bugtraq mailing list - 2003/11

Messages by day:

November 1 (9 messages)

• Re: Mimail.C (Denial of Service Attack) (K-OTiK Security <Special-Alerts@...tik.com>)
• New Varient Of Irc Worm Spreading (Craig Holmes <Leusent@...olut.intellihost.ca>)
• Immunix Secured OS 7+ fileutils update (Immunix Security Team <security@...unix.com>)
• Re: WU-FTPD 2.6.2 Freezer (Luca Berra <bluca@...edia.it>)
• Memory-leak vulnerability in EServ/3.00 (d4rkgr3y <d4rk@...uritylab.ru>)
• Re: New Varient Of Irc Worm Spreading ("bob" <hackerbob@....net>)
• BRS WebWeaver 1.06 remote DoS vulnerability (d4rkgr3y <d4rk@...uritylab.ru>)
• Re: WU-FTPD 2.6.2 Freezer (Rossen Petrov <rpetrov@....net>)
• Internet Explorer Vulnerability: Content-Location works with both triple and double slash ("Mindwarper *" <mindwarper@...uxmail.org>)

• Unauthorized access in Web Wiz Forum ("Alexander Antipov" <pk95@...dex.ru>)
• [bWM#014] Cross-Site-Scripting @ pathforwarding domains (multivendor: Strato, 1&1, HostEurope) (<ben.moeckel@...webmasters.net>)
• [bWM#017] Cross-Site-Scripting @ PHPKIT (<ben.moeckel@...webmasters.net>)

• [BUGZILLA] Security Advisory - SQL injection, information leak (David Miller <justdave@...zilla.org>)
• [RHSA-2003:275-01] Updated CUPS packages fix denial of service (bugzilla@...hat.com)
• [RHSA-2003:309-01] Updated fileutils/coreutils package fix ls vulnerabilities (bugzilla@...hat.com)
• ShoutCast server 1.9.2/win32 (HEX <hex@..._net_ru.securityfocus.com>)
• Re: Root Directory Listing on RH default apache ("M.Hirsch" <M.Hirsch@....de>)
• Re: Immunix Secured OS 7+ fileutils update (Seth Arnold <sarnold@...ex.com>)
• Re: Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Thre… (Ron DuFresne <dufresne@...ternet.com>)
• multiple payload handling flaws in isakmpd (Thomas Walpuski <thomas@...nknerd.de>)
• Unichat Vulnerabilities (DarkKnight <mbuzz04@...oo.com>)

• SRT2003-11-02-0115 - NIPrint LPD-LPR Remote overflow (KF <dotslash@...soft.com>)
• SRT2003-11-02-0218 - NIPrint LPD-LPR Local Help API SYSTEM exploit (KF <dotslash@...soft.com>)
• Liteserve Buffer Overflow in Handling Server's Log. ("Tri Huynh" <trihuynh@...up.com>)
• [OpenSSL Advisory] Denial of Service in ASN.1 parsing (Mark J Cox <mark@...nssl.org>)
• MDKSA-2003:103 - Updated apache packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Unauthorized access in Web Wiz Forum (<bruce@...wizguide.info>)
• NIPrint remote exploit (Crazy Einstein <crazy_einstein@...oo.com>)
• Liteserve Buffer Overflow in Handling Server's Log. ("Tri Huynh" <trihuynh@...up.com>)
• [ESA-20031104-029] 'openssl' ASN.1 parsing denial of service (EnGarde Secure Linux <security@...rdiandigital.com>)
• Re: Re: Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) … (Ron DuFresne <dufresne@...ternet.com>)
• MDKSA-2003:102 - Updated postgresql packages fix buffer overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Re: Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads (advisory@...fiweb.de)
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow (security@....com)
• Re: New DNS Security Paper (bmanning@...oshi.com)

• Six Step IE Remote Compromise Cache Attack (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• [slackware-security] apache security update (SSA:2003-308-01) (Slackware Security Team <security@...ckware.com>)
• MSIE clientCaps "isComponentInstalled" and "getComponentVersion" registry information leakage (Sam Schinke <sschinke@...ealbox.com>)
• [ESA-20031105-030] 'apache' buffer overflow in mod_alias and mod_rewrite (EnGarde Secure Linux <security@...rdiandigital.com>)
• IE: double slash moves cache from INTERNET zone to MYCOMPUTER zone (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Multiple SQL Injection Vulnerabilities in Oracle Application Server 9i and RDBMS (#NISR05112003) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("http-equiv@...ite.com" <1@...ware.com>)
• [CLA-2003:774] Conectiva Security Announcement - bugzilla (Conectiva Updates <secure@...ectiva.com.br>)
• RE: double slash moves cache from INTERNET zone to MYCOMPUTER zone ("Thor Larholm" <thor@...x.com>)
• [CLA-2003:775] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
• RE: Six Step IE Remote Compromise Cache Attack ("Thor Larholm" <thor@...x.com>)
• RE: Six Step IE Remote Compromise Cache Attack ("Steve Hillier" <steve@...termindtoys.com>)
• RE: Six Step IE Remote Compromise Cache Attack ("Thor Larholm" <thor@...x.com>)

