bugtraq mailing list - 2003/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2003/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 16	² 36	³ 23	⁴ 31	⁵ 10	⁶ 2
⁷ 17	⁸ 17	⁹ 5	¹⁰ 18	¹¹ 13	¹² 24	¹³
¹⁴ 12	¹⁵ 19	¹⁶ 7	¹⁷ 17	¹⁸ 2	¹⁹ 3	²⁰ 1
²¹ 7	²² 19	²³ 20	²⁴ 32	²⁵ 21	²⁶ 6	²⁷ 4
²⁸ 16	²⁹ 21	³⁰ 15

Messages by day:

April 1 (16 messages)

CGI Citys CCLOG and CCGuestbook Script Injection Vulns Fixed!!! ("BrainRawt ." <brainrawt@...mail.com>)
OpenSSH 3.6 released (fwd) (Jonas Eriksson <je@...ure.net>)
Security issues in D-Link DSL-300/DSL-300G+ Broadband Modem/Router (Arhont Information Security <infosec@...ont.com>)
Personal FTP Server (subj <r2subj3ct@...lan.org>)
[OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail) (OpenPKG <openpkg@...npkg.org>)
Ericsson Mobile Phones Security Contact? ("Ollie Whitehouse" <ollie@...take.com>)
GLSA: krb5 & mit-krb5 (200303-28) (Daniel Ahlberg <aliz@...too.org>)
GLSA: sendmail (200303-27) (Daniel Ahlberg <aliz@...too.org>)
3Com OfficeConnect Remote 812 ADSL router exposes internal LAN computer's ports during outbound and inbound TCP and UDP … ("Michael Puchol" <mpuchol@...ar-securit…)
[VulnDiscuss] 3Com 812 ADSL router vulnerability addendum ("Michael Puchol" <mpuchol@...ar-security.com>)
serious vulnerability present. all doomed. over. ("Security Experts, Liability Limited" <throwaway@...ne.ids.pl>)
[RHSA-2003:101-01] Updated OpenSSL packages fix vulnerabilities (bugzilla@...hat.com)
[RHSA-2003:095-03] New samba packages fix security vulnerabilities (bugzilla@...hat.com)
[RHSA-2003:084-01] Updated vsftpd packages re-enable tcp_wrappers support (bugzilla@...hat.com)
Webserver CVS (In)Security (methodic@...pcap.net)
SRT2003-04-01-1231 - Progress DLC overflows (KF <dotslash@...soft.com>)

April 2 (36 messages)

MiniPortal (subj <r2subj3ct@...lan.org>)
GLSA: openafs (200303-26) (Daniel Ahlberg <aliz@...too.org>)
FreeBSD Security Advisory FreeBSD-SA-03:07.sendmail (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Buffer Overflow in Broker FTP Server (subj <r2subj3ct@...lan.org>)
Re: IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability (<panic@...kerfactor.com>)
Immunix Secured OS 7+ openssl update (Immunix Security Team <security@...ex.com>)
BRS WebWeaver: full disclosure ("euronymous" <just-a-user@...dex.ru>)
Fwd: QuickTime 6.1 for Windows is available (Bryan Blackburn <blb@...ox.com>)
Sambar Server "Buffer OverFlow" Vulnerabilities (Lorenzo Manuel Hernandez Garcia-Hierro <security@...enzohgh.com>)
TYPSoft FTP Server (subj <r2subj3ct@...lan.org>)
Immunix Secured OS 7+ samba update (Immunix Security Team <security@...ex.com>)
iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player ("iDEFENSE Labs" <labs@...fense.com>)
[SCSA-015] Remote Denial of Service Vulnerability in PowerFTP ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
[RHSA-2003:091-01] Updated kerberos packages fix various vulnerabilities (redhat-announce-list-admin@...hat.com)
[INetCop Security Advisory] Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. ("dong-h0un U" <xploit@...kermail.com>)
@(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Sir Mordred <mordred@...ail.com>)
[ANNOUNCE] Apache 2.0.45 Released (Lars Eilebrecht <lars@...che.org>)
@(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function (Sir Mordred <mordred@...ail.com>)
Inaccurate Reports Concerning PHP Vulnerabilities ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)
Phorum 3.4 Cross Site Scripting (Peter "Stöckli" <pcs@...media.net>)
RE: Netscape and Opera crash via java ("Zelena Endre" <ezelena@....linux.hu>)
BEA WebLogic internal hostname disclosure (Michael Hendrickx <michael@...nit.be>)
[SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit (joey@...odrom.org (Martin Schulze))
OpenSSH 3.6.1 released (Markus Friedl <markus@...nbsd.org>)
XSS in Python Documentation Server ("euronymous" <just-a-user@...dex.ru>)
re:3com RAS 1500 Remote vulnerabilities. (Jan Kachlik <jkachlik@...roup.com>)
Re: Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall (Peter Pentchev <roam@...glet.net>)
Css in Xoops module glossary 1.3.x (magistrat <magistrat@...cus-zone.com>)
Re: PHP-Nuke block-Forums.php subject vulnerabilities ("Frog Man" <leseulfrog@...mail.com>)
Viewpoint Server (Ben Maynard <liliafan@...oo.co.uk>)
IkonBoard v3.1.1: arbitrary command execution (Nick Cleaton <nick@...aton.net>)
Java and Javascript ("David F. Madrid" <conde0@...efonica.net>)
Re: Oracle JDBC: Inconsistent handling of timestamps ("Peter J. Holzer" <hjp@....ac.at>)
Microsoft Terminal Services vulnerable to MITM-attacks. (Erik Forsberg <forsberg+btq@...dio.se>)
MDKSA-2003:040 - Updated Eterm packages fix escape sequence insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability (Alan Kong <kkkong@...cuhk.edu.hk>)

