Bugtraq

• Thread Index

• GLSA: libpng
  • From: Daniel Ahlberg
• [VSA0303] Half-Life StatsMe remote (root) hole
  • From: VOID.AT Security
• Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin
  • From: 3APA3A
• Mambo Site Server Remote Code Execution
  • From: mindwarper
• [VSA0305] HLTV remote DoS
  • From: VOID.AT Security
• [VSA0304] Half-Life Client remote hole via Adminmod plugin
  • From: VOID.AT Security
• [VSA0301] Half-Life Clanmod remote (root) hole
  • From: VOID.AT Security
• More information regarding Etherleak
  • From: Ofir Arkin
• BRS WebWeaver FTP Server vulnerabilities
  • From: euronymous
• MDKSA-2003:003 - Updated dhcpcd packages fix character expansion vulnerability
  • From: Mandrake Linux Security Team
• MDKSA-2003:001 - Updated CUPS packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• Efficient Networks 5861 DSL Router
  • From: Greg Bolshaw
• Re: ps information leak in FreeBSD
  • From: Damien Miller
• WebIntelligence session hijacking vulnerability
  • From: Dirk Van Droogenbroeck
• Security Update: [CSSA-2003-001.0] Linux: fetchmail at-sign buffer overflow vulnerability
  • From: security
• IMP 2.x SQL injection vulnerabilities
  • From: Jouko Pynnonen
• Re: ps information leak in FreeBSD
  • From: Sean Kelly
• Netscape Browsers Vulnerabilities on IRIX
  • From: SGI Security Coordinator
• a.shopKart Shopping Cart remote vulnerabilities
  • From: Ignacio Vazquez
• Tanne Remote format string exploit (Proof of Concept)
  • From: dong-h0un yoU
• Re: Opentype font file causes Windows to restart.
  • From: Kim Scarborough
• FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc
  • From: FreeBSD Security Advisories
• KaZaA - Bad Zone
  • From: David Krum
• Re: Opentype font file causes Windows to restart.
  • From: Vess Nedevski
• Re: KaZaA - Bad Zone
  • From: tony
• GLSA: lcdproc
  • From: Daniel Ahlberg
• Re: Opentype font file causes Windows to restart.
  • From: Berend-Jan Wever
• GLSA: http-fetcher
  • From: Daniel Ahlberg
• Directory traversal bug in Communigate Pro 4's Webmail service
  • From: G.P.de.Boer
• Bookmar4U and Active PHP Bookmarks Vulnerabilities
  • From: itzhak
• Re: Opentype font file causes Windows to restart.
  • From: Mark Litchfield
• Re: ps information leak in FreeBSD
  • From: Sean Kelly
• Multiple Issues in Nettelephone Dialer
  • From: S G Masood
• GLSA: dhcpcd
  • From: Daniel Ahlberg
• Re: Longshine WLAN Access-Point LCS-883R VU#310201
  • From: heydowns
• Fw: Opentype font file causes Windows to restart.
  • From: Leonardo Rodrigues ( listas )
• GLSA: libmcrypt
  • From: Daniel Ahlberg
• Opentype font file causes Windows to restart.
  • From: Andrew
• A security vulnerability in S8Forum
  • From: nmsh_sa
• phpmynuke css and phpinfo() vuls
  • From: Mindwarper
• Re: ipfilter denial of service problem
  • From: Darren Reed
• Re: Opentype font file causes Windows to restart.
  • From: Steven Tucker
• Re: ipfilter denial of service problem
  • From: Russ Dill
• ps information leak in FreeBSD
  • From: Cache
• [INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library.
  • From: dong-h0un yoU
• S-plus /tmp usage
  • From: Paul Szabo
• Longshine WLAN Access-Point LCS-883R VU#310201
  • From: Lukas Grunwald
• PDS: Integer overflow in FreeBSD kernel
  • From: Joost Pol
• ps information leak in FreeBSD
  • From: Cache
• OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS
  • From: mmhs
• Remote root vuln in HSphere WebShell
  • From: Carl Livitt
• Re: [IPS] PUTTY SSH-Client Exploit
  • From: Owen Dunn
• CuteFTP: buffer overflow
  • From: D4rkGr3y
• WinAmp v.3.0: buffer overflow
  • From: D4rkGr3y
• AN HTTPd v.1.41e: DoS, CSS, real patch attack
  • From: D4rkGr3y
• OpenTopic security hole
  • From: Frog Man
• EServ/2.97 remote DoS
  • From: D4rkGr3y
• Re: Potential disclosure of sensitive information in Netscape 7.0 email client
  • From: Markus Gaugusch
• Multiple libmcrypt vulnerabilities
  • From: Ilia A.
• [RHSA-2002:270-16] Updated pine packages available
  • From: bugzilla
• Another way to bypass Integrity Protection Driver ('subst' vuln)
  • From: Jan Rutkowski
• Pedestal Software Security Notice
  • From: Keith Woodard
• fam Vulnerability Update
  • From: SGI Security Coordinator
• Solaris 2.x /usr/sbin/wall Advisory
  • From: Brant Roman
• [SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting
  • From: Martin Schulze
• JS Bug makes it possible to deliberately crash Pocket PC IE
  • From: Christopher Sogge Røtnes
• Re: JS Bug makes it possible to deliberately crash Pocket PC IE (fwd)
  • From: angus
• ical 3.7 remote dos
  • From: securma massine
• Re: Potential disclosure of sensitive information in Netscape 7.0 email client
  • From: Blud Clot
• [BUGZILLA] Security Advisory - remote database password disclosure
  • From: David Miller
• Re: Potential disclosure of sensitive information in Netscape 7.0 email client
  • From: Bartek Raszczyk
• Re: Filtering devices spotting
  • From: Darren Reed
• SuSE Security Announcement: fetchmail (SuSE-SA:2003:001)
  • From: Thomas Biege
• N/X (PHP)
  • From: Frog Man
• GLSA: xpdf
  • From: Daniel Ahlberg
• [SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem
  • From: Martin Schulze
• SuSE Security Announcement: mysql (SuSE-SA:2003:003)
  • From: Sebastian Krahmer
• GLSA: leafnode
  • From: Daniel Ahlberg
• SuSE Security Announcement: cups (SuSE-SA:2003:002)
  • From: Thomas Biege
• PEEL (PHP)
  • From: Frog Man
• [SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability
  • From: Martin Schulze
• Re: CITIBANK [CANADA]: INTERNET EXPLORER BROWSERS
  • From: Ben Laurie
• Potential disclosure of sensitive information in Netscape 7.0 email client
  • From: Michael Puchol
• Filtering devices spotting
  • From: Ed3f
• Updated "Secure Programming for Linux and Unix HOWTO" now available.
  • From: David Wheeler
• Wired.com: So Many Holes, So Few Hacks
  • From: Richard M. Smith
• Visual SourceSafe - Preliminary Observations
  • From: Joel Maslak
• CITIBANK [CANADA]: INTERNET EXPLORER BROWSERS
  • From: http-equiv@xxxxxxxxxx
• Multiple vulnerabilities found in PlatinumFTPserver V1.0.6
  • From: Dennis Rand
• [SECURITY] [DSA 218-1] New bugzilla packages fix cross site scripting problem
  • From: Martin Schulze
• Leafnode security announcement SA:2002:01
  • From: Matthias Andree
• Potential DOS attack with Web-CyrAdm.
