Bugtraq

• Thread Index

• Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue
  • From: advisories
• Zyxel Prestige 681 SDSL router information leak
  • From: Przemyslaw Frasunek
• The ArpSucker is b0rn! Be yourself, be the net.
  • From: Alpt
• Insecure file permissions in the Firefox browser for Linux >= v0.9
  • From: Max
• MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• @stake advisory: Pingtel Xpressa Denial of Service
  • From: Advisories
• RE: New Data Wipe Tools
  • From: Altheide, Cory B. (IARC)
• RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
  • From: Ron DuFresne
• TSL-2004-0046 - multi
  • From: Trustix Security Advisor
• @stake advisory: Lexar JumpDrive Secure Password Extraction
  • From: Chris Wysopal
• Samba nmbd Invalid Length Denial of Service Vulnerability [iDEFENSE]
  • From: Jérôme
• [ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [CLA-2004:865] Conectiva Security Announcement - zlib
  • From: Conectiva Updates
• [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)
  • From: OpenPKG
• [CLA-2004:864] Conectiva Security Announcement - kde
  • From: Conectiva Updates
• Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
  • From: Wolfpaw - Dale Corse
• Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
  • From: David S. Miller
• problem in voip environment
  • From: Pasquiet Loic (M.)
• Re: cdrecord local root exploit
  • From: Sean Davis
• Posible Inclusion File in Perl Desk
  • From: Nikyt0x Argentina
• Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808)
  • From: Gerald (Jerry) Carter
• Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
  • From: David S. Miller
• Directory Traversal Vulnerability in TwinFTP Server allows overwriting
  • From: Jérôme
• Re: cdrecord local root exploit
  • From: Sean Davis
• Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL
  • From: 3APA3A
• RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service
  • From: Wolfpaw - Dale Corse
• Re: New Data Wipe Tools
  • From: Derek Martin
• [ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin
  • From: Dan Margolis
• Gadu-Gadu (all versions with image-send feature) Heap Overflow
  • From: Sec-Labs Team
• F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE]
  • From: Jérôme
• Off-by-one bug in Halo 1.04
  • From: Luigi Auriemma
• SQL-Injection in Subjects 2.0 for Postnuke
  • From: Criolabs
• Serv-U up to 5.2 Denial of Service
  • From: Patrick
• cdrecord local root exploit
  • From: newbug Tseng
• Remote buffer overflow in Apache mod_ssl when reverse proxying SSL
  • From: Jérôme
• CAU-EX-2004-0002: cdrecord-suidshell.sh
  • From: I)ruid
• Re: New Data Wipe Tools
  • From: Brendan Murray
• Re: New Data Wipe Tools
  • From: Jake Appelbaum
• Re: New Data Wipe Tools
  • From: Thomas C. Greene
• Multiple vulnerabilities in Icewarp Web Mail 5.2.7
  • From: ShineShadow
• ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability
  • From: Sune Kloppenborg Jeppesen
• Axis Network Camera and Video Server Security Advisory
  • From: product-security
• Bug XSS in PsNews 1.1
  • From: Michal Blaszczak
• New Data Wipe Tools
  • From: Thomas C. Greene
• Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities
  • From: http-equiv@xxxxxxxxxx
• [CLA-2004:860] Conectiva Security Announcement - krb5
  • From: Conectiva Updates
• BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included]
  • From: Jérôme
• OpenOffice World-Readable Temporary Files Disclose Files to Local Users
  • From: Jérôme
• [CLA-2004:863] Conectiva Security Announcement - wv
  • From: Conectiva Updates
• serverview 3.0 - insecure file permissions
  • From: Rene
• [ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows
  • From: Thierry Carrez
• [ GLSA 200409-14 ] Samba: Remote printing vulnerability
  • From: Sune Kloppenborg Jeppesen
• Multiple vulnerabilities 1n BBS E-Market Professional
  • From: Ahmad Muammar
• MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability
  • From: Mandrake Linux Security Team
• [ GLSA 200409-13 ] LHa: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability
  • From: Mandrake Linux Security Team
• [XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug
  • From: bima tampan
• Bug XSS in PsNews 1.1
  • From: Michal Blaszczak
• PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch
  • From: Pierquinto Manco
• Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities]
  • From: Jérôme
• Insecure Temporary File Creation Vulnerability in Net-Acct
  • From: Jérôme
• Re: [XSS] PHP-Nuke 7.4 Bugs
  • From: Peter Lowe
• [XSS] PHP-Nuke 7.4 AddMsg Bug
  • From: Pierquinto Manco
• Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit
  • From: Jérôme
• [ GLSA 200409-11 ] star: Suid root vulnerability
  • From: Kurt Lieber
• MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability
  • From: Mandrake Linux Security Team
• Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4
  • From: Pierquinto Manco
• [XSS] PHP-Nuke 7.4 Newsletter Injection Bug
  • From: Pierquinto Manco
• [SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability
  • From: snsadv
• Re: [XSS] PHP-Nuke 7.4 Bugs
  • From: Blaine Elzey
• Re: cdrdao local root exploit
  • From: 3APA3A
• mpg123 buffer overflow vulnerability
  • From: Davide Del Vecchio
• Site News Authentication Error May Let Local Users Add Messages
  • From: Jérôme
• Broadcast shutdown in Call of Duty 1.4
  • From: Luigi Auriemma
• Apple, Apple Remote Desktop client
  • From: Adam Shostack
• cdrdao local root exploit
  • From: Jérôme
• [RLSA_01-2004] QNX PPPoEd local root vulnerabilities
  • From: Julio Cesar Fort
• [ GLSA 200409-10 ] multi-gnome-terminal: Information leak
  • From: Thierry Carrez
• Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)
  • From: Jedi/Sector One
• [ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities
  • From: Thierry Carrez
• SUSE Security Announcement: apache2 (SUSE-SA:2004:030)
  • From: Sebastian Krahmer
• OpenCA Security Advisory: Cross Site Scripting vulnerability
  • From: Martin Bartosch
• Cross-Site Scripting Vulnerability in Newtelligence DasBlog
  • From: Dominick Baier
• Patch available for multiple critical flaws in Oracle
  • From: NGSSoftware Insight Security Research
• FUll Path Disclosure in YABBSE
  • From: Ahmad Muammar
• [ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely
  • From: Sune Kloppenborg Jeppesen
• [XSS] PHP-Nuke 7.4 DelAdmin Bug
  • From: Pierquinto Manco
• [XSS] PHP-Nuke 7.4 ViewAdmin Bug
  • From: Pierquinto Manco
• Engenio/LSI Logic controllers denial of service/data corruption
  • From: Jedi/Sector One
• FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities
  • From: Thor Larholm
• MITKRB5-SA-2004-002: double-free vulnerabilities
  • From: Tom Yu
• MailWorks Professional - Authentication Bypass
  • From: headpimp
• Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration
  • From: Jérôme
• [ GLSA 200409-07 ] xv: Buffer overflows in image handling
  • From: Sune Kloppenborg Jeppesen
• Re: Linux OpenExchange - cleartext rootpw in swap
  • From: Joshua Goodall
• Dynalink routers backdoor?