April 3 (23 messages)

Sendmail parseaddr security vulnerability on IRIX (SGI Security Coordinator <agent99@....com>)
SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read (KF <dotslash@...soft.com>)
[RHSA-2003:128-01] Updated Eye of GNOME packages fix vulnerability (bugzilla@...hat.com)
[RHSA-2003:060-01] Updated NetPBM packages fix multiple vulnerabilities (bugzilla@...hat.com)
SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow (KF <dotslash@...soft.com>)
[VulnDiscuss] passlogd sniffer remote buffer overflow root exploit. ("dong-h0un U" <xploit@...kermail.com>)
Re: Webserver CVS (In)Security (Brian Hatch <vuln-dev@...kr.org>)
@(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (<sir.mordred@...hmail.com>)
@(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function (<sir.mordred@...hmail.com>)
Re: Webserver CVS (In)Security ("Crist J. Clark" <crist.clark@...bi.com>)
Re: Webserver CVS (In)Security (Andrew Brown <atatat@...tdot.net>)
Re: BEA WebLogic internal hostname disclosure ("Kurt Seifried" <kurt@...fried.org>)
Re: Phorum 3.4 Cross Site Scripting (Hagen KÃ¼hnel - HagK <hagk@...k.de>)
[SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit (joey@...odrom.org (Martin Schulze))
Multiple vulnerabilities in AutomatedShops WebC shopping cart (Carl Livitt <carl@...rningshophull.co.uk>)
Re: Phorum 3.4 Cross Site Scripting (Brian Moon <brian@...rum.org>)
Security Update: [CSSA-2003-016.0] OpenLinux: sendmail sign extension buffer overflow (CERT CA-2003-12) (security@....com)
[RHSA-2003:109-03] Updated balsa and mutt packages fix vulnerabilities (bugzilla@...hat.com)
[SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit (joey@...odrom.org (Martin Schulze))
RE: Microsoft Terminal Services vulnerable to MITM-attacks. ("Larry Seltzer" <larry@...ryseltzer.com>)
Another security problem in Netgear FM114P ProSafe Wireless Router firmware (BjÃ¶rn Stickler <stickler@....informatik.tu-darmstadt.de>)
Sakki's guestbook V.1.01 script injection vulnerability. ("drG4njubas" <drG4nj@...l.ru>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Goran Krajnovic <goran.krajnovic@...et.hr>)

April 4 (31 messages)

RE: Another security problem in Netgear FM114P ProSafe Wireless Router firmware (also level-one) (BjÃ¶rn Stickler <stickler@....informatik.tu-darmstadt.de>)
Using Java from Javascript ("David F. Madrid" <conde0@...efonica.net>)
NetBIOS could be used as network flood amplier (Francesco Vigo <f.vigo@...i-idle.com>)
RE: Microsoft Terminal Services vulnerable to MITM-attacks. (Devin Heitmueller <dheitmueller@...illa.com>)
Re: Microsoft Terminal Services vulnerable to MITM-attacks. (Erik Forsberg <forsberg@...dio.se>)
Syscall implementation could lead to whether or not a file exists (Andrew Griffiths <andrewg@...net.au>)
Re: Multiple vulnerabilities in AutomatedShops WebC shopping cart (Carl Livitt <carl@...rningshophull.co.uk>)
[SECURITY] [DSA 278-1] New sendmail packages fix denial of service (joey@...odrom.org (Martin Schulze))
SuSE Security Announcement: openssl (SuSE-SA:2003:024) (Sebastian Krahmer <krahmer@...e.de>)
[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution (joey@...odrom.org (Martin Schulze))
AspJar guestbook script injection vulnerability. ("drG4njubas" <drG4nj@...l.ru>)
TA-2003-03 Buffer Overflow Vulnerability in Hyperion FTP Server 3.0 ("Rushjo@...pbit.org" <rushjo@...pbit.org>)
NetBSD Security Advisory 2003-006: Cryptographic weaknesses in Kerberos v4 protocol (NetBSD Security Officer <security-officer@...bsd.org>)
NetBSD Security Advisory 2003-009: sendmail buffer overrun in prescan() address parser (NetBSD Security Officer <security-officer@...bsd.org>)
Re: Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged (Vladimir Katalov <vkatalov@...omsoft.com>)
[CLA-2003:613] Conectiva Security Announcement - snort (Conectiva Updates <secure@...ectiva.com.br>)
Re: SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow (Marius Popa Adrian <mapopa@...a.net>)
RE: NetBIOS could be used as network flood amplier ("Russ" <Russ.Cooper@...on.ca>)
An Alternate View of Recently Reported PHP Vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)
RE: Netscape and Opera crash via java ("Richard H. Cotterell" <seec@...l.retina.ar>)
Re: passlogd sniffer remote buffer overflow root exploit. (Dragos Ruiu <dr@....net>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Jedi/Sector One <j@...eftpd.org>)
[CLA-2003:614] Conectiva Security Announcement - sendmail (Conectiva Updates <secure@...ectiva.com.br>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Javi Lavandeira <javi@....co.jp>)
Re: Microsoft Terminal Services vulnerable to MITM-attacks. (Henrik Storner <henrik-bb@...n.dk>)
buffalo AirStation G54 - (WBR-G54 ) DoS (Pavel shpac <shpac@...ru>)
SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call (KF <dotslash@...soft.com>)
[CLA-2003:616] Conectiva Security Announcement - dhcp (Conectiva Updates <secure@...ectiva.com.br>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Jon Ribbens <jon+bugtraq@...quivocal.co.uk>)
Re: An Alternate View of Recently Reported PHP Vulnerabilities (Sascha Schumann <sascha@...umann.cx>)
[CLA-2003:617] Conectiva Security Announcement - file (Conectiva Updates <secure@...ectiva.com.br>)

