Bugtraq: by thread

Previous period

Next period

329 messages starting Jan 01 04 and ending Jan 30 04
Date index | Thread index | Author index

MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability Mandrake Linux Security Team (Jan 01)
multiple payload handling flaws in isakmpd, again Thomas Walpuski (Jan 01)
- Re: multiple payload handling flaws in isakmpd, again Thomas Walpuski (Jan 01)
Announcing Userland Exec the grugq (Jan 01)
Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity Matt Zimmerman (Jan 01)
Possible XSS vuln in VCard4J Just1n T1mberlake (Jan 01)
Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV http-equiv () excite com (Jan 02)
- <Possible follow-ups>
- RE: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV tlarholm (Jan 02)
Re: Switch Off Multiple Vulnerabilities Peter Winter-Smith (Jan 02)
- <Possible follow-ups>
- Switch Off Multiple Vulnerabilities Peter Winter-Smith (Jan 02)
xsok local games exploit c0wboy@0x333 (Jan 02)
DoS in GoodTech Telnet Server 4.0.103 Donato Ferrante (Jan 02)
Microsoft Word Protection Bypass Thorsten Delbrouck-Konetzko (Jan 02)
- RE: Microsoft Word Protection Bypass Jerry Shenk (Jan 06)
- <Possible follow-ups>
- Re: Microsoft Word Protection Bypass Thorsten Delbrouck-Konetzko (Jan 07)
  - RE: Microsoft Word Protection Bypass Eric Lawrence (Jan 07)
- Re: Microsoft Word Protection Bypass Vladimir Katalov (Jan 08)
include() vuln in EasyDynamicPages v.2.0 Vietnamese Security Group (Jan 02)
PostNuke Issues (0.726 && Possibly Older) JeiAr (Jan 05)
Webcam Watchdog Stack Overflow Vulnerability Peter Winter-Smith (Jan 05)
[SCSA-025] Invision Power Board SQL Injection Vulnerability advisory (Jan 05)
xsok local games exploit (2) c0wboy@0x333 (Jan 05)
newsPHP v216 patch Dariusz 'Officerrr' Kolasinski (Jan 05)
HotNews arbitary file inclusion Dariusz 'Officerrr' Kolasinski (Jan 05)
[SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution Martin Schulze (Jan 05)
Re: Linux kernel mremap vulnerability Paul Starzetz (Jan 05)
- <Possible follow-ups>
- Linux kernel mremap vulnerability Paul Starzetz (Jan 05)
Announcing adore-ng 0.31 Stealth (Jan 05)
[CLA-2004:799] Conectiva Security Announcement - kernel Conectiva Updates (Jan 05)
[SECURITY] [DSA 407-1] New ethereal packages fix several vulnerabilities Martin Schulze (Jan 05)
TSLSA-2004-01 - kernel Trustix Security Advisor (Jan 05)
[ESA-20040105-001] 'kernel' bug and security fixes. EnGarde Secure Linux (Jan 05)
[SECURITY] [DSA 408-1] New screen packages fix group utmp exploit Martin Schulze (Jan 05)
[RHSA-2003:417-01] Updated kernel resolves security vulnerability bugzilla (Jan 05)
SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:001) Thomas Biege (Jan 05)
vBulletin Forum 2.3.xx calendar.php SQL Injection Qianwei Hu (Jan 06)
[SECURITY] [DSA 409-1] New bind packages fix denial of service Matt Zimmerman (Jan 06)
Immunix Secured OS 7.3 kernel update Immunix Security Team (Jan 06)
[SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability Matt Zimmerman (Jan 06)
[SECURITY] [DSA 412-1] New nd packages fix buffer overflows Matt Zimmerman (Jan 06)
Multiple Vulnerabilities in Phorum 3.4.5 Calum Power (Jan 06)
- <Possible follow-ups>
- Multiple Vulnerabilities in Phorum 3.4.5 Fredrik Björk (Jan 23)
[CLA-2004:800] Conectiva Security Announcement - lftp Conectiva Updates (Jan 06)
[SECURITY] [DSA 410-1] New libnids packages fix buffer overflow Matt Zimmerman (Jan 06)
Linux kernel do_mremap() proof-of-concept exploit code Christophe Devine (Jan 06)
- Re: Linux kernel do_mremap() proof-of-concept exploit code Bruno Lustosa (Jan 06)
- Re: Linux kernel do_mremap() proof-of-concept exploit code Alexandre Hautequest (Jan 06)