• RE: Six Step IE Remote Compromise Cache Attack (Benjamin Franz <snowhare@...ongo.org>)
• RE: Six Step IE Remote Compromise Cache Attack (white colin john <cjwhite1@...nx13.ews.uiuc.edu>)
• Re: Six Step IE Remote Compromise Cache Attack (Florian Weimer <fw@...eb.enyo.de>)
• Re: Six Step IE Remote Compromise Cache Attack (Seth Arnold <sarnold@...ex.com>)
• RE: Six Step IE Remote Compromise Cache Attack (psz@...hs.usyd.edu.au (Paul Szabo))
• Re: Six Step IE Remote Compromise Cache Attack (Jelmer <jkuperus@...net.nl>)
• RE: Six Step IE Remote Compromise Cache Attack ("Drew Copley" <dcopley@...e.com>)
• MDKSA-2003:104 - Updated CUPS packages fix denial of service vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Six Step IE Remote Compromise Cache Attack ("http-equiv@...ite.com" <1@...ware.com>)
• Re: RE: Six Step IE Remote Compromise Cache Attack ("Steven M. Christey" <coley@...re.org>)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Kurt Seifried" <kurt@...fried.org>)
• [bWM#017] Cross-Site-Scripting @ PHPKIT (ben moeckel <badwebmasters@...ine.de>)
• RE: Six Step IE Remote Compromise Cache Attack (Tyler Larson <noreply@...rson.com>)
• DoS for Ganglia (Jim Prewett <download@....unm.edu>)
• [CLA-2003:777] Conectiva Security Announcement - thttpd (Conectiva Updates <secure@...ectiva.com.br>)
• Re: RE: Six Step IE Remote Compromise Cache Attack (Paul Schmehl <pauls@...allas.edu>)

• UPDATE: PSK Cracking using IKE Aggressive Mode (Michael Thumann <mlthumann@...-guide.de>)
• [CLA-2003:779] Conectiva Security Announcement - cups (Conectiva Updates <secure@...ectiva.com.br>)
• Re: multiple payload handling flaws in isakmpd (Thomas Walpuski <thomas@...nknerd.de>)
• PowerPortal v1.1b Cross-Site Scripting Vulnerability (David Ferreira <iamroot@...temsecure.org>)
• SRT2003-11-06-0710 - IBM DB2 Multiple local security issues (KF <dotslash@...soft.com>)
• Re: Six Step IE Remote Compromise Cache Attack (Florian Weimer <fw@...eb.enyo.de>)
• [CLA-2003:778] Conectiva Security Announcement - net-snmp (Conectiva Updates <secure@...ectiva.com.br>)
• OpenAutoClassifieds XSS attack (David Ferreira <iamroot@...temsecure.org>)
• [Full-Disclosure] [SECURITY] [DSA 397-1] New PostgreSQL packages fix buffer overflow (debian-security-announce@...ts.debian.org)
• OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7: Multiple vulnerabilities affecting several components of gwxlibs (security@....com)
• OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Various Apache security fixes (security@....com)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III (Art Manion <amanion@...t.org>)
• OpenServer 5.0.7 : OpenSSH: multiple buffer handling problems (security@....com)
• OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Perl cross-site scripting vulnerability. (security@....com)
• terminatorX 3.8.1 local vulnerabilities ("c0wboy@...33" <c0wboy@...cali.it>)
• [CLA-2003:780] Conectiva Security Announcement - ethereal (Conectiva Updates <secure@...ectiva.com.br>)
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow (security@....com)
• OpenLinux: ucd-snmp remote heap overflow (security@....com)
• RE: Six Step IE Remote Compromise Cache Attack ("Steven M. Christey" <coley@...re.org>)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Kurt Seifried" <bt@...fried.org>)

• rpc remote return-into-libc exploit (Jack Trixter <trixterjack@...oo.com>)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III (Mike Healan <mike@...wareinfo.com>)
• OpenLinux: ucd-snmp remote heap overflow (security@....com)
• OpenLinux: Multiple vulnerabilities have reported in Ethereal 0.9.12 (security@....com)
• RE: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Cowperthwaite, Eric" <eric.cowperthwaite@....com>)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("James C. Slora Jr." <Jim.Slora@...a.com>)
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III (teemu schaabl <teemu@...ix.net>)
• sql injection in phpbb (jocanor jocanor <jocanor2002@...mail.com>)
• Re: sql injection in phpbb (Marius Kaase <marius@...se.net>)

• [BUGZILLA] Security Advisory - information leak (David Miller <justdave@...zilla.org>)
• DoS in PureFTPd (Adam Zabrocki <pi3ki31ny@...pl>)
• [SECURITY] [DSA 398-1] New conquest packages fix local conquest exploit (joey@...odrom.org (Martin Schulze))
• nCUBE Server Manager (<bug_hunt@...mail.com>)
• [SECURITY] [DSA 399-1] New epic4 packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Re: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Thor Larholm" <thor@...x.com>)
• SUSE Security Announcement: hylafax (SuSE-SA:2003:045) (krahmer@...e.de (Sebastian Krahmer))
• Directory traversal in The TelCondex SimpleWebserver 2.13.31027 Build 3289. ("nimber" <nimber@...l.ru>)
• [RHSA-2003:323-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• [RHSA-2003:323-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• Re: Six Step IE Remote Compromise Cache Attack (Goetz Babin-Ebell <babin-ebell@...stcenter.de>)
• DailyDose v 1.1 (Alexey Sintsov <huan@...team.spb.su>)
• [SNS Advisory No.69] Eudora "Reply-To-All" Buffer Overflow Vulnerability ("Secure Net Service(SNS) Security Advisory" <snsadv@....co.jp>)
• A resource for the Fake players bug (Luigi Auriemma <aluigi@...ervista.org>)
• Re: DoS in PureFTPd (Jedi/Sector One <j@...eftpd.org>)
• [RHSA-2003:323-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• [RHSA-2003:323-01] Updated Ethereal packages fix security issues (<bugzilla@...hat.com>)
• RE: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Robert C. Auch" <RAuch@...alnetsolutions.net>)
• Symbol Technologies Default WEP KEYS Vulnerability ("Michael Scheidell" <scheidell@...nap.net>)
• Re: Six Step IE Remote Compromise Cache Attack (Byron Sonne <blsonne@...ers.com>)
• Re: sql injection in phpbb (<telli@...ezwiz.com>)
• Re: IE: double slash moves cache from INTERNET zone to MYCOMPUTER zone (3APA3A <3APA3A@...URITY.NNOV.RU>)
• RE: POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• buffer overflow in unace (linux extractor for .ace files) ("Andreas Constantinides (MegaHz)" <megahz@...ahz.org>)
• Re: sql injection in phpbb (Jort Slobbe <jortslobbe@...net.nl>)
• Re: Six Step IE Remote Compromise Cache Attack ("Steven M. Christey" <coley@...re.org>)
• Re: Fw: sql injection in phpbb (Micheal Cottingham <micheal@...healcottingham.com>)
• Gaim IRC Local Account Information Leakage ("'ken'@FTU" <ken@...security.com>)