April 5 (10 messages)

[CLA-2003:615] Conectiva Security Announcement - samba (Conectiva Updates <secure@...ectiva.com.br>)
LocalSystem account in Windows 2000/XP (Pavel <hiddenrecipient@...il.com>)
Re: @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Abyss X1 1.1.2 remote crash (Auriemma Luigi <aluigi@...x.com>)
SignHere guestbook vulnerability. ("drG4njubas" <drG4nj@...l.ru>)
Re: An Alternate View of Recently Reported PHP Vulnerabilities (Goran Krajnovic <goran.krajnovic@...et.hr>)
RE: LocalSystem account in Windows 2000/XP ("Russ" <Russ.Cooper@...on.ca>)
Two Invision Power Board 1.1.x vulns ("Gossi The Dog" <gossi@...6.com>)
Re: An Alternate View of Recently Reported PHP Vulnerabilities (dullien@....de)
Interbase/Firebird - external file security bug (Kotala ZdenÄ›k <Zdenek.Kotala@...s.cz>)

April 6 (2 messages)

Seti@...e information leakage and remote compromise ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
Seti@...e exploit ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)

April 7 (17 messages)

Re: Syscall implementation could lead to whether or not a file exists (Pavel Machek <pavel@...e.cz>)
Re: Re: Syscall implementation could lead to whether or not a file exists (<andrewg@...net.au>)
Re: Syscall implementation could lead to whether or not a file exists (Arjan van de Ven <arjanv@...hat.com>)
[DDI-1013] Buffer Overflow in Samba allows remote root compromise (Erik Parker <erik.parker@...italdefense.net>)
[CLA-2003:618] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
[OpenPKG-SA-2003.028] OpenPKG Security Advisory (samba) (OpenPKG <openpkg@...npkg.org>)
Vignette Story Server sensitive information disclosure (a040703-1) ("@stake Advisories" <advisories@...take.com>)
Java Agent freezes Lotus Notes and Domino 6.0.1 (Marc Schoenefeld <schonef@...-muenster.de>)
JpegX 2.0.0.3 Password Bypass Vulnerability (JeiAr <jeiar@...ms.com>)
Coppermine Photo Gallery remote compromise ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
[VulnDiscuss] Dangerous permissions in unitedlinux (Knud Erik HÃ¸jgaard <kain@...op.dk>)
Immunix Secured OS 7+ cvs update (Immunix Security Team <security@...ex.com>)
[SECURITY] [DSA 280-1] New samba packages fix remote root exploit (joey@...odrom.org (Martin Schulze))
Immunix Secured OS 7+ samba update (Immunix Security Team <security@...ex.com>)
[CLA-2003:619] Conectiva Security Announcement - zlib (Conectiva Updates <secure@...ectiva.com.br>)
SuSE Security Announcement: samba (SuSE-SA:2003:025) (Roman Drahtmueller <draht@...e.de>)

April 8 (17 messages)

Re: NetBIOS could be used as network flood amplier (Francesco Vigo <f.vigo@...i-idle.com>)
MDKSA-2003:044 - Updated samba packages fix remote root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
mIRC "dcc filename spoofing" (Knud Erik HÃ¸jgaard <kain@...op.dk>)
RE: mIRC "dcc filename spoofing" ("Gossi The Dog" <gossi@...6.com>)
[RHSA-2003:137-01] New samba packages fix security vulnerability (redhat-announce-list-admin@...hat.com)
[RHSA-2003:036-01] Updated mgetty packages available (redhat-announce-list-admin@...hat.com)
Immunix Secured OS 7+ Kerberos update (Immunix Security Team <security@...ex.com>)
Unchecked Buffer in Opera 7.02 ("David F.Madrid" <conde0@...efonica.net>)
TSLSA-2003-0019 - samba (Trustix Secure Linux Advisor <tsl@...stix.com>)
[Sorcerer-spells] SAMBA--SORCERER2003-04-08 (Michael Walton <mwalton@...lene.com>)
[SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[CLA-2003:620] Conectiva Security Announcement - man (Conectiva Updates <secure@...ectiva.com.br>)
False-negatives in several Vulnerability Assessment tools (Nicolas Gregoire <ngregoire@...probe.com>)
AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss (Phil Cyc <ajEA3UMBepQ4MRExDmm0qbFeeQEJtffpg.1@...tected.unixadm.org>)
Orplex guestbook script injection. ("drG4njubas" <drG4nj@...l.ru>)
iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x ("iDEFENSE Labs" <labs@...fense.com>)
Re: False-negatives in several Vulnerability Assessment tools ("Geoff Shively" <gshively@...x.com>)

April 9 (5 messages)

Multiple Vulnerabilities in libc RPC functions on IRIX (SGI Security Coordinator <agent99@....com>)
[VulnDiscuss] Exploit Code Released for Apache 2.x Memory Leak ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)
[RHSA-2003:137-02] New samba packages fix security vulnerability (bugzilla@...hat.com)
[RHSA-2003:139-01] Updated httpd packages fix security vulnerabilities. (redhat-announce-list-admin@...hat.com)
Samba Security Vulnerability on IRIX (SGI Security Coordinator <agent99@....com>)

April 10 (18 messages)