  • From: Casper Aleva
• GLSA: cups
  • From: Daniel Ahlberg
• GLSA: openldap
  • From: Daniel Ahlberg
• Telindus 112x ADSL Router - Weak Password Encryption
  • From: eflorio
• PHRACK #60 HAS BEEN RELEASED
  • From: phrackstaff
• Gallery v1.3.2 allows remote exploit (fixed in 1.3.3)
  • From: Bharat Mediratta
• [IPS] PUTTY SSH-Client Exploit
  • From: Daniel Alcántara de la Hoz
• GLSA: cyrus-sasl
  • From: Daniel Ahlberg
• Buffer overflow in PHP "wordwrap" function
  • From: David F. Skoll
• [CLA-2002:557] Conectiva Linux Security Announcement - cyrus-imapd
  • From: secure
• [GIS 2002101601] SkyStream Admin Shell Privilege Escalation.
  • From: Global InterSec Research
• [SECURITY] [DSA 217-1] New typespeed packages fix buffer overflow
  • From: Martin Schulze
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: Andreas Tscharner
• Re: Solaris priocntl exploit - Sol8 patches available
  • From: Scott Howard
• (MSIE)A rather old trick for web server is now played on MSIE.
  • From: Liu Die Yu
• Full Disclosure: Windows File Protection Old Security Catalog Vulnerability
  • From: FORENSICS.ORG Security Coordinator
• Full Disclosure: Windows File Protection Arbitrary Certificate Chain Vulnerability
  • From: FORENSICS.ORG Security Coordinator
• [SECURITY] [DSA 216-1] New fetchmail packages fix buffer overflow
  • From: Martin Schulze
• [SNS Advisory No.60 rev.2] Windows XP Disclosure of Registered AP Information
  • From: snsadv@xxxxxxxxx
• iDEFENSE Security Advisory 12.23.02: Integer Overflow in pdftops
  • From: iDEFENSE Labs
• Re: Solaris priocntl exploit
  • From: Pavel Kankovsky
• Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6
  • From: jrodriga
• Re: KDE Security Advisory: Multiple vulnerabilities in KDE
  • From: Florian Weimer
• Re: 'printenv' XSS vulnerability
  • From: Marc Slemko
• Antwort: Openwebmail 1.71 remote root compromise
  • From: Stephan Sachweh
• junkbuster 2.0-1 proxy relaying spam
  • From: Andrew Daviel
• GLSA: kde-3.0.x
  • From: Daniel Ahlberg
• PHPNuke 6.0 path disclosure [again]
  • From: Ing. Bernardo Lopez
• Hyperion FTP Server buffer overflow
  • From: securma massine
• Re: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)
  • From: Hacknisty
• zkfingerd remote exploit
  • From: security
• [SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution
  • From: Martin Schulze
• 'printenv' XSS vulnerability
  • From: Dr.Tek
• Re: KDE Security Advisory: Multiple vulnerabilities in KDE
  • From: fozzy
• Matlab /tmp usage
  • From: Paul Szabo
• Re: iDEFENSE Security Advisory 12.19.02: Multiple SecurityVulnerabilities in Common Unix Printing System (CUPS)
  • From: zen-parse
• Re: iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilitiesin Common Unix Printing System (CUPS)
  • From: Joe Testa
• RE: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)
  • From: Russell Garrett
• RE: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)
  • From: Richard Stanway
• KDE Security Advisory: Multiple vulnerabilities in KDE
  • From: Dirk Mueller
• XSS and PHP include bug in W-Agora
  • From: xatr0z
• Security Update: [CSSA-2002-059.0] Linux: multiple vulnerabilities in BIND (CERT CA-2002-31)
  • From: security
• Cisco Security Advisory: Cisco Security Advisory: SSH Malformed Packet Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: XSS and PHP include bug in W-Agora
  • From: Marc Druilhe
• [SECURITY] [DSA 214-1] New kdentwork packages fix buffer overflows
  • From: Martin Schulze
• Re: Foundstone Research Labs Advisory - Multiple Exploitable Buff er Overflows in Winamp (fwd)
  • From: Mischa Krilov
• RE: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)
  • From: Shutters, Mike
• PHP-Nuke mail CRLF Injection vulnerabilities
  • From: Ulf Harnhammar
• RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002)
  • From: NGSSoftware Insight Security Research
• GLSA: wget
  • From: Daniel Ahlberg
• nCipher Advisory #6: Access control defects in PKCS#11 keys
  • From: nCipher Support
• SPGpartenaires (PHP)
  • From: Frog Man
• SuSE Security Announcement: cyrus-imapd (SuSE-SA:2002:048)
  • From: Sebastian Krahmer
• [SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability
  • From: Tamer Sahin
• GLSA: canna
  • From: Daniel Ahlberg
• GLSA: perl
  • From: Daniel Ahlberg
• RE: Directory traversal vulnerabilities in several archivers processing .tar
  • From: konto mailingowe
• [RAZOR] Problems with mkstemp()
  • From: Michal Zalewski
• Web server vulnerability in Axis Network Cameras, Video Servers and DVRs
  • From: Axis Product Security
• iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)
  • From: iDEFENSE Labs
• [Fix] Openwebmail 1.71 remote root compromise
  • From: Dmitry Guyvoronsky
• Cisco IOS EIGRP Network DoS
  • From: FX
• RE: Password Hole Found In Webshots - (Webshots Confirmed)
  • From: Shutters, Mike
• TSLSA-2002-0083 - kernel
  • From: Trustix Secure Linux Advisor
• TSLSA-2002-0084 - tcpdump
  • From: Trustix Secure Linux Advisor
• TSLSA-2002-0087 - perl
  • From: Trustix Secure Linux Advisor
• TSLSA-2002-0085 - lynx-ssl
  • From: Trustix Secure Linux Advisor
• TSLSA-2002-0089 - wget
  • From: Trustix Secure Linux Advisor
• Re: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)
  • From: David Howe
• TSLSA-2002-0086 - mysql
  • From: Trustix Secure Linux Advisor
• Re: Directory traversal vulnerabilities in several archivers processing.tar
  • From: Stephen Samuel
• Re: Cisco IOS EIGRP Network DoS
  • From: Damir Rajnovic
• Multiple vulnerability in Enceladus Server
  • From: securma massine
• Openwebmail 1.71 remote root compromise
  • From: Dmitry Guyvoronsky
• WAnewsletter (PHP)
  • From: Frog Man
• [CLA-2002:556] Conectiva Linux Security Announcement - openldap
  • From: secure
• [SECURITY] [DSA 213-1] New libpng packages fix buffer overflow
  • From: Martin Schulze
• RE: Missing admin sql password in Okena StormWatch
  • From: Marcus Gavel
• Foundstone Research Labs Advisory - Multiple Exploitable BufferOverflows in Winamp (fwd)
  • From: Dave Ahmad
• Foundstone Research Labs Advisory - Exploitable Windows XP MediaFiles (fwd)
  • From: Dave Ahmad
• Historic blackhat archives exposed
  • From: Pry
• Re: export LD_LIBRARY_PATH in /etc/profile.d/* files
  • From: Antonomasia
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: Andreas Borchert
• RE: Directory traversal vulnerabilities in several archivers processing .tar
  • From: Andrew Kopp
• gfxboot allows boot password circumvention, SuSE 8.1 GRUB
  • From: Matthias Andree
