Bugtraq
[Prev Page][Next Page]
Re: Opentype font file causes Windows to restart.,
Kaspar Brand
Message not available
Re: Opentype font file causes Windows to restart.,
Floyd Russell
<Possible follow-ups>
Fw: Opentype font file causes Windows to restart.,
Leonardo Rodrigues ( listas )
Re: Opentype font file causes Windows to restart.,
Vess Nedevski
Re: Opentype font file causes Windows to restart.,
dildog
RE: Opentype font file causes Windows to restart.,
Ben Naylor
RE: Opentype font file causes Windows to restart.,
Discini, Sonny
RE: Opentype font file causes Windows to restart.,
Armstrong, Richard
A security vulnerability in S8Forum,
nmsh_sa
phpmynuke css and phpinfo() vuls,
Mindwarper
[INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library.,
dong-h0un yoU
S-plus /tmp usage,
Paul Szabo
Longshine WLAN Access-Point LCS-883R VU#310201,
Lukas Grunwald
PDS: Integer overflow in FreeBSD kernel,
Joost Pol
ps information leak in FreeBSD,
Cache
OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS,
mmhs
Remote root vuln in HSphere WebShell,
Carl Livitt
CuteFTP: buffer overflow,
D4rkGr3y
WinAmp v.3.0: buffer overflow,
D4rkGr3y
AN HTTPd v.1.41e: DoS, CSS, real patch attack,
D4rkGr3y
OpenTopic security hole,
Frog Man
EServ/2.97 remote DoS,
D4rkGr3y
Multiple libmcrypt vulnerabilities,
Ilia A.
[RHSA-2002:270-16] Updated pine packages available,
bugzilla
Another way to bypass Integrity Protection Driver ('subst' vuln),
Jan Rutkowski
Pedestal Software Security Notice,
Keith Woodard
fam Vulnerability Update,
SGI Security Coordinator
Solaris 2.x /usr/sbin/wall Advisory,
Brant Roman
[SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting,
Martin Schulze
JS Bug makes it possible to deliberately crash Pocket PC IE,
Christopher Sogge Røtnes
Re: JS Bug makes it possible to deliberately crash Pocket PC IE (fwd),
angus
ical 3.7 remote dos,
securma massine
Re: Potential disclosure of sensitive information in Netscape 7.0 email client,
Blud Clot
[BUGZILLA] Security Advisory - remote database password disclosure,
David Miller
SuSE Security Announcement: fetchmail (SuSE-SA:2003:001),
Thomas Biege
N/X (PHP),
Frog Man
GLSA: xpdf,
Daniel Ahlberg
[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem,
Martin Schulze
SuSE Security Announcement: mysql (SuSE-SA:2003:003),
Sebastian Krahmer
GLSA: leafnode,
Daniel Ahlberg
SuSE Security Announcement: cups (SuSE-SA:2003:002),
Thomas Biege
PEEL (PHP),
Frog Man
[SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability,
Martin Schulze
Potential disclosure of sensitive information in Netscape 7.0 email client,
Michael Puchol
Filtering devices spotting,
Ed3f
Updated "Secure Programming for Linux and Unix HOWTO" now available.,
David Wheeler
Wired.com: So Many Holes, So Few Hacks,
Richard M. Smith
Visual SourceSafe - Preliminary Observations,
Joel Maslak
CITIBANK [CANADA]: INTERNET EXPLORER BROWSERS,
http-equiv@xxxxxxxxxx
Multiple vulnerabilities found in PlatinumFTPserver V1.0.6,
Dennis Rand
[SECURITY] [DSA 218-1] New bugzilla packages fix cross site scripting problem,
Martin Schulze
Leafnode security announcement SA:2002:01,
Matthias Andree
Potential DOS attack with Web-CyrAdm.,
Casper Aleva
GLSA: cups,
Daniel Ahlberg
GLSA: openldap,
Daniel Ahlberg
Telindus 112x ADSL Router - Weak Password Encryption,
eflorio
PHRACK #60 HAS BEEN RELEASED,
phrackstaff
Gallery v1.3.2 allows remote exploit (fixed in 1.3.3),
Bharat Mediratta
[IPS] PUTTY SSH-Client Exploit,
Daniel Alcántara de la Hoz
GLSA: cyrus-sasl,
Daniel Ahlberg
Buffer overflow in PHP "wordwrap" function,
David F. Skoll
[CLA-2002:557] Conectiva Linux Security Announcement - cyrus-imapd,
secure
[GIS 2002101601] SkyStream Admin Shell Privilege Escalation.,
Global InterSec Research
[SECURITY] [DSA 217-1] New typespeed packages fix buffer overflow,
Martin Schulze
(MSIE)A rather old trick for web server is now played on MSIE.,
Liu Die Yu
Full Disclosure: Windows File Protection Old Security Catalog Vulnerability,
