bugtraq mailing list - 2004/01

Messages by day:

January 1 (6 messages)

• MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• multiple payload handling flaws in isakmpd, again (Thomas Walpuski <thomas@...nknerd.de>)
• Announcing Userland Exec (the grugq <grugq@...nix.net>)
• Re: multiple payload handling flaws in isakmpd, again (Thomas Walpuski <thomas@...nknerd.de>)
• Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity (Matt Zimmerman <mdz@...ian.org>)
• Possible XSS vuln in VCard4J ("Just1n T1mberlake" <hotpackets@...lokitty.com>)

• Switch Off Multiple Vulnerabilities ("Peter Winter-Smith" <peter4020@...mail.com>)
• Re: Switch Off Multiple Vulnerabilities ("Peter Winter-Smith" <peter4020@...mail.com>)
• Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV ("http-equiv@...ite.com" <1@...ware.com>)
• xsok local games exploit ("c0wboy@...33" <c0wboy@...cali.it>)
• DoS in GoodTech Telnet Server 4.0.103 ("Donato Ferrante" <fdonato@...istici.org>)
• Microsoft Word Protection Bypass (Thorsten Delbrouck-Konetzko <Thorsten.Delbrouck@...rdeonic.com>)
• include() vuln in EasyDynamicPages v.2.0 (Vietnamese Security Group <security@...urity.com.vn>)
• RE: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV (<tlarholm@...x.com>)

• Webcam Watchdog Stack Overflow Vulnerability ("Peter Winter-Smith" <peter4020@...mail.com>)

• [RHSA-2003:417-01] Updated kernel resolves security vulnerability (bugzilla@...hat.com)
• Linux kernel mremap vulnerability (Paul Starzetz <ihaquer@...c.pl>)
• Re: Linux kernel mremap vulnerability (Paul Starzetz <ihaquer@...c.pl>)
• [ESA-20040105-001] 'kernel' bug and security fixes. (EnGarde Secure Linux <security@...rdiandigital.com>)
• PostNuke Issues (0.726 && Possibly Older) (JeiAr <security@...ftech.org>)
• [SCSA-025] Invision Power Board SQL Injection Vulnerability (advisory@...urity-corporation.com)
• xsok local games exploit (2) ("c0wboy@...33" <c0wboy@...cali.it>)
• newsPHP v216 patch (Dariusz 'Officerrr' Kolasinski <officerrr@...igon.com.pl>)
• [SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• HotNews arbitary file inclusion (Dariusz 'Officerrr' Kolasinski <officerrr@...igon.com.pl>)
• Announcing adore-ng 0.31 (Stealth <stealth@...m-teso.net>)
• [CLA-2004:799] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
• [SECURITY] [DSA 407-1] New ethereal packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• TSLSA-2004-01 - kernel (Trustix Security Advisor <tsl@...stix.org>)
• [SECURITY] [DSA 408-1] New screen packages fix group utmp exploit (joey@...odrom.org (Martin Schulze))
• SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:001) (thomas@...e.de (Thomas Biege))
• Linux kernel do_mremap() proof-of-concept exploit code (Christophe Devine <devine@....cnam.fr>)

• FirstClass Client 7.1: Command Execution via Email Web Link (Richard Maudsley <r_i_c_h@...penworld.com>)
• vBulletin Forum 2.3.xx calendar.php SQL Injection ("Qianwei Hu" <a1476854@...mail.com>)
• [SECURITY] [DSA 409-1] New bind packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
• [SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability (Matt Zimmerman <mdz@...ian.org>)
• Immunix Secured OS 7.3 kernel update (Immunix Security Team <security@...unix.com>)
• [SECURITY] [DSA 412-1] New nd packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
• Multiple Vulnerabilities in Phorum 3.4.5 ("Calum Power" <enune@...bble.net>)
• [CLA-2004:800] Conectiva Security Announcement - lftp (Conectiva Updates <secure@...ectiva.com.br>)
• [SECURITY] [DSA 410-1] New libnids packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• Linux mremap bug correction (Paul Starzetz <ihaquer@...c.pl>)
• Vuln in PHPGEDVIEW 2.61 Multi-Problem (Vietnamese Security Group <security@...urity.com.vn>)
• [SECURITY] [DSA 413-1] New Linux 2.4.18 packages fix locate root exploit (joey@...odrom.org (Martin Schulze))
• Re: Linux kernel do_mremap() proof-of-concept exploit code (Alexandre Hautequest <hquest@...acorp.com.br>)
• Lotus Notes Domino 6.0.2 (linux) faulty default permissions (Rene <l0om@...luded.org>)
• Re: Linux kernel do_mremap() proof-of-concept exploit code (Bruno Lustosa <bruno@...tosa.net>)
• RE: Microsoft Word Protection Bypass ("Jerry Shenk" <jshenk@...ommunications.com>)
• RE: Linux kernel do_mremap() proof-of-concept exploit code (<tlarholm@...x.com>)