• [SECURITY] [DSA 400-1] New omega-rpg packages fix local games exploit (joey@...odrom.org (Martin Schulze))
• MDKSA-2003:105 - Updated hylafax packages fix remote root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: sql injection in phpbb (Jayson Anderson <bugtraq@...ick.com>)
• PHP-Coolfile version 1.4 unauthorized access (r00t@...eam.ru)
• RE: Six Step IE Remote Compromise Cache Attack ("Alun Jones" <alun@...is.com>)
• Re[2]: sql injection in phpbb (Alexander GQ Gerasiov <bugtaq@...pp.ru>)
• DoS in PureFTPd - continue. (Adam Zabrocki <pi3ki31ny@...pl>)
• Local PoC exploit for Unace v2.2 ("demz" <demz@...kz.nl>)
• RE: Six Step IE Remote Compromise Cache Attack (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
• HylaFAX - Format String Vulnerability Fixed (Lee Howard <lee.howard@...afax.org>)
• [OpenPKG-SA-2003.048] OpenPKG Security Advisory (postgresql) (OpenPKG <openpkg@...npkg.org>)
• Re: Six Step IE Remote Compromise Cache Attack (Goetz Babin-Ebell <babin-ebell@...stcenter.de>)
• EEYE: Windows Workstation Service Remote Buffer Overflow ("Derek Soeder" <dsoeder@...e.com>)

• Nokia IPSO Script Injection Vulnerability leads to Passive Remote Root, via Network Voyager ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• MS03-048: Thor and unpatched? (psz@...hs.usyd.edu.au (Paul Szabo))
• Serious flaws in bluetooth security lead to disclosure of personal data (Adam Laurie <adam@...roup.co.uk>)
• Re: MS03-048: Thor and unpatched? (Jelmer <jkuperus@...net.nl>)
• Proof of concept for Windows Workstation Service overflow ("Hanabishi Recca" <recca@...l.ru>)
• Gamespy uses DMCA to destroy bug research and full disclosure (Luigi Auriemma <aluigi@...ervista.org>)
• Nokia IPSO Script Injection Vulnerability leads to Passive Remote Root, via Network Voyager ("FishNet Security CSIRT" <CSIRT@...hnetsecurity.com>)
• Insecure handling of procfs descriptors in UnixWare 7.1.1, 7.1.3 and Open UNIX 8.0.0 can lead to local privilege escalat… ("advisories(-at-)texonet.com" <advisori…)
• Frontpage Extensions Remote Command Execution ("Brett Moore" <brett.moore@...urity-assessment.com>)
• The Developer Implications of Windows XP SP2 ("Michael Howard" <mikehow@...rosoft.com>)
• Opera Skinned : Arbitrary File Dropping And Execution (Advisory) (S G Masood <sgmasood@...oo.com>)
• Opera Skinned & Opera Directory Traversal (Additional Details & a Simple Exploit) (S G Masood <sgmasood@...oo.com>)
• Opera Directory Traversal in Internal URI Protocol (Advisory) (S G Masood <sgmasood@...oo.com>)
• UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : Insecure handling of procfs descriptors in UnixWare can lead to local privilege escalation. (security@....com)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (bugzilla@...hat.com)
• Funny article (Paulo Ferreira <paulof@...lsouth.net>)
• RE: [Full-Disclosure] Proof of concept for Windows Workstation Se rvice overflow ("Anderson, Dan" <DanAnderson@...rellgas.com>)
• [CLA-2003:781] Conectiva Security Announcement - mpg123 (Conectiva Updates <secure@...ectiva.com.br>)
• RE: MS03-048: Thor and unpatched? ("Reava, Jeffrey [IT/0200]" <jeffrey.reava@...rmacia.com>)
• Re: Funny article (Valdis.Kletnieks@...edu)
• Re: Funny article (martin f krafft <madduck@...duck.net>)
• Re: [Full-Disclosure] Microsoft prepares security assault on Linux (Jason Coombs <jasonc@...ence.org>)
• Re: Gamespy uses DMCA to destroy bug research and full disclosure ("C Ryll" <carolynryll@...mail.com>)
• [CLA-2003:783] Conectiva Security Announcement - hylafax (Conectiva Updates <secure@...ectiva.com.br>)
• SRT2003-11-11-1151 - clamav-milter remote exploit / DoS (KF <dotslash@...soft.com>)
• [CLA-2003:782] Conectiva Security Announcement - xinetd (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Funny article (martin f krafft <madduck@...duck.net>)
• RE: Funny article (Lance James <lance.james@...bone.com>)
• iwconfig vulnerability - the last code was demaged sending by email ("hekuran doli" <hekuran.doli@...kos.info>)
• RE: Gamespy uses DMCA to destroy bug research and full disclosure ("Ed Carp" <erc@...ox.com>)
• Re: Funny article (dphull@...edu)

