bugtraq mailing list - 2003/08

Messages by day:

August 1 (22 messages)

• CERT Advisory CA-2003-19 Exploitation of Vulnerabilities in Microsoft RPC Interface (fwd) (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
• Re: Insufficient input checking on web site allows dangerous HTML TAGS (Michal Zalewski <lcamtuf@...ttot.org>)
• RE: Guideliens for Security Vuln reporting and response process ("Jason Coombs" <jasonc@...ence.org>)
• RAV ActiveX Buffer overflow in ravupdt.dll file ("Tri Huynh" <trihuynh@...up.com>)
• RAV ActiveX Buffer overflow in ravupdt.dll file ("Tri Huynh" <trihuynh@...up.com>)
• Novell GroupWise 6.5 Clear Text Vulnerability ("Adam Gray" <agray@...acoast.com>)
• Most Important Vulnerabilities - July 2003 ("Sintelli Support" <support@...telli.com>)
• Most Important Vulnerabilities - July 2003 ("Sintraq" <sintraq@...telli.com>)
• Novell GroupWise 6.5 Clear Text Vulnerability ("Adam Gray" <agray@...acoast.com>)
• Novell GroupWise 6.5 Clear Text Vulnerability ("Adam Gray" <agray@...acoast.com>)
• SRT2003-08-01-0126 - cdrtools-2.x local root exploit (KF <dotslash@...soft.com>)
• [Advisory] IISShield V1.0.2 ("rawdata" <rawdata@...cabo.pt>)
• [SECURITY] [DSA-359-1] New atari800 packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
• [SECURITY] [DSA-360-1] New xfstt packages fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• [CLA-2003:715] Conectiva Security Announcement - wu-ftpd (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Randy Kaelber <randall@...itz.net>)
• Re: Novell GroupWise 6.5 Clear Text Vulnerability ("Ryan Nelson" <ryann@...lage.gurnee.il.us>)
• [SECURITY] [DSA-358-1] New kernel source and i386, alpha kernel images fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• phpbuilder.com unrestricted page! ("npguy" <npguy@...net.com>)
• NOVL-2003-10085583 GroupWise (Wireless) WebAccess 6_5 Log Info Leak ("Ed Reed" <ereed@...ell.com>)
• [Advisory] IISShield V1.0.2 (RawData <RawData@...cabo.pt>)
• Another way to crash IE (Vijay Jagdale <jagdalev@...mail.com>)

• SRT2003-08-01-0126 - cdrtools local root exploit (KF <dotslash@...soft.com>)
• [SECURITY] Netfilter Security Advisory: Conntrack list_del() DoS (Netfilter Core Team <coreteam@...filter.org>)
• [SECURITY] Netfilter Security Advisory: NAT Remote DOS (SACK mangle) (Netfilter Core Team <coreteam@...filter.org>)
• [SEC-LABS] Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus \'2002 (probably all versions) Device Driver (yup@...n.pl)
• [slackware-security] KDE packages updated (SSA:2003-213-01) (Slackware Security Team <security@...ckware.com>)
• Re: Another Mac OS X ScreenSaver Security Issue (after Security Update 2003-07-14) (Mark Tinberg <mtinberg@...urepipe.com>)

• [SECURITY] [DSA-362-1] New mindi packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
• Re: VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems) vulnerability (VMware <vmware-security-alert@...are.com>)
• Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning (Michal Zalewski <lcamtuf@...ttot.org>)

• REGO SECURITY : DoS in Linux ("Rego Security" <regosec@...uctive.com>)
• (no subject) ("Rego Security" <regosec@...uctive.com>)
• Re: (no subject) (KF <dotslash@...soft.com>)
• [RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla@...hat.com)
• [RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla@...hat.com)
• [RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla@...hat.com)
• MDKSA-2003:081 - Updated postfix packages fix remote DoS (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• OpenPKG Security Engineering now covering 1.2 and 1.3 only (OpenPKG <openpkg@...npkg.org>)
• FreeBSD Security Advisory FreeBSD-SA-03:08.realpath (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• [SECURITY] [DSA-363-1] New postfix packages fix remote denial of service, bounce scanning (Matt Zimmerman <mdz@...ian.org>)
• xtokkaetama[v1.0b+]: (missed) buffer overflow exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
• MDKSA-2003:082 - Updated php packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• leak of information in counterpane/Bruce Schneier's (now open source) Password Safe program (vali@...me.com)
• Re: wu-ftpd fb_realpath() off-by-one bug (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• SuSE Security Announcement: postfix (SuSE-SA:2003:033) (krahmer@...e.de (Sebastian Krahmer))
• wu-ftpd-2.6.2 off-by-one remote exploit. ("dong-h0un U" <xploit@...kermail.com>)
• [SECURITY] [DSA-361-1] New kdelibs packages fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Re: Solaris ld.so.1 buffer overflow ("Crist J. Clark" <cristjc@...cast.net>)
• Invision Board spoof and defacement (Daniel Boland <DCBoland@...eyonder.co.uk>)
• Re: Another way to crash IE ("Matus \"fantomas\" Uhlar" <uhlar@...tomas.sk>)
• ZH2003-5SA (security advisory): Windows beta webserver for pocket pc: full remote access. (G00db0y <G00db0y@...e-h.org>)
• Unix command line RPC/DCOM Vulnerability Scanner ("the farpointer" <farp@...ealbox.com>)
• Macromedia DW MX PHP Authentication Suit Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <novappc@...appc.com>)
• Re: Another way to crash IE (Thijs Dalhuijsen <thijs@...urd.com>)
• NetBSD Security Advisory 2003-011: off-by-one error in realpath(3) (NetBSD Security Officer <security-officer@...BSD.org>)
• [ESA-20030804-019] 'postfix' Remote denial-of-service. (EnGarde Secure Linux <security@...rdiandigital.com>)
• NetBSD Security Advisory 2003-010: remote panic in OSI networking code (NetBSD Security Officer <security-officer@...bsd.org>)
• Off-by-one Buffer Overflow Vulnerability in BSD libc realpath(3) (Dave Ahmad <da@...urityfocus.com>)
• [CLA-2003:716] Conectiva Security Announcement - wget (Conectiva Updates <secure@...ectiva.com.br>)
• [CLA-2003:717] Conectiva Security Announcement - postfix (Conectiva Updates <secure@...ectiva.com.br>)

