bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

bugtraq mailing list - 2003/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 12	² 15	³ 33	⁴ 30	⁵ 19	⁶ 3	⁷ 6
⁸ 25	⁹ 27	¹⁰ 44	¹¹ 34	¹² 22	¹³ 17	¹⁴ 2
¹⁵ 15	¹⁶ 24	¹⁷ 39	¹⁸ 42	¹⁹ 18	²⁰ 7	²¹ 12
²² 26	²³ 21	²⁴ 37	²⁵ 42	²⁶ 51	²⁷ 18	²⁸ 3
²⁹ 19	³⁰ 15

Messages by day:

September 1 (12 messages)

Security News Portal - XSS Untrusted Links ("morning_wood" <se_cur_ity@...mail.com>)
GLSA: pam_smb (200309-01) (aliz@...too.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz@...too.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz@...too.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz@...too.org (Daniel Ahlberg))
GLSA: vmware (200308-03.1) (aliz@...too.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz@...too.org (Daniel Ahlberg))
GLSA: horde (200309-02) (aliz@...too.org (Daniel Ahlberg))
GLSA: horde (200309-02.1) (aliz@...too.org (Daniel Ahlberg))
[Update]:Cross Site Scripting in Webbased Virusencyclopedia has fixed (Redaktion-Kryptocrew <momolly@...ptocrew.de>)
Ifriends payment bypass ("morning_wood" <se_cur_ity@...mail.com>)
PtHProductions Gastenboek - XSS ("morning_wood" <se_cur_ity@...mail.com>)

September 2 (15 messages)

September 3 (33 messages)

September 4 (30 messages)

September 5 (19 messages)

September 6 (3 messages)

Microsoft WordPerfect Document Converter Exploit ("Valgasu" <valgasu@...ack.org>)
Crash Mozilla 1.5 (Marc Schoenefeld <schonef@...-muenster.de>)
11 years of inetd default insecurity? (3APA3A <3APA3A@...URITY.NNOV.RU>)

September 7 (6 messages)

September 8 (25 messages)

September 9 (27 messages)

September 10 (44 messages)

September 11 (34 messages)

September 12 (22 messages)

September 13 (17 messages)

September 14 (2 messages)

PCL-0002: Bug in Kmail 1.5 (Vincenzo Ciaglia <puccio@...ciolab.org>)
IIS6 Security Issues (Matthew Wagenknecht <Matthew.Wagenknecht@...ntum.com>)

September 15 (15 messages)

September 16 (24 messages)

September 17 (39 messages)

September 18 (42 messages)

September 19 (18 messages)

September 20 (7 messages)

September 21 (12 messages)

September 22 (26 messages)

September 23 (21 messages)

September 24 (37 messages)

