Bugtraq

• Thread Index

• [ GLSA 200404-04 ] Multiple vulnerabilities in sysstat
  • From: Kurt Lieber
• RE: Kerio Personal Firewall 4 and IE 6 "Bug"
  • From: Noah Dunker
• Internet Explorer 6 - Crash
  • From: E.Kellinis
• [OpenPKG-SA-2004.010] OpenPKG Security Advisory (tcpdump)
  • From: OpenPKG
• Re: GNU Sharutils buffer overflow vulnerability
  • From: Shaun Colley
• Kerio Personal Firewall 4.0.13 - Remote DoS (Crash)
  • From: E.Kellinis
• [OpenPKG-SA-2004.011] OpenPKG Security Advisory (sharutils)
  • From: OpenPKG
• RE: Kerio Personal Firewall 4 and IE 6 "Bug"
  • From: Noah Dunker
• McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]
  • From: S G Masood
• Re: GNU Sharutils buffer overflow vulnerability.
  • From: Carlos Eduardo Pinheiro
• Metasploit Framework 2.0 Released!
  • From: H D Moore
• Solaris vfs_getvfssw() local kernel exploit
  • From: Sam
• [ GLSA 200404-07 ] ClamAV RAR Archive Remote Denial Of Service Vulnerability
  • From: Kurt Lieber
• [ GLSA 200404-06 ] Util-linux login may leak sensitive data
  • From: Kurt Lieber
• Re: IPv4 fragmentation --> The Rose Attack
  • From: Ventsislav Genchev
• Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]
  • From: T.J. Ferraro
• Re: GNU Sharutils buffer overflow vulnerability.
  • From: Didier Arenzana
• CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle attacks and unauthorized connections
  • From: Ralf Spenneberg
• Release of Cisco Attack tool Asleap
  • From: Joshua Wright
• Kerio Personal Firewall 4 and IE 6 "Bug"
  • From: E.Kellinis
• Cisco Security Advisory: A default Username and Password in WLSE and HSE devices
  • From: Cisco Systems Product Security Incident Response Team
• Re: eSignal v7 remote buffer overflow
  • From: Scott Johnson
• Re: SuSEs YaST Online Update - possible symlink attack
  • From: Roman Drahtmueller
• REAL One Player R3T File Format Stack Overflow
  • From: NGSSoftware Insight Security Research
• [ GLSA 200404-05 ] ipsec-tools contains an X.509 certificates vulnerability
  • From: Kurt Lieber
• [SECURITY] [DSA 478-1] New tcpdump packages fix denial of service
  • From: Matt Zimmerman
• Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)
  • From: Rafel Ivgi, The-Insider
• Papers: The Invisible Catalog
  • From: Pete Herzog
• LNSA-#2004-0008: Multiple security problems in Monit
  • From: Vincenzo Ciaglia
• [ GLSA 200404-03 ] Tcpdump Vulnerabilities in ISAKMP Parsing
  • From: Joshua J. Berry
• [SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability
  • From: Matt Zimmerman
• Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0
  • From: Foundstone Labs
• Re: Netsky.R, auto execute w/ IE6 ?
  • From: vbsubmit
• GNU Sharutils buffer overflow vulnerability.
  • From: Shaun Colley
• [product-security@xxxxxxxxx: APPLE-SA-2004-04-05 Security Update 2004-04-05]]
  • From: David Ahmad
• RE: Netsky.R, auto execute w/ IE6 ?
  • From: BugtraQ
• blaxxun3D(blaxxun Platform) 7 - Remote Buffer Overflow
  • From: Rafel Ivgi, The-Insider
• [ GLSA 200404-01 ] Insecure sandbox temporary lockfile vulnerabilities in Portage
  • From: Tim Yamin
• [ GLSA 200404-02 ] KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability
  • From: Aida Escriva-Sammer
• Support Contact Info
  • From: Mark Litchfield
• Re: IBM Director 3.1 Windows Agent Remote DoS
  • From: Vess Nedevski
• [SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation
  • From: Martin Schulze
• Vuln Info Disclosure may become illegal in France [was: Re: Bugfinder Being Indicted As Criminal]
  • From: Fozzy
• MDKSA-2004:026 - Updated mplayer packages fix remotely exploitable vulnerability
  • From: Mandrake Linux Security Team
• Paper: Comparing binaries with graph isomorphisms
  • From: Todd Sabin
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: K-OTiK Security
• Format string bug in IGI 2: Covert Strike 1.3
  • From: Luigi Auriemma
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: K-OTiK Security
• Automated wireless client penetration tool "hotspotter" released.
  • From: Max Moser
• Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001
  • From: Ory Segal
• Fw: new IE vurn
  • From: Philip Barnham
• IBM Director 3.1 Windows Agent Remote DoS
  • From: Juanma Merino
• Advisory: Multiple Vulnerabilities in Monit
  • From: mattmurphy@xxxxxxxxx
• [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability
  • From: idlabs-advisories
• Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B)
  • From: NGSSoftware Insight Security Research
• Re: new IE vurn
  • From: Gavin Hanover
• NGSSoftware Insight Security Research Advisory
  • From: Peter Winter-Smith
• Texutil symlink vulnerability.
  • From: Shaun Colley
• SuSEs YaST Online Update - possible symlink attack
  • From: Rene
• [SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation
  • From: Matt Zimmerman
• [SECURITY] [DSA 474-1] New squid packages fix ACL bypass
  • From: Matt Zimmerman
• [OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc)
  • From: OpenPKG
• [SECURITY] [DSA 473-1] New oftpd packages fix denial of service
  • From: Matt Zimmerman
• [SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa)
  • From: Martin Schulze
• [SECURITY] [DSA 472-1] New fte packages fix buffer overflows
  • From: Matt Zimmerman
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: Renaud Deraison
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: Fozzy
• [securityzone@xxxxxxxxxxxxxx: New Macromedia Security Zone Bulletin Posted]
  • From: David Ahmad
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: Chris Wysopal
• Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: K-OTiK Security
• IRIX Update Some Network Drivers May Leak Data
  • From: SGI Security Coordinator
• eMule v0.42d Buffer Overflow
  • From: Kostya Kortchinsky
• Remote Exploit for Aborior's Encore Web Forum
  • From: XNUXER RESEARCH
• IRIX ftpd ftp_syslog issue with anonymous FTP
  • From: SGI Security Coordinator
• [SECURITY] [DSA 471-1] New interchange packages fix information leak
  • From: Martin Schulze
• Netsky.R, auto execute w/ IE6 ?
  • From: BugtraQ
• Enterprise Application Security
  • From: Dave Aitel
• Re: Pikachu -Turn on WEP !