FORENSICS.ORG Security Coordinator
Full Disclosure: Windows File Protection Arbitrary Certificate Chain Vulnerability,
FORENSICS.ORG Security Coordinator
[SECURITY] [DSA 216-1] New fetchmail packages fix buffer overflow,
Martin Schulze
[SNS Advisory No.60 rev.2] Windows XP Disclosure of Registered AP Information,
snsadv@xxxxxxxxx
iDEFENSE Security Advisory 12.23.02: Integer Overflow in pdftops,
iDEFENSE Labs
Antwort: Openwebmail 1.71 remote root compromise,
Stephan Sachweh
junkbuster 2.0-1 proxy relaying spam,
Andrew Daviel
GLSA: kde-3.0.x,
Daniel Ahlberg
Hyperion FTP Server buffer overflow,
securma massine
zkfingerd remote exploit,
security
[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution,
Martin Schulze
'printenv' XSS vulnerability,
Dr.Tek
Matlab /tmp usage,
Paul Szabo
Re: iDEFENSE Security Advisory 12.19.02: Multiple SecurityVulnerabilities in Common Unix Printing System (CUPS),
zen-parse
Re: iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilitiesin Common Unix Printing System (CUPS),
Joe Testa
KDE Security Advisory: Multiple vulnerabilities in KDE,
Dirk Mueller
XSS and PHP include bug in W-Agora,
xatr0z
Security Update: [CSSA-2002-059.0] Linux: multiple vulnerabilities in BIND (CERT CA-2002-31),
security
Cisco Security Advisory: Cisco Security Advisory: SSH Malformed Packet Vulnerabilities,
Cisco Systems Product Security Incident Response Team
[SECURITY] [DSA 214-1] New kdentwork packages fix buffer overflows,
Martin Schulze
RE: Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd),
Shutters, Mike
PHP-Nuke mail CRLF Injection vulnerabilities,
Ulf Harnhammar
RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002),
NGSSoftware Insight Security Research
GLSA: wget,
Daniel Ahlberg
nCipher Advisory #6: Access control defects in PKCS#11 keys,
nCipher Support
SPGpartenaires (PHP),
Frog Man
SuSE Security Announcement: cyrus-imapd (SuSE-SA:2002:048),
Sebastian Krahmer
[SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability,
Tamer Sahin
GLSA: canna,
Daniel Ahlberg
GLSA: perl,
Daniel Ahlberg
[RAZOR] Problems with mkstemp(),
Michal Zalewski
Web server vulnerability in Axis Network Cameras, Video Servers and DVRs,
Axis Product Security
iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS),
iDEFENSE Labs
[Fix] Openwebmail 1.71 remote root compromise,
Dmitry Guyvoronsky
RE: Password Hole Found In Webshots - (Webshots Confirmed),
Shutters, Mike
TSLSA-2002-0083 - kernel,
Trustix Secure Linux Advisor
TSLSA-2002-0084 - tcpdump,
Trustix Secure Linux Advisor
TSLSA-2002-0087 - perl,
Trustix Secure Linux Advisor
TSLSA-2002-0085 - lynx-ssl,
Trustix Secure Linux Advisor
TSLSA-2002-0089 - wget,
Trustix Secure Linux Advisor
TSLSA-2002-0086 - mysql,
Trustix Secure Linux Advisor
Re: Cisco IOS EIGRP Network DoS,
Damir Rajnovic
Multiple vulnerability in Enceladus Server,
securma massine
Openwebmail 1.71 remote root compromise,
Dmitry Guyvoronsky
WAnewsletter (PHP),
Frog Man
[CLA-2002:556] Conectiva Linux Security Announcement - openldap,
secure
[SECURITY] [DSA 213-1] New libpng packages fix buffer overflow,
Martin Schulze
Foundstone Research Labs Advisory - Multiple Exploitable BufferOverflows in Winamp (fwd),
Dave Ahmad
Foundstone Research Labs Advisory - Exploitable Windows XP MediaFiles (fwd),
Dave Ahmad
Historic blackhat archives exposed,
Pry
gfxboot allows boot password circumvention, SuSE 8.1 GRUB,
Matthias Andree
MDKSA-2002:068-1 - Updated apache packages fix multiple vulnerabilities,
Mandrake Linux Security Team
MDKSA-2002:087 - Updated MySQL packages fix multiple vulnerabilities,
Mandrake Linux Security Team
[securitydigest.org]: Changes for December 2002,
Curator at Security Digest Archives
Security Paper: Session Fixation Vulnerability in Web-based Applications,
Mitja Kolsek (ACROS Lists)
Missing admin sql password in Okena StormWatch,
Marc Ruef
RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability,
Michal Zalewski