  • From: fabio
• RE: CuteNews News.txt writable to world
  • From: Albert Puigsech Galicia
• [ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication
  • From: Thierry Carrez
• SUSE Security Announcement: zlib (SUSE-SA:2004:029)
  • From: Thomas Biege
• [ GLSA 200409-05 ] Gallery: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Patch available for IBM DB2 Universal Database flaws
  • From: NGSSoftware Insight Security Research
• [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server
  • From: SHATTER (Application Security, Inc.)
• WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code
  • From: Jérôme
• TSL-2004-0045 - kerberos5
  • From: Trustix Security Advisor
• [ GLSA 200409-06 ] eGroupWare: Multiple XSS vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow
  • From: Boren, Rich (SSRT)
• [ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo()
  • From: Thierry Carrez
• MailWorks Professional - Authentication bypass
  • From: headpimp
• Password Protect XSS and SQL-Injection vulnerabilities.
  • From: Criolabs
• [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews
  • From: Exoduks
• Re: SUSE Security Announcement: kernel (SUSE-SA:2004:028)
  • From: Paul Starzetz
• [ GLSA 200409-01 ] vpopmail: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Exploit: AIM Exploit (Ignore Previous Post)
  • From: John Bissell
• MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Opera DOS
  • From: Stevo
• SSHD / AnonCVS Nastyness
  • From: Dragos Ruiu
• Re: Linux OpenExchange - cleartext rootpw in swap
  • From: Valdis . Kletnieks
• MSInfo Buffer Overflow
  • From: E.Kellinis
• Multiple Vulnerabilities In phpWebsite
  • From: GulfTech Security
• [ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy
  • From: Thierry Carrez
• ADVISORY: http response splitting hole in Comersus shopping cart
  • From: Maestro De-Seguridad
• RE: Security Center and Windows XP clients in domain
  • From: David Webster
• Cross-Site Scripting Vulnerability in Newtelligence DasBlog
  • From: Dominick Baier
• [nisr@xxxxxxxxxxxxx: Patch available for multiple critical flaws in Oracle]
  • From: David Ahmad
• RE: Security Center and Windows XP clients in domain, 20040831062712.31317.qmail@xxxxxxxxxxxxxxxxxxxxx
  • From: Sym Security
• New security tools and papers released
  • From: shadown
• Re: Security Center and Windows XP clients in domain
  • From: Thor
• SUSE Security Announcement: kernel (SUSE-SA:2004:028)
  • From: Thomas Biege
• Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow
  • From: Martin Schulze
• Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd
  • From: Jérôme
• OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability
  • From: please_reply_to_security
• Re: Linux OpenExchange - cleartext rootpw in swap
  • From: Rainer Duffner
• MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service
  • From: Tom Yu
• Multiple Vulnerabilities in phpScheduleIt
  • From: Joxean Koret
• [SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities
  • From: Martin Schulze
• Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
  • From: Jérôme
• [SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service
  • From: Martin Schulze
• OpenServer 5.0.6 OpenServer 5.0.7 : squid %-encoded characters in a URL
  • From: please_reply_to_security
• UPDATED OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities
  • From: please_reply_to_security
• DOS@TFS
  • From: CoolICE
• Security Center and Windows XP clients in domain
  • From: albatross
• Linux OpenExchange - cleartext rootpw in swap
  • From: Rene
• D-Link DCS-900 IP camera remote exploit that change the IP
  • From: Jérôme
• [vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability
  • From: lion
• [vulnwatch] WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability
  • From: lion
• Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable)
  • From: Steven Van Acker
• Cross Site Scripting in XOOPS Version 2.x Dictionary module
  • From: CyruxNET
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: Luca Berra
• Multiple Vulnerabilities In Xedus Webserver
  • From: GulfTech Security
• DoS in Chat Anywhere 2.72a
  • From: Donato Ferrante
• RE: CDE libDtHelp LOGNAME Buffer Overflow Vulnerability
  • From: Thor Larholm
• CuteNews News.txt writable to world
  • From: e0r
• [vulnwatch] WS_FTP Server Denial of Service Vulnerability
  • From: lion
• Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
  • From: john . courcoul
• Re: 0day critical vulnerability/exploit targets Winamp users in the wild
  • From: K-OTiK Security
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: Rodrigo Barbosa
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow
  • From: Jérôme
• RE: IE, Firefox, Opera DoS (*not* a DoS, not even close)
  • From: Steve R
• Check Point - Zone Labs Division - Response to "Weak Default Permissions Vulnerability"
  • From: Zone Labs Product Security
• Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
  • From: Rishi Khan
• Re: New google's top query?
  • From: Justin Wheeler
• Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200408-27 ] Gaim: New vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200408-26 ] zlib: Denial of service vulnerability
  • From: Sune Kloppenborg Jeppesen
• SGI ProPack 3: Kernel Update #3 - Security and other fixes
  • From: SGI Security Coordinator
• MDKSA-2004:087 - Updated kernel packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Gaucho v1.4 Build 145 Buffer Overflow
  • From: Jérôme
• TSL-2004-0043 - multi
  • From: Trustix Security Advisor
• RE: Unsecure file permission of ZoneAlarm pro.
