bugtraq mailing list - 2003/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2003/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 13	² 19	³ 9	⁴ 13	⁵ 6	⁶ 4
⁷ 19	⁸ 30	⁹ 34	¹⁰ 10	¹¹ 8	¹² 12	¹³ 10
¹⁴ 21	¹⁵ 16	¹⁶ 28	¹⁷ 18	¹⁸ 16	¹⁹ 5	²⁰ 2
²¹ 19	²² 17	²³ 24	²⁴ 17	²⁵ 27	²⁶ 9	²⁷ 1
²⁸ 13	²⁹ 22	³⁰ 20	³¹ 27

Messages by day:

July 1 (13 messages)

[RHSA-2003:199-01] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
[RHSA-2003:199-01] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
PoC for Internet Explorer >=5.0 buffer overflow (trivial exploit for hard case). (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: PoC for Internet Explorer >=5.0 buffer overflow (trivial exploit for hard case). ("morning_wood" <se_cur_ity@...mail.com>)
Re: Bypassing ZoneAlarm (limited) (Te Smith <tsmith@...elabs.com>)
ezbounce[v1.0-(1.04a/1.50pre6)]: remote format string exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
[RHSA-2003:199-01] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
[SECURITY] [DSA-336-2] Factual correction for DSA-336-1 (Matt Zimmerman <mdz@...ian.org>)
CyberStrong Shopping Cart - Advisory & Exploit Code (<aresu@...en.net>)
Re: [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow (J.Warren <webmaster@...uswebmaster.net>)
[Opera 7] Five DoS codes on general web sites (":: Operash ::" <nesumin@...thome.net>)
[CLA-2003:668] Conectiva Security Announcement - kde (Conectiva Updates <secure@...ectiva.com.br>)
[sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code (sec-labs team <team@...-labs.hack.pl>)

July 2 (19 messages)

VisNetic WebSite Path Disclosure Vulnerability ("Peter Kruse" <kruse@...sesecurity.dk>)
[RHSA-2003:067-02] Updated XFree86 packages provide security and bug fixes (bugzilla@...hat.com)
Red Hat 9: free tickets (Michal Zalewski <lcamtuf@...ttot.org>)
Re: Red Hat 9: free tickets ("bob" <inboxbob@....net>)
Broadcast BoF and server freeze in RogerWilco (2001) (Auriemma Luigi <aluigi@...x.com>)
Re: Re: Red Hat 9: free tickets (KF <dotslash@...soft.com>)
CORE-2003-0305-03: Active Directory Stack Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2003-0305-04: NetMeeting Directory Traversal Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[RHSA-2003:204-01] Updated PHP packages are now available (bugzilla@...hat.com)
[KSA-003] Cross Site Scripting Vulnerability in Phpgroupware ("Francois SORIN" <francois.sorin@...urity-corporation.com>)
Re: OptiSwitch remote root compromise - Wrong ifnormation (Zeev Dr <zdraer@....com>)
[SECURITY] Remote roster manipulation bug in various Jabber clients (Jacek Konieczny <jajcus@...t.pl>)
Re: [SECURITY] Remote roster manipulation bug in various Jabber clients ("Jamin W. Collins" <jcollins@...ardsrealm.net>)
Re: [SECURITY] Remote roster manipulation bug in various Jabber clients (Julian Missig <julian@...ber.org>)
Re: Red Hat 9: free tickets (Carlos Villegas <villegas@...h.gatech.edu>)
Re: Red Hat 9: free tickets (Michal Zalewski <lcamtuf@...edump.cx>)
URLMON.DLL buffer overflow - technical details (Jouko Pynnonen <jouko@....fi>)
phpMyAdmin: reply to vulnerability report (2003-06-18) (Marc Delisle <DelislMa@...legeSherbrooke.qc.ca>)
OpenBSD PF :: "rdr" information leakage (Ed3f <ed3f@...rminder.com>)

July 3 (9 messages)

Greymatter v1.21d: Remote PHP command injection/execution. ("FraMe" <frame@...palab.com>)
[RHSA-2003:203-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
[RHSA-2003:203-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
[VulnDiscuss] Serious Rediffmail.com Vulnerabilities (Viper <viper31337@...oo.co.in>)
Software vendors just don't "get" ActiveX security ("Richard M. Smith" <rms@...puterbytesman.com>)
[RHSA-2003:203-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
Immunix Secured OS 7+ unzip update -- bugtraq (Immunix Security Team <security@...unix.com>)
[CLA-2003:672] Conectiva Security Announcement - unzip (Conectiva Updates <secure@...ectiva.com.br>)
[SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow ("Secure Net Service(SNS) Security Advisory" <snsadv@....co.jp>)

July 4 (13 messages)

[STX] Multiple Security Vulnerabilities (<ace@...tic-x.org>)
[VulnDiscuss] Contact information for Microsoft Security Response Center [tf] ("Microsoft Security Response Center" <secure@...rosoft.com>)
When full disclosure is the only way... (se@...iracy.de)
Another ProductCart SQL Injection Vulnerability (Bosen <mobile@...en.net>)
MacOSX - crash screensaver locked with password and get the desktop back (Delfim Machado <bipbip@...o.org>)
VPASP SQL Injection Vulnerability & Exploit CODE (<aresu@...en.net>)
[CLA-2003:674] Conectiva Security Announcement - xpdf (Conectiva Updates <secure@...ectiva.com.br>)
Generic way to exploit an insecure /tmp file creation - Red Hat 7,8,9 (Re: Red Hat 9: free tickets) (Spybreak <spybreak@...teria.sk>)
MacOSX - crash screensaver locked with password and get the desktop back (Delfim Machado <bipbip@...o.org>)
Email marketing company gives out questionable security advice ("Richard M. Smith" <rms@...puterbytesman.com>)
Re: MacOSX - crash screensaver locked with password and get the desktop back ("Brent J. Nordquist" <b-nordquist@...hel.edu>)
Re: Email marketing company gives out questionable security advice ("stonewall" <stonewall@...tel.net>)
[CLA-2003:675] Conectiva Security Announcement - ml85p (Conectiva Updates <secure@...ectiva.com.br>)

July 5 (6 messages)

Trillian Remote DoS (flur <flur@...rnet.org>)
Re: MacOSX - crash screensaver locked with password and get the desktop back (petard <petard@....lonestar.org>)
Re: MacOSX - crash screensaver locked with password and get the desktop back ("H. G. Katzgraber" <katzgraber@...s.ethz.ch>)
Re: MacOSX - crash screensaver locked with password and get the desktop back (Scott Menor <Scott.Menor@....edu>)
Re: MacOSX - crash screensaver locked with password and get the desktop back (Scott Menor <Scott.Menor@....edu>)
[Vulnerability] : ProductCart database file can be downloaded remotely ("Tri Huynh" <trihuynh@...up.com>)

