Starting: Thu May 02 2002 - 10:19:07 CDT
Ending: Sun Jun 02 2002 - 19:54:50 CDT

• "The Cross Site Scripting FAQ"
  • zeno (Tue May 21 2002 - 06:50:25 CDT)
• (SSRT0822) Security Bulletin - Compaq & Java Proxy/VM Potential Security Vulnerabilities (fwd)
  • Dave Ahmad (Tue May 14 2002 - 20:49:44 CDT)
• 14+ CGIscript.net scripts - Path Disclosure
  • Steve Gustin (Fri May 17 2002 - 16:31:23 CDT)
• 1st Linux and Free Software Festival - Ankara 2002
  • Burc Yildirim (Thu May 09 2002 - 03:47:34 CDT)
• 2 security problem Quantum SNAP server
  • awacs (Thu May 30 2002 - 03:45:09 CDT)
• [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS
  • Daniel Nyström (Thu May 30 2002 - 17:21:30 CDT)
• [CARTSA-20020402] Linux Netfilter NAT/ICMP code information leak
  • Philippe Biondi (Wed May 08 2002 - 08:35:27 CDT)
• [CLA-2002:477] Conectiva Linux Security Announcement - mod_python
  • secureconectiva.com.br (Fri May 03 2002 - 15:37:11 CDT)
• [CLA-2002:480] Conectiva Linux Security Announcement - tcpdump
  • secureconectiva.com.br (Tue May 07 2002 - 16:23:51 CDT)
• [CLA-2002:481] Conectiva Linux Security Announcement - imlib
  • secureconectiva.com.br (Wed May 08 2002 - 11:26:44 CDT)
• [CLA-2002:483] Conectiva Linux Security Announcement - dhcp
  • secureconectiva.com.br (Thu May 09 2002 - 09:53:28 CDT)
• [CLA-2002:487] Conectiva Linux Security Announcement - imap
  • secureconectiva.com.br (Fri May 24 2002 - 09:33:06 CDT)
• [CLA-2002:489] Conectiva Linux Security Announcement - mailman
  • secureconectiva.com.br (Fri May 24 2002 - 16:36:20 CDT)
• [CLA-2002:490] Conectiva Linux Security Announcement - mozilla
  • secureconectiva.com.br (Wed May 29 2002 - 15:05:00 CDT)
• [CSICON] - Registration is now open for CSICON
  • CSICONdotNET (Sun May 19 2002 - 21:43:59 CDT)
• [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd
  • david evlis reign (Tue May 21 2002 - 21:06:43 CDT)
• [DER ADV#8] - Local off by one in CVSD
  • Larry Jones (Sun May 26 2002 - 14:23:16 CDT)
  • david evlis reign (Sat May 25 2002 - 03:08:55 CDT)
• [Fwd: Updated version of SSH Secure Shell available]
  • Stephanie Schiebert (Thu May 23 2002 - 12:22:29 CDT)
• [GOBBLES] reflections on talkd hole
  • gobbleshushmail.com (Thu May 23 2002 - 23:31:33 CDT)
• [LSD] Solaris cachefsd remote buffer overflow vulnerability
  • Last Stage of Delirium (Sun May 05 2002 - 22:32:23 CDT)
• [NGSEC-2002-2] ISC DHCPDv3, remote root compromise
  • NGSEC Research Team (Wed May 08 2002 - 12:04:35 CDT)
• [RHSA-2002:047-10] Updated fetchmail packages available
  • Olaf Kirch (Fri May 31 2002 - 16:16:58 CDT)
  • Nate Eldredge (Fri May 31 2002 - 15:27:37 CDT)
  • Florian Weimer (Fri May 31 2002 - 08:39:41 CDT)
  • bugzillaredhat.com (Tue May 21 2002 - 08:16:17 CDT)
• [RHSA-2002:064-12] Updated Nautilus for symlink vulnerability writing metadata files
  • bugzillaredhat.com (Thu May 02 2002 - 13:58:29 CDT)
• [RHSA-2002:065-13] Updated sharutils package fixes uudecode issue
  • bugzillaredhat.com (Tue May 14 2002 - 09:44:30 CDT)
• [RHSA-2002:070-06] Updated mod_python packages available
  • bugzillaredhat.com (Thu May 02 2002 - 03:59:18 CDT)
• [RHSA-2002:070-08] Updated mod_python packages available
  • bugzillaredhat.com (Wed May 08 2002 - 13:09:12 CDT)
• [RHSA-2002:078-04] Updated mpg321 packages available
  • bugzillaredhat.com (Thu May 16 2002 - 13:21:35 CDT)
• [RHSA-2002:079-13] Updated Mozilla packages fix a security issue
