Starting: Thu May 02 2002 - 10:19:07 CDT
Ending: Sun Jun 02 2002 - 19:54:50 CDT

• .-=D3FC0N/=-.
  • Re: MS02-023 does not patch actual issue! (Thu May 16 2002 - 10:46:18 CDT)
• 2c79cbe14ac7d0b8472d3f129fa1df55hushmail.com
  • YoungZSoft CMailServer overflow, PATCH + WAREZ!#! (Tue May 21 2002 - 16:49:54 CDT)
• 3APA3A
  • SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw (Sat Jun 01 2002 - 07:14:15 CDT)
  • Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Fri May 17 2002 - 12:23:42 CDT)
  • Re: Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Tue May 14 2002 - 02:47:01 CDT)
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Fri May 10 2002 - 07:28:54 CDT)
• Alun Jones
  • Re: Problems with various windows FTP servers (Fri May 31 2002 - 15:50:06 CDT)
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Thu May 09 2002 - 08:13:51 CDT)
• Anders Nordby
  • Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 02:55:21 CDT)
• Andreas Sandblad
  • IE dot bug - Sandblad advisory #7 (Sun May 19 2002 - 09:45:15 CDT)
  • Opera javascript protocoll vulnerability [Sandblad advisory #6] (Wed May 15 2002 - 11:57:59 CDT)
• Andrew Clover
  • Re: Update and comments on the MS02-023 patch, holes still remain (Fri May 17 2002 - 04:27:37 CDT)
  • Re: GOBBLES SECURITY ADVISORY #33 (Sat May 11 2002 - 10:04:46 CDT)
• Andrew Hintz (Drew)
  • SafeWeb Vulnerability - Fingerprinting Websites Using Traffic Analysis (Fri May 10 2002 - 00:56:37 CDT)
• Andrew.Lopackiamsouth.com
  • Cisco IDS Device Manager 3.1.1 Advisory (Fri May 24 2002 - 13:42:07 CDT)
• awacs
  • 2 security problem Quantum SNAP server (Thu May 30 2002 - 03:45:09 CDT)
• Bao Dai Nhan
  • Another vulnerability in hosting controller (Sun May 19 2002 - 05:10:50 CDT)
• Beck Mr.R
  • Re: Misformated message header causes msn messenger to crash (Thu May 23 2002 - 15:58:12 CDT)
• Ben Bucksch
  • Beonex Communicator 0.8-pre based on Mozilla 1.0-branch released (Fri May 03 2002 - 20:59:15 CDT)
• Ben Laurie
  • Re: Yahoo Messenger - Multiple Vulnerabilities (Mon May 27 2002 - 14:48:04 CDT)
  • Unfortunate interaction between EZMLM and MessageLabs virus scanning (Tue May 07 2002 - 11:17:02 CDT)
• Benjamin Keller
  • FW: New Macromedia Security Zone Bulletins Posted (Thu May 09 2002 - 20:31:05 CDT)
• big bon
  • Re: Logitech Keyboard Insecurity (Fri May 03 2002 - 09:01:54 CDT)
• Binken, Rens
  • KPMG-2002018: Pointsec for PalmOS PIN disclosure (Tue May 07 2002 - 04:41:19 CDT)
• blackshellhushmail.com
  • ldap vulnerabilities (Mon May 06 2002 - 05:29:42 CDT)
• Blue Boar
  • Re: GOBBLES SECURITY ADVISORY #33 (Fri May 10 2002 - 22:31:06 CDT)
• Boyce, Nick
  • FW: HP-UX security bulletins digest (Thu May 30 2002 - 08:24:43 CDT)
• BrainRawt .