• Re: Linux kernel do_mremap() proof-of-concept exploit code (Ariel Biener <ariel@...eball.tau.ac.il>)
• Re: Linux kernel do_mremap() proof-of-concept exploit code ("Angelo Dell'Aera" <buffer@...ifork.org>)
• RE: Linux kernel do_mremap() proof-of-concept exploit code (Bryce Porter <bporter@...rt.net>)
• [RHSA-2004:001-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• Re: Microsoft Word Protection Bypass (Thorsten Delbrouck-Konetzko <Thorsten.Delbrouck@...rdeonic.com>)
• [SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha) (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal (Matt Zimmerman <mdz@...ian.org>)
• ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity ("Rafel Ivgi" <theinsider@....net.il>)
• SnapStream PVS LITE Cross Site Scripting Vulnerabillity ("Rafel Ivgi" <theinsider@....net.il>)
• [SECURITY] [DSA 415-1] New zebra packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
• [slackware-security] Kernel security update (SSA:2004-006-01) (Slackware Security Team <security@...ckware.com>)
• EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity ("Rafel Ivgi" <theinsider@....net.il>)
• RealNetworks fails to address Cross-Site Scripting in RealOne Player (Arman Nayyeri <arman-n@...eaker.net>)
• [SECURITY] [DSA 414-1] New jabber packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
• RE: Microsoft Word Protection Bypass ("Eric Lawrence" <ericlaw@...den.com>)
• Re: Linux kernel do_mremap() proof-of-concept exploit code (D Lambrou <dlambrou@...zylinux.net>)

• SGI Advanced Linux Environment security update #8 (SGI Security Coordinator <agent99@....com>)
• [CLA-2004:801] Conectiva Security Announcement - ethereal (Conectiva Updates <secure@...ectiva.com.br>)
• Yahoo Instant Messenger Long Filename Downloading Buffer Overflow ("Tri Huynh" <trihuynh@...up.com>)
• Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• [OpenPKG-SA-2004.001] OpenPKG Security Advisory (inn) (OpenPKG <openpkg@...npkg.org>)
• [SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak (Matt Zimmerman <mdz@...ian.org>)
• Re: Microsoft Word Protection Bypass (Vladimir Katalov <vkatalov@...omsoft.com>)
• [SECURITY] INN: Buffer overflow in control message handling (Russ Allbery <rra@....org>)
• MDKSA-2004:001 - Updated kernel packages fix local root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Yahoo Instant Messenger Long Filename Downloading Buffer Overflow ("Santos Rayes" <santosreyes2001@...mail.com>)
• Openssl proof of concept code? ("Lachniet, Mark" <mlachniet@...uoianet.com>)
• Re: Re: Yahoo Instant Messenger Long Filename Downloading Buffer Overflow ("Tri Huynh" <trihuynh@...up.com>)

• [ GLSA 200401-01 ] Linux kernel do_mremap() privelege escalation vulnerability (Tim Yamin <plasmaroo@...too.org>)
• leafnode -1.9.47 security announcement SA-2004-01 (Matthias Andree <matthias.andree@....de>)
• Re: Openssl proof of concept code? ("Bram Matthys (Syzop)" <syzop@...nscan.org>)
• Re: Openssl proof of concept code? (John Lampe <jwlampe@...sus.org>)
• [SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha) (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection (joey@...odrom.org (Martin Schulze))
• [slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01) (Slackware Security Team <security@...ckware.com>)
• Windows FTP Server Format String Vulnerability ("Peter Winter-Smith" <peter4020@...mail.com>)
• Directory Traversal in Accipiter Direct Server 6.0 ("Bassett, Mark" <mbassett@...ha.com>)
• bzip2 bombs still causes problems in antivirus-software ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
• Re: Openssl proof of concept code? (Ivan Arce <ivan.arce@...est.com>)
• Re: Openssl proof of concept code? (David Kennedy CISSP <david.kennedy@....org>)

• RE: bzip2 bombs still causes problems in antivirus-software (Steve Wray <steve.wray@...adise.net.nz>)
• Re: bzip2 bombs still causes problems in antivirus-software ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
• [Fwd: [TH-research] OT: Israeli Post Office break-in] (Gadi Evron <ge@...tistical.reprehensible.net>)
• RE: Re: bzip2 bombs still causes problems in antivirus-software (Steve Wray <steve.wray@...adise.net.nz>)

• RE: Re: bzip2 bombs still causes problems in antivirus-software ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
• Re: bzip2 bombs still causes problems in antivirus-software...probably zip, too ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
• [RHSA-2004:003-01] Updated CVS packages fix minor security issue (bugzilla@...hat.com)
• Remote Code Execution in ezContents (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
• [SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
• DameWare Mini Remote Control < v3.73 remote exploit by kralor] (Iván Rodriguez Almuiña <kralor@...omputer.net>)
• Abuse report email for CitiBank/CitiCards? ("winstrel" <winstrel@...ll.org>)
• PHP Manpage lookup directory transversal / file disclosing (Cabezon Aurélien <aurelien.cabezon@...curelabs.com>)
• SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM (KF <dotslash@...soft.com>)
• Re: SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM (Sym Security <symsecurity@...antec.com>)
• [SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking (Matt Zimmerman <mdz@...ian.org>)
• FW: Abuse report email for CitiBank/CitiCards? ("Sullivan, Barbra A" <barbra.a.sullivan@...igroup.com>)
• Re: [RHSA-2004:003-01] Updated CVS packages fix minor security issue (Caylan Larson <caylan@...o.und.edu>)
• SmoothWall Project Security Advisory SWP-2004:001 (William Anderson <neuro@...othwall.org>)
• Re: Abuse report email for CitiBank/CitiCards? (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: FW: Abuse report email for CitiBank/CitiCards? (Nicholas Weaver <nweaver@...berkeley.edu>)