  • From: christophe barbe
• [OpenPKG-SA-2004.008] OpenPKG Security Advisory (squid)
  • From: OpenPKG
• [SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa)
  • From: Martin Schulze
• Index viewing in imgSvr 0.4
  • From: Donato Ferrante
• Re: IPv4 fragmentation --> The Rose Attack
  • From: stanislav shalunov
• Re: IPv4 fragmentation --> The Rose Attack
  • From: Chris Brenton
• Re: Google using Expired Cert and SSLv2
  • From: Ivaylo Kostadinov
• Releasing full source code of WinBlox
  • From: Liu Die Yu
• Pikachu -Turn on WEP !
  • From: Himanshu Singh
• Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed.
  • From: Paul
• [CLA-2004:836] Conectiva Security Announcement - libxml2
  • From: Conectiva Updates
• Re: IPv4 fragmentation --> The Rose Attack
  • From: Crist J. Clark
• OpenLinux: vim arbitrary commands execution through modelines
  • From: please_reply_to_security
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : perl unsafe Safe compartment
  • From: please_reply_to_security
• RE: Followup: vuln in WinBlox monitor for winnt
  • From: Oliver Lavery
• Open Source Vulnerability Database Opens for Public Access
  • From: fbr
• Re: new internet explorer exploit (was new worm)
  • From: mgotts
• RE: cdp buffer overflow vulnerability
  • From: Dave Paris
• TOOL: Adder - runtime patching in python
  • From: Oliver Lavery
• Re: cdp buffer overflow vulnerability - updated details
  • From: Shaun Colley
• Google using Expired Cert and SSLv2
  • From: Matthew S. Hamrick
• OpenLinux: util-linux could leak sensitive data
  • From: please_reply_to_security
• [CLA-2004:835] Conectiva Security Announcement - ethereal
  • From: Conectiva Updates
• [CLA-2004:834] Conectiva Security Announcement - openssl
  • From: Conectiva Updates
• Re: cdp buffer overflow vulnerability
  • From: Vade 79
• Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
  • From: Drew Copley
• Re: IPv4 fragmentation --> The Rose Attack
  • From: stanislav shalunov
• RE: security enforcement - new monitor for winnt
  • From: Oliver Lavery
• RE: Followup: vuln in WinBlox monitor for winnt
  • From: Drew Copley
• IPv4 fragmentation --> The Rose Attack
  • From: gandalf
• RogerWilco: new funny bugs
  • From: Luigi Auriemma
• Followup: vuln in WinBlox monitor for winnt
  • From: Oliver Lavery
• [ GLSA 200403-13 ] Remote buffer overflow in MPlayer
  • From: Kurt Lieber
• NOT GOOD: Outlook Express 6 + Internet Explorer 6
  • From: http-equiv@xxxxxxxxxx
• [CLA-2004:833] Conectiva Security Announcement - mc
  • From: Conectiva Updates
• RE: security enforcement - new monitor for winnt
  • From: Liu Die Yu
• cdp buffer overflow vulnerability
  • From: Shaun Colley
• [RHSA-2004:137-01] Updated Ethereal packages fix security issues
  • From: bugzilla
• [ GLSA 200403-10 ] Fetchmail 6.2.5 fixes a remote DoS
  • From: Kurt Lieber
• Re: IE ms-its: and mk:@MSITStore: vulnerability
  • From: roozbeh afrasiabi
• [ GLSA 200403-11 ] Squid ACL [url_regex] bypass vulnerability
  • From: Kurt Lieber
• Re: security enforcement - new monitor for winnt
  • From: Liu Die Yu
• [ GLSA 200403-14 ] Multiple Security Vulnerabilities in Monit
  • From: Aida Escriva-Sammer
• [ GLSA 200403-12 ] OpenLDAP DoS Vulnerability
  • From: Joshua J. Berry
• Re: new internet explorer exploit (was new worm)
  • From: roozbeh afrasiabi
• CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities
  • From: S-Quadra Security Research
• MDKSA-2004:025 - Updated squid packages fix vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:024 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: White Paper - Web Application Worms: Myth or Reality?
  • From: Nicholas Weaver
• Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed.
  • From: Joe Stewart
• White Paper - Web Application Worms: Myth or Reality?
  • From: Imperva Application Defense Center
• phpkit suffers (reale stupid) XSS vuln.
  • From: Yanosz
• Problem with customized login pages for Oracle SSO
  • From: advisories
• Re: new internet explorer exploit (was new worm)
  • From: Nick FitzGerald
• MPlayer Security Advisory #002 - HTTP parsing vulnerability
  • From: Gabucino
• NetSky.q Virus. Looking for more detailed information on how the DOS will be performed.
  • From: Paul
• Linbit linbox Multiple Vulnerabilities
  • From: Martin Eiszner
• R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities
  • From: advisory
• TSLSA-2004-0017 - apache
  • From: Trustix Security Advisor
• Heap overflow in MPlayer
  • From: blexim
• Re: new internet explorer exploit (was new worm)
  • From: Jelmer
• TSLSA-2004-0015 - tcpdump
  • From: Trustix Security Advisor
• Re: IE ms-its: and mk:@MSITStore: vulnerability
  • From: Lise Moorveld
• Re: security enforcement - new monitor for winnt
  • From: http-equiv@xxxxxxxxxx
• Re: security enforcement - new monitor for winnt
  • From: Amir Mohammadkhani-Aminabadi
• Exensive cPanel Cross Site Scripting
  • From: sullo
• clamd - NEVER use "%f" in your "VirusEvent"
  • From: Rene
• Re: new internet explorer exploit (was new worm)
  • From: Berend-Jan Wever
• Re: Addressing Cisco Security Issues
  • From: Clayton Kossmeyer
• security enforcement - new monitor for winnt
  • From: Liu Die Yu
• RE: new internet explorer exploit (was new worm)
  • From: Thor Larholm
• Re: new internet explorer exploit (was new worm)
  • From: Void
• Addressing Cisco Security Issues
  • From: Geo.
• Re: systrace silently patches full local bypass vulnerability on Linux
  • From: stealth
• IE ms-its: and mk:@MSITStore: vulnerability
  • From: roozbeh afrasiabi
• RE: new internet explorer exploit (was new worm)
  • From: Drew Copley
• Re: Addressing Cisco Security Issues
  • From: Jason Dodson
• re: New worm?
  • From: http-equiv@xxxxxxxxxx
• phpBB 2.0.8 Exploit
  • From: JeiAr
• [ GLSA 200403-07 ] Multiple remote overflows and vulnerabilities in Ethereal
  • From: Kurt Lieber
• vuln
  • From: "ShelzZ"
• [ GLSA 200403-09 ] Buffer overflow in Midnight Commander
  • From: Kurt Lieber
• [ GLSA 200403-06 ] Multiple remote buffer overflow vulnerabilities in Courier
  • From: Kurt Lieber
• [RHSA-2004:134-01] Updated squid package fixes security vulnerability
  • From: bugzilla
• Multiple Vulnerabilities in Cloisterblog web blog/journal
  • From: Dotho
• WebCT Campus Edition 4.1 - Cross site scripting using CSS @import
  • From: Simon Boulet
• [ GLSA 200403-08 ] oftpd DoS vulnerability
  • From: Kurt Lieber
• [SECURITY] [DSA 469-1] New libpam-pgsql packages fix SQL injection
  • From: Martin Schulze
• LNSA-#2004-0007: Multiple security problems in Ethereal
  • From: Vincenzo Ciaglia
• [ GLSA 200403-05 ] UUDeview MIME Buffer Overflow
  • From: Tim Yamin
• new internet explorer exploit (was new worm)
  • From: Jelmer
• A-CART Pro & A-CART 2.0 Input Validation Holes
  • From: Manuel Lopez
• Re: New worm?
