Bugtraq: by date
RSS Feed
About List
All Lists
Previous period
464 messages
starting Mar 02 03 and
ending Mar 31 03
Date index |
Thread index |
Author index
Sunday, 02 March
web-erp 0.1.4 database access vulnerability Ryan Fox
Security responsible at AOL Michael Schwartzkopff
Easy obtaining User+Pass+More on CoffeeCup Password Wizard All Versions Rynho Zeros Web
Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II -.zipper Dror Shalev
PHP-Nuke : config.php reveled with php uploaded file.(Affect all uploads implementations in phpnuke).SECURING PHP-NUKE. Lorenzo Hernandez Garcia-Hierro
Re: axis2400 webcams Sergio Gelato
Re: Netscape Communicator 4.x sensitive informations in configuration file Neil Dickey
gid games via toppler Knud Erik Højgaard
nethack C340-137: security issue fixed devteam
Monday, 03 March
GLSA: eterm (200303-1) Daniel Ahlberg
GLSA: vte (200303-2) Daniel Ahlberg
WebChat (PHP) Frog Man
Re: Netscape Communicator 4.x sensitive informations in configuration file MightyE
Implementation flaws in Adobe Document Server for Reader Extensions info
New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler
Contact for Palm Computing Joel Maslak
GTcatalog (PHP) Frog Man
Mail Header Buffer Overflow In Sendmail SGI Security Coordinator
[RHSA-2003:073-06] Updated sendmail packages fix critical security issues bugzilla
Re: Terminal Emulator Security Issues Michael Jennings
Re: sendmail 8.12.8 available Florian Weimer
Sendmail buffer overflow vulnerability in AIX. Shiva Persaud
sendmail 8.12.8 available Claus Assmann
Cobalt RaQ server appliances Florian Effenberger
RE: Terminal Emulator Security Issues Kenn Humborg
FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail FreeBSD Security Advisories
Re: Easy obtaining User+Pass+More on CoffeeCup Password Wizard All Versions Per-Ola Kristiansson
Re: Ecardis Password Reseting Vulnerability Trish Lynch
[SCSA-008] Cross Site Scripting & Script Injection Vulnerability in PY-Livredor Grgory
MDKSA-2003:027 - Updated tcpdump packages fix denial of service vulnerabilities Mandrake Linux Security Team
Re: Cobalt RaQ server appliances Alan Coopersmith
Snort RPC Vulnerability (fwd) Dave Ahmad
[blaqhatz] - Pastel Accounting application security issues l33t guy
Sygate Security Bulletin SS20030221-0001 Elisha Riedlinger
SuSE Security Announcement: sendmail (SuSE-SA:2003:013) Roman Drahtmueller
MDKSA-2003:028 - Updated sendmail packages fix remotely exploitable buffer overflow vulnerability Mandrake Linux Security Team
Re: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Mike Kristovich
Re: Terminal Emulator Security Issues Michael Jennings
Siemens *35 and 45 series phones SMS Danial of Service subj subj
RE: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin snooper () satx rr com
Re: Siemens *35 and 45 series phones SMS Danial of Service Jan Niehusmann
Re: Security responsible at AOL Blud Clot
[CLA-2003:571] Conectiva Linux Security Announcement - sendmail secure
[Snort-2003-001] Buffer overflow in Snort RPC preprocessor (fwd) Dave Ahmad
Tuesday, 04 March
[LSD] Technical analysis of the remote sendmail vulnerability Last Stage of Delirium
NetBSD Security Advisory 2003-002: Malformed header Sendmail Vulnerability NetBSD Security Officer
[OpenPKG-SA-2003.014] OpenPKG Security Advisory (tcpdump) OpenPKG
GLSA: sendmail (200303-4) Daniel Ahlberg
[SECURITY] [DSA-257-1] sendmail remote exploit Wichert Akkerman
NetBSD Security Advisory 2003-001: Encryption weakness in OpenSSL code NetBSD Security Officer
Fwd: APPLE-SA-2003-03-03 sendmail Bryan Blackburn
Fwd: CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail Muhammad Faisal Rauf Danka
uploader.php vulnerability kingcope
HP-UX security bulletins digest [Fwd/sendmail issue] IT Resource Center
Re: sendmail 8.12.8 available Mordechai T. Abzug
Security Update: [CSSA-2003-SCO.3] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : ftp vulnerability with pipe symbols in filenames security
Re: Siemens *35 and 45 series phones SMS Danial of Service Andreas Hofmeister
Re: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler
[OpenPKG-SA-2003.017] OpenPKG Security Advisory (file) OpenPKG
[OpenPKG-SA-2003.016] OpenPKG Security Advisory (sendmail) OpenPKG
RE: Security responsible at AOL Edward Beheler
Re: sendmail 8.12.8 available Nico Erfurth