• MDKSA-2002:068-1 - Updated apache packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• MDKSA-2002:087 - Updated MySQL packages fix multiple vulnerabilities
  • From: Mandrake Linux Security Team
• [securitydigest.org]: Changes for December 2002
  • From: Curator at Security Digest Archives
• Security Paper: Session Fixation Vulnerability in Web-based Applications
  • From: Mitja Kolsek (ACROS Lists)
• Missing admin sql password in Okena StormWatch
  • From: Marc Ruef
• Re: export LD_LIBRARY_PATH in /etc/profile.d/* files
  • From: mlh
• RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability
  • From: Michal Zalewski
• Directory traversal vulnerabilities in several archivers processing .tar
  • From: Florian Schafferhans
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: Valdis . Kletnieks
• Fwd: CERT Advisory CA-2002-36 Multiple Vulnerabilities in SSH Implementations
  • From: Muhammad Faisal Rauf Danka
• export LD_LIBRARY_PATH in /etc/profile.d/* files
  • From: rich
• Re: Directory traversal vulnerabilities in several archivers processing .tar
  • From: der Mouse
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: der Mouse
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: der Mouse
• [OpenPKG-SA-2002.016] OpenPKG Security Advisory (fetchmail)
  • From: OpenPKG
• Re: adelphia vulnerability within subnets
  • From: 0x90
• Re: [VulnWatch] Password Disclosure in Cryptainer
  • From: Kurt Seifried
• [RHSA-2002:293-09] Updated Fetchmail packages fix security vulnerability
  • From: bugzilla
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: Stefan Esser
• [RHSA-2002:228-11] Updated Net-SNMP packages fix security and other bugs
  • From: bugzilla
• [SECURITY] [DSA-212-1] Multiple MySQL vulnerabilities
  • From: Wichert Akkerman
• [CLA-2002:555] Conectiva Linux Security Announcement - MySQL
  • From: secure
• Macromedia Shockwave Flash Malformed Header Overflow #2
  • From: Marc Maiffret
• Captaris (Infinite) WebMail XSS
  • From: Pedram Amini
• Security Patchs for PHP Products
  • From: Frog Man
• [CLA-2002:553] Conectiva Linux Security Announcement - kernel 2.4
  • From: secure
• [CLA-2002:554] Conectiva Linux Security Announcement - fetchmail
  • From: secure
• RE: PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: Stefan Esser
• PFinger 0.7.8 format string vulnerability (#NISR16122002B)
  • From: NGSSoftware Insight Security Research
• zkfingerd 0.9.1 format string vulnerabilities (#NISR16122002A)
  • From: NGSSoftware Insight Security Research
• Re: Cross-site scripting vulnerability in CF 5.0
  • From: SecurityFocus
• Cross-site scripting vulnerability in CF 5.0
  • From: KiLL CoLe
• RE: Cross-site scripting vulnerability in CF 5.0
  • From: CORREIA, PATRICK
• R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors
  • From: Rapid 7 Security Advisories
• PHP-Nuke 6.0 : Path Disclosure & Cross Site Scripting
  • From: Frog Man
• [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)
  • From: OpenPKG
• GLSA: exim
  • From: Daniel Ahlberg
• [OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex)
  • From: OpenPKG
• PHP-Nuke code execution and XSS vulnerabilities
  • From: Ulf Harnhammar
• [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl)
  • From: OpenPKG
• Multiple vendors XML parser (and SOAP/WebServices server) Denialof Service attack using DTD
  • From: Amit Klein
• Password Disclosure in Cryptainer
  • From: K. K. Mookhey
• GLSA: mysql
  • From: Daniel Ahlberg
• GLSA: squirrelmail
  • From: Daniel Ahlberg
• GLSA: fetchmail
  • From: Daniel Ahlberg
• GLSA: mysql
  • From: Daniel Ahlberg
• MyPHPLinks (PHP) : SQL Injection
  • From: Frog Man
• FW: SQL Injection Solved
  • From: Louie Conceicao
• [CLA-2002:552] Conectiva Linux Security Announcement - wget
  • From: secure
• Directory Traversal Vulnerability in FTP Client on IRIX
  • From: SGI Security Coordinator
• RE: iDefense Security Advisory
  • From: David Endler
• Advisory 05/2002: Another Fetchmail Remote Vulnerability
  • From: Stefan Esser
• [ESA-20021213-033] Several MySQL vulnerabilities.
  • From: EnGarde Secure Linux
• Anyone can read all XOOPS private messages
  • From: Val Deux
• Advisory Title: iASP Remote Console Applet Allows Remote
  • From: ph33r
• Eserv remote denial of service
  • From: securma massine
• [SECURITY] [DSA 211-1] New mICQ packages fix denial of service
  • From: Martin Schulze
• Re: Password Hole Found In Webshots
  • From: Ian Nguyen
• [SECURITY] [DSA-210-1] lynx CRLF injection
  • From: Wichert Akkerman
• Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
  • From: Kurt Seifried
• iDefense Security Advisory
  • From: gobbles
• Adelphia Powerlink service vulnerable to man in the middle attacks by cable modem users.
  • From: 0x90
• XSS flaw found at "https://www.e-gold.com"
  • From: Liu Die Yu
• Password Hole Found In Webshots
  • From: Brian Carpenter
• [SECURITY] [DSA-209-1] two wget problems
  • From: Wichert Akkerman
• MDKSA-2002:086 - Updated wget packages fix directory traversal vulnerability
  • From: Mandrake Linux Security Team
• Re: Directory Traversal Vulnerabilities in FTP Clients
  • From: Stephen Samuel
• VisNetic WebSite XSS vulnerability through HTTP referer header
  • From: Ory Segal
• [SECURITY] [DSA 208-1] New Perl packages correct Safe handling
  • From: Martin Schulze
• Multiple Mambo Site Server sec-weaknesses
  • From: euronymous
• PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability
  • From: Marc Maiffret
• [RHSA-2002:222-21] Updated apache, httpd, and mod_ssl packages available
  • From: bugzilla
• Advisory 04/2002: Multiple MySQL vulnerabilities
  • From: Stefan Esser
• CERT Advisory CA-2002-35 Vulnerability in RaQ 4 Servers (fwd)
  • From: Muhammad Faisal Rauf Danka
• Security Update: [CSSA-2002-SCO.44] UnixWare 7.1.1 Open UNIX 8.0.0 : uudecode performs inadequate checks on user-specified output files
  • From: security
• MTPSR1-120 Firewall Proxy configuration software
  • From: UkR security team™
• Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
  • From: Rob klein Gunnewiek
• proftpd <=1.2.7rc3 DoS
  • From: Rob klein Gunnewiek
• Re: KunaniFTP-Server v.1.0.10 allows dictionary traversal
  • From: Alun Jones
• Denial of Service vulnerability in VisNetic Website
  • From: Peter Kruse
• Enceladus Server Suite traversal directory vulnerability
  • From: luca.ercoli@xxxxxxxxx
• [SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution
  • From: Martin Schulze
• Remote multiple vulnerability in apt-www-proxy.