• More phpGedView Vulnerabilities (JeiAr <security@...ftech.org>)
• Re: Re: [RHSA-2004:003-01] Updated CVS packages fix minor security issue (Valdis.Kletnieks@...edu)
• RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] (John.Airey@...b.org.uk)
• RE: RE: [Fwd: [TH-research] OT: Israeli Post Of fice break-in] (Evgeny Pinchuk <EvgenyP@...ware.com>)
• Cisco Security Advisory: Vulnerabilities in H.323 Message Processing (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• [SECURITY] [DSA-422-1] multiple CVS improvements (Wichert Akkerman <wichert@...gy.net>)
• RE: Abuse report email for CitiBank/CitiCards? (Lance James <lance.james@...bone.com>)
• exploit for HD Soft Windows FTP Server 1.6 (mandrag@...dragore.solidshells.com)
• How to track a Phisher... Re: FW: Abuse report email for CitiBank/CitiCards? (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: FW: Abuse report email for CitiBank/CitiCards? ("Jim Gonzalez" <gonzj@...inmaryland.com>)
• MDKSA-2004:002 - Updated ethereal packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] (Frank_Kenisky@....uscourts.gov)
• Re: RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] (Ron DuFresne <dufresne@...ternet.com>)
• symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) (Rene <l0om@...luded.org>)
• RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] ("Dave Paris" <dparis@...orks.com>)
• Re: RE: [Fwd: [TH-research] OT: Israeli Post Office break-in] (jan.muenther@...ns.com)
• SuSE linux 9.0 YaST config Skribt [exploit] (Rene <l0om@...luded.org>)
• unauthorized deletion of IPsec (and ISAKMP) SAs in racoon (Thomas Walpuski <thomas@...nknerd.org>)
• Snort-inline (Federico Petronio <fpetronio@...rus.agro.uba.ar>)

• The Israeli Post Office Break-in HTML article (Gadi Evron <ge@...tistical.reprehensible.net>)
• [RHSA-2004:006-01] Updated kdepim packages resolve security vulnerability (bugzilla@...hat.com)
• Re: [Fwd: [TH-research] OT: Israeli Post Office break-in] (Jimi Thompson <jimit@...ealbox.com>)
• Re: Re: [Fwd: [TH-research] OT: Israeli Post Office break-in] (Cedric Blancher <blancher@...tel-securite.fr>)
• [RHSA-2004:007-01] Updated tcpdump packages fix various vulnerabilities (bugzilla@...hat.com)
• Re: Openssl proof of concept code? (Michael Iseyemi <michaeliseyemi@...oo.ca>)
• Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon (itojun@...e.net)
• Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 (Luigi Auriemma <aluigi@...ervista.org>)
• an article on the Israeli Post Office break-in (Gadi Evron <ge@...uxbox.org>)
• nCipher Advisory #8: payShield library may verify bad requests (nCipher Support <technotifications@...ncipher.com>)
• FishCart Integer Overflow / Rounding Error (Michael Brennen <mbrennen@....com>)
• CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities (CERT Advisory <cert-advisory@...t.org>)
• Network Associates Product Security Contact (Matt Moore <matt.moore@...test.co.uk>)

• KDE Security Advisory: VCF file information reader vulnerability (Dirk Mueller <mueller@....org>)
• PhpDig 1.6.x: remote command execution ("FraMe" <frame@...palab.com>)
• SUSE Security Announcement: tcpdump (SuSE-SA:2004:002) (krahmer@...e.de (Sebastian Krahmer))
• January 15 is Personal Firewall Day, help the cause (<tlarholm@...x.com>)
• UTTER HORSESHIT: [was January 15 is Personal Firewall Day, help the cause] ("http-equiv@...ite.com" <1@...ware.com>)
• Linux kernel mremap() bug update (Paul Starzetz <ihaquer@...c.pl>)
• Linux kernel mremap() bug update (Paul Starzetz <ihaquer@...c.pl>)
• [SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64) (joey@...odrom.org (Martin Schulze))
• SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:003) (thomas@...e.de (Thomas Biege))
• [slackware-security] kdepim security update (SSA:2004-014-01) (Slackware Security Team <security@...ckware.com>)
• RapidCache Multiple Vulnerabilities ("Peter Winter-Smith" <peter4020@...mail.com>)
• MDKSA-2004:003 - Updated kdepim packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [slackware-security] INN security update (SSA:2004-014-02) (Slackware Security Team <security@...ckware.com>)
• RUXCON Call For Papers (the grugq <grugq@...nix.net>)
• Re: January 15 is Personal Firewall Day, help the cause (cdowns <cdowns@...ppingdead.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause (Ron DuFresne <dufresne@...ternet.com>)
• Re: January 15 is Personal Firewall Day, help the cause ("David F. Skoll" <dfs@...ringpenguin.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause (Ron DuFresne <dufresne@...ternet.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause ("Mary Landesman" <mlande@...lsouth.net>)
• RE: Re: January 15 is Personal Firewall Day, help the cause ("Schmehl, Paul L" <pauls@...allas.edu>)
• Re: January 15 is Personal Firewall Day, help the cause ("adf--at--Code511.com" <adf@...e511.com>)
• OpenSSL ASN.1 parsing bugs PoC / brute forcer ("Bram Matthys (Syzop)" <syzop@...nscan.org>)
• January 15 is Personal Firewall Day, help the cause (<tlarholm@...x.com>)