RE: Siemens *35 and 45 series phones SMS Danial of Service Willis Johnson
Log corruption on multiple webservers, log analyzers,... Vzquez
Re: Siemens *35 and 45 series phones SMS Danial of Service Robert Waldner
iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) iDEFENSE Labs
Re: [LSD] Technical analysis of the remote sendmail vulnerability Eric Allman
Re: BIND 9.2.2 Vulnerabilities? Albert Sunseri
Re: Sendmail testing tool. David Huecking
BIND 9.2.2 Vulnerabilities? John
Sendmail testing tool. Jon Larabee
[OpenPKG-SA-2003.015] OpenPKG Security Advisory (zlib) OpenPKG
Re: Netscape Communicator 4.x sensitive informations in configuration file mstoltz
Re: BIND 9.2.2 Vulnerabilities? David Kennedy CISSP
Re: axis2400 webcams jean-philippe Gaulier
Re[2]: Siemens *35 and 45 series phones SMS Danial of Service João Colaço
uploader.php script auto40951
Wednesday, 05 March
GLSA: tcpdump (200303-5) Daniel Ahlberg
[RHSA-2003:042-07] Updated squirrelmail packages close cross-site scripting vulnerabilities bugzilla
shopfactory shopping cart Maarten
Sendmail exploit released??? Kryptik Logik
RE: Siemens *35 and 45 series phones SMS Danial of Service Dawid Szymański
Re: SA-03:04.sendmail Bin Update Charles M. Richmond
Re: BIND 9.2.2 Vulnerabilities? Gerhard den Hollander
3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet bit_logic
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet Niels Bakker
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet David G. Andersen
potential buffer overflow in lprm (fwd) Dave Ahmad
Re: BIND 9.2.2 Vulnerabilities? John
Re: Siemens *35 and 45 series phones SMS Danial of Service Christian "cycloon" Gut
Thursday, 06 March
[RHSA-2003:039-06] Updated im packages fix insecure handling of temporary files bugzilla
[RHSA-2003:062-11] Updated OpenSSL packages fix timing attack bugzilla
ILLC Vzquez
Re: Siemens *35 and 45 series phones SMS Danial of Service Timothy Farrell
PHP-Nuke 6.0 (& 6.5?) : Serious SQL Injection Security Holes Frog Man
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet der Mouse
Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X security
Re: Siemens *35 and 45 series phones SMS Danial of Service Michael Landsmann
[SCSA-009] Remote Command Execution Vulnerability in PHP Ping Grgory
Re: Siemens *35 and 45 series phones SMS Danial of Service Luciano Miguel Ferreira Rocha
Re: BIND 9.2.2 Vulnerabilities? Scott Wunsch
Re: sendmail 8.12.8 available Neil W Rickert
Re: Siemens *35 and 45 series phones SMS Danial of Service Raymond A. Meijer
GLSA: snort (200303-6) Daniel Ahlberg
file(1) exploit code Crazy Einstein
Re: Siemens *35 and 45 series phones SMS Danial of Service Lukasz Wojcik
[New Research Paper] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Schiffman
New HP Jetdirect SNMP password vulnerability when using Web JetAdmin Sven Pechler
xscreensaver exploit for Redhat 7.3 Angelo Rosiello
[sorcerer-spells] BIND-SORCERER2003-03-06 Michael Walton
Security Update: [CSSA-2003-009.0] Linux: slocate command line buffer overflows security
Friday, 07 March
[RHSA-2003:086-07] Updated file packages fix vulnerability bugzilla
MDKSA-2003:030 - Updated file packages fix stack overflow vulnerability Mandrake Linux Security Team
Wordit Logbook Version 0.98b3 Aleksey Sintsov
GLSA: mysqlcc (200303-7) Daniel Ahlberg
Re: potential buffer overflow in lprm (fwd) noir sin
Re: xscreensaver exploit for Redhat 7.3 Steven Leikeim
[ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. EnGarde Secure Linux
DBTools' DBManager Information Leak Vulnerability Ignacio Vazquez
[sorcerer-spells] SNORT-SORCERER2003-03-06-1 Michael Walton
Smoothwall Firewall SNORT buffer overflow Martinez, Sylvain
Re[2]: Siemens *35 and 45 series phones SMS Danial of Service Matti Haack
Re: Siemens *35 and 45 series phones SMS Danial of Service Mark Schellhase
Re: sendmail 8.12.8 available Bennett Todd
Re: xscreensaver exploit for Redhat 7.3 Inode
SimpleBBS 1.0.6 Default Permissions Vuln flur
[EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Eitan Caspi
Saturday, 08 March
Security Update: [CSSA-2003-SCO.5] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : remote buffer overflow in sendmail (CERT CA-2003-07) security
NII Advisory - Buffer Overflow in SQLBase (Revised) Network Intelligence India Pvt. Ltd.