  • From: Simon Zuckerbraun
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: Paul James
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server
  • From: Cisco Systems Product Security Incident Response Team
• 0day critical vulnerability/exploit targets Winamp users in the wild
  • From: K-OTiK Security
• Keene Digital Media Server Directory Traversal
  • From: GulfTech Security
• Broadcast forced exit in Ground Control II 1.0.0.7
  • From: Luigi Auriemma
• Alpha Phising [IE 6 WinXP SP2]
  • From: mikx
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow
  • From: Jay D. Dyson
• RE: NETGEAR DG834G SPECIAL FEATURES
  • From: prj
• RE: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow
  • From: Andreas Freyvogel
• [OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib)
  • From: OpenPKG
• Re: Anonymous Surfing Via Gmail Login Window - Poor Sanitization
  • From: Markus Ackermann
• [ GLSA 200408-25 ] MoinMoin: Group ACL bypass
  • From: Joshua J. Berry
• Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
  • From: bashis
• [ GLSA 200408-24 ] Linux Kernel: Multiple information leaks
  • From: Tim Yamin
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow
  • From: Kyle Maxwell
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
  • From: Serkan Akpolat
• Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State)
  • From: john . courcoul
• MS XP SP2 Windows Security Center allows spoofing
  • From: Jérôme
• Re: New google's top query?
  • From: Alex Keller
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
  • From: Serkan Akpolat
• [security bulletin] SSRT4779 - rev.0 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow
  • From: Boren, Rich (SSRT)
• Re: Unsecure file permission of ZoneAlarm pro.
  • From: Bipin Gautam
• Easy File Sharing Webserver v1.25 Vulnerabilities
  • From: GulfTech Security
• Re: Images being pulled in Outlook 2003 even though don't download pictures is set?
  • From: Jason Coombs PivX Solutions
• bug found
  • From: Mathieu Lacroix
• Computer Network Defence Vulnerability Alert State
  • From: Andy Cuff
• RealVNC 4.0 DoS
  • From: Allan Zhang
• multiple vulnerabilities in lukemftpd/tnftpd
  • From: venglin
• Dynix Webpac Input Validation
  • From: Wil Allsopp
• RE: IE, Firefox, Opera DoS
  • From: GulfTech Security
• Squirrelmail chpasswd local root bruteforce exploit
  • From: Jérôme
• Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
  • From: bashis
• Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability - [Full-Disclosure] iDEFENSE Security Advisory 08.25.04
  • From: Jérôme
• CDE libDtHelp LOGNAME Buffer Overflow Vulnerability
  • From: Jérôme
• Re: New google's top query?
  • From: Luke Burton
• Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow
  • From: Steve
• Anonymous Surfing Via Gmail Login Window - Poor Sanitization
  • From: Punabi MC
• RE: Running renamed executables with CMD.EXE
  • From: Michael Wojcik
• [NGSEC-2004-7] NtRegmon, local system denial of service.
  • From: labs@NGSEC
• Vulnerability: OpenBSD 3.5 Kernel Panic.
  • From: Vafa Izadinia
• ANNOUNCE: VulnDisco RADIUS protocol testsuite v1.0
  • From: Evgeny Demidov
• IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service
  • From: Advisories
• Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??)
  • From: Gabriel Kihlman
• A new website to search & submit win exploits
  • From: Dav1d
• Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??)
  • From: Joel D. Kinard
• [SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting
  • From: Martin Schulze
• Limited buffer overflow in Painkiller 1.31
  • From: Luigi Auriemma
• Window Washer 5.5: False Sense of Security
  • From: First Last
• RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection
  • From: Rohit Dube
• Re: IE, Firefox, Opera DoS
  • From: Dan Pixley
• Yahoo! E-mail Service Vulnerability
  • From: Dror Shalev
• [ GLSA 200408-23 ] kdelibs: Cross-domain cookie injection vulnerability
  • From: Joshua J. Berry
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
  • From: Rodrigo Barbosa
• Possible Security Issues In LiveWorld Products
  • From: GulfTech Security
• Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability
  • From: ktha
• PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities
  • From: Nikyt0x Argentina
• Microsoft updates documentation on Windows time synchronization
  • From: 3APA3A
• Hastymail security update
  • From: Jason Munro
• WebAPP directory traversal and ability to retrieve the DES encrypted password hash
  • From: Jérôme
• What A Drag! -revisited-
  • From: mikx
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
  • From: Jan Minar
• Internet Explorer Local File/Directory Detection
  • From: Rynho Zeros Web
• RE: First vulnerabilities in the SP2 - XP ?...
  • From: Larry Seltzer
• Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
  • From: morning_wood
• CAU-2004-0002 - imwheel Predictable PidFile Name Race Condition
  • From: I)ruid
• Running renamed executables with CMD.EXE
  • From: Geoff Vass
• A word of caution on the use of suphp
  • From: Steven Van Acker
• New google's top query?
  • From: Jérôme
• Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
  • From: Serkan Akpolat
• MusicDaemon <= 0.0.3 /etc/shadow Stealer / DoS Exploit
  • From: Tal0n
• [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
  • From: bashis
• IE, Firefox, Opera DoS
  • From: exploits
• Bugs fixed in Version 1.4.3
  • From: Joxean Koret
• Re: Fwd: Re: Posible security bug in phpMyWebhosting
  • From: Matias Neiff
• DoS in Bird Chat 1.61
  • From: Donato Ferrante
• [ GLSA 200408-21 ] Cacti: SQL injection vulnerability
  • From: Kurt Lieber
• Multiple Cross Site Scripting Vulnerabilities in eGroupWare
  • From: Joxean Koret
• [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities
  • From: Kurt Lieber
• ERRATA: [ GLSA 200406-14 ] aspell: Buffer overflow in word-list-compress
  • From: Kurt Lieber
• ERRATA: [ GLSA 200408-21 ] Cacti: SQL injection vulnerability
  • From: Sune Kloppenborg Jeppesen
• KDE Security Advisory: Konqueror Cross-Domain Cookie Injection
  • From: Waldo Bastian
• JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks
  • From: Dr Ponidi
• [ GLSA 200408-20 ] Qt: Image loader overflows
  • From: Joshua J. Berry
• Multiple vulnerabilities in MyDMS
  • From: Jose Antonio
• Mantis Bugtracker Remote PHP Code Execution Vulnerability
  • From: Jose Antonio
• Cross Site Scripting Vulnerability in Sympa
  • From: Jose Antonio
• Multiple Vulnerabilities in Mantis Bugtracker
  • From: Jose Antonio
• EXPLOIT: Qt bmp heap overflow
  • From: infamous41md
• MDKSA-2004:086 - Updated kdelibs and kdebase packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG
  • From: Solar Designer
• Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability
  • From: infamous41md
• What A Drag II XP SP2
  • From: http-equiv@xxxxxxxxxx
• BadBlue Webserver v2.5 Denial Of Service Vulnerability
  • From: GulfTech Security
• [Fwd: Re: [vchkpw] vpopmail <= 5.4.2 (sybase vulnerability) (fwd)]
  • From: Myron Davis
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption
  • From: David E. Smith
• Re: SHA-0 Broken, MD5 Rumored Broken
  • From: stanislav shalunov
• Re: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection
  • From: George Capehart
• Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG
  • From: Jim Paris
• NetBSD Security Advisory 2004-009: ftpd root escalation
  • From: NetBSD Security-Officer
• Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure
  • From: 3APA3A
• Buffer overflow in sarad
  • From: Matthias Bethke
• What A Drag II XP SP2
  • From: http-equiv@xxxxxxxxxx
• RE: [Full-Disclosure] Security aspects of time synchronization infrastructure
  • From: joe
• RE: Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure
  • From: joe
• Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer
  • From: Audun Larsen
• Unsecure file permission of ZoneAlarm pro.
