bugtraq mailing list - 2003/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[next month>] [year] [list]

bugtraq mailing list - 2003/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴ 33	⁵ 13	⁶ 21	⁷ 19	⁸ 15	⁹
¹⁰ 4	¹¹ 20	¹² 18	¹³ 23	¹⁴ 12	¹⁵ 16	¹⁶ 3
¹⁷ 22	¹⁸ 11	¹⁹ 29	²⁰ 21	²¹ 23	²² 12	²³
²⁴ 18	²⁵ 27	²⁶ 18	²⁷ 16	²⁸ 33	²⁹ 10	³⁰ 1
³¹ 13

Messages by day:

March 4 (33 messages)

[VulnDiscuss] Re: sendmail 8.12.8 available ("Mordechai T. Abzug" <morty@...kir.org>)
[LSD] Technical analysis of the remote sendmail vulnerability (Last Stage of Delirium <contact@...-pl.net>)
[OpenPKG-SA-2003.014] OpenPKG Security Advisory (tcpdump) (OpenPKG <openpkg@...npkg.org>)
[SECURITY] [DSA-257-1] sendmail remote exploit (Wichert Akkerman <wichert@...gy.net>)
GLSA: sendmail (200303-4) (Daniel Ahlberg <aliz@...too.org>)
Fwd: APPLE-SA-2003-03-03 sendmail (Bryan Blackburn <blb@...ox.com>)
HP-UX security bulletins digest [Fwd/sendmail issue] (support_feedback@...support2-mail.external.hp.com (IT Resource Center\ ))
uploader.php vulnerability (kingcope@....net)
Re: New HP Jetdirect SNMP password vulnerability when using Web JetAdmin (Sven Pechler <helpdesk@...tue.nl>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Andreas Hofmeister <andi@...utions.pyramid.de>)
[OpenPKG-SA-2003.017] OpenPKG Security Advisory (file) (OpenPKG <openpkg@...npkg.org>)
RE: Siemens *35 and 45 series phones SMS Danial of Service ("Willis Johnson" <willisj@...rosoft.com>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Robert Waldner <rw@...etec.at>)
[OpenPKG-SA-2003.016] OpenPKG Security Advisory (sendmail) (OpenPKG <openpkg@...npkg.org>)
[VulnDiscuss] Re: sendmail 8.12.8 available (Nico Erfurth <masta@...lgolf.de>)
[OpenPKG-SA-2003.015] OpenPKG Security Advisory (zlib) (OpenPKG <openpkg@...npkg.org>)
Re: axis2400 webcams (jean-philippe Gaulier <jean-philippe.gaulier@...lim.fr>)
RE: Security responsible at AOL ("Edward Beheler" <edward.beheler@...howard.in.us>)
Re[2]: Siemens *35 and 45 series phones SMS Danial of Service (JoÃ£o ColaÃ§o <colaco@...visao.pt>)
uploader.php script (auto40951@...hmail.com)
Log corruption on multiple webservers, log analyzers,... (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
Re: [LSD] Technical analysis of the remote sendmail vulnerability (Eric Allman <eric+bugtraq@...dmail.org>)
Sendmail testing tool. (Jon Larabee <jlarabee@...enapple.com>)
iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) ("iDEFENSE Labs" <labs@...fense.com>)
BIND 9.2.2 Vulnerabilities? (John <bugtraq@...msday.com>)
Re: BIND 9.2.2 Vulnerabilities? (Albert Sunseri <sunseri@...i.net>)
Fwd: CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
NetBSD Security Advisory 2003-002: Malformed header Sendmail Vulnerability (NetBSD Security Officer <security-officer@...bsd.org>)
NetBSD Security Advisory 2003-001: Encryption weakness in OpenSSL code (NetBSD Security Officer <security-officer@...bsd.org>)
Re: Sendmail testing tool. (David Huecking <d.huecking@....net>)
Re: Netscape Communicator 4.x sensitive informations in configuration file (<mstoltz@...scape.com>)
Re: BIND 9.2.2 Vulnerabilities? (David Kennedy CISSP <david.kennedy@....org>)
Security Update: [CSSA-2003-008.0] Linux: php bypass safe_mode and injected control chars vulnerabilities (security@...dera.com)

March 5 (13 messages)

[RHSA-2003:042-07] Updated squirrelmail packages close cross-site scripting vulnerabilities (bugzilla@...hat.com)
GLSA: tcpdump (200303-5) (Daniel Ahlberg <aliz@...too.org>)
shopfactory shopping cart ("Maarten" <secfocus@...tsuijker.com>)
Sendmail exploit released??? (Kryptik Logik <kryptiklogik@...hmail.com>)
RE: Siemens *35 and 45 series phones SMS Danial of Service (Dawid SzymaÅ„ski <dawszy@...net.wroc.pl>)
3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet (<bit_logic@...ail.com>)
Re: SA-03:04.sendmail Bin Update ("Charles M. Richmond" <cmr@...c.com>)
Re: BIND 9.2.2 Vulnerabilities? (Gerhard den Hollander <gerhard@...ongeo.com>)
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet (Niels Bakker <niels=bugtraq@...ker.net>)
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet ("David G. Andersen" <dga@....mit.edu>)
Re: Siemens *35 and 45 series phones SMS Danial of Service ("Christian \"cycloon\" Gut" <cycloon@...root.org>)
potential buffer overflow in lprm (fwd) (Dave Ahmad <da@...urityfocus.com>)
Re: BIND 9.2.2 Vulnerabilities? (John <bugtraq@...msday.com>)

March 6 (21 messages)

Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X (security@...dera.com)
[RHSA-2003:039-06] Updated im packages fix insecure handling of temporary files (redhat-announce-list-admin@...hat.com)
[RHSA-2003:062-11] Updated OpenSSL packages fix timing attack (redhat-announce-list-admin@...hat.com)
PHP-Nuke 6.0 (& 6.5?) : Serious SQL Injection Security Holes ("Frog Man" <leseulfrog@...mail.com>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Timothy Farrell <xfarrell@...sp.net>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Luciano Miguel Ferreira Rocha <strange@....no-ip.org>)
[SCSA-009] Remote Command Execution Vulnerability in PHP Ping ("Grégory" Le Bras <gregory.lebras@...urity-corp.org>)
ILLC (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
Re: Siemens *35 and 45 series phones SMS Danial of Service ("Raymond A. Meijer" <raymond@...trance.org>)
Re: [RHSA-2003:062-11] Updated OpenSSL packages fix timing attack (Ricardo NÃºÃ±ez <rinunez@....ve>)
file(1) exploit code (Crazy Einstein <crazy_einstein@...oo.com>)
GLSA: snort (200303-6) (Daniel Ahlberg <aliz@...too.org>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Lukasz Wojcik <lookie@....medianet.pl>)
Re: Siemens *35 and 45 series phones SMS Danial of Service ("Michael Landsmann" <michael@...ticdale.com>)
Re: 3Com SuperStack 3 Firewall Content Filter Exploitable Via Telnet (der Mouse <mouse@...ents.Montreal.QC.CA>)
Re: BIND 9.2.2 Vulnerabilities? (Scott Wunsch <bugtraq@...cking.wunsch.org>)
Re: sendmail 8.12.8 available (Neil W Rickert <rickert+bt@...niu.edu>)
New HP Jetdirect SNMP password vulnerability when using Web JetAdmin (Sven Pechler <helpdesk@...tue.nl>)
[New Research Paper] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers ("Mike Schiffman" <mike@...onexus.com>)
[sorcerer-spells] BIND-SORCERER2003-03-06 (Michael Walton <mwalton@...lene.com>)
xscreensaver exploit for Redhat 7.3 (Angelo Rosiello <guilecool@....com>)

March 7 (19 messages)

Security Update: [CSSA-2003-009.0] Linux: slocate command line buffer overflows (security@....com)
[VulnDiscuss] Re: sendmail 8.12.8 available ("John D. Hardin" <jhardin@...sec.org>)
[RHSA-2003:086-07] Updated file packages fix vulnerability (redhat-announce-list-admin@...hat.com)
MDKSA-2003:030 - Updated file packages fix stack overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: potential buffer overflow in lprm (fwd) (noir sin <noir@...mpos.org>)
Wordit Logbook Version 0.98b3 (Aleksey Sintsov <theforce@...ail.com>)
GLSA: mysqlcc (200303-7) (Daniel Ahlberg <aliz@...too.org>)
DBTools' DBManager Information Leak Vulnerability (Ignacio Vazquez <infosecmanager@...taura.com.ar>)
[ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. (EnGarde Secure Linux <security@...rdiandigital.com>)
[sorcerer-spells] SNORT-SORCERER2003-03-06-1 (Michael Walton <mwalton@...lene.com>)
Re: xscreensaver exploit for Redhat 7.3 (Steven Leikeim <steven@...l.ucalgary.ca>)
[ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. (EnGarde Secure Linux <security@...rdiandigital.com>)
Smoothwall Firewall SNORT buffer overflow ("Martinez, Sylvain" <Sylvain_Martinez@....bp.com>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (Mark Schellhase <Mark.Schellhase@...nline.de>)
Re[2]: Siemens *35 and 45 series phones SMS Danial of Service (Matti Haack <m.haack@...ck-it.de>)
Re: sendmail 8.12.8 available (Bennett Todd <bet@...ul.net>)
[ESA-20030307-008] 'file' ELF parsing routine buffer overflow vulnerability. (EnGarde Secure Linux <security@...rdiandigital.com>)
Re: xscreensaver exploit for Redhat 7.3 (Inode <inode@...iaservice.net>)
SimpleBBS 1.0.6 Default Permissions Vuln (flur <flur@...rnet.org>)

March 8 (15 messages)

[EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group ("Eitan Caspi" <eitancaspi@...oo.com>)
NII Advisory - Buffer Overflow in SQLBase (Revised) ("Network Intelligence India Pvt. Ltd." <info@....co.in>)
Security Update: [CSSA-2003-SCO.5] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : remote buffer overflow in sendmail (CERT CA-2003-07) (security@....com)
Re: Smoothwall Firewall SNORT buffer overflow ("William Anderson" <neuro@...l.com>)
OpenBSD lprm(1) exploit (Claes Nyberg <md0claes@...tud.chalmers.se>)
Vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host. (Sil <sil@...uxquestions.net>)
Re: Sendmail exploit released??? (<zero_latency@...hmail.com>)
Re: Siemens *35 and 45 series phones SMS Danial of Service (<kornau@...online.net>)
MySQL user can be changed to root ("bugsman@...ero.it" <bugsman@...ero.it>)
RE: JRun: The Easiness of Session Fixation ("Mitja Kolsek" <lists@...os.si>)
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group ("Andrew G. Tereschenko" <secure.bugtraq…)
GLSA: snort (200303-6.1) (Daniel Ahlberg <aliz@...too.org>)
[ESA-20030307-008] 'file' ELF parsing routine buffer overflow vulnerability. (EnGarde Secure Linux <security@...rdiandigital.com>)
Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue (Martin O'Neal <bugtraq@...saire.com>)
MDKSA-2003:029 - Updated snort packages fix buffer overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)

March 10 (4 messages)

Re: MySQL user can be changed to root ("Guido A.J. Stevens" <gyst@....nl>)
Re: MySQL user can be changed to root (Sergei Golubchik <serg@...ql.com>)
PHP-Nuke 6.0 & 6.5RC2 SQL Injection Again ("Frog Man" <leseulfrog@...mail.com>)
Win32hlp exploit for : ":LINK overflow" (descript <descript@...8.s0h.cc>)