  • bugzillaredhat.com (Wed May 15 2002 - 14:15:50 CDT)
• [RHSA-2002:081-06] perl-Digest-MD5 UTF8 bug results in incorrect MD5 sums
  • bugzillaredhat.com (Fri May 10 2002 - 12:33:20 CDT)
• [RHSA-2002:084-17] Updated nss_ldap packages fix pam_ldap vulnerability
  • bugzillaredhat.com (Mon May 27 2002 - 02:56:29 CDT)
• [RHSA-2002:086-05] Netfilter information leak
  • bugzillaredhat.com (Thu May 09 2002 - 08:46:55 CDT)
• [RHSA-2002:092-11] Buffer overflow in UW imap daemon
  • bugzillaredhat.com (Fri May 24 2002 - 14:00:50 CDT)
• [RHSA-2002:094-08] Updated tcpdump packages fix buffer overflow
  • bugzillaredhat.com (Thu May 30 2002 - 07:52:13 CDT)
• [security-intern] [securitysuse.de] FWD - GNU rm fileutils race condition problems on SuSE
  • Thomas Biege (Thu May 16 2002 - 07:03:02 CDT)
• [SECURITY] [DSA-129-1] in.uucpd string truncation problem
  • Michael Stone (Sat Jun 01 2002 - 07:56:32 CDT)
• [SECURITY] [DSA-130-1] memory allocation error in ethereal
  • Michael Stone (Sat Jun 01 2002 - 08:37:58 CDT)
• [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability
  • Tamer Sahin (Sun May 26 2002 - 11:32:15 CDT)
• [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2
  • Tamer Sahin (Mon May 27 2002 - 04:53:13 CDT)
• [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability
  • Tamer Sahin (Fri May 24 2002 - 08:20:19 CDT)
• [SecurityOffice] Stronghold Secure Webserver Sample Script Path Disclosure Vulnerability
  • Tamer Sahin (Tue May 21 2002 - 00:00:31 CDT)
• [SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically
  • snsadvlac.co.jp (Thu May 16 2002 - 01:20:37 CDT)
• [SNS Advisory No.52] Webmin/Usermin Cross-site Scripting Vulnerability
  • snsadvlac.co.jp (Wed May 08 2002 - 00:20:26 CDT)
• [SNS Advisory No.53] Webmin/Usermin Session ID Spoofing Vulnerability
  • snsadvlac.co.jp (Wed May 08 2002 - 00:20:32 CDT)
• Addendum to advisory #NISR29052002 (JRun buffer overflow)
  • NGSSoftware Insight Security Research (Wed May 29 2002 - 11:37:28 CDT)
• Administrivia
  • Dave Ahmad (Sun May 05 2002 - 21:27:55 CDT)
• ADVISORY: MSN Messenger OCX Buffer Overflow
  • Marc Maiffret (Wed May 08 2002 - 18:00:03 CDT)
• AIM+ SpyWare
  • Pedram Amini (Fri May 31 2002 - 13:54:49 CDT)
• AMANDA security issues
  • zillion (Mon May 27 2002 - 04:49:55 CDT)
• Announcing DEF CON 10!
  • The Dark Tangent (Thu May 02 2002 - 23:25:25 CDT)
• Another vulnerability in hosting controller
  • Bao Dai Nhan (Sun May 19 2002 - 05:10:50 CDT)
• ATMSNMPD Vulnerable but not Addressed
  • Emre Yildirim (Mon May 13 2002 - 13:01:25 CDT)
  • Coppage, Ross (Mon May 13 2002 - 13:10:32 CDT)
  • Ross Coppage (Mon May 13 2002 - 10:55:22 CDT)
• b2 php remote command execution
  • Frank (Mon May 06 2002 - 05:13:37 CDT)
• Beonex Communicator 0.8-pre based on Mozilla 1.0-branch released
  • Ben Bucksch (Fri May 03 2002 - 20:59:15 CDT)
• Bug in mnogosearch-3.1.19
  • qitest1 (Sat May 11 2002 - 12:08:15 CDT)
• CAPZLOCK SECURITY ADVISORY NO. 1
  • capzlockhushmail.com (Mon May 20 2002 - 09:29:32 CDT)
• Catalyst 4000
  • COULOMBE, TROY (Mon May 20 2002 - 11:38:25 CDT)
• CERT Advisory CA-2002-11 Heap Overflow in Cachefs Daemon (cachefsd)
  • CERT Advisory (Mon May 06 2002 - 15:50:12 CDT)
• CERT Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD
  • CERT Advisory (Wed May 08 2002 - 12:30:35 CDT)
• CERT Advisory CA-2002-13 Buffer Overflow in Microsoft's MSN Chat ActiveX