Directory traversal vulnerabilities in several archivers processing .tar,
Florian Schafferhans
Fwd: CERT Advisory CA-2002-36 Multiple Vulnerabilities in SSH Implementations,
Muhammad Faisal Rauf Danka
export LD_LIBRARY_PATH in /etc/profile.d/* files,
rich
[OpenPKG-SA-2002.016] OpenPKG Security Advisory (fetchmail),
OpenPKG
Re: adelphia vulnerability within subnets,
0x90
[RHSA-2002:293-09] Updated Fetchmail packages fix security vulnerability,
bugzilla
[RHSA-2002:228-11] Updated Net-SNMP packages fix security and other bugs,
bugzilla
[SECURITY] [DSA-212-1] Multiple MySQL vulnerabilities,
Wichert Akkerman
[CLA-2002:555] Conectiva Linux Security Announcement - MySQL,
secure
Macromedia Shockwave Flash Malformed Header Overflow #2,
Marc Maiffret
Captaris (Infinite) WebMail XSS,
Pedram Amini
Security Patchs for PHP Products,
Frog Man
[CLA-2002:553] Conectiva Linux Security Announcement - kernel 2.4,
secure
[CLA-2002:554] Conectiva Linux Security Announcement - fetchmail,
secure
PFinger 0.7.8 format string vulnerability (#NISR16122002B),
NGSSoftware Insight Security Research
zkfingerd 0.9.1 format string vulnerabilities (#NISR16122002A),
NGSSoftware Insight Security Research
RE: Cross-site scripting vulnerability in CF 5.0,
CORREIA, PATRICK
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors,
Rapid 7 Security Advisories
PHP-Nuke 6.0 : Path Disclosure & Cross Site Scripting,
Frog Man
[OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql),
OpenPKG
GLSA: exim,
Daniel Ahlberg
[OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex),
OpenPKG
PHP-Nuke code execution and XSS vulnerabilities,
Ulf Harnhammar
[OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl),
OpenPKG
Multiple vendors XML parser (and SOAP/WebServices server) Denialof Service attack using DTD,
Amit Klein
Password Disclosure in Cryptainer,
K. K. Mookhey
GLSA: squirrelmail,
Daniel Ahlberg
GLSA: mysql,
Daniel Ahlberg
MyPHPLinks (PHP) : SQL Injection,
Frog Man
FW: SQL Injection Solved,
Louie Conceicao
[CLA-2002:552] Conectiva Linux Security Announcement - wget,
secure
Directory Traversal Vulnerability in FTP Client on IRIX,
SGI Security Coordinator
Advisory 05/2002: Another Fetchmail Remote Vulnerability,
Stefan Esser
[ESA-20021213-033] Several MySQL vulnerabilities.,
EnGarde Secure Linux
Anyone can read all XOOPS private messages,
Val Deux
Eserv remote denial of service,
securma massine
[SECURITY] [DSA 211-1] New mICQ packages fix denial of service,
Martin Schulze
[SECURITY] [DSA-210-1] lynx CRLF injection,
Wichert Akkerman
iDefense Security Advisory,
gobbles
Adelphia Powerlink service vulnerable to man in the middle attacks by cable modem users.,
0x90
XSS flaw found at "https://www.e-gold.com",
Liu Die Yu
Password Hole Found In Webshots,
Brian Carpenter
[SECURITY] [DSA-209-1] two wget problems,
Wichert Akkerman
MDKSA-2002:086 - Updated wget packages fix directory traversal vulnerability,
Mandrake Linux Security Team
VisNetic WebSite XSS vulnerability through HTTP referer header,
Ory Segal
[SECURITY] [DSA 208-1] New Perl packages correct Safe handling,
Martin Schulze
Multiple Mambo Site Server sec-weaknesses,
euronymous
PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability,
Marc Maiffret
[RHSA-2002:222-21] Updated apache, httpd, and mod_ssl packages available,
bugzilla
Advisory 04/2002: Multiple MySQL vulnerabilities,
Stefan Esser
CERT Advisory CA-2002-35 Vulnerability in RaQ 4 Servers (fwd),
Muhammad Faisal Rauf Danka
Security Update: [CSSA-2002-SCO.44] UnixWare 7.1.1 Open UNIX 8.0.0 : uudecode performs inadequate checks on user-specified output files,
security
MTPSR1-120 Firewall Proxy configuration software,
UkR security team™
proftpd <=1.2.7rc3 DoS,
Rob klein Gunnewiek
Denial of Service vulnerability in VisNetic Website,
Peter Kruse
Enceladus Server Suite traversal directory vulnerability,
luca.ercoli@xxxxxxxxx
[SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution,
Martin Schulze