• [Updated]: Most Important Vulnerabilities - July 2003 ("Sintraq" <sintraq@...telli.com>)
• RE: (no subject) ("Harshul Nayak \(ealcatraz\)" <harshul@...catraz.com>)
• Local Vulnerability in IBM DB2 7.1 db2job binary (pask@...c.upv.es)
• Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries (pask@...c.upv.es)
• ZH2003-14SA (security advisory): aspBoard XSS Vulnerability (G00db0y <G00db0y@...e-h.org>)
• Re: Invision Board spoof and defacement (<matt@...orums.com>)
• Re: question about oracle advisory ("McCartney, Daymon (US - Deerfield)" <dmccartney@...oitte.com>)
• [SECURITY] [DSA-358-2] New kernel packages fix potential "oops" (Matt Zimmerman <mdz@...ian.org>)
• Re: question about oracle advisory (Jeff Smith <jsmith@...due.edu>)

• Notepad popups in Internet Explorer and Outlook ("Richard M. Smith" <rms@...puterbytesman.com>)
• [sec-labs] Zone Alarm Device Driver vulnerability (sec-labs team <noreply@...-labs.hack.pl>)
• Halflife exploit that provides a shell in fbsd (Spoilt JeSuS <spoilt_jesus@...gr.org>)
• RE: Notepad popups in Internet Explorer and Outlook ("Thor Larholm" <thor@...x.com>)
• [ESA-20030806-020] 'stunnel' signal handler race denial-of-service. (EnGarde Secure Linux <security@...rdiandigital.com>)
• [SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
• [ESA-20030806-020] 'stunnel' signal handler race denial-of-service. (EnGarde Secure Linux <security@...rdiandigital.com>)
• [SECURITY] [DSA-365-1] New phpgroupware package fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Postfix: old bugs keep coming back (wietse@...cupine.org (Wietse Venema))
• man-db[v2.4.1-]: open_cat_stream() privileged call exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
• [OpenPKG-SA-2003.035] OpenPKG Security Advisory (openssh) (OpenPKG <openpkg@...npkg.org>)
• [OpenPKG-SA-2003.036] OpenPKG Security Advisory (perl-www) (OpenPKG <openpkg@...npkg.org>)
• Re: question about oracle advisory ("David Litchfield" <david@...software.com>)
• DoS Vulnerabilities in Crob FTP Server 2.60.1 (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
• mod_dosevasive v1.6: Apache DoS Evasive Maneuvers Module ("Jonathan A. Zdziarski" <jonathan@...workdweebs.com>)
• Computer Co-location Facility Vulnerabilities ("Jonathan A. Zdziarski" <jonathan@...workdweebs.com>)
• D-Link 704p Broadband Router Remote / Local DoS (chris <chris@...secure.net>)

• [RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla@...hat.com)
• defeating Lotus Sametime "encryption" ("Mycelium" <mycelium@...hmail.com>)
• Re: [sec-labs] Zone Alarm Device Driver vulnerability (Corey Bridges <cbridges@...elabs.com>)
• Immunix Secured OS 7+ wu-ftpd update (Immunix Security Team <security@...unix.com>)
• TSLSA-2003-0030 - stunnel (Trustix Secure Linux Advisor <tsl@...stix.com>)
• TSLSA-2003-0029 - postfix (Trustix Secure Linux Advisor <tsl@...stix.com>)
• Cisco CSS 11000 Series DoS ("S21SEC" <vul-serv@...seccom.s21sec.com>)
• VMware Workstation 4.0.1 (for Linux systems) vulnerability ("VMware Security Alert" <vmware-security-alert@...are.com>)
• Sustworks Unauthorized Network Monitoring and tcpflow format string attack ("@stake Advisories" <advisories@...take.com>)

• Generic security problems in online games and applications (mmo@...ote-exploit.org)
• [RHSA-2003:255-01] up2date improperly checks GPG signature of packages (bugzilla@...hat.com)
• [RHSA-2003:255-01] up2date improperly checks GPG signature of packages (bugzilla@...hat.com)
• ZH2003-16SA (security advisory): C-Cart Shopping Cart Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• Directory Traversal in Sun iPlanet Administration Server 5.1 ("Brewis, Mark" <mark.brewis@....com>)
• [SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• ZH2003-15SA (security advisory): IdealBB XSS Vulnerability (G00db0y <G00db0y@...e-h.org>)
• Xprobe2 0.2rc1 release, white paper release, and Blackhat presentation availability (Ofir Arkin <ofir@...-security.com>)
• [SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1 (Matt Zimmerman <mdz@...ian.org>)
• [RHSA-2003:255-01] up2date improperly checks GPG signature of packages (bugzilla@...hat.com)
• Re: DoS Vulnerabilities in Crob FTP Server 2.60.1 (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
• Re: man-db[v2.4.1-]: open_cat_stream() privileged call exploit. (Colin Watson <cjwatson@...ian.org>)
• [SECURITY] [DSA-367-1] New xtokkaetama packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)

• bug in Invision Power Board (Boy Bear <eyal067@...la.co.il>)
• MDaemon 5.0.5 authentication vulnerability ("Buckaroo Banzai" <buckaner0@...ra.es>)
• [SECURITY] [DSA-370-1] New pam-pgsql packages fix format string vulnerability (Matt Zimmerman <mdz@...ian.org>)
• ZH2003-17SA (security advisory): geeeekShop Shopping Cart Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• [SECURITY] [DSA-369-1] New zblast packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• Remote denial of service vulnerability in Meteor FTP Version 1.5 (Zee <zerash@...cted.org>)
• Re: Cisco CSS 11000 Series DoS (Mike Caudill <mcaudill@...co.com>)
• Cisco IOS HTTP remote exploit (FX <fx@...noelit.de>)

