Most recent messages
324 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Mon May 03 2004 - 10:30:31 CDT
Ending: Tue Jun 01 2004 - 13:32:12 CDT

• [SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation Matt Zimmerman (Sat May 01 2004 - 21:10:30 CDT)
• W32/Sasser a and b SNORT Sigs Martin Overton (Sun May 02 2004 - 10:46:48 CDT)
• [SECURITY] [DSA 499-1] New rsync packages fix directory traversal bug Matt Zimmerman (Sat May 01 2004 - 21:04:36 CDT)
• PaX Linux Kernel 2.6 Patches DoS Advisory chris (Sun May 02 2004 - 04:41:39 CDT)
• EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow Marc Maiffret (Sun May 02 2004 - 08:41:23 CDT)
• Re: Will the Sasser worm become the next Blaster? Damian Menscher (Sun May 02 2004 - 17:54:03 CDT)
• Crystal Reports Vulnerabilities Imperva Application Defense Center (Sun May 02 2004 - 03:28:21 CDT)
  • Re: Crystal Reports Vulnerabilities Michael Ray (Tue May 04 2004 - 09:34:46 CDT)
  • RE: Crystal Reports Vulnerabilities Imperva Application Defense Center (Tue May 04 2004 - 11:02:43 CDT)
• RE: After Ms patches last Wed ... InfoSecseba.com (Mon May 03 2004 - 09:41:45 CDT)
  • RE: After Ms patches last Wed ... Nick FitzGerald (Mon May 03 2004 - 18:32:50 CDT)
• [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke] Janek Vind (Sun May 02 2004 - 11:07:22 CDT)
• X-Chat[v1.8.0-v2.0.8]: socks-5 remote buffer overflow exploit. Vade 79 (Mon May 03 2004 - 16:57:30 CDT)
• Re: New LSASS-based worm finally here (Sasser) Javier Fernandez-Sanguino (Mon May 03 2004 - 03:45:35 CDT)
• Serv-U LIST -l Parameter Buffer Overflow Aviram Jenik (Mon May 03 2004 - 06:39:55 CDT)
• Multible Vulnerabilites in Aldos Webserver olivergreyhat.de (Mon May 03 2004 - 05:48:02 CDT)
• Vulnerability in YaBB forum (Perl version without SQL) Dmitry Shurupov (Sun May 02 2004 - 04:39:37 CDT)
• RE: Will the Sasser worm become the next Blaster? Pullum, Stephen (Mon May 03 2004 - 15:01:38 CDT)
• Re: After Ms patches last Wed ... James Riden (Mon May 03 2004 - 16:36:00 CDT)
  • Re: After Ms patches last Wed ... Nicholas Weaver (Mon May 03 2004 - 18:03:15 CDT)
• [slackware-security] sysklogd update (SSA:2004-124-02) Slackware Security Team (Mon May 03 2004 - 15:06:43 CDT)
• [slackware-security] libpng update (SSA:2004-124-04) Slackware Security Team (Mon May 03 2004 - 15:08:30 CDT)
• [slackware-security] xine-lib update (SSA:2004-124-03) Slackware Security Team (Mon May 03 2004 - 15:07:44 CDT)
• [slackware-security] rsync update (SSA:2004-124-01) Slackware Security Team (Mon May 03 2004 - 15:06:08 CDT)
• RE: New LSASS-based worm finally here (Sasser) Marc Maiffret (Tue May 04 2004 - 02:39:52 CDT)
• [product-security<img src="/imgs/at.gif" border=0 align=middle>apple.com: APPLE-SA-2004-05-03 Security Update 2004-05-03] David Ahmad (Mon May 03 2004 - 17:50:07 CDT)
• Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser) Javier Fernandez-Sanguino (Tue May 04 2004 - 03:28:50 CDT)
  • Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser) Jason (Mon May 03 2004 - 21:42:38 CDT)
• <img src="/imgs/at.gif" border=0 align=middle>stake: AppleFileServer Remote Command Execution stake Advisories (Mon May 03 2004 - 17:33:36 CDT)
• Sasser worm and Embedded Support Partner (ESP) port 5554/tcp SGI Security Coordinator (Mon May 03 2004 - 17:38:19 CDT)
• SUSE Security Announcement: kernel (SuSE-SA:2004:010) Roman Drahtmueller (Mon May 03 2004 - 19:50:08 CDT)
• remote root exec vulnerability in omail Thijs Dalhuijsen (Tue May 04 2004 - 12:10:00 CDT)
• Vulnerabilities In PHPX 3.26 And Earlier JeiAr (Tue May 04 2004 - 13:10:39 CDT)
• SMF SIZE Tag Script Injection Vulnerability Cheng Peng Su (Wed May 05 2004 - 07:28:00 CDT)
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 please_reply_to_securitysco.com (Tue May 04 2004 - 20:00:33 CDT)
• Re: (HOAX) Dameware Mini Remote Control Version 4.2 ? Weak Key Agreement Scheme DameWare Support (Tue May 04 2004 - 12:51:45 CDT)
• [slackware-security] lha update in bin package (SSA:2004-125-01) Slackware Security Team (Tue May 04 2004 - 18:34:52 CDT)
• Corsaire Security Advisory - Verity Ultraseek path disclosure issue advisories (Wed May 05 2004 - 05:09:57 CDT)
• Fuse Talk Vunerabilities Stuart Jamieson (Wed May 05 2004 - 07:15:06 CDT)
• [OpenPKG-SA-2004.019] OpenPKG Security Advisory (kolab) OpenPKG (Wed May 05 2004 - 09:25:56 CDT)