  • CERT Advisory (Fri May 10 2002 - 15:35:52 CDT)
• CGIscript.net - csPassword.cgi - Multiple Vulnerabilities
  • Steve Gustin (Wed May 29 2002 - 17:16:28 CDT)
• Cisco ATA-186 admin password can be trivially circumvented
  • Patrick Michael Kane (Thu May 09 2002 - 12:30:11 CDT)
• Cisco IDS Device Manager 3.1.1 Advisory
  • Andrew.Lopackiamsouth.com (Fri May 24 2002 - 13:42:07 CDT)
• Cisco IOS ICMP redirect DoS
  • FX (Tue May 21 2002 - 05:37:09 CDT)
• Cisco IOS ICMP redirect DoS - Cisco's response
  • Damir Rajnovic (Tue May 21 2002 - 12:45:40 CDT)
• Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability
  • Cisco Systems Product Security Incident Response Team (Thu May 23 2002 - 15:25:00 CDT)
• Cisco Security Advisory: CBOS - Improving Resilience to DoS Attacks
  • Cisco Systems Product Security Incident Response Team (Thu May 23 2002 - 15:20:00 CDT)
• Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed May 15 2002 - 14:30:00 CDT)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco IP Telephones
  • Cisco Systems Product Security Incident Response Team (Wed May 22 2002 - 11:00:00 CDT)
• Cisco Security Advisory: NTP vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed May 08 2002 - 11:38:48 CDT)
• Cisco Security Advisory: NTP vulnerability (fwd)
  • Tina Bird (Thu May 09 2002 - 10:19:19 CDT)
• Cisco Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed May 15 2002 - 14:30:00 CDT)
• cqure.net.20020408.netware_nwftpd.a
  • Brian Eckman (Wed May 08 2002 - 13:54:43 CDT)
  • Patrik Karlsson (Wed May 08 2002 - 05:01:15 CDT)
• cqure.net.20020412.bordermanager_36_mv1.a
  • Corey J. Steele (Fri May 10 2002 - 13:05:26 CDT)
  • Patrik Karlsson (Wed May 08 2002 - 05:03:11 CDT)
• cqure.net.20020412.netware_client.a
  • Patrik Karlsson (Wed May 08 2002 - 05:02:01 CDT)
• cqure.net.20020412.netware_sdmr.a
  • Patrik Karlsson (Wed May 08 2002 - 05:02:34 CDT)
• CRLF Injection
  • Ulf Harnhammar (Mon May 06 2002 - 17:12:10 CDT)
• Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar
  • Martijn Boerwinkel (Sun May 26 2002 - 10:59:33 CDT)
• cross-site scripting bug of ViewCVS
  • office (Sat May 18 2002 - 19:32:24 CDT)
• cURL remote PoC for FBSD
  • KF (Sun May 05 2002 - 22:43:56 CDT)
• cURL remote PoC for Linux
  • KF (Sun May 05 2002 - 22:43:53 CDT)
• dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability
  • ERRor (Tue May 14 2002 - 03:26:30 CDT)
• dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express
  • 3APA3A (Fri May 17 2002 - 12:23:42 CDT)
  • Chad Loder (Fri May 17 2002 - 04:38:16 CDT)
  • ERRor (Wed May 15 2002 - 06:11:32 CDT)
• Efficient Networks Contact info
  • Shea, Tim (Thu May 23 2002 - 08:37:00 CDT)
  • Pedro Paulo Ferreira Bueno (Thu May 23 2002 - 10:51:23 CDT)
• eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability
  • researchteamesecurityonline.com (Mon May 20 2002 - 17:20:59 CDT)
• Evolution of Cross-Site Scripting Attacks
  • David Endler (Mon May 20 2002 - 11:52:34 CDT)
• File Locking Local Denial of Service; Impact on sendmail
  • Gregory Neil Shapiro (Thu May 23 2002 - 18:42:27 CDT)
• FIRST 2002 reminder
  • Roger Safian (Thu May 09 2002 - 09:58:59 CDT)
• Fix available for Sgdynamo
  • Stuart Moore (Fri May 10 2002 - 15:24:03 CDT)
• Fix for Mozilla XMLHttpRequest file disclosure vulnerability
  • Frank Hecker (Thu May 02 2002 - 22:58:55 CDT)
