bugtraq mailing list - 2003/10

Messages by day:

October 1 (21 messages)

• [CLA-2003:751] Conectiva Security Announcement - openssl (Conectiva Updates <secure@...ectiva.com.br>)
• Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit) ("demz" <demz@...ode.net>)
• MDKSA-2003:097 - Updated mplayer packages fix buffer overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• GLSA: openssl (200309-19) (aliz@...too.org (Daniel Ahlberg))
• SuSE Security Announcement: mysql (SuSE-SA:2003:042) (krahmer@...e.de (Sebastian Krahmer))
• [Full-Disclosure] [SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (debian-security-announce@...ts.debian.org)
• MDKSA-2003:098 - Updated openssl packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [slackware-security] OpenSSL security update (SSA:2003-273-01) (Slackware Security Team <security@...ckware.com>)
• Cisco Security Advisory: SSL Implementation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• DCP Portal - 5.5 holes (Lifo Fifo <lifofifo20@...oo.com>)
• Re: Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit) (steve@...intasys.com)
• NINCOMPOOPERY OF MICROSOFT (<dhtml@...h.com>)
• SuSE Security Announcement: openssl (SuSE-SA:2003:043) (Thomas Biege <thomas@...e.de>)
• NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL ("Ed Reed" <ereed@...ell.com>)
• ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability (Pentest Security Advisories <alerts@...test.co.uk>)
• ptl-2003-02: IBM DB2 INVOKE Command Stack Overflow Vulnerability (Pentest Security Advisories <alerts@...test.co.uk>)
• SuSE Security Announcement: lsh (SuSE-SA:2003:041) (krahmer@...e.de (Sebastian Krahmer))
• [SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (Michael Stone <mstone@...cker.debian.org>)
• Multiple vulnerabilities in WinShadow (Bahaa Naamneh <b_naamneh@...mail.com>)
• NOVL-2003-10087450 - Novell Response to NISCC/CERT Advisories re: OpenSSL - revised url ("Ed Reed" <ereed@...ell.com>)
• Re: SSGbook (ASP) (Terry Bankert <tbankert@...ipt-shed.com>)

• Visualroute Server - reverse tracerouting ("morning_wood" <se_cur_ity@...mail.com>)
• CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations (CERT Advisory <cert-advisory@...t.org>)
• MOSDEF Initial Release (<dave@...unitysec.com>)
• New OpenSSL remote vulnerability (issue date 2003/10/02) (Patrik Hornik <patrik.hornik@...tech.sk>)
• New Tool: MetaCoretex (DB Security Scanner) (visigoth <visigoth@...uritycentric.com>)
• TSLSA-2003-0001 - openssl (Tawie Security Advisor <tsl@...ie.org>)
• Process Killing - Playing with PostThreadMessage ("Brett Moore" <brett.moore@...urity-assessment.com>)
• PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio] (Joost Pol <joost@...e.nl>)
• OpenServer 5.0.7 : OpenSSH: multiple buffer handling problems (security@....com)
• PINE-CERT-20030901: Integer Overflow in FreeBSD Kernel [fhold] (Joost Pol <joost@...e.nl>)
• GLSA: vpopmail (200310-01) (John Mylchreest <johnm@...too.org>)

• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities (security@....com)
• Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS (Seth Woolley <seth@...tology.org>)
• Re: Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS (Michael Renzmann <security@...anic.de>)
• Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable (Michael Renzmann <security@...anic.de>)
• [RHSA-2003:256-02] Updated Perl packages fix security issues. (bugzilla@...hat.com)
• FreeBSD Security Advisory FreeBSD-SA-03:17.procfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Re: Process Killing - Playing with PostThreadMessage ("Thor Larholm" <thor@...x.com>)
• Webmails + Internet Explorer can create unwanted javascript execution (Jedi/Sector One <j@...eftpd.org>)
• exploiting fortigate firewall through webinterface ("Maarten Hartsuijker" <secfocus@...tsuijker.com>)
• Is it safe yet? (HCTITS Security Division <security@...ancentrictech.com>)
• Half-Life 2 source code stolen through IE exploit ("Thor Larholm" <thor@...x.com>)
• Free OverflowGuard Personal Edition Released ("Paul Webster" <ptwebster@...asecuritysoftware.com>)
• FreeBSD Security Advisory FreeBSD-SA-03:16.filedesc (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• [ESA-20031003-028] Potential OpenSSL DoS. (EnGarde Secure Linux <security@...rdiandigital.com>)
• EartStation 5 P2P application contains malicious code (random nut <randnut@...oo.com>)
• Class-action suit points to Microsoft security flaws ("Richard M. Smith" <rms@...puterbytesman.com>)
• Minihttpserver File-Sharing for NET Directory Traversal Vulnerability (Bahaa Naamneh <b_naamneh@...mail.com>)
• New IE crash: CSS + HTML (arachnid__notdot_net@...a.net.nz)
• Sun Cobalt RaQ Control Panel Multiple Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• RE: Process Killing - Playing with PostThreadMessage (Vitor Ventura <vventura@....pt>)
• Re: Webmails + Internet Explorer can create unwanted javascript execution ("Jason Munro" <jason@...bev.com>)
• TSLSA-2003-0003 - openssl (Tawie Security Advisor <tsl@...ie.org>)
• RE: New IE crash: CSS + HTML ("Brian Paulson" <bpaulson@...eftain.com>)
• Re: Process Killing - Playing with PostThreadMessage ("Maxime Ducharme" <maxime@...dore-design.com>)
• patch for vulnerability in cgiemail (Matt Riffle <matt@...r.com>)
• RE: New IE crash: CSS + HTML ("Drew Copley" <dcopley@...e.com>)
• RE: New IE crash: CSS + HTML ("Robert Ahnemann" <rahnemann@...inity-mortgage.com>)
• RE: New IE crash: CSS + HTML ("Russ Uhte (Lists)" <russlists@...ltest.parallax.ws>)
• Cisco LEAP Insecurities + POC (evol@...ner.halo.nu)
• RE: Webmails + Internet Explorer can create unwanted javascript execution ("Drew Copley" <dcopley@...e.com>)
• [CLA-2003:757] Conectiva Security Announcement - vixie-cron (Conectiva Updates <secure@...ectiva.com.br>)
• RE: Half-Life 2 source code stolen through IE exploit ("Thor Larholm" <thor@...x.com>)
• RE: Half-Life 2 source code stolen through IE exploit ("Thor Larholm" <thor@...x.com>)
• RE: Half-Life 2 source code stolen through IE exploit ("Mattox, Norman" <NMattox@...r.com>)
• Re: Half-Life 2 source code stolen through IE exploit (spackard@...tlink.com)
• Re: Webmails + Internet Explorer can create unwanted javascript execution (Jedi/Sector One <j@...eftpd.org>)
• [CLA-2003:758] Conectiva Security Announcement - vixie-cron (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Half-Life 2 source code stolen through IE exploit (jelmer <jkuperus@...net.nl>)
• Cisco 6509 switch telnet vulnerability (Chris Norton <kicktd@...mail.com>)