  • LevCGI.coms NetPad 1.0.2 multiple vulnerabilities (Mon May 13 2002 - 20:44:28 CDT)
• Brian Eckman
  • Re: cqure.net.20020408.netware_nwftpd.a (Wed May 08 2002 - 13:54:43 CDT)
• bugzillaredhat.com
  • [RHSA-2002:094-08] Updated tcpdump packages fix buffer overflow (Thu May 30 2002 - 07:52:13 CDT)
  • [RHSA-2002:084-17] Updated nss_ldap packages fix pam_ldap vulnerability (Mon May 27 2002 - 02:56:29 CDT)
  • [RHSA-2002:092-11] Buffer overflow in UW imap daemon (Fri May 24 2002 - 14:00:50 CDT)
  • [RHSA-2002:047-10] Updated fetchmail packages available (Tue May 21 2002 - 08:16:17 CDT)
  • [RHSA-2002:078-04] Updated mpg321 packages available (Thu May 16 2002 - 13:21:35 CDT)
  • [RHSA-2002:079-13] Updated Mozilla packages fix a security issue (Wed May 15 2002 - 14:15:50 CDT)
  • [RHSA-2002:065-13] Updated sharutils package fixes uudecode issue (Tue May 14 2002 - 09:44:30 CDT)
  • [RHSA-2002:081-06] perl-Digest-MD5 UTF8 bug results in incorrect MD5 sums (Fri May 10 2002 - 12:33:20 CDT)
  • [RHSA-2002:086-05] Netfilter information leak (Thu May 09 2002 - 08:46:55 CDT)
  • [RHSA-2002:070-08] Updated mod_python packages available (Wed May 08 2002 - 13:09:12 CDT)
  • [RHSA-2002:064-12] Updated Nautilus for symlink vulnerability writing metadata files (Thu May 02 2002 - 13:58:29 CDT)
  • [RHSA-2002:070-06] Updated mod_python packages available (Thu May 02 2002 - 03:59:18 CDT)
• Burc Yildirim
  • 1st Linux and Free Software Festival - Ankara 2002 (Thu May 09 2002 - 03:47:34 CDT)
• ByteRage
  • Re: Problems with various windows FTP servers (Tue May 28 2002 - 02:32:03 CDT)
• capzlockhushmail.com
  • CAPZLOCK SECURITY ADVISORY NO. 1 (Mon May 20 2002 - 09:29:32 CDT)
• CERT Advisory
  • CERT Advisory CA-2002-13 Buffer Overflow in Microsoft's MSN Chat ActiveX (Fri May 10 2002 - 15:35:52 CDT)
  • CERT Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD (Wed May 08 2002 - 12:30:35 CDT)
  • CERT Advisory CA-2002-11 Heap Overflow in Cachefs Daemon (cachefsd) (Mon May 06 2002 - 15:50:12 CDT)
• Chad Loder
  • Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Fri May 17 2002 - 04:38:16 CDT)
• CHINANSL Security Team
  • Windows 2000 Server IIS 5.0 .ASP Overflow Exploit (Sat May 04 2002 - 10:42:52 CDT)
• Christian decoder Holler
  • Re: Flaw caused by default rulesets in many desktop firewalls under windows (Sat May 11 2002 - 09:43:23 CDT)
  • Flaw caused by default rulesets in many desktop firewalls under windows (Fri May 10 2002 - 13:44:15 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: CBOS - Improving Resilience to DoS Attacks (Thu May 23 2002 - 15:20:00 CDT)
  • Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability (Thu May 23 2002 - 15:25:00 CDT)
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco IP Telephones (Wed May 22 2002 - 11:00:00 CDT)
  • Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities (Wed May 15 2002 - 14:30:00 CDT)
  • Cisco Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability (Wed May 15 2002 - 14:30:00 CDT)
  • Cisco Security Advisory: NTP vulnerability (Wed May 08 2002 - 11:38:48 CDT)
• Coppage, Ross
  • ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 13:10:32 CDT)
• Corey J. Steele
  • Re: cqure.net.20020412.bordermanager_36_mv1.a (Fri May 10 2002 - 13:05:26 CDT)
• COULOMBE, TROY
  • Catalyst 4000 (Mon May 20 2002 - 11:38:25 CDT)
• Crist J. Clark
  • Re: ps under FreeBSD (Sun May 19 2002 - 03:14:38 CDT)
  • Re: ps under FreeBSD (Sun May 19 2002 - 03:18:38 CDT)
• CSICONdotNET
  • [CSICON] - Registration is now open for CSICON (Sun May 19 2002 - 21:43:59 CDT)
• Damir Rajnovic
  • Cisco IOS ICMP redirect DoS - Cisco's response (Tue May 21 2002 - 12:45:40 CDT)
• Daniel Nyström
  • [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS (Thu May 30 2002 - 17:21:30 CDT)