• [RHSA-2003:241-01] Updated ddskk packages fix temporary file vulnerability (bugzilla@...hat.com)
• [RHSA-2003:235-01] Updated KDE packages fix security issue (bugzilla@...hat.com)
• [RHSA-2003:235-01] Updated KDE packages fix security issue (bugzilla@...hat.com)
• LotusSametime 3.0 == vulnerable. Lotus lied ("Mycelium" <mycelium@...hmail.com>)
• Re: bug in Invision Power Board[patch] (silent needle <silentneedle@...mail.com>)
• Lotus Sametime 3.0 == vulnerable. Lotus lied. ("Mycelium" <mycelium@...hmail.com>)
• Webdeskpro role modify vulnerability (CK <sangsang@...ker4u.org>)
• phpWebSite SQL Injection & DoS & XSS Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <novappc@...appc.com>)
• FreeBSD Security Advisory FreeBSD-SA-03:09.signal (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• ZH2003-18SA (security advisory): News Wizard Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak (G00db0y <G00db0y@...e-h.org>)
• Re: bug in Invision Power Board (Boy Bear <eyal067@...la.co.il>)
• PostNuke Downloads & Web_Links ttitle variable XSS ("Lorenzo Hernandez Garcia-Hierro" <novappc@...appc.com>)
• ZH2003-19SA (security advisory): BBPro Store Builder Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• [RHSA-2003:235-01] Updated KDE packages fix security issue (bugzilla@...hat.com)
• FreeBSD Security Advisory FreeBSD-SA-03:10.ibcs2 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• ZH2003-21SA (security advisory): DcForum+ XSS Vulnerability (G00db0y <G00db0y@...e-h.org>)
• Chatserver - XSS ( push ) ("morning_wood" <se_cur_ity@...mail.com>)
• [SECURITY] [DSA-361-2] New kdelibs-crypto packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Re: Macromedia DW MX PHP Authentication Suit Vulnerabilities (Jennifer Taylor <jetaylor@...romedia.com>)
• Buffer Overflow in NetSurf 3.02 ("nimber" <nimber@...l.ru>)
• Subnet Bandwidth Management (SBM) Protocol subject to attack via the Resource Reservation Protocol (RSVP) (<root@...workpenetration.com>)
• PST Linux Advisor--------Dsh-0.24.0 in debian has a home env Buffer Overflow Vulnerability (yan feng <jsk@...nt0m.net>)
• RE: bug in Invision Power Board ("Christopher Hummert" <hummertc@...hri.net>)
• ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• PostNuke Downloads & Web_Links ttitle variable XSS ("Lorenzo Hernandez Garcia-Hierro" <novappc@...appc.com>)
• New Windows DCOM Worm - msblast.exe (fwd) (Dave Ahmad <da@...urityfocus.com>)
• msblast.exe (David Vincent <david.vincent@...htyoaks.com>)
• DCOM worm analysis report: W32.Blaster.Worm (Dave Ahmad <da@...urityfocus.com>)

• [CLA-2003:720] Conectiva Security Announcement - lynx (Conectiva Updates <secure@...ectiva.com.br>)
• RE: [Full-Disclosure] msblast.exe (Robert Ersoni <rober@...eotron.ca>)
• KaHT II - Massive RPC Dcom exploit.. ("at4r ins4n3" <at4r@...mail.com>)
• msblast.exe available ("Chris McNab" <chris.mcnab@...stmatta.com>)
• Re: msblast.exe (Scott Fendley <scottf@...k.edu>)
• RE: what to do ("Arian J. Evans" <arian.evans@...foot.com>)
• RE: [Full-Disclosure]Ooops-->was-->what to do ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• Windows Dcom Worm planned DDoS ("Andrew Thomas" <andrewt@....co.za>)
• RE: Windows Dcom Worm planned DDoS ("Chris Eagle" <cseagle@...shift.com>)
• Re: Windows Dcom Worm planned DDoS (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• RE: Windows Dcom Worm planned DDoS ("Andrew Thomas" <andrewt@....co.za>)
• SuSE Security Announcement: kernel (SuSE-SA:2003:034) (krahmer@...e.de (Sebastian Krahmer))
• RE: Microsoft RPC DCOM exploit descriptions ("Troy Murray" <murrayt5@....edu>)
• CERT Advisory CA-2003-20 W32/Blaster worm (CERT Advisory <cert-advisory@...t.org>)
• [SECURITY] [DSA-371-1] New perl packages fix cross-site scripting (Matt Zimmerman <mdz@...ian.org>)
• Netris client Buffer Overflow Vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
• ZH2003-23SA (security advisory): HostAdmin Path Disclosure (G00db0y <G00db0y@...e-h.org>)
• Re: Windows Dcom Worm planned DDoS (Sebastian Niehaus <killedbythoughts@...dcrime.net>)
• CERT Advisory CA-2003-20 W32/Blaster worm (fwd) (Muhammad Faisal Rauf Danka <mfrd@...itudex.com>)
• 3 Comprehensive links in combat with MSBlaster Worm ("Geoff Shively" <gshively@...x.com>)