• OpenLinux: unzip directory traversal (security@....com)
• RE: Microsoft prepares security assault on Linux ("Jim Harrison \(ISA\)" <jmharr@...rosoft.com>)
• Re: MS03-048: Thor and unpatched? (zybergeek@...cast.net)
• Eudora 6.0.1 attachment spoof (psz@...hs.usyd.edu.au (Paul Szabo))
• Re: Funny article (Mikael Olsson <mikael.olsson@...vister.com>)
• [RHSA-2003:323-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• Re: Re: Funny article (David Maynor <dave@...yspray.com>)
• [RHSA-2003:313-01] Updated PostgreSQL packages fix buffer overflow (bugzilla@...hat.com)
• [RHSA-2003:313-01] Updated PostgreSQL packages fix buffer overflow (bugzilla@...hat.com)
• [RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities (bugzilla@...hat.com)
• [RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities (bugzilla@...hat.com)
• RE: Microsoft prepares security assault on Linux ("Russ" <Russ.Cooper@...on.ca>)
• Re: Funny article (netcat <netcat@...x.co.il>)
• Re: Re: Funny article (Mikael Olsson <mikael.olsson@...vister.com>)
• NSFOCUS SA2003-07: HP-UX Software Distributor Buffer Overflow Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
• Re: Re: Funny article (David Maynor <dave@...yspray.com>)
• Re: Re: Funny article (martin f krafft <madduck@...duck.net>)
• NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
• Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues ("advisories" <advisories@...saire.com>)
• Corsaire Security Advisory: PeopleSoft IScript XSS issue ("advisories" <advisories@...saire.com>)
• [RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities (bugzilla@...hat.com)
• [RHSA-2003:313-01] Updated PostgreSQL packages fix buffer overflow (bugzilla@...hat.com)
• Corsaire Security Advisory: PeopleSoft Gateway Administration servlet path disclosure issue ("advisories" <advisories@...saire.com>)
• terminatorX stack-based overflow (exploit) (<Li0n7@...la.fr>)
• Local PoC exploit terminatorX v3.81 ("demz" <demz@...kz.nl>)
• [RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities (<bugzilla@...hat.com>)
• [RHSA-2003:313-01] Updated PostgreSQL packages fix buffer overflow (<bugzilla@...hat.com>)
• MDKSA-2003:106 - Updated fileutils and coreutils packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities (bugzilla@...hat.com)
• [RHSA-2003:313-01] Updated PostgreSQL packages fix buffer overflow (bugzilla@...hat.com)
• Re: Re: Funny article (Ron DuFresne <dufresne@...ternet.com>)
• Re: Re: Funny article ("Ryan Johnson" <rjohnson@...group.net>)
• [Exploit]: Microsoft FPSE fp30reg.dll Overflow Remote Exploit (MS03-051) (Adik <netninja@...mail.kg>)
• Re: Microsoft prepares security assault on Linux (Jason Coombs <jasonc@...ence.org>)
• Re: Microsoft prepares security assault on Linux (Jason Coombs <jasonc@...ence.org>)
• SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit (KF <dotslash@...soft.com>)
• [CLA-2003:784] Conectiva Security Announcement - postgresql (Conectiva Updates <secure@...ectiva.com.br>)
• Web Wiz Forums ver. 7.01 (HEX <hex@....net.ru>)
• Webwasher Classic Error-Message XSS Vulnerability ("Oliver Karow" <Oliver.Karow@....de>)
• Minor OpenSSH/pam vuln (non-exploitable) (<das@...isionsoft.com>)
• RE: Microsoft prepares security assault on Linux ("Russ" <Russ.Cooper@...on.ca>)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (bugzilla@...hat.com)
• RE: Microsoft prepares security assault on Linux ("Jim Harrison \(ISA\)" <jmharr@...rosoft.com>)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (bugzilla@...hat.com)
• RE: Secure Network Operations SRT2003-11-13-0218, PCAnywhere allows local users to become SYSTEM (Sym Security <symsecurity@...antec.com>)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (bugzilla@...hat.com)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (bugzilla@...hat.com)
• [RHSA-2003:325-01] Updated glibc packages provide security and bug fixes (<bugzilla@...hat.com>)

• Re: Serious flaws in bluetooth security lead to disclosure of personal data (Pentest Security Advisories <alerts@...test.co.uk>)
• Re: Funny article ("Steven M. Christey" <coley@...re.org>)
• Re: Serious flaws in bluetooth security lead to disclosure of personal data (Andreas Steinmetz <ast@...dv.de>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (Jordan Wiens <jwiens@...sp.nerdc.ufl.edu>)
• Re: Funny article (martin f krafft <madduck@...duck.net>)
• Re: Serious flaws in bluetooth security lead to disclosure of personal data (Adam Laurie <adam@...roup.co.uk>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (Pentest Security Advisories <alerts@...test.co.uk>)
• [quagga-users 906] Quagga remote vulnerability (Paul Jakma <paul-p3WKshh8b8w@...lic.gmane.org>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (<srenna@...music.com>)
• Re: Re: Funny article (vb@...tpanic.ulm.ccc.de)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (fulldisc <fulldisc@...es.com>)
• Re: Re: Funny article (Ron DuFresne <dufresne@...ternet.com>)
• PHPlist, file injection vulnerability (Michiel Dethmers <secfoc@...u.co.uk>)
• RE: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Schmehl, Paul L" <pauls@...allas.edu>)
• Re: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data (nosp <nosp@...es.com>)
• Re: Funny article (Systems Administrator <sysadmin@...et.com.au>)
• Re: Web Wiz Forums ver. 7.01 (<bruce@...wizguide.info>)
• Re: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Kurt Seifried" <listuser@...fried.org>)
• Re: Funny article (Doug <dmr@...osticjihad.com>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Jordan Wiens" <jwiens@...sp.nerdc.ufl.edu>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Kurt Seifried" <bt@...fried.org>)
• Re: Web Wiz Forums ver. 7.01 ("Thor" <thor@...merofgod.com>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Kurt Seifried" <listuser@...fried.org>)
• Vulnerability Disclosure Formats (was "Re: Funny article") ("Steven M. Christey" <coley@...re.org>)

• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data ("Jordan Wiens" <jwiens@...sp.nerdc.ufl.edu>)
• Re: Re: Serious flaws in bluetooth security leadto disclosure of personal data ("nosp" <nosp@...es.com>)
• RE: Re: Serious flaws in bluetooth security lea d to disclosure of personal data (Tom Arseneault <TArseneault@...nterpane.com>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (Bob Johnson <bob88@....ufl.edu>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (Pentest Security Advisories <alerts@...test.co.uk>)
• RE: Vulnerability Disclosure Formats (was "Re: Funny article") ("Russ" <Russ.Cooper@...on.ca>)
• UnAce 2.20 Exploitable Stack-Based Overflow (exploit code) (<Li0n7@...la.fr>)
• idsearch.com and googleMS.DLL (trappers <trappers@...l15.com>)
• [Exploit]: Microsoft FPSE fp30reg.dll Overflow Remote Exploit (MS03-051) (Adik <netninja@...mail.kg>)
• pServ 2.0.x:beta webserver remote buffer overflow exploit by jsk (yan feng <jsk@...nt0m.net>)
• Re: Serious flaws in bluetooth security lead to disclosure of personal data (Pentest Security Advisories <alerts@...test.co.uk>)

• Senseless Buffer Overflow in SNOSOFT.COM IDS Suite ("snosoft@...lip.com" <snosoft@...lip.com>)
• Re: Senseless Buffer Overflow in SNOSOFT.COM IDS Suite (KF <dotslash@...soft.com>)
• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (Ron DuFresne <dufresne@...ternet.com>)

• Re: Re: Serious flaws in bluetooth security lead to disclosure of personal data (fulldisc <fulldisc@...es.com>)
• RE: Re: Serious flaws in bluetooth security lea d to disclosure of personal data (PPowenski@....com)
• phpWebFileManager v2.0.0 - Directory traversal (r00t@...eam.ru)
• [SECURITY] [DSA 402-1] New minimalist package fixes remote command execution (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit (joey@...odrom.org (Martin Schulze))
• SAP DB priv. escalation/remote code execution ("@stake Advisories" <advisories@...take.com>)
• Re: idsearch.com and googleMS.DLL (Jelmer <jkuperus@...net.nl>)
• Rolis Guestbook v1.0 - PHP injection (r00t@...eam.ru)
• SAP DB web-tools multiple issues (Chris Wysopal <cwysopal@...take.com>)
• Re:Gamespy uses DMCA to destroy bug research and full l disclosure (Anatoly Volynets <av@...al-knowledge.com>)
• Multiple vulnerability in NetServe 1.0.7 ("nimber" <nimber@...l.ru>)
• PCL-0002: Session Hijacking in "Sqwebmail" (Vincenzo Ciaglia <puccio@...ciolab.org>)
• OpenLinux: Key validity bug in GnuPG 1.2.1 and earlier (security@....com)
• Re: VMWare GSX Server Authentication Server Buffer Overflow Vulnerability - Update (VMware <vmware-security-alert@...are.com>)
• Re: PCL-0002: Session Hijacking in "Sqwebmail" (Christophe Casalegno <christophe.casalegno@...ital-network.net>)
• OpenLinux: Webmin/Usermin Session ID Spoofing Vulnerability (security@....com)
• OpenLinux: Sendmail prescan remotely exploitable vulnerability (security@....com)

• OpenLinux: Sendmail prescan remotely exploitable vulnerability (security@....com)
• OpenLinux: Linux NFS utils package contains remotely exploitable off-by-one bug (security@....com)
• Security researchers organization ("Thor Larholm" <thor@...x.com>)
• SUSE Security Announcement: sane (SuSE-SA:2003:046) (Thomas Biege <thomas@...e.de>)
• Re: idsearch.com and googleMS.DLL (Gary Flynn <flynngn@....edu>)
• Apple Safari 1.1 (v100) (Austin Gilbert <austin@...akingrobots.net>)
• Re: Vulnerability Disclosure Formats (was "Re: Funny article") (Javier Fernandez-Sanguino <jfernandez@...minus.com>)
• Re: Funny article (Javier Fernandez-Sanguino <jfernandez@...minus.com>)
• OpenBSD kernel holes ... (noir@...rhax0r.net)
• Re: Security researchers organization ("http-equiv@...ite.com" <1@...ware.com>)
• [RHSA-2003:288-01] Updated XFree86 packages provide security and bug fixes (bugzilla@...hat.com)
• Re: OpenBSD kernel holes ... (Steve Tornio <steve@...riol.net>)
• Re: OpenBSD kernel holes ... (noir@...rhax0r.net)
• FW: Security researchers organization ("Keving Wong" <kevin.wong@....co.uk>)
• Re: Security researchers organization ("Steven M. Christey" <coley@...re.org>)
• Re: OpenBSD kernel holes ... (Coleman Kane <cokane@...ane.org>)