• Re: Re: January 15 is Personal Firewall Day, help the cause (Ron DuFresne <dufresne@...ternet.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause ("Mary Landesman" <mlande@...lsouth.net>)
• RE: Re: January 15 is Personal Firewall Day, help the cause ("Schmehl, Paul L" <pauls@...allas.edu>)
• Re: January 15 is Personal Firewall Day, help the cause ("David F. Skoll" <dfs@...ringpenguin.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause (Gary Flynn <flynngn@....edu>)
• January 15 is Personal Firewall Day, help the cause (<tlarholm@...x.com>)
• RE: Re: January 15 is Personal Firewall Day, he lp the cause (Justin Bajko <jbajko@...SINC.com>)
• Re: January 15 is Personal Firewall Day, help the cause (Brandon Butterworth <brandon@...bbc.co.uk>)
• Re: January 15 is Personal Firewall Day, help the cause (cdowns <cdowns@...ppingdead.com>)
• The Bat! 2.01 memory corruption (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Re: January 15 is Personal Firewall Day, he lp the cause (vb@...tpanic.ulm.ccc.de)
• [OpenCA Advisory] Vulnerability in signature verification (Michael Bell <michael.bell@....hu-berlin.de>)
• Re: Security bug in Xerox Document Centre (K.Schleede <USA.DSSC.Doc.Feedback@...ox.com>)
• [OpenPKG-SA-2004.002] OpenPKG Security Advisory (tcpdump) (OpenPKG <openpkg@...npkg.org>)
• RE: Re: January 15 is Personal Firewall Day, he lp the cause ("Wes Noonan" <mailinglists@...consulting.com>)
• Re: Re: January 15 is Personal Firewall Day, he lp the cause (vb@...tpanic.ulm.ccc.de)
• Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon (itojun@...e.net)
• phpShop Vulnerabilities (JeiAr <security@...ftech.org>)
• Xtreme ASP Photo Gallery (<posidron@...pbit.org>)
• Multiple MetaDot Vulnerabilities [ All Versions ] (JeiAr <security@...ftech.org>)
• [SECURITY] [DSA 424-1] New mc packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)

• HP printers and currency anti-copying measures ("Richard M. Smith" <rms@...puterbytesman.com>)
• Anti-MS drivel ("Edward W. Ray" <support@...cman.com>)
• Re: Re: January 15 is Personal Firewall Day, help the cause (Valdis.Kletnieks@...edu)

• SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access. (KF <dotslash@...soft.com>)
• Happy belated Personal Firewall day - SRT2004-01-17-0628 - Agnitum Optpost firewall allows Local SYSTEM access (KF <dotslash@...soft.com>)
• Re: Anti-MS drivel (Luca Mihailescu <luca@...ailescu.net>)
• Re: Anti-MS drivel ("Gregh" <chows@...mail.com.au>)
• new outbreak warning - Bagle (Gadi Evron <ge@...tistical.reprehensible.net>)
• Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory (scrap <webmaster@...uriteinfo.com>)

• Bagle worm status + more blocking information (Gadi Evron <ge@...tistical.reprehensible.net>)
• Mambo OS v4.5/v4.6: remote command execution ("FraMe" <frame@...palab.com>)
• [SECURITY] [DSA 426-1] New netpbm-free packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
• Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows (Serafino Sorrenti <ml@...rrenti.com>)
• [SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (joey@...odrom.org (Martin Schulze))
• Proof-Of-Concept Denial-Of-Service Pointbase 4.6 Java SQL-DB (Marc Schoenefeld <schonef@...-muenster.de>)
• Directories management bypassing in Goahead webserver <= 2.1.8 (Luigi Auriemma <aluigi@...ervista.org>)
• New release of Patchfinder2 (windows rootkit detector) (Joanna Rutkowska <joanna@...lsnare.net>)
• Resources consumption in Goahead webserver <= 2.1.8 (Luigi Auriemma <aluigi@...ervista.org>)
• Denial of service in Getware's built-in webserver (Webcam Live and Photohost) (Luigi Auriemma <aluigi@...ervista.org>)
• Networker 6.0 - possible symlink attack (Rene <l0om@...luded.org>)
• [ESA-20040119-002] 'tcpdump' multiple vulnerabilities. (EnGarde Secure Linux <security@...rdiandigital.com>)
• Re: Get admin rights using Doro (pdf creator) (<the_sz@....co.uk>)
• Yabb SE SQL Injection ("backspace" <backspace_2k@...ra.es>)
• RE: Bagle worm status + more blocking information (David Brodbeck <DavidB@...l.interclean.com>)
• Re: HP printers and currency anti-copying measures (Andre Oppermann <oppermann@...eline.ch>)
• a method for bypassing cookie restrictions in web browsers (Michal Zalewski <lcamtuf@...ttot.org>)
• RE: HP printers and currency anti-copying measures ("Larry Seltzer" <larry@...ryseltzer.com>)
• RE: ISA Server 2000 - Vulnerability in H.323 Filter Can Cause Rem ote Code Execution (816458) (Alan Monaghan <AlanM@...dnerweb.com>)
• What is the point here? ("Alun Jones" <alun@...is.com>)
• [SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• More info on blocking the Bagle worm (Gadi Evron <ge@...uxbox.org>)
• RE: HP printers and currency anti-copying measures ("Kevin E. Casey" <kcasey@...oweb.com>)
• RE: new outbreak warning - Bagle ("Perrymon, Josh L." <PerrymonJ@....com>)
• Re: a method for bypassing cookie restrictions in web browsers (Dave McKinney <dm@...urityfocus.com>)
• RE: What is the point here? ("Andrew Hintz ( Drew )" <drew@...rt.org>)