• Re: Windows Dcom Worm planned DDoS (martin f krafft <madduck@...duck.net>)
• RE: DCOM worm analysis report: W32.Blaster.Worm (Andrew Thomas <andrew@...erator.co.za>)
• updated partial analysis of msblast.exe ("dennis" <dennis@...ktrace.de>)
• Re: Windows Dcom Worm planned DDoS (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: DCOM worm analysis report: W32.Blaster.Worm (Valdis.Kletnieks@...edu)
• RE: Windows Dcom Worm planned DDoS ("Wcc" <wcc@...hmonkeys.org>)
• Windows Dcom Worm Killer (w g <xillwillx@...oo.com>)
• Re: Windows Dcom Worm Killer (Joey <joey2cool@...oo.com>)
• Re: Re: Windows Dcom Worm planned DDoS (Sebastian Niehaus <killedbythoughts@...dcrime.net>)
• DameWare Mini-RC Shatter (ash@...inemenace.org)
• Re: Windows Dcom Worm Killer (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: DameWare Mini-RC Shatter ("morning_wood" <se_cur_ity@...mail.com>)
• Re: what to do ("gregh" <chows@...mail.com.au>)
• Re: DameWare Mini-RC Shatter (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability (G00db0y <G00db0y@...e-h.org>)
• Cisco Security Advisory: CiscoWorks Application Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Portcullis Security Advisory: CiscoWorks 2000 Privilege Escalatio n Vulnerabilities (Omicron@...tcullis-security.com)
• Denial of Service Vulnerability in NFS on IRIX (SGI Security Coordinator <agent99@....com>)
• Microsoft MCWNDX.OCX ActiveX buffer overflow ("Tri Huynh" <trihuynh@...up.com>)
• rpc sdbot (Daniel Otis-Vigil <dvigil@...soft.com>)
• Buffer overflow prevention ("Eygene A. Ryabinkin" <rea@....mbslab.kiae.ru>)
• re: rpc sdbot (Daniel Otis-Vigil <dvigil@...soft.com>)
• Re: Buffer overflow prevention (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: Microsoft MCWNDX.OCX ActiveX buffer overflow (xenophi1e <oliver.lavery@...patico.ca>)
• Re: Microsoft MCWNDX.OCX ActiveX buffer overflow ("Thor Larholm" <thor@...x.com>)
• Re: Buffer overflow prevention (Michal Zalewski <lcamtuf@...edump.cx>)
• BBCode XSS in XOOPS CMS ("Frog Man" <leseulfrog@...mail.com>)
• Phrack #61 is OUT! (Phrack Staff <dont-reply@...soc.org>)
• Re: Buffer overflow prevention ("Jonathan A. Zdziarski" <jonathan@...workdweebs.com>)
• Apology re: Buffer Overflow Prevention (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: 3 Comprehensive links in combat with MSBlaster Worm (Jean-Luc Cavey <Jean-Luc@...ey.org>)
• RE: Microsoft MCWNDX.OCX ActiveX buffer overflow ("Oliver Lavery" <oliver.lavery@...patico.ca>)
• RE: Microsoft MCWNDX.OCX ActiveX buffer overflow ("Drew Copley" <dcopley@...e.com>)
• Re: Buffer overflow prevention (weigelt@...ux.de)
• netris[v0.5]: client/server remote buffer overflow exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
• Re: Buffer overflow prevention ("Jingmin (Jimmy) Zhou" <jimmy@....dhs.org>)
• Re: Buffer overflow prevention (Craig Pratt <craig@...ong-box.net>)
• Re: Buffer overflow prevention (Patrick Dolan <dolan@...admin.unt.edu>)
• RE: Microsoft MCWNDX.OCX ActiveX buffer overflow ("Jason Coombs" <jasonc@...ence.org>)

• PCL-0001: Remote Vulnerability in HORDE MTA < 2.2.4 (Vincenzo 'puccio' Ciaglia <puccio@...ciolab.org>)
• Re: Buffer overflow prevention (Michal Zalewski <lcamtuf@...edump.cx>)
• CERT Advisory CA-2003-21 GNU Project FTP Server Compromise (CERT Advisory <cert-advisory@...t.org>)
• Virginity Security Advisory 2003-001 : Hola CMS - Admin Password Disclosure by Include vulnerability (Virginity Security <advisory@...fiweb.de>)
• Re: Microsoft MCWNDX.OCX ActiveX buffer overflow (jelmer <jkuperus@...net.nl>)
• Microsoft urging users to buy Harware Firewalls (Joey <joey2cool@...oo.com>)
• RE: Microsoft MCWNDX.OCX ActiveX buffer overflow ("Drew Copley" <dcopley@...e.com>)
• Re: Windows Dcom Worm Killer and source code (w g <xillwillx@...oo.com>)
• Re: Microsoft urging users to buy Harware Firewalls (Nathan Seven <scosol@...oo.com>)
• Re: Microsoft MCIWNDX.OCX ActiveX buffer overflow ("Tri Huynh" <trihuynh@...up.com>)
• Analysis/decompilation of main() of the msblast worm ("Dennis" <Dennis@...ktrace.de>)
• Ecartis 1.0 multiple vulnerabilities (Timo Sirainen <tss@....fi>)
• IRM 006: The configuration of Microsoft URLScan can be enumerated when implemented in conjunction with RSA SecurID ("IRM Advisories" <advisories@...plc.com>)
• Re: Buffer overflow prevention (Mariusz Woloszyn <emsi@...rtners.pl>)
• PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer (Crispin Cowan <crispin@...unix.com>)
• RE: Buffer overflow prevention (Lance James <lance.james@...bone.com>)
• Re: BBCode XSS in XOOPS CMS ("kain" <masterkain@...t.it>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: Buffer overflow prevention (Andreas Beck <becka@...-duesseldorf.de>)
• Re: Buffer overflow prevention ("Patrick Dolan" <dolan@...admin.unt.edu>)
• Recoding msblast.exe in C from disassembly (Rolf Rolles <rolf.rolles@....edu>)
• Re: Buffer overflow prevention (Stephen Clowater <steve@...vesworld.hopto.org>)
• Re: Analysis/decompilation of main() of the msblast worm (Tim van Erven <tve@...mig.net>)
• Re: Buffer overflow prevention (Jedi/Sector One <j@...eftpd.org>)
• Re: Analysis/decompilation of main() of the msblast worm (Helmut Hauser <helmut.hauser@...raplan.de>)
• Re: Buffer overflow prevention (Mariusz Woloszyn <emsi@...rtners.pl>)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• AW: Analysis/decompilation of main() of the msblast worm ("Dennis" <Dennis@...ktrace.de>)
• Re: Buffer overflow prevention (Timo Sirainen <tss@....fi>)
• Re: Buffer overflow prevention (Jedi/Sector One <j@...eftpd.org>)
• Re: Buffer overflow prevention (Thomas Sjögren <thomas@...thernsecurity.net>)
• RE: Buffer overflow prevention ("Brian Glover" <brian@...turionservice.com>)
• Re: Buffer overflow prevention (Patrick Dolan <dolan@...admin.unt.edu>)
• [ paper + project release ] kless - connecting to void and getting out alive (setuid <s3tuid@...lating.us>)
• Re: Buffer overflow prevention ("Matt D. Harris" <vesper@...raved.org>)
• Re: Buffer overflow prevention (Jedi/Sector One <j@...eftpd.org>)
• Re: Buffer overflow prevention (Miod Vallat <miod@...ine.fr>)
• Re: MSBlast complete recode / analysis (H D Moore <sflist@...italoffense.net>)
• Re: Buffer overflow prevention (Sam Baskinger <sam@...fedge.com>)
• Re: Buffer overflow prevention (sauron <unixlabs@...s.fr>)
• Re: PST Linux Advisor--------Dsh-0.24.0 in debian has a home env Buffer Overflow Vulnerability (Vade 79 <v9@...ehalo.deadpig.org>)
• Re: Buffer overflow prevention (noir <noir@....linux.org.tr>)