• Titan FTP Server Aborted LIST DoS Aviram Jenik (Wed May 05 2004 - 07:51:23 CDT)
  • Re: Titan FTP Server Aborted LIST DoS Gene Ken (Thu May 06 2004 - 21:19:59 CDT)
  • Re: Titan FTP Server Aborted LIST DoS Noam Rathaus (Thu May 06 2004 - 06:53:07 CDT)
• [waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2] Janek Vind (Wed May 05 2004 - 11:02:39 CDT)
• FreeBSD Security Advisory FreeBSD-SA-04:09.kadmind FreeBSD Security Advisories (Wed May 05 2004 - 16:26:57 CDT)
• IRIX Networking Security Updates SGI Security Coordinator (Wed May 05 2004 - 14:16:08 CDT)
• FreeBSD Security Advisory FreeBSD-SA-04:08.heimdal FreeBSD Security Advisories (Wed May 05 2004 - 16:26:52 CDT)
• Multiple vulnerabilities in P4DB Jon McClintock (Wed May 05 2004 - 14:32:39 CDT)
• [AppSecInc Security Alert] Microsoft Active Server Pages Cookie Retrieval Issue Aaron C. Newman (Application Security, Inc.) (Wed May 05 2004 - 18:24:19 CDT)
• Advisory: Heimdal kadmind version4 remote heap overflow Evgeny Demidov (Wed May 05 2004 - 17:47:22 CDT)
• [0xbadc0ded #03] DeleGate (SSL-filter) <= 8.9.2 Joel Eriksson (Thu May 06 2004 - 06:47:10 CDT)
• SUSE Security Announcement: Live CD 9.1 (SuSE-SA:2004:011) Roman Drahtmueller (Thu May 06 2004 - 15:56:22 CDT)
• Will a smart worm be made in the near future? Taeho Oh (Wed May 05 2004 - 03:03:52 CDT)
  • Re: Will a smart worm be made in the near future? Jose Nazario (Fri May 07 2004 - 13:47:45 CDT)
• Security issue with Trend OfficeScan Corporate Edition Matt (Fri May 07 2004 - 00:33:43 CDT)
• Windows IPSec Vulnerabilty Steffen Pfendtner (Fri May 07 2004 - 08:28:48 CDT)
• [SECURITY] [DSA 501-1] New exim packages fix buffer overflows Martin Schulze (Fri May 07 2004 - 00:54:23 CDT)
• Remote DoS IE Memory Access Violation E.Kellinis (Thu May 06 2004 - 20:23:58 CDT)
• Eudora file URL buffer overflow Paul Szabo (Thu May 06 2004 - 21:10:59 CDT)
• [CLA-2004:840] Conectiva Security Announcement - lha Conectiva Updates (Thu May 06 2004 - 16:21:06 CDT)
• Fwd: [Re: cvs commit: src/sys/vm vm_map.c] Jacques A. Vidrine (Wed May 05 2004 - 11:56:36 CDT)
• Streaming Video and Audio security lists (Thu May 06 2004 - 16:12:26 CDT)
• [OpenPKG-SA-2004.020] OpenPKG Security Advisory (ssmtp) OpenPKG (Fri May 07 2004 - 15:01:55 CDT)
• FW: [security bulletin] SSRT4717 Management Agents for HP-UX Remote DoS Boren, Rich (SSRT) (Fri May 07 2004 - 19:26:39 CDT)
• [FLSA-2004:1395] Updated OpenSSL resolves security vulnerability Jesse Keating (Sat May 08 2004 - 11:39:40 CDT)
• Status bar exploit hides spoofed URLs Eudora, possibly other e-mail clients Brett Glass (Sat May 08 2004 - 12:10:08 CDT)
• [waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke] Janek Vind (Sat May 08 2004 - 14:22:17 CDT)
• [ GLSA 200405-01 ] Multiple format string vulnerabilities in neon 0.24.4 and earlier Kurt Lieber (Sun May 09 2004 - 12:12:10 CDT)
• PaX DoS proof-of-concept Michel Blomgren (Sun May 09 2004 - 18:35:04 CDT)
• a litle bypass with IE Nuno Costa (Mon May 10 2004 - 16:16:30 CDT)
  • Re: a litle bypass with IE Neil Briscoe (Mon May 10 2004 - 11:42:13 CDT)
  • RE: a litle bypass with IE Eric Norbut (Mon May 10 2004 - 15:35:16 CDT)
  • RE: a litle bypass with IE Thor Larholm (Mon May 10 2004 - 19:06:39 CDT)
  • Re: a litle bypass with IE Emilio Casbas (Tue May 11 2004 - 02:11:17 CDT)
• Monit 4.1 remote shell exploit (HTTP) Michel Blomgren (Sun May 09 2004 - 19:02:14 CDT)
• [ GLSA 200405-02 ] Multiple vulnerabilities in LHa Thierry Carrez (Sun May 09 2004 - 12:36:49 CDT)
• RE: An undetectable Online Bank Vulnerability? M Peterson (Fri May 07 2004 - 21:57:44 CDT)
• Arbitrary code inclusion in phpShop Calum Power (Sun May 09 2004 - 02:14:11 CDT)
• OUTLOOK 2003: OuchLook http-equivexcite.com (Sun May 09 2004 - 18:29:10 CDT)
• Emule 0.42e Remote Denial Of Service Exploit Rafel Ivgi, The-Insider (Mon May 10 2004 - 12:36:52 CDT)
• [Ulf Harnhammar]: LHA Advisory + Patch David Ahmad (Mon May 10 2004 - 10:47:48 CDT)
• msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh Rafel Ivgi, The-Insider (Mon May 10 2004 - 13:27:40 CDT)
  • Re: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh Gao Rui (Tue May 11 2004 - 20:01:20 CDT)
• DEEP SEA PHISHING: Internet Explorer / Outlook Express http-equivexcite.com (Mon May 10 2004 - 15:01:54 CDT)