• RE: What is the point here? ("ken kousky" <kkousky@...inc.com>)
• a method for bypassing cookie restrictions in web browsers ("Michal Zalewski" <lcamtuf@...ttot.org>)
• RE: What is the point here? ("PM Systems - Rick Woehler" <RWoehler@...ysCorp.com>)
• Re: What is the point here? (Systems Administrator <sysadmin@...et.com.au>)
• Re: RE: new outbreak warning - Bagle (Gadi Evron <ge@...uxbox.org>)
• Re: More info on blocking the Bagle worm (James Gray <james_gray@....com>)
• Re: a method for bypassing cookie restrictions in web browsers (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: More info on blocking the Bagle worm (Anders Henke <anders@...lund.de>)
• NETCam webserver Directory traversal bug ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: What is the point here? (Adam Shostack <adam@...eport.org>)
• Re: What is the point here? (Mariusz Woloszyn <emsi@...rtners.pl>)
• [SuSE 9.0] possible symlink attacks in some scripts (Rene <l0om@...luded.org>)
• Re: Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows (Scott Gifford <sgifford@...pectclass.com>)
• Re: What is the point here? (Damian Menscher <menscher@...c.edu>)
• Re: HP printers and currency anti-copying measures ("mightye[removethis]" <"mightye[removethis]"@mightye.org>)
• [CLA-2004:809] Conectiva Security Announcement - screen (Conectiva Updates <secure@...ectiva.com.br>)
• [CLA-2004:810] Conectiva Security Announcement - kdepim (Conectiva Updates <secure@...ectiva.com.br>)
• [CLA-2004:808] Conectiva Security Announcement - cvs (Conectiva Updates <secure@...ectiva.com.br>)
• Re: a method for bypassing cookie restrictions in web browsers (Kevin Fu <nospam-google-me@....EDU>)
• vBulletin Security Vulnerability (<gcf@...h.com>)
• Re: Bagle worm status + more blocking information (Sylvain Robitaille <syl@...or.concordia.ca>)
• [SECURITY] [DSA 428-1] New slocate packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• Re: Re: Bagle worm status + more blocking information (Gadi Evron <ge@...tistical.reprehensible.net>)
• [SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability (advisory@...urity-corporation.com)
• WebTrends Reporting Center Path Disclosure vulnerability ("Oliver Karow" <Oliver.Karow@....de>)
• 2Wire-Gateway Cross Site Scripting and Directory Transversal bug in SSL Form ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• OwnServer 1.0 Directory Transversal Vulnerability ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• RE: vBulletin Security Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• Internet Explorer - Multiple Vulnerabilities ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)

• RE: Internet Explorer - Multiple Vulnerabilities ("Thor Larholm" <thor@...x.com>)
• [RHSA-2004:034-01] Updated mc packages resolve buffer overflow vulnerability (bugzilla@...hat.com)
• Re: RE: Internet Explorer - Multiple Vulnerabilities ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
• Re: vBulletin Security Vulnerability (Curt Rebelein Junior <curt@...by.com>)
• [Fwd: [TH-research] Bagle remote uninstall] (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: vBulletin Security Vulnerability (Curt Rebelein Junior <curt@...by.com>)
• RE: vBulletin Security Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• Mephistoles Httpd 0.6.0final XSS ("Donato Ferrante" <fdonato@...istici.org>)
• TSLSA-2004-0005 - slocate (Trustix Security Advisor <tsl@...stix.org>)
• Re: a method for bypassing cookie restrictions in web browsers ("Michal Zalewski" <lcamtuf@...ttot.org>)
• Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: What is the point here? (Jason Coombs <jasonc@...ence.org>)
• Re: HP printers and currency anti-copying measures (Sami Haahtinen <ressu@...sukka.net>)
• Honeyd Security Advisory 2004-001: Remote Detection Via Simple Probe Packet (Niels Provos <provos@...i.umich.edu>)
• Re: HP printers and currency anti-copying measures (Sasha <nospam@...l.com>)
• WebcamXP v1.06.945 Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• [ GLSA 200401-02 ] Honeyd remote detection vulnerability via a probe packet (Tim Yamin <plasmaroo@...too.org>)
• Re: [Fwd: [TH-research] Bagle remote uninstall] (Dinesh Nair <dinesh@...haque.com>)