Fwd: Samba Security Vulnerability on IRIX (chris1@...l3.bunt.com)
samba 2.x call_trans2open() exploit (noir sin <noir@...mpos.org>)
[ARL03-A16] Multiple Security Issues in phPay (Ahmet Sabri ALPER <s_alper@...mail.com>)
GLSA: apache (200304-01) (Daniel Ahlberg <aliz@...too.org>)
Immunix Secured OS 7+ PostgreSQL update (WireX Security <security@...ex.com>)
[CLA-2003:624] Conectiva Security Announcement - samba (Conectiva Updates <secure@...ectiva.com.br>)
Hyperion FTP server Remote DOS and unauthorised remote access. ("moran zavdi" <moraniam@...mail.com>)
GLSA: setiathome (200304-03) (Daniel Ahlberg <aliz@...too.org>)
PoPToP PPTP server remotely exploitable buffer overflow (Timo Sirainen <tss@....fi>)
ISC guestbook script injection vulnerability. ("drG4njubas" <drG4nj@...l.ru>)
Re: Buffer Overflow in Broker FTP Server (Knud Erik HÃ¸jgaard <kain@...op.dk>)
iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (ISA… ("iDEFENSE Labs" <labs@...fense.com>)
Immunix Secured OS 7+ MySQL update (WireX Security <security@...ex.com>)
GLSA: samba (200304-02) (Daniel Ahlberg <aliz@...too.org>)
[SECURITY] [DSA 269-2] New heimdal packages fix authentication failure (joey@...odrom.org (Martin Schulze))
Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss (Phil Cyc <ajEA3UMBepQ4MRExDmm0qbFeeQEJtffpg.1@...tected.unixadm.org>)
Vulnerabilities in Portable Executable (PE) File Format For Win32 Architecture ("Exurity Inc." <exurity@...ers.com>)
xfsdump creates files insecurely on IRIX (SGI Security Coordinator <agent99@....com>)

April 11 (13 messages)

Disclosing information in Super GuestBook (Over_G <overg@...l.ru>)
Admin access in GuestBook r4 (Over_G <overg@...l.ru>)
MDKSA-2003:038-1 - Updated 2.4 kernel packages fix ptrace vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
KDE Security Advisory: PS/PDF file handling vulnerability (Dirk Mueller <mueller@....org>)
Re: Unchecked Buffer in Opera 7.02 (nesumin <nesumin@...thome.net>)
GLSA: kde-3.x (200304-04) (Daniel Ahlberg <aliz@...too.org>)
Re: Microsoft Terminal Services vulnerable to MITM-attacks. (Carlos Branco <cb@...-is-on.com>)
Re: Exploit Code Released for Apache 2.x Memory Leak (Serban Murariu <smurariu2@...oo.com>)
Re: PoPToP PPTP server remotely exploitable buffer overflow ("Dick St.Peters" <stpeters@...Heaven.com>)
Flaw in Microsoft VM Could Enable System Compromise (K-Otik.com <contrib@...tik.com>)
working apache <= 2.0.44 DoS exploit for linux. (Daniel NystrÃ¶m <daniel-nystrom@...o.nu>)
[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder (bugzilla@...hat.com)
IRIX ToolTalk Vulnerabilities Update (SGI Security Coordinator <agent99@....com>)

April 12 (24 messages)

Brocade Firmware SNMP Vulnerability (SGI Security Coordinator <agent99@....com>)
[CLA-2003:625] Conectiva Security Announcement - openssl (Conectiva Updates <secure@...ectiva.com.br>)
Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability ("Integrigy Security Alerts" <alerts@...egrigy.com>)
Medium Vulnerability in SNMP on Linsys BEFVP41 (Branson Matheson <branson@...dborne.net>)
[SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation (joey@...odrom.org (Martin Schulze))
MacOS X DirectoryService Privilege Escalation (a041003-1) ("@stake Advisories" <advisories@...take.com>)
Immunix Secured OS 7+ MySQL update (WireX Security Team <security@...ex.com>)
Buffer Overflow Vulnerability Found in MailMax Version 5 ("Dennis Rand" <der@...owarfare.dk>)
FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database. (Stephen White <swhite+fmbug@...compsoc.net>)
GLSA: kde-2.x (200304-05) (Daniel Ahlberg <aliz@...too.org>)
Re: Netscape and Opera crash via java (Dan Harkless <bugtraq@...kless.org>)
Re: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss (Hilko Bengen <bengen+amavis@...luzination.de>)
repost: SRT2003-04-01-1231 - Progress DLC overflows (KF <dotslash@...soft.com>)
Ocean12 ASP Guestbook Manager v1.00 ("drG4njubas" <drG4nj@...l.ru>)
Protection against buffer overflows: when your anchor is washed away, then you are overflowed and refuse to RET ("Exurity Inc." <exurity@...ers.com>)
Immunix Secured OS 7+ PostgreSQL update (WireX Security Team <security@...ex.com>)
R7-0013: Heap Corruption in Gaim-Encryption Plugin ("Rapid 7 Security Advisories" <advisory@...id7.com>)
PATCH: [CAN-2003-0132] Apache 2.0.44 Denial of Service Vulnerability ("William A. Rowe, Jr." <wrowe@...e-clan.net>)
[SECURITY] [DSA 284-1] New kdegraphics packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
[Sorcerer-spells] KDE-SORCERER2003-04-12 (Michael Walton <mwalton@...lene.com>)
Re: Medium Vulnerability in SNMP on Linsys BEFVP41 (Stefan Laudat <stefan@...ldbank.ro>)
Re: working apache <= 2.0.44 DoS exploit for linux. (Paul Johnston <paul@...tpoint.ltd.uk>)
Arp records in solaris ("Edward J. Aivazian" <stealth@...inco.com>)
[SECURITY] [DSA 274-2] New mutt packages fix arbitrary code execution in potato (joey@...odrom.org (Martin Schulze))