  • From: Bipin Gautam
• [2Cents on] vpopmail <= 5.4.2 (sybase vulnerability)
  • From: bugtraq
• Re: Posible security bug in phpMyWebhosting
  • From: Daniel Souza
• Re: First vulnerabilities in the SP2 - XP ?...
  • From: Matthew Roberts
• Re: Posible security bug in phpMyWebhosting
  • From: Udo Mueller
• XV multiple buffer overflows, exploit included
  • From: infamous41md
• [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability
  • From: Joshua J. Berry
• RE: Driver for display goes to a infinite loop by viewing a html!
  • From: Christopher Wagner
• Xines_Mine.c Open Security Group Advisory
  • From: c0ntex
• Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection
  • From: Rohit Dube
• Re: Cross-Site Scripting (XSS) in Php-Nuke 7.1.0
  • From: Anthony Petito
• Re: SQL Injection in CACTI
  • From: Cedric Blancher
• RE: First vulnerabilities in the SP2 - XP ?...
  • From: Thor Larholm
• [security bulletin] SSRT3460 rev.3 HP-UX Network traffic can cause programs to fail
  • From: Boren, Rich (SSRT)
• SUSE Security Announcement: qt3 (SUSE-SA:2004:027)
  • From: Thomas Biege
• Microsoft Windows XP SP2
  • From: http-equiv@xxxxxxxxxx
• Re: First vulnerabilities in the SP2 - XP ?...
  • From: Robert Decker
• RE: First vulnerabilities in the SP2 - XP ?...
  • From: Larry Seltzer
• recent iDefense advisories not being posted to bugtraq includes CVS information disclosure bug (CAN-2004-0778)
  • From: Marc Bejarano
• Breaking windows LM hashes using the Time-Memory Trade-Off : Optimization & new tool
  • From: Jérôme
• [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG
  • From: Kurt Lieber
• Re: SHA-0 Broken, MD5 Rumored Broken
  • From: Anthony Nemmer
• Re: Posible security bug in phpMyWebhosting
  • From: Müller
• Security aspects of time synchronization infrastructure
  • From: 3APA3A
• Immunity, Inc. Release: libdisassemble
  • From: dave
• Open Security Group Advisory #6
  • From: c0ntex
• MDKSA-2004:085 - Updated qt3 packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• CESA-2004-004: qt
  • From: chris
• Re: SQL Injection in CACTI
  • From: Andy Markert
• MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability
  • From: Mandrake Linux Security Team
• Cisco Security Advisory: Cisco IOS Malformed OSPF Packet Causes Reload
  • From: Cisco Systems Product Security Incident Response Team
• SHA-0 Broken, MD5 Rumored Broken
  • From: Jérôme
• [SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
  • From: Martin Schulze
• Multiple vulnerabilities in PHP-FUSION
  • From: Ahmad Muammar
• Re: First vulnerabilities in the SP2 - XP ?...
  • From: Radoslav Dejanović
• MDKSA-2004:083 - Updated rsync packages fix remotely-exploitable vulnerability
  • From: Mandrake Linux Security Team
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption
  • From: Jérôme
• Vulnerabilities in Merak Webmail Server.
  • From: Criolabs
• Re: First vulnerabilities in the SP2 - XP ?...
  • From: Colin Alston
• [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access
  • From: Martin Schulze
• Opera Local File/Directory Detection (GM#009-OP)
  • From: GreyMagic Software
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption
  • From: Dave Warren
• Cross-Site Scripting (XSS) in Php-Nuke 7.1.0
  • From: Abu Lafy
• [NGSEC-2004-6] IPD, local system denial of service.
  • From: labs@NGSEC
• LNSA-#2004-0017: rsync (Aug, 17 2004)
  • From: Vincenzo Ciaglia
• vpopmail <= 5.4.2 (sybase vulnerability)
  • From: Jérôme
• [ GLSA 200408-17 ] rsync: Potential information leakage
  • From: Kurt Lieber
• TSLSA-2004-0042 - rsync
  • From: Trustix Security Advisor
• RE: [Full-Disclosure] IpSwitch IMail Server <= ver 8.1 User Password Decryption
  • From: Bill Roemhild
• [SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
  • From: Martin Schulze
• Re: First vulnerabilities in the SP2 - XP ?...
  • From: Oliver Schneider
• [ GLSA 200408-18 ] xine-lib: VCD MRL buffer overflow
  • From: Kurt Lieber
• Re: SQL Injection in CACTI
  • From: Thomas Chiverton
• SQL Injection in CACTI
  • From: Fernando Quintero
• First vulnerabilities in the SP2 - XP ?...
  • From: Jérôme
• SUSE Security Announcement: rsync (SUSE-SA:2004:026)
  • From: Thomas Biege
• gv buffer overflows: here, there, and everywhere
  • From: infamous41md
• pscript.de PFORUM XSS Vulnerability
  • From: Christoph Jeschke
• [ GLSA 200408-14 ] acroread: UUDecode filename buffer overflow
  • From: Sune Kloppenborg Jeppesen
• IpSwitch IMail Server <= ver 8.1 User Password Decryption
  • From: Adik
• NullyFake - Site Spoofing in MSIE
  • From: Liu Die Yu
• TSSA-2004-020-ES - rsync
  • From: tinysofa Security Team
• Re: SpecificMAIL Technical Brief
  • From: Skip Carter
• [ GLSA 200408-15 ] Tomcat: Insecure Installation
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management
  • From: Martin Schulze
• Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow
  • From: Dan Margolis
• Posible security bug in phpMyWebhosting
  • From: Matias Neiff
• RE: JS/Zerolin
  • From: Thor Larholm
• SGI Advanced Linux Environment 2.4 security update #24
  • From: SGI Security Coordinator
• SpecificMAIL Technical Brief
  • From: Nick D.