Re: Smoothwall Firewall SNORT buffer overflow William Anderson
OpenBSD lprm(1) exploit Claes Nyberg
Vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host. Sil
Re: Sendmail exploit released??? zero_latency
MySQL user can be changed to root bugsman () libero it
RE: JRun: The Easiness of Session Fixation Mitja Kolsek
Re: Siemens *35 and 45 series phones SMS Danial of Service kornau
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Andrew G. Tereschenko
GLSA: snort (200303-6.1) Daniel Ahlberg
Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue Martin O'Neal
MDKSA-2003:029 - Updated snort packages fix buffer overflow vulnerability Mandrake Linux Security Team
[ESA-20030307-008] 'file' ELF parsing routine buffer overflow vulnerability. EnGarde Secure Linux
Tuesday, 11 March
Cross-Referencing Linux vulnerability Albert Puigsech Galicia
QPopper 4.0.x buffer overflow vulnerability Florian Heinz
Security Update: [CSSA-2003-SCO.4.1] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : REVISED: Lax permissions on /dev/X security
Re: MySQL user can be changed to root Sergei Golubchik
.MHT Buffer Overflow in Internet Explorer Tom Tanaka
Re: MySQL user can be changed to root Christopher McCrory
[Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Schiffman
[SECURITY] [DSA 258-1] New ethereal packages fix arbitrary code execution Martin Schulze
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Andrew G. Tereschenko
[SNS Advisory No.63] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code Secure Net Service(SNS) Security Advisory
Security Update: [CSSA-2003-011.0] Linux: format string vulnerability in zlib (gzprintf) security
Security Update: [CSSA-2003-010.0] Linux: remote buffer overflow in sendmail (CERT CA-2003-07) security
PHP-Nuke 6.0 & 6.5RC2 SQL Injection Again Frog Man
Vulnerability in man < 1.5l Jack Lloyd
Re: .MHT Buffer Overflow in Internet Explorer http-equiv () excite com
SOHO Routefinder 550 VPN, DoS and Buffer Overflow Peter Kruse
Re: QPopper 4.0.x buffer overflow vulnerability Jonas Frey
GLSA: ethereal (200303-10) Daniel Ahlberg
Re: .MHT Buffer Overflow in Internet Explorer jelmer
Re: Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue http-equiv () excite com
802.11b DoS exploit Mark Osborne
Re: .MHT Buffer Overflow in Internet Explorer Jouko Pynnonen
[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download nesumin
Wednesday, 12 March
Re: .MHT Buffer Overflow in Internet Explorer Thor Larholm
Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers Mike Bell
Re: QPopper 4.0.x buffer overflow vulnerability Torsten Mueller
Re: QPopper 4.0.x buffer overflow vulnerability Florian Heinz
Re: QPopper 4.0.x buffer overflow vulnerability Randall Gellens
pgp4pine stack overflow vulnerability Eric AUGE
[sorcerer-spells] MAN-SORCERER2003-03-11 Michael Walton
Re: QPopper 4.0.x buffer overflow vulnerability Jaroslaw Zachwieja
NetBSD Security Advisory 2003-003 Buffer Overflow in file(1) NetBSD Security Officer
RE: QPopper 4.0.x buffer overflow vulnerability Jonathan A. Zdziarski
VPOPMail Account Administration (squirrel mail) version 0.9.7 error
Re: QPopper 4.0.x buffer overflow vulnerability Florian Heinz
@(#)Mordred Labs advisory - Remote DoS in PostgreSQL <= 7.2.2 sir . mordred
Potential PGP signature verification problem? Avri Schneider
MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command Mandrake Linux Security Team
Thursday, 13 March
R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression Rapid 7 Security Advisories
PivX Advisory MK002A Intuit TurboTax Information Disclosure Vulnerability Mike Kristovich
PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability Mike Kristovich
Re: QPopper 4.0.x buffer overflow vulnerability Harald Hellmuth
SuSE Security Announcement: lprold (SuSE-SA:2003:0014) Thomas Biege