March 11 (20 messages)

Cross-Referencing Linux vulnerability (Albert Puigsech Galicia <ripe@...9ezine.org>)
Security Update: [CSSA-2003-SCO.4.1] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : REVISED: Lax permissions on /dev/X (security@....com)
[SECURITY] [DSA 258-1] New ethereal packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
QPopper 4.0.x buffer overflow vulnerability (Florian Heinz <heinz@...non-ag.de>)
Security Update: [CSSA-2003-011.0] Linux: format string vulnerability in zlib (gzprintf) (security@....com)
Security Update: [CSSA-2003-010.0] Linux: remote buffer overflow in sendmail (CERT CA-2003-07) (security@....com)
[SNS Advisory No.63] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code ("Secure Net Service(SNS) Security Advisory" <snsadv@....co.jp>)
.MHT Buffer Overflow in Internet Explorer (Tom Tanaka <tomatell@...on-sol.jp>)
Re: MySQL user can be changed to root (Christopher McCrory <chrismcc@...cegrabber.com>)
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group ("Andrew G. Tereschenko" <secure.bugtraq…)
[Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers ("Mike Schiffman" <mike@...onexus.com>)
Vulnerability in man < 1.5l (Jack Lloyd <lloyd@....jhu.edu>)
Re: .MHT Buffer Overflow in Internet Explorer ("http-equiv@...ite.com" <http-equiv@...ware.com>)
SOHO Routefinder 550 VPN, DoS and Buffer Overflow ("Peter Kruse" <kruse@...sesecurity.dk>)
Re: .MHT Buffer Overflow in Internet Explorer ("jelmer" <jelmer@...erus.xs4all.nl>)
GLSA: ethereal (200303-10) (Daniel Ahlberg <aliz@...too.org>)
Re: QPopper 4.0.x buffer overflow vulnerability (Jonas Frey <jonas.frey@....de>)
Re: Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue ("http-equiv@...ite.com" <http-equiv@...ware.com>)
RE: Win32hlp exploit for : ":LINK overflow" ("Rob Shein" <shoten@...rpower.net>)
802.11b DoS exploit (Mark Osborne <mark@...d-fat-bloke.co.uk>)

March 12 (18 messages)

[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download (nesumin <nesumin@...thome.net>)
Re: .MHT Buffer Overflow in Internet Explorer (Jouko Pynnonen <jouko@...utions.fi>)
Fwd: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Re: .MHT Buffer Overflow in Internet Explorer ("Thor Larholm" <thor@...x.com>)
Re: QPopper 4.0.x buffer overflow vulnerability (Randall Gellens <rg_public.1@...gg.qualcomm.com>)
Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers (Mike Bell <mike@...ebell.org>)
[sorcerer-spells] MAN-SORCERER2003-03-11 (Michael Walton <mwalton@...lene.com>)
pgp4pine stack overflow vulnerability (Eric AUGE <eric.auge@...com>)
Re: QPopper 4.0.x buffer overflow vulnerability (Florian Heinz <heinz@...non-ag.de>)
Re: QPopper 4.0.x buffer overflow vulnerability (Jaroslaw Zachwieja <grok@....pl>)
Re: QPopper 4.0.x buffer overflow vulnerability (Torsten Mueller <torsten@...hesoft.de>)
VPOPMail Account Administration (squirrel mail) version 0.9.7 (error <error@...tinthenoise.net>)
RE: QPopper 4.0.x buffer overflow vulnerability ("Jonathan A. Zdziarski" <jonathan@...workdweebs.com>)
NetBSD Security Advisory 2003-003 Buffer Overflow in file(1) (NetBSD Security Officer <security-officer@...bsd.org>)
@(#)Mordred Labs advisory - Remote DoS in PostgreSQL <= 7.2.2 (sir.mordred@...hmail.com)
Re: QPopper 4.0.x buffer overflow vulnerability (Florian Heinz <heinz@...non-ag.de>)
Potential PGP signature verification problem? (Avri Schneider <avri_schneider@...oo.com>)
MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command (Mandrake Linux Security Team <security@...ux-mandrake.com>)

March 13 (23 messages)

PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability (Mike Kristovich <mkristovich@...x.com>)
SuSE Security Announcement: lprold (SuSE-SA:2003:0014) (Thomas Biege <thomas@...e.de>)
R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication ("Rapid 7 Security Advisories" <advisory@...id7.com>)
R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression ("Rapid 7 Security Advisories" <advisory@...id7.com>)
PivX Advisory MK002A Intuit TurboTax Information Disclosure Vulnerability (Mike Kristovich <mkristovich@...x.com>)
Mordred Security Labs now online (Sir Mordred <mordred@...ail.com>)
RE: Win32hlp exploit for : ":LINK overflow" ("Josh Gilmour" <jgilmour@...bi.com>)
SuSE Security Announcement: tcpdump (SuSE-SA:2003:0015) (Thomas Biege <thomas@...e.de>)
R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow ("Rapid 7 Security Advisories" <advisory@...id7.com>)
RE: Win32hlp exploit for : ":LINK overflow" ("Rob Shein" <shoten@...rpower.net>)
[SECURITY] [DSA-260-1] New file package fixes buffer overflow (Michael Stone <mstone@...cker.debian.org>)
Sun ONE (iPlanet) Application Server Connector Module Overflow ("@stake Advisories" <advisories@...take.com>)
RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V ulnerability (Jeremy Epstein <jeremy.epstein@...methods.com>)
Re: QPopper 4.0.x buffer overflow vulnerability (Harald Hellmuth <hh@...tserver.de>)
Fwd: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Re: [VulnWatch] pgp4pine stack overflow vulnerability (Jacek Lipkowski <sq5bpf@...d.ch.pw.edu.pl>)
Nokia SGSN (DX200 Based Network Element) SNMP issue ("@stake Advisories" <advisories@...take.com>)
Re: Potential PGP signature verification problem? (Peter Hanecak <hanecak@...aloman.com>)
Security Update: [CSSA-2003-SCO.6] OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : remote buffer overflow in sendmail (CERT CA-2003-07) (security@....com)
response to tax software not encrypting tax info (auto40951@...hmail.com)
Protegrity buffer overflow (sss sss <protegritysecvuln@...oo.com>)
RE: Win32hlp exploit for : ":LINK overflow" ("Rob Shein" <shoten@...rpower.net>)
RE: Win32hlp exploit for : ":LINK overflow" ("Josh Gilmour" <jgilmour@...bi.com>)