Re: GLSA: openssh (200309-14) ("Ademar de Souza Reis Jr." <ademar@...ectiva.com.br>)
OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : wu-ftpd fb_realpath() off-by-one bug (security@....com)
[slackware-security] ProFTPD Security Advisory (SSA:2003-259-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] New OpenSSH packages (SSA:2003-266-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] WU-FTPD Security Advisory (SSA:2003-259-03) (Slackware Security Team <security@...ckware.com>)
RE: [Fwd: Re: AIM Password theft] (S G Masood <sgmasood@...oo.com>)
Re: base64 ("Lothar Kimmeringer" <bugtraq@...meringer.de>)
Re: AIM Password theft ("Brent Meshier" <brent@...hier.com>)
RE: [Fwd: Re: AIM Password theft] ("Thor Larholm" <thor@...x.com>)
MondoSoft File Creation vulnerability ("Jens H. Christensen" <jhc@...tego.dk>)
Privacy leak in VeriSign's SiteFinder service ("Richard M. Smith" <rms@...puterbytesman.com>)
[ESA-20030924-026] 'WebTool-userpass' passphrase disclosure vulnerability. (EnGarde Secure Linux <security@...rdiandigital.com>)
TCLHttpd Server - Multiple Vulnerabilities (Phuong Nguyen <dphuong@...oo.com>)
Re: base64 (Christian Vogel <chris@...lix.hedonism.cx>)
FreeBSD Security Advisory FreeBSD-SA-03:14.arp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Privacy leak in VeriSign's SiteFinder service #2 (Mark Coleman <markc@...ontown.com>)
Re: Privacy leak in VeriSign's SiteFinder service #2 (Marco Ivaldi <raptor@...eadbeef.info>)
Re: base64 (David Wilson <David.Wilson@...de.com>)
Re: base64 (David Wilson <David.Wilson@...de.com>)
Re: base64 (der Mouse <mouse@...ents.Montreal.QC.CA>)
Re: base64 (MightyE <trash@...htye.org>)
Re: Privacy leak in VeriSign's SiteFinder service #2 (der Mouse <mouse@...ents.Montreal.QC.CA>)
Re: AIM Password theft (jelmer <jkuperus@...net.nl>)
BRS WebWeaver: Anonymous Surfing ("euronymous" <just-a-user@...dex.ru>)
Denial of Service against Gauntlet-Firewall / SQL-Gateway (Oliver Heinz <heinz@...go.de>)
Re: AIM Password theft ("Eric Joe" <sysop@...1.com>)
[CLA-2003:749] Conectiva Security Announcement - php4 (Conectiva Updates <secure@...ectiva.com.br>)
NULLhttpd <= 0.5.1 remote resources consumption (Luigi Auriemma <aluigi@...ervista.org>)
RE: Does VeriSign's SiteFinder service violate the ECPA? (Christopher Wagner <chrisw@...aids.com>)
NULLhttpd <= 0.5.1 XSS through Bad request (Luigi Auriemma <aluigi@...ervista.org>)
Thread-IT Message Board XSS Vulnerability (Bahaa Naamneh <b_naamneh@...mail.com>)
RE: [Fwd: Re: AIM Password theft] VU#865940 ("Thor Larholm" <thor@...x.com>)
Re: AIM Password theft ("http-equiv@...ite.com" <1@...ware.com>)
Re: [Fwd: Re: AIM Password theft] (DarkKnight <mbuzz04@...oo.com>)
Re-Boot Design ASP Forum SQL injection Vulnerability (Bahaa Naamneh <b_naamneh@...mail.com>)
Re: base64 (Seth Breidbart <sethb@...ix.com>)
RE: [Fwd: Re: AIM Password theft] VU#865940 ("CERT(R) Coordination Center" <cert@...t.org>)

September 25 (42 messages)

September 26 (51 messages)