  • From: dong-h0un U
• Input Validation Error in vbulletin 2.2.x
  • From: Dorin Balanica
• Re: Zeus Admin Server v4.1r2 index.fcgi XSS bug
  • From: Colin Watson
• Security Update: [CSSA-2002-058.0] Linux: buffer overflow in nss_ldap DNS SRV
  • From: security
• Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Directory Traversal Vulnerabilities in FTP Clients
  • From: Steven M. Christey
• Directory traversing bug in 'myServer' webserver.
  • From: dong-h0un U
• [SECURITY] [DSA-205-1] gtetrinet buffer overflows
  • From: Wichert Akkerman
• Re: XSS and Path Disclosure in UPB
  • From: Frog Man
• [SECURITY] [DSA-206-1] tcpdump BGP decoding error
  • From: Wichert Akkerman
• KunaniFTP-Server v.1.0.10 allows dictionary traversal
  • From: Zero-X www.lobnan.de Team
• RE: Sygate Personal Firewall can be shut down without a need to supply a password - although one is required
  • From: Seth Knox
• RE: Sygate Personal Firewall can be shut down without a need to supply a password - although one is required
  • From: Eitan Caspi
• MDKSA-2002:082-1 - Updated python packages fix local arbitrary code execution vulnerability
  • From: Mandrake Linux Security Team
• TFTP32 DOS
  • From: securma massine
• Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
  • From: Kurt Seifried
• Re: Cyrus SASL library buffer overflows
  • From: Matthias Andree
• Remote multiple vulnerability in apt-www-proxy.
  • From: dong-h0un U
• Unchecked buffer in PC-cillin
  • From: advisories@xxxxxxxxxxx
• [RHSA-2002:229-10] Updated wget packages fix directory traversal bug
  • From: bugzilla
• [RHSA-2002:246-18] Updated Canna packages fix vulnerabilities
  • From: bugzilla
• [RHSA-2002:196-19] Updated xinetd packages fix denial of service vulnerability
  • From: Derek Luce
• Security Update: [CSSA-2002-SCO.43] UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability
  • From: security
• Cyrus SASL library buffer overflows
  • From: Timo Sirainen
• [SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability
  • From: Tamer Sahin
• SECURITY.NNOV: more Ikonboard 3.1.1 crossite scriptings
  • From: 3APA3A
• Re: Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6 -and 3.7 Build 1190
  • From: Dr. Peter Bieringer
• XSS and Path Disclosure in UPB
  • From: euronymous
• Security Update: [CSSA-2002-057.0] Linux: groff pic buffer overflow
  • From: security
• APBoard-Bug
  • From: DNA ESC
• WebReflex Directory Traversal Vulnerability
  • From: luca.ercoli@xxxxxxxxx
• [SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency
  • From: Martin Schulze
• SuSE Security Announcement: OpenLDAP2 (SuSE-SA:2002:047)
  • From: Sebastian Krahmer
• Security Update: [CSSA-2002-056.0] Linux: apache vulnerabilities in shared memory, DNS, and ApacheBench
  • From: security
• RE: Sygate Personal Firewall can be shut down without a need to supply a password - although one is required
  • From: Russ
• Re: Local root vulnerability found in exim 4.x (and 3.x)
  • From: Tabor J. Wells
• Re: Local root vulnerability found in exim 4.x (and 3.x)
  • From: Tabor J. Wells
• RE: Sygate Personal Firewall can be shut down without a need to supply
  • From: Eitan Caspi
• Sygate Personal Firewall can be shut down without a need to supply
  • From: Seth Knox
• Re: [Fwd: [RHSA-2002:196-09] Updated xinetd packages fix denial ofservice vulnerability]
  • From: Ryan Cleary
• Re: TracerouteNG - never ending story
  • From: Thomas Biege
• Cobalt RaQ4 Remote root exploit
  • From: grazer
• [Fwd: [RHSA-2002:196-09] Updated xinetd packages fix denial ofservice vulnerability]
  • From: Dan Rowles
• Re: SquirrelMail v1.2.9 XSS bugs
  • From: Jonathan Angliss
• Cross-site Scripting Vulnerability in phpBB 2.0.3
  • From: Fabricio Angeletti
• Samba Security Vulnerability on IRIX
  • From: SGI Security Coordinator
• BIND Name Server DNS Spoofing Vulnerability on IRIX
  • From: SGI Security Coordinator
• Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6
  • From: Volker Tanger
• Multiple vulnerabilities in akfingerd
  • From: Gianni Tedesco
• Re: Fw: CERT Advisory CA-2002-34 Buffer Overflow in Solaris X Window Font Service
  • From: Jim Knoble
• Notes on MS02-068, extensive downplaying of severity
  • From: Thor Larholm
• [SECURITY] [DSA 204-1] New kdlibs packages fix arbitrary program execution
  • From: Martin Schulze
• Apache/Tomcat Denial Of Service And Information Leakage Vulnerability
  • From: alias
• Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow
  • From: security
• Sygate Personal Firewall can be shut down without a need to supply a password - although one is required
  • From: Eitan Caspi
• Multiple Vulnerabilities in BIND Name Service Daemon on IRIX
  • From: SGI Security Coordinator
• Buffer Overflow Vulnerability in X Font Server on IRIX
  • From: SGI Security Coordinator
• [RHSA-2002:254-05] Updated Webalizer packages fix vulnerability
  • From: bugzilla
• [RHSA-2002:220-40] Updated KDE packages fix security issues
  • From: bugzilla
• Security Update: [CSSA-2002-054.0] Linux: exploitable memory leak in ypserv
  • From: security
• Windows XP Disclosure of Registered AP Information
  • From: snsadv
• [CLA-2002:551] Conectiva Linux Security Announcement - pine
  • From: secure
• [SECURITY] [DSA 203-1] New smb2www packages fix arbitrary command execution
  • From: Martin Schulze
• SAP database local root via symlink
  • From: KF
• Local root vulnerability found in exim 4.x (and 3.x)
  • From: Wana Thomas
• Fw: CERT Advisory CA-2002-34 Buffer Overflow in Solaris X Window Font Service
  • From: Muhammad Faisal Rauf Danka
• Zeroo Webserver remote directory traversal exploit
  • From: Mike Cramp
• MDKSA-2002:084 - Updated pine packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• Re: Local Netfilter / IPTables IP Queue PID Wrap Flaw
  • From: James Morris
• [SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation
  • From: Martin Schulze
• SquirrelMail v1.2.9 XSS bugs
  • From: euronymous
• Poisonous Style for Dialog window turns the zone off.