• Flaw caused by default rulesets in many desktop firewalls under windows
  • Frank Knobbe (Fri May 10 2002 - 22:34:45 CDT)
  • Christian decoder Holler (Sat May 11 2002 - 09:43:23 CDT)
  • Christian decoder Holler (Fri May 10 2002 - 13:44:15 CDT)
• Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior (fwd)
  • Dave Ahmad (Mon May 20 2002 - 15:46:26 CDT)
• FreeBSD Security Advisory FreeBSD-SA-02:23.stdio)
  • Paul Starzetz (Thu May 02 2002 - 12:35:02 CDT)
• FreeBSD Security Advisory FreeBSD-SA-02:24.k5su
  • FreeBSD Security Advisories (Mon May 20 2002 - 11:08:02 CDT)
• FreeBSD Security Advisory FreeBSD-SA-02:25.bzip2
  • FreeBSD Security Advisories (Mon May 20 2002 - 11:08:14 CDT)
• FreeBSD Security Advisory FreeBSD-SA-02:26.accept
  • FreeBSD Security Advisories (Wed May 29 2002 - 11:36:31 CDT)
• FreeBSD Security Advisory FreeBSD-SA-02:27.rc
  • FreeBSD Security Advisories (Wed May 29 2002 - 11:36:35 CDT)
• Fwd: [EXPL] Remote Exploit for UW-IMAPd Capability (IMAP4)
  • nexus-mailmail.ru (Thu May 30 2002 - 01:15:07 CDT)
• Fwd: GOBBLES RESPONSE TO THE BLUE BOAR ("fixed version")
  • Georgi Guninski (Tue May 14 2002 - 10:38:51 CDT)
  • 3APA3A (Tue May 14 2002 - 02:47:01 CDT)
  • gobbleshushmail.com (Sat May 11 2002 - 23:08:08 CDT)
• Gafware's CFXImage vulnerability
  • webmasterprocheckup.com (Wed May 29 2002 - 09:21:32 CDT)
• Gaim abritary Email Reading
  • Scott Mackenzie (Sat May 11 2002 - 23:52:56 CDT)
• GNU rm fileutils race condition problems on SuSE
  • Paul Starzetz (Thu May 16 2002 - 06:43:25 CDT)
• GOBBLES SECURITY ADVISORY #33
  • Andrew Clover (Sat May 11 2002 - 10:04:46 CDT)
  • Blue Boar (Fri May 10 2002 - 22:31:06 CDT)
  • Dave Ahmad (Fri May 10 2002 - 13:44:48 CDT)
• Grsecurity problem - modifying "read-only kernel"
  • Guillaume PELAT (Fri May 17 2002 - 03:07:31 CDT)
• Hole in AOL Instant Messenger
  • InterWN Labs (Wed May 08 2002 - 18:01:26 CDT)
• Honeynet Project -> The Reverse Challenge
  • REAVA, JEFFREY [IT/0200] (Thu May 02 2002 - 12:43:14 CDT)
  • Lance Spitzner (Wed May 01 2002 - 15:10:51 CDT)
• Hosting Controller still have dangerous bugs!
  • hdlkhayahoo.com (Fri May 17 2002 - 04:10:51 CDT)
• HP-UX security bulletins digest
  • Boyce, Nick (Thu May 30 2002 - 08:24:43 CDT)
• IE dot bug - Sandblad advisory #7
  • Andreas Sandblad (Sun May 19 2002 - 09:45:15 CDT)
• Information Disclosure Vulnerability in IDS 0.8x
  • isoxchainsawbeer.com (Tue May 28 2002 - 15:21:20 CDT)
• Informix SE-7.25 /lib/sqlexec Vulnerability
  • paskcmlc.upv.es (Wed May 29 2002 - 18:32:51 CDT)
• Intel D845HV/WN/PT series motherboard vulnerability
  • Dave Oliver (Fri May 03 2002 - 08:22:37 CDT)
• IRIX fsr_xfs vulnerability
  • SGI Security Coordinator (Wed May 08 2002 - 17:02:43 CDT)
• IRIX netstat vulnerability
  • SGI Security Coordinator (Tue May 07 2002 - 13:07:46 CDT)
• IRIX Xlib vulnerability
  • SGI Security Coordinator (Wed May 01 2002 - 16:59:25 CDT)
• irssi backdoored.
  • Martin Östlund (Sat May 25 2002 - 09:58:05 CDT)
• ISS Alert: Microsoft SQL Spida Worm Propagation
  • X-Force (Tue May 21 2002 - 16:31:24 CDT)
• iXsecurity.20020404.4d_webserver.a
  • Jonas Ländin (Thu May 02 2002 - 19:37:45 CDT)
• KPMG-2002017: Snapgear Lite+ Firewall Denial of Service
  • Peter Gründl (Thu May 02 2002 - 06:56:53 CDT)
• KPMG-2002018: Pointsec for PalmOS PIN disclosure
  • Binken, Rens (Tue May 07 2002 - 04:41:19 CDT)
• latest Progress patch has suid issues AGAIN.