• Divine OpenMarket Content Server XSS ("Valgasu" <valgasu@...ack.org>)
• Sun Cobalt RaQ Control Panel Multiple Vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• OpenLinux: OpenSSH: multiple buffer handling problems (security@....com)
• OpenLinux: wu-ftpd fb_realpath() off-by-one bug (security@....com)
• OpenLinux: Updated stunnel packages fix signal vulnerability (security@....com)
• OpenLinux: wget: Buffer overflow (security@....com)
• PHP-Nuke v 6.7 + Windows = File Upload ("Frog Man" <leseulfrog@...mail.com>)
• EMML, EMGB : Include() hole ("Frog Man" <leseulfrog@...mail.com>)
• Cobalt RaQ Control Panel Cross Site Scripting ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Cisco 6509 switch telnet vulnerability (Wendy Garvin <wgarvin@...co.com>)
• FreeBSD Security Advisory FreeBSD-SA-03:18.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Re: Re: Geeklog Multiple Versions Vulnerabilities (Michael Renzmann <security@...anic.de>)
• Re: Re: Geeklog Multiple Versions Vulnerabilities ("Daniel Bartlett" <dan@...kedbox.net>)
• Re: New IE crash: CSS + HTML (Sherlock <sherl0ck@...cast.net>)
• Conexant Access Runner DSL Console login bypass vulnerability (Chris Norton <kicktd@...mail.com>)
• Re: Cisco 6509 switch telnet vulnerability (Bob Niederman <btrq@...-n.com>)

• GuppY : XSS, Files Reading/Writing ("Frog Man" <leseulfrog@...mail.com>)
• I have fixes for the Geeklog vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• another fix ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Do not use the fix in lib-common.php . use in lib-security.php at /system/ dir ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)

• [PAPER] Juggling with packets: floating data storage (Wojciech Purczynski <cliph@...c.pl>)
• Re: [PAPER] Juggling with packets: floating data storage (petard <petard@....lonestar.org>)
• [CLA-2003:760] Conectiva Security Announcement - mplayer (Conectiva Updates <secure@...ectiva.com.br>)
• Weaknesses in LEAP Challenge/Response ("Joshua Wright" <Joshua.Wright@....edu>)
• Re: I have fixes for the Geeklog vulnerabilities ("Dirk Haun" <dirk@...n-online.de>)
• FreeBSD Security Advisory FreeBSD-SA-03:15.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• RE: New IE crash: CSS + HTML (psz@...hs.usyd.edu.au (Paul Szabo))
• Local root exploit in SuSE Linux 7.3Pro (Stefan Nordhausen <deletethis.nordhaus@...ormatik.hu-berlin.de>)
• Local root exploit in SuSE Linux 8.2Pro (Stefan Nordhausen <deletethis.nordhaus@...ormatik.hu-berlin.de>)
• JBoss 3.2.1: Remote Command Injection (Marc Schoenefeld <schonef@...-muenster.de>)
• GLSA: cfengine (200310-02) (Kurt Lieber <klieber@...too.org>)
• Re: Cisco 6509 switch telnet vulnerability (twig les <twigles@...oo.com>)
• RE: Cobalt RaQ Control Panel Cross Site Scripting ("Steve Manzuik" <steve@...renchtech.com>)
• SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. ("Larry W. Cashdollar" <lwc@...id.ath.cx>)
• Verisign fighting back at ICANN ("Thor Larholm" <thor@...x.com>)
• Vulnerabilities in Easy File Sharing Web Server (1.2 NEW). ("nimber" <nimber@...l.ru>)
• Access Runner DSL Console vulnerability update (Chris Norton <kicktd@...mail.com>)
• SA-20031006 slocate vulnerability (Patrik Hornik <patrik.hornik@...tech.sk>)
• Re: Local root exploit in SuSE Linux 8.2Pro (Roman Drahtmueller <draht@...e.de>)
• JS/HTML code injection in File-Sharing for NET v1.5 and Forums Web Server v1.5 ("nimber" <nimber@...l.ru>)
• Update JBoss 308 & 321: Remote Command Injection (Marc Schoenefeld <schonef@...-muenster.de>)