• Darren W. MacDonald
  • RE: Xerox DocuTech problems (Fri May 17 2002 - 20:39:29 CDT)
• Dave Ahmad
  • Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior (fwd) (Mon May 20 2002 - 15:46:26 CDT)
  • (SSRT0822) Security Bulletin - Compaq & Java Proxy/VM Potential Security Vulnerabilities (fwd) (Tue May 14 2002 - 20:49:44 CDT)
  • GOBBLES SECURITY ADVISORY #33 (Fri May 10 2002 - 13:44:48 CDT)
  • Re: OpenBSD local DoS and root exploit (Thu May 09 2002 - 10:27:40 CDT)
  • Administrivia (Sun May 05 2002 - 21:27:55 CDT)
• Dave Oliver
  • Re: Intel D845HV/WN/PT series motherboard vulnerability (Fri May 03 2002 - 08:22:37 CDT)
• David Endler
  • US TurboLinux Security Severely Out of Date (Thu May 30 2002 - 13:40:01 CDT)
  • Evolution of Cross-Site Scripting Attacks (Mon May 20 2002 - 11:52:34 CDT)
• david evlis reign
  • [DER ADV#8] - Local off by one in CVSD (Sat May 25 2002 - 03:08:55 CDT)
  • [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd (Tue May 21 2002 - 21:06:43 CDT)
• David Litchfield
  • To Provide a Patch or to Service Pack? (Wed May 29 2002 - 12:39:14 CDT)
• David McKenzie
  • RE: MS02-023 does not patch actual issue! (Thu May 16 2002 - 12:54:07 CDT)
• Dax Kelson
  • Re: Linux kernel 2.4 "weak end host" issue (previously discussed here as "arp problem") (Sat May 11 2002 - 03:31:47 CDT)
• der Mouse
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Fri May 10 2002 - 22:23:45 CDT)
• Dug Song
  • Re: Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 11:34:49 CDT)
• E M
  • Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service (Fri May 17 2002 - 10:55:33 CDT)
• ellipse
  • Re: To Provide a Patch or to Service Pack? (Thu May 30 2002 - 03:16:21 CDT)
• Emre Yildirim
  • Re: ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 13:01:25 CDT)
• ERRor
  • dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (Wed May 15 2002 - 06:11:32 CDT)
  • dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability (Tue May 14 2002 - 03:26:30 CDT)
• Felix von Leitner
  • Linux kernel 2.4 "weak end host" issue (previously discussed here as "arp problem") (Thu May 09 2002 - 13:03:05 CDT)
• Florian Hobelsberger / BlueScreen
  • Lysias Lidik Webserver suffers from a Directory Traversal Vulnerability (Tue May 07 2002 - 20:27:19 CDT)
• Florian Weimer
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 08:39:41 CDT)
• fozzydmpfrance.com
  • OpenBSD local DoS and root exploit (Thu May 09 2002 - 08:11:31 CDT)
• Frank
  • b2 php remote command execution (Mon May 06 2002 - 05:13:37 CDT)
• Frank Hecker
  • Fix for Mozilla XMLHttpRequest file disclosure vulnerability (Thu May 02 2002 - 22:58:55 CDT)
• Frank Knobbe
  • Re: Flaw caused by default rulesets in many desktop firewalls under windows (Fri May 10 2002 - 22:34:45 CDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-02:26.accept (Wed May 29 2002 - 11:36:31 CDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:27.rc (Wed May 29 2002 - 11:36:35 CDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:25.bzip2 (Mon May 20 2002 - 11:08:14 CDT)
  • FreeBSD Security Advisory FreeBSD-SA-02:24.k5su (Mon May 20 2002 - 11:08:02 CDT)
• FX
  • Cisco IOS ICMP redirect DoS (Tue May 21 2002 - 05:37:09 CDT)
• Gabriel A. Maggiotti
  • Re: Phorum 3.3.2a remote command execution (Sat May 18 2002 - 13:58:19 CDT)
• George Capehart
  • Re: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 09:52:55 CDT)
• George Staikos
  • Re: route of #phrack is a funny man! (Thu May 23 2002 - 21:09:22 CDT)
• Georgi Guninski
  • Re: To Provide a Patch or to Service Pack? (Thu May 30 2002 - 09:31:53 CDT)
  • Re: Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Tue May 14 2002 - 10:38:51 CDT)
• gobbleshushmail.com
  • [GOBBLES] reflections on talkd hole (Thu May 23 2002 - 23:31:33 CDT)