  • From: Charles Hamby
• Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]
  • From: Benjamin Tolman
• FreeBSD Security Advisory FreeBSD-SA-04:06.ipv6
  • From: FreeBSD Security Advisories
• PhotoPost PHP Pro Multiple Vulnerabilities
  • From: JeiAr
• [ GLSA 200403-05 ] Linux kernel do_mremap local privilege escalation vulnerability
  • From: Tim Yamin
• iss_pam1.dll remote exploits
  • From: Sam
• Ethereal(v0.10.0-0.10.2) IGAP Dissector Message Overflow Exploit
  • From: Eye on Security India
• Re: New worm?
  • From: Gadi Evron
• systrace silently patches full local bypass vulnerability on Linux
  • From: spender
• Another ISS BlackIce & RealSecure Update ?
  • From: Jeff
• New worm?
  • From: Karousel
• Another ISS BlackIce & RealSecure Update ?
  • From: K-OTiK Security
• Strange traffic - Outgoing TCP 3127/3198 (Not mydoom) New worm?
  • From: Steve Browning
• Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]
  • From: JeiAr
• bblog 0.7.2 cross site scripting
  • From: penfold
• Nstxd vulnerability
  • From: laurent oudot
• freshmeat.net: XSS Attack due to improper comment filtering.
  • From: Steve Kemp
• Re: MS Outlook/Outlook Express Preview Pane Security Issue
  • From: Nexus
• phpBB2 2.0.8 privmsg.php SQL injection patch (critical).
  • From: Shaun Colley
• RE: MS Outlook/Outlook Express Preview Pane Security Issue
  • From: Drew Copley
• LNSA-#2004-0006: bug workaround for Apache 2.0.48
  • From: Vincenzo Ciaglia
• MS Outlook/Outlook Express Preview Pane Security Issue
  • From: Jeff Uslan
• RE: MS Word - password protection vulnerabilty
  • From: C Ryll
• Blogger XSS Vulnerability
  • From: Ferruh Mavituna
• [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]
  • From: Janek Vind
• Tomcat 5.0.14: remote DoS
  • From: WU Fei Liang
• R: UPDATED: MS Word - password protection vulnerabilty
  • From: s . zdrojewski
• [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]
  • From: Janek Vind
• OpenLinux: mc Updated packages resolve local buffer overflow vulnerability
  • From: please_reply_to_security
• NetSupport School Pro: Password Encryption Weaknesses
  • From: spiffomatic 64
• SGI Advanced Linux Environment security update #16
  • From: SGI Security Coordinator
• SGI Advanced Linux Environment security update #15
  • From: SGI Security Coordinator
• OpenLinux: mutt remote buffer overflow
  • From: please_reply_to_security
• Re: Immunity Advisory: Solaris local kernel root
  • From: Dave Aitel
• UPDATED: MS Word - password protection vulnerabilty
  • From: Andrew W Barkley
• UPDATED: MS Word - password protection vulnerabilty
  • From: Andrew Barkley
• eSignal v7 remote buffer overflow (exploit)
  • From: Vizzy
• Re: [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities
  • From: Ulf Härnhammar
• Remote crash in Etherlords I 1.07 and II 1.03
  • From: Luigi Auriemma
• GLSA200403-04 Multiple security vulnerabilities in Apache 2
  • From: Aida Escriva-Sammer
• Re: Immunity Advisory: Solaris local kernel root
  • From: Casper Dik
• New Adventures In Phishing
  • From: Jim Halfpenny
• [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• Re: TrendMicro (not Macro) Interscan Viruswall Directory Traversal
  • From: Tri Huynh
• Re: Phpbb 2.0.7a And Earlier Secuity Issues
  • From: JeiAr
• Re: Immunity Advisory: Solaris local kernel root
  • From: Dave Aitel
• Re: TrendMacro Interscan Viruswall Directory Traversal
  • From: Brian Keefer
• mysqlbug tmpfile/symlink vulnerability.
  • From: Shaun Colley
• Check Point SmartDashboard Buffer Overflow
  • From: Andreas Constantinides (MegaHz)
• Re: HP Web JetAdmin vulnerabilities.
  • From: H D Moore
• Dark Age of Camelot login client vulnerability to man in the middle attack
  • From: Todd Chapman
• Dameware Passes Weak File Encryption Key in the Clear
  • From: ax09001h
• Broadcast client buffer-overflow in Terminator 3 1.0
  • From: Luigi Auriemma
• HP Web JetAdmin vulnerabilities.
  • From: wirepair
• Buffer overflow in PicoPhone 1.63
  • From: Luigi Auriemma
• Re: Immunity Advisory: dtlogin remote root
  • From: Dave Aitel
• [SECURITY] [DSA 467-1] New ecartis packages fix several vulnerabilities
  • From: Matt Zimmerman
• Re: Immunity Advisory: Solaris local kernel root
  • From: Casper Dik
• TrendMacro Interscan Viruswall Directory Traversal
  • From: Tri Huynh
• Re: Immunity Advisory: dtlogin remote root
  • From: Johan A.van Zanten
• R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities
  • From: advisory
• Immunity Advisory: Solaris local kernel root
  • From: Dave Aitel
• Immunity Advisory: dtlogin remote root
  • From: Dave Aitel
• Re: Open the WS_FTP Server backdoor to SYSTEM
  • From: Todd C. Campbell
• Advisory 03/2004: Multiple (13) Ethereal remote overflows
  • From: Stefan Esser
• Server freeze in The Rage 1.01
  • From: Luigi Auriemma
• Think of the buffers! Won't somebody think of the buffers?!
  • From: Hugh Mann
• Open the WS_FTP Server backdoor to SYSTEM
  • From: Hugh Mann
• ALLO ALLO WS_FTP Server
  • From: Hugh Mann
• More Cpanel Vuls (cross site scripting)
  • From: Fable
• [waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0]
  • From: Janek Vind
• How to crash a harddisk - the Ipswitch WS_FTP Server way
  • From: Hugh Mann
• [waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c]
  • From: Janek Vind
• Sarca rainbow tables on-line cracking service
  • From: Inode
• Remotely Exploitable Cross-Site Scripting in Hotmail and Yahoo (GM#005-MC)
  • From: GreyMagic Software
• [waraxe-2004-SA#011 - Multiple vulnerabilities in MS Analysis v2.0 module for PhpNuke]
  • From: Janek Vind
• Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration
  • From: Manuel Lopez
• RE: Fw: phpBB profile.php Cross Site Scripting Vulnerability
  • From: micheal@xxxxxxxxxxxxxxxxxxxxx
• Vulnerabilities in Member Management System 2.1
  • From: Manuel Lopez
• directory traversal in xweb 1.0
  • From: Donato Ferrante
• Invision Gallery SQL Injection Vulnerabilities
  • From: JeiAr
• Invision Power Top Site List SQL Injection Vulnerability
  • From: JeiAr
• Phpbb 2.0.7a And Earlier Secuity Issues
  • From: JeiAr
• Mod_Survey security advisory: Script injection bug
  • From: Joel Palmius
• phpBB profile.php Cross Site Scripting Vulnerability
  • From: Cheng Peng Su
• DSL Modem Ericsson HM220dp Exploit
  • From: Roberto Dapino
• xine-check/xine-bugreport symlink vulnerability.
