit: using wide character decoder scheme Dave Aitel (Mar 26)

David Brumley

Vulnerability in OpenSSL David Brumley (Mar 14)

David G. Andersen

Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet David G. Andersen (Mar 05)

David Huecking

Re: Sendmail testing tool. David Huecking (Mar 04)

David Kennedy CISSP

Re: BIND 9.2.2 Vulnerabilities? David Kennedy CISSP (Mar 04)

David Litchfield

New attack vectors and a vulnerability dissection of MS03-007 David Litchfield (Mar 21)

Dawid Szymański

RE: Siemens *35 and 45 series phones SMS Danial of Service Dawid Szymański (Mar 05)

dchesterfield

Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible dchesterfield (Mar 21)

Dennis Lubert

qpopper timing analysis on to determine if a username exists on a system Dennis Lubert (Mar 15)

der Mouse

Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet der Mouse (Mar 06)

devteam

nethack C340-137: security issue fixed devteam (Mar 02)

Dmitry Maksimov

Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall Dmitry Maksimov (Mar 31)

dong-h0un U

[INetCop Security Advisory #2002-0x82-013] Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. dong-h0un U (Mar 17)
[INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! dong-h0un U (Mar 19)

Dror Shalev

Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II -.zipper Dror Shalev (Mar 02)

Dr. Peter Bieringer

Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Dr. Peter Bieringer (Mar 21)
Re: Check Point FW-1: attack against syslog daemon possible Dr. Peter Bieringer (Mar 27)

Dullien

Re: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Dullien (Mar 27)

Edward Beheler

RE: Security responsible at AOL Edward Beheler (Mar 04)

Eitan Caspi

Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Eitan Caspi (Mar 15)
[EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Eitan Caspi (Mar 07)

Elisha Riedlinger

Sygate Security Bulletin SS20030221-0001 Elisha Riedlinger (Mar 03)

EnGarde Secure Linux

[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. EnGarde Secure Linux (Mar 20)
[ESA-20030318-009] Several 'kernel' vulnerabilities EnGarde Secure Linux (Mar 18)
[ESA-20030307-008] 'file' ELF parsing routine buffer overflow vulnerability. EnGarde Secure Linux (Mar 08)
[ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. EnGarde Secure Linux (Mar 07)
[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability EnGarde Secure Linux (Mar 21)
[ESA-20030324-012] 'MySQL' root exploit. EnGarde Secure Linux (Mar 24)

Eric Allman

Re: [LSD] Technical analysis of the remote sendmail vulnerability Eric Allman (Mar 04)

Eric AUGE

pgp4pine stack overflow vulnerability Eric AUGE (Mar 12)

Eric Hines

Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit Eric Hines (Mar 28)

Erik Parker

[DDI-1012] Malformed request causes denial of service in HP Instant TopTools Erik Parker (Mar 31)

error

VPOPMail Account Administration (squirrel mail) version 0.9.7 error (Mar 12)

er t

RE: response to tax software not encrypting tax info er t (Mar 14)

Ertan Kurt

Some XSS vulns Ertan Kurt (Mar 19)

euronymous

Beanwebb Guestbook v1.0 vulnerabilities euronymous (Mar 29)
ScozBook BETA 1.1 vulnerabilities euronymous (Mar 29)
Justice Guestbook 1.3 vulnerabilities euronymous (Mar 29)

Exurity Debugs

RE: WebDav Exploit ffs Exurity Debugs (Mar 27)

Florian Effenberger

Cobalt RaQ server appliances Florian Effenberger (Mar 03)

Florian Heinz

Re: QPopper 4.0.x buffer overflow vulnerability Florian Heinz (Mar 12)
Re: QPopper 4.0.x buffer overflow vulnerability Florian Heinz (Mar 12)
QPopper 4.0.x buffer overflow vulnerability Florian Heinz (Mar 11)

Florian Weimer

Re: Potential PGP signature verification problem? Florian Weimer (Mar 14)
Re: sendmail 8.12.8 available Florian Weimer (Mar 03)

flur

Guestbook v1.1.3 CSS Vuln flur (Mar 14)
SimpleBBS 1.0.6 Default Permissions Vuln flur (Mar 07)
paFileDB 3.x SQL Injection Vulnerability flur (Mar 24)

FreeBSD Security Advisories

FreeBSD Security Advisory FreeBSD-SA-03:05.xdr FreeBSD Security Advisories (Mar 20)
FreeBSD Security Advisory FreeBSD-SA-03:06.openssl FreeBSD Security Advisories (Mar 21)
FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail FreeBSD Security Advisories (Mar 03)