  • From: Liu Die Yu
• Local Netfilter / IPTables IP Queue PID Wrap Flaw
  • From: James Morris
• [SNS Advisory No.59] Buffalo Wireless LAN Access Point Denial of Service Vulnerability (was Re: Buffalo AP Denial of Service)
  • From: snsadv
• MDKSA-2002:085 - Updated WindowMaker packages fix buffer overflow vulnerability
  • From: Mandrake Linux Security Team
• CORE-20021005: Vulnerability Report For Linksys Devices
  • From: Carlos Sarraute
• GLSA: pine
  • From: Daniel Ahlberg
• Bypassing Integrity Protection Driver (time vulnerability)
  • From: Jan Rutkowski
• [VU#317417] Denial of Service condition in vxworks ftpd/3com nbx
  • From: Michael S. Scheidell
• Cyrus Sieve / libSieve buffer overflow
  • From: Timo Sirainen
• ShopFactory shopping cart price manipulation
  • From: Richard van den Berg
• possible virus break in german exchange option of Inoculate IT 6.0
  • From: tigerblue
• [RHSA-2002:196-19] Updated xinetd packages fix denial of service vulnerability
  • From: bugzilla
• pre-login buffer overflow in Cyrus IMAP server
  • From: Timo Sirainen
• RE: Exploit for traceroute-nanog overflow
  • From: Carl Livitt
• Re: Solaris priocntl exploit
  • From: Jay Beale
• RE: Kerberos login sniffer and cracker for Windows 2000/XP
  • From: Jason Coombs
• Advisory: Webster HTTP Server
  • From: Matthew Murphy
• Advisory: Lawson Financials RDBMS Insecurity
  • From: John Eisenschmidt
• Lag Security Advisory - Com21 cable modem configuration file feedingvulnerability
  • From: David Laganière
• Re: [Full-Disclosure] Netscape Problems.
  • From: Ben Bucksch
• Potential Vuln in McAfee VirusScan 451
  • From: jari.helenius
• RE: CAIS-ALERT: Vulnerability in the sending requests control ofBIND
  • From: Vagner Sacramento
• [SECURITY] [DSA 201-1] New Free/SWan packages fix denial of service
  • From: Martin Schulze
• Cross-site Scripting Vulnerability in YaBB 1 Gold - SP1!
  • From: Fabricio Angeletti
• Re: CAIS-ALERT: Vulnerability in the sending requests control ofBIND
  • From: Robert Tracz
• Multiple pServ Remote Buffer Overflow Vulnerabilities
  • From: Matthew Murphy
• Thatware (PHP)
  • From: Frog Man
• RE: User downgraded from Administrator to User retains the ability to list other user's running tasks
  • From: Eitan Caspi
• RE: User downgraded from Administrator to User retains the ability to list other user's running tasks
  • From: John Tolmachofft
• Moby NetSuite POST Denial of Service Vulnerability
  • From: Matthew Murphy
• bogofilter contrib/bogopass temp file vulnerability
  • From: Matthias Andree
• [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba)
  • From: OpenPKG
• [ElectronicSouls] - BOOZT CGI Exploit
  • From: es
• re: Solaris priocntl exploit
  • From: Jeff Damens
• Exploit for traceroute-nanog overflow
  • From: Carl Livitt
• User downgraded from Administrator to User retains the ability to list other user's running tasks
  • From: Eitan Caspi
• RE: CAIS-ALERT: Vulnerability in the sending requests control ofBIND
  • From: Vagner Sacramento
• Security Patch for PortailPHP 0.99
  • From: vALDEUx
• Re: d_path() truncating excessive long path name vulnerability
  • From: Solar Designer
• Re: Solaris priocntl exploit
  • From: Casper Dik
• TracerouteNG - never ending story
  • From: Paul Starzetz
• Re: Netscape Problems.
  • From: zen-parse
• RE: Cracking OpenVMS passwords with John the Ripper
  • From: moose
• RE: CAIS-ALERT: Vulnerability in the sending requests control of BIND
  • From: Iván Arce
• On vulnerabilities in open and closed source products
  • From: Steven M. Christey
• Kerberos login sniffer and cracker for Windows 2000/XP
  • From: Arne Vidstrom
• MDKSA-2002:083 - Updated sendmail packages fix smrsh insecurities
  • From: Mandrake Linux Security Team
• Re: File reading vulnerable in PHP and MySQL (Local Exploit)
  • From: Dave Wilson
• Re: d_path() truncating excessive long path name vulnerability
  • From: Paul Szabo
• pWins Perl Web Server Directory Transversal Vulnerability
  • From: Matthew Wagenknecht
• Remote Multiple Buffer Overflow(s) vulnerability in Libcgi-tuxbr.
  • From: dong-h0un U
• ASI Sybase Security Alert: Buffer overflow in xp_freedll
  • From: Aaron C. Newman (Application Security, Inc.)
• Re: CAIS-ALERT: Vulnerability in the sending requests control of BIND
  • From: D. J. Bernstein
• Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software
  • From: Stuart Moore
• Solaris priocntl exploit
  • From: 蔺毅?
• [ESA-20021127-032] 'pine' version upgrade, security fixes.
  • From: EnGarde Secure Linux
• RE: CAIS-ALERT: Vulnerability in the sending requests control of BIND
  • From: Iván Arce
• ASI Sybase Security Alert: Buffer overflow in DROP DATABASE
  • From: Aaron C. Newman (Application Security, Inc.)
• Re: Solaris priocntl exploit
  • From: Casper Dik
• ASI Sybase Security Alert: Buffer overflow in DBCC CHECKVERIFY
  • From: Aaron C. Newman (Application Security, Inc.)
• [security bulletin] SSRT2301 - HP Tru64 UNIX uudecode PotentialSecurity Vulnerability (fwd)
  • From: Dave Ahmad
• [security bulletin] SSRT2385 OSIS V5.4 LDAP Module for SystemAuthentication Potential Security Vulnerability (fwd)
  • From: Dave Ahmad
• Cracking OpenVMS passwords with John the Ripper
  • From: Jean-loup Gailly
• Re: ISS Security Brief: Solaris fs.auto Remote CompromiseVulnerability (fwd)
  • From: Florian Weimer
• MDKSA-2002:081 - Updated samba packages fix potential root compromise
  • From: Mandrake Linux Security Team
• MDKSA-2002:082 - Updated python packages fix local arbitrary code execution vulnerability
  • From: Mandrake Linux Security Team
• Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C.
  • From: dong-h0un U
• FreeNews & News Evolution (PHP)
  • From: Frog Man
• Remote POST Buffer Overflow vulnerability in Pserv.