• The joys of impurity (was: MOSDEF, InlineEgg) ("Alexander E. Cuttergo" <cuttergo@....net>)
• Adobe SVG Viewer Active Scripting Bypass (GM#002-MC) (GreyMagic Software <security@...ymagic.com>)
• PeopleSoft Grid Option Vulnerability (<info@...ssure.com>)
• Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC) (GreyMagic Software <security@...ymagic.com>)
• Medieval Total War <= 1.1 broadcast crash (Luigi Auriemma <aluigi@...ervista.org>)
• Re: The joys of impurity (was: MOSDEF, InlineEgg) (<dave@...unitysec.com>)
• Adobe SVG Viewer Local and Remote File Reading (GM#003-MC) (GreyMagic Software <security@...ymagic.com>)
• ZH2003-3SP (security patch): multiple vulnerabilities in mod_gzip 1.3.x debug mode (Astharot <secfoc@...il.it>)
• Medieval Total War <= 1.1 broadcast Connection expired (Luigi Auriemma <aluigi@...ervista.org>)
• IE 6 XML Patch Bypass ("Mindwarper *" <mindwarper@...uxmail.org>)
• [RHSA-2003:278-01] Updated SANE packages fix remote vulnerabilities (bugzilla@...hat.com)
• Re: Weaknesses in LEAP Challenge/Response (Sharad Ahlawat <sahlawat@...co.com>)

• New FAQ on worm/worm containment (Stuart Staniford <stuart@...icondefense.com>)
• Re: Re: I have fixes for the Geeklog vulnerabilities (jelmer <jkuperus@...net.nl>)
• Workshop on Cybersecurity, Research & Disclosure (Adam Shostack <adam@...eport.org>)
• Betr.: IE 6 XML Patch Bypass ("Philip Wagenaar" <p.wagenaar@...on.nl>)
• Openoffice 1.1.0 DoS (Marc Schoenefeld <schonef@...-muenster.de>)
• ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front (Astharot <secfoc@...il.it>)
• PHP-Nuke SQL Injection (mod <rottyfig12@...mail.com>)
• HPUX dtprintinfo buffer overflow vulnerability ("Davide Del Vecchio" <dante@...ghieri.org>)
• Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability ("Eiji James Yoshida" <ptrs-ejy@...iij4u.or.jp>)
• PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload (<info@...ssure.com>)
• PeopleSoft <Control><J> Information Disclosure (<info@...ssure.com>)
• RE: IE 6 XML Patch Bypass ("GreyMagic Software" <security@...ymagic.com>)
• Re: PHP-Nuke SQL Injection (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Re: I have fixes for the Geeklog vulnerabilities ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities (Chris.Kulish@...ing.com)
• RE: [PAPER] Juggling with packets: floating data storage ("Alun Jones" <alun@...is.com>)
• RE: [PAPER] Juggling with packets: floating data storage ("Alun Jones" <alun@...is.com>)
• Re: [PAPER] Juggling with packets: floating data storage (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: [PAPER] Juggling with packets: floating data storage (Rick Wash <rwash@...i.umich.edu>)
• Re: [Full-Disclosure] Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks@...edu)
• Re: [PAPER] Juggling with packets: floating data storage (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: [PAPER] Juggling with packets: floating data storage (Eugen Leitl <eugen@...tl.org>)
• Re: [Full-Disclosure] RE: [PAPER] Juggling with packets: floating data storage (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: [PAPER] Juggling with packets: floating data storage ("David Heigl" <davidh@...unlift.com>)
• Re: [PAPER] Juggling with packets: floating data storage (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: [PAPER] Juggling with packets: floating data storage (Gary Flynn <flynngn@....edu>)
• Re: [PAPER] Juggling with packets: floating data storage ("Doug Moen" <doug.moen@...ecoat.com>)
• Re: [PAPER] Juggling with packets: floating data storage ("Michal Zalewski" <lcamtuf@...ttot.org>)

• Re: [PAPER] Juggling with packets: floating data storage ("Doug Moen" <doug.moen@...ecoat.com>)
• Re: [PAPER] Juggling with packets: floating data storage ("Nicholas Weaver" <nweaver@...berkeley.edu>)
• Re: [PAPER] Juggling with packets: floating data storage (MightyE <trash@...htye.org>)
• Re: [PAPER] Juggling with packets: floating data storage (Seth Breidbart <sethb@...ix.com>)
• Re: [PAPER] Juggling with packets: floating data storage (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Re: [PAPER] Juggling with packets: floating data storage (Seth Breidbart <sethb@...ix.com>)
• Re: [PAPER] Juggling with packets: floating data storage ("Rick Wash" <rwash@...i.umich.edu>)
• [RHSA-2003:281-01] Updated MySQL packages fix vulnerability (bugzilla@...hat.com)
• [RHSA-2003:281-01] Updated MySQL packages fix vulnerability (bugzilla@...hat.com)
• Re: [PAPER] Juggling with packets: floating data storage (Adeel Hussain <ad33lh@...mail.com>)
• Re: [PAPER] Juggling with packets: floating data storage (Aron Nimzovitch <bugout@...uddancer.com>)
• [RHSA-2003:281-01] Updated MySQL packages fix vulnerability (bugzilla@...hat.com)
• Re: [PAPER] Juggling with packets: floating data storage (bugtraq@...strial.co.uk)
• Re: [PAPER] Juggling with packets: floating data storage (Thomas Chiverton <thomas.chiverton@...efinger.com>)
• NetBSD Security Advisory 2003-016: Sendmail - another prescan() bug CAN-2003-0694 (NetBSD Security Officer <security-officer@...BSD.org>)
• NetBSD Security Advisory 2003-017: OpenSSL multiple vulnerabilities (NetBSD Security Officer <security-officer@...BSD.org>)
• NetBSD Security Advisory 2003-015: Remote and local vulnerabilities in XFree86 font libraries (NetBSD Security Officer <security-officer@...BSD.org>)
• !A stupid bug ...that works on mozilla, opera, IE! (bipin gautam <visitbipin@...oo.com>)
• Re: [PAPER] Juggling with packets: floating data storage (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: [PAPER] Juggling with packets: floating data storage (Dave Clendenan <dave@...e.clendenan.ca>)
• Re: Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks@...edu)

• Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks@...edu)
• Re: !A stupid bug ...that works on mozilla, opera, IE! (Wayne Schroeder <raz@...wies.net>)
• Re: [PAPER] Juggling with packets: floating data storage (Darren Reed <avalon@...igula.anu.edu.au>)
• "Mirror" attacks on windows clients (Joao Gouveia <tharbad@...tik.org>)
• Shattering By Example ("Brett Moore" <brett.moore@...urity-assessment.com>)
• Bad news on RPC DCOM vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• MDKSA-2003:099 - Updated sane packages fix remote vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: [PAPER] Juggling with packets: floating data storage (Brandon Eisenmann <beisenmann@...thlink.net>)
• [A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (bipin gautam <visitbipin@...oo.com>)
• Local DoS in windows. (bipin gautam <visitbipin@...oo.com>)
• Re: [A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (jelmer <jkuperus@...net.nl>)
• Re: Bad news on RPC DCOM vulnerability (Adrian_Stone@....com)
• RE: Student faces suit over key to CD locks (<dhtml@...h.com>)
• Re: Bad news on RPC DCOM vulnerability ("Alex" <pk95@...dex.ru>)
• RE: Student faces suit over key to CD locks (<dhtml@...h.com>)
• RE: Local DoS in windows. (Steve Wray <steve.wray@...adise.net.nz>)
• RE: Re: Bad news on RPC DCOM vulnerability ("Brown, Bobby (US - Hermitage)" <bobbrown@...oitte.com>)

• RE: Re: Bad news on RPC DCOM vulnerability ("Macroscape Solutions" <lists@...roscape.com>)
• Ejecting CDs with VBScript ( Online Exploit ) ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Ejecting CDs with VBScript ( Online Exploit ) (jelmer <jkuperus@...net.nl>)
• Re: Local DoS in windows. (Cael Abal <lists@...you.com>)
• Excuse me , oh no! it was discovered before....;-( ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Re: Bad news on RPC DCOM vulnerability (Vladimir Parkhaev <vladimir@...bas.net>)
• Re: Re: Bad news on RPC DCOM vulnerability ("V.O." <vosipov@....com.au>)
• Re: [A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (bipin gautam <visitbipin@...oo.com>)
• RE: Local DoS in windows. (bipin gautam <visitbipin@...oo.com>)
• RE: Re: Bad news on RPC DCOM vulnerability ("Matthew D. Lammers" <mdlammers_cissp@...thlink.net>)
• RE: Re: Bad news on RPC DCOM vulnerability ("Dimitri Limanovski" <dlimanov@....com>)
• Re: Re: Bad news on RPC DCOM vulnerability (Irwan Hadi <irwanhadi@...by.com>)
• Concern about Checkpoint and SSL Vulnerability (<seeker@...h.ai>)
• Code for ban IP adresses inmediately ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• [SECURITY] [DSA 394-1] New openssl095 packages fix denial of service (joey@...odrom.org (Martin Schulze))
• RE: Bad news on RPC DCOM vulnerability ("VigilantMinds Security Operations Center" <soc.rpc@...ilantminds.com>)
• Code for write the IPs to ban ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• SA-20031006 slocate buffer overflow - exploitation proof (Patrik Hornik <patrik.hornik@...tech.sk>)
• Testing my codes in www.nsrg-security.com , important notes ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• MySQL backend for BANNINIP System ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• TRACKtheCLICK Script Injection Vulnerabilities ("BrainRawt" <brainrawt@...worx.com>)
• Gallery 1.4 including file vulnerability (Peter "Stöckli" <pcs@...tquest.com>)
• Re: Bad news on RPC DCOM vulnerability (K-OTiK Security <Special-Alerts@...tik.com>)
• New AIM Expliot/Worm/Adware-script (realphx.com related) ("Michael A. Nunes" <p@...ike.net>)
• *ADDENDUM* New AIM Expliot/Worm/Adware-script (realphx.com related) ("Michael A. Nunes" <p@...ike.net>)
• Another example of completely incorrect behavior of vendor: SmartFTP.com ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Code for ban IP adresses inmediately (Valdis.Kletnieks@...edu)
• Project structure of ADWARE/VIRUS/TROJAN ( AIM EXPLOIT) related to Realphx.com ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)

• RE: Local DoS in windows. ("Joe" <mvp@...ware.net>)
• buffer overflow in IRCD software (Piotr KUCHARSKI <chopin@....waw.pl>)
• Re: Local DoS in windows. (bipin gautam <visitbipin@...oo.com>)
• FileDonkey.com Cross Site Scripting ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Local DoS in windows. [indeed it works... PROOF?] (bipin gautam <visitbipin@...oo.com>)
• myPHPCalendar : Informations Disclosure, File Include ("Frog Man" <leseulfrog@...mail.com>)

• RE: Gallery 1.4 including file vulnerability ("Brent Meshier" <brent@...hier.com>)
• Re: New AIM Expliot/Worm/Adware-script (realphx.com related) ("Thor Larholm" <thor@...x.com>)
• Re: Gallery 1.4 including file vulnerability ("Bharat Mediratta" <bharat@...alto.com>)
• Re: Bad news on RPC DCOM vulnerability (Terence Runge <terencerunge@...global.net>)
• Re: Bad news on RPC DCOM vulnerability (Terence Runge <terencerunge@...global.net>)
• Remote root exploit for proftpd \n bug (Carl Livitt <carl@...rningshophull.co.uk>)
• Tool Release: Xprobe2 0.2 (Ofir Arkin <ofir@...-security.com>)

• UK's Internet Infrastructure Open to Prying Eyes (<root@...workpenetration.com>)
• What software breaks because of this DNS feature? ("Richard M. Smith" <rms@...puterbytesman.com>)
• Re: What software breaks because of this DNS feature? (Michael Sierchio <kudzu@...ebras.com>)
• RE: What software breaks because of this DNS feature? (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
• RE: What software breaks because of this DNS feature? ("Rob Mayoff" <mayoff@....com>)

• Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine ("Sintelli SINTRAQ" <sintraq@...telli.com>)
• NASA.GOV Search system Cross Site Scripting ( SEARCH.NASA.GOV ) ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Finjan Software Discovers a New Critical Vulnerability In Microsoft Hotmail ("Menashe Eliezer" <menashe@...jan.com>)
• LinkSys EtherFast Router Denial of Service Attack (DigitalPranksters <secteam@...italpranksters.com>)
• [CLA-2003:762] Conectiva Security Announcement - glibc (Conectiva Updates <secure@...ectiva.com.br>)
• Re: What software breaks because of this DNS feature? (Kevin George <kevin-bugtraq@...ndrop.net>)
• [SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Few issues previously unpublished in English (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Gaim festival plugin exploit (error <error@...tinthenoise.net>)
• New CERT Coordination Center (CERT/CC) PGP Key (CERT Advisory <cert-advisory@...t.org>)
• Microsoft Windows Security Bulletin Summary October (Giovanni Campagnoli <bioia@...oo.com>)
• Microsoft got it wrong ("Richard M. Smith" <rms@...puterbytesman.com>)
• ColdFusion SQL Error Pages XSS ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• Re: Gaim festival plugin exploit (merlyn@...nehenge.com (Randal L. Schwartz))

• RE: ColdFusion SQL Error Pages XSS ("Keith Kikta - iLand Internet Solutions Corp." <keith.kikta@...nd.com>)
• Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Multiple security vulnerabilities in Xsco (security@....com)
• Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack (Microsoft Security Bullet… (Ory Segal <ory.segal@...ctuminc.com>)
• CSS Vulnerability in Bajie HTTP JServer ("Oliver Karow" <Oliver.Karow@....de>)
• Listbox And Combobox Control Buffer Overflow ("Brett Moore" <brett.moore@...urity-assessment.com>)
• RE: Microsoft Windows Security Bulletin Summary October ("Thor Larholm" <thor@...x.com>)
• Re: Microsoft got it wrong ("T.A. Adjuster" <adjuster@...ved.org>)
• CERT Advisory CA-2003-27 Multiple Vulnerabilities in Microsoft Windows and Exchange (CERT Advisory <cert-advisory@...t.org>)

• MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [CLA-2003:766] Conectiva Security Announcement - gdm (Conectiva Updates <secure@...ectiva.com.br>)
• [CLA-2003:765] Conectiva Security Announcement - ircd (Conectiva Updates <secure@...ectiva.com.br>)
• Re: [CLA-2003:765] Conectiva Security Announcement - ircd (Florian Weimer <fw@...eb.enyo.de>)

• some DNS data ... (bmanning@...oshi.com)
• Re: Gaim festival plugin exploit (HCTITS Security Division <security@...ancentrictech.com>)
• Re: Gaim festival plugin exploit (HCTITS Security Division <security@...ancentrictech.com>)
• Re: Re: Gaim festival plugin exploit (Cael Abal <lists@...you.com>)
• Re: Re: Gaim festival plugin exploit (merlyn@...nehenge.com (Randal L. Schwartz))
• Re: Re: Gaim festival plugin exploit (Valdis.Kletnieks@...edu)

• ByteHoard Directory Traversal Vulnerability ("Sintelli SINTRAQ" <sintraq@...telli.com>)

• JAP Wins Court Victory (Tarapia Tapioco <comesefosse@...ni.firenze.linux.it>)
• Re: JAP Wins Court Victory (Cael Abal <lists@...you.com>)
• Re: JAP Wins Court Victory (Valdis.Kletnieks@...edu)
• Proof of concept for Windows Messenger Service overflow ("Hanabishi Recca" <recca@...l.ru>)
• PHP-Nuke Path Disclosure Vulnerability (Bahaa Naamneh <b_naamneh@...mail.com>)
• IE remote code execution (Marcin Ulikowski <r3b00t@...pl>)
• Opera HREF escaped server name overflow ("@stake Advisories" <advisories@...take.com>)
• @stake tool announcement: RedFang 2.5: The Bluetooth Hunter ("Ollie Whitehouse" <ollie@...take.com>)
• Geeklog exploit (Jouko Pynnonen <jouko@....fi>)
• Origo ASR-8100 ADSL router remote factory reset (Theo Markettos <theo@...kettos.org.uk>)
• eMule 2.2 [0.29c] - Web Control Panel - DOS(Denial Of Service) ("The-Insider" <nuritrv18@...eqint.net>)
• Re: Multiple Heap Overflows in FTP Desktop (Vlad M <v_lion_77@...l.ru>)
• ZH2003-31SA (security advisory): file inclusion vulnerability in cpCommerce (Astharot <secfoc@...il.it>)
• Unpatched Internet Explorer Bugs (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Re: IE remote code execution (K-OTiK Security <Special-Alerts@...tik.com>)
• [ANNOUNCE] mod_security 1.7 released (Ivan Ristic <ivanr@...kreator.com>)
• [OpenPKG-SA-2003.045] OpenPKG Security Advisory (ircd) (OpenPKG <openpkg@...npkg.org>)
• Multiple SQL Injection Vulnerabilities in DeskPRO (Aviram Jenik <aviram@...ondsecurity.com>)
• Re: Gaim festival plugin exploit (merlyn@...nehenge.com (Randal L. Schwartz))
• Get admin level on Goldlink script v3.0 ("Weke" <weke@...gramas-hacker.com>)
• Re: IE remote code execution (Jouko Pynnonen <jouko@....fi>)
• Re: Gaim festival plugin exploit (merlyn@...nehenge.com (Randal L. Schwartz))
• Cross Site Java applets (Marc Schoenefeld <schonef@...-muenster.de>)