July 6 (4 messages)

cPanel Malicious HTML Tags Injection Vulnerability (Ory Segal <ORY.SEGAL@...CTUMINC.COM>)
cPanel Malicious HTML Tags Injection Vulnerability (Ory Segal <ory.segal@...ctuminc.com>)
myServer - Remote Denial of Service ("morning_wood" <se_cur_ity@...mail.com>)
[VulnDiscuss] rundll32.exe buffer overflow ("Rick" <rikul@...erbee.com>)

July 7 (19 messages)

[CLA-2003:685] Conectiva Security Announcement - openldap (Conectiva Updates <secure@...ectiva.com.br>)
Re: Email marketing company gives out questionable security advice ("D. J. Bernstein" <djb@...yp.to>)
Remote DoS on Canon GP300 (DOUHINE Davy <DDOUHINE@...info.fr>)
Re: MacOSX - crash screensaver locked with password and get the desktop back ("Adam H. Pendleton" <fmonkey@...nkey.net>)
[SECURITY] [DSA-338-1] New x-face-el packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
Vulneralbility in aplication Billing Explorer ("XNUXER RESEARCH" <xnuxer@...kermail.com>)
[SECURITY] [DSA-337-1] New semi, wemi packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
XSS in OWA allows stealing windows domain user credentials (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
rundll32.exe buffer overflow ("Rick" <rikul@...lsouth.net>)
[SECURITY] [DSA-339-1] New semi, wemi packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
[OpenPKG-SA-2003.032] OpenPKG Security Advisory (php) (OpenPKG <openpkg@...npkg.org>)
Re: Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) ("Marek Blahus" <marek@...hus.cz>)
Re: Another ProductCart SQL Injection Vulnerability (Massimo Arrigoni <support@...lyimpact.com>)
ICQ 2003a Password Bypass ("Cauă" Moura Prado <mouraprado@...oguerra.com.br>)
Re: Email marketing company gives out questionable security advice (Gadgeteer <gadgeteer@...gantinnovations.org>)
Re: MacOSX - crash screensaver locked with password and get the desktop back (Bill Moran <wmoran@...entialtech.com>)
Re: Bypassing ZoneAlarm (limited) (Dan Harkless <bugtraq@...kless.org>)
Re: Contact information for Microsoft Security Response Center [tf] (<keepitsecret@...h.com>)
[VulnDiscuss] RE: MacOSX - crash screensaver locked with password and get thedesktop back ("Tim Yardley" <liquid@...eheart.com>)

July 8 (30 messages)

ProductCart XSS Vulnerability (atomix atomix <at0mix87@...oo.com>)
Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code (KF <dotslash@...soft.com>)
Re: Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code (KF <dotslash@...soft.com>)
Re: Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code (psz@...hs.usyd.edu.au (Paul Szabo))
Adobe Acrobat and PDF security: no improvements for 2 years (Vladimir Katalov <info@...omsoft.com>)
WDAV exploit without netcat and with pretty magic number ("XNUXER RESEARCH" <xnuxer@...kermail.com>)
Re: Trillian Remote DoS ("Erik Jacobson" <uhlume@...mail.com>)
Unrealircd & Anope services - join segmentation fault in operserv.c (Lethalman <lethalman@...ero.it>)
Internet Explorer Crash (Digital Scream <digitalscream@...l.xakep.ru>)
What Win2k SP4 doesn't fix (security), but says it does... (<m_a_s2mp@...oo.com>)
[CLA-2003:690] Conectiva Security Announcement - imp (Conectiva Updates <secure@...ectiva.com.br>)
Named Pipe Filename Local Privilege Escalation ("@stake Advisories" <advisories@...take.com>)
ZH2003-1SA (security advisory): Rockliffe Mailsite Express - mail attachments retrievable without proper authentication (tizio caio <G00db0y@...e-h.org>)
Re: Unrealircd & Anope services - join segmentation fault in operserv.c (Sean Kelly <smkelly@...bie.org>)
MDKSA-2003:073 - Updated unzip packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Qt temporary files race condition in Knoppix 3.1 (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
zkfingerd-2.0.2(the last version)Format String Vulnerabilities (yan feng <jsk@...nt0m.net>)
Information Disclosure Vulnerability in board51, forum51 and news51 ("Marc Bromm" <theblacksheep@...tmail.fm>)
[CLA-2003:691] Conectiva Security Announcement - php4 (Conectiva Updates <secure@...ectiva.com.br>)
[SECURITY] [DSA-341-1] New liece packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
Re: MacOSX - crash screensaver locked with password and get the desktop back (KF <dotslash@...soft.com>)
Re: Email marketing company gives out questionable security advice (Richard Rager <kb8rln@...guinmaster.com>)
Multiple Buffer Overflows in IglooFTP PRO (Peter Winter-Smith <peter4020@...mail.com>)
RE: Contact information for Microsoft Security Response Center [t f] (Francis Favorini <francis.favorini@...e.edu>)
Re: rundll32.exe buffer overflow ("wirepair" <wirepair@...uemail.net>)
[SECURITY] [DSA-342-1] New mozart packages fix unsafe mailcap configuration (Matt Zimmerman <mdz@...ian.org>)
Domain User Credentials access via OWA XSS (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
Re: Contact information for Microsoft Security Response Center [tf] ("Nexus" <nexus@...rol.i-way.co.uk>)
Re: Email marketing company gives out questionable security advice (Roland Dowdeswell <elric@...ryr.org>)
Re: Contact information for Microsoft Security Response Center [tf] (David A. PĂ©rez <david@...borio.net>)

July 9 (34 messages)

