bugtraq mailing list - 2004/03

Messages by day:

March 1 (16 messages)

• [RHSA-2003:175-01] Updated gnupg packages fix validation bug (<bugzilla@...hat.com>)
• RE: [RHSA-2003:175-01] Updated gnupg packages f ix validation bug (John.Airey@...b.org.uk)
• Re: laptop security (Steve Clement <steve@....lu>)
• mremap(2) full details available (Paul Starzetz <ihaquer@...c.pl>)
• Scary Question (Uday Moorjani <umoorjani@...oo.com>)
• RE: laptop security ("David Hajek" <david.hajek@...tinet.com>)
• Re: Scary Question ("Joshua Levitsky" <jlevitsk@...hie.com>)
• Re: Scary Question (indianz@...ianz.ch)
• RE: Scary Question ("Otero, Hernan (EDS)" <HOtero@...chile.cl>)
• Re: RE: laptop security (Cedric Blancher <blancher@...tel-securite.fr>)
• YabbSE (3 on 1) ("backspace" <backspace_2k@...ra.es>)
• Clients broadcast buffer overflow in Red Faction <= 1.20 (Luigi Auriemma <aluigi@...ervista.org>)
• [SECURITY] [DSA 452-1] New libapache-mod-python packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
• mremap(2) full details available (Paul Starzetz <ihaquer@...c.pl>)
• Re: Scary Question ("morning_wood" <se_cur_ity@...mail.com>)
• Motorola T720 cell phone DoS vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)

• Re: New phpBB ViewTopic.php Cross Site Scripting Vulnerability ("t4c [Founder of GHCIF]" <t4c@...if.de>)
• The Cult of a Cardinal Number ("Phantasmal Phantasmagoria" <phantasmal@...h.ai>)
• OpenLinux: Integer overflow may allow local users to cause a denial of service or possibly execute arbitrary code (please_reply_to_security@....com)
• 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance ("Lachniet, Mark" <mlachniet@...uoianet.com>)
• Re: Motorola T720 cell phone DoS vulnerability. ("John T. Larkin" <jlarkin@...inebutterfly.org>)
• SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (<xeno@...h.ai>)
• Format String vuln in Inktomi Search4.0 ("Blurred Vision" <really_blurred_vision@...mail.com>)
• [SECURITY] [DSA 454-1] New Linux 2.2.22 packages fix local root exploit (alpha) (joey@...odrom.org (Martin Schulze))
• [FLSA-2004:1284] Updated kernel resolves security vulnerabilities (Jesse Keating <jkeating@...olutions.net>)
• 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance ("Lachniet, Mark" <mlachniet@...uoianet.com>)
• RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability ("Dennis M. Callan" <dcallan@...ulusit.com>)
• Re: Authentication flaw in Web Wiz forum ("Alexander" <pk95@...dex.ru>)

• Re: Authentication flaw in Web Wiz forum (Bruce Corkhill <bruce@...wizguide.info>)
• Re: Re: Authentication flaw in Web Wiz forum (Bruce Corkhill <bruce@...wizguide.info>)
• Re: [FLSA-2004:1284] Updated kernel resolves security vulnerabilities (Jim Richardson <warlock@...imo.com>)
• The non-apreciated world of full-disclosure ("Davide Del Vecchio" <dante@...ghieri.org>)
• OpenLinux: rsync heap based overflow (please_reply_to_security@....com)
• Re: The Cult of a Cardinal Number (Mark Lowes <hamster@...ftpd.org>)
• OpenLinux: screen buffer overflow (please_reply_to_security@....com)
• OpenLinux: Tcpdump flaws in ISAKMP (please_reply_to_security@....com)
• OpenLinux: Gnupg (gpg) severe bug could compromise almost all ElGamal keys (please_reply_to_security@....com)
• Spider Sales shopping cart software multiple security vulnerabilities (S-Quadra Security Research <research@...uadra.com>)
• New Internet Explorer Cross Zone/Site Scripting Vulnerability (Cheng Peng Su <apple_soup@....com>)
• Wftpd stat Command Remote Vulnerability Exploit (security team 0seen <o5een@...mail.com>)
• directory traversal in GWeb 0.6 ("Donato Ferrante" <fdonato@...istici.org>)
• RE: SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (<xeno@...h.ai>)
• Coreutils 'dir' integer overflow vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
• RE: New Internet Explorer Cross Zone/Site Scripting Vulnerability ("Thor Larholm" <tlarholm@...x.com>)
• RE: SonicWall Firewall DoS, ARP Flood, Network Mapping ("Robert C. Auch" <RAuch@...alnetsolutions.net>)
• SGI Advanced Linux Environment security update #13 (SGI Security Coordinator <agent99@....com>)