March 14 (12 messages)

FW: The U.S. should not invade Iraq at this time ("Jason Coombs" <jasonc@...ence.org>)
Re: Potential PGP signature verification problem? (Florian Weimer <Weimer@...T.Uni-Stuttgart.DE>)
[SECURITY] [DSA 261-1] New tcpdump packages fix denial of service vulnerability (joey@...odrom.org (Martin Schulze))
Buffer overflows in ircII-based clients (Timo Sirainen <tss@....fi>)
RE: response to tax software not encrypting tax info ("er t" <er587@...mail.com>)
Vulnerability in OpenSSL (David Brumley <dbrumley@...nford.edu>)
GiantRat Mailer exposes PoP password (maninthemiddle@...hmail.com)
Win32: Postmessage API security flaw (Palan <palan@...ealbox.com>)
Obfuscating sensitive data? (was: response to tax software not encrypting tax info) (Andreas Beck <becka@...atec.de>)
[OpenPKG-SA-2003.018] OpenPKG Security Advisory (qpopper) (OpenPKG <openpkg@...npkg.org>)
@(#)Mordred Labs advisory - Texis sensitive information leak (sir.mordred@...hmail.com)
Unknown trust error when downloading ocget.dll (Ken Fischer <kenf@...rs.junebug.org>)

March 15 (16 messages)

RE: response to tax software not encrypting tax info (<Ken.Williams@...curityonline.com>)
Re: Obfuscating sensitive data? (was: response to tax software not encrypting tax info) (Dan Harkless <bugtraq@...kless.org>)
Guestbook v1.1.3 CSS Vuln (flur <flur@...rnet.org>)
Security Update: [CSSA-2003-012.0] Linux: KDE rlogin.protocol and telnet.protocol url kio Vulnerability (security@....com)
Denial-Of-Service holes in JDK 1.4.1_01 (Marc Schoenefeld <schonef@...-muenster.de>)
Re: @(#)Mordred Labs advisory - Texis sensitive information leak ("Kurt Seifried" <listuser@...fried.org>)
[SECURITY] [DSA-262-1] samba security fix (Wichert Akkerman <wichert@...gy.net>)
@(#)Mordred Security Labs - RSA ClearTrust Cross Site Scripting issues (sir.mordred@...hmail.com)
PROBLEMS WITH WINDOWS SHORTCUTS (S G Masood <sgmasood@...oo.com>)
A response to Bruce Schneier on MS patch management and Sapphire ("Jason Coombs" <jasonc@...ence.org>)
qpopper timing analysis on to determine if a username exists on a system (Dennis Lubert <plasmahh@...ormatik.uni-bremen.de>)
Re: @(#)Mordred Labs advisory - Texis sensitive information leak ("Kurt Seifried" <kurt@...fried.org>)
Remote Exploit in Business::OnlinePayment::WorldPay::Junior (Jason Clifford <security@...on.ukpost.com>)
Re: [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the local administrators group ("Eitan Caspi" <eitancaspi@...oo.com>)
Re: response to tax software not encrypting tax info (Andreas Marx <amarx@...a-it.de>)
Re: Unknown trust error when downloading ocget.dll (Garry_Stewart@...itasdgc.com)

March 16 (3 messages)

Vulnerabilities in the Kerberos version 4 protocol (hack4life@...hmail.com)
Timing attack against RSA private keys. (hack4life@...hmail.com)
AOL's Billion SPAM March on Cyberspace ("Jason Coombs" <jasonc@...ence.org>)

March 17 (22 messages)

MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol (Tom Yu <tlyu@....EDU>)
[ADVISORY] Timing Attack on OpenSSL (Ben Laurie <ben@...roup.co.uk>)
[RHSA-2003:072-08] Updated Gnome-lokkit packages fix vulnerability (redhat-announce-list-admin@...hat.com)
[RHSA-2003:054-00] Updated rxvt packages fix various vulnerabilites (bugzilla@...hat.com)
Re: [ADVISORY] Timing Attack on OpenSSL (Christopher Fowler <cfowler@...postsentinel.com>)
McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) ("@stake Advisories" <advisories@...take.com>)
Re: [ADVISORY] Timing Attack on OpenSSL (Jeffrey Altman <jaltman@...umbia.edu>)
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability (joey@...odrom.org (Martin Schulze))
[RHSA-2003:098-00] Updated 2.4 kernel fixes vulnerability (bugzilla@...hat.com)
SPI ADVISORY: Remote Administration of BEA WebLogic Server and Express ("Caleb Sima" <csima@...dynamics.com>)
GLSA: qpopper (200303-12) (Daniel Ahlberg <aliz@...too.org>)
S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server ("Lluis Mora" <llmora@...sec.com>)
[INetCop Security Advisory #2002-0x82-013] Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. ("dong-h0un U" <xploit@...kermail.com>)
GLSA: samba (200303-11) (Daniel Ahlberg <aliz@...too.org>)
Security Bugfix for Samba - Samba 2.2.8 Released ("Maslov, Snowy" <Snowy.Maslov@...itsu.com.au>)
[SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
Re: qpopper timing analysis on to determine if a username exists on a system (Waldo Nell <pwnell@...rica.com>)
[Sorcerer-spells] SAMBA-SORCERER2003-03-17 (Michael Walton <mwalton@...lene.com>)
MDKSA-2003:032 - Updated samba packages fix remote root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
PHP-Nuke 5.5 and 6.0: Path Disclosure (Rynho Zeros Web <hackargentino@....net>)
CERT Advisory CA-2003-09 Buffer Overflow in Microsoft IIS 5.0 (fwd) (Dave Ahmad <da@...urityfocus.com>)
Re: [SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability (<andrewg@...net.au>)