Re: rundll32.exe buffer overflow ("Curt Wilson" <netw3_security@...hmail.com>)
xchar crash after 3 continually server call (tupac sakur <extraneous@...gr.org>)
Re: Red Hat 9: free tickets (Stephen Samuel <samuel@...reen.com>)
IE Object Type Overflow Exploit (ash@...inemenace.org)
[SECURITY] [DSA-344-1] New unzip packages fix directory traversal (Matt Zimmerman <mdz@...ian.org>)
TerminatorX local root (andrewg@...inemenace.org)
Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code (sec-labs team <team@...-labs.hack.pl>)
[ANNOUNCE][SECURITY] Apache 2.0.47 released ("Apache HTTP Server Project" <striker@...che.org>)
[SNS Advisory No.66] Apache HTTP Server v2 Causes a DoS When Parsing a Type-Map File ("Secure Net Service(SNS) Security Advisory" <snsadv@....co.jp>)
Coda RPC2 Denial of Serviec (andrewg@...inemenace.org)
Black Box Voting (Joshua Jore <josh@...endergreens.org>)
[SECURITY] [DSA-347-1] New teapop packages fix SQL injection (Matt Zimmerman <mdz@...ian.org>)
Fwd: RE: Contact information for Microsoft Security Response Center [tf] (<keepitsecret@...h.com>)
ZH2003-2SA (security advisory): QShop priviledge escalation (G00db0y <G00db0y@...e-h.org>)
Tomcat Dangerous Documentation/Tomcat Default Plaintext Password Storage (Mike Bommarito <g0thm0g@...bi.com>)
Re: zkfingerd-2.0.2(the last version)Format String Vulnerabilities (Vade 79 <v9@...ehalo.deadpig.org>)
[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal (Matt Zimmerman <mdz@...ian.org>)
Re[2]: ICQ 2003a Password Bypass (CauĐł Moura Prado <mouraprado@...oguerra.com.br>)
[SECURITY] [DSA-343-1] New skk, ddskk packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
Re: Unrealircd & Anope services - join segmentation fault in operserv.c (Rob <rob@...pe.org>)
[SECURITY] [DSA-345-1] New xbl packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
Re: ICQ 2003a Password Bypass (Seva Gluschenko <gvs@...os.net>)
Re: Another ProductCart SQL Injection Vulnerability (Massimo Arrigoni <support@...lyimpact.com>)
Re: ProductCart XSS Vulnerability (Massimo Arrigoni <support@...lyimpact.com>)
Information Disclosure Vulnerability in bitboard2 ("Marc Bromm" <theblacksheep@...tmail.fm>)
Microsoft Utility Manager Local Privilege Escalation (NGSSoftware Insight Security Research <nisr@...tgenss.com>)
Re: Generic way to exploit an insecure /tmp file creation - Red Hat 7,8,9 (Re: Red Hat 9: free tickets) (Stephen Samuel <samuel@...reen.com>)
Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
xpdf vulnerability - CAN-2003-0434 (Andries.Brouwer@....nl)
Pipe Filename Local Privilege Escalation FAQ ("@stake Advisories" <advisories@...take.com>)
Re: xpdf vulnerability - CAN-2003-0434 (stanislav shalunov <shalunov@...ernet2.edu>)
Website to (Safely) Check Content Filtering S/W for Malicious Code??? (scott Stevens <stevenss@...c.army.mil>)
PalmOS Memo Record Hiding Vulnerability. (Shaun Moore <shaunige@...oo.co.uk>)
Re: xpdf vulnerability - CAN-2003-0434 (Andries.Brouwer@....nl)

July 10 (10 messages)

Acroread 5.0.7 buffer overflow (psz@...hs.usyd.edu.au (Paul Szabo))
The incredible gayness of antivirus-vendors and their products (in this case, NAV corp. ed.) (Knud HĂ¸jgaard <kh@...ecomplus.dk>)
Re: PalmOS Memo Record Hiding Vulnerability. (Goetz Bock <bock@...cknet.de>)
Re: The incredible gayness of antivirus-vendors and their products (in this case, NAV corp. ed.) ("morning_wood" <se_cur_ity@...mail.com>)
[OpenPKG-SA-2003.034] OpenPKG Security Advisory (imagemagick) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2003.033] OpenPKG Security Advisory (infozip) (OpenPKG <openpkg@...npkg.org>)
[SCSA-019] Gattaca Server 2003 Vulnerable to Multiple vulnerabilities (Gregory LEBRAS <gregory.lebras@...urity-corporation.com>)
PHP-Include-Hack-Possibility in phpforum 2 RC-1 ("theblacksheep" <theblacksheep@...tmail.fm>)
[CLA-2003:693] Conectiva Security Announcement - pam (Conectiva Updates <secure@...ectiva.com.br>)
Re: ServU FTP Service (Win32) is able to relay email (Hal Flynn <flynn@...urityfocus.com>)

July 11 (8 messages)

New trojan turns home PCs into porno Web site hosts ("Richard M. Smith" <rms@...puterbytesman.com>)
iDEFENSE Security Advisory 07.11.03: Win32 Message Vulnerabilities Redux ("iDEFENSE Labs" <labs@...fense.com>)
W-Agora 4.1.5 (Martin Eiszner <martin@...sec.org>)
TSLSA-2003-0025 - apache (Trustix Secure Linux Advisor <tsl@...stix.com>)
Invision Power Board v1.1.2 (Martin Eiszner <martin@...sec.org>)
LeapFTP remote buffer overflow exploit ("drG4njubas" <drG4nj@...l.ru>)
RE: Generic way to exploit an insecure /tmp file creation - Red Hat 7,8,9 (Re: Red Hat 9: free tickets) ("Paul Vet" <paul.vet@...dhead.com>)
Re: Red Hat 9: free tickets (Stephen Samuel <samuel@...reen.com>)

July 12 (12 messages)

Re: Red Hat 9: free tickets (Jon Hart <warchild@...ofed.org>)
Yahoo Messenger 5.5 exploit for win2k ("bob" <bob@...rs.net>)
Shattering SEH ("Brett Moore" <brett.moore@...urity-assessment.com>)
UMN gopherd[2.x.x/3.x.x]: ftp gateway, and GSisText() buffer overflow exploits. (Vade 79 <v9@...ehalo.deadpig.org>)
MSIE:patched&undisclosed XSS vuln (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
Re: ServU FTP Service (Win32) is able to relay email (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Email marketing company gives out questionable security advice ("D. J. Bernstein" <djb@...yp.to>)
DoS - Polycom MGC 25 Control Port (ident@...frog.com)
cross site scripting htmltonuke (jocanor jocanor <jocanor2002@...mail.com>)
ZH2003-3SA (security advisory): Storefront sql injection: users info disclosure (G00db0y <G00db0y@...e-h.org>)
RE: New trojan turns home PCs into porno Web site hosts ("ge" <ge@...tistical.reprehensible.net>)
ZH2003-4SA (security advisory): ASP-DEV Discussion Forum V2.0 (G00db0y <G00db0y@...e-h.org>)

July 13 (10 messages)