Frog Man

GTcatalog (PHP) Frog Man (Mar 03)
PHP-Nuke 6.0 & 6.5RC2 SQL Injection Again Frog Man (Mar 11)
PHP-Nuke 6.0 (& 6.5?) : Serious SQL Injection Security Holes Frog Man (Mar 06)
WebChat (PHP) Frog Man (Mar 03)

fwegwg dfbndebndebner

Clearswift MAILsweeper hotfix fwegwg dfbndebndebner (Mar 28)

Garry_Stewart

Re: Unknown trust error when downloading ocget.dll Garry_Stewart (Mar 15)

Gerhard den Hollander

Re: BIND 9.2.2 Vulnerabilities? Gerhard den Hollander (Mar 05)

Grgory

[SCSA-014] Remote Denial of Service Vulnerability in EZ Server Grgory (Mar 31)
[SCSA-008] Cross Site Scripting & Script Injection Vulnerability in PY-Livredor Grgory (Mar 03)
[SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb Grgory (Mar 17)
Re: [SCSA-011] Path Disclosure Vulnerability in XOOPS Grgory (Mar 28)
[SCSA-011] Path Disclosure Vulnerability in XOOPS Grgory (Mar 20)
[SCSA-013] Cross Site Scripting vulnerability in testcgi.exe Grgory (Mar 27)
[SCSA-009] Remote Command Execution Vulnerability in PHP Ping Grgory (Mar 06)
[SCSA-012] Multiple vulnerabilities in Sambar Server Grgory (Mar 27)

Harald Hellmuth

Re: QPopper 4.0.x buffer overflow vulnerability Harald Hellmuth (Mar 13)

HCTITS Security Division

Re: Security Advisory - MyTaxexpress 2003 HCTITS Security Division (Mar 27)

Hines, Eric

RE: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Hines, Eric (Mar 21)
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Hines, Eric (Mar 21)

http-equiv () excite com

Re: .MHT Buffer Overflow in Internet Explorer http-equiv () excite com (Mar 11)
Re: Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue http-equiv () excite com (Mar 11)

iDEFENSE Labs

iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) iDEFENSE Labs (Mar 04)
iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine iDEFENSE Labs (Mar 19)

Ignacio Vazquez

DBTools' DBManager Information Leak Vulnerability Ignacio Vazquez (Mar 07)

Immunix Security Team

Immunix Secured OS 7+ openssl update Immunix Security Team (Mar 27)

info

Implementation flaws in Adobe Document Server for Reader Extensions info (Mar 03)
Re: @(#)Mordred Labs advisory - Texis sensitive information leak info (Mar 18)

Inode

Re: xscreensaver exploit for Redhat 7.3 Inode (Mar 07)

IRM Advisories

IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability IRM Advisories (Mar 21)
IRM 005: JWalk Application Server Version 3.2c9 Directory Traversal Vulnerability IRM Advisories (Mar 25)

IT Resource Center

HP-UX security bulletins digest [Fwd/sendmail issue] IT Resource Center (Mar 04)

Jacek Lipkowski

Re: [VulnWatch] pgp4pine stack overflow vulnerability Jacek Lipkowski (Mar 13)

Jack Lloyd

Vulnerability in man < 1.5l Jack Lloyd (Mar 11)

Jan Niehusmann

Re: Siemens *35 and 45 series phones SMS Danial of Service Jan Niehusmann (Mar 03)

Jaroslaw Zachwieja

Re: QPopper 4.0.x buffer overflow vulnerability Jaroslaw Zachwieja (Mar 12)

Jason Brooke

Re: @(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function Jason Brooke (Mar 27)

Jason Clifford

Remote Exploit in Business::OnlinePayment::WorldPay::Junior Jason Clifford (Mar 15)

Jason Coombs

AOL's Billion SPAM March on Cyberspace Jason Coombs (Mar 17)
A response to Bruce Schneier on MS patch management and Sapphire Jason Coombs (Mar 15)

jean-philippe Gaulier

Re: axis2400 webcams jean-philippe Gaulier (Mar 04)

jelmer

Re: IE - reading local files jelmer (Mar 24)
Re: .MHT Buffer Overflow in Internet Explorer jelmer (Mar 11)

Jeremy Epstein

RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V ulnerability Jeremy Epstein (Mar 13)

Jim Geovedi

Re: PHPNuke viewpage.php allows Remote File retrieving Jim Geovedi (Mar 25)