April 14 (12 messages)

[RHSA-2003:126-01] Updated gtkhtml packages fix vulnerability (bugzilla@...hat.com)
Multiple vulnerabilities in SheerDNS (Jedi/Sector One <j@...eftpd.org>)
Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach ("Aviram Jenik" <aviram@...ondsecurity.com>)
[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
Instaboard 1.3 SQL Injection (Jim Dew <jdew@...annorth.org>)
Web Wiz Site News realease v3.06 administration access. ("drG4njubas" <drG4nj@...l.ru>)
FipsGuestbook Version 1.12.7 script injection. ("drG4njubas" <drG4nj@...l.ru>)
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX (SGI Security Coordinator <agent99@....com>)
bitchx sources backdoored on distribution site (MichaÅ‚ Szwaczko <mikey@...elabs.lublin.pl>)
ActivCard password cache memory leakage (OTERO Hernan Gustavo EDS <bazhgo@...hint.net>)
GLSA: kde-2.x (200304-05.1) (Daniel Ahlberg <aliz@...too.org>)

April 15 (19 messages)

Re: bitchx sources backdoored on distribution site (Neeko Oni <neeko@...ckey.com>)
bitchx sources trojaned - follow up (MichaÅ‚ Szwaczko <mikey@...elabs.lublin.pl>)
Re: Arp records in solaris (Brad Arlt <arlt@...c.ucalgary.ca>)
[CLA-2003:626] Conectiva Security Announcement - mutt (Conectiva Updates <secure@...ectiva.com.br>)
GLSA: kdegraphics-3.1.x (200304-04.1) (Daniel Ahlberg <aliz@...too.org>)
MDKSA-2003:046 - Updated gtkhtml packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[SCSA-016] Multiple vulnerabilities in Ez publish ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
BitchX trojan, the real follow up. (Rob Andrews <randrews@...inetworks.com>)
SRT2003-04-15-1029 - Progres BINPATHX overflow (KF <dotslash@...soft.com>)
[SECURITY] [DSA 287-1] New EPIC packages fix DoS and arbitrary code execution (joey@...odrom.org (Martin Schulze))
MDKSA-2003:045 - Updated evolution packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
nb1300 router - default settings expose password (denote <denote@...email.com.au>)
[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato) (joey@...odrom.org (Martin Schulze))
Windows 2003 win2k.sys vulnerability (<securityfocus.com@...t.cjb.net>)
Oddities in Windows ACL inheritance ("Nicolas RUFF (lists)" <ruff.lists@...lweb.fr>)
CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: ActivCard password cache memory leakage (Massimo Cereda <massimo.cereda@...eb.it>)
Immunix Secured OS 7+ glibc update (Immunix Security Team <security@...ex.com>)
Veritas BackupExec 9.0 may ship with upatched MS SQL Desktop Engine ("Marcus Beaman" <marcus.beaman@...te.or.us>)

April 16 (7 messages)

SFAD03-001: iWeb Mini Web Server Remote Directory Traversal ("subversive " <subversive@...uxmail.org>)
i cracked restriction of 'zone' in mozilla. (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
MDKSA-2003:047 - Updated xfsdump packages fix insecure file creation (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2003:048 - Updated eog packages fix arbitrary command execution (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Netgear Logging Vulnerability ("{ }" <elaborate_ruse@...mail.com>)
[CLA-2003:627] Conectiva Security Announcement - ethereal (Conectiva Updates <secure@...ectiva.com.br>)
Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) (Ryan Emerle <securityFocus@...rle.net>)

April 17 (17 messages)

[SCSA-017] Directory Traversal Vulnerability in EZ Server ("Grégory" Le Bras <gregory.lebras@...urity-corporation.com>)
[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution (joey@...odrom.org (Martin Schulze))
Vulnerability in rinetd (Martin Schulze <joey@...odrom.org>)
IE 6.0 - trivial crash ("Adam [ckkl]" <ckkl@...zta.wp.pl>)
[SECURITY] [DSA 289-1] New rinetd packages fix denial of service (joey@...odrom.org (Martin Schulze))
RE: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) ("Steve Ryan" <argon@...rter.net>)
Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) ("Roland Postle" <mail@...zde.co.uk>)
Re: IE 6.0 - trivial crash (Richard Moore <rich@...tpoint.ltd.uk>)
[SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability (joey@...odrom.org (Martin Schulze))
Re: i cracked restriction of 'zone' in mozilla. (Alla Bezroutchko <alla@...nit.be>)
Re: False-negatives in several Vulnerability Assessment tools (Nicolas Gregoire <ngregoire@...probe.com>)
Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Web Wiz Forums all version db stealing (Uziel aka nuJIurpuM <Uziel@...el.biz>)
CrossSite Scripting @ Snitz Forums 2000 (<badwebmasters@...ine.de>)
[CLA-2003:628] Conectiva Security Announcement - vixie-cron (Conectiva Updates <secure@...ectiva.com.br>)
Re: IE 6.0 - trivial crash ("Geoff Shively" <gshively@...x.com>)
MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution (Mandrake Linux Security Team <security@...ux-mandrake.com>)

April 18 (2 messages)

Xinetd 2.3.10 Memory Leaks (Steve Grubb <linux_4ever@...oo.com>)
Exploit for PoPToP PPTP server ("einstein, dhtm" <einstein_dhtm@...nt.ru>)