• QuiXplorer directory traversal
  • From: Cyrille Barthelemy
• SGI Advanced Linux Environment 3 Security Update #9
  • From: SGI Security Coordinator
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: Dave Paris
• Re: JS/Zerolin
  • From: K-OTiK Security
• Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues
  • From: advisories
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: Uday Moorjani
• Re: NETGEAR DG834G SPECIAL FEATURES
  • From: thanasonic
• recent gaim advisory
  • From: infamous41md
• Re: JS/Zerolin
  • From: Nicolas Gregoire
• Re: JS/Zerolin
  • From: T.H. Haymore
• MDKSA-2004:081 - Updated gaim packages fix remotely exploitable vulnerabilities
  • From: Mandrake Linux Security Team
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)
  • From: Lance James
• NGSEC's response to Idefense overflow protections whitepaper. (PART II)
  • From: lists@NGSEC
• RE: NETGEAR DG834G SPECIAL FEATURES
  • From: Andre Lorbach
• MDKSA-2004:082 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Advanced usage of system() function.
  • From: Adam Zabrocki
• New Paper: Microsoft Windows, a lower Total Cost of Ownership
  • From: Dave Aitel
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Frank Nospam
• [ GLSA 200408-13 ] kdebase, kdelibs: Multiple security issues
  • From: Sune Kloppenborg Jeppesen
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)
  • From: Brad Herbert
• Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability
  • From: High Pressure
• [ GLSA 200408-12 ] Gaim: MSN protocol parsing function buffer overflow
  • From: Sune Kloppenborg Jeppesen
• NETGEAR DG834G SPECIAL FEATURES
  • From: thanasonic
• Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow
  • From: infamous41md
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: 3APA3A
• RE: NGSEC's response to Idefense overflow protections whitepaper.
  • From: Richard Johnson
• JS/Zerolin
  • From: T.H. Haymore
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)
  • From: Joe Eversole
• [CLA-2004:858] Conectiva Security Announcement - squirrelmail
  • From: Conectiva Updates
• [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow
  • From: Sune Kloppenborg Jeppesen
• Metasploit Framework v2.2
  • From: H D Moore
• SUSE Security Announcement: gaim (SUSE-SA:2004:025)
  • From: Thomas Biege
• [ GLSA 200408-11 ] Nessus: "adduser" race condition vulnerability
  • From: Sune Kloppenborg Jeppesen
• ISS BlackIce Server Protect Unprivileged User Attack
  • From: Thomas Ryan
• Re: Clearswift Mimesweeper Path Traversal Vulnerability
  • From: Pete Simpson
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Christopher X. Candreva
• Clearswift Mimesweeper Path Traversal Vulnerability
  • From: Kroma Pierre
• RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability
  • From: Thor Larholm
• SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)
  • From: Secure Science Corporation Advisory Notice
• [ GLSA 200408-09 ] Roundup filesystem access vulnerability
  • From: Kurt Lieber
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Mike Pumford
• RE: Driver for display goes to a infinite loop by viewing a html!
  • From: Eggers, Bill A [LTD]
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Steven Leikeim
• KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities
  • From: Waldo Bastian
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Eddie Block
• NGSEC's response to Idefense overflow protections whitepaper.
  • From: lists@NGSEC
• EXPLOIT libpng
  • From: infamous41md
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Anthony Petito
• HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5
  • From: Amit Klein
• Windows doesn't verify digital signature of CRL files
  • From: Michael Howard
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Jack C
• ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows
  • From: Pentest Security Advisories
• BlackICE unprivileged local user attack
  • From: Paul Craig - Pimp Industries
• Re: Driver for display goes to a infinite loop by viewing a html!
  • From: Conor Byrne
• Re: Windows doesn't verify digital signature of CRL files
  • From: Thomas Walpuski
• Driver for display goes to a infinite loop by viewing a html!
  • From: Bipin Gautam
• Re: Windows doesn't verify digital signature of CRL files
  • From: Thomas Walpuski
• AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability
  • From: homicidal
• Re: Windows doesn't verify digital signature of CRL files
  • From: Jack Lloyd
• Re: Windows doesn't verify digital signature of CRL files
  • From: Valdis . Kletnieks
• Corsaire Security Advisory - Port80 Software ServerMask inconsistencies
  • From: advisories
• Corsaire Security Advisory - Sygate Enforcer discovery packet DoS issue
  • From: advisories
• Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue
  • From: advisories
• Corsaire Security Advisory - Sygate Secure Enterprise replay issue
  • From: advisories
• [security bulletin] SSRT4788 rev. 0 HP-UX Apache Remote arbitrary code execution
  • From: Boren, Rich (SSRT)
• MDKSA-2004:080 - Updated shorewall packages fix temporary file vulnerabilities
  • From: Mandrake Linux Security Team
• spamcop.net allows everyone to grab mail addresses and reset passwords
  • From: Henning Schmiedehausen
• [ GLSA 200408-07 ] Horde-IMP: Input validation vulnerability for Internet Explorer users
  • From: Kurt Lieber
• Re: Windows doesn't verify digital signature of CRL files
  • From: Neil Gierman
• [security bulletin] SSRT4785 rev. 0 HP-UX Process Resource Manager (PRM) potential data corruption
  • From: Boren, Rich (SSRT)
• Re: Windows doesn't verify digital signature of CRL files
  • From: Thomas Walpuski
• CORE-2004-0714: Cfengine RSA Authentication Heap Corruption
  • From: CORE Security Technologies Advisories
• Re: [PHP Bug] How to hide a HTTP request in the apache logs
  • From: Max Valdez
• First symbian OS trojan discovered in the wild
  • From: kers0r
• [ GLSA 200408-06 ] SpamAssassin: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• TSLSA-2004-0041 - kernel
  • From: Trustix Security Advisor
• Java XSLT security advisory addendum
  • From: Marc Schoenefeld
• Windows doesn't verify digital signature of CRL files
  • From: Faro Poplar
• SUSE Security Announcement: kernel (SUSE-SA:2004:024)
  • From: Thomas Biege
• RE: [Full-Disclosure] DOS@MEHTTPS
  • From: Peter Fregon
• Remote Command Execution
  • From: Francisco Alisson
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability
  • From: Matthias Leisi
• Re: [PHP Bug] How to hide a HTTP request in the apache logs
  • From: Steve Brown
• Re: Winmx Software making calls to Port 25
  • From: Radoslav Dejanović
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability
  • From: Radoslav Dejanović
• Re: GNU/Linux 'info Buffer Overflow
  • From: Janusz A. Urbanowicz
• Re: Winmx Software making calls to Port 25
  • From: Retro Granny
• Re: CVS woes: .cvspass
  • From: Robin Rosenberg
• Type xxs
  • From: root
• Re: CVS woes: .cvspass
  • From: Robin Rosenberg
• Re: Remote crash in tcpdump from OpenBSD
  • From: Otto Moerbeek
• Re: International DNS compromise?