• Checkpoint/Restart Vulnerability on IRIX (SGI Security Coordinator <agent99@....com>)
• unix entropy source can be used for keystroke timing attacks (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: Re: Buffer overflow prevention (KF <dotslash@...soft.com>)
• Re: Microsoft urging users to buy Harware Firewalls (Sebastian Niehaus <killedbythoughts@...dcrime.net>)
• RE: unix entropy source can be used for keystroke timing attacks ("Schmehl, Paul L" <pauls@...allas.edu>)
• [RHSA-2003:199-02] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
• [RHSA-2003:199-02] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer (Florian Weimer <fw@...eb.enyo.de>)
• Linux-sec-uk mailing list (James Davis <jamesd@....net>)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• [RHSA-2003:199-02] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
• Fusen News 3.3 Account Add Vulnerability (DarkKnight <mbuzz04@...oo.com>)
• Re: Buffer overflow prevention (Shaun Clowes <shaun@...urereality.com.au>)
• Best Buy Employee Toolkit Vulnerability (<cmthemc@...oo.com>)
• Poster.Version:Two Setup Vulnerability (DarkKnight <mbuzz04@...oo.com>)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• Need help. Proof of concept 100% security. (Balwinder Singh <balwinder@....net>)
• Re: Buffer overflow prevention ("Matt D. Harris" <vesper@...raved.org>)
• Re: wu-ftpd fb_realpath() off-by-one bug (Jane Smith <incidents2000@...oo.com>)
• RE: Buffer overflow prevention ("Avery Buffington" <avery.buffington@...n.com>)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• Re: PCL-0001: Remote Vulnerability in HORDE MTA < 2.2.4 ("Ricardo J. Ulisses Filho" <ricardoj@...link.com.br>)
• Re: Buffer overflow prevention (weigelt@...ux.de)
• CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' ("Geoff Shively" <gshively@...x.com>)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: Buffer overflow prevention (Massimo Bernaschi <massimo@....rm.cnr.it>)
• Re: Buffer overflow prevention (Solar Designer <solar@...nwall.com>)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer (Crispin Cowan <crispin@...unix.com>)
• Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' ("Bernie, CTA" <cta@...in.net>)
• Re: Need help. Proof of concept 100% security. (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: Buffer overflow prevention (Tom 7 <twm@...rew.cmu.edu>)
• Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' ("Geoff Shively" <gshively@...x.com>)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer (Crispin Cowan <crispin@...unix.com>)
• Re: Need help. Proof of concept 100% security. (Clifton Royston <cliftonr@...a.net>)
• Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' (Yannick Van Osselaer <yannick.vanosselaer@...be>)
• Re: Buffer overflow prevention (stealth <stealth@...fault.net>)
• Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' (Virtual Master <vmaster@....ath.cx>)
• Security-French mailing list (Gilles Fabieni <contrib@...tik.com>)
• AntiGen Email scanning software allowes file through filter.... (Larry Pingree <geekguy@...2.net>)

• RE: Buffer overflow prevention (noir <noir@....linux.org.tr>)
• Re: Need help. Proof of concept 100% security. (Crispin Cowan <crispin@...unix.com>)
• CHAT SERVER - XSS push ("morning_wood" <se_cur_ity@...mail.com>)
• Eudora Worldmail Server 2.0 -XSS Injection ("morning_wood" <se_cur_ity@...mail.com>)
• OpenServer 5.0.x : Samba security update available avaliable for download. (security@....com)
• UnixWare 7.1.x Open UNIX 8.0.0: exploitable buffer overrun in metamail (security@....com)
• Re: OpenServer 5.0.x : Samba security update available avaliable for download. (Valdis.Kletnieks@...edu)