Security Update: [CSSA-2002-058.0] Linux: buffer overflow in nss_ldap DNS SRV,
security
Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability,
Cisco Systems Product Security Incident Response Team
Directory Traversal Vulnerabilities in FTP Clients,
Steven M. Christey
Directory traversing bug in 'myServer' webserver.,
dong-h0un U
[SECURITY] [DSA-205-1] gtetrinet buffer overflows,
Wichert Akkerman
[SECURITY] [DSA-206-1] tcpdump BGP decoding error,
Wichert Akkerman
KunaniFTP-Server v.1.0.10 allows dictionary traversal,
Zero-X www.lobnan.de Team
MDKSA-2002:082-1 - Updated python packages fix local arbitrary code execution vulnerability,
Mandrake Linux Security Team
TFTP32 DOS,
securma massine
Remote multiple vulnerability in apt-www-proxy.,
dong-h0un U
Unchecked buffer in PC-cillin,
advisories@xxxxxxxxxxx
[RHSA-2002:229-10] Updated wget packages fix directory traversal bug,
bugzilla
[RHSA-2002:246-18] Updated Canna packages fix vulnerabilities,
bugzilla
Security Update: [CSSA-2002-SCO.43] UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability,
security
Cyrus SASL library buffer overflows,
Timo Sirainen
[SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability,
Tamer Sahin
SECURITY.NNOV: more Ikonboard 3.1.1 crossite scriptings,
3APA3A
XSS and Path Disclosure in UPB,
euronymous
Security Update: [CSSA-2002-057.0] Linux: groff pic buffer overflow,
security
APBoard-Bug,
DNA ESC
WebReflex Directory Traversal Vulnerability,
luca.ercoli@xxxxxxxxx
[SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency,
Martin Schulze
SuSE Security Announcement: OpenLDAP2 (SuSE-SA:2002:047),
Sebastian Krahmer
Security Update: [CSSA-2002-056.0] Linux: apache vulnerabilities in shared memory, DNS, and ApacheBench,
security
Sygate Personal Firewall can be shut down without a need to supply,
Seth Knox
Cobalt RaQ4 Remote root exploit,
grazer
[Fwd: [RHSA-2002:196-09] Updated xinetd packages fix denial ofservice vulnerability],
Dan Rowles
Cross-site Scripting Vulnerability in phpBB 2.0.3,
Fabricio Angeletti
Samba Security Vulnerability on IRIX,
SGI Security Coordinator
BIND Name Server DNS Spoofing Vulnerability on IRIX,
SGI Security Coordinator
Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6,
Volker Tanger
Multiple vulnerabilities in akfingerd,
Gianni Tedesco
Notes on MS02-068, extensive downplaying of severity,
Thor Larholm
[SECURITY] [DSA 204-1] New kdlibs packages fix arbitrary program execution,
Martin Schulze
Apache/Tomcat Denial Of Service And Information Leakage Vulnerability,
alias
Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow,
security
Sygate Personal Firewall can be shut down without a need to supply a password - although one is required,
Eitan Caspi
Multiple Vulnerabilities in BIND Name Service Daemon on IRIX,
SGI Security Coordinator
Buffer Overflow Vulnerability in X Font Server on IRIX,
SGI Security Coordinator
[RHSA-2002:254-05] Updated Webalizer packages fix vulnerability,
bugzilla
[RHSA-2002:220-40] Updated KDE packages fix security issues,
bugzilla
Security Update: [CSSA-2002-054.0] Linux: exploitable memory leak in ypserv,
security
Windows XP Disclosure of Registered AP Information,
snsadv
[CLA-2002:551] Conectiva Linux Security Announcement - pine,
secure
[SECURITY] [DSA 203-1] New smb2www packages fix arbitrary command execution,
Martin Schulze
SAP database local root via symlink,
KF
Local root vulnerability found in exim 4.x (and 3.x),
Wana Thomas
Fw: CERT Advisory CA-2002-34 Buffer Overflow in Solaris X Window Font Service,
Muhammad Faisal Rauf Danka
Zeroo Webserver remote directory traversal exploit,
Mike Cramp
MDKSA-2002:084 - Updated pine packages fix buffer overflow vulnerability,
Mandrake Linux Security Team
[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation,
Martin Schulze
SquirrelMail v1.2.9 XSS bugs,
euronymous
Poisonous Style for Dialog window turns the zone off.,
Liu Die Yu
Local Netfilter / IPTables IP Queue PID Wrap Flaw,
