• DST2K0036: Price modification possible in CyberOffice Shopping Ca rt Security Team
• DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2 Security Team
• DST2K0039: Webteachers Webdata: Importing files lower than web ro ot possible in to database Security Team
• Update to DST2K0039: Webteachers Webdata: Importing files lower t han web root possible in to database Security Team
• Update to DST2K0032: Multiple Issues with Talentsoft WebPlus Appl ication Server Whitehouse, Ollie
• Various security vulnerabilities with LPC ports BindView Security Advisory
• Microsoft Security Bulletin (MS00-070) Microsoft Product Security
• Patch for MS00-070 Terry.ScahillMNCO.COM
• Re: Patch for MS00-070 Oliver Viitamaki
• stake Advisory: Unauthorized "Directory Listings" under IIS 5.0 (A100400-1) stake Advisories
• IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent allows executing arbitrary programs Georgi Guninski
• Re: Security settings to disable IE 5.5/Outlook security vulnerab ility - com.ms.activeX.ActiveXComponent Kevin Bohacz
• Re: Security settings to disable IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent Colin Rous
• Re: Security settings to disable IE 5.5/Outlook security vulnerab ility - com.ms.activeX.ActiveXComponent Ed Bradford/Raleigh/IBM
• Re: Security settings to disable IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent Ed Bradford/Raleigh/IBM
• Microsoft Security Bulletin (MS00-071) Microsoft Product Security
• DST2K0040: QuotaAdvisor 4.1 by WQuinn susceptible to any user bei ng able to list (not read) all files on any server running QuotaAdvisor. Security Team
• Microsoft Security Bulletin (MS00-072) Microsoft Product Security
• Microsoft Security Bulletin (MS00-073) Microsoft Product Security
• Microsoft Security Bulletin (MS00-074) Microsoft Product Security
• stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 ) stake Advisories
• Freeware VLAD Updated Mark Loveless
• *potential* Windows 2000 holes Steve
• Administration Message - October 2000 - Out Of Office Replies Steve
• Microsoft Security Bulletin (MS00-075) Microsoft Product Security
• Re: *potential* Windows 2000 holes Paul Leach
• Re: *potential* Windows 2000 holes Phil Cox
• ALERT: Remote Retrieval Of Authentication Data From Internet Explorer Mitja Kolsek
• Microsoft Security Bulletin (MS00-076) Microsoft Product Security
• Re: *potential* Windows 2000 holes Paul Leach
• Re: *potential* Windows 2000 holes Jesper M. Johansson
• Re: *potential* Windows 2000 holes David LeBlanc
• Re: *potential* Windows 2000 holes Phil Cox
• Re: *potential* Windows 2000 holes Paul Leach
• NSFOCUS SA2000-04: Microsoft Win9x client driver type comparing vulnerability Steve
• Re: *potential* Windows 2000 holes Paul Leach
• Microsoft Security Bulletin (MS00-077) Microsoft Product Security
• IIS %c1%1c remote command execution rain forest puppy
• Microsoft Security Bulletin (MS00-078) Microsoft Product Security
• RFPolicy v2.0 rain forest puppy
• IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs Georgi Guninski
• TransSoft's Broker FTP Server 3.x & 4.x Remote DoS attack Vulnerability Luciano Martins
• Microsoft Security Bulletin (MS00-079) Microsoft Product Security
• VLAD the Scanner v0.7.4 Mark Loveless
• Avirt Mail 4.x DoS Steve
• Re: Possible security issue in NAV2001 on Windows ME Steve
• Re: Possible security issue in NAV2001 on Windows ME Paul L Schmehl
• Microsoft Security Bulletin (MS00-080) Microsoft Product Security
• Registry Permissions reminder - local privilege escalation on Windows NT David Litchfield
• Price modification in Element InstantShop Zoa_Chien