João Colaço

Re[2]: Siemens *35 and 45 series phones SMS Danial of Service João Colaço (Mar 04)

Joel Maslak

Contact for Palm Computing Joel Maslak (Mar 03)

Joel Palmius

Mod_Survey ENV tag vulnerability Joel Palmius (Mar 28)

John

Re: BIND 9.2.2 Vulnerabilities? John (Mar 05)
BIND 9.2.2 Vulnerabilities? John (Mar 04)

Jonas Eriksson

OpenSSH 3.6 released (fwd) Jonas Eriksson (Mar 31)

Jonas Frey

Re: QPopper 4.0.x buffer overflow vulnerability Jonas Frey (Mar 11)

Jonathan A. Zdziarski

RE: QPopper 4.0.x buffer overflow vulnerability Jonathan A. Zdziarski (Mar 12)

Jon Larabee

Sendmail testing tool. Jon Larabee (Mar 04)

Jouko Pynnonen

Re: .MHT Buffer Overflow in Internet Explorer Jouko Pynnonen (Mar 11)

JW Oh

Re: WebDAV exploit: using wide character decoder scheme JW Oh (Mar 27)

Ken Fischer

Unknown trust error when downloading ocget.dll Ken Fischer (Mar 14)

Kenn Humborg

RE: Terminal Emulator Security Issues Kenn Humborg (Mar 03)

Ken.Williams

RE: response to tax software not encrypting tax info Ken.Williams (Mar 14)

Kevin

Re: PHPNuke viewpage.php allows Remote File retrieving Kevin (Mar 27)

KF

SRT2003-03-31-1219 - SAP world writable server binaries KF (Mar 31)

Kilmarac Jarov -

Re: PostNuke Sensitive Information Disclosure Kilmarac Jarov - (Mar 28)

kingcope

uploader.php vulnerability kingcope (Mar 04)

Knud Erik Højgaard

gid games via toppler Knud Erik Højgaard (Mar 02)

kornau

Re: Siemens *35 and 45 series phones SMS Danial of Service kornau (Mar 08)

Kryptik Logik

Sendmail exploit released??? Kryptik Logik (Mar 05)

Kurt Seifried

Re: @(#)Mordred Labs advisory - Texis sensitive information leak Kurt Seifried (Mar 15)
Re: @(#)Mordred Labs advisory - Texis sensitive information leak Kurt Seifried (Mar 15)

l33t guy

[blaqhatz] - Pastel Accounting application security issues l33t guy (Mar 03)

Last Stage of Delirium

[LSD] Technical analysis of the remote sendmail vulnerability Last Stage of Delirium (Mar 04)

lethalman

PHP-Nuke block-Forums.php subject vulnerabilities lethalman (Mar 31)

Lluis Mora

S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server Lluis Mora (Mar 17)

Lorenzo Hernandez Garcia-Hierro

PHP-Nuke : config.php reveled with php uploaded file.(Affect all uploads implementations in phpnuke).SECURING PHP-NUKE. Lorenzo Hernandez Garcia-Hierro (Mar 02)

Luciano Miguel Ferreira Rocha

Re: Siemens *35 and 45 series phones SMS Danial of Service Luciano Miguel Ferreira Rocha (Mar 06)

Lukasz Wojcik

Re: Siemens *35 and 45 series phones SMS Danial of Service Lukasz Wojcik (Mar 06)

Maarten

shopfactory shopping cart Maarten (Mar 05)

Mandrake Linux Security Team

MDKSA-2003:038 - Updated 2,4 kernel packages fix ptrace vulnerability Mandrake Linux Security Team (Mar 28)
MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command Mandrake Linux Security Team (Mar 12)
MDKSA-2003:032 - Updated samba packages fix remote root vulnerability Mandrake Linux Security Team (Mar 17)
MDKSA-2003:029 - Updated snort packages fix buffer overflow vulnerability Mandrake Linux Security Team (Mar 08)
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors Mandrake Linux Security Team (Mar 25)
MDKSA-2003:037 - Updated glibc packages fix vulnerabilities in RPC XDR decoder Mandrake Linux Security Team (Mar 25)
MDKSA-2003:034 - Updated rxvt packages fix escape sequence insecurities Mandrake Linux Security Team (Mar 25)
MDKSA-2003:027 - Updated tcpdump packages fix denial of service vulnerabilities Mandrake Linux Security Team (Mar 03)
MDKSA-2003:035 - Updated openssl packages fix RSA-related insecurities Mandrake Linux Security Team (Mar 25)
MDKSA-2003:033 - Updated zlib packages fix buffer overrun vulnerability Mandrake Linux Security Team (Mar 18)
MDKSA-2003:039 - Updated kernel22 packages fix multiple vulnerabilities Mandrake Linux Security Team (Mar 28)
MDKSA-2003:028 - Updated sendmail packages fix remotely exploitable buffer overflow vulnerability Mandrake Linux Security Team (Mar 03)
MDKSA-2003:030 - Updated file packages fix stack overflow vulnerability Mandrake Linux Security Team (Mar 07)

maninthemiddle

GiantRat Mailer exposes PoP password maninthemiddle (Mar 14)