• Re: Buffer overflow prevention (pageexec@...email.hu)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address (pageexec@...email.hu)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm' (Dragos Ruiu <dr@....net>)
• startling new discovery in the msblast analysis ("Rolles, Rolf" <rolf.rolles@....edu>)
• Re: Need help. Proof of concept 100% security. (Alaric B Snell <alaric@...ric-snell.com>)
• [Full-Disclosure] [SECURITY] [DSA-372-1] New netris packages fix buffer overflow (debian-security-announce@...ts.debian.org)
• Re: Buffer overflow prevention (Mark Tinberg <mtinberg@...urepipe.com>)
• Dropbear SSH Server <= 0.34 (Joel Eriksson <je@...nux.com>)
• [Full-Disclosure] [SECURITY] [DSA-373-1] New autorespond packages fix buffer overflow (debian-security-announce@...ts.debian.org)
• Security hole in MatrikzGB (Stephan S. <mastamorphixx@....de>)
• Re: Need help. Proof of concept 100% security. (Balwinder Singh <balwinder@....net>)
• Re: Buffer overflow prevention (pageexec@...email.hu)
• RE: Need help. Proof of concept 100% security. ("Joyce, MP (Matthew) " <M.P.Joyce@...ac.uk>)
• Re: Buffer overflow prevention (Shaun Clowes <shaun@...urereality.com.au>)
• Re: Buffer overflow prevention (pageexec@...email.hu)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• OpenSLP initscript symlink vulnerability ("Ademar de Souza Reis Jr." <ademar@...ectiva.com.br>)
• msblast.d and a review of defensive worms ("David J. Meltzer" <djm@...rusec.com>)
• FW: UMN Gopher 3.0.6 released (John Goerzen <jgoerzen=WrTMxSeDnuhg9hUCZPvPmw@...lic.gmane.org>)
• Re: Need help. Proof of concept 100% security. (Evan Teran <emt3734@...vax.isc.rit.edu>)
• Re: Buffer overflow prevention (Mariusz Woloszyn <emsi@...rtners.pl>)
• Re: Need help. Proof of concept 100% security. ("Stefano Zanero" <stefano.zanero@...e.org>)
• Advisory 02/2003: emule/xmule/lmule vulnerabilities (Stefan Esser <s.esser@...atters.de>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: Buffer overflow prevention (Mark Handley <M.Handley@...ucl.ac.uk>)
• [SCSA-020] Multiple vulnerabilities in AttilaPHP (Gregory LEBRAS <gregory.lebras@...urity-corporation.com>)
• Re: Need help. Proof of concept 100% security. (Anil Madhavapeddy <anil@...oil.org>)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• XSS vulnerability in phpBB (Marvin Massih <GroennDemon@....de>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• [Full-Disclosure] [SECURITY] [DSA-364-3] New man-db packages fix segmentation fault (debian-security-announce@...ts.debian.org)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• [SECURITY] [DSA-364-3] New man-db packages fix segmentation fault (Matt Zimmerman <mdz@...ian.org>)

• Re: msblast.d and a review of defensive worms (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: Buffer overflow prevention (noir <noir@....linux.org.tr>)
• A Vonage VOIP 3-way call CID Spoofing Vulnerability (Nathan Wosnack <nathan@...ervivid.com>)
• Re: Buffer overflow prevention (Darren Reed <avalon@...igula.anu.edu.au>)
• [CLA-2003:723] Conectiva Security Announcement - openslp (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• Vhost-3.05rc3 DOS.. (Daniel <deadbeat@....lonestar.org>)
• Re: Buffer overflow prevention (Glynn Clements <glynn.clements@...gin.net>)
• Re: Buffer overflow prevention (pageexec@...email.hu)
• Re: Need help. Proof of concept 100% security. (Kyle Roger Hofmann <krhofman@...ch.edu>)
• Re: Buffer overflow prevention (Peter Busser <peter@...steddebian.org>)
• Re: Need help. Proof of concept 100% security. (xenophi1e <oliver.lavery@...patico.ca>)
• Re: Buffer overflow prevention (Crispin Cowan <crispin@...unix.com>)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address (Crispin Cowan <crispin@...unix.com>)
• Windows Update: A single point of failure for the world's economy? ("Richard M. Smith" <rms@...puterbytesman.com>)
• Re: PointGuard: It's not the Size of the Buffer, it's the Address (pageexec@...email.hu)
• Re: Buffer overflow prevention (cwidmer@...c.ethz.ch)
• Re: Buffer overflow prevention (Anil Madhavapeddy <anil@...oil.org>)
• Re: Buffer overflow prevention (Han Boetes <han@...ncomputer.nl>)
• Re: Buffer overflow prevention (Theo de Raadt <deraadt@....openbsd.org>)
• Re: Buffer overflow prevention (Mark Tinberg <mtinberg@...urepipe.com>)
• Remote Execution of Commands in Omail Webmail 0.98.4 and earlier (Phillip Whelan <pwhelan@...kerchile.net>)
• Re: Buffer overflow prevention (Mariusz Woloszyn <emsi@...rtners.pl>)
• RE: Windows Update: A single point of failure for the world's economy? ("Russ" <Russ.Cooper@...on.ca>)
• [Advisory] SECURITY BUG in BitKeeper (Carl-Daniel Hailfinger <hailfinger-lists@...s.de>)

• MDKSA-2003:073-1 - Updated unzip packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2003:083 - Updated eroaster packages fix temporary file vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MPSB03-05 Patch and Work Around for Dreamweaver MX, DRK, and UltraDev Server Behaviors (Jennifer Taylor <jetaylor@...romedia.com>)
• Administrivia: List sluggish + buffer overflow protection thread. (Dave Ahmad <da@...urityfocus.com>)
• Piolet client vulnerable to a remote DoS (Luca Ercoli <luca.ercoli@...ind.it>)
• Re: Need help. Proof of concept 100% security. (ari <edelkind-bugtraq@...sec.com>)
• Is msblast.d code/binary publicly available? (Joshua Douglas <jdouglas@...erasys.com>)
• SRT2003-08-11-0729 - Linux based antivirus software contains several local overflows (KF <dotslash@...soft.com>)
• RE: [ISN] The sad tale of a security whistleblower ("Jason Coombs" <jasonc@...ence.org>)