- Re: Linux kernel do_mremap() proof-of-concept exploit code Angelo Dell'Aera (Jan 07)
  - Re: Linux kernel do_mremap() proof-of-concept exploit code D Lambrou (Jan 07)
- <Possible follow-ups>
- RE: Linux kernel do_mremap() proof-of-concept exploit code tlarholm (Jan 06)
Linux mremap bug correction Paul Starzetz (Jan 06)
Vuln in PHPGEDVIEW 2.61 Multi-Problem Vietnamese Security Group (Jan 06)
[SECURITY] [DSA 413-1] New Linux 2.4.18 packages fix locate root exploit Martin Schulze (Jan 06)
Lotus Notes Domino 6.0.2 (linux) faulty default permissions Rene (Jan 06)
FirstClass Client 7.1: Command Execution via Email Web Link Richard Maudsley (Jan 06)
[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha) Martin Schulze (Jan 07)
[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal Matt Zimmerman (Jan 07)
ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
SnapStream PVS LITE Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
[SECURITY] [DSA 415-1] New zebra packages fix denial of service Matt Zimmerman (Jan 07)
[slackware-security] Kernel security update (SSA:2004-006-01) Slackware Security Team (Jan 07)
EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity Rafel Ivgi (Jan 07)
RealNetworks fails to address Cross-Site Scripting in RealOne Player Arman Nayyeri (Jan 07)
[SECURITY] [DSA 414-1] New jabber packages fix denial of service Matt Zimmerman (Jan 07)
[RHSA-2004:001-01] Updated Ethereal packages fix security issues bugzilla (Jan 07)
[CLA-2004:801] Conectiva Security Announcement - ethereal Conectiva Updates (Jan 07)
[OpenPKG-SA-2004.001] OpenPKG Security Advisory (inn) OpenPKG (Jan 08)
Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Jan 08)
[SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak Matt Zimmerman (Jan 08)
Yahoo Instant Messenger Long Filename Downloading Buffer Overflow Tri Huynh (Jan 08)
[SECURITY] INN: Buffer overflow in control message handling Russ Allbery (Jan 08)
SGI Advanced Linux Environment security update #8 SGI Security Coordinator (Jan 08)
MDKSA-2004:001 - Updated kernel packages fix local root vulnerability Mandrake Linux Security Team (Jan 08)
Openssl proof of concept code? Lachniet, Mark (Jan 08)
[SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha) Martin Schulze (Jan 09)
[SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection Martin Schulze (Jan 09)
[slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01) Slackware Security Team (Jan 09)
Windows FTP Server Format String Vulnerability Peter Winter-Smith (Jan 09)
bzip2 bombs still causes problems in antivirus-software Dr. Peter Bieringer (Jan 09)
Directory Traversal in Accipiter Direct Server 6.0 Bassett, Mark (Jan 12)
[RHSA-2004:003-01] Updated CVS packages fix minor security issue bugzilla (Jan 12)
Remote Code Execution in ezContents Zero_X www . lobnan . de Team (Jan 12)
[Fwd: [TH-research] OT: Israeli Post Office break-in] Gadi Evron (Jan 12)
- <Possible follow-ups>
- RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] John . Airey (Jan 13)
[SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution Martin Schulze (Jan 12)
DameWare Mini Remote Control < v3.73 remote exploit by kralor] Iván Rodriguez Almuiña (Jan 12)
Abuse report email for CitiBank/CitiCards? winstrel (Jan 12)
- Re: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 12)
- <Possible follow-ups>
- FW: Abuse report email for CitiBank/CitiCards? Sullivan, Barbra A (Jan 12)
  - Re: FW: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 12)
    - Re: FW: Abuse report email for CitiBank/CitiCards? Jim Gonzalez (Jan 13)
    - How to track a Phisher... Re: FW: Abuse report email for CitiBank/CitiCards? Nicholas Weaver (Jan 13)