  • KF (Thu May 02 2002 - 00:36:38 CDT)
• ldap vulnerabilities
  • blackshellhushmail.com (Mon May 06 2002 - 05:29:42 CDT)
• LevCGI.coms NetPad 1.0.2 multiple vulnerabilities
  • BrainRawt . (Mon May 13 2002 - 20:44:28 CDT)
• Linux kernel 2.4 "weak end host" issue (previously discussed here as "arp problem")
  • Dax Kelson (Sat May 11 2002 - 03:31:47 CDT)
  • Felix von Leitner (Thu May 09 2002 - 13:03:05 CDT)
• Linux kernel 2.4 "weak end host" issue Explained
  • Matthew G. Marsh (Tue May 14 2002 - 09:47:22 CDT)
• Logitech Keyboard Insecurity
  • KJK::Hyperion (Fri May 03 2002 - 20:35:14 CDT)
  • big bon (Fri May 03 2002 - 09:01:54 CDT)
  • richard.fuserernstyoung.com.au (Thu May 02 2002 - 18:41:16 CDT)
  • Paul Cardon (Thu May 02 2002 - 17:15:54 CDT)
  • keyboardhackerhotmail.com (Thu May 02 2002 - 13:27:51 CDT)
• Lysias Lidik Webserver suffers from a Directory Traversal Vulnerability
  • Florian Hobelsberger / BlueScreen (Tue May 07 2002 - 20:27:19 CDT)
• Macromedia Flash Activex Buffer overflow
  • Marc Maiffret (Thu May 02 2002 - 19:17:22 CDT)
• Macromedia JRUN Buffer overflow vulnerability (#NISR29052002)
  • NGSSoftware Insight Security Research (Wed May 29 2002 - 00:33:23 CDT)
• MatuFtpServer Remote Buffer Overflow and Possible DoS
  • Kanatoko (Tue May 21 2002 - 23:13:00 CDT)
• MDKSA-2002:030 - temporary fix for netfilter information leak
  • Mandrake Linux Security Team (Thu May 09 2002 - 11:41:48 CDT)
• MDKSA-2002:031 - fileutils update
  • Mandrake Linux Security Team (Thu May 16 2002 - 15:08:19 CDT)
• MDKSA-2002:032 - tcpdump update
  • Mandrake Linux Security Team (Thu May 16 2002 - 15:09:19 CDT)
• MDKSA-2002:033 - webmin update
  • Mandrake Linux Security Team (Tue May 21 2002 - 20:50:11 CDT)
• MDKSA-2002:034 - imap update
  • Mandrake Linux Security Team (Mon May 27 2002 - 17:55:21 CDT)
• MDKSA-2002:035 - perl-Digest-MD5 update
  • Mandrake Linux Security Team (Tue May 28 2002 - 13:56:57 CDT)
• MDKSA-2002:036 - fetchmail update
  • Mandrake Linux Security Team (Tue May 28 2002 - 13:57:58 CDT)
• MDKSA-2002:037 - dhcp update
  • Mandrake Linux Security Team (Wed May 29 2002 - 14:06:59 CDT)
• MDKSA-2002:037-1 - dhcp update
  • Mandrake Linux Security Team (Thu May 30 2002 - 13:30:02 CDT)
• Microsoft Active Directory security vulnerability
  • Jonathan Lamberson (Thu May 23 2002 - 09:55:46 CDT)
• Misformated message header causes msn messenger to crash
  • Beck Mr.R (Thu May 23 2002 - 15:58:12 CDT)
  • underdocpandora.be (Mon May 06 2002 - 10:04:13 CDT)
• Mnews 1.22 PoC exploit
  • zillion (Fri May 31 2002 - 18:37:42 CDT)
• More ELF buggery...
  • Julien Vanegue (Fri May 31 2002 - 11:02:46 CDT)
  • the grugq (Sun May 26 2002 - 11:59:54 CDT)
• MS02-023 does not patch actual issue!
  • John.Aireyrnib.org.uk (Fri May 17 2002 - 03:05:11 CDT)
  • John.Aireyrnib.org.uk (Fri May 17 2002 - 08:34:59 CDT)
  • David McKenzie (Thu May 16 2002 - 12:54:07 CDT)
  • Tom Gilder (Thu May 16 2002 - 12:56:33 CDT)
  • .-=D3FC0N/=-. (Thu May 16 2002 - 10:46:18 CDT)
  • GreyMagic Software (Thu May 16 2002 - 03:55:32 CDT)
• Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II)
  • Ory Segal (Sun May 19 2002 - 03:00:57 CDT)
• Multiple Vulnerabilities in CISCO VoIP Phones
  • Johnathan Nightingale (Wed May 22 2002 - 10:50:50 CDT)
• Multiple Vulnerabilities in MDaemon + WorldClient
  • Terry Lavoie (Wed May 08 2002 - 14:53:59 CDT)
  • Obscure (Tue May 07 2002 - 16:56:58 CDT)
• Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1
  • Matt Moore (Wed May 22 2002 - 11:11:57 CDT)
• Multiple vulnerabilities in QNX
  • Kris Warkentin (Fri May 31 2002 - 21:23:35 CDT)
  • Simon Ouellette (Fri May 31 2002 - 16:42:17 CDT)
• nCipher Security Advisory #3: MSCAPI CSP Install Wizard
  • nCipher Support (Mon May 13 2002 - 10:44:29 CDT)
• Nearly undocumented NT security feature - the solution to executable attachments?