• Re: SRT2003-08-11-0729 - Linux based antivirus software contains several local overflows (Knud Erik Højgaard <knud@...dliv.dk>)
• SCADA providers say security not our problem (Michael Scheidell <scheidell@...nap.net>)
• Remote MS03-026 vulnerability detection (Abe <abe@...ec-ss.nl>)
• [SNS Advisory No.67] The Return of the Content-Disposition Vulnerability in IE ("SecureNet Service(SNS) Spiffy Reviews" <snsadv@....co.jp>)
• [SNS Advisory No.68] Internet Explorer Object Type Buffer Overflow in Double-Byte Character Set Environment ("SecureNet Service(SNS) Spiffy Reviews" <snsadv@lac…)
• Re: msblast.d and a review of defensive worms (Nicholas Weaver <nweaver@...berkeley.edu>)
• Popular Net anonymity service back-doored ("Thomas C. Greene " <thomas.greene@...register.co.uk>)
• [m00 SA001]: Buffer overflows in srcpd (Over_G <overg@...l.ru>)
• Intersystems Cache database permissions vuln. BID:8070 (<pixcrowan@...h.ai>)
• EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Marc Maiffret" <marc@...e.com>)
• [RHSA-2003:258-01] GDM allows local user to read any file. (bugzilla@...hat.com)
• AppSecInc Security Alert: Buffer Overflow in UDP broadcasts for Microsoft SQL Server client utilities ("Aaron C. Newman" <aaron@...man-family.com>)
• Re: Popular Net anonymity service back-doored (Florian Weimer <fw@...eb.enyo.de>)
• EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Marc Maiffret" <marc@...e.com>)
• Re: Popular Net anonymity service back-doored ("Thomas C. Greene " <thomas.greene@...register.co.uk>)
• [RHSA-2003:258-01] GDM allows local user to read any file. (bugzilla@...hat.com)
• [RHSA-2003:258-01] GDM allows local user to read any file. (bugzilla@...hat.com)
• Re: A Vonage VOIP 3-way call CID Spoofing Vulnerability (Lucky 225 <Lucky225@...0.COM>)
• Re: Popular Net anonymity service back-doored (Andreas Kuntzagk <andreas.kuntzagk@...-berlin.de>)
• Re: Popular Net anonymity service back-doored (MightyE <trash@...htye.org>)
• Re: Remote Execution of Commands in Omail Webmail 0.98.4 and earlier ("Olivier M." <qmail@...on.8304.ch>)
• Re: Need help. Proof of concept 100% security. (Balwinder Singh <balwinder@...stedmachines.com>)
• Announcement: "A Treatise on Informational Warfare" ("Eric Knight" <eric@...rdsoft.com>)
• REVISED: MPSB03-05 Patch and Work Around for Dreamweaver MX, DRK, and UltraDev Server Behaviors (Jennifer Taylor <jetaylor@...romedia.com>)
• RE: Popular Net anonymity service back-doored ("Drew Copley" <dcopley@...e.com>)
• Re: EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("http-equiv@...ite.com" <1@...ware.com>)

• Re: SCADA providers say security not our problem ("Bernie, CTA" <cta@...in.net>)
• Buffer overflow in Avant Browser 8.02 ("nimber" <nimber@...l.ru>)
• RE: Popular Net anonymity service back-doored ("Drew Copley" <dcopley@...e.com>)
• Re: Popular Net anonymity service back-doored (Alex Russell <alex@...Windows.org>)
• Re: Popular Net anonymity service back-doored (Richard Stevens <mail@...hardstevens.de>)
• Re: Popular Net anonymity service back-doored (Aron Nimzovitch <crypto@...uddancer.com>)
• RE: Popular Net anonymity service back-doored ("David Schwartz" <davids@...master.com>)
• Re: Popular Net anonymity service back-doored (Barney Wolff <barney@...abus.com>)
• Final thoughts on 'Popular Net anonymity service back-doored' ("Thomas C. Greene " <thomas.greene@...register.co.uk>)
• RE: Popular Net anonymity service back-doored ("David Schwartz" <davids@...master.com>)
• Re: RE: Popular Net anonymity service back-doored (felix.roennebeck@...ssvip.com)
• Re: Popular Net anonymity service back-doored ("Alex Russell" <alex@...Windows.org>)
• Re: Popular Net anonymity service back-doored (Michael Schlenker <schlenk@...-oldenburg.de>)
• Re: Popular Net anonymity service back-doored (nordi <nordi@...com.de>)
• Heterogeneity as a form of obscurity, and its usefulness (Bob Rogers <rogers-bt2@...jr.dyndns.org>)
• Re: Heterogeneity as a form of obscurity, and its usefulness (Crispin Cowan <crispin@...unix.com>)
• Re: Heterogeneity as a form of obscurity, and its usefulness (Nicholas Weaver <nweaver@...berkeley.edu>)
• vpop3d Denial Of Service. (Daniel <deadbeat@....lonestar.org>)
• Re: EEYE: Internet Explorer Object Data Remote Execution Vulnerability (Nerijus Krukauskas <nk99@...fi.lt>)
• Re: Popular Net anonymity service back-doored (nordi <nordi@...com.de>)
• RE: EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Menashe Eliezer" <menashe@...jan.com>)
• Re: Popular Net anonymity service back-doored (nordi <nordi@...com.de>)

• Re: Popular Net anonymity service back-doored (fwd) (Meyer Wolfsheim <wolf@...ori.net>)
• SRT2003-08-22-104 - Wireless Intrusion dection remote root compromise (KF <dotslash@...soft.com>)

• Re: Popular Net anonymity service back-doored (Bernhard Kuemel <darsie@....at>)

• Miatrade Guestbook - Persistant XSS ("morning_wood" <se_cur_ity@...mail.com>)
• Re: Popular Net anonymity service back-doored ("Alex Russell" <alex@...Windows.org>)
• GLSA: vmware-workstation (200308-03) (aliz@...too.org (Daniel Ahlberg))
• [RHSA-2003:213-01] Updated iptables packages are available (bugzilla@...hat.com)
• Sendmail DNS Map Vulnerability on IRIX (SGI Security Coordinator <agent99@....com>)