  • route of #phrack is a funny man! (Tue May 21 2002 - 10:49:47 CDT)
  • Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version") (Sat May 11 2002 - 23:08:08 CDT)
• Gregory Neil Shapiro
  • File Locking Local Denial of Service; Impact on sendmail (Thu May 23 2002 - 18:42:27 CDT)
• GreyMagic Software
  • Reading ANY local file in Opera (GM#001-OP) (Mon May 27 2002 - 06:33:38 CDT)
  • MS02-023 does not patch actual issue! (Thu May 16 2002 - 03:55:32 CDT)
  • UPDATE (1-May-2002): Reading local files in Netscape 6 and Mozilla (GM#001-NS) (Sat May 04 2002 - 04:43:59 CDT)
• Guillaume PELAT
  • Re: ps under FreeBSD (Sun May 19 2002 - 04:51:08 CDT)
  • Grsecurity problem - modifying "read-only kernel" (Fri May 17 2002 - 03:07:31 CDT)
• Guy Van Sanden
  • SECURITY vulnerability in ECS-K7S5A(L) boards (Thu May 30 2002 - 02:27:17 CDT)
• hdlkhayahoo.com
  • Hosting Controller still have dangerous bugs! (Fri May 17 2002 - 04:10:51 CDT)
• hkvrg thdftghr
  • VP-ASP shopping cart software. (Mon May 27 2002 - 03:54:00 CDT)
• http-equivexcite.com
  • Self-Executing HTML: Internet Explorer 5.5 and 6.0 (Sat Jun 01 2002 - 09:42:10 CDT)
• Information Anarchy 2K01
  • Two (2) Critical Path inJoin V4.0 Directory Server Issues (Fri May 10 2002 - 13:55:24 CDT)
• InterWN Labs
  • Hole in AOL Instant Messenger (Wed May 08 2002 - 18:01:26 CDT)
• Ismael Briones
  • Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router (Mon May 27 2002 - 11:02:29 CDT)
• isoxchainsawbeer.com
  • Information Disclosure Vulnerability in IDS 0.8x (Tue May 28 2002 - 15:21:20 CDT)
  • Plain Text Password Vulnerability in Winamp 2.80 (Sat May 18 2002 - 23:41:33 CDT)
• J Edgar Hoover
  • Xerox DocuTech problems (Fri May 17 2002 - 13:50:08 CDT)
• Jakub Filonik
  • ps under FreeBSD (Sat May 18 2002 - 13:40:38 CDT)
• Jeff Franklin
  • Re: wu-imap buffer overflow condition (Fri May 10 2002 - 19:34:58 CDT)
• Joe Testa
  • R7-0003: Nautilus Symlink Vulnerability (Thu May 02 2002 - 15:13:50 CDT)
• John Howie
  • RE: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 16:56:06 CDT)
• John.Aireyrnib.org.uk
  • RE: MS02-023 does not patch actual issue! (Fri May 17 2002 - 03:05:11 CDT)
  • RE: MS02-023 does not patch actual issue! (Fri May 17 2002 - 08:34:59 CDT)
• Johnathan Nightingale
  • Multiple Vulnerabilities in CISCO VoIP Phones (Wed May 22 2002 - 10:50:50 CDT)
• Jonas Eriksson
  • Potential security issues in Ethereal (Wed May 29 2002 - 09:54:35 CDT)
  • OpenSSH 3.2.3 released (fwd) (Mon May 27 2002 - 13:19:29 CDT)
  • OpenSSH 3.2.2 released (fwd) (Fri May 17 2002 - 01:42:42 CDT)
  • Re: OpenBSD local DoS and root exploit (Thu May 09 2002 - 11:54:31 CDT)
• Jonas Ländin
  • iXsecurity.20020404.4d_webserver.a (Thu May 02 2002 - 19:37:45 CDT)
• Jonathan Lamberson
  • Microsoft Active Directory security vulnerability (Thu May 23 2002 - 09:55:46 CDT)
• Julien Vanegue
  • Re: More ELF buggery... (Fri May 31 2002 - 11:02:46 CDT)
• Kanatoko
  • MatuFtpServer Remote Buffer Overflow and Possible DoS (Tue May 21 2002 - 23:13:00 CDT)
• Keary Suska
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Thu May 09 2002 - 13:37:36 CDT)
• Ken Weaverling
  • Re: Xerox DocuTech problems (Sat May 18 2002 - 21:04:19 CDT)
• keyboardhackerhotmail.com
  • Logitech Keyboard Insecurity (Thu May 02 2002 - 13:27:51 CDT)
• KF
  • Xandros based linux autorun -c (Tue May 28 2002 - 05:37:28 CDT)
  • New Kismet Packages available - SayText() and suid kismet_server issues (Tue May 28 2002 - 23:49:55 CDT)
  • Sendmail file locking - PoC (Fri May 24 2002 - 00:48:49 CDT)
  • cURL remote PoC for Linux (Sun May 05 2002 - 22:43:53 CDT)
  • cURL remote PoC for FBSD (Sun May 05 2002 - 22:43:56 CDT)
  • latest Progress patch has suid issues AGAIN. (Thu May 02 2002 - 00:36:38 CDT)