James Morris
MDKSA-2002:085 - Updated WindowMaker packages fix buffer overflow vulnerability,
Mandrake Linux Security Team
CORE-20021005: Vulnerability Report For Linksys Devices,
Carlos Sarraute
GLSA: pine,
Daniel Ahlberg
Bypassing Integrity Protection Driver (time vulnerability),
Jan Rutkowski
[VU#317417] Denial of Service condition in vxworks ftpd/3com nbx,
Michael S. Scheidell
Cyrus Sieve / libSieve buffer overflow,
Timo Sirainen
ShopFactory shopping cart price manipulation,
Richard van den Berg
possible virus break in german exchange option of Inoculate IT 6.0,
tigerblue
[RHSA-2002:196-19] Updated xinetd packages fix denial of service vulnerability,
bugzilla
pre-login buffer overflow in Cyrus IMAP server,
Timo Sirainen
Advisory: Webster HTTP Server,
Matthew Murphy
Advisory: Lawson Financials RDBMS Insecurity,
John Eisenschmidt
Lag Security Advisory - Com21 cable modem configuration file feedingvulnerability,
David Laganière
Potential Vuln in McAfee VirusScan 451,
jari.helenius
[SECURITY] [DSA 201-1] New Free/SWan packages fix denial of service,
Martin Schulze
Re: CAIS-ALERT: Vulnerability in the sending requests control ofBIND,
Robert Tracz
Multiple pServ Remote Buffer Overflow Vulnerabilities,
Matthew Murphy
Thatware (PHP),
Frog Man
Moby NetSuite POST Denial of Service Vulnerability,
Matthew Murphy
bogofilter contrib/bogopass temp file vulnerability,
Matthias Andree
[OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba),
OpenPKG
[ElectronicSouls] - BOOZT CGI Exploit,
es
Exploit for traceroute-nanog overflow,
Carl Livitt
User downgraded from Administrator to User retains the ability to list other user's running tasks,
Eitan Caspi
Security Patch for PortailPHP 0.99,
vALDEUx
TracerouteNG - never ending story,
Paul Starzetz
On vulnerabilities in open and closed source products,
Steven M. Christey
Kerberos login sniffer and cracker for Windows 2000/XP,
Arne Vidstrom
MDKSA-2002:083 - Updated sendmail packages fix smrsh insecurities,
Mandrake Linux Security Team
pWins Perl Web Server Directory Transversal Vulnerability,
Matthew Wagenknecht
Remote Multiple Buffer Overflow(s) vulnerability in Libcgi-tuxbr.,
dong-h0un U
ASI Sybase Security Alert: Buffer overflow in xp_freedll,
Aaron C. Newman (Application Security, Inc.)
Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software,
Stuart Moore
Solaris priocntl exploit,
蔺毅?
[ESA-20021127-032] 'pine' version upgrade, security fixes.,
EnGarde Secure Linux
ASI Sybase Security Alert: Buffer overflow in DROP DATABASE,
Aaron C. Newman (Application Security, Inc.)
ASI Sybase Security Alert: Buffer overflow in DBCC CHECKVERIFY,
Aaron C. Newman (Application Security, Inc.)
[security bulletin] SSRT2301 - HP Tru64 UNIX uudecode PotentialSecurity Vulnerability (fwd),
Dave Ahmad
[security bulletin] SSRT2385 OSIS V5.4 LDAP Module for SystemAuthentication Potential Security Vulnerability (fwd),
Dave Ahmad
Cracking OpenVMS passwords with John the Ripper,
Jean-loup Gailly
MDKSA-2002:081 - Updated samba packages fix potential root compromise,
Mandrake Linux Security Team
MDKSA-2002:082 - Updated python packages fix local arbitrary code execution vulnerability,
Mandrake Linux Security Team
Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C.,
dong-h0un U
FreeNews & News Evolution (PHP),
Frog Man
Remote POST Buffer Overflow vulnerability in Pserv.,
dong-h0un U
[Security bulletin] SSRT2266 HP Tru64 UNIX IGMP Potential (DoS)Security Vulnerability (fwd),
Dave Ahmad
File reading vulnerable in PHP and MySQL (Local Exploit),
Hai Nam Luke
SFAD02-002: Calisto Internet Talker Remote DOS,
subversive
TSLSA-2002-0080 - samba,
Trustix Secure Linux Advisor
vBulletin XSS Injection Vulnerability,
Sp.IC
[Sec-Tec Advisory] Local scripting vulnerability in phpBB,
Pete Foster
Netscreen Malicious URL feature can be bypassed by fragmenting the request,
zel
SuSE Security Announcement: pine (SuSE-SA:2002:046),
Thomas Biege
AIM Bug,
Dave B.