Announcement: New Security Vulnerability List (<support@...telli.com>)
Re: iDEFENSE Security Advisory 07.11.03: Win32 Message Vulnerabilities Redux (Chris Paget <chrisp@...software.com>)
Samba Remote Exploit with connect back method and bruteforce mode ("XNUXER RESEARCH" <xnuxer@...kermail.com>)
Re: iDEFENSE Security Advisory 07.11.03: Win32 Message Vulnerabilities Redux (David A. PĂ©rez <david@...borio.net>)
[CLA-2003:694] Conectiva Security Announcement - gnupg (Conectiva Updates <secure@...ectiva.com.br>)
BlackBook - Multiple Vunerabilities ("morning_wood" <se_cur_ity@...mail.com>)
Buffer Overflow Vulnerability Found in IMAP4 MDaemon 6 - [SELECT] ("Dennis Rand" <der@...owarfare.dk>)
Buffer Overflow Vulnerability Found in IMAP4 MDaemon 6 - [EXAMINE] ("Dennis Rand" <der@...owarfare.dk>)
Grub Distributed Client - Cleartext Passwords ("morning_wood" <se_cur_ity@...mail.com>)
[VulnDiscuss] Re: Buffer Overflow Vulnerability Found in IMAP4 MDaemon 6 - [SELECT] (Hal Flynn <flynn@...urityfocus.com>)

July 14 (21 messages)

Linux nfs-utils xlog() off-by-one bug (Janusz Niewiadomski <funkysh@...c.pl>)
[RHSA-2003:206-01] Updated nfs-utils packages fix denial of service vulnerability (bugzilla@...hat.com)
Netscape 7.02 Client Detection Tool plug-in buffer overrun (martin rakhmanoff <jimmers@...dex.ru>)
IE chromeless window vulnerabilities (Andrew Clover <and-bugtraq@...desk.com>)
@stake named pipe exploit ("wirepair" <wirepair@...uemail.net>)
[sec-labs] Remote Denial of Service vulnerability in NeoModus Direct Connect 1.0 build 9 (sec-labs team <noreply@...-labs.hack.pl>)
StarSiege: Tribes DoS ("st0ic" <st0ic@...x.net>)
[SECURITY] [DSA-348-1] New traceroute-nanog packages fix integer overflow (Matt Zimmerman <mdz@...ian.org>)
TA-2003-07 Denial of Service Attack against Twilight WebServer v1.3.3.0 ("Rushjo@...pbit.org" <rushjo@...pbit.org>)
ImageMagick's Overflow (Angelo Rosiello <guilecool@....com>)
Re: WDAV exploit without netcat and with pretty magic number (Roman Medina <roman@...labs.com>)
RE: IE chromeless window vulnerabilities ("Drew Copley" <dcopley@...e.com>)
RE: Website to (Safely) Check Content Filtering S/W for Malicious Code??? ("Menashe Eliezer" <menashe@...jan.com>)
[SECURITY] [DSA-349-1] New nfs-utils package fixes buffer overflow (Matt Zimmerman <mdz@...ian.org>)
Re: StarSiege: Tribes DoS ("Mascot" <mascot@...cot.dyndns.org>)
Asus AAM6000EV ADSL Router Wide Open (cw <security@...ei.co.uk>)
Re: StarSiege: Tribes DoS ("Davis Ray Sickmon, Jr" <midryder@...nightryder.com>)
RE: StarSiege: Tribes DoS (Aeloria Resa <terin@...ha-designs.net>)
@stake exploit code (oops) ("wirepair" <wirepair@...uemail.net>)
RE: IE chromeless window vulnerabilities (Jason Sloderbeck <ops-lists@...itivenetworks.net>)
Reality of the rpc.mountd bug ("tb0b" <tbob@...mitive-incision.co.uk>)

July 15 (16 messages)

[RHSA-2003:162-01] Updated Mozilla packages fix security vulnerability (bugzilla@...hat.com)
[RHSA-2003:162-01] Updated Mozilla packages fix security vulnerability (bugzilla@...hat.com)
possible open relay hole in qmail-smtpd-auth patch (John Simpson <jms1@...1.net>)
Internet Explorer Full-Screen mode threats ("Marek Bialoglowy" <mb@...temintegra.com>)
xfstt-1.4 vulnerability (ruben unteregger <ruben.unteregger@...-it.ch>)
[CLA-2003:695] Conectiva Security Announcement - mpg123 (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2003:696] Conectiva Security Announcement - ucd-snmp (Conectiva Updates <secure@...ectiva.com.br>)
Multiple vulnerabilites in Citadel/UX ("Carl Livitt" <carllivitt@...h.com>)
SuSE Security Announcement: nfs-utils (SuSE-SA:2003:031) (krahmer@...e.de (Sebastian Krahmer))
Re: Asus AAM6000EV ADSL Router Wide Open (Michael Renzmann <security@...anic.de>)
Splatt Forum html injection code in post icon (Lethalman <lethalman@...ero.it>)
DSL- Router Teledat 530 DoS (mac.ac@...nline.de (Dr. Markus a Campo))
[SECURITY] [DSA-350-1] New falconseye packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
FIXED: MacOSX - crash screensaver locked with password and get thedesktop back (<t4@...ine.com>)
Re: Asus AAM6000EV ADSL Router Wide Open (cw <security@...ei.co.uk>)
Re: Asus AAM6000EV ADSL Router Wide Open (Ben Wheeler <jammin@...e.eu.org>)

July 16 (28 messages)

[slackware-security] nfs-utils packages replaced (SSA:2003-195-01b) (Slackware Security Team <security@...ckware.com>)
CALEA electonic wiretapping on unsecured Solaris boxes ("Dan Harkless" <bugtraq@...kless.org>)
CreateFile exploit, (working) ("wirepair" <wirepair@...uemail.net>)
SRT2003-07-08-1223 - IBM U2 UniVerse uvadm can take root via buffer overflows (KF <dotslash@...soft.com>)
SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh (KF <dotslash@...soft.com>)
SRT2003-07-07-0913 - Abnormal suid behavior in several applications (KF <dotslash@...soft.com>)
SRT2003-07-07-0831 - IBM U2 UniVerse cci_dir creates hard links as root (KF <dotslash@...soft.com>)
Odd Behavior - Windows Messenger Service ("morning_wood" <se_cur_ity@...mail.com>)
Re: possible open relay hole in qmail-smtpd-auth patch (Uwe Ohse <uwe@...e.de>)
Re: Odd Behavior - Windows Messenger Service ("Ken Pfeil" <Ken@...osec101.org>)
Re: possible open relay hole in qmail-smtpd-auth patch (Jonathan de Boyne Pollard <J.deBoynePollard@...co.net>)
Re: Odd Behavior - Windows Messenger Service ("morning_wood" <se_cur_ity@...mail.com>)
Digi-news and Digi-ads version 1.1 admin access without password (scrap <webmaster@...uriteinfo.com>)
Microsoft ISA Server HTTP error handler XSS (TL#007) ("Thor Larholm" <thor@...x.com>)
[LSD] Critical security vulnerability in Microsoft Operating Systems (Last Stage of Delirium <contact@...-pl.net>)
ISA Server - Error Page Cross Site Scripting ("Brett Moore" <brett.moore@...urity-assessment.com>)
CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML (fwd) (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
[CLA-2003:697] Conectiva Security Announcement - phpgroupware (Conectiva Updates <secure@...ectiva.com.br>)
ZH2003-10SA (security advisory): Mail System Ver. 0.9 Beta (G00db0y <G00db0y@...e-h.org>)
Re: Asus AAM6000EV ADSL Router Wide Open (Michael Renzmann <security@...anic.de>)
Re: possible open relay hole in qmail-smtpd-auth patch (Valdis.Kletnieks@...edu)
Auction Works XXS Vulnerability (Bosen <mobile@...en.net>)
Immunix Secured OS 7+ nfs-utils update -- bugtraq (Immunix Security Team <security@...unix.com>)
MDKSA-2003:074 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
PHP safe mode broken? (Michal Krause <michal@...use.cz>)
Re: Asus AAM6000EV ADSL Router Wide Open (cw <security@...ei.co.uk>)
ZH2003-9SA (security advisory): .netCart information disclusure (G00db0y <G00db0y@...e-h.org>)
Disclosure-for-pay? ("Talley, Brooks" <brooks@...k.com>)