• kikaijukikaiju.com
  • Re: Xerox DocuTech problems (Fri May 17 2002 - 20:26:45 CDT)
• KJK::Hyperion
  • Nearly undocumented NT security feature - the solution to executable attachments? (Tue May 07 2002 - 15:28:33 CDT)
  • Re: Logitech Keyboard Insecurity (Fri May 03 2002 - 20:35:14 CDT)
• Kris Warkentin
  • Re: Multiple vulnerabilities in QNX (Fri May 31 2002 - 21:23:35 CDT)
• Lance Spitzner
  • Reverse Challenge - Binary released (Sun May 05 2002 - 21:05:23 CDT)
  • Honeynet Project -> The Reverse Challenge (Wed May 01 2002 - 15:10:51 CDT)
• Larry Jones
  • Re: [DER ADV#8] - Local off by one in CVSD (Sun May 26 2002 - 14:23:16 CDT)
• Last Stage of Delirium
  • [LSD] Solaris cachefsd remote buffer overflow vulnerability (Sun May 05 2002 - 22:32:23 CDT)
• Lupe Christoph
  • Re: Netstd 3.07-17 multiple remote buffer overflows (Sat May 25 2002 - 04:01:47 CDT)
• Mandrake Linux Security Team
  • MDKSA-2002:037-1 - dhcp update (Thu May 30 2002 - 13:30:02 CDT)
  • MDKSA-2002:034 - imap update (Mon May 27 2002 - 17:55:21 CDT)
  • MDKSA-2002:037 - dhcp update (Wed May 29 2002 - 14:06:59 CDT)
  • MDKSA-2002:036 - fetchmail update (Tue May 28 2002 - 13:57:58 CDT)
  • MDKSA-2002:035 - perl-Digest-MD5 update (Tue May 28 2002 - 13:56:57 CDT)
  • MDKSA-2002:033 - webmin update (Tue May 21 2002 - 20:50:11 CDT)
  • MDKSA-2002:032 - tcpdump update (Thu May 16 2002 - 15:09:19 CDT)
  • MDKSA-2002:031 - fileutils update (Thu May 16 2002 - 15:08:19 CDT)
  • MDKSA-2002:030 - temporary fix for netfilter information leak (Thu May 09 2002 - 11:41:48 CDT)
• Marc Maiffret
  • ADVISORY: MSN Messenger OCX Buffer Overflow (Wed May 08 2002 - 18:00:03 CDT)
  • Macromedia Flash Activex Buffer overflow (Thu May 02 2002 - 19:17:22 CDT)
• Marcell Fodor
  • wu-imap buffer overflow condition (Fri May 10 2002 - 10:27:13 CDT)
• Markus Arndt
  • Phorum 3.3.2a has another bug for remote command execution (Sat May 18 2002 - 05:32:56 CDT)
  • Phorum 3.3.2a remote command execution (Fri May 17 2002 - 13:26:40 CDT)
  • Possible Buffer Overflow in ACDSee 4.0 (Fri May 10 2002 - 16:10:28 CDT)
• Martijn Boerwinkel
  • Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar (Sun May 26 2002 - 10:59:33 CDT)
• Martin Östlund
  • irssi backdoored. (Sat May 25 2002 - 09:58:05 CDT)
• Matt Conover
  • w00w00 on AOL Instant Messenger remote overflow #2 (Mon May 06 2002 - 10:50:37 CDT)
• Matt Moore
  • Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 (Wed May 22 2002 - 11:11:57 CDT)
• Matthew G. Marsh
  • Re: Linux kernel 2.4 "weak end host" issue Explained (Tue May 14 2002 - 09:47:22 CDT)
• Max
  • pks public key server DOS and remote execution (Fri May 24 2002 - 17:39:06 CDT)
• Michael Metz [SpeedPartner]
  • Security-risk on gridscan.com (Fri May 24 2002 - 17:01:34 CDT)
• Michael Stone
  • [SECURITY] [DSA-130-1] memory allocation error in ethereal (Sat Jun 01 2002 - 08:37:58 CDT)
  • [SECURITY] [DSA-129-1] in.uucpd string truncation problem (Sat Jun 01 2002 - 07:56:32 CDT)
• Mike Crane
  • Re: Patrol security bugs (Tue May 07 2002 - 16:07:01 CDT)
• Muhammad Faisal Rauf Danka
  • Re: Plain Text Password Vulnerability in Winamp 2.80 (Mon May 20 2002 - 20:49:35 CDT)
• Muller Zsolt
  • Re: Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 05:03:57 CDT)
• Nate Eldredge
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 15:27:37 CDT)
• nCipher Support
  • nCipher Security Advisory #3: MSCAPI CSP Install Wizard (Mon May 13 2002 - 10:44:29 CDT)
• nexus-mailmail.ru
  • Fwd: [EXPL] Remote Exploit for UW-IMAPd Capability (IMAP4) (Thu May 30 2002 - 01:15:07 CDT)
• NGSEC Research Team
  • [NGSEC-2002-2] ISC DHCPDv3, remote root compromise (Wed May 08 2002 - 12:04:35 CDT)
• NGSSoftware Insight Security Research