R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication Rapid 7 Security Advisories
SuSE Security Announcement: tcpdump (SuSE-SA:2003:0015) Thomas Biege
RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V ulnerability Jeremy Epstein
Security Update: [CSSA-2003-SCO.6] OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : remote buffer overflow in sendmail (CERT CA-2003-07) security
R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow Rapid 7 Security Advisories
response to tax software not encrypting tax info auto40951
[SECURITY] [DSA-260-1] New file package fixes buffer overflow Michael Stone
Nokia SGSN (DX200 Based Network Element) SNMP issue @stake Advisories
Fwd: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares Muhammad Faisal Rauf Danka
Re: [VulnWatch] pgp4pine stack overflow vulnerability Jacek Lipkowski
Sun ONE (iPlanet) Application Server Connector Module Overflow @stake Advisories
Re: Potential PGP signature verification problem? Peter Hanecak
Protegrity buffer overflow sss sss
Friday, 14 March
Re: Potential PGP signature verification problem? Florian Weimer
[SECURITY] [DSA 261-1] New tcpdump packages fix denial of service vulnerability Martin Schulze
RE: response to tax software not encrypting tax info er t
Vulnerability in OpenSSL David Brumley
Buffer overflows in ircII-based clients Timo Sirainen
Win32: Postmessage API security flaw Palan
GiantRat Mailer exposes PoP password maninthemiddle
Obfuscating sensitive data? (was: response to tax software not encrypting tax info) Andreas Beck
[OpenPKG-SA-2003.018] OpenPKG Security Advisory (qpopper) OpenPKG
@(#)Mordred Labs advisory - Texis sensitive information leak sir . mordred
Unknown trust error when downloading ocget.dll Ken Fischer
Re: Obfuscating sensitive data? (was: response to tax software not encrypting tax info) Dan Harkless
Guestbook v1.1.3 CSS Vuln flur
RE: response to tax software not encrypting tax info Ken.Williams
Security Update: [CSSA-2003-012.0] Linux: KDE rlogin.protocol and telnet.protocol url kio Vulnerability security
Saturday, 15 March
Denial-Of-Service holes in JDK 1.4.1_01 Marc Schoenefeld
Re: @(#)Mordred Labs advisory - Texis sensitive information leak Kurt Seifried
@(#)Mordred Security Labs - RSA ClearTrust Cross Site Scripting issues sir . mordred
PROBLEMS WITH WINDOWS SHORTCUTS S G Masood
[SECURITY] [DSA-262-1] samba security fix Wichert Akkerman
qpopper timing analysis on to determine if a username exists on a system Dennis Lubert
A response to Bruce Schneier on MS patch management and Sapphire Jason Coombs
Re: response to tax software not encrypting tax info Andreas Marx
Remote Exploit in Business::OnlinePayment::WorldPay::Junior Jason Clifford
Re: @(#)Mordred Labs advisory - Texis sensitive information leak Kurt Seifried
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group Eitan Caspi
Re: Unknown trust error when downloading ocget.dll Garry_Stewart
Monday, 17 March
McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) @stake Advisories
MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol Tom Yu
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability Martin Schulze
[RHSA-2003:098-00] Updated 2.4 kernel fixes vulnerability bugzilla
SPI ADVISORY: Remote Administration of BEA WebLogic Server and Express Caleb Sima
[INetCop Security Advisory #2002-0x82-013] Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. dong-h0un U
GLSA: samba (200303-11) Daniel Ahlberg
[ADVISORY] Timing Attack on OpenSSL Ben Laurie
Security Bugfix for Samba - Samba 2.2.8 Released Maslov, Snowy
[RHSA-2003:072-08] Updated Gnome-lokkit packages fix vulnerability bugzilla
GLSA: qpopper (200303-12) Daniel Ahlberg
[RHSA-2003:054-00] Updated rxvt packages fix various vulnerabilites bugzilla