• FW: SCADA providers say security not our problem ("Stan Hoffman" <shoffman@...puter.org>)
• [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla@...hat.com)
• [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla@...hat.com)
• Re: [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (Michael Berganski <bergansk@...data.gsfc.nasa.gov>)
• [PHP] PY-Membres 4.2 : Admin Access, SQL Injection ("Frog Man" <leseulfrog@...mail.com>)
• OpenLinux: The docview package allows anonymous remote users to view any publicly readable files on a OpenLinux 3.1.1 system. (security@....com)
• UnixWare 7.1.3 : The docview package allows anonymous remote users to view any publicly readable files on a UnixWare system. (security@....com)
• OpenServer 5.0.7 : The docview package allows anonymous remote users to view any publicly readable files on a OpenServer system. (security@....com)
• SCO Linux 4.0 : The docview package allows anonymous remote users to view any publicly readable files on a SCO Linux 4.0 system. (security@....com)
• [PHP] AttilaPHP 3.0 : User/Admin Access ("Frog Man" <leseulfrog@...mail.com>)

• CfP DIMVA 2004 ("Michael Meier" <mm@...ormatik.TU-Cottbus.DE>)
• [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla@...hat.com)
• [SECURITY] [DSA-344-2] New unzip packages fix directory traversal vulnerability (Matt Zimmerman <mdz@...ian.org>)
• Re: EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Fabio Pietrosanti (naif)" <fabio@...trosanti.it>)
• SNMPc v5 and v6 remote vulnerability ("Alexander V. Nickolenko" <sawny@...timedia.ru>)
• newsPHP file inclusion & bad login validation (Dariusz 'Officerrr' Kolasinski <officerrr@...igon.com.pl>)
• MDKSA-2003:086 - Updated sendmail packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [Full-Disclosure] [SECURITY] [DSA-344-2] New unzip packages fix directory traversal vulnerability (debian-security-announce@...ts.debian.org)
• OSSTMM 2.1 Released ("Robert E. Lee" <robert@...com.org>)
• [slackware-security] GDM security update (SSA:2003-236-01) (Slackware Security Team <security@...ckware.com>)
• Re: Heterogeneity as a form of obscurity, and its usefulness (Crispin Cowan <crispin@...unix.com>)
• suidperl path disclosure (psz@...hs.usyd.edu.au (Paul Szabo))

• RealOne Player Allows Cross Zone and Domain Access (DigitalPranksters <secteam@...italpranksters.com>)
• JAP unbackdoored (Kristian Koehntopp <kris@...hntopp.de>)
• [RHSA-2003:265-01] Updated Sendmail packages fix vulnerability. (bugzilla@...hat.com)
• [RHSA-2003:265-01] Updated Sendmail packages fix vulnerability. (bugzilla@...hat.com)
• AV "feature" does more DDoS than Sobig (Fabio Gomes de Souza <bugtraq@....com.br>)
• RE: AV "feature" does more DDoS than Sobig ("Rainer Gerhards" <rgerhards@...adiscon.com>)
• Re: AV "feature" does more DDoS than Sobig (William Warren <hescominsoon@...lphia.net>)
• Re: AV "feature" does more DDoS than Sobig (William Warren <hescominsoon@...lphia.net>)
• Re: AV "feature" does more DDoS than Sobig (3APA3A <3APA3A@...URITY.NNOV.RU>)
• JAP service un-backdoored ("Thomas C. Greene " <thomas.greene@...register.co.uk>)
• Re: AV "feature" does more DDoS than Sobig (Vladimir Parkhaev <vladimir@...bas.net>)
• Re: AV "feature" does more DDoS than Sobig (James Greenhalgh <james.greenhalgh@...ldpay.com>)
• RE: AV "feature" does more DDoS than Sobig ("Steve Wray" <steve.wray@...adise.net.nz>)

• WorldFlash - Spyware and BO (mac.ac@...nline.de (Dr. Markus a Campo))
• Linux pam_smb < 1.1.6 login exploit (Huagang Xie <xie@....lids.org>)
• RE: EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Drew Copley" <dcopley@...e.com>)
• RE: EEYE: Internet Explorer Object Data Remote Execution Vulnerability ("Drew Copley" <dcopley@...e.com>)
• Re: AV "feature" does more DDoS than Sobig (Darren Reed <avalon@...igula.anu.edu.au>)
• [RHSA-2003:267-01] New up2date available with updated SSL certificate authority file (bugzilla@...hat.com)

• [SECURITY] [DSA 274-1] New node packages fix remote root vulnerability (joey@...odrom.org (Martin Schulze))
• MDKSA-2003:087 - Updated gkrellm packages fix remote arbitrary code executeion vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [CLA-2003:727] Conectiva Security Announcement - sendmail (Conectiva Updates <secure@...ectiva.com.br>)
• RIP: ActiveX controls in Internet Explorer? ("Richard M. Smith" <rms@...puterbytesman.com>)
• ScanMail Message to recipient: eManager settings were matched and action was taken. (System Attendant <CHAPAR-SA@...k.com>)
• ScanMail Message to recipient: eManager settings were matched and action was taken. (System Attendant <CHAPAR-SA@...k.com>)
• ScanMail Message to recipient: eManager settings were matched and action was taken. (System Attendant <CHAPAR-SA@...k.com>)
• ScanMail Message to recipient: eManager settings were matched and action was taken. (System Attendant <CHAPAR-SA@...k.com>)
• ScanMail Message to recipient: eManager settings were matched and action was taken. (System Attendant <CHAPAR-SA@...k.com>)

• Multiple integer overflows in XFree86 (local/remote) (<blexim@...h.com>)
• SAP Internet Transaction Server (Martin Eiszner <martin@...sec.org>)
• RE: RIP: ActiveX controls in Internet Explorer? ("Alun Jones" <alun@...is.com>)
• OpenBSD 3.2 Kthread Madness (ned <nd@...inemenace.org>)
• Re: OpenBSD 3.2 Kthread Madness (Mats O Jansson <maja@...w.com>)
• Cross Site Scripting in Webbased Virusencyclopedia (Redaktion-Kryptocrew <momolly@...ptocrew.de>)

478 messages

Powered by blists - more mailing lists