July 17 (18 messages)

Changing UBB cookie allows account hijack (<anti_acid@...mail.com>)
SRT2003-07-16-0358 - bru has buffer overflow and format issues (KF <dotslash@...soft.com>)
Multiple Vulnerabilities in Name Service Daemon (nsd) on IRIX (SGI Security Coordinator <agent99@....com>)
Login Vulnerabilities on IRIX (SGI Security Coordinator <agent99@....com>)
[RHSA-2003:196-02] Updated Xpdf packages fix security vulnerability. (bugzilla@...hat.com)
CERT Advisory CA-2003-15 Cisco IOS Interface Blocked by IPv4 Packet (fwd) (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
Re: possible open relay hole in qmail-smtpd-auth patch (Uwe Ohse <uwe@...e.de>)
Cisco Security Advisory: Cisco IOS Interface Blocked by IPv4 Packet (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA-351-1] New php4 packages fix cross-site scripting vulnerability (Matt Zimmerman <mdz@...ian.org>)
eStore SQL Injection Vulnerability & Path Disclosure (Bosen <mobile@...en.net>)
Re: PHP safe mode broken? (Michal Krause <michal@...use.cz>)
Windows Update - Unsafe ActiveX control ("Siddhartha Jain(IT)" <SiddharthaJ@...kmuscat.com>)
ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta (Jim Pangalos <dpangalos@...uxmail.org>)
RE: Windows Update - Unsafe ActiveX control ("Jackson, Chris" <CJackson@...dgecom.com>)
RE: Windows Update - Unsafe ActiveX control ("Drew Copley" <dcopley@...e.com>)
Administrivia: Summer vacation/bounce troll (Dave Ahmad <da@...urityfocus.com>)
Re: [LSD] Critical security vulnerability in Microsoft Operating Systems (Todd Sabin <tsabin@...or.bindview.com>)
FW: Windows Update - Unsafe ActiveX control (fwd) (Dave Ahmad <da@...urityfocus.com>)

July 18 (16 messages)

Re: ZH2003-3SA (security advisory): Storefront sql injection: users info disclosure (Bob LaGarde <b.lagarde@...arde.com>)
Bypassing ServerLock protection on Windows 2000 (Jan Rutkowski <jkrutkowski@...a.pw.edu.pl>)
Cisco Security Advisory: Cisco IOS Interface Blocked by IPv4 Packet (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[VulnDiscuss] RE: Re: [LSD] Critical security vulnerability in Microsoft Operating Systems ("Kirby Kuehl" <kkuehl@...co.com>)
RAV Antivirus : Buffer Overflow in Online Scanning ActiveX ("Tri Huynh" <trihuynh@...up.com>)
[VulnDiscuss] Cisco IOS vulnerability detection tool by Foundstone ("Matt Ploessel" <matt.ploessel@...ndstone.com>)
Re: possible open relay hole in qmail-smtpd-auth patch (John Simpson <jms1@...1.net>)
Witango & Tango 2000 Application Server Remote System Buffer Overrun ("Next Generation Insight Security Reseach Team" <mark@...software.com>)
CERT Advisory CA-2003-17 Exploit available for for the Cisco IOS Interface (CERT Advisory <cert-advisory@...t.org>)
TSLSA-2003-0027 - nfs-utils (Trustix Secure Linux Advisor <tsl@...stix.com>)
Re: FW: Windows Update - Unsafe ActiveX control (fwd) (Cesar <cesarc56@...oo.com>)
Re: Microsoft ISA Server HTTP error handler XSS (TL#007) ("http-equiv@...ite.com" <1@...ware.com>)
Fw: SC Signature and HPING Signature ("james" <hackerwacker@...pit.cybermesa.com>)
New information regarding CERT Advisory CA-2003-15 (CERT Advisory <cert-advisory@...t.org>)
Re: Disclosure-for-pay? (Josh Daymont <joshd@...gard.net>)
[VulnDiscuss] Re: SRT2003-07-16-0358 - bru has buffer overflow and format issues (Knud Erik HĂ¸jgaard <kain@...op.dk>)

July 19 (5 messages)

Buffer overflow in MSN Messenger 6.0 (Bahaa Naamneh <b_naamneh@...mail.com>)
RE: [LSD] Critical security vulnerability in Microsoft Operating Systems ("Russ" <Russ.Cooper@...on.ca>)
Re: Microsoft ISA Server HTTP error handler XSS (TL#007) ("http-equiv@...ite.com" <1@...ware.com>)
Re: [LSD] Critical security vulnerability in Microsoft Operating Systems (Todd Sabin <tsabin@...or.bindview.com>)
Simpnews include file Vulnerability (pupet cahyo <pupet@...mo.com>)

July 20 (2 messages)

Netterm netftpd - Remote DoS ("morning_wood" <se_cur_ity@...mail.com>)
Fw: Fake Advisory ("morning_wood" <se_cur_ity@...mail.com>)

July 21 (19 messages)