  • From: Troy
• Re: CVS woes: .cvspass
  • From: Tilman Schmidt
• Re: International DNS compromise?
  • From: John F. Waymouth
• RE: International DNS compromise?
  • From: Johan Nilsson
• Airpwn & libpng holes
  • From: Matt Venzke
• RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Dana Hudes
• Re: GNU/Linux 'info Buffer Overflow
  • From: Roman Werpachowski
• EXPLOIT Re: Pavuk Digest Authentication Buffer Overflow
  • From: infamous41md
• [PHP Bug] How to hide a HTTP request in the apache logs
  • From: Anthony Debhian
• Re: CVS woes: .cvspass
  • From: Greg A. Woods
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability
  • From: Stefan Seifert
• Winmx Software making calls to Port 25
  • From: Retro Granny
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Seth Breidbart
• Re: International DNS compromise?
  • From: Danny
• Re: Remote crash in tcpdump from OpenBSD
  • From: Balaram Amgoth
• Re: International DNS compromise?
  • From: Rio Martin.
• RE: International DNS compromise?
  • From: Troy Monaghen
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Kevin Sheldrake
• RE: International DNS compromise?
  • From: Mike Clark
• xss in moodle (post.php)
  • From: Javier Ubilla Brenni
• Anyone know IBM's security address?
  • From: Michael Scheidell
• [security bulletin] SSRTSSRT4778 Rev.0 Mozilla Application Suite for HP Tru64 UNIX libpng Potential Overflows
  • From: Boren, Rich (SSRT)
• [security bulletin] SSRT4777 HP-UX Apache, PHP remote code execution, Denial of Service
  • From: Boren, Rich (SSRT)
• Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability
  • From: Uday Moorjani
• Re: CVS woes: .cvspass
  • From: Delian Krustev
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Kevin Sheldrake
• SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability
  • From: Jordan Pilat
• Re: Anyone know IBM's security address?
  • From: Jedi/Sector One
• Re: GNU/Linux 'info Buffer Overflow
  • From: Niels Bakker
• Re: International DNS compromise?
  • From: bill
• Re: CVStrac Remote Arbitrary Code Execution exploit
  • From: Richard Hipp
• [OpenPKG-SA-2004.036] OpenPKG Security Advisory (cvstrac)
  • From: OpenPKG
• Re: GNU/Linux 'info Buffer Overflow
  • From: Valdis . Kletnieks
• Re: CVS woes: .cvspass
  • From: Andy Dustman
• RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Bart . Lansing
• Opera: Location, Location, Location (GM#008-OP)
  • From: GreyMagic Software
• [CLA-2004:856] Conectiva Security Announcement - libpng
  • From: Conectiva Updates
• Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability
  • From: Jouko Pynnonen
• Remote Command Execution
  • From: Francisco Alisson
• [security bulletin] SSRT4782 rev. 1 HP-UX CIFS Server potential remote root access
  • From: Boren, Rich (SSRT)
• GNU/Linux 'info Buffer Overflow
  • From: Josh Martin
• [CLA-2004:857] Conectiva Security Announcement - apache
  • From: Conectiva Updates
• [ GLSA 200408-05 ] Opera: Multiple new vulnerabilities
  • From: Thierry Carrez
• RE: New MyDoom variant
  • From: Security Guy
• Re: New MyDoom variant
  • From: Purple Pony
• Re: New MyDoom variant
  • From: Marc Hultquist
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Lee Dilkie
• Re: International DNS compromise?
  • From: John Kinsella
• Re: New MyDoom variant
  • From: Thor
• Microsoft Internet Explorer 6 Protocol Handler Vulnerability
  • From: Robillard, Nicolas
• Re: International DNS compromise?
  • From: john
• Re: CVS woes: .cvspass
  • From: Delian Krustev
• local denial of Service, Yellowdog linux to 3.0.1
  • From: pmoses
• RE: International DNS compromise?
  • From: travis . alexander
• Re: New MyDoom variant
  • From: Mary Landesman
• Re: International DNS compromise?
  • From: Troy
• CVStrac Remote Arbitrary Code Execution exploit
  • From: Richard Ngo
• Re: CVS woes: .cvspass
  • From: Greg A. Woods
• MS04-025 - Ignorance is truly bliss....
  • From: hellNbak
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Kevin Sheldrake
• Re: New MyDoom variant
  • From: James C. Slora Jr.
• [ GLSA 200408-03 ] libpng: Numerous vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• International DNS compromise?