April 19 (3 messages)

Authentication flaw in microsoft SMB protocol (<seclab@...aut.ac.ir>)
IE 6.0 - trivial crash - part II ("Adam [ckkl]" <ckkl@...zta.wp.pl>)
Re: Authentication flaw in microsoft SMB protocol (Dave Aitel <dave@...unitysec.com>)

April 20 (1 message)

Race in XP SCM Service Shutdown Mechanism ("Matthew Murphy" <mattmurphy@...rr.com>)

April 21 (7 messages)

BadBlue Remote Administrative Access Vulnerability ("Matthew Murphy" <mattmurphy@...rr.com>)
Monkey HTTPd Remote Buffer Overflow ("Matthew Murphy" <mattmurphy@...rr.com>)
ACER Travelmate 600 and 800 series - Smartcard flawed Implementation (<Leonard.Ong@...ia.com>)
MPCSoftWeb Guest Book vulnerabilities. ("drG4njubas" <drG4nj@...l.ru>)
Remote Vulnerabilties in mod_ntlm ("Matthew Murphy" <mattmurphy@...rr.com>)
Re: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag) (<mattmurphy@...rr.com>)
PTNews v1.7.7 - Access to administrator functions without authentification (scrap <webmaster@...uriteinfo.com>)

April 22 (19 messages)

AN HTTPd Sample Script File Truncation ("Matthew Murphy" <mattmurphy@...rr.com>)
[VulnDiscuss] Office 2000 bug, Regristration ("Alex Elger" <alex.elger@...ronage.com>)
RE: Authentication flaw in microsoft SMB protocol ("Jesper Johansson" <jesperjo@...rosoft.com>)
GLSA: snort (200304-05) (Daniel Ahlberg <aliz@...too.org>)
[NGSEC-2003-5] YABB SE, remote command execution (labs@...EC <labs@...ec.com>)
[SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution (joey@...odrom.org (Martin Schulze))
[CLA-2003:629] Conectiva Security Announcement - tcpdump (Conectiva Updates <secure@...ectiva.com.br>)
[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions (joey@...odrom.org (Martin Schulze))
Stealth DMCA. Be afraid. Be very afraid... (alaskan@...usplanet.net)
IE / Outlook / MS SHLWAPI Render - more trivial crash (Ramon Pinuaga Cascales <rpinuaga@...sec.com>)
SRT2003-04-22-1336 - SAP DB Development Tools install flaw (KF <dotslash@...soft.com>)
XMB 1.8 Partagium SQL Injection Bug (<zeez@...gs.org>)
[CLA-2003:630] Conectiva Security Announcement - balsa (Conectiva Updates <secure@...ectiva.com.br>)
Defeating HTML "Encryption" (<rjfix@...oo.com>)
RE : IE / Outlook / MS SHLWAPI Render - more trivial crash ("Gervaize Maquard" <freestyler@...cali.fr>)
Re: [mail_lists] Stealth DMCA. Be afraid. Be very afraid... (Jim <jconner@...erit.com>)
Re: Authentication flaw in microsoft SMB protocol (Chris Wysopal <cwysopal@...take.com>)
Re: Stealth DMCA. Be afraid. Be very afraid... (Darren Pilgrim <dmp@...therdragon.org>)
Re: Exploit for PoPToP PPTP server - Linux version (John Leach <bugtraq@...nleach.co.uk>)

April 23 (20 messages)

Secunia Research: Xeneo Web Server URL Encoding Denial of Service ("Carsten H. Eiram" <che@...unia.com>)
[RHSA-2003:032-01] Updated tcpdump packages fix various vulnerabilities (bugzilla@...hat.com)
Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability (Cisco Systems Product Security Incident Response Te…)
Cracking preshared keys (Michael Thumann <mthumann@...w.de>)
Snort <=1.9.1 exploit (truff <truff@...jet7.org>)
Re: IE / Outlook / MS SHLWAPI Render - more trivial crash ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
[SECURITY] [DSA 292-2] New mime-support packages fix temporary file race conditions (joey@...odrom.org (Martin Schulze))
Security problems in gkrellm-newsticker (Martin Schulze <joey@...odrom.org>)
Re[2]: Authentication flaw in microsoft SMB protocol (3APA3A <3APA3A@...URITY.NNOV.RU>)
[SECURITY] [DSA 293-1] New kdelibs packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
Format strings vuln in CGIwrap (b0f www.b0f.net <b0fnet@...oo.com>)
Re: Secunia Research: Xeneo Web Server URL Encoding Denial of Service ("badpack3t" <badpack3t@...urity-protocols.com>)
[SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution (joey@...odrom.org (Martin Schulze))
RE: Format strings vuln in CGIwrap ("Neulinger, Nathan" <nneul@....edu>)
[VulnDiscuss] Xeneo Webserver Vulnerability (Tamer Sahin <ts@...urityoffice.net>)
[VulnDiscuss] Re: [Full-Disclosure] Secunia Research: Xeneo Web Server URL Encoding Denial of Service ("GaLiaRePt" <galiarept@...eaker.net>)
[VulnDiscuss] Re: Xeneo Webserver Vulnerability ("badpack3t" <badpack3t@...urity-protocols.com>)
RE: [cgiwrap-users] RE: Format strings vuln in CGIwrap ("Neulinger, Nathan" <nneul@....edu>)
[RHSA-2003:076-01] Updated ethereal packages fix security vulnerabilities (redhat-announce-list-admin@...hat.com)
[VulnDiscuss] Re: Cracking preshared keys (Damir Rajnovic <gaus@...co.com>)