• Somebody exploiting (badly designed) yahoo service? Aleksandar Milivojevic (Tue May 11 2004 - 11:24:39 CDT)
  • Re: Somebody exploiting (badly designed) yahoo service? Charles Mansmann (Tue May 11 2004 - 14:07:17 CDT)
  • Re: Somebody exploiting (badly designed) yahoo service? Nick FitzGerald (Wed May 12 2004 - 00:13:35 CDT)
• PING: Outlook 2003 Spam http-equivexcite.com (Tue May 11 2004 - 10:41:38 CDT)
• MDKSA-2004:042 - Updated rsync packages fixes potential to write outside of directory tree. Mandrake Linux Security Team (Mon May 10 2004 - 20:49:18 CDT)
• [SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows Martin Schulze (Tue May 11 2004 - 09:06:13 CDT)
• MDKSA-2004:043 - Updated apache2 packages fixes a denial of service vulnerability in mod_ssl Mandrake Linux Security Team (Mon May 10 2004 - 20:55:11 CDT)
• Re: NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP Florian Weimer (Tue May 11 2004 - 06:20:09 CDT)
  • Re: NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP Bob Beck (Tue May 11 2004 - 17:50:59 CDT)
  • Re: NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP Darren Reed (Wed May 12 2004 - 18:59:38 CDT)
• Linux Kernel sctp_setsockopt() Integer Overflow Shaun Colley (Tue May 11 2004 - 13:58:56 CDT)
  • Re: Linux Kernel sctp_setsockopt() Integer Overflow Michael Tokarev (Sat May 15 2004 - 13:24:25 CDT)
  • Re: Linux Kernel sctp_setsockopt() Integer Overflow Michael Tokarev (Thu May 27 2004 - 14:47:00 CDT)
  • Re: Linux Kernel sctp_setsockopt() Integer Overflow Jirka Kosina (Fri May 28 2004 - 22:13:17 CDT)
  • Re: Linux Kernel sctp_setsockopt() Integer Overflow Shaun Colley (Mon May 31 2004 - 12:35:29 CDT)
• [ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers Thierry Carrez (Tue May 11 2004 - 15:58:32 CDT)
• [ GLSA 200405-03 ] ClamAV VirusEvent parameter vulnerability Thierry Carrez (Tue May 11 2004 - 14:31:51 CDT)
• Hiding URLs from Outlook and other mail clients Carl (Tue May 11 2004 - 08:48:03 CDT)
• Advisory 04/2004: Net(Free)BSD Systrace local root vulnerabilitiy Stefan Esser (Mon May 10 2004 - 18:05:13 CDT)
• OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : X sessions which are not started by scologin cannot use the X authorization protocol please_reply_to_securitysco.com (Mon May 10 2004 - 19:18:29 CDT)
• Re: [Full-Disclosure] Linux Kernel sctp_setsockopt() Integer Overflow Tom Rini (Tue May 11 2004 - 17:05:15 CDT)
• [OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache) OpenPKG (Wed May 12 2004 - 07:56:03 CDT)
• MS04-015 - Windows Help Center - Dvdupgrade morning_wood (Wed May 12 2004 - 01:03:00 CDT)
• Re: Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure (Wed May 12 2004 - 00:05:21 CDT)
• surfboard1.1.6 local exploit. Anonymous (Tue May 11 2004 - 15:19:01 CDT)
  • Re: surfboard1.1.6 local exploit. Meredydd (Thu May 13 2004 - 06:47:25 CDT)
• NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root NetBSD Security-Officer (Wed May 12 2004 - 12:50:57 CDT)
• EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow Marc Maiffret (Wed May 12 2004 - 18:17:14 CDT)
• EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption Marc Maiffret (Wed May 12 2004 - 19:02:24 CDT)
• EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service Marc Maiffret (Wed May 12 2004 - 18:59:07 CDT)
• EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow Marc Maiffret (Wed May 12 2004 - 19:04:02 CDT)
• Showhelp() local CHM file execution roozbeh afrasiabi (Thu May 13 2004 - 04:13:48 CDT)
  • Re: Showhelp() local CHM file execution roozbeh afrasiabi (Fri May 14 2004 - 14:14:42 CDT)
• [SECURITY] [DSA 503-1] New mah-jong packages fix denial of service Martin Schulze (Thu May 13 2004 - 11:00:21 CDT)
• [slackware-security] apache (SSA:2004-133-01) Slackware Security Team (Wed May 12 2004 - 18:54:58 CDT)
• [ GLSA 200405-05 ] Utempter symlink vulnerability Kurt Lieber (Thu May 13 2004 - 11:12:51 CDT)
• Opera Telnet URI Handler Vulnerability also applies to other browsers Jannes (Thu May 13 2004 - 13:17:11 CDT)
• SYM04-008, Symantec Client Firewall Remote Access and Denial of Service Issues Sym Security (Thu May 13 2004 - 13:50:43 CDT)
• [security bulletin] SSRT4722 rev.0 HP-UX Mozilla denial of service Boren, Rich (SSRT) (Thu May 13 2004 - 16:16:52 CDT)