  • 3APA3A (Fri May 10 2002 - 07:28:54 CDT)
  • Vanja Hrustic (Thu May 09 2002 - 15:41:50 CDT)
  • Keary Suska (Thu May 09 2002 - 13:37:36 CDT)
  • KJK::Hyperion (Tue May 07 2002 - 15:28:33 CDT)
• NetPad eq MALWARE, was: LevCGI.coms NetPad 1.0.2 multiple vulnerabilities
  • superpetzhushmail.com (Tue May 14 2002 - 12:02:14 CDT)
• Netscreen 25 unauthorised reboot issue
  • quentynfotango.com (Mon May 27 2002 - 12:33:31 CDT)
• Netstd 3.07-17 multiple remote buffer overflows
  • Lupe Christoph (Sat May 25 2002 - 04:01:47 CDT)
  • Spybreak (Fri May 24 2002 - 03:39:23 CDT)
• New Kismet Packages available - SayText() and suid kismet_server issues
  • KF (Tue May 28 2002 - 23:49:55 CDT)
• New Macromedia Security Zone Bulletins Posted
  • Benjamin Keller (Thu May 09 2002 - 20:31:05 CDT)
• NOCC: cross-site-scripting bug
  • ppp-design (Tue May 14 2002 - 08:33:29 CDT)
• NTFS and PGP interact to expose EFS encrypted data
  • Ry Jones (Wed May 08 2002 - 14:34:11 CDT)
• OpenBSD local DoS and root exploit
  • Jonas Eriksson (Thu May 09 2002 - 11:54:31 CDT)
  • Dave Ahmad (Thu May 09 2002 - 10:27:40 CDT)
  • fozzydmpfrance.com (Thu May 09 2002 - 08:11:31 CDT)
• OpenSSH 3.2.2 released (fwd)
  • Jonas Eriksson (Fri May 17 2002 - 01:42:42 CDT)
• OpenSSH 3.2.3 released (fwd)
  • Jonas Eriksson (Mon May 27 2002 - 13:19:29 CDT)
• Opera javascript protocoll vulnerability [Sandblad advisory #6]
  • Andreas Sandblad (Wed May 15 2002 - 11:57:59 CDT)
• Opty-Way Enterprise includes MSDE with sa <blank>
  • Philippe de Brito (Wed May 22 2002 - 12:07:38 CDT)
• Patrol security bugs
  • Mike Crane (Tue May 07 2002 - 16:07:01 CDT)
• Phorum 3.3.2a has another bug for remote command execution
  • Markus Arndt (Sat May 18 2002 - 05:32:56 CDT)
• Phorum 3.3.2a remote command execution
  • Thomas Seifert (Sat May 18 2002 - 19:12:51 CDT)
  • Gabriel A. Maggiotti (Sat May 18 2002 - 13:58:19 CDT)
  • Markus Arndt (Fri May 17 2002 - 13:26:40 CDT)
• pks public key server DOS and remote execution
  • Max (Fri May 24 2002 - 17:39:06 CDT)
• Plain Text Password Vulnerability in Winamp 2.80
  • Muhammad Faisal Rauf Danka (Mon May 20 2002 - 20:49:35 CDT)
  • isoxchainsawbeer.com (Sat May 18 2002 - 23:41:33 CDT)
• Possible Buffer Overflow in ACDSee 4.0
  • Markus Arndt (Fri May 10 2002 - 16:10:28 CDT)
• Potential security issues in Ethereal
  • Jonas Eriksson (Wed May 29 2002 - 09:54:35 CDT)
• Problems with various windows FTP servers
  • Alun Jones (Fri May 31 2002 - 15:50:06 CDT)
  • Stephen Cope (Tue May 28 2002 - 05:13:01 CDT)
  • ByteRage (Tue May 28 2002 - 02:32:03 CDT)
  • SnakeByte / Eric Sesterhenn (Mon May 27 2002 - 13:39:29 CDT)
• ps under FreeBSD
  • Crist J. Clark (Sun May 19 2002 - 03:14:38 CDT)
  • Guillaume PELAT (Sun May 19 2002 - 04:51:08 CDT)
  • Crist J. Clark (Sun May 19 2002 - 03:18:38 CDT)
  • Torbjorn Kristoffersen (Sun May 19 2002 - 21:29:37 CDT)
  • Yuri A. Kabaenkov (Sat May 18 2002 - 14:50:03 CDT)
  • Jakub Filonik (Sat May 18 2002 - 13:40:38 CDT)
• R7-0003: Nautilus Symlink Vulnerability
  • Joe Testa (Thu May 02 2002 - 15:13:50 CDT)
• Reading ANY local file in Opera (GM#001-OP)
  • GreyMagic Software (Mon May 27 2002 - 06:33:38 CDT)
• Remote quake 2 3.2x server cvar leak
  • Richard Stanway (Mon May 13 2002 - 21:48:05 CDT)
• Reverse Challenge - Binary released
  • Lance Spitzner (Sun May 05 2002 - 21:05:23 CDT)
• route of #phrack is a funny man!
  • George Staikos (Thu May 23 2002 - 21:09:22 CDT)
  • gobbleshushmail.com (Tue May 21 2002 - 10:49:47 CDT)
• SafeWeb Vulnerability - Fingerprinting Websites Using Traffic Analysis
  • Andrew Hintz (Drew) (Fri May 10 2002 - 00:56:37 CDT)
• Security Implications of Novell eDirectory.