April 24 (32 messages)

Re: Secunia Research: Xeneo Web Server URL Encoding Denial of Service ("Hotmail" <se_cur_ity@...mail.com>)
[VulnDiscuss] RE: Cracking preshared keys (Lance James <lance.james@...bone.com>)
[VulnDiscuss] Re: Cracking preshared keys (Gary Flynn <flynngn@....edu>)
NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS (NSFOCUS Security Team <security@...ocus.com>)
Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Nokia IPSO Vulnerability (Jonas Eriksson <je@...ure.net>)
Re: Cracking preshared keys (daw@...art.cs.berkeley.edu (David Wagner))
SQL injection in BttlxeForum (SecurityTracker <help@...uritytracker.com>)
Re: Cracking preshared keys ("Derek" <derekm@...ers.com>)
BRS WebWeaver: Ftpd Lockdown via RETR cmd ("euronymous" <just-a-user@...dex.ru>)
SuSE Security Announcement: KDE (SuSE-SA:2003:026) (Sebastian Krahmer <krahmer@...e.de>)
Internet Explorer Plugin.ocx heap overflow (#NISR24042003) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
RE: Nokia IPSO Vulnerability ("Jorge Merlino" <jmerlino@...ynet.com.uy>)
Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense (Dmitry Maksimov <dmaksimov@...ecurity.ru>)
Permanent crash in Opera 7.10 ("David F. Madrid" <conde0@...efonica.net>)
DNS vulnerabilities in shared host environments (Chris Leishman <chris@...shman.org>)
An Implementation of a Birthday Attack in a DNS Spoofing ("Ramon Izaguirre" <ramontxo@...pop.com>)
[RHSA-2003:112-01] Updated squirrelmail packages fix cross-site scripting vulnerabilities (bugzilla@...hat.com)
Re: Cracking preshared keys (Gary Flynn <flynngn@....edu>)
Re: Cracking preshared keys (Michael Thumann <mlthumann@...-guide.de>)
Re: DNS vulnerabilities in shared host environments (Frank Tegtmeyer <fte-sub-bugtraq@....to>)
[RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability (bugzilla@...hat.com)
RE: Cracking preshared keys ("Rager, Anton (Anton)" <arager@...ya.com>)
Re: Nokia IPSO Vulnerability (Damieon Stark <visigoth@...uritycentric.com>)
Re: Cracking preshared keys (Michael Thumann <mthumann@...w.de>)
SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. (KF <dotslash@...soft.com>)
address for postini security ("Hamby, Charles D." <pfcdh1@...su.alaska.edu>)
Re: Nokia IPSO Vulnerability (Valdis.Kletnieks@...edu)
RE: Nokia IPSO Vulnerability ("Jorge Merlino" <jmerlino@...ynet.com.uy>)
[RHSA-2003:118-01] Updated mICQ packages fix vulnerability (bugzilla@...hat.com)
PHP-Nuke 6.5 FINAL Cross Site Scripting ("Frog Man" <leseulfrog@...mail.com>)
Re: Permanent crash in Opera 7.10 (Dmitrij Lukasevic <dimon@....lt>)

April 25 (21 messages)

RE: Nokia IPSO Vulnerability ("Miller, Rick" <Rick.Miller@...SA.COM>)
RE: Nokia IPSO Vulnerability (<Iain.King@...ia.com>)
Re: Nokia IPSO Vulnerability (Shawn Duffy <pakkit@...epiranha.org>)
[BUGZILLA] Security Advisory - XSS, insecure temporary filenames (David Miller <justdave@...dicomm.com>)
True Galerie 1.0 : Admin Access & File Copy ("Frog Man" <leseulfrog@...mail.com>)
MDKSA-2003:051 - Updated ethereal packages fix remote vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Windows Server 2003 Security Guide available ("Michael Howard" <mikehow@...rosoft.com>)
Re: Cracking preshared keys (Curt Sampson <cjs@...ic.net>)
SonicWall Pro DoS? (Greg Smith <gsmith@...ercrews.com>)
Multiple SQL injection on OpenBB forums (Albert Puigsech Galicia <ripe@...9ezine.org>)
Unauthorized reading files on phpSysInfo (Albert Puigsech Galicia <ripe@...9ezine.org>)
XOOPS MyTextSanitizer CSS 1.3x & 2.x (magistrat <magistrat@...cus-zone.com>)
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update (SGI Security Coordinator <agent99@....com>)
Path disclosure and file access on WebAdmin (David A. PÃ©rez <david@...borio.net>)
Re: Exploit for PopPToP PPTP server - Working version (<blightninjas@...hmail.com>)
Invision Power Board Plaintext Password Disclosure Vuln (JeiAr <jeiar@...ms.com>)
Microsoft IIS Integrated Authentication (<skybristol@...mail.com>)
Re: Cracking preshared keys (<hank@...l.iucc.ac.il>)
Re: Unauthorized reading files on phpSysInfo (Wolter Kamphuis <security@...mphuis.student.utwente.nl>)
Cross site scripting in Onecenter forum 4.0 ("David F. Madrid" <conde0@...efonica.net>)
Vulnerability in nsd LDAP Implementation on IRIX (SGI Security Coordinator <agent99@....com>)

April 26 (6 messages)

RE: Windows Server 2003 Security Guide available ("Jason Coombs" <jasonc@...ence.org>)
Apache http server 2.0 (Kim De Smaele <kim.de.smaele@...dora.be>)
NII Advisory - Path Disclosure in Cold Fusion MX Server ("Network Intelligence India Pvt. Ltd." <info@....co.in>)
Album.pl Vulnerability - Remote Command Execution (aresu@...en.net)
Buffer overflow in Internet Explorer's HTTP parsing code (Jouko Pynnonen <jouko@...utions.fi>)
Re: Cracking preshared keys (Stefan Laudat <stefan@...ldbank.ro>)