XSS vulnerability in Bugzilla if upgraded from 2.10 or earlier,
David Miller
Netscape 4 Java buffer overflow,
Jouko Pynnonen
Linksys not fixed,
Will
Oracle TNS SEH Exploit,
benjurry
Netscape Problems.,
zen-parse
Potential H.323 Denial of Service,
NetScreen Security Response Team
[RHSA-2002:264-05] New kernel 2.2 packages fix local denial of service issue,
bugzilla
CAIS-ALERT: Vulnerability in the sending requests control of BIND,
Vagner Sacramento
'Malicious-URL' Feature may be Circumvented Using IP Fragmentation,
NetScreen Security Response Team
BadBlue XSS/Information Disclosure Vulnerabilities,
Matthew Murphy
Immobilier 1 (PHP),
Frog Man
LibHTTPD Vulnerability and fix,
David J. Hughes
Predictable TCP Initial Sequence Numbers,
NetScreen Security Response Team
Web Server Creator - Web Portal 0.1 (PHP),
Frog Man
ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability(fwd),
Dave Ahmad
Multiple phpNuke Modules Vulnerable to Cross-Site Scripting,
Matthew Murphy
acFTP Authentication Issue,
Matthew Murphy
acFreeProxy Cross-Site Scripting Vulnerability/Possible DoS,
Matthew Murphy
[LSD] Java and JVM security vulnerabilities,
Last Stage of Delirium
iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability,
David Endler
Re: Alert: Microsoft Security Bulletin - MS02-066,
Lise
Remote Heap malloc/free & multiple Overflow vulnerability in WSMP3.,
dong-h0un U
CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS (fwd),
Dave Ahmad
iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers,
David Endler
UPDATE: Linksys router vulnerability (add'l models affected),
Seth Bromberger
Allied Telesyn switches & routers vulnerability,
Oleg A. Lebedev
Cisco Security Advisory: Cisco PIX Multiple Vulnerabilities,
Cisco Systems Product Security Incident Response Team
GLSA: gtetrinet,
Daniel Ahlberg
[ESA-20021122-031] php upgrade, security fixes,
EnGarde Secure Linux
[ESA-20021122-030] local kernel vulnerabilities,
EnGarde Secure Linux
Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002),
NGSSoftware Insight Security Research
[CLA-2002:550] Conectiva Linux Security Announcement - samba,
secure
[RHSA-2002:266-05] New samba packages available to fix potential security vulnerability,
bugzilla
ClearCase DoS vulnerabilty,
marek . rouchal
Sun Security Bulletin #00220,
Matt Selsky
GLSA: courier,
Daniel Ahlberg
Opera 6.03/Linux crashes on HTTPS over Squid Proxy on a site,
Peter Bieringer
Open WebMail 1.71 "background" magic info,
FreeBSDbr Bugtraq DataBase
Security Update: [CSSA-2002-052.0] Linux: sendmail smrsh bypass vulnerabilities,
security
XSS bug in vBulletin,
Arab VieruZ
GLSA: samba,
Daniel Ahlberg
GLSA: php,
Daniel Ahlberg
SuSE Security Announcement: samba (SuSE-SA:2002:045),
Roman Drahtmueller
[OpenBSD] [syslogd] false src-IP when logging to remote syslogd,
Torsten Valentin
MDKSA-2002:080 - Updated kdenetwork packages fix remote command execution vulnerabilites,
Mandrake Linux Security Team
iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File,
David Endler
Re: [Full-Disclosure] Security Update: [CSSA-2002-050.0] Linux: tcpdump denial-of-service in print-bgp.c,
Silvio Cesare
Zeroo Folder Traversal Vulnerability,
mattmurphy@xxxxxxxxx
Clipboard in QNX Photon,
One Semicolon
MDKSA-2002:079 - Updated kdelibs packages fix remote command execution vulnerabilites,
Mandrake Linux Security Team
Security Update: [CSSA-2002-049.0] Linux: lynx CRLF injection vulnerability,
security
Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability,
security
Updated ypserv packages fix memory leak,
Mandrake Linux Security Team
Update: iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability,
David Endler
XSS bug in phpBB,
Arab VieruZ
RE: AIM 5.1.3036 buffer overflow,
josh
TFTPD32 Directory Traversal Vulnerability,
Aviram Jenik
Linksys router vulnerability,
Seth Bromberger
iPlanet WebServer, remote root compromise,
labs@NGSEC
(MSIE) when parent gives his son bad things ;) --"dialogArguments " again,
Liu Die Yu
Multiple incorrect permissions in QNX.,
One Semicolon
Update to LOM's advisory,
3APA3A
[SECURITY] [DSA 199-1] New mhonarc packages fix cross site scripting,
Martin Schulze
TSLSA-2002-0077 - kernel,
Trustix Secure Linux Advisor
GNU GCC: Optimizer Removes Code Necessary for Security,
Joseph Wagner
Re: LOM: Multiple vulnerabilities in Macromedia Flash ActiveX,
Troy Evans
[SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service,
Martin Schulze
XOOPS WebChat module - patch UPDATE,
Val Deux
PlanetWeb Web Server Buffer Overflow in processing GET requests,
PlanetDNS Support
[CLA-2002:549] Conectiva Linux Security Announcement - dhcpcd,
secure
TFTPD32 Buffer Overflow Vulnerability (Long filename),
Aviram Jenik
MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-,
Ketil Braun Larsen
[tcpdump-announce] initial comments on trojan attack (fwd),
Jonas Eriksson
patch for named buffer overflow now available (fwd),
Jonas Eriksson
bind 8 info update regarding ISS,
mark_sala
[SECURITY] [DSA 197-1] New sqwebmail packages fix local information exposure,
Martin Schulze
NBActiveX Sure ActiveX Big Vulnerability,
Webmaster, Lorenzo Hernandez Garcia-Hierro
[RHSA-2002:262-07] New kernel fixes local denial of service issue,
bugzilla
Security Update: [CSSA-2002-047.0] Linux: KDE SSL and XSS vulnerabilities,
security
Remote Buffer Overflow vulnerability in Zeroo HTTP Server.,
dong-h0un U