  • steven.sporenza.pwcglobal.com (Thu May 30 2002 - 03:56:30 CDT)
• Security Update: [CSSA-2002-018.1] Linux: REVISED: Race condition in fileutils
  • securitycaldera.com (Tue May 14 2002 - 15:28:29 CDT)
• Security Update: [CSSA-2002-020.0] Linux: icecast buffer overflows and denial-of-service
  • securitycaldera.com (Mon May 13 2002 - 16:28:15 CDT)
• Security Update: [CSSA-2002-021.0] Linux: imapd buffer overflow when fetching partial mailbox attributes
  • securitycaldera.com (Wed May 15 2002 - 15:02:30 CDT)
• Security Update: [CSSA-2002-022.0] Linux: OpenSSH ticket and token passing buffer overflow
  • securitycaldera.com (Wed May 15 2002 - 18:53:33 CDT)
• Security Update: [CSSA-2002-023.0] Linux: PHP multipart/form-data vulnerabilities
  • securitycaldera.com (Fri May 17 2002 - 13:20:54 CDT)
• Security Update: [CSSA-2002-SCO.17] OpenServer 5.0.5 : sar -o buffer overflow
  • securitycaldera.com (Wed May 01 2002 - 20:03:15 CDT)
• Security Update: [CSSA-2002-SCO.18] Open UNIX 8.0.0 UnixWare 7.1.1 : CDE /var/dt and subdirectories are writable by world
  • securitycaldera.com (Wed May 08 2002 - 15:01:25 CDT)
• Security Update: [CSSA-2002-SCO.19] OpenServer 5.0.5 OpenServer 5.0.6 : yppasswdd remotely exploitable buffer overflow
  • securitycaldera.com (Mon May 20 2002 - 19:55:25 CDT)
• Security Update: [CSSA-2002-SCO.20] OpenServer 5.0.5 OpenServer 5.0.6 : popper buffer overflow and denial-of-service
  • securitycaldera.com (Thu May 23 2002 - 18:53:09 CDT)
• Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely
  • securitycaldera.com (Tue May 28 2002 - 18:05:40 CDT)
• Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely
  • securitycaldera.com (Tue May 28 2002 - 18:07:42 CDT)
• Security Update: [CSSA-2002-SCO.23] Open UNIX 8.0.0 UnixWare 7.1.1 : ftpd allows data connection hijacking via PASV mode
  • securitycaldera.com (Thu May 30 2002 - 13:30:43 CDT)
• SECURITY vulnerability in ECS-K7S5A(L) boards
  • Guy Van Sanden (Thu May 30 2002 - 02:27:17 CDT)
• Security-risk on gridscan.com
  • Michael Metz [SpeedPartner] (Fri May 24 2002 - 17:01:34 CDT)
• SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw
  • 3APA3A (Sat Jun 01 2002 - 07:14:15 CDT)
• Self-Executing HTML: Internet Explorer 5.5 and 6.0
  • http-equivexcite.com (Sat Jun 01 2002 - 09:42:10 CDT)
• Sendmail file locking - PoC
  • KF (Fri May 24 2002 - 00:48:49 CDT)
• Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service
  • E M (Fri May 17 2002 - 10:55:33 CDT)
• SRT Security Advisory (SRT2002-04-31-1159): Mnews
  • zillion (Fri May 31 2002 - 13:59:41 CDT)
• Summercon 2002 Announce
  • Summercon Admin (Wed May 08 2002 - 12:00:54 CDT)
• SuSE Security Announcement: dhcp/dhcp-server (SuSE-SA:2002:019)
  • Thomas Biege (Wed May 22 2002 - 12:01:58 CDT)
• SuSE Security Announcement: imlib (SuSE-SA:2002:015)
  • Thomas Biege (Tue May 07 2002 - 07:05:54 CDT)
• SuSE Security Announcement: lukemftp, nkitb, nkitserv (SuSE-SA:2002:018)
  • Thomas Biege (Thu May 16 2002 - 07:05:46 CDT)
• SuSE Security Announcement: shadow (SuSE-SA:2002:017)
  • Sebastian Krahmer (Thu May 16 2002 - 05:49:00 CDT)
• SuSE Security Announcement: sysconfig (SuSE-SA:2002:016)
  • Sebastian Krahmer (Wed May 08 2002 - 05:35:35 CDT)
• SuSE Security Announcement: tcpdump/libpcap (SuSE-SA:2002:020)
  • Sebastian Krahmer (Wed May 29 2002 - 07:40:32 CDT)
• swatch bug in throttle
  • SUZUKI Yasuhiro (Wed May 15 2002 - 07:48:40 CDT)
• To Provide a Patch or to Service Pack?