Marc Heuse

SuSE Security Announcement: samba (SuSE-SA:2003:016) Marc Heuse (Mar 19)

Marc Maiffret

EEYE: XDR Integer Overflow Marc Maiffret (Mar 19)

Marc Schoenefeld

Netscape and Opera crash via java Marc Schoenefeld (Mar 28)
Denial-Of-Service holes in JDK 1.4.1_01 Marc Schoenefeld (Mar 15)

Mark Osborne

802.11b DoS exploit Mark Osborne (Mar 11)

Mark Schellhase

Re: Siemens *35 and 45 series phones SMS Danial of Service Mark Schellhase (Mar 07)

Martinez, Sylvain

Smoothwall Firewall SNORT buffer overflow Martinez, Sylvain (Mar 07)

Martin O'Neal

RE: Corsaire Security Advisory - Clearswift MAILsweeper MIME atta chment evasion issue Martin O'Neal (Mar 26)
Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue Martin O'Neal (Mar 08)
Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue Martin O'Neal (Mar 26)

Martin Schulze

[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure Martin Schulze (Mar 28)
[SECURITY] [DSA 272-1] New dietlibc packages fix arbitrary code execution Martin Schulze (Mar 28)
[SECURITY] [DSA 268-1] New mutt packages fix arbitrary code execution Martin Schulze (Mar 25)
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability Martin Schulze (Mar 17)
[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit Martin Schulze (Mar 27)
[SECURITY] [DSA 258-1] New ethereal packages fix arbitrary code execution Martin Schulze (Mar 11)
[SECURITY] [DSA 261-1] New tcpdump packages fix denial of service vulnerability Martin Schulze (Mar 14)
[SECURITY] [DSA 267-1] New lpr packages fix local root exploit Martin Schulze (Mar 24)
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure Martin Schulze (Mar 26)
[SECURITY] [DSA 274-1] New mutt packages fix arbitrary code execution Martin Schulze (Mar 28)
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities Martin Schulze (Mar 24)
[SECURITY] [DSA 264-1] New lxr packages fix information disclosure Martin Schulze (Mar 19)
[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities Martin Schulze (Mar 21)
[SECURITY] [DSA 271-1] New ecartis and listar packages fix password change vulnerability Martin Schulze (Mar 27)

Martin Vuagnoux

TLS timing attack on OpenSSL [can-2003-78] [bid 6884] exploit Martin Vuagnoux (Mar 26)

Maslov, Snowy

Security Bugfix for Samba - Samba 2.2.8 Released Maslov, Snowy (Mar 17)
Re: SNMP security issues in D-Link DSL Broadband Modem/Router Maslov, Snowy (Mar 28)

Matthias Leu

Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Matthias Leu (Mar 24)

Matti Haack

Re[2]: Siemens *35 and 45 series phones SMS Danial of Service Matti Haack (Mar 07)

Michael Jennings

Re: Terminal Emulator Security Issues Michael Jennings (Mar 03)
Re: Terminal Emulator Security Issues Michael Jennings (Mar 03)

Michael Landsmann

Re: Siemens *35 and 45 series phones SMS Danial of Service Michael Landsmann (Mar 06)

Michael Schwartzkopff

Security responsible at AOL Michael Schwartzkopff (Mar 02)

Michael Stone

[SECURITY] [DSA-260-1] New file package fixes buffer overflow Michael Stone (Mar 13)

Michael Walton

[Sorcerer-spells] KRB5-SORCERER2003-03-20 Michael Walton (Mar 20)
[sorcerer-spells] MUTT-SORCERER2003-03-19 Michael Walton (Mar 21)
[Sorcerer-spells] SAMBA-SORCERER2003-03-17 Michael Walton (Mar 17)
[sorcerer-spells] MAN-SORCERER2003-03-11 Michael Walton (Mar 12)
[sorcerer-spells] BIND-SORCERER2003-03-06 Michael Walton (Mar 06)
[Sorcerer-spells] LINUX-SORCERER2003-03-20 Michael Walton (Mar 20)
[Sorcerer-spells] GLIBC-SORCERER2003-03-20 Michael Walton (Mar 20)
[sorcerer-spells] SNORT-SORCERER2003-03-06-1 Michael Walton (Mar 07)
[Sorcerer-spells] OPENSSL-SORDCERER2003-03-21 Michael Walton (Mar 21)