  • From: Zhen Shi
• TSLSA-2004-0040 - libpng
  • From: Trustix Security Advisor
• Opera: Location, Location, Location
  • From: GreyMagic Software
• [ GLSA 200408-04 ] PuTTY: Pre-authentication arbitrary code execution
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• CORE-2004-0705: Vulnerabilities in PuTTY and PSCP
  • From: CORE Security Technologies Advisories
• MDKSA-2004:079 - Updated libpng packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Multiple Vulnerabilities in Free Web Chat
  • From: Donato Ferrante
• Re: New MyDoom variant
  • From: Paul Kurczaba
• Re: New MyDoom variant
  • From: "Elliott C. Bäck"
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Toomas Soome
• Bug@thttpd
  • From: CoolICE
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
  • From: Lionel Ferette
• [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png)
  • From: OpenPKG
• Re: New MyDoom variant
  • From: Bryan Burns
• Linux kernel file offset pointer races
  • From: Paul Starzetz
• Multiple vulnerabilities in eNdonesia CMS
  • From: ahmad muammar
• GoScript Remote Command Execution
  • From: Francisco Alisson
• Re: CVS woes: .cvspass
  • From: Greg A. Woods
• vulnerabilities in JetboxOne CMS
  • From: ahmad muammar
• Clear text password exposure in Datakey's tokens and smartcards
  • From: vuln
• New MyDoom variant
  • From: albatross
• [ GLSA 200408-02 ] Courier: Cross-site scripting vulnerability in SqWebMail
  • From: Thierry Carrez
• SUSE Security Announcement: libpng (SUSE-SA:2004:023)
  • From: Thomas Biege
• CESA-2004-001: libpng
  • From: chris
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Michael Reilly
• CDE libDtHelp and dtlogin vulnerabilities on IRIX
  • From: SGI Security Coordinator
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Kim Scarborough
• DoS in Webbsyte Chat 0.9.0
  • From: Donato Ferrante
• [SECURITY] [DSA 535-1] New squirrelmail packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox)
  • From: Peter J. Holzer
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Peter J. Holzer
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox)
  • From: Barry Fitzgerald
• EXPLOIT for Re: [VSA0402] OpenFTPD format string vulnerability
  • From: infamous41md
• OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform)
  • From: Juan Manuel Pascual
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Nicholas Knight
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Marc
• DOS@MEHTTPS
  • From: CoolICE
• RE: Sonicwall diag tool includes VPN credentlials
  • From: Jody McCluggage
• RE: SideFind
  • From: Polazzo Justin
• SA-20040802 GnuTLS certificate chain verification bug
  • From: Patrik Hornik
• 7a69Adv#13 - USRobotics AP Wireless Denial of Service
  • From: Albert Puigsech Galicia
• Security contact for RSA Security
  • From: Amit Klein
• Comersus 5.098 XSS Vulnerable
  • From: Abdul Azis
• RE: Sonicwall diag tool includes VPN credentlials
  • From: Stephan Sachweh
• Re[2]: Aladdin response regarding eSafe
  • From: 3APA3A
• Re: Sonicwall diag tool includes VPN credentlials
  • From: neil gardner
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Peter J. Holzer
• RE: New possible scam method : forged websites using XUL (Firefox)
  • From: Thomas T. Evans, III
• RE: Sonicwall diag tool includes VPN credentlials
  • From: Eric McCarty
• SideFind
  • From: aborg
• SoX Exploiter by Rosiello Security
  • From: Angelo Rosiello
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox)
  • From: Justin Polazzo
• [ GLSA 200408-01 ] MPlayer: GUI filename handling overflow
  • From: Thierry Carrez
• Re: Citadel/UX Remote DoS Vulnerability
  • From: IO ERROR
• [EXPL] (MS04-022) Microsoft Windows XP Task Scheduler (.job) Universal Exploit
  • From: houseofdabus HOD
• Sonicwall diag tool includes VPN credentlials
  • From: Milton Lopez
• Re: [Full-Disclosure] Re: Mozilla Firefox Certificate Spoofing
  • From: Juan Carlos Navea
• Re: New possible scam method : forged websites using XUL (Firefox)
  • From: Marc
• [VSA0402] OpenFTPD format string vulnerability
  • From: VOID.AT Security
• Re: CVS woes: .cvspass
  • From: Delian Krustev
• OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow that could be exploited to gain root privileges.
  • From: please_reply_to_security
• Fusion News Yet Another Unauthorized Account Addition Vulnerability
  • From: Joseph Moniz
• [CLA-2004:855] Conectiva Security Announcement - sox
  • From: Conectiva Updates
• Fwd: New possible scam method : forged websites using XUL (Firefox)
  • From: David Ahmad
• OpenServer 5.0.6 OpenServer 5.0.7 : uudecode does not check for symlink or pipe
  • From: please_reply_to_security
• OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities
  • From: please_reply_to_security
• UnixWare 7.1.3 Open UNIX 8.0.0 : Xsco contains a buffer overflow that could be exploited to gain root privileges.
  • From: please_reply_to_security
• Re: eSafe: Could this be exploited?
  • From: Nick FitzGerald
• [ GLSA 200407-23 ] SoX: Multiple buffer overflows
  • From: Thierry Carrez
• WpQuiz Gain Admin Rightd Exploit found
  • From: jonathan tough
• Re: File downloads in Opera at known locations
  • From: Josh Tolley
• Citadel/UX Remote DoS Vulnerability
  • From: CoKi
• Re: Aladdin response regarding eSafe
  • From: Aleksandar Milivojevic
• MDKSA-2004:077 - Updated wv packages fix vulnerability
  • From: Mandrake Linux Security Team
• [CLA-2004:854] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [ GLSA 200407-22 ] phpMyAdmin: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail
  • From: George Capehart
• Re: Aladdin response regarding eSafe
  • From: 3APA3A
• RE: Forward:FullDisclosure/IE - Possible Address Spoofing
  • From: Chenghuai Lu
• RE: Forward:FullDisclosure/IE - Possible Address Spoofing
  • From: Michael Silk
• Jaws 0.4: authentication bypass
  • From: Rubén Molina
• File downloads in Opera at known locations
  • From: Rohit Dube
• DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability
  • From: Rubén Molina
• [ GLSA 200407-21 ] Samba: Multiple buffer overflows
  • From: Kurt Lieber
• MDKSA-2004:076 - Updated sox packages fix buffer overflows with malicious .wav files
  • From: Mandrake Linux Security Team
• ERRATA: [ GLSA 200407-21 ] Samba: Multiple buffer overflows
  • From: Thierry Carrez
• lostBook v1.1 Javascript Execution
  • From: Joseph Moniz
• Linpha 0.9.4: authentication bypass
  • From: Rubén Molina
• Aladdin response regarding eSafe
  • From: Ofer Elzam
• Re: [Full-Disclosure] Crash IE with 11 bytes ;)
  • From: Berend-Jan Wever
• OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail
  • From: please_reply_to_security
• MDKSA-2004:074 - Updated webmin packages correct remote attacker vulnerabilities
  • From: Mandrake Linux Security Team
• Re: eSafe: Could this be exploited?