• Abobe Reader 5.1 XFDF Buffer Overflow Vulnerability ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• OpenLinux: cups denial of service vulnerability (please_reply_to_security@....com)
• Re: Multiple issues with Mac OS X AFP client (Marukka <marukka@...soleconductor.com>)
• Re: The Cult of a Cardinal Number ("Phantasmal Phantasmagoria" <phantasmal@...h.ai>)
• Cisco Security Advisory: Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability (Cisco Systems Product Security Incident Response T…)
• A new white paper by Sanctum: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related To… (Amit Klein <amit.klein@...ctuminc.com>)
• [SECURITY] [DSA 455-1] New libxml packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• MDKSA-2004:018 - Updated libxml2 packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:017 - Updated pwlib packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Serv-U Real Target and Search ASM Code Tool for Overflow Exploit. ("lion" <lion@...onker.net>)
• SHOUTcast v1.9.2 remote connect back exploit (0seen security team <o5een@...mail.com>)
• Nokia 3410 cell phones software flaw (David Arranz <keyser@....lonestar.org>)
• RE: Wftpd stat Command Remote Vulnerability Exploit ("Alun Jones" <alun@...is.com>)
• Re: Nokia 3410 cell phones software flaw (Erwann Abalea <erwann.abalea@...tplus.com>)
• LNSA-#2004-0004: libxml2 buffer overflow (Vincenzo Ciaglia <ciaglia@...wosix.org>)
• GNU Anubis buffer overflows and format string bugs (Ulf Härnhammar <Ulf.Harnhammar.9485@...dent.uu.se>)

• Re: Multiple issues with Mac OS X AFP client (Stefan Bethke <stb@...situ.de>)
• [FLSA-2004:1256] Updated util-linux resolves security vulnerability (Jesse Keating <jkeating@...olutions.net>)
• SLWebMail Multiple Buffer Overflow Vulnerabilities (#NISR05022004b) ("NGSSoftware Insight Security Research" <nisr@...xgenss.com>)
• SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a) ("NGSSoftware Insight Security Research" <nisr@...xgenss.com>)
• Invision Power Board 1.3 Final Path Disclosure Vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• IEEE Security & Privacy CFP (Sharif Torpis <faust@...ft.com>)
• NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN (NetScreen Security Response Team <security-alert@...screen.com>)
• Re: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related T… (Jeremiah Grossman <jeremiah@...tehatsec…)
• Desert Rats vs. Afrika Korps (Haegemonia bug) (Luigi Auriemma <aluigi@...ervista.org>)
• Re: Invision Power Board 1.3 Final Path Disclosure Vulnerability (JeiAr <security@...ftech.org>)
• VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Infosecdaily.net: Expanding our blogging community. (Ejovi Nuwere <ejovi@...vi.net>)
• Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• [OpenPKG-SA-2004.003] OpenPKG Security Advisory (libxml) (OpenPKG <openpkg@...npkg.org>)
• O-088: Sun passwd(1) Command Vulnerability (Cy Schubert <Cy.Schubert@...quats.com>)
• Norton Antivirus 2002 fails to scan files with special character(s) properly. (Bipin Gautam. <door_hunt3r@...ckcodemail.com>)

• Re: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation (Peter Watkins <peterw@....net>)
• Re: Norton Antivirus 2002 fails to scan files with special character(s) properly. ("Marco Marabelli" <mm@...t.it>)
• Re: Norton Antivirus 2002 fails to scan files with ... [2'nd... UPDATED] (Bipin Gautam. <door_hunt3r@...ckcodemail.com>)
• [SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm) (joey@...odrom.org (Martin Schulze))
• TSLSA-2004-0009 - nfs-utils (Trustix Security Advisor <tsl@...stix.org>)
• TSLSA-2004-0010 - libxml2 (Trustix Security Advisor <tsl@...stix.org>)
• Safari javascript array overflow (kang <kang@...ecure.ws>)