• Re: OpenBSD kernel holes ... (noir@...rhax0r.net)
• Re: Apple Safari 1.1 (v100) (Christian Horchert <chorchert@...dev.de>)
• YAK! 2.1.0 still vulnerable (bil <bil_912@...lgoose.com>)
• [securitylab.ru & security.nnov] Kerio Winroute Firewall Xroxy problem (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Half Life dedicated server information leak and DoS (3APA3A <3APA3A@...URITY.NNOV.RU>)
• RE: Security researchers organization (Jeremy Epstein <jeremy.epstein@...methods.com>)
• Router Worm? (Chris Strom <cstrom@....com>)
• MDKSA-2003:107 - Updated glibc packagess fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Security researchers organization (John C Borkowski III <borkowsj@...war.navy.mil>)
• Microsoft SharePoint Portal and Team Services (<arkanian@...ker.am>)
• IA WebMail 3.x PoC (Peter Winter-Smith <peter4020@...mail.com>)
• HPUX dtmailpr buffer overflow vulnerability (Davide Del Vecchio <dante@...ghieri.org>)
• Re: Router Worm? (Fred Laxton <securitynotice@...ton.net>)
• Re: Router Worm? (Niels Bakker <niels=bugtraq@...ker.net>)
• SGI Advanced Linux Environment security update #5 (SGI Security Coordinator <agent99@....com>)
• Re: IA WebMail 3.x PoC Code (Peter Winter-Smith <peter4020@...mail.com>)

• Re: Security researchers organization (Crispin Cowan <crispin@...unix.com>)
• Re: Router Worm? (Jay Jacobson <jay@...eos.com>)
• GLSA: kdebase (200311-01) (Rajiv Aaron Manglani <rajiv@...too.org>)
• GLSA: apache (200310-03) (Rajiv Aaron Manglani <rajiv@...too.org>)
• GLSA: opera (200311-02) (Rajiv Aaron Manglani <rajiv@...too.org>)
• GLSA: hylafax (200311-03) (Rajiv Aaron Manglani <rajiv@...too.org>)
• [CLA-2003:786] Conectiva Security Announcement - zebra (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Router Worm? (Jose Nazario <jose@...key.org>)
• remote exploit for mod_gzip (with debug_mode) (Crazy Einstein <crazy_einstein@...oo.com>)
• SIRCD: Anyone can set umode +o(oper). (Victor Jerlin <vigge@...ge.fulhack.nu>)
• RE: Router Worm? ("David Gillett" <gillettdavid@...a.edu>)
• [securitylab.ru] EffectOffice Server 2.9 problem ("Alexander Antipov" <antipov@...urityLab.ru>)
• Re: OpenBSD kernel holes ... (Thamer Al-Harbash <tmh@...tefang.com>)
• Remote DoS in FreeRADIUS, all versions. ("Alan DeKok" <aland@...eradius.org>)
• R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service (advisory@...id7.com)
• RE: Router Worm? ("BugTrap" <bugtrap@...ercept.net>)

• [aadams@...urityfocus.com: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] (David Ahmad <da@...urityfocus.com>)
• Xitami Denial of Service in Handling malformed request ("Tri Huynh" <trihuynh@...up.com>)
• DOE Releases Interim Report on Blackouts/Power Outages, Focus on Cyber Security ("Geoff Shively" <gshively@...x.com>)
• Re: Apple Safari 1.1 (v100) (vm_converter <vm_converter@....com>)
• MSN messenger improper file transfer ip-address field parsing (ronan o kane <hi_t3ch_ass4ssin@...mail.com>)
• [SECURITY] Some Debian Project machines have been compromised (Martin Schulze <joey@...odrom.org>)
• DOE Releases Interim Report on Blackouts/Power Outages, Focus on Cyber Security ("Geoff Shively" <gshively@...x.com>)
• help needed with DotGNU security review (was Re: ..researchers org..) (Norbert Bollow <nb@...twareEconomics.biz>)
• FreeRADIUS 0.9.2 "Tunnel-Password" attribute Handling Vulnerability (S-Quadra Security Research <research@...uadra.com>)
• rpc.mountd Vulnerabilities on SGI IRIX (SGI Security Coordinator <agent99@....com>)

• safari dos ("kang@...ecure.ws" <kang@...ecure.ws>)
• PrimeBase SQL Database server cleartext password storage. (fwd) ("Larry W. Cashdollar" <lwc@...id.ath.cx>)
• [SCSA-021] Anonymous Mail Forwarding Vulnerabilities in vbPortal (Gregory LEBRAS <gregory.lebras@...urity-corporation.com>)
• Opera directory traversal and buffer overflow (Jouko Pynnonen <jouko@....fi>)
• Re: help needed with DotGNU security review (was Re: ..researchers org..) (Crispin Cowan <crispin@...unix.com>)
• webfs 1.7.x:webserver remote file overflow exploit (use ftpd to mkdir) (yan feng <jsk@...nt0m.net>)
• Re: [aadams@...urityfocus.com: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] (Thilo Schulz <arny@....s.bawue.de>)
• yet another panic() in OpenBSD (noir@...rhax0r.net)
• [Opera 7] Arbitrary File Auto-Saved Vulnerability. (":: Operash ::" <nesumin@...thome.net>)