March 18 (11 messages)

Re: PROBLEMS WITH WINDOWS SHORTCUTS (Alexander Kiwerski <alex@...star.net>)
[] New samba packages fix security vulnerabilities (bugzilla@...hat.com)
[ESA-20030318-009] Several 'kernel' vulnerabilities (EnGarde Secure Linux <security@...rdiandigital.com>)
[security bulletin] SSRT0845U HP Tru64 UNIX, HP-UX stdio Potential Security Vulnerability (Dave Ahmad <da@...urityfocus.com>)
[OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql) (OpenPKG <openpkg@...npkg.org>)
Re: @(#)Mordred Labs advisory - Texis sensitive information leak (<info@...nderstone.com>)
[OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba) (OpenPKG <openpkg@...npkg.org>)
GLSA: mysql (200303-14) (Daniel Ahlberg <aliz@...too.org>)
GLSA: man (200303-13) (Daniel Ahlberg <aliz@...too.org>)
[ESA-20030318-009] Several 'kernel' vulnerabilities (EnGarde Secure Linux <security@...rdiandigital.com>)
Re: Microsoft Security Advisory MS 03-007 ("Dave Aitel" <dave@...unitysec.com>)

March 19 (29 messages)

MDKSA-2003:033 - Updated zlib packages fix buffer overrun vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Microsoft Security Advisory MS 03-007 ("Brett Moore" <brett@...twarecreations.co.nz>)
[OpenPKG-SA-2003.020] OpenPKG Security Advisory (modssl) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2003.019] OpenPKG Security Advisory (openssl) (OpenPKG <openpkg@...npkg.org>)
Simple WebDAV method validator (PERL code) (SensePost Research <research@...sepost.com>)
SIPS (PHP) (subj <r2subj3ct@...lan.org>)
TSLSA-2003-0009 - mysql (tsl@...stix.com (Trustix Secure Linux Advisor))
TSLSA-2003-0011 - samba (tsl@...stix.com (Trustix Secure Linux Advisor))
TSLSA-2003-0010 - openssl (tsl@...stix.com (Trustix Secure Linux Advisor))
TSLSA-2003-0007 - kernel (tsl@...stix.com (Trustix Secure Linux Advisor))
PHP Message Board/Guestbook (subj <r2subj3ct@...lan.org>)
Updated: MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol (Tom Yu <tlyu@....EDU>)
[VulnDiscuss] New IIS 5.0 Utility (info_sl <info@...uritylab.ru>)
Some XSS vulns (Ertan Kurt <ertank@...mpos.org>)
[OpenPKG-SA-2003.023] OpenPKG Security Advisory (delegate) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2003.024] OpenPKG Security Advisory (ircii) (OpenPKG <openpkg@...npkg.org>)
[INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! ("dong-h0un U" <xploit@...kermail.com>)
[SECURITY] [DSA 264-1] New lxr packages fix information disclosure (joey@...odrom.org (Martin Schulze))
SuSE Security Announcement: samba (SuSE-SA:2003:016) (Marc Heuse <marc@...e.de>)
WF-Chat (subj <r2subj3ct@...lan.org>)
Re: Some XSS vulns (mcbethh@...pl)
[OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding (Bodo Moeller <bodo@...nssl.org>)
EEYE: XDR Integer Overflow ("Marc Maiffret" <marc@...e.com>)
SMB/CIFS Security Vulnerability in Samba on IRIX (SGI Security Coordinator <agent99@....com>)
Easy DoS on Kaspersky Anti-Hacker v1.0 (Bojan Zdrnja <Bojan.Zdrnja@....hr>)
linux kmod/ptrace bug - details (Andrzej Szombierski <qq@...u.eu.org>)
MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes (Tom Yu <tlyu@....EDU>)
RE: EEYE: XDR Integer Overflow ("Sinan Eren" <SEren@...ercept.com>)
[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder (bugzilla@...hat.com)

March 20 (21 messages)

Java Security Fixes on IRIX (SGI Security Coordinator <agent99@....com>)
iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine ("iDEFENSE Labs" <labs@...fense.com>)
CORE-2003-03-04-01: Multiple vulnerabilities in Ximian 's Evolution Mail User Agent (CORE SECURITY TECHNOLOGIES ADVISORIES <advisories@...esecurity.com>)
mutt-1.4.1 fixes a buffer overflow. (Thomas Roessler <roessler@...s-not-exist.org>)
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (bugzilla@...hat.com)
[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. (EnGarde Secure Linux <security@...rdiandigital.com>)
Security Update: [CSSA-2003-013.0] Linux: integer overflow vulnerability in XDR/RPC routines (security@....com)
[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. (EnGarde Secure Linux <security@...rdiandigital.com>)
[Sorcerer-spells] GLIBC-SORCERER2003-03-20 (Michael Walton <mwalton@...lene.com>)
Microsoft Security Bulletin MS03-009: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065) … (Dave Ahmad <da@...urityfocus.com>)
[Sorcerer-spells] KRB5-SORCERER2003-03-20 (Michael Walton <mwalton@...lene.com>)
Fwd: CERT Advisory CA-2003-10 Integer overflow in Sun RPC XDR library routines (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
[IPS] osCommerce multiple XSS vulnerabilities (Daniel AlcÃ¡ntara de la Hoz <seguridad@...oyectos.com>)
[Sorcerer-spells] LINUX-SORCERER2003-03-20 (Michael Walton <mwalton@...lene.com>)
Re: PROBLEMS WITH WINDOWS SHORTCUTS ("Dan Daggett" <csiwebmaster@....edu>)
FreeBSD Security Advisory FreeBSD-SA-03:05.xdr (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[OpenPKG-SA-2003.025] OpenPKG Security Advisory (mutt) (OpenPKG <openpkg@...npkg.org>)
Safeboot PC Security User Emuneration Vulnerability ("Advisories" <advisories@...plc.com>)
IBM Tivoli Firewall Security Toolbox buffer overflow vulnerability (Niels Heinen <niels.heinen@...zen.com>)
CORE-20030304-02: Vulnerability in Mutt Mail User Agent (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[OpenPKG-SA-2003.026] OpenPKG Security Advisory (openssl) (OpenPKG <openpkg@...npkg.org>)