• [ GLSA 200403-01 ] Libxml2 URI Parsing Buffer Overflow Vulnerabilities (Tim Yamin <plasmaroo@...too.org>)
• [ GLSA 200403-02 ] Linux kernel do_mremap local privilege escalation vulnerability (Tim Yamin <plasmaroo@...too.org>)
• RE: "Divide and Conquer" - cross site response header tampering, cookie manipulation, and session fixation (Amit Klein <amit.klein@...ctuminc.com>)
• RE: A new Sanctum white paper: "Divide and Conquer - HTTP Response Splitting, Web Cache Poisoning Attacks, and Related T… (Amit Klein <amit.klein@...ctuminc.com>)

• Symlink Vulnerability in GNU automake <1.8.3 (Stefan Nordhausen <deletethis.nordhaus@...ormatik.hu-berlin.de>)
• [OpenPKG-SA-2004.004] OpenPKG Security Advisory (libtool) (OpenPKG <openpkg@...npkg.org>)
• directory traversal in PWebServer 0.3.3 ("Donato Ferrante" <fdonato@...istici.org>)
• RE: VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity ("Ravish" <ravish@...uxadvisory.com>)
• Z***ING EMAILS ! ("http-equiv@...ite.com" <1@...ware.com>)
• Antivir for Freebsd doesn't work on 5.X (George Swentek <george@...ntek.mine.nu>)
• RE: Desert Rats vs. Afrika Korps (Haegemonia bug) ("Drew Copley" <dcopley@...e.com>)

• Re: Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity (JeiAr <security@...ftech.org>)
• IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) (OpenPKG <openpkg@...npkg.org>)
• Invision Power Board v1.3 Final Cross Site Scripting 2 - Addon ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Establishing contact with Nullsoft ("Peter Winter-Smith" <peter4020@...mail.com>)
• Ghost users in Chat Anywhere 2.72 (Luigi Auriemma <aluigi@...ervista.org>)

• [RHSA-2004:075-01] Updated kdelibs packages resolve cookie security issue (bugzilla@...hat.com)
• [RHSA-2004:093-01] Updated sysstat packages fix security vulnerabilities (bugzilla@...hat.com)
• [RHSA-2004:102-01] Updated gdk-pixbuf packages fix denial of service vulnerability (bugzilla@...hat.com)
• Re: IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) (Marc Bejarano <bugtraq@...j.org>)
• MDKSA-2004:019 - Updated python packages fix buffer overflow vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [SECURITY] [DSA 458-1] New python2.2 packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• MDKSA-2004:021 - Updated mozilla packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Format string bug in EpicGames Unreal engine (Luigi Auriemma <aluigi@...ervista.org>)
• Outlook mailto: URL argument injection vulnerability (Jouko Pynnonen <jouko@....fi>)
• MDKSA-2004:022 - Updated kdelibs packages fix cookie theft vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• GNU Anubis 3.6.2 remote root exploit ("Claes M Nyberg" <md0claes@...tud.chalmers.se>)
• DoS in wMCam server 2.1.348 ("Donato Ferrante" <fdonato@...istici.org>)
• With regards to the Adobe Acrobat Reader advisory (#NISR03022004) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities (Brandon Sturgeon <brandon@...tware602.com>)
• Re: HP printers and currency anti-copying measures (Dan Harkless <bugtraq@...kless.org>)
• [SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug (Matt Zimmerman <mdz@...ian.org>)
• Re: HP printers and currency anti-copying measures (Dana Hudes <dhudes@...-ip.info>)

• [SECURITY] [DSA 460-1] New sysstat packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
• Possible Netsky.k Netsky.L attack on March 11, 2004 .. (<dotsecure@...hmail.com>)
• Unreal engine updates and Battle Mages advisory (Luigi Auriemma <aluigi@...ervista.org>)
• Multiple Vulnerabilities in PWS 0.2.2 ("Donato Ferrante" <fdonato@...istici.org>)
• RE: Outlook mailto: URL argument injection vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• XSS in MyProxy 20030629 ("Donato Ferrante" <fdonato@...istici.org>)
• [SECURITY] [DSA 461-1] New calife packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• Re: Outlook mailto: URL argument injection vulnerability MS04-009 (Now CRITICAL) ! (K-OTiK Security <Special-Alerts@...tik.com>)
• Re: Norton AntiVirus 2002 fails to scan files with ... [2'nd... UPDATED] Message-ID: 20040306040833.28300 (Sym Security <symsecurity@...antec.com>)
• Cpanel 8.*.* have a problem ? (Arab VieruZ <arabviersus@...mail.com>)
• Announcing full functional adore-ng rootkit for 2.6 Kernel (stealth <stealth@...fault.net>)
• Re: Format string bug in EpicGames Unreal engine (Sebastian "Käppler" <sebastiankaeppler@....de>)
• Multiple vulnerabilities in Hushmail.com ("Calum Power" <enune@...h.ai>)
• Re: Unreal engine updates and Battle Mages advisory (Todd Chapman <tchapman@...ninedev.com>)