Michal Zalewski

Sendmail: -1 gone wild Michal Zalewski (Mar 29)

MightyE

Re: Netscape Communicator 4.x sensitive informations in configuration file MightyE (Mar 03)

Mike Bell

Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Bell (Mar 12)

Mike Kristovich

Re: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Mike Kristovich (Mar 03)
PivX Advisory MK002A Intuit TurboTax Information Disclosure Vulnerability Mike Kristovich (Mar 13)
PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability Mike Kristovich (Mar 13)

Mike Schiffman

[New Research Paper] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Schiffman (Mar 06)
[Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Schiffman (Mar 11)

Mischa Krilov

Re: Netscape and Opera crash via java Mischa Krilov (Mar 28)

Mitja Kolsek

RE: JRun: The Easiness of Session Fixation Mitja Kolsek (Mar 08)

Mordechai T. Abzug

Re: sendmail 8.12.8 available Mordechai T. Abzug (Mar 04)

m.singh

Re: SNMP security issues in D-Link DSL Broadband Modem/Router m.singh (Mar 27)

mstoltz

Re: Netscape Communicator 4.x sensitive informations in configuration file mstoltz (Mar 04)

Muhammad Faisal Rauf Danka

Fwd: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares Muhammad Faisal Rauf Danka (Mar 13)
Fwd: CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino Muhammad Faisal Rauf Danka (Mar 27)
Fwd: CERT Advisory CA-2003-10 Integer overflow in Sun RPC XDR library routines Muhammad Faisal Rauf Danka (Mar 20)
Fwd: CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail Muhammad Faisal Rauf Danka (Mar 04)

Nathan Wosnack

Security Advisory - MyTaxexpress 2003 Nathan Wosnack (Mar 26)

Neil Dickey

Re: Netscape Communicator 4.x sensitive informations in configuration file Neil Dickey (Mar 02)

Neil W Rickert

Re: sendmail 8.12.8 available Neil W Rickert (Mar 06)

nesumin

[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download nesumin (Mar 11)
Opara 6.06 Released, Security-Hole Left nesumin (Mar 20)

NetBSD Security Officer

NetBSD Security Advisory 2003-003 Buffer Overflow in file(1) NetBSD Security Officer (Mar 12)
NetBSD Security Advisory 2003-007: (Another) Encryption weakness in OpenSSL code NetBSD Security Officer (Mar 26)
NetBSD Security Advisory 2003-008: faulty length checks in xdrmem_getbytes NetBSD Security Officer (Mar 26)
NetBSD Security Advisory 2003-001: Encryption weakness in OpenSSL code NetBSD Security Officer (Mar 04)
NetBSD Security Advisory 2003-004: Format string vulnerability in zlib gzprintf() NetBSD Security Officer (Mar 26)
NetBSD Security Advisory 2003-002: Malformed header Sendmail Vulnerability NetBSD Security Officer (Mar 04)
NetBSD Security Advisory 2003-005: RSA timing attack in OpenSSL code NetBSD Security Officer (Mar 26)

Network Intelligence India Pvt. Ltd.

NII Advisory - Buffer Overflow in SQLBase (Revised) Network Intelligence India Pvt. Ltd. (Mar 08)

Nico Erfurth

Re: sendmail 8.12.8 available Nico Erfurth (Mar 04)

Niels Bakker

Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet Niels Bakker (Mar 05)

Niels Heinen

IBM Tivoli Firewall Security Toolbox buffer overflow vulnerability Niels Heinen (Mar 20)

noir sin

Re: potential buffer overflow in lprm (fwd) noir sin (Mar 07)

NSFCOSU Security Team

NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability NSFCOSU Security Team (Mar 31)
NSFOCUS SA2003-01: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability NSFCOSU Security Team (Mar 27)