FreeBSD Security Advisory FreeBSD-SA-02:41.smrsh [REVISED],
FreeBSD Security Advisories
Security Update: [CSSA-2002-046.0] Linux: buffer overflows and other security issues in squid,
security
FreeBSD Security Advisory FreeBSD-SA-02:43.bind [REVISED],
FreeBSD Security Advisories
[SECURITY] [DSA-196-1] New BIND packages fix several vulnerabilities,
Daniel Jacobowitz
[OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8),
OpenPKG
Security holes... Who cares?,
Eric Rescorla
Re: ZDnet forum: IE formatting local drive,
Gossi The Dog
Unofficial statement re: tcpdump and libpcap,
Alan DeKok
MDKSA-2002:077 - bind update,
Mandrake Linux Security Team
[CLA-2002:546] Conectiva Linux Security Announcement - bind,
secure
GLSA: kdenetwork,
Daniel Ahlberg
[CLA-2002:547] Conectiva Linux Security Announcement - syslog-ng,
secure
Better security through shame,
Michael Bacarella
Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.,
zen-parse
MS02-064 fix time,
David Litchfield
SuSE Security Announcement: Multiple vulnerabilities in BIND8 (SuSE-SA:2002:044),
Olaf Kirch
[CLA-2002:545] Conectiva Linux Security Announcement - php4,
secure
[ESA-20021114-029] BIND buffer overflow, DoS attacks.,
EnGarde Secure Linux
JSP processor 1.1 information disclosure,
Andy
Office XP document numbers can be linked to individual machines,
Woody Leonhard
Buffalo AP Denial of Service,
Andrei Mikhailovsky
Security Update: [CSSA-2002-SCO.42] UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities,
security
SuSE Security Announcement: KDE lanbrowser vulnerability (SuSE-SA:2002:042),
Olaf Kirch
FreeBSD Security Advisory FreeBSD-SA-02:41.smrsh,
FreeBSD Security Advisories
Security Update: [CSSA-2002-045.0] Linux: python insecure temporary files in os._execvpe,
security
Code Injection in phpBB Advanced Quick Reply Mod,
Hai Nam Luke
Perception LiteServe HTTP CGI Disclosure Vulnerability,
mattmurphy@xxxxxxxxx
IISPop remote DOS,
securma massine
RE: Opera 7 vulnerabilities,
Thor Larholm
Remote Buffer Overflow vulnerability in Lib HTTPd.,
dong-h0un U
FreeBSD Security Advisory FreeBSD-SA-02:43.bind,
FreeBSD Security Advisories
GLSA: kdelibs,
Daniel Ahlberg
Default SNMP community in Surecom Broadband Router,
Andrei Mikhailovsky
arp spoofing defence,
Ilya Teterin
Well known flaw in web cart software remains wide open,
whitehat2004
IceWarp 3.4.5 XSS *AGAIN*,
DarC KonQuesT
FreeBSD Security Advisory FreeBSD-SA-02:42.resolv,
FreeBSD Security Advisories
Apache Security Vulnerabilities on IRIX,
SGI Security Coordinator
The Unix Auditor's Practical Handbook,
K. K. Mookhey
Bind 8 bug experience,
Michael Brennen
WebChat for XOOPS RC3 SQL INJECTION,
vALDEUx
KeyFocus KF Web Server File Disclosure Vulnerability,
mattmurphy@xxxxxxxxx
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows,
Martin Schulze
Eudora 5.2 attachment spoof,
Paul Szabo
Gnujsp and Domino R5.0.10,
YM Barusseau
[SecurityOffice] Hyperion Ftp Server v2.8.1 Directory Traversal Vulnerability,
Tamer Sahin
[SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities,
Martin Schulze
FreeBSD Security Advisory FreeBSD-SA-02:40.kadmind,
FreeBSD Security Advisories
i386 Linux kernel DoS,
Christophe Devine
IRIX lpd daemon vulnerabilities via sendmail and dns,
SGI Security Coordinator
KDE Security Advisory: rlogin.protocol and telnet.protocol URL KIO Vulnerability,
Andreas Pour
KDE Security Advisory: resLISa / LISa Vulnerabilities,
Andreas Pour
NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2,
Ed Reed
Remote Buffer Overflow vulnerability in Light HTTPd,
dong-h0un U
SuSE Security Announcement: SuSE-SA:2002:043 (traceroute-nanog/nkitb),
Thomas Biege
Exploit code for IP Smart Spoofing,
Laurent Licour
Security Update: [CSSA-2002-042.0] Linux: libpng progressive image loading vulnerabilities and other buffer overflows,
security
[SecurityOffice] INweb Mail Server v2.01 Denial of Service Vulnerability,
Tamer Sahin
[Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8],
Aaron Howell
Fresh hole in W3Mail (fwd),
Tim Brown
EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities,
Marc Maiffret
ISS Security Advisory: Multiple Remote Vulnerabilities in BIND4 andBIND8 (fwd),
Dave Ahmad
NOVL-2002-2963827 - Remote Manager Security Issue - NW5.1,
Ed Reed
Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks,
security
xoops Quizz Module IMG bug,
magistrat
Multiple vulnerabilities in Tiny HTTPd,
dong-h0un U
[RHSA-2002:213-06] New PHP packages fix vulnerability in mail function,
bugzilla
[SECURITY] [DSA 193-1] New klisa packages fix buffer overflow,
Martin Schulze
iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa,
David Endler
Timing the Application of Security Patches for Optimal Uptime,
Crispin Cowan
[SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page,
Martin Schulze
NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow,
Ed Reed
Buffer Overflow in iSMTP Gateway,
K. K. Mookhey
benchmark tool for HTTP pages.,
Tacettin Karadeniz
Multiple Vuln. in Hotfoon.com's Hotfoon4.exe dialer,
S G Masood
Layer 2 Analysis of WLAN Discovery Applications for Intrusion Detection,
Joshua Wright
GLSA: kgpg,
Daniel Ahlberg
[SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution,
Martin Schulze
Re: How to execute programs with parameters in IE - Sandblad advisory #10,
hysterix1
RhinoSoft Serv-U FTP Anonymous Remote DoS Vulnerability,
[secondmotion]-Matt Thompson
Securing OWA on public computers.,
Alex T.