  • From: Shaun Colley
• The witty worm
  • From: Gadi Evron
• Apache mod_disk_cache stores client authentication credentials on disk
  • From: Andreas Steinmetz
• Re: Winamp 5.02 Long Filename Buffer Overflow Vulnerability
  • From: b0f www.b0f.net
• Re: The witty worm
  • From: Gadi Evron
• Re: The witty worm
  • From: Gadi Evron
• Concerning The Recent Invision power Board Issues
  • From: GulfTech Security
• Re: Any dissasemblies of the Witty worm yet?
  • From: Kostya Kortchinsky
• Any dissasemblies of the Witty worm yet?
  • From: Nicholas Weaver
• Re: Samba 'smbprint' script tmpfile vulnerability.
  • From: Gerald (Jerry) Carter
• Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b
  • From: Sym Security
• XP SP2 is out
  • From: Gadi Evron
• [Full-Disclosure] iDEFENSE Security Advisory 03.19.04: Borland Interbase admin.ib Administrative Access Vulnerability
  • From: idlabs-advisories
• [ANNOUNCE] Apache HTTP Server 2.0.49 Released (fwd)
  • From: je
• Samba 'smbprint' script tmpfile vulnerability.
  • From: Shaun Colley
• Re[2]: ws_ftp overflow (WS_FTP Pro 8.0.3 is vulnerable)
  • From: nesumin
• Internet Explorer Causing Explorer.exe - Null Pointer Crash
  • From: Rafel Ivgi, The-Insider
• Re: mac osx- admin service buffer overflow
  • From: Mathias Wegner
• Winamp 5.02 Long Filename Buffer Overflow Vulnerability
  • From: Tobias Welter
• Eudora 6.0.3 attachment spoof, LaunchProtect
  • From: Paul Szabo
• Re: mac osx- admin service buffer overflow
  • From: programming_rocks1
• Norton AntiSpam Remote Buffer Overrun (#NISR19042004a)
  • From: NGSSoftware Insight Security Research
• Norton Internet Security Remote Command Execution (#NISR19042004b)
  • From: NGSSoftware Insight Security Research
• EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability
  • From: Marc Maiffret
• mac osx- admin service buffer overflow
  • From: programming_rocks1
• TSLSA-2004-0012 - openssl
  • From: Trustix Security Advisor
• Chrome 1.2.0.0 server crash
  • From: Luigi Auriemma
• HOTMAIL / PASSPORT: phishing expedition
  • From: http-equiv@xxxxxxxxxx
• TSLSA-2004-0011 - sysstat
  • From: Trustix Security Advisor
• [waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke]
  • From: Janek Vind
• ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow
  • From: Pentest Security Alerts
• [OpenPKG-SA-2004.007] OpenPKG Security Advisory (openssl)
  • From: OpenPKG
• RE: [RHSA-2004:112-01] Updated Mozilla packages fix security issu es
  • From: John . Airey
• [SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus)
  • From: Martin Schulze
• [RHSA-2004:112-01] Updated Mozilla packages fix security issues
  • From: bugzilla
• Re: PLAXO: is that a cure or a disease?
  • From: Stacy Martin
• Vcard 2.8 uninstall script problem
  • From: saudi linux
• [RHSA-2004:121-01] Updated OpenSSL packages fix vulnerabilities
  • From: bugzilla
• [SECURITY] [DSA 465-1] New openssl packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004]
  • From: Dave Markham
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004]
  • From: Mark J Cox
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004]
  • From: Marc Bejarano
• [ESA-20040317-003] 'openssl' Denial of Service vulnerabilities.
  • From: EnGarde Secure Linux
• FreeBSD Security Advisory FreeBSD-SA-04:05.openssl
  • From: FreeBSD Security Advisories
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004]
  • From: Marc Bejarano
• MDKSA-2004:023 - Updated openssl packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• SUSE Security Announcement: openssl (SuSE-SA:2004:007)
  • From: Thomas Biege
• Re: YabbSE (3 on 1)
  • From: David
• Cisco Security Advisory: Cisco OpenSSL Implementation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• New OpenSSL releases fix denial of service attacks [17 March 2004]
  • From: Mark J Cox
• RE: YaBB/YaBBse Cross Site Scripting Vulnerability
  • From: Frog Man
• PHPX 2.x - 3.2.4
  • From: gdayworld
• Re: Fw: Bilbao Method Exposed
  • From: Mark J Cox
• Mambo Open Source Multiple Vulnerabilities
  • From: JeiAr
• Fw: Bilbao Method Exposed
  • From: FraMe
• ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow
  • From: S-Quadra Security Research
• Crafty Game Stack Overflow & Exploit
  • From: Angelo Rosiello
• new security alert #66 issued in Oracle web cache
  • From: Pete Finnigan
• JelSoft vBulletin Multiple XSS Vulnerabilities
  • From: JeiAr
• [SECURITY] [DSA 464-1] New gdk-pixbuf packages fix denial of service
  • From: Martin Schulze
• Re: ws_ftp overflow
  • From: nesumin
• Phorum 5.0.3 Beta && Earlier XSS Issues
  • From: JeiAr
• Follow-up: Major hack attack on the U.S. Senate
  • From: eric
• [waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke]
  • From: Janek Vind
• [waraxe-2004-SA#005 - XSS in Php-Nuke 7.1.0 - part 2]
  • From: Janek Vind
• Re: spamblocker turns into mail denial of service
  • From: Chris Fuhrman
• spamblocker turns into mail denial of service
  • From: Dana Hudes
• [waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke]
  • From: Janek Vind
• YaBB/YaBBse Cross Site Scripting Vulnerability
  • From: Cheng Peng Su
• Multiple Immunity Advisories
  • From: Dave Aitel
• ws_ftp overflow
  • From: john layman
• VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass
  • From: Rafel Ivgi, The-Insider
• Re: Multiple Vulnerabilities in PWS 0.2.2
  • From: Jan De Luyck
• [SCAN Associates Sdn Bhd Security Advisory] phpBB 2.0.6 and below sql injection
  • From: pokley
• Opera Array Allocation Managment Exploit
  • From: d3thStaR
• Rosiello Security's exploit for MDaemon
  • From: Angelo Rosiello
• Multiple Vendor SOAP server array DoS
  • From: Amit Klein
• phpBB 2.0.6d && Earlier Security Issues
  • From: JeiAr
• [SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt
  • From: Matt Zimmerman
• SGI Advanced Linux Environment security update #14
  • From: SGI Security Coordinator
• Cpanel 9.1.0 have a problem ?