S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server Lluis Mora
[SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb Grgory
MDKSA-2003:032 - Updated samba packages fix remote root vulnerability Mandrake Linux Security Team
Re: qpopper timing analysis on to determine if a username exists on a system Waldo Nell
PHP-Nuke 5.5 and 6.0: Path Disclosure Rynho Zeros Web
[Sorcerer-spells] SAMBA-SORCERER2003-03-17 Michael Walton
CERT Advisory CA-2003-09 Buffer Overflow in Microsoft IIS 5.0 (fwd) Dave Ahmad
AOL's Billion SPAM March on Cyberspace Jason Coombs
Re: PROBLEMS WITH WINDOWS SHORTCUTS Alexander Kiwerski
Tuesday, 18 March
[security bulletin] SSRT0845U HP Tru64 UNIX, HP-UX stdio Potential Security Vulnerability Dave Ahmad
[OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql) OpenPKG
Re: @(#)Mordred Labs advisory - Texis sensitive information leak info
[OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba) OpenPKG
GLSA: mysql (200303-14) Daniel Ahlberg
GLSA: man (200303-13) Daniel Ahlberg
[ESA-20030318-009] Several 'kernel' vulnerabilities EnGarde Secure Linux
Re: Microsoft Security Advisory MS 03-007 Dave Aitel
MDKSA-2003:033 - Updated zlib packages fix buffer overrun vulnerability Mandrake Linux Security Team
[OpenPKG-SA-2003.020] OpenPKG Security Advisory (modssl) OpenPKG
[] New samba packages fix security vulnerabilities bugzilla
Simple WebDAV method validator (PERL code) SensePost Research
TSLSA-2003-0009 - mysql Trustix Secure Linux Advisor
TSLSA-2003-0007 - kernel Trustix Secure Linux Advisor
[OpenPKG-SA-2003.019] OpenPKG Security Advisory (openssl) OpenPKG
SIPS (PHP) subj
PHP Message Board/Guestbook subj
RE: Microsoft Security Advisory MS 03-007 Brett Moore
TSLSA-2003-0010 - openssl Trustix Secure Linux Advisor
TSLSA-2003-0011 - samba Trustix Secure Linux Advisor
Wednesday, 19 March
Some XSS vulns Ertan Kurt
[OpenPKG-SA-2003.023] OpenPKG Security Advisory (delegate) OpenPKG
[SECURITY] [DSA 264-1] New lxr packages fix information disclosure Martin Schulze
[INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! dong-h0un U
[OpenPKG-SA-2003.024] OpenPKG Security Advisory (ircii) OpenPKG
SuSE Security Announcement: samba (SuSE-SA:2003:016) Marc Heuse
WF-Chat subj
EEYE: XDR Integer Overflow Marc Maiffret
SMB/CIFS Security Vulnerability in Samba on IRIX SGI Security Coordinator
Easy DoS on Kaspersky Anti-Hacker v1.0 Bojan Zdrnja
[OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding Bodo Moeller
linux kmod/ptrace bug - details Andrzej Szombierski
[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder bugzilla
RE: EEYE: XDR Integer Overflow Sinan Eren
Java Security Fixes on IRIX SGI Security Coordinator
MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes Tom Yu
iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine iDEFENSE Labs
CORE-2003-03-04-01: Multiple vulnerabilities in Ximian 's Evolution Mail User Agent CORE SECURITY TECHNOLOGIES ADVISORIES
mutt-1.4.1 fixes a buffer overflow. Thomas Roessler
Thursday, 20 March
Security Update: [CSSA-2003-013.0] Linux: integer overflow vulnerability in XDR/RPC routines security
[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. EnGarde Secure Linux
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities bugzilla
Microsoft Security Bulletin MS03-009: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065) (fwd) Dave Ahmad
[Sorcerer-spells] GLIBC-SORCERER2003-03-20 Michael Walton
Fwd: CERT Advisory CA-2003-10 Integer overflow in Sun RPC XDR library routines Muhammad Faisal Rauf Danka
[Sorcerer-spells] LINUX-SORCERER2003-03-20 Michael Walton
[IPS] osCommerce multiple XSS vulnerabilities Daniel Alcántara de la Hoz
[OpenPKG-SA-2003.025] OpenPKG Security Advisory (mutt) OpenPKG
FreeBSD Security Advisory FreeBSD-SA-03:05.xdr FreeBSD Security Advisories