  • From: dong-h0un U
• [Security bulletin] SSRT2266 HP Tru64 UNIX IGMP Potential (DoS)Security Vulnerability (fwd)
  • From: Dave Ahmad
• File reading vulnerable in PHP and MySQL (Local Exploit)
  • From: Hai Nam Luke
• SFAD02-002: Calisto Internet Talker Remote DOS
  • From: subversive
• TSLSA-2002-0080 - samba
  • From: Trustix Secure Linux Advisor
• vBulletin XSS Injection Vulnerability
  • From: Sp.IC
• [Sec-Tec Advisory] Local scripting vulnerability in phpBB
  • From: Pete Foster
• Netscreen Malicious URL feature can be bypassed by fragmenting the request
  • From: zel
• SuSE Security Announcement: pine (SuSE-SA:2002:046)
  • From: Thomas Biege
• AIM Bug
  • From: Dave B.
• XSS vulnerability in Bugzilla if upgraded from 2.10 or earlier
  • From: David Miller
• Re: Netscape Problems.
  • From: Dave Aitel
• Netscape 4 Java buffer overflow
  • From: Jouko Pynnonen
• Linksys not fixed
  • From: Will
• Oracle TNS SEH Exploit
  • From: benjurry
• Netscape Problems.
  • From: zen-parse
• Potential H.323 Denial of Service
  • From: NetScreen Security Response Team
• [RHSA-2002:264-05] New kernel 2.2 packages fix local denial of service issue
  • From: bugzilla
• CAIS-ALERT: Vulnerability in the sending requests control of BIND
  • From: Vagner Sacramento
• 'Malicious-URL' Feature may be Circumvented Using IP Fragmentation
  • From: NetScreen Security Response Team
• BadBlue XSS/Information Disclosure Vulnerabilities
  • From: Matthew Murphy
• Immobilier 1 (PHP)
  • From: Frog Man
• RE: MS02-066 - fixes, gaps and incorrect statements
  • From: GreyMagic Software
• LibHTTPD Vulnerability and fix
  • From: David J. Hughes
• Predictable TCP Initial Sequence Numbers
  • From: NetScreen Security Response Team
• Web Server Creator - Web Portal 0.1 (PHP)
  • From: Frog Man
• ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability(fwd)
  • From: Dave Ahmad
• Multiple phpNuke Modules Vulnerable to Cross-Site Scripting
  • From: Matthew Murphy
• acFTP Authentication Issue
  • From: Matthew Murphy
• acFreeProxy Cross-Site Scripting Vulnerability/Possible DoS
  • From: Matthew Murphy
• [LSD] Java and JVM security vulnerabilities
  • From: Last Stage of Delirium
• iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability
  • From: David Endler
• Re: Alert: Microsoft Security Bulletin - MS02-066
  • From: Lise
• Remote Heap malloc/free & multiple Overflow vulnerability in WSMP3.
  • From: dong-h0un U
• CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS (fwd)
  • From: Dave Ahmad
• iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers
  • From: David Endler
• UPDATE: Linksys router vulnerability (add'l models affected)
  • From: Seth Bromberger
• Allied Telesyn switches & routers vulnerability
  • From: Oleg A. Lebedev
• RE: (MSIE) -"dialogArguments" (extended)
  • From: GreyMagic Software
• Cisco Security Advisory: Cisco PIX Multiple Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• GLSA: gtetrinet
  • From: Daniel Ahlberg
• [ESA-20021122-031] php upgrade, security fixes
  • From: EnGarde Secure Linux
• [ESA-20021122-030] local kernel vulnerabilities
  • From: EnGarde Secure Linux
• Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002)
  • From: NGSSoftware Insight Security Research
• [CLA-2002:550] Conectiva Linux Security Announcement - samba
  • From: secure
• [RHSA-2002:266-05] New samba packages available to fix potential security vulnerability
  • From: bugzilla
• ClearCase DoS vulnerabilty
  • From: marek . rouchal
• Sun Security Bulletin #00220
  • From: Matt Selsky
• GLSA: courier
  • From: Daniel Ahlberg
• Opera 6.03/Linux crashes on HTTPS over Squid Proxy on a site
  • From: Peter Bieringer
• Open WebMail 1.71 "background" magic info
  • From: FreeBSDbr Bugtraq DataBase
• Security Update: [CSSA-2002-052.0] Linux: sendmail smrsh bypass vulnerabilities
  • From: security
• XSS bug in vBulletin
  • From: Arab VieruZ
• GLSA: samba
  • From: Daniel Ahlberg
• GLSA: php
  • From: Daniel Ahlberg
• SuSE Security Announcement: samba (SuSE-SA:2002:045)
  • From: Roman Drahtmueller
• [OpenBSD] [syslogd] false src-IP when logging to remote syslogd
  • From: Torsten Valentin
• MDKSA-2002:080 - Updated kdenetwork packages fix remote command execution vulnerabilites
  • From: Mandrake Linux Security Team
• iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File
  • From: David Endler
• Re: [Full-Disclosure] Security Update: [CSSA-2002-050.0] Linux: tcpdump denial-of-service in print-bgp.c
  • From: Silvio Cesare
• Zeroo Folder Traversal Vulnerability
  • From: mattmurphy@xxxxxxxxx
• Clipboard in QNX Photon
  • From: One Semicolon
• MDKSA-2002:079 - Updated kdelibs packages fix remote command execution vulnerabilites
  • From: Mandrake Linux Security Team
• Security Update: [CSSA-2002-049.0] Linux: lynx CRLF injection vulnerability
  • From: security
• Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability
  • From: security
• Updated ypserv packages fix memory leak
  • From: Mandrake Linux Security Team
• Update: iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability
  • From: David Endler
• XSS bug in phpBB
  • From: Arab VieruZ
• RE: AIM 5.1.3036 buffer overflow
  • From: josh
• Re: When scrubbing secrets in memory doesn't work
  • From: Richard Moore
• TFTPD32 Directory Traversal Vulnerability
  • From: Aviram Jenik
• Linksys router vulnerability
  • From: Seth Bromberger
• iPlanet WebServer, remote root compromise
  • From: labs@NGSEC
• (MSIE) when parent gives his son bad things ;) --"dialogArguments " again
  • From: Liu Die Yu
• Multiple incorrect permissions in QNX.