OpenPKG

[OpenPKG-SA-2003.014] OpenPKG Security Advisory (tcpdump) OpenPKG (Mar 04)
[OpenPKG-SA-2003.023] OpenPKG Security Advisory (delegate) OpenPKG (Mar 19)
[OpenPKG-SA-2003.025] OpenPKG Security Advisory (mutt) OpenPKG (Mar 20)
[OpenPKG-SA-2003.026] OpenPKG Security Advisory (openssl) OpenPKG (Mar 20)
[OpenPKG-SA-2003.018] OpenPKG Security Advisory (qpopper) OpenPKG (Mar 14)
[OpenPKG-SA-2003.016] OpenPKG Security Advisory (sendmail) OpenPKG (Mar 04)
[OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba) OpenPKG (Mar 18)
[OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail) OpenPKG (Mar 31)
[OpenPKG-SA-2003.019] OpenPKG Security Advisory (openssl) OpenPKG (Mar 18)
[OpenPKG-SA-2003.015] OpenPKG Security Advisory (zlib) OpenPKG (Mar 04)
[OpenPKG-SA-2003.024] OpenPKG Security Advisory (ircii) OpenPKG (Mar 19)
[OpenPKG-SA-2003.017] OpenPKG Security Advisory (file) OpenPKG (Mar 04)
[OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql) OpenPKG (Mar 18)
[OpenPKG-SA-2003.020] OpenPKG Security Advisory (modssl) OpenPKG (Mar 18)

Over_G

Vulnerability in my guest book Over_G (Mar 27)
Vulnerability in News/Новости Over_G (Mar 31)
CSS in PHP WEB CHAT Over_G (Mar 25)

Palan

Win32: Postmessage API security flaw Palan (Mar 14)

Per-Ola Kristiansson

Re: Easy obtaining User+Pass+More on CoffeeCup Password Wizard All Versions Per-Ola Kristiansson (Mar 03)

Peter Conrad

Oracle JDBC: Inconsistent handling of timestamps Peter Conrad (Mar 31)

Peter Hanecak

Re: Potential PGP signature verification problem? Peter Hanecak (Mar 13)

Peter Kruse

SOHO Routefinder 550 VPN, DoS and Buffer Overflow Peter Kruse (Mar 11)

Pez Mohr

Re: D-Link DI-614 wiresless router crash/reboots Pez Mohr (Mar 28)

Piotr Chytla

3com RAS 1500 Remote vulnerabilities. Piotr Chytla (Mar 24)

Rafael Nuñez

WebDav Exploit ffs Rafael Nuñez (Mar 24)

rain_song

ProtWare "HTML Guardian" has pathetic "encryption" rain_song (Mar 21)

Randall Gellens

Re: QPopper 4.0.x buffer overflow vulnerability Randall Gellens (Mar 12)

Rapid 7 Security Advisories

R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow Rapid 7 Security Advisories (Mar 13)
R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression Rapid 7 Security Advisories (Mar 13)
R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication Rapid 7 Security Advisories (Mar 13)

Raymond A. Meijer

Re: Siemens *35 and 45 series phones SMS Danial of Service Raymond A. Meijer (Mar 06)

Rick Koenig

RE: D-Link DI-614 wiresless router crash/reboots Rick Koenig (Mar 28)

Rizan Sheikh Mohd

Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Rizan Sheikh Mohd (Mar 25)

rkc

PostNuke Sensitive Information Disclosure rkc (Mar 27)

Robert Waldner

Re: Siemens *35 and 45 series phones SMS Danial of Service Robert Waldner (Mar 04)

Roman Drahtmueller

SuSE Security Announcement: kernel (SuSE-SA:2003:021) Roman Drahtmueller (Mar 25)
SuSE Security Announcement: sendmail (SuSE-SA:2003:013) Roman Drahtmueller (Mar 03)

Roman Medina

Re: WebDAV exploit: using wide character decoder scheme Roman Medina (Mar 27)
IIS 5.0 WebDAV -Proof of concept-. Fully documented. Roman Medina (Mar 25)

Ryan Fox

web-erp 0.1.4 database access vulnerability Ryan Fox (Mar 02)

Rynho Zeros Web

PHP-Nuke 5.5 and 6.0: Path Disclosure Rynho Zeros Web (Mar 17)
Easy obtaining User+Pass+More on CoffeeCup Password Wizard All Versions Rynho Zeros Web (Mar 02)

Scott Wunsch

Re: BIND 9.2.2 Vulnerabilities? Scott Wunsch (Mar 06)

secure

[CLA-2003:571] Conectiva Linux Security Announcement - sendmail secure (Mar 03)