Re: PROBLEMS WITH WINDOWS SHORTCUTS Dan Daggett
Safeboot PC Security User Emuneration Vulnerability Advisories
[Sorcerer-spells] KRB5-SORCERER2003-03-20 Michael Walton
IBM Tivoli Firewall Security Toolbox buffer overflow vulnerability Niels Heinen
CORE-20030304-02: Vulnerability in Mutt Mail User Agent CORE Security Technologies Advisories
[OpenPKG-SA-2003.026] OpenPKG Security Advisory (openssl) OpenPKG
Opara 6.06 Released, Security-Hole Left nesumin
[SCSA-011] Path Disclosure Vulnerability in XOOPS Grgory
Friday, 21 March
GLSA: evolution (200303-18) Daniel Ahlberg
Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Dr. Peter Bieringer
GLSA: kernel (200303-17) Daniel Ahlberg
SuSE Security Announcement: ethereal (SuSE-SA:2003:019) Thomas Biege
SuSE Security Announcement: file (SuSE-SA:2003:017) Thomas Biege
[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities Martin Schulze
Edonkey and Overnet resources consumption Auriemma Luigi
SuSE Security Announcement: qpopper (SuSE-SA:2003:018) Thomas Biege
New attack vectors and a vulnerability dissection of MS03-007 David Litchfield
[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability EnGarde Secure Linux
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Hines, Eric
Guestbook tr3.a subj
[Sorcerer-spells] OPENSSL-SORDCERER2003-03-21 Michael Walton
[RHSA-2003:108-01] Updated Evolution packages fix multiple vulnerabilities bugzilla
IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability IRM Advisories
Stunnel: RSA timing attacks / key discovery Brian Hatch
FreeBSD Security Advisory FreeBSD-SA-03:06.openssl FreeBSD Security Advisories
RE: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Hines, Eric
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible dchesterfield
NT Service Killer tomotocigare
ProtWare "HTML Guardian" has pathetic "encryption" rain_song
GLSA: rxvt (200303-16) Daniel Ahlberg
[sorcerer-spells] MUTT-SORCERER2003-03-19 Michael Walton
Re: [INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! Suresh Ramasubramanian
SimpleChat subj
GLSA: openssl (200303-15) Daniel Ahlberg
Monday, 24 March
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Matthias Leu
GLSA: mutt (200303-19) Daniel Ahlberg
IE - reading local files Adam [ckkl]
3com RAS 1500 Remote vulnerabilities. Piotr Chytla
Re: IE - reading local files jelmer
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities Martin Schulze
GLSA: openssl (200303-20) Daniel Ahlberg
SuSE Security Announcement: mutt (SuSE-SA:2003:020) Thomas Biege
paFileDB 3.x SQL Injection Vulnerability flur
[SECURITY] [DSA 267-1] New lpr packages fix local root exploit Martin Schulze
GLSA: bitchx (200303-21) Daniel Ahlberg
[ESA-20030324-012] 'MySQL' root exploit. EnGarde Secure Linux
WebDav Exploit ffs Rafael Nuñez
Security Update: [CSSA-2003-SCO.7] UnixWare 7.1.1 Open UNIX 8.0.0 : Several vulnerabilities in XDR/RPC routines security
DEF CON Announcement: CFP, Media now on line! The Dark Tangent
Security Update: [CSSA-2003-014.0] Linux: several recently discovered openssl vulnerabilities security
Multiple Vulnerabilities and Enhancements in ftpd on IRIX SGI Security Coordinator
Tuesday, 25 March
Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL Bryan Blackburn
@(#)Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc() function Sir Mordred
IRM 005: JWalk Application Server Version 3.2c9 Directory Traversal Vulnerability IRM Advisories
CSS in PHP WEB CHAT Over_G
[RHSA-2003:095-02] New samba packages fix security vulnerabilities bugzilla
[SECURITY] [DSA 268-1] New mutt packages fix arbitrary code execution Martin Schulze
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible Rizan Sheikh Mohd
GLSA: glibc (200303-22) Daniel Ahlberg
VChat subj
Re: Buffer overflows in ircII-based clients caf