  • From: One Semicolon
• Re: (MSIE) when parent gives his son bad things ;) --"dialogArguments " again
  • From: Dave Ahmad
• RE: Exploit code for IP Smart Spoofing
  • From: shannong
• Re: GNU GCC: Optimizer Removes Code Necessary for Security
  • From: Florian Weimer
• Update to LOM's advisory
  • From: 3APA3A
• [SECURITY] [DSA 199-1] New mhonarc packages fix cross site scripting
  • From: Martin Schulze
• Re: When scrubbing secrets in memory doesn't work
  • From: Peter Watkins
• LOM: Multiple vulnerabilities in Macromedia Flash ActiveX
  • From: 3APA3A
• TSLSA-2002-0077 - kernel
  • From: Trustix Secure Linux Advisor
• GNU GCC: Optimizer Removes Code Necessary for Security
  • From: Joseph Wagner
• Re: LOM: Multiple vulnerabilities in Macromedia Flash ActiveX
  • From: Troy Evans
• [SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service
  • From: Martin Schulze
• XOOPS WebChat module - patch UPDATE
  • From: Val Deux
• PlanetWeb Web Server Buffer Overflow in processing GET requests
  • From: PlanetDNS Support
• [CLA-2002:549] Conectiva Linux Security Announcement - dhcpcd
  • From: secure
• Re: When scrubbing secrets in memory doesn't work
  • From: Florian Weimer
• TFTPD32 Buffer Overflow Vulnerability (Long filename)
  • From: Aviram Jenik
• MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-
  • From: Ketil Braun Larsen
• [tcpdump-announce] initial comments on trojan attack (fwd)
  • From: Jonas Eriksson
• Re: When scrubbing secrets in memory doesn't work
  • From: Nicholas Weaver
• patch for named buffer overflow now available (fwd)
  • From: Jonas Eriksson
• bind 8 info update regarding ISS
  • From: mark_sala
• Re: Bind 8 bug experience
  • From: Paul Theodoropoulos
• [SECURITY] [DSA 197-1] New sqwebmail packages fix local information exposure
  • From: Martin Schulze
• NBActiveX Sure ActiveX Big Vulnerability
  • From: Webmaster, Lorenzo Hernandez Garcia-Hierro
• [RHSA-2002:262-07] New kernel fixes local denial of service issue
  • From: bugzilla
• Security Update: [CSSA-2002-047.0] Linux: KDE SSL and XSS vulnerabilities
  • From: security
• Remote Buffer Overflow vulnerability in Zeroo HTTP Server.
  • From: dong-h0un U
• FreeBSD Security Advisory FreeBSD-SA-02:41.smrsh [REVISED]
  • From: FreeBSD Security Advisories
• Security Update: [CSSA-2002-046.0] Linux: buffer overflows and other security issues in squid
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-02:43.bind [REVISED]
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA-196-1] New BIND packages fix several vulnerabilities
  • From: Daniel Jacobowitz
• [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)
  • From: OpenPKG
• Security holes... Who cares?
  • From: Eric Rescorla
• Re: ZDnet forum: IE formatting local drive
  • From: Gossi The Dog
• Unofficial statement re: tcpdump and libpcap
  • From: Alan DeKok
• RE: When scrubbing secrets in memory doesn't work
  • From: Michael Wojcik
• Re: MS02-064 fix time
  • From: Steven M. Christey
• Re: i386 Linux kernel DoS
  • From: Jirka Kosina
• MDKSA-2002:077 - bind update
  • From: Mandrake Linux Security Team
• [CLA-2002:546] Conectiva Linux Security Announcement - bind
  • From: secure
• GLSA: kdenetwork
  • From: Daniel Ahlberg
• [CLA-2002:547] Conectiva Linux Security Announcement - syslog-ng
  • From: secure
• Better security through shame
  • From: Michael Bacarella
• Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.
  • From: zen-parse
• MS02-064 fix time
  • From: David Litchfield
• SuSE Security Announcement: Multiple vulnerabilities in BIND8 (SuSE-SA:2002:044)
  • From: Olaf Kirch
• Re: Bind 8 bug experience
  • From: Jeremy C. Reed
• [CLA-2002:545] Conectiva Linux Security Announcement - php4
  • From: secure
• Re: Bind 8 bug experience
  • From: Matthew Dixon Cowles
• [ESA-20021114-029] BIND buffer overflow, DoS attacks.
  • From: EnGarde Secure Linux
• JSP processor 1.1 information disclosure
  • From: Andy
• Office XP document numbers can be linked to individual machines
  • From: Woody Leonhard
• RE: ISS Security Advisory: Multiple Remote Vulnerabilities in BIND4 andBIND8 (fwd)
  • From: Russ
• Buffalo AP Denial of Service
  • From: Andrei Mikhailovsky
• RE: Exploit code for IP Smart Spoofing
  • From: Stephen Gill
• Security Update: [CSSA-2002-SCO.42] UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities
  • From: security
• SuSE Security Announcement: KDE lanbrowser vulnerability (SuSE-SA:2002:042)
  • From: Olaf Kirch
• FreeBSD Security Advisory FreeBSD-SA-02:41.smrsh
  • From: FreeBSD Security Advisories
• Opera 7 vulnerabilities
  • From: GreyMagic Software
• Security Update: [CSSA-2002-045.0] Linux: python insecure temporary files in os._execvpe
  • From: security
• Re: i386 Linux kernel DoS
  • From: Christophe Devine
• RE: Exploit code for IP Smart Spoofing
  • From: Stephen Gill
• Code Injection in phpBB Advanced Quick Reply Mod
  • From: Hai Nam Luke
• Perception LiteServe HTTP CGI Disclosure Vulnerability
  • From: mattmurphy@xxxxxxxxx
• IISPop remote DOS
  • From: securma massine
• Re: Bind 8 bug experience
  • From: Chris Adams
• RE: Opera 7 vulnerabilities
  • From: Thor Larholm
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Eric Stevens
• Remote Buffer Overflow vulnerability in Lib HTTPd.
  • From: dong-h0un U
• FreeBSD Security Advisory FreeBSD-SA-02:43.bind
  • From: FreeBSD Security Advisories
• GLSA: kdelibs
  • From: Daniel Ahlberg
• Re: Bind 8 bug experience
  • From: Glen Bishop
• Re: Bind 8 bug experience
  • From: Olaf Kirch
• Default SNMP community in Surecom Broadband Router
  • From: Andrei Mikhailovsky
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Ulf Harnhammar
• arp spoofing defence
  • From: Ilya Teterin
• Well known flaw in web cart software remains wide open
  • From: whitehat2004
• IceWarp 3.4.5 XSS *AGAIN*
  • From: DarC KonQuesT
• Re: When scrubbing secrets in memory doesn't work
  • From: Jan Echternach
• FreeBSD Security Advisory FreeBSD-SA-02:42.resolv
  • From: FreeBSD Security Advisories
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Seth Arnold
• Apache Security Vulnerabilities on IRIX
  • From: SGI Security Coordinator
• The Unix Auditor's Practical Handbook
  • From: K. K. Mookhey
• Bind 8 bug experience
  • From: Michael Brennen
• WebChat for XOOPS RC3 SQL INJECTION
  • From: vALDEUx
• Re: Linksys security contact
  • From: Jim Knoble
• KeyFocus KF Web Server File Disclosure Vulnerability
  • From: mattmurphy@xxxxxxxxx
• [SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
  • From: Martin Schulze
• Eudora 5.2 attachment spoof
  • From: Paul Szabo
• Gnujsp and Domino R5.0.10
  • From: YM Barusseau
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Steven M. Christey
• [SecurityOffice] Hyperion Ftp Server v2.8.1 Directory Traversal Vulnerability
  • From: Tamer Sahin
• RE: Motorola Cable Modem DOS
  • From: Chris Wilson
• [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities
  • From: Martin Schulze
• FreeBSD Security Advisory FreeBSD-SA-02:40.kadmind
  • From: FreeBSD Security Advisories
• ezmlm warning
  • From: bugtraq-help
• i386 Linux kernel DoS
  • From: Christophe Devine
• IRIX lpd daemon vulnerabilities via sendmail and dns
  • From: SGI Security Coordinator