  • From: Arab VieruZ
• Re: MS Security Response is a bunch of half-witted morons
  • From: Kim Scarborough
• PLAXO: is that a cure or a disease?
  • From: http-equiv@xxxxxxxxxx
• Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities
  • From: S-Quadra Security Research
• Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks
  • From: Fable
• Re: MS Security Response is a bunch of half-witted morons
  • From: Walter Wart
• MS Security Response is a bunch of half-witted morons
  • From: Nick FitzGerald
• Metamail 'extcompose' script Symlink Vulnerability
  • From: Shaun Colley
• [OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview)
  • From: OpenPKG
• cPanel Secuirty Advisory CPANEL-2004:01-01
  • From: J. Nick Koston
• Re: Unreal engine updates and Battle Mages advisory
  • From: Todd Chapman
• Multiple Vulnerabilities in PWS 0.2.2
  • From: Donato Ferrante
• Multiple vulnerabilities in Hushmail.com
  • From: Calum Power
• Announcing full functional adore-ng rootkit for 2.6 Kernel
  • From: stealth
• Re: Norton AntiVirus 2002 fails to scan files with ... [2'nd... UPDATED] Message-ID: 20040306040833.28300
  • From: Sym Security
• Re: Outlook mailto: URL argument injection vulnerability MS04-009 (Now CRITICAL) !
  • From: K-OTiK Security
• Cpanel 8.*.* have a problem ?
  • From: Arab VieruZ
• Re: Format string bug in EpicGames Unreal engine
  • From: Käppler
• [SECURITY] [DSA 461-1] New calife packages fix buffer overflow
  • From: Matt Zimmerman
• XSS in MyProxy 20030629
  • From: Donato Ferrante
• RE: Outlook mailto: URL argument injection vulnerability
  • From: Shaun Colley
• Unreal engine updates and Battle Mages advisory
  • From: Luigi Auriemma
• [RHSA-2004:093-01] Updated sysstat packages fix security vulnerabilities
  • From: bugzilla
• MDKSA-2004:021 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [SECURITY] [DSA 458-1] New python2.2 packages fix buffer overflow
  • From: Matt Zimmerman
• Outlook mailto: URL argument injection vulnerability
  • From: Jouko Pynnonen
• Re: HP printers and currency anti-copying measures
  • From: Dana Hudes
• [SECURITY] [DSA 460-1] New sysstat packages fix insecure temporary file creation
  • From: Matt Zimmerman
• MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability
  • From: Mandrake Linux Security Team
• DoS in wMCam server 2.1.348
  • From: Donato Ferrante
• [SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug
  • From: Matt Zimmerman
• GNU Anubis 3.6.2 remote root exploit
  • From: Claes M Nyberg
• Re: HP printers and currency anti-copying measures
  • From: Dan Harkless
• [RHSA-2004:102-01] Updated gdk-pixbuf packages fix denial of service vulnerability
  • From: bugzilla
• [RHSA-2004:075-01] Updated kdelibs packages resolve cookie security issue
  • From: bugzilla
• Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities
  • From: Brandon Sturgeon
• With regards to the Adobe Acrobat Reader advisory (#NISR03022004)
  • From: NGSSoftware Insight Security Research
• MDKSA-2004:019 - Updated python packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2004:022 - Updated kdelibs packages fix cookie theft vulnerability
  • From: Mandrake Linux Security Team
• Format string bug in EpicGames Unreal engine
  • From: Luigi Auriemma
• Re: IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004)
  • From: Marc Bejarano
• Ghost users in Chat Anywhere 2.72
  • From: Luigi Auriemma
• Establishing contact with Nullsoft
  • From: Peter Winter-Smith
• Invision Power Board v1.3 Final Cross Site Scripting 2 - Addon
  • From: Rafel Ivgi, The-Insider
• IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004)
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)
  • From: OpenPKG
• Re: Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity
  • From: JeiAr
• RE: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation
  • From: Amit Klein
• RE: Desert Rats vs. Afrika Korps (Haegemonia bug)
  • From: Drew Copley
• Antivir for Freebsd doesn't work on 5.X
  • From: George Swentek
• Re: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation
  • From: Peter Watkins
• Z***ING EMAILS !
  • From: http-equiv@xxxxxxxxxx
• [ GLSA 200403-01 ] Libxml2 URI Parsing Buffer Overflow Vulnerabilities
  • From: Tim Yamin
• RE: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics"
  • From: Amit Klein
• [ GLSA 200403-02 ] Linux kernel do_mremap local privilege escalation vulnerability
  • From: Tim Yamin
• RE: VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity
  • From: Ravish
• directory traversal in PWebServer 0.3.3
  • From: Donato Ferrante
• [OpenPKG-SA-2004.004] OpenPKG Security Advisory (libtool)
  • From: OpenPKG
• Symlink Vulnerability in GNU automake <1.8.3
  • From: Stefan Nordhausen
• Safari javascript array overflow
  • From: kang
• TSLSA-2004-0010 - libxml2
  • From: Trustix Security Advisor
• TSLSA-2004-0009 - nfs-utils
  • From: Trustix Security Advisor
• [SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm)
  • From: Martin Schulze
• Re: Norton Antivirus 2002 fails to scan files with ... [2'nd... UPDATED]
  • From: Bipin Gautam.
• Re: Norton Antivirus 2002 fails to scan files with special character(s) properly.
  • From: Marco Marabelli
• O-088: Sun passwd(1) Command Vulnerability
  • From: Cy Schubert
• Norton Antivirus 2002 fails to scan files with special character(s) properly.
  • From: Bipin Gautam.
• Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity
  • From: Rafel Ivgi, The-Insider
• Re: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics"
  • From: Jeremiah Grossman
• Infosecdaily.net: Expanding our blogging community.