- RE: Abuse report email for CitiBank/CitiCards? Lance James (Jan 13)
PHP Manpage lookup directory transversal / file disclosing Cabezon Aurélien (Jan 12)
SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM KF (Jan 12)
- <Possible follow-ups>
- Re: SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM Sym Security (Jan 12)
[SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking Matt Zimmerman (Jan 12)
SmoothWall Project Security Advisory SWP-2004:001 William Anderson (Jan 12)
More phpGedView Vulnerabilities JeiAr (Jan 12)
Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Cisco Systems Product Security Incident Response Team (Jan 13)
[SECURITY] [DSA-422-1] multiple CVS improvements Wichert Akkerman (Jan 13)
exploit for HD Soft Windows FTP Server 1.6 mandrag (Jan 13)
- What is the point here? Alun Jones (Jan 19)
  - RE: What is the point here? Andrew Hintz ( Drew ) (Jan 19)
  - RE: What is the point here? ken kousky (Jan 19)
    - Re: What is the point here? Adam Shostack (Jan 20)
  - Re: What is the point here? Systems Administrator (Jan 19)
  - Re: What is the point here? Mariusz Woloszyn (Jan 20)
  - Re: What is the point here? Damian Menscher (Jan 20)
  - Re: What is the point here? Jason Coombs (Jan 21)
MDKSA-2004:002 - Updated ethereal packages fix vulnerabilities Mandrake Linux Security Team (Jan 13)
symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) Rene (Jan 13)
- Re: symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) AntiVir Support (Jan 27)
SuSE linux 9.0 YaST config Skribt [exploit] Rene (Jan 13)
unauthorized deletion of IPsec (and ISAKMP) SAs in racoon Thomas Walpuski (Jan 13)
- Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon itojun (Jan 14)
  - Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon itojun (Jan 16)
Snort-inline Federico Petronio (Jan 13)
Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 Luigi Auriemma (Jan 14)
an article on the Israeli Post Office break-in Gadi Evron (Jan 14)
nCipher Advisory #8: payShield library may verify bad requests nCipher Support (Jan 14)
FishCart Integer Overflow / Rounding Error Michael Brennen (Jan 14)
[RHSA-2004:007-01] Updated tcpdump packages fix various vulnerabilities bugzilla (Jan 14)
Network Associates Product Security Contact Matt Moore (Jan 14)
[RHSA-2004:006-01] Updated kdepim packages resolve security vulnerability bugzilla (Jan 14)
KDE Security Advisory: VCF file information reader vulnerability Dirk Mueller (Jan 14)
PhpDig 1.6.x: remote command execution FraMe (Jan 14)
SUSE Security Announcement: tcpdump (SuSE-SA:2004:002) Sebastian Krahmer (Jan 14)
Linux kernel mremap() bug update Paul Starzetz (Jan 15)
[SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64) Martin Schulze (Jan 15)
SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:003) Thomas Biege (Jan 15)
[slackware-security] kdepim security update (SSA:2004-014-01) Slackware Security Team (Jan 15)
January 15 is Personal Firewall Day, help the cause tlarholm (Jan 15)
RapidCache Multiple Vulnerabilities Peter Winter-Smith (Jan 15)
MDKSA-2004:003 - Updated kdepim packages fix vulnerability Mandrake Linux Security Team (Jan 15)
[slackware-security] INN security update (SSA:2004-014-02) Slackware Security Team (Jan 15)
OpenSSL ASN.1 parsing bugs PoC / brute forcer Bram Matthys (Syzop) (Jan 15)
Re: Security bug in Xerox Document Centre K . Schleede (Jan 16)
[OpenCA Advisory] Vulnerability in signature verification Michael Bell (Jan 16)
The Bat! 2.01 memory corruption 3APA3A (Jan 16)
[OpenPKG-SA-2004.002] OpenPKG Security Advisory (tcpdump) OpenPKG (Jan 16)
phpShop Vulnerabilities JeiAr (Jan 16)