• Infinite JavaScript Loop (Christian Horchert <chorchert@...dev.de>)
• Re: safari dos ("Grant Husbands" <fulldisclosure@...nt.x43.net>)
• GCC 3.2.3 Linker error while compiling appz using <errno.h> (maybe glibc error) (Radosław Ejsmont <rejsmont@...smont.eu.org>)
• RE: safari dos ("Grant Husbands" <grant.husbands@...inesswebsoftware.com>)

• [RHSA-2003:342-01] Updated EPIC packages fix security vulnerability (bugzilla@...hat.com)
• [RHSA-2003:316-01] Updated iproute packages fix local security vulnerability (bugzilla@...hat.com)
• [RHSA-2003:296-01] Updated stunnel packages available (bugzilla@...hat.com)
• [RHSA-2003:311-01] Updated Pan packages fix denial of service vulnerability (bugzilla@...hat.com)
• Monit 4.1 HTTP interface multiple security vulnerabilities (S-Quadra Security Research <e.legerov@...uadra.com>)
• Re: yet another panic() in OpenBSD (Henning Brauer <henning@...nbsd.org>)
• [CommerceSQL] Remote File Read Vulnerability (Mariusz Ciesla <craig@...bit.pl>)
• simple buffer overflow in gedit (Andreas "Constantinides (MegaHz)" <megahz@...ahz.org>)
• Thomnson TCM315 Denial of service (Administrador de ShellSec <admin@...llsec.net>)
• New version of ike-scan (IPsec IKE scanner) available - v1.5.1 (Roy Hills <Roy.Hills@...-monitor.com>)
• Re: DOE Releases Interim Report on Blackouts/Power Outages, Focus on Cyber Security (Charley Hamilton <chamilto@....edu>)
• Unhackable network really unhackable? (ジースポート　黒田 <akuroda@....nisiq.net>)
• Re: [aadams@...urityfocus.com: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] (Matt Zimmerman <mdz@...ian.org>)
• RE: DOE Releases Interim Report on Blackouts/Power Outages, Focus on Cyber Security ("Russ" <Russ.Cooper@...on.ca>)
• RE: DOE Releases Interim Report on Blackouts/Power Outages, Focus on Cyber Security (Richard.Bertolett@...austin.tx.us)
• hard links on Linux create local DoS vulnerability and security problems (Jakob Lell <jlell@...obLell.de>)
• Re: hard links on Linux create local DoS vulnerability and security problems (flaps@....toronto.edu (Alan J Rosenthal))
• GLSA: libnids (200311-07) (Andrea Barisani <lcars@...too.org>)
• GLSA: ethereal (200311-04) (Andrea Barisani <lcars@...too.org>)
• GLSA: phpsysinfo (200311-06) (Andrea Barisani <lcars@...too.org>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Brian Bennett <bahamat@...italelf.net>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Bruno Lustosa <bruno@...tosa.net>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Steven Leikeim <steven@...l.ucalgary.ca>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Carl Ekman <calle@...ig.nu>)
• Re: Unhackable network really unhackable? (vb@...tpanic.ulm.ccc.de)
• Re: yet another panic() in OpenBSD (Coleman Kane <cokane@...ane.org>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Casper Dik <casper@...land.sun.com>)
• Re: [Full-Disclosure] hard links on Linux create local DoS vulnerability and security problems (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: hard links on Linux create local DoS vulnerability and security problems ("David F. Skoll" <dfs@...ringpenguin.com>)
• GLSA: glibc (200311-05) (Andrea Barisani <lcars@...too.org>)
• Re: m00-mod_gzip.c (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• RE: Unhackable network really unhackable? ("Bohling James CONT JBC" <james.bohling@....JFCOM.MIL>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Jakob Lell <jlell@...obLell.de>)
• Re: simple buffer overflow in gedit (Matthias Buelow <mkb@...appabeta.de>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Seth Breidbart <sethb@...ix.com>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Trent Petrasek <tpetrasek@...ernap.com>)

• Eudora 6.0.1 LaunchProtect (psz@...hs.usyd.edu.au (Paul Szabo))
• [RHSA-2003:286-01] Updated XFree86 packages provide security and bug fixes (bugzilla@...hat.com)
• [RHSA-2003:287-01] Updated XFree86 packages provide security and bug fixes (bugzilla@...hat.com)
• Re: hard links on Linux create local DoS vulnerability and security problems (vb@...tpanic.ulm.ccc.de)
• Re: hard links on Linux create local DoS vulnerability and security problems ("Zow" Terry Brugger <zow@...l.gov>)
• Re: hard links on Linux create local DoS vulnerability and security problems (Bob Beck <beck@...h.cns.ualberta.ca>)
• Re[2]: hard links on Linux create local DoS vulnerability and security problems (3APA3A <3APA3A@...URITY.NNOV.RU>)
• GLSA 200311-04 (Tim Yamin <plasmaroo@...too.org>)
• CERT Summary CS-2003-04 (CERT Advisory <cert-advisory@...t.org>)
• BackToFramedJpu - a successor of BackToJpu attack (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• IE Remote Compromise by Getting Cache Location (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Note for "Invalid ContentType may disclose cache directory" (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Cache Disclosure Leads to MYCOMPUTER Zone and Remote Compromise (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• [OpenPKG-SA-2003.049] OpenPKG Security Advisory (zebra) (OpenPKG <openpkg@...npkg.org>)
• HijackClickV2 - a successor of HijackClick attack (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• "Security at Microsoft" document available ("Michael Howard" <mikehow@...rosoft.com>)
• New "Clean" IE Remote Compromise (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• MHTML Redirection Leads to Downloading EXE and Executing (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Invalid ContentType may disclose cache directory (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Speedtouch 510 DOS ("Kevin Milne" <kevin.milne@...il.com>)
• SQL Injection (Lifo Fifo <lifofifo20@...oo.com>)