  • ellipse (Thu May 30 2002 - 03:16:21 CDT)
  • Georgi Guninski (Thu May 30 2002 - 09:31:53 CDT)
  • David Litchfield (Wed May 29 2002 - 12:39:14 CDT)
• TrendMicro Interscan VirusWall security problem
  • Pedro Quintanilha (Mon May 27 2002 - 09:09:20 CDT)
  • Pedro Quintanilha (Fri May 24 2002 - 13:05:05 CDT)
• Trojan/backdoor in fragroute 1.2 source distribution
  • Dug Song (Fri May 31 2002 - 11:34:49 CDT)
  • uid0catastrophe.net (Fri May 31 2002 - 10:48:29 CDT)
  • Anders Nordby (Fri May 31 2002 - 02:55:21 CDT)
• Two (2) Critical Path inJoin V4.0 Directory Server Issues
  • Information Anarchy 2K01 (Fri May 10 2002 - 13:55:24 CDT)
• Unfortunate interaction between EZMLM and MessageLabs virus scanning
  • Stephen Cope (Fri May 10 2002 - 23:14:51 CDT)
  • der Mouse (Fri May 10 2002 - 22:23:45 CDT)
  • Alun Jones (Thu May 09 2002 - 08:13:51 CDT)
  • Ben Laurie (Tue May 07 2002 - 11:17:02 CDT)
• UPDATE (1-May-2002): Reading local files in Netscape 6 and Mozilla (GM#001-NS)
  • GreyMagic Software (Sat May 04 2002 - 04:43:59 CDT)
• Update and comments on the MS02-023 patch, holes still remain
  • Andrew Clover (Fri May 17 2002 - 04:27:37 CDT)
  • Thor Larholm (Fri May 17 2002 - 07:36:00 CDT)
  • Thor Larholm (Thu May 16 2002 - 09:20:08 CDT)
• US TurboLinux Security Severely Out of Date
  • David Endler (Thu May 30 2002 - 13:40:01 CDT)
• Verisign PKI: anyone to subordinate CA
  • George Capehart (Sun May 19 2002 - 09:52:55 CDT)
  • John Howie (Sun May 19 2002 - 16:56:06 CDT)
  • Muller Zsolt (Sun May 19 2002 - 05:03:57 CDT)
  • Pidgorny, Slav (Sun May 19 2002 - 01:01:03 CDT)
• VP-ASP shopping cart software.
  • Noam Rathaus (Mon May 27 2002 - 13:38:46 CDT)
  • hkvrg thdftghr (Mon May 27 2002 - 03:54:00 CDT)
• Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router
  • Ismael Briones (Mon May 27 2002 - 11:02:29 CDT)
• Vulnerability in Apache Tomcat v3.23 & v3.24
  • webmasterprocheckup.com (Wed May 29 2002 - 08:31:27 CDT)
• Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2)
  • webmasterprocheckup.com (Wed May 29 2002 - 08:32:29 CDT)
• Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3)
  • webmasterprocheckup.com (Wed May 29 2002 - 08:33:42 CDT)
• Vulnerability in Novell Netware 5.0 (part 2)
  • webmasterprocheckup.com (Wed May 29 2002 - 08:29:59 CDT)
• Vulnerability in Novell Netware 5.0 (part1)
  • webmasterprocheckup.com (Wed May 29 2002 - 08:27:45 CDT)
• w00w00 on AOL Instant Messenger remote overflow #2
  • Matt Conover (Mon May 06 2002 - 10:50:37 CDT)
• wbbboard 1.1.1 registration _new_users_vulnerability_
  • SeazoN (Sun May 26 2002 - 09:11:17 CDT)
• Windows 2000 Server IIS 5.0 .ASP Overflow Exploit
  • CHINANSL Security Team (Sat May 04 2002 - 10:42:52 CDT)
• wu-imap buffer overflow condition
  • Jeff Franklin (Fri May 10 2002 - 19:34:58 CDT)
  • Marcell Fodor (Fri May 10 2002 - 10:27:13 CDT)
• Xandros based linux autorun -c
  • KF (Tue May 28 2002 - 05:37:28 CDT)
• Xerox DocuTech problems
  • Ken Weaverling (Sat May 18 2002 - 21:04:19 CDT)
  • uid0catastrophe.net (Fri May 17 2002 - 18:11:57 CDT)
  • kikaijukikaiju.com (Fri May 17 2002 - 20:26:45 CDT)
  • Darren W. MacDonald (Fri May 17 2002 - 20:39:29 CDT)
  • J Edgar Hoover (Fri May 17 2002 - 13:50:08 CDT)
• Yahoo Messenger - Multiple Vulnerabilities
  • Ben Laurie (Mon May 27 2002 - 14:48:04 CDT)
  • Phuong Nguyen (Mon May 27 2002 - 10:20:54 CDT)
• YoungZSoft CMailServer overflow, PATCH + WAREZ!#!
  • 2c79cbe14ac7d0b8472d3f129fa1df55hushmail.com (Tue May 21 2002 - 16:49:54 CDT)

Last message date: Sun Jun 02 2002 - 19:54:50 CDT
Archived on: Sun Jun 02 2002 - 19:54:51 CDT