PHPNuke viewpage.php allows Remote File retrieving Zero_X www . lobnan . de Team
Emule 0.27b remote crash Auriemma Luigi
Re: PHPNuke viewpage.php and another SQL injections Tibor Pittich
Re: PHPNuke viewpage.php allows Remote File retrieving DaiTengu
SuSE Security Announcement: kernel (SuSE-SA:2003:021) Roman Drahtmueller
Axis Video and Camera Servers - System log access and file access/overwrite via HTTP/CGI Axis Product Security
GLSA: stunnel (200303-24) Daniel Ahlberg
IIS 5.0 WebDAV -Proof of concept-. Fully documented. Roman Medina
MDKSA-2003:037 - Updated glibc packages fix vulnerabilities in RPC XDR decoder Mandrake Linux Security Team
Re: PHPNuke viewpage.php allows Remote File retrieving Jim Geovedi
Security Update: [CSSA-2003-015.0] Linux: apcupsd remote root vulnerability and buffer overflows security
Re: IIS 5.0 WebDAV -Proof of concept-. Fully documented. Dave Aitel
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors Mandrake Linux Security Team
MDKSA-2003:035 - Updated openssl packages fix RSA-related insecurities Mandrake Linux Security Team
Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Vladimir Katalov
MDKSA-2003:034 - Updated rxvt packages fix escape sequence insecurities Mandrake Linux Security Team
GLSA: mod_ssl (200303-23) Daniel Ahlberg
Wednesday, 26 March
SuSE Security Announcement: apcupsd (SuSE-SA:2003:022) Thomas Biege
WebDAV exploit: using wide character decoder scheme 오정욱
Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue Martin O'Neal
Security Advisory - MyTaxexpress 2003 Nathan Wosnack
Re: PHPNuke viewpage.php allows Remote File retrieving admin
NetBSD Security Advisory 2003-004: Format string vulnerability in zlib gzprintf() NetBSD Security Officer
NetBSD Security Advisory 2003-007: (Another) Encryption weakness in OpenSSL code NetBSD Security Officer
NetBSD Security Advisory 2003-005: RSA timing attack in OpenSSL code NetBSD Security Officer
NetBSD Security Advisory 2003-008: faulty length checks in xdrmem_getbytes NetBSD Security Officer
RE: Corsaire Security Advisory - Clearswift MAILsweeper MIME atta chment evasion issue Martin O'Neal
TLS timing attack on OpenSSL [can-2003-78] [bid 6884] exploit Martin Vuagnoux
@(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Sir Mordred
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure Martin Schulze
Re: WebDAV exploit: using wide character decoder scheme Dave Aitel
Re: PHPNuke viewpage.php allows Remote File retrieving Christopher Warner
Re: PHPNuke viewpage.php allows Remote File retrieving Tonu Samuel
Thursday, 27 March
NSFOCUS SA2003-01: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability NSFCOSU Security Team
Vulnerability in my guest book Over_G
TSLSA-2003-0013 - openssl Trustix Secure Linux Advisor
[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit Martin Schulze
[SECURITY] [DSA 271-1] New ecartis and listar packages fix password change vulnerability Martin Schulze
RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Stefan Esser
Re: WebDAV exploit: using wide character decoder scheme JW Oh
Re: WebDAV exploit: using wide character decoder scheme Roman Medina
Re: SNMP security issues in D-Link DSL Broadband Modem/Router m.singh
Fwd: CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino Muhammad Faisal Rauf Danka
@(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function sir.mordred
[SCSA-013] Cross Site Scripting vulnerability in testcgi.exe Grgory
SNMP security issues in D-Link DSL Broadband Modem/Router Arhont Information Security
TSLSA-2003-0014 - glibc Trustix Secure Linux Advisor
Re: Security Advisory - MyTaxexpress 2003 HCTITS Security Division
[RHSA-2003:051-01] Updated kerberos packages fix various vulnerabilities bugzilla
RE: WebDav Exploit ffs Exurity Debugs
Immunix Secured OS 7+ openssl update Immunix Security Team