Xtreme ASP Photo Gallery posidron (Jan 16)
Multiple MetaDot Vulnerabilities [ All Versions ] JeiAr (Jan 16)
[SECURITY] [DSA 424-1] New mc packages fix buffer overflow Matt Zimmerman (Jan 16)
HP printers and currency anti-copying measures Richard M. Smith (Jan 17)
- Re: HP printers and currency anti-copying measures Andre Oppermann (Jan 19)
- RE: HP printers and currency anti-copying measures Larry Seltzer (Jan 19)
- <Possible follow-ups>
- RE: HP printers and currency anti-copying measures Kevin E. Casey (Jan 19)
  - Re: HP printers and currency anti-copying measures mightye[removethis] (Jan 20)
    - Re: HP printers and currency anti-copying measures Sami Haahtinen (Jan 21)
    - Re: HP printers and currency anti-copying measures Darren Reed (Jan 22)
    - Re: HP printers and currency anti-copying measures Sasha (Jan 21)
SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access. KF (Jan 17)
- Happy belated Personal Firewall day - SRT2004-01-17-0628 - Agnitum Optpost firewall allows Local SYSTEM access KF (Jan 19)
Mambo OS v4.5/v4.6: remote command execution FraMe (Jan 19)
Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory scrap (Jan 19)
new outbreak warning - Bagle Gadi Evron (Jan 19)
Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Serafino Sorrenti (Jan 19)
- Re: Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Scott Gifford (Jan 20)
[SECURITY] [DSA 426-1] New netpbm-free packages fix insecure temporary file creation Matt Zimmerman (Jan 19)
[SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) Martin Schulze (Jan 19)
Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB Marc Schoenefeld (Jan 19)
Directories management bypassing in Goahead webserver <= 2.1.8 Luigi Auriemma (Jan 19)
New release of Patchfinder2 (windows rootkit detector) Joanna Rutkowska (Jan 19)
Resources consumption in Goahead webserver <= 2.1.8 Luigi Auriemma (Jan 19)
Denial of service in Getware's built-in webserver (Webcam Live and Photohost) Luigi Auriemma (Jan 19)
Networker 6.0 - possible symlink attack Rene (Jan 19)
[ESA-20040119-002] 'tcpdump' multiple vulnerabilities. EnGarde Secure Linux (Jan 19)
Re: Get admin rights using Doro (pdf creator) the_sz (Jan 19)
Bagle worm status + more blocking information Gadi Evron (Jan 19)
- <Possible follow-ups>
- RE: Bagle worm status + more blocking information David Brodbeck (Jan 19)
Yabb SE SQL Injection backspace (Jan 19)
a method for bypassing cookie restrictions in web browsers Michal Zalewski (Jan 19)
- Re: a method for bypassing cookie restrictions in web browsers Dave McKinney (Jan 19)
  - Re: a method for bypassing cookie restrictions in web browsers Michal Zalewski (Jan 20)
RE: ISA Server 2000 - Vulnerability in H.323 Filter Can Cause Rem ote Code Execution (816458) Alan Monaghan (Jan 19)
[SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities Matt Zimmerman (Jan 19)
More info on blocking the Bagle worm Gadi Evron (Jan 19)
RE: What is the point here? PM Systems - Rick Woehler (Jan 19)
NETCam webserver Directory traversal bug Rafel Ivgi, The-Insider (Jan 20)
[SuSE 9.0] possible symlink attacks in some scripts Rene (Jan 20)
- <Possible follow-ups>
- Re: [SuSE 9.0] possible symlink attacks in some scripts Thomas Biege (Jan 22)
[CLA-2004:809] Conectiva Security Announcement - screen Conectiva Updates (Jan 20)
[CLA-2004:810] Conectiva Security Announcement - kdepim Conectiva Updates (Jan 20)
[CLA-2004:808] Conectiva Security Announcement - cvs Conectiva Updates (Jan 20)
vBulletin Security Vulnerability gcf (Jan 20)
- RE: vBulletin Security Vulnerability Ferruh Mavituna (Jan 20)
[SECURITY] [DSA 428-1] New slocate packages fix buffer overflow Matt Zimmerman (Jan 20)
[SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability advisory (Jan 20)
WebTrends Reporting Center Path Disclosure vulnerability Oliver Karow (Jan 20)
2Wire-Gateway Cross Site Scripting and Directory Transversal bug in SSL Form Rafel Ivgi, The-Insider (Jan 20)
OwnServer 1.0 Directory Transversal Vulnerability Rafel Ivgi, The-Insider (Jan 20)
Internet Explorer - Multiple Vulnerabilities Rafel Ivgi, The-Insider (Jan 20)
- <Possible follow-ups>
- RE: Internet Explorer - Multiple Vulnerabilities Thor Larholm (Jan 21)
  - Re: [Full-Disclosure] RE: Internet Explorer - Multiple Vulnerabilities Berend-Jan Wever (Jan 21)
Mephistoles Httpd 0.6.0final XSS Donato Ferrante (Jan 21)
TSLSA-2004-0005 - slocate Trustix Security Advisor (Jan 21)
Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers Cisco Systems Product Security Incident Response Team (Jan 21)
[Fwd: [TH-research] Bagle remote uninstall] Gadi Evron (Jan 21)
[RHSA-2004:034-01] Updated mc packages resolve buffer overflow vulnerability bugzilla (Jan 21)
Honeyd Security Advisory 2004-001: Remote Detection Via Simple Probe Packet Niels Provos (Jan 21)
WebcamXP v1.06.945 Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 21)
Paper announcement: Is finding security holes a good idea? Eric Rescorla (Jan 21)
- Re: Paper announcement: Is finding security holes a good idea? Oliver Friedrichs (Jan 22)
- Re: Paper announcement: Is finding security holes a good idea? Benjamin Franz (Jan 22)
- Re: Paper announcement: Is finding security holes a good idea? Kurt Seifried (Jan 22)
- Re: Paper announcement: Is finding security holes a good idea? Robert Lemos (Jan 22)
- Re: Paper announcement: Is finding security holes a good idea? Christopher E. Cramer (Jan 22)
- <Possible follow-ups>
- RE: Paper announcement: Is finding security holes a good idea? Daniel Whelan (Jan 22)
[ GLSA 200401-02 ] Honeyd remote detection vulnerability via a probe packet Tim Yamin (Jan 21)
Hijacking Apache 2 via mod_perl Steve Grubb (Jan 21)
- Re: Hijacking Apache 2 via mod_perl Ben Laurie (Jan 22)
  - Re[2]: Hijacking Apache 2 via mod_perl 3APA3A (Jan 22)
    - Re: Hijacking Apache 2 via mod_perl Ben Laurie (Jan 22)
    - Re: Hijacking Apache 2 via mod_perl André Malo (Jan 22)
    - Re: Hijacking Apache 2 via mod_perl Steve G (Jan 22)
    - Re: Hijacking Apache 2 via mod_perl jon schatz (Jan 23)
    - Re: Hijacking Apache 2 via mod_perl Matthew Wakeling (Jan 24)
    - Re: Re[2]: Hijacking Apache 2 via mod_perl Steve G (Jan 22)
- Re: Hijacking Apache 2 via mod_perl Lupe Christoph (Jan 22)
yet another new phising scam Gadi Evron (Jan 22)
TBE - the banner engine server-side script execution vulnerability Ed J. Aivazian (Jan 22)
AV products vulnerability [Fwd: [TH-research] Upx hack tool] Gadi Evron (Jan 22)
Need for Speed Hot pursuit 2 <= 242 client's buffer overflow Luigi Auriemma (Jan 22)
Major hack attack on the U.S. Senate Richard M. Smith (Jan 22)
- Re: Major hack attack on the U.S. Senate ~Kevin Davis³ (Jan 23)
  - Re: Major hack attack on the U.S. Senate rsh (Jan 24)
  - Re: Major hack attack on the U.S. Senate Kirk Spencer (Jan 24)
    - Re: Major hack attack on the U.S. Senate Crispin Cowan (Jan 26)
  - Re: Major hack attack on the U.S. Senate Daniel . Capo (Jan 24)
    - Re: Major hack attack on the U.S. Senate Dinesh Nair (Jan 24)
    - Re: Major hack attack on the U.S. Senate ed (Jan 24)
- Re: Major hack attack on the U.S. Senate Brian C. Lane (Jan 23)
  - Re: Major hack attack on the U.S. Senate Kevin Reardon (Jan 24)
  - Re: [work] Re: Major hack attack on the U.S. Senate opticfiber (Jan 24)
    - Re: [work] Re: Major hack attack on the U.S. Senate Jonathan A. Zdziarski (Jan 24)