  • From: Ejovi Nuwere
• Re: Invision Power Board 1.3 Final Path Disclosure Vulnerability
  • From: JeiAr
• [OpenPKG-SA-2004.003] OpenPKG Security Advisory (libxml)
  • From: OpenPKG
• VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity
  • From: Rafel Ivgi, The-Insider
• Desert Rats vs. Afrika Korps (Haegemonia bug)
  • From: Luigi Auriemma
• NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN
  • From: NetScreen Security Response Team
• [FLSA-2004:1256] Updated util-linux resolves security vulnerability
  • From: Jesse Keating
• Invision Power Board 1.3 Final Path Disclosure Vulnerability
  • From: Shaun Colley
• SLWebMail Multiple Buffer Overflow Vulnerabilities (#NISR05022004b)
  • From: NGSSoftware Insight Security Research
• IEEE Security & Privacy CFP
  • From: Sharif Torpis
• SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a)
  • From: NGSSoftware Insight Security Research
• GNU Anubis buffer overflows and format string bugs
  • From: Ulf Härnhammar
• Re: [bugtraq] Nokia 3410 cell phones software flaw
  • From: Erwann Abalea
• Abobe Reader 5.1 XFDF Buffer Overflow Vulnerability
  • From: NGSSoftware Insight Security Research
• LNSA-#2004-0004: libxml2 buffer overflow
  • From: Vincenzo Ciaglia
• OpenLinux: cups denial of service vulnerability
  • From: please_reply_to_security
• RE: Wftpd stat Command Remote Vulnerability Exploit
  • From: Alun Jones
• SHOUTcast v1.9.2 remote connect back exploit
  • From: 0seen security team
• Serv-U Real Target and Search ASM Code Tool for Overflow Exploit.
  • From: lion
• [SECURITY] [DSA 455-1] New libxml packages fix arbitrary code execution
  • From: Martin Schulze
• A new white paper by Sanctum: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics"
  • From: Amit Klein
• MDKSA-2004:017 - Updated pwlib packages fix vulnerability
  • From: Mandrake Linux Security Team
• Nokia 3410 cell phones software flaw
  • From: David Arranz
• MDKSA-2004:018 - Updated libxml2 packages fix vulnerability
  • From: Mandrake Linux Security Team
• Re: Multiple issues with Mac OS X AFP client
  • From: Marukka
• Re: The Cult of a Cardinal Number
  • From: Phantasmal Phantasmagoria
• Cisco Security Advisory: Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• SGI Advanced Linux Environment security update #13
  • From: SGI Security Coordinator
• RE: SonicWall Firewall DoS, ARP Flood, Network Mapping
  • From: Robert C. Auch
• Coreutils 'dir' integer overflow vulnerability.
  • From: Shaun Colley
• OpenLinux: Gnupg (gpg) severe bug could compromise almost all ElGamal keys
  • From: please_reply_to_security
• RE: New Internet Explorer Cross Zone/Site Scripting Vulnerability
  • From: Thor Larholm
• Wftpd stat Command Remote Vulnerability Exploit
  • From: security team 0seen
• RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability
  • From: xeno
• OpenLinux: screen buffer overflow
  • From: please_reply_to_security
• directory traversal in GWeb 0.6
  • From: Donato Ferrante
• Spider Sales shopping cart software multiple security vulnerabilities
  • From: S-Quadra Security Research
• The non-apreciated world of full-disclosure
  • From: Davide Del Vecchio
• OpenLinux: rsync heap based overflow
  • From: please_reply_to_security
• New Internet Explorer Cross Zone/Site Scripting Vulnerability
  • From: Cheng Peng Su
• RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability
  • From: Dennis M. Callan
• 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance
  • From: Lachniet, Mark
• [FLSA-2004:1284] Updated kernel resolves security vulnerabilities
  • From: Jesse Keating
• [SECURITY] [DSA 454-1] New Linux 2.2.22 packages fix local root exploit (alpha)
  • From: Martin Schulze
• OpenLinux: Integer overflow may allow local users to cause a denial of service or possibly execute arbitrary code
  • From: please_reply_to_security
• Format String vuln in Inktomi Search4.0
  • From: Blurred Vision
• The Cult of a Cardinal Number
  • From: Phantasmal Phantasmagoria
• SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability
  • From: xeno
• Re: Motorola T720 cell phone DoS vulnerability.
  • From: John T. Larkin
• Re: New phpBB ViewTopic.php Cross Site Scripting Vulnerability
  • From: t4c [Founder of GHCIF]
• Motorola T720 cell phone DoS vulnerability.
  • From: Shaun Colley
• mremap(2) full details available
  • From: Paul Starzetz
• [SECURITY] [DSA 452-1] New libapache-mod-python packages fix denial of service
  • From: Matt Zimmerman
• YabbSE (3 on 1)
  • From: backspace
• Clients broadcast buffer overflow in Red Faction <= 1.20
  • From: Luigi Auriemma
• Critical WFTPD buffer overflow vulnerability
  • From: axl rose
• Multiple WFTPD Denial of Service vulnerabilities
  • From: axl rose
• Invision Power Board SQL injection!
  • From: Knight Commander
• LAN SUITE Web Mail 602Pro Multiple Vulnerabilities
  • From: Rafel Ivgi, The-Insider
• Re: Multiple issues with Mac OS X AFP client
  • From: Chris Adams
• laptop security
  • From: Gadi Evron
• InnoMedia VideoPhone Authorization Bypass
  • From: Rafel Ivgi, The-Insider
• New phpBB ViewTopic.php Cross Site Scripting Vulnerability
  • From: Cheng Peng Su
• Re: [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows
  • From: Steve Kemp
• [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows
  • From: Matt Zimmerman
• Re: Calife heap corrupt / potential local root exploit
  • From: Ollivier Robert
• Re: Calife heap corrupt / potential local root exploit
  • From: Carson Gaspar
• [HUC] Serv-U FTPD 2.x/3.x/4.x/5.x "MDTM" Command Remote Exploit
  • From: lion
• FreeBSD Security Advisory FreeBSD-SA-04:03.jail
  • From: FreeBSD Security Advisories
• Re: Calife heap corrupt / potential local root exploit
  • From: Ollivier Robert
• Symantec Gateway Security Management Service Cross Site Scripting
  • From: Brian_J_Soby
• Multiple issues with Mac OS X AFP client
  • From: Chris Adams
• Serv-U MDTM exploits
  • From: Sam
• EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow
  • From: Marc Maiffret
• iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability
  • From: idlabs-advisories
• New version of ike-scan (IPsec IKE scanner) available - v1.6
  • From: Roy Hills
• iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass
  • From: idlabs-advisories
• Calife heap corrupt / potential local root exploit
  • From: DownBload
• [SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips)
  • From: Martin Schulze
• Extremail Security Problem
  • From: Andrey Smirnov
• RE: Serv-U "MDTM" buffer overflow PoC DoS exploit
  • From: Peter Buijsman
• [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability
  • From: bkbll
• Immunix Secured OS 7+ kernel update
  • From: Immunix Security Team
• Nmap Security Scanner 3.50 Released
  • From: Fyodor
• SGI Advanced Linux Environment security update #11
  • From: SGI Security Coordinator
• Re: Windows XP explorer.exe heap overflow.