• Paper announcement: Is finding security holes a good idea? (Eric Rescorla <ekr@...m.com>)
• Hijacking Apache 2 via mod_perl (Steve Grubb <linux_4ever@...oo.com>)
• AV products vulnerability [Fwd: [TH-research] Upx hack tool] (Gadi Evron <ge@...uxbox.org>)
• Re: Anti-MS drivel (martin f krafft <madduck@...duck.net>)
• Re: Hijacking Apache 2 via mod_perl (lupe@...e-christoph.de (Lupe Christoph))
• Re: [Fwd: [TH-research] Bagle remote uninstall] ("Charlie Harvey " <charlie@...pleandplanet.org>)
• yet another new phising scam (Gadi Evron <ge@...uxbox.org>)
• Re: Paper announcement: Is finding security holes a good idea? (Oliver Friedrichs <oliver_friedrichs@...antec.com>)
• RE: Paper announcement: Is finding security holes a good idea? ("Daniel Whelan" <daniel.whelan@...kapoocheese.com>)
• Re: Paper announcement: Is finding security holes a good idea? (Benjamin Franz <snowhare@...ongo.org>)
• Re: [SuSE 9.0] possible symlink attacks in some scripts (Thomas Biege <thomas@...e.de>)
• Re: Paper announcement: Is finding security holes a good idea? ("Kurt Seifried" <bt@...fried.org>)
• Re: HP printers and currency anti-copying measures (Darren Reed <avalon@...igula.anu.edu.au>)
• Re: Hijacking Apache 2 via mod_perl (Ben Laurie <ben@...roup.co.uk>)
• [RHSA-2004:040-01] Updated slocate packages fix vulnerability (bugzilla@...hat.com)
• TBE - the banner engine server-side script execution vulnerability ("Ed J. Aivazian" <stealth@...inco.com>)
• Need for Speed Hot pursuit 2 <= 242 client's buffer overflow (Luigi Auriemma <aluigi@...ervista.org>)
• [Fwd: [TH-research] Modified Bagle] (Gadi Evron <ge@...tistical.reprehensible.net>)
• Major hack attack on the U.S. Senate ("Richard M. Smith" <rms@...puterbytesman.com>)
• vulnerabilities of postscript printers (Bob Kryger <bobk@...ix.com>)
• NetBus Pro Web Server Direcory Listing And Remote File Upload ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: Paper announcement: Is finding security holes a good idea? (Robert Lemos <rob.lemos@...t.com>)
• Re[2]: Hijacking Apache 2 via mod_perl (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Hijacking Apache 2 via mod_perl (Ben Laurie <ben@...roup.co.uk>)
• Re: Hijacking Apache 2 via mod_perl (André Malo <nd@...lig.de>)
• GeoHttpServer Authentification Bypass Vulnerability & D.O.S (Denial Of Service) ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: Re[2]: Hijacking Apache 2 via mod_perl (Steve G <linux_4ever@...oo.com>)
• Re: Paper announcement: Is finding security holes a good idea? ("Christopher E. Cramer" <chris.cramer@...e.edu>)
• FREESCO public http server - Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: Hijacking Apache 2 via mod_perl (Steve G <linux_4ever@...oo.com>)
• RE: yet another new phising scam (<tlarholm@...x.com>)

• Re: [Fwd: [TH-research] Modified Bagle] (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• SGI ProPack v2.3: Kernel fixes and security update (SGI Security Coordinator <agent99@....com>)
• Re: Re: [Fwd: [TH-research] Modified Bagle] (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: More info on blocking the Bagle worm (Anders Henke <anders@...lund.de>)
• QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities (S-Quadra Security Research <research@...uadra.com>)
• NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: vulnerabilities of postscript printers (Darren Reed <avalon@...igula.anu.edu.au>)
• Re: Major hack attack on the U.S. Senate (~Kevin Davis³ <computerguy@....rr.com>)
• Re: Major hack attack on the U.S. Senate ("Brian C. Lane" <bcl@...anlane.com>)
• Multiple Vulnerabilities in Phorum 3.4.5 (Fredrik Björk <Fredrik.Bjork.List@...bergenergi.se>)
• Finjan SurfinGate Vulnerability (David Byrne <davidribyrne@...oo.com>)
• Re: vulnerabilities of postscript printers (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Re: Hijacking Apache 2 via mod_perl (jon schatz <jon@...isionbyzero.com>)