• POA: Outlook Expresss 6.00 http-equivexcite.com (Thu May 13 2004 - 16:40:10 CDT)
• IE URL Issue Being Used In Phishing In the Wild [USBank] Drew Copley (Thu May 13 2004 - 17:30:29 CDT)
  • RE: IE URL Issue Being Used In Phishing In the Wild [USBank] Drew Copley (Fri May 14 2004 - 13:18:51 CDT)
  • Re: IE URL Issue Being Used In Phishing In the Wild [USBank] Todd C. Campbell (Fri May 14 2004 - 12:44:48 CDT)
  • Re: IE URL Issue Being Used In Phishing In the Wild [USBank] Nick FitzGerald (Sat May 15 2004 - 00:18:17 CDT)
• Still Vulnerable in MSIE Greg Kujawa (Fri May 14 2004 - 09:36:49 CDT)
  • RE: Still Vulnerable in MSIE Thor Larholm (Fri May 14 2004 - 17:45:09 CDT)
  • RE: Still Vulnerable in MSIE Drew Copley (Mon May 17 2004 - 13:38:24 CDT)
• [security bulletin] SSRT4721 rev.0 HP-UX dtlogin unauthorized privileged access, DoS Boren, Rich (SSRT) (Fri May 14 2004 - 02:21:46 CDT)
• SUSE Security Announcement: mc (SuSE-SA:2004:012) Thomas Biege (Fri May 14 2004 - 09:10:36 CDT)
• TSLSA-2004-0027 - apache Trustix Security Advisor (Fri May 14 2004 - 07:08:43 CDT)
• DOE updated cybersecurity //no code or 0day sploits// just info System Administrator (Fri May 14 2004 - 07:05:51 CDT)
• Curious fileutils/coreutils behaviour. David Malone (Thu May 13 2004 - 11:49:02 CDT)
  • RE: Curious fileutils/coreutils behaviour. Michael Wojcik (Fri May 14 2004 - 13:19:55 CDT)
  • Re: Curious fileutils/coreutils behaviour. Nicolas Rachinsky (Fri May 14 2004 - 16:13:35 CDT)
  • Re: Curious fileutils/coreutils behaviour. David Malone (Fri May 14 2004 - 13:49:07 CDT)
  • Re: Curious fileutils/coreutils behaviour. Michael Shigorin (Sat May 15 2004 - 01:39:39 CDT)
  • Re: Curious fileutils/coreutils behaviour. Luciano Miguel Ferreira Rocha (Sat May 15 2004 - 02:58:09 CDT)
  • Re: Curious fileutils/coreutils behaviour. Martin (Sat May 15 2004 - 13:52:02 CDT)
• Vulnerability Scanning on Windows 2003 localhost will crash RPC farkingi-ownur.info (Thu May 13 2004 - 22:09:43 CDT)
  • RE: Vulnerability Scanning on Windows 2003 localhost will crash RPC Drew Copley (Fri May 14 2004 - 12:26:37 CDT)
• [security bulletin] SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries - elevated privileges Boren, Rich (SSRT) (Fri May 14 2004 - 03:02:04 CDT)
• Symantec Multiple Firewall DNS Response Denial-of-Service Exploit (PoC) houseofdabus HOD (Fri May 14 2004 - 12:01:38 CDT)
• TSLSA-2004-0029 - kernel Trustix Security Advisor (Fri May 14 2004 - 07:09:26 CDT)
• [ GLSA 200405-07 ] Exim verify=header_syntax buffer overflow Thierry Carrez (Fri May 14 2004 - 14:29:55 CDT)
• [ GLSA 200405-06 ] libpng denial of service vulnerability Thierry Carrez (Fri May 14 2004 - 14:25:43 CDT)
• Denial of Service Vulnerability in IEEE 802.11 Wireless Devices albatrosstim.it (Sat May 15 2004 - 06:33:08 CDT)
  • Re: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices Casper Dik (Sat May 15 2004 - 13:35:24 CDT)
  • Re[2]: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices Jason Ostrom (Sat May 15 2004 - 20:27:14 CDT)
  • Re: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices Niels Bakker (Mon May 17 2004 - 11:46:23 CDT)
• lha buffer overflow(s) again lwwszia.edu.pl (Sat May 15 2004 - 06:09:00 CDT)
• more simple and flexible WinBlox(GET CONTROL OF WINNT SYSTEM) Liu Die Yu (Fri May 14 2004 - 18:45:27 CDT)
• CiSCO IOS 12.* source code stolen Alexander Antipo (Sat May 15 2004 - 13:49:50 CDT)
• NetChat HTTP Server Stack Overflow dbdhushmail.com (Sun May 16 2004 - 21:17:14 CDT)
• WebCT: Cross Site Scripting Vulnerability spiffomatic 64 (Sun May 16 2004 - 23:50:58 CDT)
• Wget race condition vulnerability Hugo (Sun May 16 2004 - 18:28:47 CDT)
• [slackware-security] mc (SSA:2004-136-01) Slackware Security Team (Mon May 17 2004 - 04:27:55 CDT)
• Multiple TTT-C XSS vulnerabilities Kaloyan Georgiev (Sun May 16 2004 - 21:46:11 CDT)
• KDE Security Advisory: URI Handler Vulnerabilities Waldo Bastian (Mon May 17 2004 - 06:02:01 CDT)
• Safari remote arbitrary code execution kang (Mon May 17 2004 - 09:05:11 CDT)
  • Re: Safari remote arbitrary code execution Adam Shostack (Mon May 17 2004 - 15:55:46 CDT)
• RE: Remote Buffer Overflow in MailEnable HTTPMail MailEnable Sales (Sun May 16 2004 - 07:29:08 CDT)
• [waraxe-2004-SA#029 - Possible remote file inclusion in PhpNuke 6.x - 7.3] Janek Vind (Mon May 17 2004 - 13:45:41 CDT)
• Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Kurczaba Associates advisories (Mon May 17 2004 - 13:14:32 CDT)
  • RE: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Drew Copley (Mon May 17 2004 - 15:08:16 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability thegeekmeisterSAFe-mail.net (Mon May 17 2004 - 16:09:21 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Jan Kluka (Tue May 18 2004 - 03:28:23 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability sandrijeskiyahoo.com (Thu May 27 2004 - 04:53:33 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability http-equivexcite.com (Thu May 27 2004 - 14:32:09 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Robert J Taylor (Thu May 27 2004 - 15:01:13 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Valdis.Kletnieksvt.edu (Thu May 27 2004 - 14:47:39 CDT)
  • Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability Peter Pentchev (Fri May 28 2004 - 00:57:42 CDT)
• oscommerce 2.2 file_manager.php file browsing Rene (Mon May 17 2004 - 14:37:16 CDT)
• ROCKET SCIENCE: Outllook 2003 http-equivexcite.com (Mon May 17 2004 - 16:29:11 CDT)
• Desktop.ini flaw results in executing folders roozbeh afrasiabi (Mon May 17 2004 - 14:32:24 CDT)
• Buffer Overflow in ActivePerl ? Olivergreyhat.de (Mon May 17 2004 - 15:23:56 CDT)
  • Re: Buffer Overflow in ActivePerl ? rich.sflclogic.com (Mon May 17 2004 - 19:58:57 CDT)
  • Re: Buffer Overflow in ActivePerl ? Nick FitzGerald (Tue May 18 2004 - 08:29:41 CDT)
  • Re: Buffer Overflow in ActivePerl ? noderathotmail.com (Tue May 18 2004 - 23:10:49 CDT)
  • Re: Buffer Overflow in ActivePerl ? Josh Tolley (Tue May 18 2004 - 15:37:28 CDT)
  • RE: Buffer Overflow in ActivePerl ? Drew Copley (Tue May 18 2004 - 17:23:16 CDT)
  • Re: Buffer Overflow in ActivePerl ? David Cantrell (Wed May 19 2004 - 04:00:15 CDT)
  • Re: Buffer Overflow in ActivePerl ? David Ahmad (Wed May 19 2004 - 12:38:11 CDT)
• MDKSA-2004:044 - Updated libuser packages fix vulnerability Mandrake Linux Security Team (Mon May 17 2004 - 16:35:30 CDT)
• [waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3] Janek Vind (Mon May 17 2004 - 13:46:40 CDT)
• MDKSA-2004:045 - Updated passwd packages fix vulnerabilities Mandrake Linux Security Team (Mon May 17 2004 - 16:41:28 CDT)
• MDKSA-2004:046 - Updated apache packages fix a number of vulnerabilities Mandrake Linux Security Team (Mon May 17 2004 - 16:47:22 CDT)
• Advisory 05/2004: phpMyFAQ local file inclusion vulnerability Stefan Esser (Tue May 18 2004 - 03:50:47 CDT)
• Zen Cart login.php SQL Injection Vulnerability Oliver Minack (Tue May 18 2004 - 15:49:36 CDT)
• [slackware-security] kdelibs (SSA:2004-238-01) Slackware Security Team (Tue May 18 2004 - 02:08:28 CDT)
• [SECURITY] [DSA 504-1] New heimdal packages fix potential buffer overflow Martin Schulze (Tue May 18 2004 - 04:52:31 CDT)
• Vapid Labs Security Advisory for PrimeBase Database 4.2 (update) Larry W. Cashdollar (Mon May 17 2004 - 19:27:38 CDT)
• RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ? Bill Royds (Tue May 18 2004 - 06:22:54 CDT)
• IRIX 6.5.24 rpc.mountd infinte loop SGI Security Coordinator (Mon May 17 2004 - 18:11:02 CDT)
• Re: Buffer Overflow in ActivePerl? Axel Beckert (Tue May 18 2004 - 04:03:40 CDT)
• Overflow<img src="/imgs/at.gif" border=0 align=middle>OmniHTTPd Han_B (Tue May 18 2004 - 01:01:15 CDT)
• Unknown IE bug with css-styles henkie_is_leethotmail.com (Tue May 18 2004 - 12:11:49 CDT)
  • Re: Unknown IE bug with css-styles Paolo Mattiangeli (Tue May 18 2004 - 14:07:16 CDT)
• [ GLSA 200405-08 ] Pound format string vulnerability Thierry Carrez (Tue May 18 2004 - 14:13:59 CDT)
• MDKSA-2004:047 - Updated kdelibs packages fix URI handling vulnerabilities Mandrake Linux Security Team (Tue May 18 2004 - 17:01:53 CDT)
• [FLSA-2004:1546] Updated utempter resolves security vulnerability -- Reissue: updated 8.0 version numbers Jesse Keating (Wed May 19 2004 - 09:55:04 CDT)
• [ GLSA 200405-09 ] ProFTPD Access Control List bypass vulnerability Kurt Lieber (Wed May 19 2004 - 07:03:40 CDT)
• Advisory 07/2004: CVS remote vulnerability Stefan Esser (Wed May 19 2004 - 01:38:08 CDT)
• FreeBSD Security Advisory FreeBSD-SA-04:10.cvs FreeBSD Security Advisories (Wed May 19 2004 - 02:25:16 CDT)