• cPanel Secuirty Advisory CPANEL-2004:01-01 ("J. Nick Koston" <nick@...nel.net>)
• MS Security Response is a bunch of half-witted morons (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities (S-Quadra Security Research <research@...uadra.com>)
• [OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview) (OpenPKG <openpkg@...npkg.org>)
• Metamail 'extcompose' script Symlink Vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks (Fable <fable@...h.com>)
• Re: MS Security Response is a bunch of half-witted morons (Walter Wart <ribbit@...akeasy.net>)
• SGI Advanced Linux Environment security update #14 (SGI Security Coordinator <agent99@....com>)
• Cpanel 9.1.0 have a problem ? (Arab VieruZ <arabviersus@...mail.com>)
• Re: MS Security Response is a bunch of half-witted morons (Kim Scarborough <kjs@...icago.edu>)
• PLAXO: is that a cure or a disease? ("http-equiv@...ite.com" <1@...ware.com>)
• Re: MS Security Response is a bunch of half-witted morons ("Charles J. Wertz" <wertzcj@...fnet.net>)
• Re: MS Security Response is a bunch of half-witted morons (jim_walsh@...dyear.com)

• Re: MS Security Response is a bunch of half-witted morons (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• [SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt (Matt Zimmerman <mdz@...ian.org>)
• phpBB 2.0.6d && Earlier Security Issues (JeiAr <security@...ftech.org>)
• RE: Re: MS Security Response is a bunch of half-witted morons ("Aditya, ALD [Aditya Lalit Deshmukh]" <aditya.deshmukh@...ine.gateway.technolabs.net>)

• [SCAN Associates Sdn Bhd Security Advisory] phpBB 2.0.6 and below sql injection (pokley <pokleyzz@...n-associates.net>)

• Re: Re: MS Security Response is a bunch of half-witted morons (Valdis.Kletnieks@...edu)
• Re: Re: Multiple issues with Mac OS X AFP client (Matt Burnett <marukka@....com>)
• Multiple Vendor SOAP server array DoS (Amit Klein <amit.klein@...ctuminc.com>)
• VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Rosiello Security's exploit for MDaemon (Angelo Rosiello <angelo.rosiello@...amail.com>)
• ws_ftp overflow (john layman <john@...erteq.net>)
• Re: Multiple Vulnerabilities in PWS 0.2.2 (Jan De Luyck <ml@...re.org>)
• Multiple Immunity Advisories (Dave Aitel <dave@...unitysec.com>)
• YaBB/YaBBse Cross Site Scripting Vulnerability (Cheng Peng Su <apple_soup@....com>)
• Opera Array Allocation Managment Exploit (d3thStaR <d3thStaR@...tthief.com>)
• spamblocker turns into mail denial of service (Dana Hudes <dhudes@...-ip.info>)
• Re: spamblocker turns into mail denial of service (Chris Fuhrman <chris.fuhrman@...ci.com>)
• [waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)
• [waraxe-2004-SA#005 - XSS in Php-Nuke 7.1.0 - part 2] (Janek Vind <come2waraxe@...oo.com>)
• [waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)

• Follow-up: Major hack attack on the U.S. Senate (eric <eric@...astrophe.net>)
• Phorum 5.0.3 Beta && Earlier XSS Issues (JeiAr <security@...ftech.org>)
• ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow (S-Quadra Security Research <research@...uadra.com>)
• Re: ws_ftp overflow (nesumin@...thome.net)
• [SECURITY] [DSA 464-1] New gdk-pixbuf packages fix denial of service (joey@...odrom.org (Martin Schulze))
• JelSoft vBulletin Multiple XSS Vulnerabilities (JeiAr <security@...ftech.org>)
• Mambo Open Source Multiple Vulnerabilities (JeiAr <security@...ftech.org>)
• Crafty Game Stack Overflow & Exploit (Angelo Rosiello <angelo.rosiello@...amail.com>)
• Fw: Bilbao Method Exposed ("FraMe" <frame@...palab.com>)
• new security alert #66 issued in Oracle web cache (Pete Finnigan <plsql@...efinnigan.com>)
• Re: Fw: Bilbao Method Exposed (Mark J Cox <mark@....com>)