• ASPR #2000-07-22-1: Remote Retrieval Of IIS Session Cookies From Web Browsers ACROS Security
• exploiting IIS unicode bug using tftp.exe and samba Zoa_Chien
• correction: Re: exploiting IIS unicode bug using tftp.exe and samba Zoa_Chien
• Microsoft Security Bulletin (MS00-081) Microsoft Product Security
• IIS 5.0 cross site scripting vulnerability - using .htw Georgi Guninski
• Re: IIS 5.0 cross site scripting vulnerability - using .htw Microsoft Security Response Center
• Re: IIS 5.0 cross site scripting vulnerability - using .htw Georgi Guninski
• Re: IIS 5.0 cross site scripting vulnerability - using .htw Steve
• Ultraseek 3.1.x Remote DoS Vulnerability USSR Labs
• Microsoft Security Bulletin (MS00-082) Microsoft Product Security
• [CORE SDI ADVISORY] Netscape Servers Denial of Service Iván Arce
• [CORE SDI ADVISORY] Netscape Servers Heap buffer overflow Iván Arce
• [COVERT-2000-11] Multiple Network Monitor Overflows COVERT Labs
• Microsoft Security Bulletin (MS00-083) Microsoft Product Security
• Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor Steve
• Microsoft Security Bulletin (MS00-084) Microsoft Product Security
• Microsoft Security Bulletin (MS00-060) Re-release Microsoft Product Security
• Microsoft Security Bulletin (MS00-085) Microsoft Product Security
• IIS ASP $19.95 hack - IISHack 1.5 Marc Maiffret
• Securax-SA-08 - IIS4.0 DoS. Zoa_Chien
• System Monitor ActiveX Buffer Overflow Vulnerability USSR Labs
• Microsoft Security Bulletin (MS00-086) Microsoft Product Security
• [CORE SDI ADVISORY] MS NT4.0 Terminal Server Edition GINA buffer overflow Iván Arce
• Microsoft Security Bulletin (MS00-087) Microsoft Product Security
• IE 5.x Win2000 Indexing service vulnerability Georgi Guninski
• Update to Microsoft Security Bulletin MS00-086 Microsoft Security Response Center
• Rideway PN Telnet DoS SNS Research
• Netsnap Webcam Software Remote Overflow SNS Research
• InoculateIT AV Option for MS Exchange Server Steve
• Microsoft Security Bulletin (MS00-088) Microsoft Product Security
• AnalogX Proxy Server Security Vulnerability Advisory REVISISED Steve
• IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet Georgi Guninski
• Microsoft Security Bulletin (MS00-080) Microsoft Product Security
• Update: Microsoft Security Bulletin (MS00-086) Microsoft Product Security
• Microsoft Security Bulletin (MS00-089) Microsoft Product Security
• Microsoft Security Bulletin (MS00-090) Microsoft Product Security
• OBJECT TYPE="text/html" may allow executing arbitrary programs in IE 5.5 Georgi Guninski
• stake Advisory: Windows 2000 .ASX Buffer Overrun (A112300-1) stake Advisories
• Re: OBJECT TYPE="text/html" may allow executing arbitrary programs in IE 5.5 Jesper M. Johansson
• Re: OBJECT TYPE="text/html" may allow executing arbitraryprograms in IE 5.5 Georgi Guninski
• Re: OBJECT TYPE="text/html" may allow executing arbitraryprograms in IE 5.5 Jesper M. Johansson
• [Update] NSFOCUS SA2000-07: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability Steve
• [ GFISEC23112000 ] Microsoft Media Player 7 allows executation of Arbitrary Code Steve
• Re: OBJECT TYPE="text/html" may allow executing arbitraryprogramsin IE 5.5 Georgi Guninski
• IIS 5.0 with patch Q277873 allows executing arbitrary commands Steve
• Re: OBJECT TYPE="text/html" may allow executing arbitraryprogramsin IE 5.5 Jesper M. Johansson
• Microsoft Security Bulletin MS00-093 Microsoft Product Security
• Microsoft Security Bulletin MS00-092 Microsoft Product Security
• stake Advisory: SQL Server 2000 Extended Stored Procedure Vulner ability (A120100-2) stake Advisories