  • Addendum to advisory #NISR29052002 (JRun buffer overflow) (Wed May 29 2002 - 11:37:28 CDT)
  • Macromedia JRUN Buffer overflow vulnerability (#NISR29052002) (Wed May 29 2002 - 00:33:23 CDT)
• Noam Rathaus
  • Re: VP-ASP shopping cart software. (Mon May 27 2002 - 13:38:46 CDT)
• Obscure
  • Multiple Vulnerabilities in MDaemon + WorldClient (Tue May 07 2002 - 16:56:58 CDT)
• office
  • cross-site scripting bug of ViewCVS (Sat May 18 2002 - 19:32:24 CDT)
• Olaf Kirch
  • Re: [RHSA-2002:047-10] Updated fetchmail packages available (Fri May 31 2002 - 16:16:58 CDT)
• Ory Segal
  • Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II) (Sun May 19 2002 - 03:00:57 CDT)
• paskcmlc.upv.es
  • Informix SE-7.25 /lib/sqlexec Vulnerability (Wed May 29 2002 - 18:32:51 CDT)
• Patrick Michael Kane
  • Cisco ATA-186 admin password can be trivially circumvented (Thu May 09 2002 - 12:30:11 CDT)
• Patrik Karlsson
  • cqure.net.20020408.netware_nwftpd.a (Wed May 08 2002 - 05:01:15 CDT)
  • cqure.net.20020412.netware_client.a (Wed May 08 2002 - 05:02:01 CDT)
  • cqure.net.20020412.bordermanager_36_mv1.a (Wed May 08 2002 - 05:03:11 CDT)
  • cqure.net.20020412.netware_sdmr.a (Wed May 08 2002 - 05:02:34 CDT)
• Paul Cardon
  • Re: Logitech Keyboard Insecurity (Thu May 02 2002 - 17:15:54 CDT)
• Paul Starzetz
  • GNU rm fileutils race condition problems on SuSE (Thu May 16 2002 - 06:43:25 CDT)
  • Re: trusting user-supplied data (was Re: FreeBSD Security Advisory FreeBSD-SA-02:23.stdio) (Thu May 02 2002 - 12:35:02 CDT)
• Pedram Amini
  • AIM+ SpyWare (Fri May 31 2002 - 13:54:49 CDT)
• Pedro Paulo Ferreira Bueno
  • Re: Efficient Networks Contact info (Thu May 23 2002 - 10:51:23 CDT)
• Pedro Quintanilha
  • RE: TrendMicro Interscan VirusWall security problem (Mon May 27 2002 - 09:09:20 CDT)
  • TrendMicro Interscan VirusWall security problem (Fri May 24 2002 - 13:05:05 CDT)
• Peter Gründl
  • KPMG-2002017: Snapgear Lite+ Firewall Denial of Service (Thu May 02 2002 - 06:56:53 CDT)
• Philippe Biondi
  • [CARTSA-20020402] Linux Netfilter NAT/ICMP code information leak (Wed May 08 2002 - 08:35:27 CDT)
• Philippe de Brito
  • Opty-Way Enterprise includes MSDE with sa <blank> (Wed May 22 2002 - 12:07:38 CDT)
• Phuong Nguyen
  • Yahoo Messenger - Multiple Vulnerabilities (Mon May 27 2002 - 10:20:54 CDT)
• Pidgorny, Slav
  • Verisign PKI: anyone to subordinate CA (Sun May 19 2002 - 01:01:03 CDT)
• ppp-design
  • NOCC: cross-site-scripting bug (Tue May 14 2002 - 08:33:29 CDT)
• qitest1
  • Bug in mnogosearch-3.1.19 (Sat May 11 2002 - 12:08:15 CDT)
• quentynfotango.com
  • Netscreen 25 unauthorised reboot issue (Mon May 27 2002 - 12:33:31 CDT)
• REAVA, JEFFREY [IT/0200]
  • RE: Honeynet Project -> The Reverse Challenge (Thu May 02 2002 - 12:43:14 CDT)
• researchteamesecurityonline.com
  • eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability (Mon May 20 2002 - 17:20:59 CDT)
• Richard Stanway
  • Remote quake 2 3.2x server cvar leak (Mon May 13 2002 - 21:48:05 CDT)
• richard.fuserernstyoung.com.au
  • Re: Logitech Keyboard Insecurity (Thu May 02 2002 - 18:41:16 CDT)
• Roger Safian
  • FIRST 2002 reminder (Thu May 09 2002 - 09:58:59 CDT)
• Ross Coppage
  • ATMSNMPD Vulnerable but not Addressed (Mon May 13 2002 - 10:55:22 CDT)
• Ry Jones
  • NTFS and PGP interact to expose EFS encrypted data (Wed May 08 2002 - 14:34:11 CDT)
• Scott Mackenzie
  • Gaim abritary Email Reading (Sat May 11 2002 - 23:52:56 CDT)
• SeazoN
  • wbbboard 1.1.1 registration _new_users_vulnerability_ (Sun May 26 2002 - 09:11:17 CDT)
• Sebastian Krahmer
  • SuSE Security Announcement: tcpdump/libpcap (SuSE-SA:2002:020) (Wed May 29 2002 - 07:40:32 CDT)
  • SuSE Security Announcement: shadow (SuSE-SA:2002:017) (Thu May 16 2002 - 05:49:00 CDT)
  • SuSE Security Announcement: sysconfig (SuSE-SA:2002:016) (Wed May 08 2002 - 05:35:35 CDT)