• PHPX 2.x - 3.2.4 (<gdayworld@...mail.com>)
• RE: YaBB/YaBBse Cross Site Scripting Vulnerability ("Frog Man" <leseulfrog@...mail.com>)
• New OpenSSL releases fix denial of service attacks [17 March 2004] (Mark J Cox <mark@....com>)
• Cisco Security Advisory: Cisco OpenSSL Implementation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• SUSE Security Announcement: openssl (SuSE-SA:2004:007) (thomas@...e.de (Thomas Biege))
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (Marc Bejarano <bugtraq@...j.org>)
• MDKSA-2004:023 - Updated openssl packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [ESA-20040317-003] 'openssl' Denial of Service vulnerabilities. (EnGarde Secure Linux <security@...rdiandigital.com>)
• Re: YabbSE (3 on 1) (David <david@...plemachines.org>)
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (Marc Bejarano <bugtraq@...j.org>)
• FreeBSD Security Advisory FreeBSD-SA-04:05.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004] (Mark J Cox <mark@....com>)
• Re: New OpenSSL releases fix denial of service attacks [17 March 2004] ("Dave Markham" <dave.markham@...erv.net>)
• [ESA-20040317-003] 'openssl' Denial of Service vulnerabilities. (EnGarde Secure Linux <security@...rdiandigital.com>)
• [SECURITY] [DSA 465-1] New openssl packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• [RHSA-2004:121-01] Updated OpenSSL packages fix vulnerabilities (bugzilla@...hat.com)

• Vcard 2.8 uninstall script problem (saudi linux <ksa2ksa@...oo.com>)
• Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities (Aida Escriva-Sammer <aescriva@...too.org>)
• [RHSA-2004:112-01] Updated Mozilla packages fix security issues (bugzilla@...hat.com)
• RE: [RHSA-2004:112-01] Updated Mozilla packages fix security issu es (John.Airey@...b.org.uk)
• ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow (Pentest Security Alerts <alerts@...test.co.uk>)
• Re: PLAXO: is that a cure or a disease? (Stacy Martin <trust@...xo.com>)
• [SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus) (joey@...odrom.org (Martin Schulze))
• [OpenPKG-SA-2004.007] OpenPKG Security Advisory (openssl) (OpenPKG <openpkg@...npkg.org>)
• [waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)
• HOTMAIL / PASSPORT: phishing expedition ("http-equiv@...ite.com" <1@...ware.com>)
• Chrome 1.2.0.0 server crash (Luigi Auriemma <aluigi@...ervista.org>)
• TSLSA-2004-0012 - openssl (Trustix Security Advisor <tsl@...stix.org>)
• TSLSA-2004-0011 - sysstat (Trustix Security Advisor <tsl@...stix.org>)

• mac osx- admin service buffer overflow (<programming_rocks1@...mail.com>)
• EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability ("Marc Maiffret" <mmaiffret@...e.com>)
• Eudora 6.0.3 attachment spoof, LaunchProtect (psz@...hs.usyd.edu.au (Paul Szabo))
• Norton AntiSpam Remote Buffer Overrun (#NISR19042004a) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• Norton Internet Security Remote Command Execution (#NISR19042004b) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• Re: mac osx- admin service buffer overflow (<programming_rocks1@...mail.com>)
• Re: mac osx- admin service buffer overflow (Mathias Wegner <mwegner@...oberlin.edu>)
• Winamp 5.02 Long Filename Buffer Overflow Vulnerability (Tobias Welter <newbie@...ails.ru>)
• Broadcast client buffer-overflow in Terminator 3 1.0 (Luigi Auriemma <aluigi@...ervista.org>)
• Internet Explorer Causing Explorer.exe - Null Pointer Crash ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
• Samba 'smbprint' script tmpfile vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
• Re[2]: ws_ftp overflow (WS_FTP Pro 8.0.3 is vulnerable) (nesumin <nesumin@...thome.net>)