• i want to unsubscribe ("4cray" <4cray@...llo.at>)
• FreeRADIUS <= 0.9.3 rlm_smb module stack overflow vulnerability (S-Quadra Security Research <e.legerov@...uadra.com>)
• RE: unsubscribe ("Esler, Joel - Contractor" <joel.esler@...rt-s.army.mil>)
• GCC 3.2.3 Linker error while compiling appz using <errno.h> (Radosław Ejsmont <rejsmont@...smont.eu.org>)
• Re: Speedtouch 510 DOS ("Kenny Gryp" <gryp@...in.be>)
• MDKSA-2003:108 - Updated stunnel packagess fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• RE: MHTML Redirection Leads to Downloading EXE and Executing ("James C. Slora, Jr." <james.slora@...a.com>)
• Remote execution in My_eGallery ("Bojan Zdrnja" <Bojan.Zdrnja@....hr>)
• SGI ProPack v2.3 security update (SGI Security Coordinator <agent99@....com>)

• Re: Re: hard links on Linux create local DoS vulnerability and security problems (Jeremiah Cornelius <jeremiah@....net>)
• EPIC4 remote client-side stack-based overflow(exploit) (<Li0n7@...la.fr>)
• Re: Re: hard links on Linux create local DoS vulnerability and security problems ("Kurt Seifried" <listuser@...fried.org>)
• [ESA-20031126-031] BIND cache poisoning vulnerability (EnGarde Secure Linux <security@...rdiandigital.com>)
• Re: Re: hard links on Linux create local DoS vulnerability and security problems (Christopher Allene <cwis@...im.fr>)
• GnuPG's ElGamal signing keys compromised (Werner Koch <wk@...pg.org>)
• Re: Unhackable network really unhackable? (Julian Wynne <bugjules@...rkey.org>)
• Immunix Secured OS 7+ bind update (Immunix Security Team <security@...unix.com>)
• SRT2003-TURKEY-DAY - *novelty* - detecttr.c Trace Route detection vulnerability (KF <dotslash@...soft.com>)
• GNU screen buffer overflow (Timo Sirainen <tss@....fi>)
• RNN's Guestbook 1.2 Multiple Vulnerabilities ("BrainRawt" <brainrawt@...worx.com>)
• Re: Speedtouch 510 DOS ("Thomas Chopitea" <tomchop@...gate.com.uy>)
• phpBB 2.06 search.php SQL injection (n.teusink@...net.nl)
• Re: Unhackable network really unhackable? (Niels Bakker <niels-bugtraq@...ker.net>)
• [ANNOUNCE] Python network security tools: Pcapy, Impacket, InlineEgg (CORE Security Technologies <oss@....coresecurity.com>)

• Re: [ANNOUNCE] Python network security tools: Pcapy, Impacket, InlineEgg (Härnhammar, Ulf <Ulf.Harnhammar.9485@...dent.uu.se>)
• Re: Re: [ANNOUNCE] Python network security tools: Pcapy, Impacket, InlineEgg (Ng Pheng Siong <ngps@...memetic.com>)
• [RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla@...hat.com)
• [RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla@...hat.com)
• [OpenCA Advisory] Vulnerabilities in signature verification (Michael Bell <michael.bell@....hu-berlin.de>)
• SUSE Security Announcement: bind8 (SuSE-SA:2003:047) (Thomas Biege <thomas@...e.de>)
• [OpenPKG-SA-2003.050] OpenPKG Security Advisory (screen) (OpenPKG <openpkg@...npkg.org>)
• Multiple Remote Issues in Applied Watch IDS Suite (advisory attached) (research@...antec.bugtraq.org)
• Multiple Remote Issues in Applied Watch IDS Suite (advisory attached) (Bugtraq Security Systems <research@...traq.org>)
• MDKSA-2003:109 - Updated gnupg packages fix vulnerability with ElGamal signing keys (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Multiple Remote Issues in Applied Watch IDS Suite (advisory attached) ("Chris Mann" <christopher@...nebridgebank.com>)
• Applied Watch Response to Bugtraq.org post - Was: Multiple Remote Issues in Applied Watch IDS Suite (advisory attached) (Eric Hines <eric.hines@...liedwatch.com…)
• [Hat-Squad] phpBB search_id injection exploit (Hat-Squad Security Team <service@...-squad.com>)
• TSLSA-2003-0045 - stunnel (Trustix Security Advisor <tsl@...stix.org>)
• TSLSA-2003-0044 - bind (Trustix Security Advisor <tsl@...stix.org>)
• Re: Unhackable network really unhackable? (Crispin Cowan <crispin@...unix.com>)
• Re: phpBB 2.06 search.php SQL injection (Jay Gates <zarath@...ghtsofchaos.com>)
• Re: Speedtouch 510 DOS (Astharot <secfoc@...il.it>)
• Re: phpBB 2.06 search.php SQL injection (n.teusink@...net.nl)

• FreeBSD Security Advisory FreeBSD-SA-03:19.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Re: Multiple Remote Issues in Applied Watch IDS Suite (advisory attached) ("Chris Mann" <christopher@...nebridgebank.com>)
• Pieterpost - access to "vitual" account (datasink@...pl)
• Re: Unhackable network really unhackable? ("Kurt Seifried" <bt@...fried.org>)
• Re: Unhackable network really unhackable? ("Thor" <thor@...merofgod.com>)
• Re: phpBB 2.06 search.php SQL injection (Hat-Squad Security Team <service@...-squad.com>)

446 messages

Powered by blists - more mailing lists