April 27 (4 messages)

Re: Apache http server 2.0 ("Justin [GHA]" <fanderatm@...mail.com>)
Re: Apache http server 2.0 ("Justin [GHA]" <fanderatm@...mail.com>)
3com NBX IP Phone Call manager Denial of Service - Update (Michael Scheidell <scheidell@...nap.net>)
Re: RE: Windows Server 2003 Security Guide available (Greg Steuck <greg-bugtraq@...t.cx>)

April 28 (16 messages)

IIS Security and Programming Countermeasures e-book ("Jason Coombs" <jasonc@...ence.org>)
GLSA: mgetty (200304-09) (Daniel Ahlberg <aliz@...too.org>)
ATM on Linux Exploit Code Release (les, local) (Angelo Rosiello <guilecool@....com>)
Qpopper v4.0.x poppassd local root exploit ("dong-h0un U" <xploit@...kermail.com>)
GLSA: monkeyd (200304-07.1) (Daniel Ahlberg <aliz@...too.org>)
[Opera 7] Yet Another Story of "Phantom of the Opera" (nesumin <nesumin@...thome.net>)
[Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download. (nesumin <nesumin@...thome.net>)
GLSA: snort (200304-06) (Daniel Ahlberg <aliz@...too.org>)
GLSA: pptpd (200304-08) (Daniel Ahlberg <aliz@...too.org>)
Buffer overflow in 3D-ftp (Over_G <overg@...l.ru>)
s0h: Remote/Local exploit and patch for regedit.exe. (descript <descript@...8.s0h.cc>)
MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow (D4rkGr3y <grey_1999@...l.ru>)
MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS (D4rkGr3y <grey_1999@...l.ru>)
CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Pi3Web 2.0.1 DoS ("aT4r InsaN3" <at4r@...mail.com>)
Windows 2000 Security Hardening Guide Available ("Michael Howard" <mikehow@...rosoft.com>)

April 29 (21 messages)

RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS (William Pratt <wpratt@...apath.net>)
[RHSA-2003:079-01] Updated zlib packages fix gzprintf buffer overflow vulnerability (bugzilla@...hat.com)
Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
IdeaBox: Remote Command Execution ("euronymous" <just-a-user@...dex.ru>)
"netscape navigator" is cracked. (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
RE: Windows Server 2003 Security Guide available ("J.'LoneWolf' Mattsson" <lonewolf@...thmagic.org>)
Re: Microsoft IIS Integrated Authentication (Michael.vonGlasow@...Info.com)
RE: Windows Server 2003 Security Guide available ("Jason Coombs" <jasonc@...ence.org>)
RE: Windows Server 2003 Security Guide available (Frank Knobbe <fknobbe@...bbeits.com>)
MDKSA-2003:052 - Updated snort packages fix remote vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: PTNews v1.7.7 - Access to administrator functions without authentification ("Rui Pimenta" <rui.pimenta@...l.telepac.pt>)
RE: Windows Server 2003 Security Guide available (paul <xml@...landnews.com>)
RE: Windows Server 2003 Security Guide available ("David F. Skoll" <dfs@...ringpenguin.com>)
Coldfusion MX: Java in CFM causes Crash (Marc Schoenefeld <schonef@...-muenster.de>)
Auerswald COMsuite/ Back Door (Kroma Pierre <kroma@...s.de>)
HPUX rexec buffer overflow vulnerability ("Davide Del Vecchio" <dante@...ghieri.org>)
April appeared to be a month of IE bugs. Here's another one. ("ERRor" <error@...htamt.ru>)
[RHSA-2003:093-01] Updated MySQL packages fix vulnerabilities (bugzilla@...hat.com)
RE: Windows Server 2003 Security Guide available ("Uwe Betz" <Uwe.Betz@...eynet.de>)
RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash ("kajbaf" <kajbaf@....shirazu.ac.ir>)
Re: Windows Server 2003 Security Guide available (Lucas Holt <luke@...lishgames.com>)

April 30 (15 messages)

Latest MS SQL Server vulnerabilities revealed (Cesar <cesarc56@...oo.com>)
Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) (Damien Miller <djm@...drot.org>)
Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) (Darren Tucker <dtucker@....com.au>)
Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) (Denise Genty <genty@...tin.ibm.com>)
GLSA: balsa (200304-10) (Daniel Ahlberg <aliz@...too.org>)
Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service (Cisco Systems Product Security Incident …)
OpenSSH/PAM timing attack allows remote users identification (Marco Ivaldi <raptor@...iaservice.net>)
RE: [Opera 7] Yet Another Story of "Phantom of the Opera" ("GreyMagic Software" <security@...ymagic.com>)
[SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions (joey@...odrom.org (Martin Schulze))
[ESA-20030430-014] 'tcpdump' multiple vulnerabilities (EnGarde Secure Linux <security@...rdiandigital.com>)
[ESA-20030430-013] 'snort' stream4 preprocessor integer overflow vulnerability (EnGarde Secure Linux <security@...rdiandigital.com>)
[CLA-2003:632] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) (Valdis.Kletnieks@...edu)
[CLA-2003:614] REVISED: Conectiva Security Announcement - sendmail (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2003:633] Conectiva Security Announcement - glibc (Conectiva Updates <secure@...ectiva.com.br>)

434 messages

Powered by blists - more mailing lists