• [SECURITY] [DSA 506-1] New neon packages fix buffer overflow Martin Schulze (Wed May 19 2004 - 04:21:53 CDT)
• Advisory 06/2004: libneon date parsing vulnerability Stefan Esser (Wed May 19 2004 - 01:36:42 CDT)
• [SECURITY] [DSA 505-1] New cvs packages fix remote exploit Martin Schulze (Wed May 19 2004 - 03:58:27 CDT)
• A new Sanctum paper: "Blind XPath Injection" Amit Klein (Wed May 19 2004 - 05:54:45 CDT)
• [SECURITY] [DSA 507-1] New cadaver packages fix buffer overflow Martin Schulze (Wed May 19 2004 - 06:36:47 CDT)
• Advisory 08/2004: Subversion remote vulnerability Stefan Esser (Wed May 19 2004 - 01:39:54 CDT)
• SUSE Security Announcement: cvs (SuSE-SA:2004:013) Sebastian Krahmer (Wed May 19 2004 - 06:16:05 CDT)
• Idea for proactive worm protection Peter Surda (Wed May 19 2004 - 11:55:37 CDT)
• Non-logged Brute Force Attack Vulnerability for Fantastico-Created Databases on cPanel Based Hosts Michael Curtis (Wed May 19 2004 - 12:26:08 CDT)
  • Re: Non-logged Brute Force Attack Vulnerability for Fantastico-Created Databases on cPanel Based Hosts Kenneth Peiruza (Thu May 20 2004 - 04:48:06 CDT)
• [ GLSA 200405-10 ] Icecast denial of service vulnerability Thierry Carrez (Wed May 19 2004 - 12:48:01 CDT)
• Reporting a Security Vulnerability in a Microsoft Product Microsoft Security Response Center (Wed May 19 2004 - 13:54:38 CDT)
• MDKSA-2004:048 - Updated cvs packages fix remotely exploitable vulnerability Mandrake Linux Security Team (Wed May 19 2004 - 13:18:23 CDT)
• MDKSA-2004:049 - Updated libneon packages fix heap variable overflow issues Mandrake Linux Security Team (Wed May 19 2004 - 13:27:09 CDT)
• [ GLSA 200405-11 ] KDE URI Handler Vulnerabilities Thierry Carrez (Wed May 19 2004 - 13:44:55 CDT)
• [OpenPKG-SA-2004.023] OpenPKG Security Advisory (subversion) OpenPKG (Wed May 19 2004 - 14:51:17 CDT)
• [OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon) OpenPKG (Wed May 19 2004 - 15:55:33 CDT)
• [OpenPKG-SA-2004.022] OpenPKG Security Advisory (cvs) OpenPKG (Wed May 19 2004 - 14:50:16 CDT)
• SGI ProPack 3: Kernel Update #1 - Security and other fixes SGI Security Coordinator (Wed May 19 2004 - 17:20:12 CDT)
• [slackware-security] cvs (SSA:2004-140-01) Slackware Security Team (Wed May 19 2004 - 21:14:49 CDT)
• SGI ProPack v2.4: Kernel Update #4 - Security and other fixes SGI Security Coordinator (Wed May 19 2004 - 17:23:58 CDT)
• [security bulletin] SSRT4696 rev. 0 HP ProCurve Routing Switches TCP Denial of Service (DoS) Boren, Rich (SSRT) (Thu May 20 2004 - 05:34:56 CDT)
• [ GLSA 200405-12 ] CVS heap overflow vulnerability Thierry Carrez (Thu May 20 2004 - 13:17:17 CDT)
• [ GLSA 200405-14 ] Buffer overflow in Subversion Joshua J. Berry (Thu May 20 2004 - 13:38:40 CDT)
• [ GLSA 200405-13 ] neon heap-based buffer overflow Thierry Carrez (Thu May 20 2004 - 13:25:46 CDT)
• [ GLSA 200405-15 ] cadaver heap-based buffer overflow Thierry Carrez (Thu May 20 2004 - 13:55:07 CDT)
• Auditor security collection released - a swiss army knife for security assessments. Max (Thu May 20 2004 - 15:43:53 CDT)
• Question About Ethics and Full Disclosure Tom (Thu May 20 2004 - 14:43:21 CDT)
  • RE: Question About Ethics and Full Disclosure Drew Copley (Thu May 20 2004 - 16:45:53 CDT)
  • RE: Question About Ethics and Full Disclosure Kevin E. Casey (Thu May 20 2004 - 16:31:26 CDT)
  • Re: Question About Ethics and Full Disclosure T.J. (Thu May 20 2004 - 16:43:15 CDT)
  • Re: Question About Ethics and Full Disclosure Michal Zalewski (Thu May 20 2004 - 17:27:40 CDT)
• Internet explorer .clsid vulnerability roozbeh afrasiabi (Thu May 20 2004 - 17:52:19 CDT)
  • RE: Internet explorer .clsid vulnerability Thor Larholm (Thu May 20 2004 - 18:37:19 CDT)
  • Re: Internet explorer .clsid vulnerability roozbeh afrasiabi (Fri May 21 2004 - 21:45:02 CDT)
• Re: Non-logged Brute Force Attack Vulnerability forFantastico-Created Databases on cPanel Based Hosts Michael Curtis (Thu May 20 2004 - 08:40:23 CDT)
• e107 web portal Referers HTTP Injection Chinchilla (Thu May 20 2004 - 20:31:58 CDT)
• [SNS Advisory No.72] Symantec Norton AntiVirus 2004 ActiveX Control Vulnerability snsadv (Thu May 20 2004 - 19:43:50 CDT)
• [OpenPKG-SA-2004.025] OpenPKG Security Advisory (rsync) OpenPKG (Fri May 21 2004 - 11:20:22 CDT)
• MDKSA-2004:046-1 - apache-mod_perl packages are now available Mandrake Linux Security Team (Thu May 20 2004 - 01:51:49 CDT)