March 21 (23 messages)

Opara 6.06 Released, Security-Hole Left (nesumin <nesumin@...thome.net>)
[SCSA-011] Path Disclosure Vulnerability in XOOPS ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
[RHSA-2003:108-01] Updated Evolution packages fix multiple vulnerabilities (redhat-announce-list-admin@...hat.com)
Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
New attack vectors and a vulnerability dissection of MS03-007 ("David Litchfield" <david@...software.com>)
GLSA: evolution (200303-18) (Daniel Ahlberg <aliz@...too.org>)
[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability (EnGarde Secure Linux <security@...rdiandigital.com>)
SuSE Security Announcement: qpopper (SuSE-SA:2003:018) (Thomas Biege <thomas@...e.de>)
[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability (EnGarde Secure Linux <security@...rdiandigital.com>)
SuSE Security Announcement: ethereal (SuSE-SA:2003:019) (Thomas Biege <thomas@...e.de>)
SuSE Security Announcement: file (SuSE-SA:2003:017) (Thomas Biege <thomas@...e.de>)
Edonkey and Overnet resources consumption (Auriemma Luigi <aluigi@...x.com>)
GLSA: kernel (200303-17) (Daniel Ahlberg <aliz@...too.org>)
[Sorcerer-spells] OPENSSL-SORDCERER2003-03-21 (Michael Walton <mwalton@...lene.com>)
IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability (IRM Advisories <advisories@...plc.com>)
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible ("Hines, Eric" <ehin4@...state.com>)
Guestbook tr3.a (subj <r2subj3ct@...lan.org>)
[VulnDiscuss] RE: New attack vectors and a vulnerability dissection of MS03-007 ("Depp, Dennis M." <deppdm@...l.gov>)
CERT: Vulnerability in web redirectors (<hack4life@...hmail.com>)
RE: [VulnDiscuss] RE: New attack vectors and a vulnerability dissection of MS03-007 ("Jessup, Justin" <Justin.Jessup@...oj.gov>)
Stunnel: RSA timing attacks / key discovery (Brian Hatch <bugtraq@...kr.org>)
FreeBSD Security Advisory FreeBSD-SA-03:06.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

March 22 (12 messages)

RE: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible ("Hines, Eric" <ehin4@...state.com>)
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (dchesterfield@...kofny.com)
NT Service Killer ("tomotocigare" <tomotocigare@...uriteinfo.com>)
SimpleChat (subj <r2subj3ct@...lan.org>)
GLSA: rxvt (200303-16) (Daniel Ahlberg <aliz@...too.org>)
[sorcerer-spells] MUTT-SORCERER2003-03-19 (Michael Walton <mwalton@...lene.com>)
ProtWare "HTML Guardian" has pathetic "encryption" (<rain_song@...hmail.com>)
Re: [INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!! (Suresh Ramasubramanian <suresh@...rus.net>)
GLSA: openssl (200303-15) (Daniel Ahlberg <aliz@...too.org>)
Re: CERT: Vulnerability in web redirectors ("Kurt Seifried" <kurt@...fried.org>)
PHP-Nuke : banners.php ("Frog Man" <leseulfrog@...mail.com>)
PHP-Nuke, 'News' module : Big Security Holes ("Frog Man" <leseulfrog@...mail.com>)

March 24 (18 messages)

Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (Matthias Leu <mleu@...asec.de>)
GLSA: mutt (200303-19) (Daniel Ahlberg <aliz@...too.org>)
IE - reading local files ("Adam [ckkl]" <ckkl@...zta.wp.pl>)
3com RAS 1500 Remote vulnerabilities. (Piotr Chytla <pch@...c.pl>)
Re: IE - reading local files ("jelmer" <jelmer@...erus.xs4all.nl>)
[ESA-20030324-012] 'MySQL' root exploit. (EnGarde Secure Linux <security@...rdiandigital.com>)
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
paFileDB 3.x SQL Injection Vulnerability (flur <flur@...rnet.org>)
GLSA: bitchx (200303-21) (Daniel Ahlberg <aliz@...too.org>)
GLSA: openssl (200303-20) (Daniel Ahlberg <aliz@...too.org>)
[ESA-20030324-012] 'MySQL' root exploit. (EnGarde Secure Linux <security@...rdiandigital.com>)
[SECURITY] [DSA 267-1] New lpr packages fix local root exploit (joey@...odrom.org (Martin Schulze))
SuSE Security Announcement: mutt (SuSE-SA:2003:020) (Thomas Biege <thomas@...e.de>)
WebDav Exploit ffs (Rafael NuÃ±ez <rnunez@...entech.com.ve>)
Security Update: [CSSA-2003-SCO.7] UnixWare 7.1.1 Open UNIX 8.0.0 : Several vulnerabilities in XDR/RPC routines (security@....com)
DEF CON Announcement: CFP, Media now on line! (The Dark Tangent <dtangent@...con.org>)
Security Update: [CSSA-2003-014.0] Linux: several recently discovered openssl vulnerabilities (security@....com)
Multiple Vulnerabilities and Enhancements in ftpd on IRIX (SGI Security Coordinator <agent99@....com>)