  • From: Dragos Ruiu
• SGI Advanced Linux Environment security update #12
  • From: SGI Security Coordinator
• SGI ProPack v2.4: Kernel fixes and security update
  • From: SGI Security Coordinator
• Serv-U "MDTM" buffer overflow PoC DoS exploit
  • From: Shaun Colley
• SmoothWall Project Security Advisory SWP-2004:002
  • From: William Anderson
• Dell OpenManage Web Server Heap Overflow (Pre-Auth)
  • From: wirepair
• Dell OpenManage Web Server Heap Overflow
  • From: wirepair
• [RHSA-2004:063-01] Updated mod_python packages fix denial of service vulnerability
  • From: bugzilla
• Denial Of Service in FreeChat 1.1.1a
  • From: Donato Ferrante
• [RHSA-2004:091-01] Updated libxml2 packages fix security vulnerability
  • From: bugzilla
• MDKSA-2004:015-1 - Updated x86_64 kernel packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2
  • From: Ben
• PSOProxy's exploit for Windows by Rosiello Security
  • From: Angelo Rosiello
• RE: blocking gzip encoded files
  • From: Gervase Markham
• Sandblad #13: Cross-domain exploit on zombie document with event handlers
  • From: Andreas Sandblad
• Re: blocking gzip encoded files
  • From: Josep L. Guallar-Esteve
• Fw: [Unpatched] The Bizex worm
  • From: Thor Larholm
• Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more)
  • From: Luigi Auriemma
• snort rules for ICQ http/https tunnels
  • From: Alexander Antipov
• RE: Windows XP explorer.exe heap overflow.
  • From: Larry Seltzer
• New ICQ WORM
  • From: Rafel Ivgi, The-Insider
• Advisory 02/2004: Trillian remote overflows
  • From: Stefan Esser
• BadBlue 2.4 Local Path Disclosure By phptest.php
  • From: Rafel Ivgi, The-Insider
• Re: Windows XP explorer.exe heap overflow.
  • From: Eli Kara
• Re: Windows XP explorer.exe heap overflow.
  • From: Tim
• Alcatel Omniswitch 7000 series
  • From: Michael Shekman
• MDKSA-2004:016 - Updated mtools packages fix local root vulnerability
  • From: Mandrake Linux Security Team
• MS ASN library is fraught not only with integer overflow, but also with stack overflow.
  • From: flashsky fangxing
• jgs webserver 0.1.0 Cross Site Scripting Vulnerabillity
  • From: Rafel Ivgi, The-Insider
• ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary files retrieving
  • From: ZetaLabs
• Re: Windows XP explorer.exe heap overflow.
  • From: Eli K.
• Re: Bank of America Contact
  • From: Eloy A. Paris
• STG Security Advisory: [SSA-20040217-06] Apache for cygwin directory traversal vulnerability
  • From: advisory
• iDEFENSE Security Advisory 02.23.04: Darwin Streaming Server Remote Denial of Service Vulnerability
  • From: iDefense Labs
• FlexWATCH-Webs 2.2 (NTSC) Authorization Bypass
  • From: Rafel Ivgi, The-Insider
• Remote server crash in Haegemonia <= 1.07
  • From: Luigi Auriemma
• Gigabyte Broadband Router - Multiple Vulnerabilities
  • From: Rafel Ivgi, The-Insider
• Remote crash in Ghost Recon engine
  • From: Luigi Auriemma
• MDKSA-2004:015 - Updated kernel packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• TYPSoft FTP Server 1.10 multiple vulnerabilities
  • From: intuit e.b.
• Re: blocking gzip encoded files
  • From: mgotts
• Mac OS X pppd format string vulnerability
  • From: Advisories
• Remote Buffer Overflow in Avirt Voice 4.0
  • From: Donato Ferrante
• Re: Remote Administrator 2.x: highly possible remote hole or back door
  • From: Ari Gordon-Schlosberg
• ezBoard Cross Site Scripting Vulnerability
  • From: Cheng Peng Su
• RE: Windows XP explorer.exe heap overflow.
  • From: Michael Wojcik
• Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution
  • From: Mariusz Woloszyn
• blocking gzip encoded files
  • From: Darwin Mecham
• Re: Windows XP explorer.exe heap overflow.
  • From: Chris Calabrese
• Re: Bank of America Contact
  • From: Lance James
• Web Crossing 4.x/5.x Denial of Service Vulnerability (FIX)
  • From: Peter Winter-Smith
• Re: Hotfix for new mremap vulnerability
  • From: Marc-Christian Petersen
• Cross Site Scripting in WebzEdit
  • From: Cheng Peng Su
• Re: Bank of America Contact
  • From: Jon W
• 3Com DSL Router Long Request DoS exploit.
  • From: Shaun Colley
• RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP
  • From: David Wilson
• TSLSA-2004-0008 - kernel
  • From: Trustix Security Advisor
• Re: lbreakout2 < 2.4beta-2 local exploit
  • From: Steve Kemp
• Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft
  • From: Steven M. Christey
• Multiple Remote Buffer Overflow in Avirt Soho 4.3
  • From: Donato Ferrante
• Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution
  • From: Tomasz Grabowski
• [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2
  • From: Janek Vind
• Windows XP explorer.exe heap overflow.
  • From: sunglasses
• Somewhat new SQL Injection concept
  • From: Tõnu Samuel
• Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users
  • From: Tomasz Grabowski
• [SECURITY] [DSA 448-1] New pwlib packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• [SECURITY] [DSA 445-1] New lbreakout2 packages fix buffer overflow
  • From: Matt Zimmerman
• [SECURITY] [DSA 446-1] New synaesthesia packages fix insecure file creation
  • From: Matt Zimmerman
• lbreakout2 < 2.4beta-2 local exploit
  • From: Li0n7
• [SECURITY] [DSA 447-1] New hsftp packages fix format string vulnerability
  • From: Matt Zimmerman
• SUSE Security Announcement: xf86/XFree86 (SuSE-SA:2004:006)
  • From: Thomas Biege
• nCipher Advisory #9: Host-side attackers can access secret data
  • From: nCipher Support
• PSOProxy <= 0.91 remote buffer overflow (exploit)
  • From: li0n7
• Remote server crash in Team Factor <= 1.25
  • From: Luigi Auriemma
• Re: APC 9606 SmartSlot Web/SNMP management card "backdoor"
  • From: brandon pierce
• [SECURITY] [DSA 436-2] New mailman packages fix bug introduced in DSA 436-1
  • From: Matt Zimmerman
• FYI: CAIF Format Specification
  • From: Oliver Goebel
• GateKeeper Pro 4.7 buffer overflow
  • From: Iván Rodriguez Almuiña
• RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)
  • From: Drew Copley
• LNSA-#2004-0003: Linux Kernel
  • From: Vincenzo Ciaglia
• LNSA-#2004-0002: Fetchmail 6.2.4 and earlier remote denial of service
  • From: Vincenzo Ciaglia
• Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)
  • From: http-equiv@xxxxxxxxxx
• is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)
  • From: Stuart Moore
• OpenLinux: Perl Safe.pm unsafe access
  • From: please_reply_to_security
• Bank of America contact
  • From: Lance James
• Re: SNMP community string disclosure in Linksys WAP55AG
  • From: Robbie Stone
• RE: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)
  • From: Drew Copley
• Remote Buffer Overflow in PSOProxy 0.91
  • From: Donato Ferrante
• Re: Remote Administrator 2.x: highly possible remote hole or backdoor
  • From: Pavel Levshin
• [CLA-2004:821] Conectiva Security Announcement - XFree86
  • From: Conectiva Updates
• RE: Remote Administrator 2.x: highly possible remote hole or back door
  • From: mgotts
• Re: SNMP community string disclosure in Linksys WAP55AG
  • From: Nicolai van der Smagt
• Hotfix for new mremap vulnerability
  • From: Pavel harry_x Palát
• article: Theft of Client Information at a Major Israeli Bank's "Information Fortress".