• KDE Security Advisory: rlogin.protocol and telnet.protocol URL KIO Vulnerability
  • From: Andreas Pour
• KDE Security Advisory: resLISa / LISa Vulnerabilities
  • From: Andreas Pour
• NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2
  • From: Ed Reed
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: jasonk
• Remote Buffer Overflow vulnerability in Light HTTPd
  • From: dong-h0un U
• SuSE Security Announcement: SuSE-SA:2002:043 (traceroute-nanog/nkitb)
  • From: Thomas Biege
• Exploit code for IP Smart Spoofing
  • From: Laurent Licour
• Security Update: [CSSA-2002-042.0] Linux: libpng progressive image loading vulnerabilities and other buffer overflows
  • From: security
• [SecurityOffice] INweb Mail Server v2.01 Denial of Service Vulnerability
  • From: Tamer Sahin
• [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]
  • From: Aaron Howell
• Fresh hole in W3Mail (fwd)
  • From: Tim Brown
• EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities
  • From: Marc Maiffret
• ISS Security Advisory: Multiple Remote Vulnerabilities in BIND4 andBIND8 (fwd)
  • From: Dave Ahmad
• NOVL-2002-2963827 - Remote Manager Security Issue - NW5.1
  • From: Ed Reed
• GLSA: apache
  • From: Daniel Ahlberg
• RE: When scrubbing secrets in memory doesn't work
  • From: Michael Wojcik
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Jason Coombs
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Ulf Harnhammar
• Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks
  • From: security
• xoops Quizz Module IMG bug
  • From: magistrat
• Multiple vulnerabilities in Tiny HTTPd
  • From: dong-h0un U
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Jeremiah Grossman
• [RHSA-2002:213-06] New PHP packages fix vulnerability in mail function
  • From: bugzilla
• [SECURITY] [DSA 193-1] New klisa packages fix buffer overflow
  • From: Martin Schulze
• RE: How to execute programs with parameters in IE - Sandblad advisory #10
  • From: Russ
• Re: SuSE Security Announcement: perl-MailTools (SuSE-SA:2002:041)
  • From: Sebastian Krahmer
• iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa
  • From: David Endler
• Timing the Application of Security Patches for Optimal Uptime
  • From: Crispin Cowan
• [SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page
  • From: Martin Schulze
• RE: Motorola Cable Modem DOS
  • From: Dan Taylor Jr.
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Michael Howard
• Re: Cisco PIX SSH/telnet dDOS vulnerability CSCdy51810
  • From: Sharad Ahlawat
• NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow
  • From: Ed Reed
• Buffer Overflow in iSMTP Gateway
  • From: K. K. Mookhey
• benchmark tool for HTTP pages.
  • From: Tacettin Karadeniz
• Multiple Vuln. in Hotfoon.com's Hotfoon4.exe dialer
  • From: S G Masood
• Re: How to execute programs with parameters in IE - Sandblad advisory #10
  • From: Andreas Sandblad
• Layer 2 Analysis of WLAN Discovery Applications for Intrusion Detection
  • From: Joshua Wright
• GLSA: kgpg
  • From: Daniel Ahlberg
• [SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution
  • From: Martin Schulze
• Re: How to execute programs with parameters in IE - Sandblad advisory #10
  • From: hysterix1
• RhinoSoft Serv-U FTP Anonymous Remote DoS Vulnerability
  • From: [secondmotion]-Matt Thompson
• Securing OWA on public computers.
  • From: Alex T.
• Technical information about unpatched MS Java vulnerabilities
  • From: Jouko Pynnonen
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Justin King
• XSS in Postnuke Rogue release (0.72)
  • From: Muhammad Faisal Rauf Danka
• Zeus Admin Server v4.1r2 index.fcgi XSS bug
  • From: euronymous
• Finding Vendor Security Contacts
  • From: Ed Ravin
• Cisco PIX SSH/telnet dDOS vulnerability CSCdy51810
  • From: Nils Reichen
• Re: Remote pine Denial of Service
  • From: Erik Parker
• Re: When scrubbing secrets in memory doesn't work
  • From: Michael Zimmermann
• Potential Denial of Service Vulnerability in IRIX RPC-based libc
  • From: SGI Security Coordinator
• Re: Motorola Cable Modem DOS
  • From: Peter Arnts
• Oracle iSQL*Plus buffer Overflow..
  • From: deadbeat
• NetBSD Security Advisory 2002-024: IPFilter FTP proxy
  • From: NetBSD Security Officer
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: tenty
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: Tollef Fog Heen
• Re: Help Please
  • From: Patrick Oonk
• Re: [VulnWatch] Netscreen SSH1 CRC32 Compensation Denial of service
  • From: quentyn
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: Alex Harasic
• Re: PHP-Nuke SQL Injection Vulnerability
  • From: Predrag Damnjanovic
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: Casper Dik
• LiteServe Directory Index Cross-Site Scripting
  • From: Matthew Murphy
• RE: A technique to mitigate cookie-stealing XSS attacks
  • From: Michael Howard
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: David Wagner
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: Thomas Sarlandie
• MDKSA-2002:075 - nss_ldap update
  • From: Mandrake Linux Security Team
• MDKSA-2002:076 - perl-MailTools update
  • From: Mandrake Linux Security Team
• [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update
  • From: Vincent Danen
• Re: Bypassing website filter in SonicWall
  • From: Justin King
• iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS
  • From: David Endler
• iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server
  • From: David Endler
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Peter Watkins
• Re: RES: A technique to mitigate cookie-stealing XSS attacks
  • From: Florian Weimer
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Steven M. Christey
• Re: How to execute programs with parameters in IE - Sandblad advisory #10
  • From: Gert Fokkema
• Re: How to execute programs with parameters in IE - Sandblad advisory #10
  • From: jelmer
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Florian Weimer
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Nick Simicich
• Re: When scrubbing secrets in memory doesn't work
  • From: Valdis . Kletnieks
• RE: Motorola Cable Modem DOS
  • From: Fulton Preston
• Re: Yahoo Messenger: Invisible User Detect
  • From: Chris Caydes
• RES: A technique to mitigate cookie-stealing XSS attacks
  • From: AQBARROS
• Re: Remote pine Denial of Service
  • From: Erik Parker
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Matthew Collins
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: Hakan Carlsson
• Re: When scrubbing secrets in memory doesn't work
  • From: Andy Polyakov
• Re: Accesspoints disclose wep keys, password and mac filter (fwd)
  • From: informatik.koerfer
• Vulnerability in Cutecast Forum v1.2
  • From: Zero-X www.lobnan.de Team
• Re: A technique to mitigate cookie-stealing XSS attacks
  • From: Valdis . Kletnieks
• Help Please
  • From: Mark Litchfield
• [RHSA-2002:197-09] Updated glibc packages fix vulnerabilities in resolver
  • From: bugzilla
• [SECURITY] [DSA 191-1] New squirrelmail packages fix cross site scripting bugs
  • From: Martin Schulze
• Lotus Domino HTTP Server security issue
  • From: Frank Perreault
• [RHSA-2002:242-06] Updated kerberos packages available
  • From: bugzilla