• Re: vulnerabilities of postscript printers (Michael Zimmermann <zim@...aa.de>)
• [Fwd: [TH-research] Dumaru.J/Y Worm - Possible Outbreak] (Gadi Evron <ge@...tistical.reprehensible.net>)
• [SST]ServU MDTM command remote buffero verflow adv ("icbm" <icbm@...57.net>)
• Tiny Server 1.1 (1.0.5) Multiple Vulnerabilities ("Donato Ferrante" <fdonato@...istici.org>)
• Oracle HTTP Server Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: vulnerabilities of postscript printers (Jim Knoble <jmknoble@...ox.com>)
• Re: vulnerabilities of postscript printers (Michael Zimmermann <zim@...aa.de>)
• Re: vulnerabilities of postscript printers (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Re: vulnerabilities of postscript printers (Michael Zimmermann <zim@...aa.de>)
• Re: vulnerabilities of postscript printers ("Thomas M. Payerle" <payerle@...sics.umd.edu>)
• MDKSA-2004:004 - Updated slocate packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: vulnerabilities of postscript printers (Elizabeth Zwicky <zwicky@...atcircle.com>)
• Re: Major hack attack on the U.S. Senate (rsh@...rect.com)
• Re: vulnerabilities of postscript printers (Glynn Clements <glynn.clements@...gin.net>)
• Re: Hijacking Apache 2 via mod_perl (Matthew Wakeling <mnw21-bugtraq@...pleads.com>)
• Re: vulnerabilities of postscript printers (Darren Reed <avalon@...igula.anu.edu.au>)
• [SST]ServU MDTM command remote buffero verflow adv ("icbm" <icbm@...57.net>)
• MDKSA-2004:005 - Updated jabber packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: vulnerabilities of postscript printers (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Re: Major hack attack on the U.S. Senate (Kirk Spencer <kspencer@...l.org>)
• RE: Major hack attack on the U.S. Senate ("B. Kinney" <bkinney@...cow.com>)
• Re: vulnerabilities of postscript printers (Nate Eldredge <nge@...hmc.edu>)
• Re: Major hack attack on the U.S. Senate (Kevin Reardon <Kevin.Reardon@...cle.com>)
• Re: Major hack attack on the U.S. Senate (Daniel.Capo@....net.br)
• Re: vulnerabilities of postscript printers (Stephen Samuel <samuel@...reen.com>)
• Re: vulnerabilities of postscript printers (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Resources consumption in Reptile webserver daily version ("Donato Ferrante" <fdonato@...istici.org>)
• Re: Major hack attack on the U.S. Senate (Dinesh Nair <dinesh@...haque.com>)
• Re: [work] Re: Major hack attack on the U.S. Senate (opticfiber <opticfiber@...sight.net>)
• BWS v1.0b3 Directory Transversal Vulnerability ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Inrtra Forum Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Re: Major hack attack on the U.S. Senate (ed@...7thbeer.com)
• RE: Major hack attack on the U.S. Senate (bugtraq@...strophe.com)
• Re: [work] Re: Major hack attack on the U.S. Senate ("Jonathan A. Zdziarski" <jonathan@...learelephant.com>)
• Re: vulnerabilities of postscript printers (Bob Beck <beck@...h.cns.ualberta.ca>)
• Re: vulnerabilities of postscript printers (Theo de Raadt <deraadt@....openbsd.org>)

• Re: [SST]ServU MDTM command remote buffero verflow adv ("Sam" <Sam@...57.org>)
• RE: [Fwd: [TH-research] Dumaru.J/Y Worm - Possible Outbreak] ("Dowling, Gabrielle" <dowlingg@...lcrom.com>)

• Advisory 01/2004: 12 x Gaim remote overflows (Stefan Esser <s.esser@...atters.de>)
• News from Bagle worm (Papp Geza <pappgeza@...na.net>)
• Re: News from Bagle worm (Joe Stewart <jstewart@...hq.com>)
• NextPlace.com E-Commerce ASP Engine ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Serv-U ftp 4.2 site chmod long_file_name exploit ("Qianwei Hu" <a1476854@...mail.com>)
• Self-Executing FOLDERS: Windows XP Explorer Part V ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Major hack attack on the U.S. Senate (Crispin Cowan <crispin@...unix.com>)
• Directory traversal and XSS in BremsServer 1.2.4 ("Donato Ferrante" <fdonato@...istici.org>)
• [RHSA-2004:032-01] Updated Gaim packages fix various vulnerabiliies (bugzilla@...hat.com)
• Re: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities (S-Quadra Security Research <research@...uadra.com>)
• Re: Self-Executing FOLDERS: Windows XP Explorer Part V ("mightye[removethis]" <"mightye[removethis]"@mightye.org>)
• RE: Self-Executing FOLDERS: Windows XP Explorer Part V ("Thor Larholm" <thor@...x.com>)
• Re: Windows XP Explorer Executes Arbitrary Code in Folders (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
• ProxyNow! 2.x Multiple Overflow Vulnerabilities ("Peter Winter-Smith" <peter4020@...mail.com>)