- <Possible follow-ups>
- RE: Major hack attack on the U.S. Senate B. Kinney (Jan 24)
  - Message not available
    - RE: Major hack attack on the U.S. Senate bugtraq (Jan 24)
vulnerabilities of postscript printers Bob Kryger (Jan 22)
- Re: vulnerabilities of postscript printers Darren Reed (Jan 23)
  - Re: vulnerabilities of postscript printers Jim Knoble (Jan 24)
  - Re: vulnerabilities of postscript printers der Mouse (Jan 24)
  - Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
  - Re: vulnerabilities of postscript printers Elizabeth Zwicky (Jan 24)
    - Re: vulnerabilities of postscript printers Darren Reed (Jan 24)
    - Re: vulnerabilities of postscript printers Stephen Samuel (Jan 24)
  - Re: vulnerabilities of postscript printers Glynn Clements (Jan 24)
  - Re: vulnerabilities of postscript printers Nate Eldredge (Jan 24)
- Re: vulnerabilities of postscript printers der Mouse (Jan 23)
  - Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
    - Re: vulnerabilities of postscript printers der Mouse (Jan 24)
    - Re: vulnerabilities of postscript printers Michael Zimmermann (Jan 24)
    - Re: vulnerabilities of postscript printers der Mouse (Jan 24)
  - Re: vulnerabilities of postscript printers Ian Farquhar - Network Security Group (Jan 27)
- <Possible follow-ups>
- Re: vulnerabilities of postscript printers Thomas M. Payerle (Jan 24)
- Re: vulnerabilities of postscript printers Bob Beck (Jan 24)
  - Re: vulnerabilities of postscript printers Theo de Raadt (Jan 24)
NetBus Pro Web Server Direcory Listing And Remote File Upload Rafel Ivgi, The-Insider (Jan 22)
GeoHttpServer Authentification Bypass Vulnerability & D.O.S (Denial Of Service) Rafel Ivgi, The-Insider (Jan 22)
FREESCO public http server - Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 22)
NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities Rafel Ivgi, The-Insider (Jan 23)
Finjan SurfinGate Vulnerability David Byrne (Jan 23)
- <Possible follow-ups>
- RE: Finjan SurfinGate Vulnerability Menashe Eliezer (Jan 27)
QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities S-Quadra Security Research (Jan 23)
- <Possible follow-ups>
- Re: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities S-Quadra Security Research (Jan 26)
Tiny Server 1.1 (1.0.5) Multiple Vulnerabilities Donato Ferrante (Jan 24)
Oracle HTTP Server Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 24)
MDKSA-2004:004 - Updated slocate packages fix vulnerability Mandrake Linux Security Team (Jan 24)
[SST]ServU MDTM command remote buffero verflow adv icbm (Jan 24)
MDKSA-2004:005 - Updated jabber packages fix DoS vulnerability Mandrake Linux Security Team (Jan 24)
Resources consumption in Reptile webserver daily version Donato Ferrante (Jan 24)
BWS v1.0b3 Directory Transversal Vulnerability Rafel Ivgi, The-Insider (Jan 24)
Inrtra Forum Cross Site Scripting Vulnerabillity Rafel Ivgi, The-Insider (Jan 24)
NextPlace.com E-Commerce ASP Engine Rafel Ivgi, The-Insider (Jan 26)
Serv-U ftp 4.2 site chmod long_file_name exploit Qianwei Hu (Jan 26)
Self-Executing FOLDERS: Windows XP Explorer Part V http-equiv () excite com (Jan 26)
- Re: Self-Executing FOLDERS: Windows XP Explorer Part V mightye[removethis] (Jan 26)
- <Possible follow-ups>
- RE: Self-Executing FOLDERS: Windows XP Explorer Part V Thor Larholm (Jan 26)
  - Re: Self-Executing FOLDERS: Windows XP Explorer Part V Jelmer (Jan 27)
- Re: Self-Executing FOLDERS: Windows XP Explorer Part V Liu Die Yu (Jan 27)
Advisory 01/2004: 12 x Gaim remote overflows Stefan Esser (Jan 26)
Directory traversal and XSS in BremsServer 1.2.4 Donato Ferrante (Jan 26)