• Eudora 6.1.1 attachment spoof, LaunchProtect Paul Szabo (Thu May 20 2004 - 20:16:25 CDT)
• [ GLSA 200405-16 ] Multiple XSS Vulnerabilities in SquirrelMail Rajiv Aaron Manglani (Fri May 21 2004 - 13:15:29 CDT)
• Stupid Phishing Tricks http-equivexcite.com (Fri May 21 2004 - 08:46:47 CDT)
• Exploit codes for CVS Vulnerability and snort rules from ISC K-OTiK Security (Sat May 22 2004 - 09:36:40 CDT)
• BNBT BitTorrent Tracker Denial Of Service badpack3t (Fri May 21 2004 - 20:38:19 CDT)
• Liferay Cross Site Scripting Flaw Giri, Sandeep (Sat May 22 2004 - 05:30:27 CDT)
• MDKSA-2004:050 - Updated kernel packages fix multiple vulnerabilities Mandrake Linux Security Team (Sat May 22 2004 - 00:18:24 CDT)
• Allegro RomPager/2.10 DoS exploit Seth Alan Woolley (Sat May 22 2004 - 03:33:13 CDT)
• e107 web portal user.php XSS (Cross Site Scripting) Chris Norton (Sat May 22 2004 - 17:51:20 CDT)
• cPanel mod_phpsuexec Vulnerability Rob Brown (Sun May 23 2004 - 22:08:42 CDT)
• Netgear RP114 URL filter fails if URL is too long Marc Ruef (Mon May 24 2004 - 05:35:59 CDT)
• [SECURITY] [DSA 508-1] New xpcd packages fix buffer overflow Matt Zimmerman (Sun May 23 2004 - 01:49:19 CDT)
• [ GLSA 200405-18 ] Buffer Overflow in Firebird Thierry Carrez (Sun May 23 2004 - 07:12:58 CDT)
  • Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird b0f www.b0f.net (Tue May 25 2004 - 12:37:54 CDT)
  • Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird KF (lists) (Wed May 26 2004 - 21:03:11 CDT)
  • Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird KF (lists) (Wed May 26 2004 - 21:10:21 CDT)
• [ GLSA 200405-19 ] Opera telnet URI handler file creation/truncation vulnerability Kurt Lieber (Tue May 25 2004 - 10:59:29 CDT)
• SSH URI handler remote arbitrary code execution kang (Mon May 24 2004 - 10:38:18 CDT)
• [CLA-2004:841] Conectiva Security Announcement - libneon Conectiva Updates (Tue May 25 2004 - 14:35:07 CDT)
• ERRATA: [ GLSA 200405-16 ] Multiple XSS Vulnerabilities in SquirrelMail Kurt Lieber (Tue May 25 2004 - 13:12:55 CDT)
• [CLA-2004:842] Conectiva Security Announcement - mailman Conectiva Updates (Tue May 25 2004 - 15:27:24 CDT)
• [ GLSA 200405-20 ] Insecure Temporary File Creation In MySQL Thierry Carrez (Tue May 25 2004 - 15:47:18 CDT)
• [security bulletin] SSRT4749 HP-UX Java Runtime Environment (JRE) remote DoS Boren, Rich (SSRT) (Tue May 25 2004 - 20:05:37 CDT)
• [security bulletin] SSRT4719 hp OpenView Select Access remote unauthorized access Boren, Rich (SSRT) (Tue May 25 2004 - 20:14:02 CDT)
• IEBUG: Archives of Internet Explorer Liu Die Yu (Tue May 25 2004 - 21:56:53 CDT)
• [ GLSA 200405-21 ] Midnight Commander: Multiple vulnerabilities Kurt Lieber (Wed May 26 2004 - 11:31:54 CDT)
• [Full-Disclosure] iDEFENSE Security Advisory 05.26.04: 3Com OfficeConnect Remote 812 ADSL Router Telnet Protocol Denial of Service Vulnerability idlabs-advisoriesidefense.com (Wed May 26 2004 - 11:01:03 CDT)
• SUSE Security Announcement: kdelibs (SuSE-SA:2004:014) Sebastian Krahmer (Wed May 26 2004 - 06:41:28 CDT)
• FreeBSD Security Advisory FreeBSD-SA-04:11.msync FreeBSD Security Advisories (Wed May 26 2004 - 06:32:51 CDT)
• IRIX libcpr vulnerability SGI Security Coordinator (Wed May 26 2004 - 11:38:06 CDT)
  • Re: IRIX libcpr vulnerability Jan Schaumann (Wed May 26 2004 - 13:51:21 CDT)
• [ GLSA 200405-22 ] Apache 1.3: Multiple vulnerabilities Kurt Lieber (Wed May 26 2004 - 11:32:40 CDT)
• [security bulletin]SSRT4724 HP integrated Lights Out (iLO) Denial of Service (DoS) using port zero Boren, Rich (SSRT) (Tue May 25 2004 - 20:09:13 CDT)
• Orenosv HTTP/FTP Server Denial Of Service badpack3t (Tue May 25 2004 - 22:48:52 CDT)
• [CLA-2004:843] Conectiva Security Announcement - kde Conectiva Updates (Wed May 26 2004 - 16:00:26 CDT)
• SGI Advanced Linux Environment 3 Security Update #1 SGI Security Coordinator (Wed May 26 2004 - 11:22:14 CDT)
• DoS in MiniShare 1.3.2 Donato Ferrante (Wed May 26 2004 - 08:11:58 CDT)
• The Dangers of Cross-Site-Scripting: Rogers Hi-Speed Internet Network [Canada] http-equivexcite.com (Thu May 27 2004 - 12:07:14 CDT)
• Re: Exchange pop3 remote exploit Tal Schaeffer (Thu May 27 2004 - 09:08:26 CDT)
• Sun-Java-App-Server PE 8.0 path disclosure Marc Schoenefeld (Wed May 26 2004 - 19:10:50 CDT)