• Reverse Engineering ("Filipe Polido" <filipepolido@...abeiraservicos.pt>)
• massive outbreak - expect a major network slowdown (Gadi Evron <ge@...tistical.reprehensible.net>)
• outbreak update (Gadi Evron <ge@...tistical.reprehensible.net>)
• update: blocking the new worm - it listens on port 3127 (Gadi Evron <ge@...tistical.reprehensible.net>)
• RE: outbreak update ("Mike Fratto" <mfratto@....com>)
• RE: outbreak update (Kane Lightowler <kane.lightowler@...alstom.com.au>)
• Ultramagnetic Advisory: Multiple vulnerabilities in Gaim code ("low halo, Defender of Truth and Liberty "<lowhalo@...h.com>)
• New MiMail variant is DDoS'ing SCO.com (<tlarholm@...x.com>)
• Re: [TH-research] traffic (Gadi Evron <ge@...uxbox.org>)
• [FLSA-2004:1187] Updated screen resolves security vulnerability (Jesse Keating <jkeating@...olutions.net>)
• Re: Reverse Engineering (Fyodor <fygrave-nospam@...erteam.net>)
• MDKSA-2004:006 - Updated gaim packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V1.0 ("lion" <lion@...onker.net>)
• MDKSA-2004:007 - Updated mc packages fix buffer overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [slackware-security] GAIM security update (SSA:2004-026-01) (Slackware Security Team <security@...ckware.com>)
• Re: Self-Executing FOLDERS: Windows XP Explorer Part V (Jelmer <jkuperus@...net.nl>)
• [SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys (Matt Zimmerman <mdz@...ian.org>)
• Chaosreader: Trace TCP/UDP from snoop/tcpdump logs (Brendan Gregg <brendan.gregg@....com.au>)
• MDKSA-2004:008 - Updated tcpdump packages fix several vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability (Tim Yamin <plasmaroo@...too.org>)
• Re: symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) (AntiVir Support <support@...ivir.de>)
• Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code (<lowhalo@...h.com>)
• Re: Self-Executing FOLDERS: Windows XP Explorer Part V (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• RE: Finjan SurfinGate Vulnerability ("Menashe Eliezer" <menashe@...jan.com>)
• Elevated scanning: TCP port 135 (RPC) AND 445 (Domain Services) (Nicholas Weaver <nweaver@...berkeley.edu>)
• GOOROO CROSSING: File Spoofing Internet Explorer 6 ("http-equiv@...ite.com" <1@...ware.com>)
• CERT Advisory CA-2004-02 Email-borne Viruses (CERT Advisory <cert-advisory@...t.org>)
• [ GLSA 200401-04 ] GAIM 0.75 Remote overflows (Tim Yamin <plasmaroo@...too.org>)
• GAIM Patch update (Stefan Esser <s.esser@...atters.de>)
• information and reverse engineering bits of the Mydoom worm (Gadi Evron <ge@...tistical.reprehensible.net>)
• RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 ("Oliver Lavery" <olavery@...x.com>)
• SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities (KF <dotslash@...soft.com>)
• Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 ("Bharat Mediratta" <bharat@...alto.com>)

• Re: vulnerabilities of postscript printers (Ian Farquhar - Network Security Group <Ian.Farquhar@....COM>)
• Re: information and reverse engineering bits of the Mydoom worm (InCisT <InCisT@...sikle.net>)
• RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 (<tlarholm@...x.com>)
• SRT2004-01-17-0227 - BlackICE allows local users to become SYSTEM (KF <dotslash@...soft.com>)
• [SECURITY] [DSA 430-1] New trr19 packages fix local games exploit (joey@...odrom.org (Martin Schulze))
• Changes to CERT Advisories [INFO#04.20510] (CERT Advisory <cert-advisory@...t.org>)
• RFC: virus handling (Thomas Zehetbauer <thomasz@...tmaster.org>)
• Denial Of Service in SurfNOW 2.2 ("Donato Ferrante" <fdonato@...istici.org>)
• phpBB privmsg.php XSS vulnerability patch. (Shaun Colley <shaunige@...oo.co.uk>)
• Re: New MiMail variant is DDoS'ing SCO.com (Bob Toxen <bob@...ysecurelinux.com>)
• BRS WebWeaver Webserver Cross Site Scripting Vulnerability (Oliver Karow <oliver.karow@....de>)
• Oracle toplink mapping workbench password algorithm (Pete Finnigan <plsql@...efinnigan.com>)
• ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving (ZetaLabs <zetalabs@...e-h.org>)
• SGI Advanced Linux Environment security update #9 (SGI Security Coordinator <agent99@....com>)
• outbreak warning: new Myydoom.B is out (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: outbreak warning: new Myydoom.B is out (Gadi Evron <ge@...tistical.reprehensible.net>)
• RE: outbreak warning: new Myydoom.B is out (<RMcElroy@....com>)
• Re: outbreak warning: new Myydoom.B is out (John Kinsella <jlk@...ashyour.com>)

• [FLSA-2004:1207] Updated cvs resolves security vulnerability (Jesse Keating <jkeating@...olutions.net>)
• Security Announcement: untrusted ELF library path in some cvsup binary RPMs (Matthias Andree <matthias.andree@....de>)
• new WIN virus? (Atom 'Smasher' <atom@...picious.org>)
• ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving (ZetaLabs <zetalabs@...e-h.org>)
• MacOS X TruBlueEnvironment Buffer Overflow ("@stake Advisories" <advisories@...take.com>)
• ----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========---------- (pask@...n3s.com)
• ----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- (pask@...n3s.com)
• SUSE Security Announcement: gaim (SuSE-SA:2004:004) (thomas@...e.de (Thomas Biege))
• ----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- (pask@...n3s.com)
• userland binary vulnerabilities on IRIX (SGI Security Coordinator <agent99@....com>)
• Cisco Security Advisory: Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049) (Cisco Systems Product Security Incident Response Team <psirt@c…)

• Refuting tall-tales and stories about the Mydoom worms (Gadi Evron <ge@...tistical.reprehensible.net>)
• Serv-U exploit ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
• FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

• Mydoom DDoS attack time table (Gadi Evron <ge@...tistical.reprehensible.net>)
• another Trojan with the ADO hole? + a twist in the story (Gadi Evron <ge@...tistical.reprehensible.net>)
• [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (Jesse Keating <jkeating@...olutions.net>)
• [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) (Jesse Keating <jkeating@...olutions.net>)
• Re: another Trojan with the ADO hole? + a twist in the story (Paul Schmehl <pauls@...allas.edu>)

433 messages

Powered by blists - more mailing lists