  • From: Gadi Evron
• fix for recently disclosed Oracle interval conversion overflows?
  • From: Marc Bejarano
• [CLA-2004:820] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• [SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64)
  • From: Martin Schulze
• [SECURITY] [DSA 443-1] New xfree86 packages fix multiple vulnerabilities
  • From: Matt Zimmerman
• OpenLinux: Multiple vulnerabilities were discovered in the saned daemon
  • From: please_reply_to_security
• NetBSD Security Advisory 2004-002: Inconsistent IPv6 path MTU discovery handling
  • From: NetBSD Security-Officer
• NetBSD Security Advisory 2004-003: OpenSSL 0.9.6 ASN.1 parser vulnerability
  • From: NetBSD Security-Officer
• EEYE: ZoneLabs SMTP Processing Buffer Overflow
  • From: Marc Maiffret
• SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:005)
  • From: Thomas Biege
• OpenLinux: Fetchmail 6.2.4 and earlier remote dennial of service
  • From: please_reply_to_security
• PGP signatures on recent NetBSD Security Advisories
  • From: NetBSD Security-Officer
• LiveJournal XSS
  • From: Joshua Miller
• Re: SNMP community string disclosure in Linksys WAP55AG
  • From: Hugo van der Kooij
• RE: Remote Administrator 2.x: highly possible remote hole or back door
  • From: LordInfidel
• Re: Microsoft ASN.1 (Half a sploit)
  • From: Joshua Levitsky
• OpenLinux: Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2
  • From: please_reply_to_security
• Re: [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities
  • From: Ulrich Keil
• Re: ASN.1 vulnerability -is- on Win98
  • From: Joshua Levitsky
• OpenLinux: mpg123 remote denial of service and heap-based buffer overflow
  • From: please_reply_to_security
• Re: Second critical mremap() bug found in all Linux kernels
  • From: Jared M Breland
• Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/")
  • From: Peter J. Holzer
• NetBSD Security Advisory 2004-004: shmat reference counting bug
  • From: NetBSD Security-Officer
• RE: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled.
  • From: Miskell, Craig
• RE: Second critical mremap() bug found in all Linux kernels
  • From: tlarholm
• Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled.
  • From: Keith Clifton
• NetBSD Security Advisory 2004-001: Insufficient packet validation in racoon IKE daemon
  • From: NetBSD Security-Officer
• RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution
  • From: Thor Larholm
• Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled.
  • From: David Monosov
• iMail 8.05 LDAP service remote exploit
  • From: Iván Rodriguez Almuiña
• Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS
  • From: Tom
• RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges
  • From: first last
• [SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)
  • From: Martin Schulze
• RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges
  • From: Alun Jones
• PunkBuster SQL Injection Attack
  • From: Just1n T1mberlake
• APC Security Advisory - Static factory password vulnerability
  • From: security.advisory
• Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability
  • From: Zone Labs Product Security
• Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS
  • From: Keith Clifton
• Re: Second critical mremap() bug found in all Linux kernels
  • From: Dan Yefimov
• RE: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability
  • From: kquest
• Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges
  • From: 3APA3A
• MDKSA-2004:014 - Updated metamail packages fix buffer overflow vulnerabilities
  • From: Mandrake Linux Security Team
• Aol Instant Messenger/Microsoft Internet Explorer remote code execution
  • From: Michael Evanchik
• Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS
  • From: Frank Louwers
• Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658)
  • From: K-OTiK Security
• Re: APC 9606 SmartSlot Web/SNMP management card "backdoor"
  • From: Charles R. Anderson
• Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP
  • From: Florian Weimer
• ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro)
  • From: ZetaLabs
• Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS
  • From: Thomas M. Payerle
• Re: ASN.1 telephony critical infrastructure warning - VOIP
  • From: RJ Auburn
• Re: ASN.1 telephony critical infrastructure warning - VOIP
  • From: Michael H. Warfield
• Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP
  • From: Michael Samuel
• Re: AIX password enumeration possible
  • From: Darren Tucker
• Multiple WinXP kernel vulns can give user mode programs kernel mode privileges
  • From: first last
• Re[2]: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP
  • From: 3APA3A
• Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS
  • From: James Green
• Smallftpd 1.0.3 DoS
  • From: intuit e.b.
• bid: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability
  • From: kquest
• Re: Misinformation in Security Advisories (ASN.1)
  • From: Slawek
• Re: APC 9606 SmartSlot Web/SNMP management card "backdoor"
  • From: Fredrik Björk
• Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities
  • From: Massimo Arrigoni
• article: Alleged Trojan horse in Israeli Anti-Ballistic Missile System
  • From: Gadi Evron
• metamail format string bugs and buffer overflows
  • From: Ulf Härnhammar
• TSLSA-2004-0007 - kernel
  • From: Trustix Security Advisor
• [SECURITY] [DSA 441-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)
  • From: Martin Schulze
• OT: reports of a Trojan horse in the Arrow project
  • From: Gadi Evron
• ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files retrieving
  • From: ZetaLabs
• Re: Second critical mremap() bug found in all Linux kernels
  • From: Steve Bremer
• SNMP community string disclosure in Linksys WAP55AG
  • From: NN Poster
• [SECURITY] [DSA 440-1] New Linux 2.4.17 packages fix several local root exploits (powerpc/apus)
  • From: Martin Schulze
• Re: Microsoft ASN.1 (Half a sploit)
  • From: WebHead
• [SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc)
  • From: Martin Schulze
• WebCortex Webstores2000 version 6.0 multiple security vulnerabilities
  • From: Nick Gudov
• Remote Administrator 2.x: highly possible remote hole or backdoor
  • From: Pavel Levshin
• [SECURITY] [DSA 439-1] New Linux 2.4.16 packages fix several local root exploits (arm)
  • From: Martin Schulze
• [slackware-security] metamail security update (SSA:2004-049-02)
  • From: Slackware Security Team
• [slackware-security] Kernel security update (SSA:2004-049-01)
  • From: Slackware Security Team
• [ GLSA 200402-07 ] Clamav 0.65 DoS vulnerability
  • From: Tim Yamin
• [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities
  • From: bugzilla
• EarlyImpact ProductCart shopping cart software multiple security vulnerabilities
  • From: S-Quadra Security Research
• CesarFTP 0.99 : 100% employment of computer resources
  • From: intuit e.b.
• Second critical mremap() bug found in all Linux kernels
  • From: Paul Starzetz