March 25 (27 messages)

[RHSA-2003:095-02] New samba packages fix security vulnerabilities (bugzilla@...hat.com)
Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL (Bryan Blackburn <blb@...ox.com>)
Re: Buffer overflows in ircII-based clients (caf@...rana.org)
@(#)Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc() function (Sir Mordred <mordred@...ail.com>)
GLSA: glibc (200303-22) (Daniel Ahlberg <aliz@...too.org>)
CSS in PHP WEB CHAT ("Over_G" <overg@...l.ru>)
[SECURITY] [DSA 268-1] New mutt packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
IRM 005: JWalk Application Server Version 3.2c9 Directory Traversal Vulnerability (IRM Advisories <advisories@...plc.com>)
PHPNuke viewpage.php allows Remote File retrieving (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
VChat (subj <r2subj3ct@...lan.org>)
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (Rizan Sheikh Mohd <sheikhrizan@...ketmail.com>)
Axis Video and Camera Servers - System log access and file access/overwrite via HTTP/CGI (Axis Product Security <product-security@...s.com>)
Emule 0.27b remote crash (Auriemma Luigi <aluigi@...x.com>)
SuSE Security Announcement: kernel (SuSE-SA:2003:021) (Roman Drahtmueller <draht@...e.de>)
Re: PHPNuke viewpage.php allows Remote File retrieving (DaiTengu <daitengu@...-ensemble.com>)
GLSA: stunnel (200303-24) (Daniel Ahlberg <aliz@...too.org>)
Re: PHPNuke viewpage.php and another SQL injections (Tibor Pittich <Tibor.Pittich@...ture.sk>)
IIS 5.0 WebDAV -Proof of concept-. Fully documented. (Roman Medina <roman@...labs.com>)
MDKSA-2003:037 - Updated glibc packages fix vulnerabilities in RPC XDR decoder (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: PHPNuke viewpage.php allows Remote File retrieving (Jim Geovedi <negative@...nesium.net>)
Security Update: [CSSA-2003-015.0] Linux: apcupsd remote root vulnerability and buffer overflows (security@....com)
Re: IIS 5.0 WebDAV -Proof of concept-. Fully documented. (Dave Aitel <dave@...unitysec.com>)
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged (Vladimir Katalov <info@...omsoft.com>)
MDKSA-2003:034 - Updated rxvt packages fix escape sequence insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2003:035 - Updated openssl packages fix RSA-related insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
GLSA: mod_ssl (200303-23) (Daniel Ahlberg <aliz@...too.org>)

March 26 (18 messages)

WebDAV exploit: using wide character decoder scheme (¿ÀÁ¤¿í <mat@...icsecurity.org>)
SuSE Security Announcement: apcupsd (SuSE-SA:2003:022) (Thomas Biege <thomas@...e.de>)
Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue (Martin O'Neal <bugtraq@...saire.com>)
TLS timing attack on OpenSSL [can-2003-78] [bid 6884] exploit ("Martin Vuagnoux" <bugtraq@...gnoux.com>)
RE: Corsaire Security Advisory - Clearswift MAILsweeper MIME atta chment evasion issue (Martin O'Neal <bugtraq@...saire.com>)
@(#)Mordred Labs advisory - Integer overflow in PHP memory allocator (Sir Mordred <mordred@...ail.com>)
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure (joey@...odrom.org (Martin Schulze))
Re: WebDAV exploit: using wide character decoder scheme (Dave Aitel <dave@...unitysec.com>)
Re: PHPNuke viewpage.php allows Remote File retrieving (Christopher Warner <zanee@...nelcode.com>)
Re: PHPNuke viewpage.php allows Remote File retrieving (Tonu Samuel <tonu@...ase.do.not.remove.this.spam.ee>)
Security Advisory - MyTaxexpress 2003 (Nathan Wosnack <nathan@...ervivid.com>)
Re: PHPNuke viewpage.php allows Remote File retrieving (<admin@...lenandmargie.com>)
Re: Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
NetBSD Security Advisory 2003-004: Format string vulnerability in zlib gzprintf() (NetBSD Security Officer <security-officer@...bsd.org>)
NetBSD Security Advisory 2003-005: RSA timing attack in OpenSSL code (NetBSD Security Officer <security-officer@...bsd.org>)
NetBSD Security Advisory 2003-008: faulty length checks in xdrmem_getbytes (NetBSD Security Officer <security-officer@...bsd.org>)
NetBSD Security Advisory 2003-007: (Another) Encryption weakness in OpenSSL code (NetBSD Security Officer <security-officer@...bsd.org>)
[RHSA-2003:051-01] Updated kerberos packages fix various vulnerabilities (bugzilla@...hat.com)

March 27 (16 messages)

Fwd: CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Re: Check Point FW-1: attack against syslog daemon possible ("Dr. Peter Bieringer" <pbieringer@...asec.de>)
NSFOCUS SA2003-01: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability (NSFCOSU Security Team <security@...ocus.com>)
Re: WebDAV exploit: using wide character decoder scheme (JW Oh <mat@...key.org>)
RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator (Stefan Esser <s.esser@...atters.de>)
Vulnerability in my guest book (Over_G <overg@...l.ru>)
@(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function (<sir.mordred@...hmail.com>)
[SECURITY] [DSA 271-1] New ecartis and listar packages fix password change vulnerability (joey@...odrom.org (Martin Schulze))
SNMP security issues in D-Link DSL Broadband Modem/Router (Arhont Information Security <infosec@...ont.com>)
TSLSA-2003-0013 - openssl (Trustix Secure Linux Advisor <tsl@...stix.com>)
TSLSA-2003-0014 - glibc (Trustix Secure Linux Advisor <tsl@...stix.com>)
Re: WebDAV exploit: using wide character decoder scheme (Roman Medina <roman@...labs.com>)
[SCSA-013] Cross Site Scripting vulnerability in testcgi.exe ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit (joey@...odrom.org (Martin Schulze))
Re: SNMP security issues in D-Link DSL Broadband Modem/Router (<m.singh@...co.net>)
Re: Security Advisory - MyTaxexpress 2003 (HCTITS Security Division <security@...ancentrictech.com>)