Secure Net Service(SNS) Security Advisory

[SNS Advisory No.63] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code Secure Net Service(SNS) Security Advisory (Mar 11)

security

Security Update: [CSSA-2003-012.0] Linux: KDE rlogin.protocol and telnet.protocol url kio Vulnerability security (Mar 14)
Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X security (Mar 06)
Security Update: [CSSA-2003-011.0] Linux: format string vulnerability in zlib (gzprintf) security (Mar 11)
Security Update: [CSSA-2003-010.0] Linux: remote buffer overflow in sendmail (CERT CA-2003-07) security (Mar 11)
Security Update: [CSSA-2003-SCO.3] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : ftp vulnerability with pipe symbols in filenames security (Mar 04)
Security Update: [CSSA-2003-SCO.5] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : remote buffer overflow in sendmail (CERT CA-2003-07) security (Mar 08)
Security Update: [CSSA-2003-SCO.7] UnixWare 7.1.1 Open UNIX 8.0.0 : Several vulnerabilities in XDR/RPC routines security (Mar 24)
Security Update: [CSSA-2003-015.0] Linux: apcupsd remote root vulnerability and buffer overflows security (Mar 25)
Security Update: [CSSA-2003-SCO.4.1] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : REVISED: Lax permissions on /dev/X security (Mar 11)
Security Update: [CSSA-2003-013.0] Linux: integer overflow vulnerability in XDR/RPC routines security (Mar 20)
Security Update: [CSSA-2003-SCO.6] OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : remote buffer overflow in sendmail (CERT CA-2003-07) security (Mar 13)
Security Update: [CSSA-2003-009.0] Linux: slocate command line buffer overflows security (Mar 06)
Security Update: [CSSA-2003-014.0] Linux: several recently discovered openssl vulnerabilities security (Mar 24)

SensePost Research

Simple WebDAV method validator (PERL code) SensePost Research (Mar 18)

Sergei Golubchik

Re: MySQL user can be changed to root Sergei Golubchik (Mar 11)

Sergio Gelato

Re: axis2400 webcams Sergio Gelato (Mar 02)

SGI Security Coordinator

Multiple Vulnerabilities and Enhancements in ftpd on IRIX SGI Security Coordinator (Mar 24)
Mail Header Buffer Overflow In Sendmail SGI Security Coordinator (Mar 03)
Java Security Fixes on IRIX SGI Security Coordinator (Mar 19)
SMB/CIFS Security Vulnerability in Samba on IRIX SGI Security Coordinator (Mar 19)

S G Masood

PROBLEMS WITH WINDOWS SHORTCUTS S G Masood (Mar 15)

Shiva Persaud

Sendmail buffer overflow vulnerability in AIX. Shiva Persaud (Mar 03)

Sil

Vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host. Sil (Mar 08)

Sinan Eren

RE: EEYE: XDR Integer Overflow Sinan Eren (Mar 19)

sir . mordred

@(#)Mordred Labs advisory - Texis sensitive information leak sir . mordred (Mar 14)
@(#)Mordred Labs advisory - Remote DoS in PostgreSQL <= 7.2.2 sir . mordred (Mar 12)
@(#)Mordred Security Labs - RSA ClearTrust Cross Site Scripting issues sir . mordred (Mar 15)

Sir Mordred

@(#)Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc() function Sir Mordred (Mar 25)
@(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Sir Mordred (Mar 26)

sir.mordred

@(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function sir.mordred (Mar 27)
RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator sir.mordred (Mar 28)

snooper () satx rr com

RE: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin snooper () satx rr com (Mar 03)

sss sss

Protegrity buffer overflow sss sss (Mar 13)

@stake Advisories

Sun ONE (iPlanet) Application Server Connector Module Overflow @stake Advisories (Mar 13)
Nokia SGSN (DX200 Based Network Element) SNMP issue @stake Advisories (Mar 13)
McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) @stake Advisories (Mar 17)

Stefan Esser

RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Stefan Esser (Mar 27)

Steven Leikeim

Re: xscreensaver exploit for Redhat 7.3 Steven Leikeim (Mar 07)

subj

SimpleChat subj (Mar 21)
SIPS (PHP) subj (Mar 18)
VChat subj (Mar 25)
WF-Chat subj (Mar 19)
Guestbook tr3.a subj (Mar 21)
PHP Message Board/Guestbook subj (Mar 18)
Personal FTP Server subj (Mar 31)

subj subj

Siemens *35 and 45 series phones SMS Danial of Service subj subj (Mar 03)

Suresh Ramasubramanian

Re: [INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! Suresh Ramasubramanian (Mar 21)