RE: ICMP pokes holes in firewalls... ("Daniel Chemko" <dchemko@...tec.com>)
Re: Ruh-Roh SOBIG.G? (Joe Stewart <jstewart@...hq.com>)
[eft] Remote atphttpd 0.4b <= exploit (r-code <d_fence@....net>)
Re: minor apache htpasswd problem (p@....at)
CyberInsecurity: The cost of Monopoly ("Jonathan A. Zdziarski" <jonathan@...learelephant.com>)
Re: base64 (Christian Vogel <chris@...lix.hedonism.cx>)
Re: Does VeriSign's SiteFinder service violate the ECPA? ("David Nichols" <dnichols@...i.com>)
RE: CyberInsecurity: The cost of Monopoly ("Marc Maiffret" <marc@...e.com>)
Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) (Damien Miller <djm@...drot.org>)
Re: base64 ("Ilya Teterin" <alienhard@...l.ru>)
RE: CyberInsecurity: The cost of Monopoly ("Richard M. Smith" <rms@...puterbytesman.com>)
RE: CyberInsecurity: The cost of Monopoly ("Jonathan A. Zdziarski" <jonathan@...learelephant.com>)
MPlayer Security Advisory #01: Remotely exploitable buffer overflow (Gabucino <gabucino-NO-SPAM@...ayerhq.hu>)
RE: CyberInsecurity: The cost of Monopoly ("B.K. DeLong" <bkdelong@...ox.com>)
SV: Ruh-Roh SOBIG.G? ("Peter Kruse" <kruse@...sesecurity.dk>)
RE: Sanctum AppScan 4 misses potential vulnerabilities in wrapped links ("Dawes, Rogan (ZA - Johannesburg)" <rdawes@...oitte.co.za>)
SMC Router Denial of Service exploit (<res076cf@...tel.net>)
Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) ("Ralf S. Engelschall" <rse@...elschall.com>)
Re: ICMP pokes holes in firewalls... (Darren Reed <avalon@...igula.anu.edu.au>)
@Stake pulls pin on Geer: Effect on research and publication ("Patrick J. Kobly" <patrick@...ly.com>)
Re: LanSuite 2003 - Multiple Vulnerabilities (Stan Bubrouski <stan@....neu.edu>)
Re: LanSuite 2003 - Multiple Vulnerabilities (Phuong Nguyen <dphuong@...oo.com>)
Re: base64 (Earl Hood <earl@...lhood.com>)
Re: Sanctum AppScan 4 misses potential vulnerabilities in wrapped links (Valdis.Kletnieks@...edu)
Re: LanSuite 2003 - Multiple Vulnerabilities (Stan Bubrouski <stan@....neu.edu>)
[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
RE: CyberInsecurity: The cost of Monopoly (Chris Stewart <flbas@...oo.com>)
Re: base64 (Bennett Todd <bet@...ul.net>)
RE: Ruh-Roh SOBIG.G? ("Larry Seltzer" <larry@...ryseltzer.com>)
Tru64 and OpenVMS patch announcements change after next month (Matt Power <mhpower@....bindview.com>)
RE: base64 ("Alun Jones" <alun@...is.com>)
McNews 1.3 : File Disclosure Vulnerability (Sebastien Lelarge <sebastien.lelarge@...mplin-utc.net>)
DCE 1.2.2c Denial of Service Vulnerability on IRIX (SGI Security Coordinator <agent99@....com>)
Re: Does VeriSign's SiteFinder service violate the ECPA? (Bob Johnson <bob88@....ufl.edu>)
Re: ICMP pokes holes in firewalls... (H D Moore <hdm@...italoffense.net>, (by way of Lucio <lucio@...el.it>))
RE: CyberInsecurity: The cost of Monopoly (emacdona@...acdonald.net)
DCE 1.2.2c Denial of Service Vulnerability on IRIX ("SGI Security Coordinator" <agent99@....com>)
Re: Ruh-Roh SOBIG.G? (Valdis.Kletnieks@...edu)
Re[2]: base64 (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: base64 (Bennett Todd <bet@...ul.net>)
RE: base64 (Louis Erickson <LErickson@...ba.com>)
RE: base64 (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
Re: ICMP pokes holes in firewalls... (Lucio <lucio@...el.it>)
Packetstorm started a try2crack of A.R.C.S. Algorithm (Angelo Rosiello <guilecool@....com>)
RE: base64 ("Rainer Gerhards" <rgerhards@...adiscon.com>)
Re: base64 (Bennett Todd <bet@...ul.net>)
RE: Ruh-Roh SOBIG.G? ("James C. Slora, Jr." <james.slora@...a.com>)
Mplayer Buffer Overflow ("Otero, Hernan" <hernan.otero@....com>)
Re: base64 (Earl Hood <earl@...lhood.com>)
Re: base64 ("Steven M. Christey" <coley@...re.org>)
Re: Packetstorm started a try2crack of A.R.C.S. Algorithm (mhw@...ris.org (Mark H. Weaver))

September 27 (18 messages)

September 28 (3 messages)

Geeklog Multiple Versions Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <security@...appc.com>)
WINDOWS XP software restriction policy [path rule] bypass... (bipin gautam <visitbipin@...oo.com>)
Re: Geeklog Multiple Versions Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <novappc@...appc.com>)

September 29 (19 messages)

September 30 (15 messages)

678 messages