WebCalendar Include File (noconflic <nocon@...as-shooters.com>)
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities (bugzilla@...hat.com)
[RHSA-2003:162-02] Updated Mozilla packages fix security vulnerability. (bugzilla@...hat.com)
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities (bugzilla@...hat.com)
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities (bugzilla@...hat.com)
[RHSA-2003:162-02] Updated Mozilla packages fix security vulnerability. (bugzilla@...hat.com)
Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability ("benjurry" <benjurry@...cus.org>)
CGI.pm vulnerable to Cross-site Scripting (obscure <dontreply@...onsecurity.org>)
Cisco IOS exploit (44020) (Martin Kluge <martin@...si.de>)
Drupal XSS Vulnerability (main page and sub pages) ("Ferruh Mavituna" <ferruh@...ituna.com>)
RE: Disclosure-for-pay? ("Martin Walker" <martin.walker@....com>)
[RHSA-2003:162-02] Updated Mozilla packages fix security vulnerability. (bugzilla@...hat.com)
Path disclosure and file retrieving in AtomicBoard-0.6.2 (gr00vy <groovy2600@...oo.com.ar>)
RE: Cisco IOS exploit (44020) ("Donahue, Pat" <PDonahue@...icorp.com>)
RE: Re: FW: Windows Update - Unsafe ActiveX control (fwd) (<liudieyuinchina@....sina.com>)
ActiveX security resources ("Michael Howard" <mikehow@...rosoft.com>)
Re: CGI.pm vulnerable to Cross-site Scripting (Erwann CORVELLEC <Erwann.Corvellec@...e.fr>)
RE: Cisco IOS exploit (44020) ("Jerry Shenk" <jshenk@...ommunications.com>)
[CLA-2003:698] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)

July 22 (17 messages)

Re: Fw: Fake Advisory ("Franks and Beans" <morning_wood@...gapore.net>)
Re: Re: Fw: Fake Advisory ("Remko Lodder" <remko@...andar.org>)
exploitlabs.com XSS hole someone better beware! (<dnv@...hmail.com>)
Re: [LSD] Critical security vulnerability in Microsoft Operating Systems (Last Stage of Delirium <contact@...-pl.net>)
sorry, wrong file (phil dunn <z3hp@...oo.com>)
[CLA-2003:700] Conectiva Security Announcement - nfs-utils (Conectiva Updates <secure@...ectiva.com.br>)
Security Update: [ CSSA-2003-SCO.12 ] OpenServer 5.0.6, OpenServer 5.0.7 : Security vulnerability in Merge prior to Release 5.3.23a (security@....com)
Re: Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability (voleur@...akeasy.net)
Re: Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability (flashsky fangxing <flashsky@...cus.org>)
RE: Disclosure-for-pay? (Rikhardur.EGILSSON@...d.org)
Re: CGI.pm vulnerable to Cross-site Scripting (Lincoln Stein <lstein@...l.edu>)
Apache 1.3.27 mod_proxy security issue ("Jason Robertson" <jason@...ture.com>)
Re: Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability ("benjurry" <benjurry@...cus.org>)
[CLA-2003:701] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2003:702] Conectiva Security Announcement - cups (Conectiva Updates <secure@...ectiva.com.br>)
Cracking windows passwords in 5 seconds (<bugtraq@...hslin.net>)
phpMyAdmin: updated reply to vulnerability report of 2003-06-18 (Marc Delisle <DelislMa@...legeSherbrooke.qc.ca>)

July 23 (24 messages)

IIS 6.0 Web Admin Multiple vulnerabilities (Hugo "Vázquez" "Caramés" <overclocking_a_la_abuela@...mail.com>)
ODBC Login information saved as plain text... :( (hanez <mailman@...ez.org>)
[scip_Advisory 2003-01] MSN search results.aspx Cross Site Scripting ("Marc Ruef" <maru@...p.ch>)
Re: [scip_Advisory 2003-01] MSN search results.aspx Cross Site Scripting ("morning_wood" <se_cur_ity@...mail.com>)
Buffer Overflow in Netware Web Server PERL Handler ("Uffe Nielsen" <uni@...tego.dk>)
Re: CGI.pm vulnerable to Cross-site Scripting (Erwann CORVELLEC <Erwann.Corvellec@...e.fr>)
Vulnerability in the mail client in Opera 7.20 beta 1. (Arve Bersvendsen <arve@...tuelvis.com>)
[SECURITY] [DSA-352-1] New fdclone packages fix insecure temporary directory usage (Matt Zimmerman <mdz@...ian.org>)
NOVL-2003-2966549 - Enterprise Web Server PERL Buffer Overflow ("Ed Reed" <ereed@...ell.com>)
Denial of service in 3COM 812 DSL routers ("David F.Madrid" <conde0@...efonica.net>)
R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server (advisory@...id7.com)
Re: Apache 1.3.27 mod_proxy security issue ("William A. Rowe, Jr." <wrowe@...che.org>)
MDKSA-2003:077 - Updated phpgroupware packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[RHSA-2003:234-01] Updated semi packages fix vulnerability (bugzilla@...hat.com)
[RHSA-2003:234-01] Updated semi packages fix vulnerability (bugzilla@...hat.com)
[RHSA-2003:234-01] Updated semi packages fix vulnerability (bugzilla@...hat.com)
MDKSA-2003:077 correction (Vincent Danen <vdanen@...drakesoft.com>)
[CLA-2003:703] Conectiva Security Announcement - phpgroupware (Conectiva Updates <secure@...ectiva.com.br>)
Drivial Pursuit: Internet Explorer Browser & Your Files and Folders ! ("http-equiv@...ite.com" <1@...ware.com>)
Microsoft SQL Server DoS ("@stake Advisories" <advisories@...take.com>)
Windows NT 4.0 with IBM JVM Denial of Service ("@stake Advisories" <advisories@...take.com>)
Microsoft SQL Server local code execution ("@stake Advisories" <advisories@...take.com>)
Re: ODBC Login information saved as plain text... :( ("Deus, Attonbitus" <Thor@...merofGod.com>)
MDKSA-2003:077 correction (Vincent Danen <vdanen@...drakesoft.com>)

July 24 (17 messages)

VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems) vulnerability (Dave Ahmad <da@...urityfocus.com>)
HP 4550 Printer - Remote XSS DoS - ("morning_wood" <se_cur_ity@...mail.com>)
[ESA-20032407-018] Several local 'kernel' vulnerabilities. (EnGarde Secure Linux <security@...rdiandigital.com>)
Integrigy Security Alert - Oracle E-Business Suite AOL/J Setup Test Information Disclosure ("Integrigy Security Alerts" <alerts@...egrigy.com>)
Integrigy Security Alert - Oracle E-Business Suite FNDWRR Buffer Overflow ("Integrigy Security Alerts" <alerts@...egrigy.com>)
ZH2003-12SA (security advisory): PHP-Gästebuch Ver. 1.60 Beta (Jim Pangalos <dpangalos@...uxmail.org>)
MDKSA-2003:078 - Updated mpg123 packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2003:071-1 - Updated xpdf packages fix arbitrary code execution vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Drivial Pursuit: Internet Explorer Browser & Your Files and Folders ! ("Thor Larholm" <thor@...x.com>)
paFileDB 3.1 (Martin Eiszner <martin@...sec.org>)
e107 website system Vulnerability (Artoor Petrovich <artoor@...loyt.com>)
[ESA-20032407-018] Several local 'kernel' vulnerabilities. (EnGarde Secure Linux <security@...rdiandigital.com>)
[CLA-2003:704] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
Re: e107 website system Vulnerability (Tim Yohn <tyohn@...banza.com>)
Re: e107 website system Vulnerability ("nokio x0" <xj3wlzx@...mail.com>)
Certain operating systems can be sometimes locally DoSed when running on particular types of hardware with certain versio… (Michal Zalewski <lcamtuf@...ttot.org>)
EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption ("Derek Soeder" <dsoeder@...e.com>)

July 25 (27 messages)

Resolved - IRCX Pro ("morning_wood" <se_cur_ity@...mail.com>)
[RHSA-2003:221-01] Updated stunnel packages fix signal vulnerability (bugzilla@...hat.com)
The Analysis of LSD's Buffer Overrun in Windows RPC Interface(code revised ) ("xundi" <xundi@...cus.org>)
Oracle Extproc Buffer Overflow (#NISR25072003) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
The Analysis of LSD's Buffer Overrun in Windows RPC Interface by Xfocus [Moderator: new targets in exploit code] ("benjurry" <benjurry@...cus.org>)
exp for Microsoft SQL Server DoS(MS03-031) By Xfocus ("benjurry" <benjurry@...cus.org>)
Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack (SGI Security Coordinator <agent99@....com>)
MDKSA-2003:066-2 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
ssh host key generation in Red Hat Linux (Kent Borg <kentborg@...g.org>)
PBLang Forum XSS Vul (Quan Van Truong Bui <quan_vu_208cn@...oo.com>)
Re: e107 website system Vulnerability (Tjebbe de Winter <Tjebbe.deWinter_@...pam.cysonet.com>)
MS03-029 / Q823803 breaks RAS? ("Adam D. Barratt" <security-bugtraq@...ky-badger.org>)
RE: Windows NT 4.0 with IBM JVM Denial of Service ("Angelidis, Fotis(NSASOUDABAY)" <AngelidisF@....souda.navy.mil>)
XSS in e107 website system ("Pete Foster" <petef@...-tec.co.uk>)
TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") ("http-equiv@...ite.com" <1@...ware.com>)
Re: Windows NT 4.0 with IBM JVM Denial of Service (Marc Schoenefeld <schonef@...-muenster.de>)
Re: ssh host key generation in Red Hat Linux (Crispin Cowan <crispin@...unix.com>)
Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") (Denis Jedig <seclists@...eticon.de>)
Re: e107 website system Vulnerability (Steve Dunstan <jalist@...7.org>)
Re: WebCalendar Include File (Emmanuel Lacour <elacour@...ter-eggs.com>)
Re: ssh host key generation in Red Hat Linux (Brian Hatch <bugtraq@...kr.org>)
OpenServer 5.0.x : Samba security update available avaliable for download. (security@....com)
question about oracle advisory (Tina Bird <tbird@...cision-guesswork.com>)
Workaround for stopping MS2003-030 exploitation via HTML? ("Johnson, Jeff FOR:EX" <Jeff.S.Johnson@...s1.gov.bc.ca>)
CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library (CERT Advisory <cert-advisory@...t.org>)
scan.sygate.com. over-scanning? (Stephen Samuel <samuel@...reen.com>)
Re: ssh host key generation in Red Hat Linux (Kent Borg <kentborg@...g.org>)

July 26 (9 messages)

Re: scan.sygate.com. over-scanning? (H D Moore <sflist@...italoffense.net>)
Resolved - IRCX Pro ("morning_wood" <se_cur_ity@...mail.com>)
[ANNOUNCE] kses 0.2.0 (Ulf Harnhammar <ulfh@...ate.UU.SE>)
Re: question about oracle advisory ("David Litchfield" <david@...software.com>)
EEYE:ALERT Free RPC/DCOM vulnerability scanning tool ("Marc Maiffret" <marc@...e.com>)
Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") (Kee Hinckley <nazgul@...ewhere.com>)
Re: ssh host key generation in Red Hat Linux (Aaron Lehmann <aaronl@...elus.com>)
Re: VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems) vulnerability (VMware <vmware-security-alert@...are.com>)
DCOM RPC exploit (dcom.c) (<fulldisclosure@...holic.org>)

July 27 (1 message)

[ANNOUNCE] IISShield v1.0 ("Tiago Halm" <thalm@...cabo.pt>)

July 28 (13 messages)

Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") ("Fabio Pietrosanti (naif)" <fabio@...trosanti.it>)
Gallery XSS security advisory (with fix and patch instructions) ("Bharat Mediratta" <bharat@...alto.com>)
Remotely exploitable overflow in mod_mylo for Apache (Carl Livitt <carl@...rningshophull.co.uk>)
Cisco Aironet AP 1100 Malformed HTTP Request Crash Vulnerability (RĂ©da Zitouni <Reda.Zitouni@...ilante.com>)
Cisco Aironet AP1100 Valid Account Disclosure Vulnerability (RĂ©da Zitouni <Reda.Zitouni@...ilante.com>)
[PAPER]: Address relay fingerprinting. (Vade 79 <v9@...ehalo.deadpig.org>)
Cisco Aironet AP 1100 Malformed HTTP Request Crash Vulnerability (zitouni "réda" <reda.zitouni@...ilante.com>)
Cisco Security Advisory: HTTP GET Vulnerability in AP1x00 (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Aironet AP1100 Valid Account Disclosure Vulnerability (zitouni "réda" <reda.zitouni@...ilante.com>)
[CLA-2003:711] Conectiva Security Announcement - mnogosearch (Conectiva Updates <secure@...ectiva.com.br>)
IISShield Mailing List ("thalm" <thalm@...cabo.pt>)
Shattering SEH II ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") (pre <pre@...kgang.co.uk>)

July 29 (22 messages)

Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") (Stephen Cope <mail@...sense.kimihia.org.nz>)
Re: DCOM RPC exploit (dcom.c) (S G Masood <sgmasood@...oo.com>)
PBLang Cross Site Scripting Vulnerability (Newest version) (Quan Van Truong <quan_vu_208cn@...oo.com>)
[BUG-CORRECTION] IISShield logfile generation ("Tiago Halm" <thalm@...cabo.pt>)
iDEFENSE Security Advisory 07.29.03: Buffer Overflow in Sun Solaris Runtime Linker ("iDEFENSE Labs" <labs@...fense.com>)
[SECURITY] [DSA-353-1] New sup packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
KDE Security Advisory: Konqueror Referrer Authentication Leak (Dirk Mueller <mueller@....org>)
Half-Life servers: buffer-overflow and freeze (Auriemma Luigi <aluigi@...x.com>)
[RHSA-2003:222-01] Updated openssh packages available (bugzilla@...hat.com)
[CLA-2003:713] Conectiva Security Announcement - perl (Conectiva Updates <secure@...ectiva.com.br>)
Half-Life clients: buffer-overflow (Auriemma Luigi <aluigi@...x.com>)
Half-Life: fun with MODs (Auriemma Luigi <aluigi@...x.com>)
IE6 SP1 - Trivial Crash ("James Wolfe" <james@...csolutions.com>)
RE: DCOM RPC exploit (dcom.c) ("Marc Maiffret" <marc@...e.com>)
NetScreen ScreenOS 4.0.3r2 DOS (Papa loves Mambo <plm@...rror.org>)
RE: RPC DCOM still vulnerable even after applying patches ("Thor Larholm" <thor@...x.com>)
Remote Linux Kernel < 2.4.21 DoS in XDR routine. (Jared Stanbrough <jareds@....edu>)
Re: Apache 1.3.27 mod_proxy security issue ("William A. Rowe, Jr." <wrowe@...che.org>)
Re: Apache 1.3.27 mod_proxy security issue (Joshua Slive <joshua@...ve.ca>)
man-db[] multiple(4) vulnerabilities. (Vade 79 <v9@...ehalo.deadpig.org>)
MS03-029 / Q823803 and RRAS Problems [im] ("Microsoft Security Response Center" <secure@...rosoft.com>)
IRIX nsd server and modules mishandle AUTH_UNIX gid list (SGI Security Coordinator <agent99@....com>)

July 30 (20 messages)

Solaris ld.so.1 buffer overflow (Jouko Pynnonen <jouko@....fi>)
DCOM RPC - DEVESTATING IN SCOPE ("morning_wood" <se_cur_ity@...mail.com>)
[SECURITY] [DSA-354-1] New xconq packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
[LSD] IRIX nsd remote buffer overflow vulnerability (Last Stage of Delirium <contact@...-pl.net>)
RE: Solaris ld.so.1 buffer overflow (clint walker <cwalker@....com>)
Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Patrick Haruksteiner <haruk@....at>)
Re: Remote Linux Kernel < 2.4.21 DoS in XDR routine. ("Stephen Clowater" <steve@...vesworld.hopto.org>)
Re: Remote Linux Kernel < 2.4.21 DoS in XDR routine. (Jared Stanbrough <jareds@....edu>)
RE: RPC DCOM still vulnerable even after applying patches (sloppy seconds <beleguese@...oo.com>)
[bWM#012] Passing script/html-filter with special chars (multibrowser) (<ben.moeckel@...webmasters.net>)
Re: TEXT/PLAIN: ALERT("OUTLOOK EXPRESS") (pre <pre@...kgang.co.uk>)
Re: DCOM RPC exploit (dcom.c) (<sk@...n-associates.net>)
Re: IE6 SP1 - Trivial Crash ("MARLON BORBA" <MBORBA@...3.gov.br>)
Re: Apache 1.3.27 mod_proxy security issue (Michael Shigorin <mike@...n.org.ua>)
Re: Solaris ld.so.1 buffer overflow (Jouko Pynnonen <jouko@....fi>)
Re: DCOM RPC exploit (dcom.c) (Martin Peikert <lists@...og.org>)
RE: Solaris ld.so.1 buffer overflow ("Rukshin, David" <rukshin@...haw.com>)
Re: NetScreen ScreenOS 4.0.3r2 DOS ("seclist_at_wiresec.net" <seclist@...esec.net>)
GameSpy Arcade Arbitrary File Writing Vulnerability (Mike Kristovich <zzz@...eezee.com>)
GameSpy Arcade Arbitrary File Writing Vulnerability ("Mike Kristovich" <zzz@...eezee.com>)

July 31 (27 messages)

Re: man-db[] multiple(4) vulnerabilities. (Colin Watson <cjwatson@...ian.org>)
[SECURITY] [DSA-355-1] New gallery packages fix cross-site scripting (Matt Zimmerman <mdz@...ian.org>)
Re: Solaris ld.so.1 buffer overflow (cdowns <cdowns@...ppingdead.com>)
[SECURITY] [DSA-356-1] New xtokkaetama packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
MDKSA-2003:079 - Updated kdelibs packages fix konqueror authentication leak (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Vulnerability analysis site ("Kenneth R. van Wyk" <Ken@...W.com>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Patrick Haruksteiner <haruk@....at>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Doug White <dwhite@...bysoft.com>)
[RHSA-2003:245-01] Updated wu-ftpd packages fix remote vulnerability. (bugzilla@...hat.com)
wu-ftpd fb_realpath() off-by-one bug (Janusz Niewiadomski <funkysh@...c.pl>)
RE: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Rizwan Jiwan <Rizwan.Jiwan@...GSTON.Hummingbird.com>)
SuSE Security Announcement: wuftpd (SuSE-SA:2003:032) (Roman Drahtmueller <draht@...e.de>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Alaric B Snell <alaric@...ric-snell.com>)
MDKSA-2003:080 - Updated wu-ftpd packages fix remote root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
ePolicy Orchestrator multiple vulnerabilities ("@stake Advisories" <advisories@...take.com>)
RE: wu-ftpd fb_realpath() off-by-one bug (mteshome <mteshome@....com>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (mns <mns@...lab.com>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (MightyE <trash@...htye.org>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) ("Gavin Hanover" <ghanover@...ntipress.com>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (David Riley <oscar@...-rileys.net>)
[bWM#015] SQL-Injection @ Woltlab Burning Board + MOD Guthabenhack 1.3 (<ben.moeckel@...webmasters.net>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Barry Fitzgerald <bkfsec@....lonestar.org>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Brian Eckman <eckman@....edu>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (MightyE <trash@...htye.org>)
NetScreen Security Advisory 57739 (NetScreen Security Response Team <security-alert@...screen.com>)
RE: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) ("CHRIS GRABENSTEIN" <LFGRABC@...VCCS.EDU>)
Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) ("Fred Noltie" <noltie@...mail.net>)

489 messages

Powered by blists - more mailing lists