Sven Pechler

New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler (Mar 03)
New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler (Mar 06)
Re: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler (Mar 04)

The Dark Tangent

DEF CON Announcement: CFP, Media now on line! The Dark Tangent (Mar 24)

Thierry Zoller

Re: D-Link DI-614 wiresless router crash/reboots Thierry Zoller (Mar 28)

Thomas Biege

SuSE Security Announcement: ethereal (SuSE-SA:2003:019) Thomas Biege (Mar 21)
SuSE Security Announcement: file (SuSE-SA:2003:017) Thomas Biege (Mar 21)
SuSE Security Announcement: tcpdump (SuSE-SA:2003:0015) Thomas Biege (Mar 13)
SuSE Security Announcement: qpopper (SuSE-SA:2003:018) Thomas Biege (Mar 21)
SuSE Security Announcement: mutt (SuSE-SA:2003:020) Thomas Biege (Mar 24)
SuSE Security Announcement: apcupsd (SuSE-SA:2003:022) Thomas Biege (Mar 26)
SuSE Security Announcement: lprold (SuSE-SA:2003:0014) Thomas Biege (Mar 13)

Thomas Reinke

D-Link DI-614 wiresless router crash/reboots Thomas Reinke (Mar 27)

Thomas Roessler

mutt-1.4.1 fixes a buffer overflow. Thomas Roessler (Mar 19)

Thor Larholm

Re: .MHT Buffer Overflow in Internet Explorer Thor Larholm (Mar 12)

Tibor Pittich

Re: PHPNuke viewpage.php and another SQL injections Tibor Pittich (Mar 25)

Timo Sirainen

Buffer overflows in ircII-based clients Timo Sirainen (Mar 14)

Timothy Farrell

Re: Siemens *35 and 45 series phones SMS Danial of Service Timothy Farrell (Mar 06)

Toby Miller

Problems with Snort-1.9.1 Toby Miller (Mar 27)

tomotocigare

NT Service Killer tomotocigare (Mar 21)

Tom Tanaka

.MHT Buffer Overflow in Internet Explorer Tom Tanaka (Mar 11)

Tom Yu

MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol Tom Yu (Mar 17)
MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes Tom Yu (Mar 19)

Tonu Samuel

Re: PHPNuke viewpage.php allows Remote File retrieving Tonu Samuel (Mar 26)

Torsten Mueller

Re: QPopper 4.0.x buffer overflow vulnerability Torsten Mueller (Mar 12)

Trish Lynch

Re: Ecardis Password Reseting Vulnerability Trish Lynch (Mar 03)

Trustix Secure Linux Advisor

TSLSA-2003-0013 - openssl Trustix Secure Linux Advisor (Mar 27)
TSLSA-2003-0009 - mysql Trustix Secure Linux Advisor (Mar 18)
TSLSA-2003-0014 - glibc Trustix Secure Linux Advisor (Mar 27)
TSLSA-2003-0010 - openssl Trustix Secure Linux Advisor (Mar 18)
TSLSA-2003-0011 - samba Trustix Secure Linux Advisor (Mar 18)
TSLSA-2003-0007 - kernel Trustix Secure Linux Advisor (Mar 18)

Vladimir Katalov

Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Vladimir Katalov (Mar 25)

Vzquez

ILLC Vzquez (Mar 06)
Log corruption on multiple webservers, log analyzers,... Vzquez (Mar 04)

Waldo Nell

Re: qpopper timing analysis on to determine if a username exists on a system Waldo Nell (Mar 17)

Wayne D. Hoxsie Jr.

Re: Netscape and Opera crash via java Wayne D. Hoxsie Jr. (Mar 28)

White Vampire

[security () slackware com: [slackware-security] Samba buffer overflow fixed] White Vampire (Mar 29)
[security () slackware com: [slackware-security] Sendmail buffer overflow fixed] White Vampire (Mar 29)

Wichert Akkerman

[SECURITY] [DSA-257-1] sendmail remote exploit Wichert Akkerman (Mar 04)
[SECURITY] [DSA-262-1] samba security fix Wichert Akkerman (Mar 15)

William Anderson

Re: Smoothwall Firewall SNORT buffer overflow William Anderson (Mar 08)

Willis Johnson

RE: Siemens *35 and 45 series phones SMS Danial of Service Willis Johnson (Mar 04)

zero_latency

Re: Sendmail exploit released??? zero_latency (Mar 08)

Zero_X www . lobnan . de Team

PHPNuke viewpage.php allows Remote File retrieving Zero_X www . lobnan . de Team (Mar 25)