• secureconectiva.com.br
  • [CLA-2002:490] Conectiva Linux Security Announcement - mozilla (Wed May 29 2002 - 15:05:00 CDT)
  • [CLA-2002:489] Conectiva Linux Security Announcement - mailman (Fri May 24 2002 - 16:36:20 CDT)
  • [CLA-2002:487] Conectiva Linux Security Announcement - imap (Fri May 24 2002 - 09:33:06 CDT)
  • [CLA-2002:483] Conectiva Linux Security Announcement - dhcp (Thu May 09 2002 - 09:53:28 CDT)
  • [CLA-2002:481] Conectiva Linux Security Announcement - imlib (Wed May 08 2002 - 11:26:44 CDT)
  • [CLA-2002:480] Conectiva Linux Security Announcement - tcpdump (Tue May 07 2002 - 16:23:51 CDT)
  • [CLA-2002:477] Conectiva Linux Security Announcement - mod_python (Fri May 03 2002 - 15:37:11 CDT)
• securitycaldera.com
  • Security Update: [CSSA-2002-SCO.23] Open UNIX 8.0.0 UnixWare 7.1.1 : ftpd allows data connection hijacking via PASV mode (Thu May 30 2002 - 13:30:43 CDT)
  • Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely (Tue May 28 2002 - 18:07:42 CDT)
  • Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely (Tue May 28 2002 - 18:05:40 CDT)
  • Security Update: [CSSA-2002-SCO.20] OpenServer 5.0.5 OpenServer 5.0.6 : popper buffer overflow and denial-of-service (Thu May 23 2002 - 18:53:09 CDT)
  • Security Update: [CSSA-2002-SCO.19] OpenServer 5.0.5 OpenServer 5.0.6 : yppasswdd remotely exploitable buffer overflow (Mon May 20 2002 - 19:55:25 CDT)
  • Security Update: [CSSA-2002-023.0] Linux: PHP multipart/form-data vulnerabilities (Fri May 17 2002 - 13:20:54 CDT)
  • Security Update: [CSSA-2002-022.0] Linux: OpenSSH ticket and token passing buffer overflow (Wed May 15 2002 - 18:53:33 CDT)
  • Security Update: [CSSA-2002-021.0] Linux: imapd buffer overflow when fetching partial mailbox attributes (Wed May 15 2002 - 15:02:30 CDT)
  • Security Update: [CSSA-2002-018.1] Linux: REVISED: Race condition in fileutils (Tue May 14 2002 - 15:28:29 CDT)
  • Security Update: [CSSA-2002-020.0] Linux: icecast buffer overflows and denial-of-service (Mon May 13 2002 - 16:28:15 CDT)
  • Security Update: [CSSA-2002-SCO.18] Open UNIX 8.0.0 UnixWare 7.1.1 : CDE /var/dt and subdirectories are writable by world (Wed May 08 2002 - 15:01:25 CDT)
  • Security Update: [CSSA-2002-SCO.17] OpenServer 5.0.5 : sar -o buffer overflow (Wed May 01 2002 - 20:03:15 CDT)
• SGI Security Coordinator
  • IRIX fsr_xfs vulnerability (Wed May 08 2002 - 17:02:43 CDT)
  • IRIX netstat vulnerability (Tue May 07 2002 - 13:07:46 CDT)
  • IRIX Xlib vulnerability (Wed May 01 2002 - 16:59:25 CDT)
• Shea, Tim
  • Efficient Networks Contact info (Thu May 23 2002 - 08:37:00 CDT)
• Simon Ouellette
  • Multiple vulnerabilities in QNX (Fri May 31 2002 - 16:42:17 CDT)
• SnakeByte / Eric Sesterhenn
  • Problems with various windows FTP servers (Mon May 27 2002 - 13:39:29 CDT)
• snsadvlac.co.jp
  • [SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically (Thu May 16 2002 - 01:20:37 CDT)
  • [SNS Advisory No.53] Webmin/Usermin Session ID Spoofing Vulnerability (Wed May 08 2002 - 00:20:32 CDT)
  • [SNS Advisory No.52] Webmin/Usermin Cross-site Scripting Vulnerability (Wed May 08 2002 - 00:20:26 CDT)
• Spybreak
  • Netstd 3.07-17 multiple remote buffer overflows (Fri May 24 2002 - 03:39:23 CDT)
• Stephanie Schiebert
  • [Fwd: Updated version of SSH Secure Shell available] (Thu May 23 2002 - 12:22:29 CDT)
• Stephen Cope
  • Re: Problems with various windows FTP servers (Tue May 28 2002 - 05:13:01 CDT)
  • Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning (Fri May 10 2002 - 23:14:51 CDT)
• Steve Gustin
  • CGIscript.net - csPassword.cgi - Multiple Vulnerabilities (Wed May 29 2002 - 17:16:28 CDT)
  • 14+ CGIscript.net scripts - Path Disclosure (Fri May 17 2002 - 16:31:23 CDT)
• steven.sporenza.pwcglobal.com