• Re: Gaim festival plugin exploit ("Randal L. Schwartz" <merlyn@...nehenge.com>)
• Re: [Cert-lists] Re: Re: Gaim festival plugin exploit (Georg Moritz <georg.moritz@...alis.com>)
• Re: ByteHoard Directory Traversal Vulnerability ("VeNoMouS" <venom@...-x.co.nz>)
• Potential DoS in WinSyslog/MonitorWare Agent Interactive Syslog Server (Rainer Gerhards <rgerhards@...adiscon.com>)
• Re: JAP Wins Court Victory ("David Howe" <DaveHowe@....sharp-uk.co.uk>)
• SANS Top 20 [scanned] (Veit Wahlich <cru@...net.de>)
• Gast Arbeiter Privilege Escalation (<natok@...h.com>)
• RE: IE remote code execution ("Thor Larholm" <thor@...x.com>)
• Immunix Secured OS 7+ fetchmail update (Immunix Security Team <security@...unix.com>)
• SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version ("Sintelli SINTRAQ" <sintraq@...telli.com>)
• OpenServer 5.0.5 : Insecure creation of files in /tmp (security@....com)
• IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (Marc Schoenefeld <schonef@...-muenster.de>)

• Web Wiz Forums ver. 7.01 (HEX <hex@....net.ru>)
• MS03-046 Microsoft Exchange 2000 Heap Overflow (H D Moore <sflist@...italoffense.net>)
• IE6 CSS-Crash (Andreas Boeckler <abo@...lands.de>)
• mah-jong[v1.4]: server/client remote buffer overflow exploit. (Vade 79 <v9@...ehalo.deadpig.org>)
• [CLA-2003:768] Conectiva Security Announcement - fileutils (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Web Wiz Forums ver. 7.01 (<bruce@...wizguide.info>)
• Re: IE6 CSS-Crash (xenophi1e <oliver.lavery@...patico.ca>)
• [CLA-2003:769] Conectiva Security Announcement - sane (Conectiva Updates <secure@...ectiva.com.br>)
• "Local" and "Remote" considered insufficient ("Steven M. Christey" <coley@...re.org>)

• Re: Re: Gaim festival plugin exploit (Brian Hatch <full-disclosure@...kr.org>)
• Re: Re: Gaim festival plugin exploit (merlyn@...nehenge.com (Randal L. Schwartz))
• [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (Last Stage of Delirium <contact@...-pl.net>)
• Re: "Local" and "Remote" considered insufficient (Ejovi Nuwere <ejovi@...vi.net>)
• Shatter XP (xenophi1e <oliver.lavery@...patico.ca>)
• CensorNet: Cross Site Scripting Vulnerability ("Richard Maudsley" <maudr001@...m.org>)
• Re: "Local" and "Remote" considered insufficient ("Eric Knight" <eric@...rdsoft.com>)
• (Fw) : mIRC 6.12 (latest) DCC Exploit (K-OTiK Security <Special-Alerts@...tik.com>)
• Re: "Local" and "Remote" considered insufficient (Florian Weimer <fw@...eb.enyo.de>)
• RE: Re: Gaim festival plugin exploit ("Scott Phelps / Dreamwright Studios" <scottp@...amwright.com>)
• NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.c…)

• About eMule web server "Buffer Overflow" discovered vulnerability ("Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@...g-security.com>)
• HTML Help API - Privilege Escalation ("Brett Moore" <brett.moore@...urity-assessment.com>)
• Internet Explorer and Opera local zone restriction bypass ("Mindwarper *" <mindwarper@...uxmail.org>)
• [CLA-2003:771] Conectiva Security Announcement - anonftp (Conectiva Updates <secure@...ectiva.com.br>)
• XLS Attack on AES (Rijndael) (<latte1@...hmail.com>)

• Re: Internet Explorer and Opera local zone restriction bypass (Jort Slobbe <jortslobbe@...net.nl>)
• Re: XLS Attack on AES (Rijndael) (Michael Sierchio <kudzu@...ebras.com>)
• SiteKiosk terminal software (Zrekam <zrekam@...systems.com>)
• Vulnerability in MERCUR Mail Server v4.2 SP3 and below (Kostya KORTCHINSKY <kostya.kortchinsky@...ater.fr>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Thor Larholm" <thor@...x.com>)
• Advanced Poll : PHP Code Injection, File Include, Phpinfo ("Frog Man" <leseulfrog@...mail.com>)
• Re: RE: Internet Explorer and Opera local zone restriction bypass (jelmer <jkuperus@...net.nl>)
• Some serious security holes in 'The Bat!' (bipin gautam <visitbipin@...oo.com>)

• Java 1.4.2_02 InsecurityManager JVM crash (Marc Schoenefeld <schonef@...-muenster.de>)
• Re: Internet Explorer and Opera local zone restriction bypass (psz@...hs.usyd.edu.au (Paul Szabo))

• Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (Alla Bezroutchko <alla@...nit.be>)
• Re: SiteKiosk terminal software (Godwin Stewart <gstewart@...mcop.net>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Thor Larholm" <thor@...x.com>)
• Buffer Overflow in Yahoo messenger Client (Hat-Squad Security Team <service@...-squad.com>)
• Re: a dangerous fast spreading (yet simple) trojan horse. (K-OTiK Security <Special-Alerts@...tik.com>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Mindwarper *" <mindwarper@...uxmail.org>)
• sh-httpd `wildcard character' vulnerability ("dong-h0un U" <xploit@...kermail.com>)
• New Vulnerability ("Joshua P. Miller" <jpmiller@....net>)
• Musicqueue multiple local vulnerabilities ("dong-h0un U" <xploit@...kermail.com>)
• a dangerous fast spreading (yet simple) trojan horse. ("Gadi Evron" <ge@...tistical.reprehensible.net>)
• Re: Internet Explorer and Opera local zone restriction bypass (jelmer <jkuperus@...net.nl>)
• Re: XLS Attack on AES (Rijndael) (Christian Ruediger Bahls <christian.bahls@....de>)
• Dansie Shopping Cart Discloses Installation Path to Remote Users ("Dr`Ponidi Haryanto" <drponidi@...kermail.com>)
• Re: Internet Explorer and Opera local zone restriction bypass (Mohsen Hariri <mohsen_hariri@...oo.com>)
• Re: Internet Explorer and Opera local zone restriction bypass (Heikki Toivonen <hjtoi@...cast.net>)
• Re: Internet Explorer and Opera local zone restriction bypass (psz@...hs.usyd.edu.au (Paul Szabo))
• Some serious security holes in 'The Bat!' (Bipin Gautam hUNT3R <door_hunt3r@...ckcodemail.com>)
• MDKSA-2003:096-1 - Updated apache2 packages fix CGI scripting deadlock (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Libnids <= 1.17 buffer overflow (rafal.wojtczuk@...lls.com (Rafal Wojtczuk))
• SGI Advanced Linux Environment security update #4 (SGI Security Coordinator <agent99@....com>)
• SGI Advanced Linux Environment security update #3 (SGI Security Coordinator <agent99@....com>)
• Norton Internet Security 2003 XSS (DigitalPranksters <secteam@...italpranksters.com>)
• SGI Advanced Linux Environment security update #2 (SGI Security Coordinator <agent99@....com>)
• Re: CensorNet: Cross Site Scripting Vulnerability ("Dan Searle" <dan.searle@...lix.com>)
• Les Visiteurs v2.0.1 code injection vulnerability (Matthieu Peschaud <bugtrack@...zwam.net>)
• Re: Java 1.4.2_02 InsecurityManager JVM crash (Francisco Andrades <fandrades@...tj.com>)
• Re: a dangerous fast spreading (yet simple) trojan horse. (Andreas Reich <cyraxx@...ntion.de>)
• Re: CensorNet: Cross Site Scripting Vulnerability ("Richard Maudsley" <maudr001@...m.org>)
• Root Directory Listing on RH default apache (<tfm@....org>)
• Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation (Marc Schoenefeld <schonef@...-muenster.de>)
• Re: Internet Explorer and Opera local zone restriction bypass (Andreas Sandblad <sandblad@....umu.se>)
• Re: Internet Explorer and Opera local zone restriction bypass (Andreas Sandblad <sandblad@....umu.se>)
• Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation ("Michael Earls" <Michael.Earls@...mc.org>)
• Remote overflow in thttpd ("advisories(-at-)texonet.com" <advisories@...onet.com>)
• [slackware-security] fetchmail security update (SSA:2003-300-02) (Slackware Security Team <security@...ckware.com>)
• SGI Advanced Linux Environment security update #2 ("SGI Security Coordinator" <agent99@....com>)
• [slackware-security] gdm security update (SSA:2003-300-01) (Slackware Security Team <security@...ckware.com>)

• Nachi/Welchia/LovSan.D version 2 appears to be spreading ("Young, Keith" <Keith.Young@...tgomerycountymd.gov>)
• Re: Java 1.4.2_02 InsecurityManager JVM crash (Marc Schoenefeld <schonef@...-muenster.de>)
• Re: a dangerous fast spreading (yet simple) trojan horse. (Craig Holmes <Leusent@...olut.intellihost.ca>)
• New DNS Security Paper ("Helen England [SAI]" <helen.england@...nstitute.org>)
• [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache) (OpenPKG <openpkg@...npkg.org>)
• Re: a dangerous fast spreading (yet simple) trojan horse (Now IRC.Trojan.Fgt) (K-OTiK Security <Special-Alerts@...tik.com>)
• Re: Nachi/Welchia/LovSan.D version 2 appears to be spreading ("Peter Kieser" <pfak@...us.net>)
• Re: Internet Explorer and Opera local zone restriction bypass (jelmer <jkuperus@...net.nl>)
• Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability ("Oliver Karow" <Oliver.Karow@....de>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Thor Larholm" <thor@...x.com>)
• [securemac] Local vulnerability: MacOSX Screensaver locking bypass. (kang <kang@...ecure.ws>)
• Mac OS X Systemic Insecure File Permissions ("@stake Advisories" <advisories@...take.com>)
• Mac OS X Arbitrary File Overwrite via Core Files ("@stake Advisories" <advisories@...take.com>)
• Mac OS X Long argv[] buffer overflow ("@stake Advisories" <advisories@...take.com>)
• Local root vuln in kpopup (b0f www.b0f.net <b0fnet@...oo.com>)
• RE: Norton Internet Security Blocked Sites XSS (Sym Security <symsecurity@...antec.com>)
• Wildcard exportfs issue in NFS on IRIX (SGI Security Coordinator <agent99@....com>)
• FirstClass 7.1 HTTP Server: Remote Directory Listing ("Richard Maudsley" <maudr001@...m.org>)
• Re: sh-httpd `wildcard character' vulnerability (Richard Brittain <richard@...thstar.dartmouth.edu>)
• mod_security 1.7RC1 to 1.7.1 vulnerability (Adam Dyga <adeon@...pl>)
• Re: Internet Explorer and Opera local zone restriction bypass (Bipin Gautam hUNT3R <door_hunt3r@...ckcodemail.com>)
• Re: Mac OS X vulnerabilities ("Thor Larholm" <thor@...x.com>)