March 28 (33 messages)

RE: WebDav Exploit ffs ("Exurity Debugs" <exbugs@...ers.com>)
Re: @(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function ("Jason Brooke" <jason@...gamers.com>)
Immunix Secured OS 7+ openssl update (Immunix Security Team <security@...ex.com>)
[SCSA-012] Multiple vulnerabilities in Sambar Server ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
D-Link DI-614 wiresless router crash/reboots (Thomas Reinke <reinke@...oftinc.com>)
Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged ("Dan Harkless" <bugtraq@...kless.org>)
Re: PHPNuke viewpage.php allows Remote File retrieving (Kevin <lists@...ntox.com>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator (Dullien@....de)
PostNuke Sensitive Information Disclosure ("rkc" <rkc@...ompiled.com>)
Re: PHPNuke viewpage.php allows Remote File retrieving (<admin@...lenandmargie.com>)
Problems with Snort-1.9.1 ("Toby Miller" <toby_miller@...lphia.net>)
CORE-2003-0306: RealPlayer PNG deflate heap corruption vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[VulnDiscuss] Clearswift MAILsweeper hotfix ("fwegwg dfbndebndebner" <erwin_lists@...mail.com>)
[SECURITY] [DSA 274-1] New mutt packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
RE: D-Link DI-614 wiresless router crash/reboots (Rick Koenig <rk4028@...hange.concordia.edu>)
Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit ("Eric Hines" <eric.hines@...elabs.com>)
[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 272-1] New dietlibc packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
GLSA: zlib (200303-25) (Daniel Ahlberg <aliz@...too.org>)
MDKSA-2003:039 - Updated kernel22 packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2003:038 - Updated 2,4 kernel packages fix ptrace vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit (Dave Aitel <dave@...unitysec.com>)
Re: D-Link DI-614 wiresless router crash/reboots (Pez Mohr <boredMDer74@...cast.net>)
Mod_Survey ENV tag vulnerability (Joel Palmius <joel.palmius@...se>)
Re: D-Link DI-614 wiresless router crash/reboots (Thierry Zoller <thierry@...ff-em.com>)
Re: SNMP security issues in D-Link DSL Broadband Modem/Router ("Maslov, Snowy" <Snowy.Maslov@...itsu.com.au>)
RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator (<sir.mordred@...hmail.com>)
Re: [SCSA-011] Path Disclosure Vulnerability in XOOPS ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
Re: PostNuke Sensitive Information Disclosure ("Kilmarac Jarov -" <kilmarac@...eaker.net>)
Netscape and Opera crash via java (Marc Schoenefeld <schonef@...-muenster.de>)
Re: Netscape and Opera crash via java ("Wayne D. Hoxsie Jr." <wayne@...net.com>)
Re: Netscape and Opera crash via java (Mischa Krilov <mischa@...v2.com>)

March 29 (10 messages)

Justice Guestbook 1.3 vulnerabilities ("euronymous" <just-a-user@...dex.ru>)
Beanwebb Guestbook v1.0 vulnerabilities ("euronymous" <just-a-user@...dex.ru>)
ScozBook BETA 1.1 vulnerabilities ("euronymous" <just-a-user@...dex.ru>)
sendmail 8.12.9 available (Claus Assmann <ca+announce@...dmail.org>)
CGI-City's CCGuestBook Script Injection Vulns ("BrainRawt ." <brainrawt@...mail.com>)
CGI-City's CCLOG Script Injection Vulns ("BrainRawt ." <brainrawt@...mail.com>)
[security@...ckware.com: [slackware-security] Samba buffer overflow fixed] (White Vampire <whitevampire@...dless.com>)
[security@...ckware.com: [slackware-security] Sendmail buffer overflow fixed] (White Vampire <whitevampire@...dless.com>)
Sendmail: -1 gone wild (Michal Zalewski <lcamtuf@...ttot.org>)
Re: sendmail 8.12.9 available (Dan Harkless <bugtraq@...kless.org>)

March 30 (1 message)

Fwd: CERT Advisory CA-2003-12 Buffer Overflow in Sendmail (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)

March 31 (13 messages)

NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability (NSFCOSU Security Team <security@...ocus.com>)
NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability (NSFCOSU Security Team <security@...ocus.com>)
[RHSA-2003:120-01] Updated sendmail packages fix vulnerability (bugzilla@...hat.com)
[RHSA-2003:034-01] Updated dhcp packages fix possible packet storm (bugzilla@...hat.com)
SRT2003-03-31-1219 - SAP world writable server binaries (KF <dotslash@...soft.com>)
[DDI-1012] Malformed request causes denial of service in HP Instant TopTools (Erik Parker <erik.parker@...italdefense.net>)
Sambar Server "Buffer OverFlow" Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <security@...enzohgh.com>)
[SCSA-014] Remote Denial of Service Vulnerability in EZ Server ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
PHP-Nuke block-Forums.php subject vulnerabilities (<lethalman@...ero.it>)
Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall (Dmitry Maksimov <dmaksimov@...ecurity.ru>)
GLSA: dietlibc (200303-29) (Daniel Ahlberg <aliz@...too.org>)
Oracle JDBC: Inconsistent handling of timestamps (Peter Conrad <conrad@...ano.de>)
Vulnerability in News/ÐÐ¾Ð²Ð¾ÑÑ‚Ð¸ (Over_G <overg@...l.ru>)

451 messages

Powered by blists - more mailing lists