• stake Advisory: Microsoft SQL Server extended stored procedure v ulnerability (A120100-1) stake Advisories
• Re-release: Microsoft Security Bulletin MS00-086 Microsoft Product Security
• Microsoft Security Bulletin (MS00-091) Microsoft Product Security
• Resend: Microsoft Security Bulletin (MS00-091) Microsoft Product Security
• NAPTHA: DoS though TCP resource starvation Steve Manzuik
• Administration Message - December 2000 Steve
• NAPTHA Advisory Updated - BindView RAZOR Steve Manzuik
• [CORE SDI ADVISORY] MS Windows NT4 and Windows 2000 Phonebook Service overflow Iván Arce
• Microsoft Security Bulletin (MS00-094) Microsoft Product Security
• stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1) Weld Pond
• Xitami Web/Ftp Server Multiple Security Vulnerabilities - NSSI Advisory Steve
• Serv-U FTP directory traversal vulnerability (all versions) Zoa_Chien
• nmapNT Service Pack 1 Marc Maiffret
• Microsoft Security Bulletin MS00-096 Microsoft Product Security
• Microsoft Security Bulletin MS00-095 Microsoft Product Security
• Filename Inspection+Perl can execute commands Billy Nothern
• Exploit Code for File Input field advisory. Billy Nothern
• HomeSeer Directory Traversal Vulnerability Steve
• Full source for File field vulnerability Billy Nothern
• stake Advisory Notification: Multiple Vulnerabilities in AOL Ins tant Messenger (A121200-1) stake Advisories
• XATO Advisory: Win32 Command-Line Mailers Steve
• Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below. Steve
• Re: XATO Advisory: Win32 Command-Line Mailers John Howie
• Re: XATO Advisory: Win32 Command-Line Mailers Steve Manzuik
• Re: XATO Advisory: Win32 Command-Line Mailers .sozni
• Advisory John Howie
• NSFOCUS SA2000-08 : Microsoft IIS for Far East Editions File Disc losure Vulnerability SteveSECURESOLUTIONS.ORG
• Vulnerability Report For Microsoft Windows NT 4.0 MSTask.exe code error Steve
• Re: Vulnerability Report For Microsoft Windows NT 4.0 MSTask.exe code error Steve Manzuik
• Microsoft Security Bulletin MS00-097 Microsoft Product Security
• Microsoft Security Bulletin MS00-098 Microsoft Product Security
• BindView report on vulnerabilities in OS patch distribution Steve
• Microsoft Security Bulletin MS00-099 Microsoft Product Security
• Advisory:Multiple Vulnerabilities in ZoneAlarm alertsWOLFPAK.DYNIP.COM
• Re: Advisory:Multiple Vulnerabilities in ZoneAlarm Howard Marsh
• Re: Command-line mailer security article Steve
• Re: Command-line mailer security article Adam Steslicki
• Re: Advisory:Multiple Vulnerabilities in ZoneAlarm rjmitchellCOLUMBIAENERGYGROUP.COM
• Re: Advisory:Multiple Vulnerabilities inZoneAlarm Paul Cardon
• Infinite InterChange DoS Steve
• NAV 5.0 and embedded files Michael W. Shaffer
• Response to Xato Command-line Mailer Security Advisory Jeffry Dwight
• Microsoft Security Bulletin and mailer formats Microsoft Security Response Center
• Microsoft Security Bulletin MS00-100 Microsoft Product Security
• 1st Up Mail Server v4.1 Buffer Overflow Vulnerability USSR Labs
• Windows Media Player 7 and IE vulnerability - executing arbitraryprograms Steve
• [DiamondCS Advisory] ZoneAlarm and ZoneAlarm Pro can be taken down with a tiny batch file Steve
• [DiamondCS Advisory] ZoneAlarm and ZoneAlarm Pro can be blocked from loading by setting a Mutex in memory Steve
• Administration Message - January 2, 2001 - List Problems Steve
• Re: [DiamondCS Advisory] ZoneAlarm and ZoneAlarm Pro can be blocked from loading by setting a Mutex in memory John Howie

Last message date: Last message date: Tue Jan 02 2001 - 12:23:06 CST
Archived on: Tue Jan 02 2001 - 12:23:06 CST