[RHSA-2004:032-01] Updated Gaim packages fix various vulnerabiliies bugzilla (Jan 26)
Re: Windows XP Explorer Executes Arbitrary Code in Folders Stuart Moore (Jan 26)
ProxyNow! 2.x Multiple Overflow Vulnerabilities Peter Winter-Smith (Jan 26)
New MiMail variant is DDoS'ing SCO.com tlarholm (Jan 27)
- Re: New MiMail variant is DDoS'ing SCO.com Bob Toxen (Jan 28)
MDKSA-2004:006 - Updated gaim packages fix multiple vulnerabilities Mandrake Linux Security Team (Jan 27)
[HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V1.0 lion (Jan 27)
MDKSA-2004:007 - Updated mc packages fix buffer overflow vulnerability Mandrake Linux Security Team (Jan 27)
[slackware-security] GAIM security update (SSA:2004-026-01) Slackware Security Team (Jan 27)
[SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys Matt Zimmerman (Jan 27)
Chaosreader: Trace TCP/UDP from snoop/tcpdump logs Brendan Gregg (Jan 27)
MDKSA-2004:008 - Updated tcpdump packages fix several vulnerabilities Mandrake Linux Security Team (Jan 27)
Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code lowhalo (Jan 27)
[FLSA-2004:1187] Updated screen resolves security vulnerability Jesse Keating (Jan 27)
Elevated scanning: TCP port 135 (RPC) AND 445 (Domain Services) Nicholas Weaver (Jan 27)
GOOROO CROSSING: File Spoofing Internet Explorer 6 http-equiv () excite com (Jan 27)
- RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 Oliver Lavery (Jan 27)
- <Possible follow-ups>
- RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 tlarholm (Jan 27)
[ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability Tim Yamin (Jan 27)
SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities KF (Jan 27)
Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 Bharat Mediratta (Jan 27)
GAIM Patch update Stefan Esser (Jan 27)
[ GLSA 200401-04 ] GAIM 0.75 Remote overflows Tim Yamin (Jan 27)
information and reverse engineering bits of the Mydoom worm Gadi Evron (Jan 27)
[SECURITY] [DSA 430-1] New trr19 packages fix local games exploit Martin Schulze (Jan 28)
RFC: virus handling Thomas Zehetbauer (Jan 28)
Denial Of Service in SurfNOW 2.2 Donato Ferrante (Jan 28)
phpBB privmsg.php XSS vulnerability patch. Shaun Colley (Jan 28)
SRT2004-01-17-0227 - BlackICE allows local users to become SYSTEM KF (Jan 28)
BRS WebWeaver Webserver Cross Site Scripting Vulnerability Oliver Karow (Jan 28)
Oracle toplink mapping workbench password algorithm Pete Finnigan (Jan 28)
ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving ZetaLabs (Jan 28)
SGI Advanced Linux Environment security update #9 SGI Security Coordinator (Jan 29)
new WIN virus? Atom 'Smasher' (Jan 29)
Security Announcement: untrusted ELF library path in some cvsup binary RPMs Matthias Andree (Jan 29)
ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving ZetaLabs (Jan 29)
MacOS X TruBlueEnvironment Buffer Overflow @stake Advisories (Jan 29)
----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========---------- pask (Jan 29)
----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- pask (Jan 29)
SUSE Security Announcement: gaim (SuSE-SA:2004:004) Thomas Biege (Jan 29)
----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- pask (Jan 29)
[FLSA-2004:1207] Updated cvs resolves security vulnerability Jesse Keating (Jan 29)
userland binary vulnerabilities on IRIX SGI Security Coordinator (Jan 29)
Cisco Security Advisory: Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049) Cisco Systems Product Security Incident Response Team (Jan 29)
Serv-U exploit Berend-Jan Wever (Jan 30)
FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs FreeBSD Security Advisories (Jan 30)

Previous period

Next period