• [ANNOUNCE] Apache HTTP Server 2.0.49 Released (fwd) (je@...ure.net)
• XP SP2 is out (Gadi Evron <ge@...uxbox.org>)
• [Full-Disclosure] iDEFENSE Security Advisory 03.19.04: Borland Interbase admin.ib Administrative Access Vulnerability (idlabs-advisories@...fense.com)
• Re: XP SP2 is *NOT* out - Only the beta release candidate is out (James Garrison <jhg@...ensgroup.com>)
• Re: XP SP2 is out ("Hauskins, S" <stephen@...roup.ucsc.edu>)
• RE: XP SP2 is out ("Larry Seltzer" <larry@...ryseltzer.com>)
• Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b (Sym Security <secure@...antec.com>)
• Re: Samba 'smbprint' script tmpfile vulnerability. ("Gerald (Jerry) Carter" <jerry@...ba.org>)
• Any dissasemblies of the Witty worm yet? (Nicholas Weaver <nweaver@...berkeley.edu>)
• The witty worm (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: The witty worm (Gadi Evron <ge@...tistical.reprehensible.net>)
• Concerning The Recent Invision power Board Issues ("GulfTech Security" <security@...ftech.org>)
• Re: The witty worm (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: Any dissasemblies of the Witty worm yet? (Kostya Kortchinsky <kostya.kortchinsky@...ater.fr>)
• Re: Winamp 5.02 Long Filename Buffer Overflow Vulnerability (b0f www.b0f.net <b0fnet@...oo.com>)
• Apache mod_disk_cache stores client authentication credentials on disk (Andreas Steinmetz <ast@...dv.de>)
• Re: Re: The witty worm (Paul Schmehl <pauls@...allas.edu>)

• Re: The witty worm (Michal Zalewski <lcamtuf@...ttot.org>)
• Re: The witty worm ("http-equiv@...ite.com" <1@...ware.com>)
• RE: Any dissasemblies of the Witty worm yet? ("Disclosure From OSSI" <disclosure@...ecurity.ca>)
• Re: Re: The witty worm ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Re: The witty worm (Mike Barushok <mikehome@...sp.net>)
• RE: XP SP2 is out ("Burton M. Strauss III" <security@...llNetSolutions.com>)
• RE: RE: Any dissasemblies of the Witty worm yet? ("Hugh Mann" <hughmann@...mail.com>)

• RE: XP SP2 is out ("Andrew Shore" <andrew.shore@...istecs.com>)
• Re: XP SP2 is out (Thomas Chiverton <thomas.chiverton@...efinger.com>)
• phpBB profile.php Cross Site Scripting Vulnerability (Cheng Peng Su <apple_soup@....com>)
• DSL Modem Ericsson HM220dp Exploit (Roberto Dapino <roberto@...sign.it>)
• Phpbb 2.0.7a And Earlier Secuity Issues (JeiAr <security@...ftech.org>)
• Invision Gallery SQL Injection Vulnerabilities (JeiAr <security@...ftech.org>)
• xine-check/xine-bugreport symlink vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
• Invision Power Top Site List SQL Injection Vulnerability (JeiAr <security@...ftech.org>)
• directory traversal in xweb 1.0 ("Donato Ferrante" <fdonato@...istici.org>)
• Mod_Survey security advisory: Script injection bug (Joel Palmius <joel.palmius@...se>)

• Vulnerabilities in Member Management System 2.1 ("Manuel Lopez" <mantra@...o.org>)
• Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration ("Manuel Lopez" <mantra@...o.org>)
• RE: Fw: phpBB profile.php Cross Site Scripting Vulnerability ("micheal@...healcottingham.com" <micheal@...healcottingham.com>)
• Open the WS_FTP Server backdoor to SYSTEM ("Hugh Mann" <hughmann@...mail.com>)
• How to crash a harddisk - the Ipswitch WS_FTP Server way ("Hugh Mann" <hughmann@...mail.com>)
• Think of the buffers! Won't somebody think of the buffers?! ("Hugh Mann" <hughmann@...mail.com>)
• Centrinity FirstClass HTTP Server Cross Site Scripting ("Richard Maudsley" <r.i.c.h@...penworld.com>)
• ALLO ALLO WS_FTP Server ("Hugh Mann" <hughmann@...mail.com>)
• ISS 'Witty' Worm Analyzed ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)
• [waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c] (Janek Vind <come2waraxe@...oo.com>)
• [waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0] (Janek Vind <come2waraxe@...oo.com>)
• [waraxe-2004-SA#011 - Multiple vulnerabilities in MS Analysis v2.0 module for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)
• Sarca rainbow tables on-line cracking service (Inode <inode@...reth.eu.org>)
• Remotely Exploitable Cross-Site Scripting in Hotmail and Yahoo (GM#005-MC) (GreyMagic Software <security@...ymagic.com>)
• More Cpanel Vuls (cross site scripting) (Fable <fable@...h.com>)
• Server freeze in The Rage 1.01 (Luigi Auriemma <aluigi@...ervista.org>)
• Advisory 03/2004: Multiple (13) Ethereal remote overflows (Stefan Esser <s.esser@...atters.de>)
• Re: Open the WS_FTP Server backdoor to SYSTEM ("Todd C. Campbell" <todd.campbell@...e.com>)
• RE: Sarca rainbow tables on-line cracking service (James.Cupps@...pi.com)
• Immunity Advisory: dtlogin remote root (Dave Aitel <dave@...unitysec.com>)
• Dark Age of Camelot login client vulnerability to man in the middle attack (Todd Chapman <tchapman@...ninedev.com>)
• Updated Witty Analysis Information ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)