Technical information about unpatched MS Java vulnerabilities,
Jouko Pynnonen
XSS in Postnuke Rogue release (0.72),
Muhammad Faisal Rauf Danka
Zeus Admin Server v4.1r2 index.fcgi XSS bug,
euronymous
Cisco PIX SSH/telnet dDOS vulnerability CSCdy51810,
Nils Reichen
Potential Denial of Service Vulnerability in IRIX RPC-based libc,
SGI Security Coordinator
Oracle iSQL*Plus buffer Overflow..,
deadbeat
NetBSD Security Advisory 2002-024: IPFilter FTP proxy,
NetBSD Security Officer
Re: PHP-Nuke SQL Injection Vulnerability,
Predrag Damnjanovic
LiteServe Directory Index Cross-Site Scripting,
Matthew Murphy
MDKSA-2002:075 - nss_ldap update,
Mandrake Linux Security Team
MDKSA-2002:076 - perl-MailTools update,
Mandrake Linux Security Team
[Security Announce] Re: MDKSA-2002:076 - perl-MailTools update,
Vincent Danen
iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS,
David Endler
iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server,
David Endler
RES: A technique to mitigate cookie-stealing XSS attacks,
AQBARROS
Vulnerability in Cutecast Forum v1.2,
Zero-X www.lobnan.de Team
Help Please,
Mark Litchfield
[RHSA-2002:197-09] Updated glibc packages fix vulnerabilities in resolver,
bugzilla
[SECURITY] [DSA 191-1] New squirrelmail packages fix cross site scripting bugs,
Martin Schulze
Lotus Domino HTTP Server security issue,
Frank Perreault
[RHSA-2002:242-06] Updated kerberos packages available,
bugzilla
Yahoo Messenger: Invisible User Detect,
cringe
Remote pine Denial of Service,
Linus Sjöberg
RE: How to execute programs with parameters in IE - Sandblad advisory #10,
Thor Larholm
Linksys security contact,
David Endler
[SECURITY] [DSA-190-1] buffer overflow in Window Maker,
Wichert Akkerman
IRIX ToolTalk rpc.ttdbserverd vulnerabilities,
SGI Security Coordinator
[CLA-2002:544] Conectiva Linux Security Announcement - linuxconf,
secure
How to execute programs with parameters in IE - Sandblad advisory#10,
Andreas Sandblad
QNX 6.1 TimeCreate weakness,
Pawel Pisarczyk
Re: Oracle Security Contact,
Steven M. Christey
iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan,
David Endler
[CLA-2002:535] Conectiva Linux Security Announcement - glibc,
secure
[CLA-2002:538] Conectiva Linux Security Announcement - tar/unzip,
secure
[CLA-2002:542] Conectiva Linux Security Announcement - gv/kghostview,
secure
[CLA-2002:534] Conectiva Linux Security Announcement - krb5,
secure
[CLA-2002:537] Conectiva Linux Security Announcement - tetex,
secure
[CLA-2002:540] Conectiva Linux Security Announcement - heartbeat,
secure
[CLA-2002:541] Conectiva Linux Security Announcement - mod_ssl,
secure
[CLA-2002:539] Conectiva Linux Security Announcement - ypserv,
secure
[SECURITY] [DSA 189-1] New luxman packages fix local root exploit,
Martin Schulze
GLSA: MailTools,
Daniel Ahlberg
When scrubbing secrets in memory doesn't work,
Michael Howard
[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities,
Martin Schulze
Bug in Monkey Webserver 0.5.0 or minors versions,
Daniel
SnortCenter 0.9.5 temp file naming problems...,
Clint Byrum
networking_utils.php,
Tacettin Karadeniz
A technique to mitigate cookie-stealing XSS attacks,
Michael Howard
[Index of Archives]
[Netfilter]
[Security]
[PHP]
[Linux Kernel]