Re: PHPNuke viewpage.php allows Remote File retrieving Kevin
D-Link DI-614 wiresless router crash/reboots Thomas Reinke
Re: PHPNuke viewpage.php allows Remote File retrieving admin
Re: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator Dullien
Re: Check Point FW-1: attack against syslog daemon possible Dr. Peter Bieringer
Problems with Snort-1.9.1 Toby Miller
Re: @(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function Jason Brooke
PostNuke Sensitive Information Disclosure rkc
Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged Dan Harkless
[SCSA-012] Multiple vulnerabilities in Sambar Server Grgory
Friday, 28 March
[SECURITY] [DSA 274-1] New mutt packages fix arbitrary code execution Martin Schulze
RE: D-Link DI-614 wiresless router crash/reboots Rick Koenig
CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome CORE Security Technologies Advisories
Re: D-Link DI-614 wiresless router crash/reboots Pez Mohr
RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator sir.mordred
MDKSA-2003:038 - Updated 2,4 kernel packages fix ptrace vulnerability Mandrake Linux Security Team
GLSA: zlib (200303-25) Daniel Ahlberg
Re: D-Link DI-614 wiresless router crash/reboots Thierry Zoller
[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure Martin Schulze
MDKSA-2003:039 - Updated kernel22 packages fix multiple vulnerabilities Mandrake Linux Security Team
Re: SNMP security issues in D-Link DSL Broadband Modem/Router Maslov, Snowy
Re: [SCSA-011] Path Disclosure Vulnerability in XOOPS Grgory
Clearswift MAILsweeper hotfix fwegwg dfbndebndebner
[SECURITY] [DSA 272-1] New dietlibc packages fix arbitrary code execution Martin Schulze
Re: Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit Dave Aitel
CORE-2003-0306: RealPlayer PNG deflate heap corruption vulnerability CORE Security Technologies Advisories
Re: PostNuke Sensitive Information Disclosure Kilmarac Jarov -
Mod_Survey ENV tag vulnerability Joel Palmius
Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit Eric Hines
Netscape and Opera crash via java Marc Schoenefeld
Re: Netscape and Opera crash via java Wayne D. Hoxsie Jr.
Re: Netscape and Opera crash via java Mischa Krilov
Saturday, 29 March
Beanwebb Guestbook v1.0 vulnerabilities euronymous
Justice Guestbook 1.3 vulnerabilities euronymous
ScozBook BETA 1.1 vulnerabilities euronymous
sendmail 8.12.9 available Claus Assmann
CGI-City's CCGuestBook Script Injection Vulns BrainRawt .
CGI-City's CCLOG Script Injection Vulns BrainRawt .
[security () slackware com: [slackware-security] Sendmail buffer overflow fixed] White Vampire
[security () slackware com: [slackware-security] Samba buffer overflow fixed] White Vampire
Sendmail: -1 gone wild Michal Zalewski
Re: sendmail 8.12.9 available Dan Harkless
Monday, 31 March
Security issues in D-Link DSL-300/DSL-300G+ Broadband Modem/Router Arhont Information Security
OpenSSH 3.6 released (fwd) Jonas Eriksson
[OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail) OpenPKG
[DDI-1012] Malformed request causes denial of service in HP Instant TopTools Erik Parker
Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall Dmitry Maksimov
GLSA: dietlibc (200303-29) Daniel Ahlberg
[SCSA-014] Remote Denial of Service Vulnerability in EZ Server Grgory
SRT2003-03-31-1219 - SAP world writable server binaries KF
Oracle JDBC: Inconsistent handling of timestamps Peter Conrad
[RHSA-2003:120-01] Updated sendmail packages fix vulnerability bugzilla
CGI Citys CCLOG and CCGuestbook Script Injection Vulns Fixed!!! BrainRawt .
PHP-Nuke block-Forums.php subject vulnerabilities lethalman
GLSA: sendmail (200303-27) Daniel Ahlberg
NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability NSFCOSU Security Team
Personal FTP Server subj
Vulnerability in News/Новости Over_G