  • From: Kev Ford
• Pavuk Digest Authentication Buffer Overflow
  • From: mattmurphy@xxxxxxxxx
• Re: [ GLSA 200407-20 ] Subversion: Vulnerability in mod_authz_svn
  • From: Jack Repenning
• [Paper] Small XSS Paper
  • From: Ferruh Mavituna
• Re: CVS woes: .cvspass
  • From: Andreas Beck
• MDKSA-2004:072 - Updated postgresql packages fix buffer overflow in odbc driver
  • From: Mandrake Linux Security Team
• Re: [Full-Disclosure] Internet Explorer Remote Null Pointer Crash(mshtml.dll)
  • From: Berend-Jan Wever
• UnixWare 7.1.3up : tcpdump several vulnerabilities in tcpdump.
  • From: please_reply_to_security
• AntiBoard <= 0.7.2 XSS/SQL Injection
  • From: Josh Gilmour
• MDKSA-2004:073 - Updated XFree86 packages fix issue with xdm opening random sockets
  • From: Mandrake Linux Security Team
• [CLA-2004:852] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• MDKSA-2004:075 - Updated mod_ssl packages fix potential vulnerabilities
  • From: Mandrake Linux Security Team
• WASC Releases Web Security Threat Classification
  • From: Jeremiah Grossman
• Re: CVS woes: .cvspass
  • From: Greg A. Woods
• IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities
  • From: IRM Advisories
• Re: Mozilla Firefox Certificate Spoofing
  • From: Chris Brown
• Re: eSafe: Could this be exploited?
  • From: Hugo van der Kooij
• RE: Forward:FullDisclosure/IE - Possible Address Spoofing
  • From: Chenghuai Lu
• Re: QUESTION
  • From: Viktor Larionov
• Re: CVS woes: .cvspass
  • From: Valdis . Kletnieks
• [SECURITY] [DSA 532-2] New libapache-mod-ssl packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• [security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access
  • From: Boren, Rich (SSRT)
• OSX Panther Internet Connect - Local root
  • From: br00t
• [ GLSA 200407-20 ] Subversion: Vulnerability in mod_authz_svn
  • From: Joshua J. Berry
• ASPRunner Multiple Vulnerabilities
  • From: Ferruh Mavituna
• Re: eSafe: Could this be exploited?
  • From: Andreas Constantinides (MegaHz)
• Re: EasyWeb FileManager Directory Traversal
  • From: Noam Rathaus
• NucleusCMS 3.01 SQL Injection Vulnerability
  • From: acidbits
• QUESTION
  • From: Alex Mega
• Mozilla Firefox Certificate Spoofing
  • From: E.Kellinis
• Re: eSafe: Could this be exploited?
  • From: MegaHz
• CVS woes: .cvspass
  • From: Chiaki
• Linux Netwosix Bugzilla - Bugtracking System
  • From: Vincenzo Ciaglia
• [ GLSA 200407-19 ] Pavuk: Digest authentication helper buffer overflow
  • From: Kurt Lieber
• TSL-2004-0039 - multi
  • From: Trustix Security Advisor
• Easyins Stadtportal
  • From: Francisco Alisson
• Re: DoS against Domino 6.5.1
  • From: Andreas Klein
• Re: Mac OS X stores login/Keychain/FileVault passwords on disk
  • From: Adi Kriegisch
• EasyWeb FileManager Directory Traversal
  • From: sullo
• MS SMS DOS Proof-of-concept code and Snort sig
  • From: wang
• Re: eSafe: Could this be exploited?
  • From: 3APA3A
• Re: eSafe: Could this be exploited?
  • From: Nick FitzGerald
• Re: eSafe: Could this be exploited?
  • From: Oliver@xxxxxxxxxx
• eSeSIX Thintune thin client multiple vulnerabilities
  • From: Loss, Dirk
• LNSA-#2004-0015: buffer overflow in samba (Jul, 23 2004)
  • From: Vincenzo Ciaglia
• eSafe: Could this be exploited?
  • From: Hugo van der Kooij
• FW: [Full-Disclosure] Progress and Challenges
  • From: {tonyFelice}
• [security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access
  • From: Boren, Rich (SSRT)
• LNSA-#2004-0016: Multiple problems in Ethereal 0.10.4 (Jul, 23 2004)
  • From: Vincenzo Ciaglia
• APC Security Advisory Denial of Service Vulnerability with PowerChuteBusinessEdition
  • From: security.advisory
• Forward:FullDisclosure/IE - Possible Address Spoofing
  • From: Liu Die Yu
• [SECURITY] [DSA 534-1] New mailreader packages fix directory traversal vulnerability
  • From: Matt Zimmerman
• SUSE Security Announcement: samba (SUSE-SA:2004:022)
  • From: Thomas Biege
• [SECURITY] [DSA 533-1] New courier packages fix cross-site scripting vulnerability
  • From: Matt Zimmerman
• mi2g attacks "so-called" security sites
  • From: Rob Rosenberger
• OpenServer 5.0.7 : Mozilla Multiple issues
  • From: please_reply_to_security
• Apache 1.3.x mod_userdir Exploit (wgetusr.c)
  • From: John Bissell
• MDKSA-2004:071 - Updated samba packages fix vulnerability in SWAT, samba-server.
  • From: Mandrake Linux Security Team
• Samba 3.x swat preauthentication buffer overflow
  • From: Evgeny Demidov
• @stake advisory: HP dced Remote Command Execution Multiple OSes
  • From: Advisories
• SWAT PreAuthorization PoC
  • From: bugtraq
• TSSA-2004-014 - samba
  • From: tinysofa Security Team
• [CLA-2004:851] Conectiva Security Announcement - samba
  • From: Conectiva Updates
• [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php)
  • From: OpenPKG
• [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)
  • From: OpenPKG
• Comcast(tm) Email Manager allows arbitrary java and activex code execution
  • From: Michael Scheidell
• [ GLSA 200407-17 ] l2tpd: Buffer overflow
  • From: Kurt Lieber
• Security Release - Samba 3.0.5 and 2.2.10
  • From: Gerald (Jerry) Carter
• mi2g - fud, lies and libel
  • From: not-mi2g
• Bug@FlashFTPd
  • From: CoolICE
• DOS@XitamiHTTPd
  • From: CoolICE
• Re: Denial of Service vulnerability in several Lexmark HTTP servers
  • From: Eric Sesterhenn / snakebyte
• [SECURITY] [DSA 531-1] New php4 packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• Denial of Service in Conceptronic CADSLR1 Router
  • From: Administrador de 'Shell Security'
• More Webserver / IE Exploits
  • From: Hubbard, Dan