• Re: sh-httpd `wildcard character' vulnerability (Dave Ahmad <da@...urityfocus.com>)
• [RHSA-2003:199-02] Updated unzip packages fix trojan vulnerability (bugzilla@...hat.com)
• [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla@...hat.com)
• STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability (<advisory@...security.com>)
• possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (itojun@...lab.net)
• TelCondex SimpleWebserver Buffer Overflow ("Oliver Karow" <Oliver.Karow@....de>)
• Re: Mac OS X vulnerabilities ("Joshua Levitsky" <jlevitsk@...hie.com>)
• RE: Mac OS X vulnerabilities ['Virus checked"] ("Thor Larholm" <thor@...x.com>)
• RE: Mac OS X vulnerabilities ['Virus checked"] (graham.coles@...ail-logic.com)
• Re: Root Directory Listing on RH default apache (Stephen Samuel <samuel@...reen.com>)
• Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (Colm MacCarthaigh <colmmacc@...brick.dcu.ie>)
• Re: Mac OS X vulnerabilities ['Virus checked"] (Steve Clement <steve@....lu>)
• Re: Mac OS X vulnerabilities ['Virus checked"] (graham.coles@...ail-logic.com)
• [SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: Mac OS X vulnerabilities ['Virus checked"] (Adam Shostack <adam@...eport.org>)
• Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (der Mouse <mouse@...ents.Montreal.QC.CA>)
• [CLA-2003:773] Conectiva Security Announcement - libnids (Conectiva Updates <secure@...ectiva.com.br>)
• Re: possible issue with IPv4 mapped address and $REMOTE_ADDR in CGI (Colm MacCarthaigh <colmmacc@...brick.dcu.ie>)
• Re: Mac OS X vulnerabilities ['Virus checked"] (Ragnar Sundblad <ragge@...a.kth.se>)
• Re: Mac OS X vulnerabilities ['Virus checked"] (Chris Wysopal <cwysopal@...take.com>)

• E107 DoS vulnerability ("Blademaster" <blademaster@...x.net>)
• Immunix Secured OS 7+ apache update (Immunix Security Team <security@...unix.com>)
• Re: Shortcut...... may cause 100% cpu use!!! (Bipin Gautam <door_hUNT3R@...ckcodemail.com>)
• Re: Shortcut...... may cause 100% cpu use!!! (Tim <tim-security@...tinelchicken.org>)
• Re: Mac OS X vulnerabilities (James Kelly <macubergeek@...cast.net>)
• Re: FirstClass 7.1 HTTP Server: Remote Directory Listing (Graham Morley <GMorley_Public@...stclass.com>)
• [OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql) (OpenPKG <openpkg@...npkg.org>)
• Multiple Vulnerabilities in Led-Forums (ProXy - <proxy@...luded.org>)
• Re: Mac OS X vulnerabilities ['Virus checked"] (Kurt Harvey <k_harvey@....com>)
• Re: Mac OS X vulnerabilities (Radoslav Dejanovic <radoslav.dejanovic@...us.hr>)
• Re: Shortcut...... may cause 100% cpu use!!! (Bipin Gautam <door_hUNT3R@...ckcodemail.com>)
• Re: Shortcut...... may cause 100% cpu use!!! ("Ricky Blaikie" <ricky.blaikie@...vercity.co.uk>)
• Re: Shortcut...... may cause 100% cpu use!!! ("Ricky Blaikie" <ricky.blaikie@...vercity.co.uk>)
• Re: Shortcut...... may cause 100% cpu use!!! ("Maxime Ducharme" <maxime@...dore-design.com>)
• Re: Internet Explorer and Opera local zone restriction bypass (william schulze <was@...romedia.com>)
• IE bug: loading HTML under a graphic file name - summary ("Gadi Evron" <ge@...tistical.reprehensible.net>)
• Re: Mac OS X vulnerabilities (Mike Stark <mstark@...d.edu>)
• RE: Internet Explorer and Opera local zone restriction bypass (Francis Favorini <francis.favorini@...e.edu>)
• Re: Mac OS X vulnerabilities (gabriel rosenkoetter <gr@...ipsed.net>)
• Serious Sam is not so serious (Luigi Auriemma <aluigi@...ervista.org>)
• Re: Mac OS X vulnerabilities (gabriel rosenkoetter <gr@...ipsed.net>)
• Re: Internet Explorer and Opera local zone restriction bypass (psz@...hs.usyd.edu.au (Paul Szabo))
• Re: Mac OS X vulnerabilities (Lyndon Nerenberg <lyndon@...hanc.ca>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Thor Larholm" <thor@...x.com>)

• RE: Internet Explorer and Opera local zone restriction bypass (psz@...hs.usyd.edu.au (Paul Szabo))
• RE: RE: Internet Explorer and Opera local zone restriction bypass ("Jerry Heidtke" <jheidtke@...h.edu>)
• RE: Internet Explorer and Opera local zone restriction bypass ("Thor Larholm" <thor@...x.com>)
• Re: Internet Explorer and Opera local zone restriction bypass (Valdis.Kletnieks@...edu)
• WU-FTPD 2.6.2 Freezer (Angelo Rosiello <angelo.rosiello@...amail.com>)
• Mimail.C (Alan <alan.tennent@...group.com>)
• GLSA: apache (200310-04) (Rajiv Aaron Manglani <rajiv@...too.org>)
• Advisory: Sun's jre/jdk 1.4.2 multiple vulernabilities in linux installers (Stan Bubrouski <stan@....neu.edu>)
• IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scripting ("IRM Advisories" <advisories@...plc.com>)
• VMWare GSX Server Authentication Server Buffer Overflow Vulnerability - Update (Darryl Swofford <dswofford@...g.com>)
• Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue ("advisories" <advisories@...saire.com>)
• Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues ("advisories" <advisories@...saire.com>)
• SUSE Security Announcement: thttpd (SuSE-SA:2003:044) (Thomas Biege <thomas@...e.de>)
• Redirection and refresh parses local file (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• VMware GSX Server and ESX Server OpenSSL vulnerability patches (VMware <vmware-security-alert@...are.com>)
• DoS in Plug and Play Web Server Proxy Server ("Oliver Karow" <Oliver.Karow@....de>)
• Re: Mac OS X vulnerabilities (Adam Shostack <adam@...eport.org>)
• Console Root On OSX up to 10.2.8 (Jason Storm <jms@...ergun.org>)
• Macos 10.2.8 (Adam Shostack <adam@...eport.org>)
• Re: WU-FTPD 2.6.2 Freezer (Seth Arnold <sarnold@...ex.com>)
• Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Thread… (Virginity Security <advisory@...fiweb.d…)

465 messages

Powered by blists - more mailing lists