  • Security Implications of Novell eDirectory. (Thu May 30 2002 - 03:56:30 CDT)
• Stuart Moore
  • Fix available for Sgdynamo (Fri May 10 2002 - 15:24:03 CDT)
• Summercon Admin
  • Summercon 2002 Announce (Wed May 08 2002 - 12:00:54 CDT)
• superpetzhushmail.com
  • NetPad eq MALWARE, was: LevCGI.coms NetPad 1.0.2 multiple vulnerabilities (Tue May 14 2002 - 12:02:14 CDT)
• SUZUKI Yasuhiro
  • swatch bug in throttle (Wed May 15 2002 - 07:48:40 CDT)
• Tamer Sahin
  • [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability (Sun May 26 2002 - 11:32:15 CDT)
  • [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2 (Mon May 27 2002 - 04:53:13 CDT)
  • [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability (Fri May 24 2002 - 08:20:19 CDT)
  • [SecurityOffice] Stronghold Secure Webserver Sample Script Path Disclosure Vulnerability (Tue May 21 2002 - 00:00:31 CDT)
• Terry Lavoie
  • RE: Multiple Vulnerabilities in MDaemon + WorldClient (Wed May 08 2002 - 14:53:59 CDT)
• The Dark Tangent
  • Announcing DEF CON 10! (Thu May 02 2002 - 23:25:25 CDT)
• the grugq
  • More ELF buggery... (Sun May 26 2002 - 11:59:54 CDT)
• Thomas Biege
  • SuSE Security Announcement: dhcp/dhcp-server (SuSE-SA:2002:019) (Wed May 22 2002 - 12:01:58 CDT)
  • Re: [security-intern] [securitysuse.de] FWD - GNU rm fileutils race condition problems on SuSE (Thu May 16 2002 - 07:03:02 CDT)
  • SuSE Security Announcement: lukemftp, nkitb, nkitserv (SuSE-SA:2002:018) (Thu May 16 2002 - 07:05:46 CDT)
  • SuSE Security Announcement: imlib (SuSE-SA:2002:015) (Tue May 07 2002 - 07:05:54 CDT)
• Thomas Seifert
  • Re: Phorum 3.3.2a remote command execution (Sat May 18 2002 - 19:12:51 CDT)
• Thor Larholm
  • RE: Update and comments on the MS02-023 patch, holes still remain (Fri May 17 2002 - 07:36:00 CDT)
  • Update and comments on the MS02-023 patch, holes still remain (Thu May 16 2002 - 09:20:08 CDT)
• Tina Bird
  • Re: Cisco Security Advisory: NTP vulnerability (fwd) (Thu May 09 2002 - 10:19:19 CDT)
• Tom Gilder
  • Re: MS02-023 does not patch actual issue! (Thu May 16 2002 - 12:56:33 CDT)
• Torbjorn Kristoffersen
  • Re: ps under FreeBSD (Sun May 19 2002 - 21:29:37 CDT)
• uid0catastrophe.net
  • Re: Trojan/backdoor in fragroute 1.2 source distribution (Fri May 31 2002 - 10:48:29 CDT)
  • Re: Xerox DocuTech problems (Fri May 17 2002 - 18:11:57 CDT)
• Ulf Harnhammar
  • CRLF Injection (Mon May 06 2002 - 17:12:10 CDT)
• underdocpandora.be
  • Misformated message header causes msn messenger to crash (Mon May 06 2002 - 10:04:13 CDT)
• Vanja Hrustic
  • Re: Nearly undocumented NT security feature - the solution to executable attachments? (Thu May 09 2002 - 15:41:50 CDT)
• webmasterprocheckup.com
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (Wed May 29 2002 - 08:31:27 CDT)
  • Vulnerability in Novell Netware 5.0 (part1) (Wed May 29 2002 - 08:27:45 CDT)
  • Vulnerability in Novell Netware 5.0 (part 2) (Wed May 29 2002 - 08:29:59 CDT)
  • Gafware's CFXImage vulnerability (Wed May 29 2002 - 09:21:32 CDT)
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2) (Wed May 29 2002 - 08:32:29 CDT)
  • Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3) (Wed May 29 2002 - 08:33:42 CDT)
• X-Force
  • ISS Alert: Microsoft SQL Spida Worm Propagation (Tue May 21 2002 - 16:31:24 CDT)
• Yuri A. Kabaenkov
  • Re: ps under FreeBSD (Sat May 18 2002 - 14:50:03 CDT)
• zeno
  • "The Cross Site Scripting FAQ" (Tue May 21 2002 - 06:50:25 CDT)
• zillion
  • Mnews 1.22 PoC exploit (Fri May 31 2002 - 18:37:42 CDT)
  • SRT Security Advisory (SRT2002-04-31-1159): Mnews (Fri May 31 2002 - 13:59:41 CDT)
  • AMANDA security issues (Mon May 27 2002 - 04:49:55 CDT)

Last message date: Sun Jun 02 2002 - 19:54:50 CDT
Archived on: Sun Jun 02 2002 - 19:54:51 CDT