• MDKSA-2004:051 - Updated mailman packages fix password retrieval vulnerability Mandrake Linux Security Team (Wed May 26 2004 - 19:34:56 CDT)
• WildTangent Web Driver Long FileName Stack Overflow NGSSoftware Insight Security Research (Thu May 27 2004 - 07:13:10 CDT)
  • Re: WildTangent Web Driver Long FileName Stack Overflow Cesar (Fri May 28 2004 - 11:00:13 CDT)
• MDKSA-2004:052 - Updated kolab-server package fixes world readable file vulnerability Mandrake Linux Security Team (Wed May 26 2004 - 19:39:02 CDT)
• [PHP] include() bypassing filter with php://input Himeur Nourredine (Thu May 27 2004 - 04:07:15 CDT)
  • Re: [PHP] include() bypassing filter with php://input Keary Suska (Thu May 27 2004 - 23:51:20 CDT)
  • Re: [PHP] include() bypassing filter with php://input clez (Fri May 28 2004 - 14:27:11 CDT)
  • Re: [PHP] include() bypassing filter with php://input Ali Campbell (Fri May 28 2004 - 17:17:18 CDT)
  • Re: [PHP] include() bypassing filter with php://input bugtraq subscriber (Fri May 28 2004 - 15:22:24 CDT)
• [OpenPKG-SA-2004.026] OpenPKG Security Advisory (apache) OpenPKG (Thu May 27 2004 - 08:55:09 CDT)
• [ GLSA 200405-23 ] Heimdal: Kerberos 4 buffer overflow in kadmin Kurt Lieber (Thu May 27 2004 - 07:26:28 CDT)
• Re: [Full-Disclosure] iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability Seth Alan Woolley (Thu May 27 2004 - 13:26:06 CDT)
• [ GLSA 200405-24 ] MPlayer, xine-lib: vulnerabilities in RTSP stream handling Thierry Carrez (Fri May 28 2004 - 12:24:55 CDT)
• SGI Advanced Linux Environment security update #20 SGI Security Coordinator (Fri May 28 2004 - 12:55:27 CDT)
• SGI Advanced Linux Environment 3 Security Update #2 SGI Security Coordinator (Fri May 28 2004 - 12:53:57 CDT)
• JPortal SQL Injects Maciek Wierciski (Thu May 27 2004 - 20:35:33 CDT)
• Mollensoft ftp Server ver 3.6 Buffer overflow Chintan Trivedi (Fri May 28 2004 - 00:38:45 CDT)
• EnderUNIX Security Anouncement (Isoqlog and Spamguard) Murat Balaban (Fri May 28 2004 - 18:02:48 CDT)
• LDU (land down under) xss vulnerability tim de gier (Sat May 29 2004 - 09:15:13 CDT)
• [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] Janek Vind (Sat May 29 2004 - 14:39:50 CDT)
• [SECURITY] [DSA 509-1] New gatos packages fix privilege escalation Matt Zimmerman (Sat May 29 2004 - 15:22:35 CDT)
• [SECURITY] [DSA 510-1] New jftpgw packages fix format string vulnerability Matt Zimmerman (Sat May 29 2004 - 15:58:15 CDT)
• [Full-Disclosure] iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability idlabs-advisoriesidefense.com (Thu May 27 2004 - 11:37:51 CDT)
• [ GLSA 200405-25 ] tla: Heap-based buffer overflow in included libneon Thierry Carrez (Sun May 30 2004 - 16:09:08 CDT)
• Users who have expired passwords can still log on to the domain if the FQDN is exactly eight characters long in Windows 2000 albatrosstim.it (Mon May 31 2004 - 05:18:47 CDT)
• Looking for a security contact of RealNetworks Live Rhapsody Philip Stoev (Thu May 27 2004 - 14:40:52 CDT)
• [SECURITY] [DSA 511-1] New ethereal packages fix buffer overflows Matt Zimmerman (Sun May 30 2004 - 13:26:03 CDT)
• Possible bug in PHPNuke and other CMS Luca Falavigna (Sun May 30 2004 - 09:53:18 CDT)
  • Re: Possible bug in PHPNuke and other CMS Luca Falavigna (Tue Jun 01 2004 - 12:13:53 CDT)
  • Re: Possible bug in PHPNuke and other CMS Peter Hagstrøm (Tue Jun 01 2004 - 04:14:50 CDT)
• LinkSys WRT54G administration page availble to WAN Alan W. Rateliff, II (Mon May 31 2004 - 11:51:41 CDT)
  • Re: LinkSys WRT54G administration page availble to WAN Steffen Mueller (Tue Jun 01 2004 - 09:43:05 CDT)
  • RE: LinkSys WRT54G administration page availble to WAN Alan W. Rateliff, II (Tue Jun 01 2004 - 10:56:36 CDT)
  • RE: LinkSys WRT54G administration page availble to WAN Alan W. Rateliff, II (Mon May 31 2004 - 17:58:54 CDT)
• Mollensoft Lightweight FTP Server CWD Buffer Overflow Aviram Jenik (Tue Jun 01 2004 - 12:13:03 CDT)
• OSVDB Post Go-Live Update, 3000 Stable Entries jkounsopensecurityfoundation.org (Tue Jun 01 2004 - 02:02:29 CDT)
• Firebird Database Remote Database Name Overflow Aviram Jenik (Tue Jun 01 2004 - 12:41:24 CDT)

Last message date: Tue Jun 01 2004 - 13:32:12 CDT
Archived on: Tue Jun 01 2004 - 13:32:14 CDT

324 messages sorted by: [ author ] [ date ] [ subject ]