• Immunity Advisory: Solaris local kernel root (Dave Aitel <dave@...unitysec.com>)
• R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities (advisory@...id7.com)
• New link - ISS 'Witty' Worm Analyzed ("Oliver Schneider" <Borbarad@...pro.net>)
• Re: Advisory 03/2004: Multiple (13) Ethereal remote overflows (Byron Sonne <blsonne@...ers.com>)
• Re: How to crash a harddisk - the Ipswitch WS_FTP Server way (exon <exon@...e.se>)
• RE: Re: How to crash a harddisk - the Ipswitch WS_FTP Server way ("Hugh Mann" <hughmann@...mail.com>)
• RE: RE: Sarca rainbow tables on-line cracking service ("Aditya, ALD [Aditya Lalit Deshmukh]" <aditya.deshmukh@...ine.gateway.technolabs.net>)
• Re: New link - ISS 'Witty' Worm Analyzed (Magi Networks <administrator@...inetworks.com>)
• [SECURITY] [DSA 467-1] New ecartis packages fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Re: Immunity Advisory: dtlogin remote root (Johan A.van Zanten <johan@...anglers.com>)
• Re: Immunity Advisory: dtlogin remote root (Dave Aitel <dave@...unitysec.com>)
• TrendMacro Interscan Viruswall Directory Traversal ("Tri Huynh" <trihuynh@...up.com>)
• Re: Immunity Advisory: Solaris local kernel root (Casper Dik <casper@...land.sun.com>)
• Buffer overflow in PicoPhone 1.63 (Luigi Auriemma <aluigi@...ervista.org>)
• HP Web JetAdmin vulnerabilities. ("wirepair" <wirepair@...uemail.net>)
• Broadcast client buffer-overflow in Terminator 3 1.0 (Luigi Auriemma <aluigi@...ervista.org>)
• Dameware Passes Weak File Encryption Key in the Clear (ax09001h <ax09001h@...mail.com>)

• Dark Age of Camelot login client vulnerability to man in the middle attack (Todd Chapman <tchapman@...ninedev.com>)
• Re: HP Web JetAdmin vulnerabilities. (H D Moore <sflist@...italoffense.net>)
• Re: TrendMicro (not Macro) Interscan Viruswall Directory Traversal ("Tri Huynh" <trihuynh@...up.com>)
• mysqlbug tmpfile/symlink vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
• Check Point SmartDashboard Buffer Overflow ("Andreas Constantinides (MegaHz)" <megahz@...ahz.org>)
• Re: Immunity Advisory: Solaris local kernel root (Dave Aitel <dave@...unitysec.com>)
• Re: TrendMacro Interscan Viruswall Directory Traversal (Brian Keefer <chort@...unetsgothique.com>)
• [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Re: Phpbb 2.0.7a And Earlier Secuity Issues (JeiAr <security@...ftech.org>)
• New Adventures In Phishing (Jim Halfpenny <jim@...nanswers.co.uk>)
• Re: Immunity Advisory: Solaris local kernel root (Casper Dik <casper@...land.sun.com>)
• eSignal v7 remote buffer overflow (exploit) (Vizzy <vizzy@...email.hu>)
• GLSA200403-04 Multiple security vulnerabilities in Apache 2 (Aida Escriva-Sammer <aescriva@...too.org>)
• Remote crash in Etherlords I 1.07 and II 1.03 (Luigi Auriemma <aluigi@...ervista.org>)
• UPDATED: MS Word - password protection vulnerabilty (Andrew W Barkley <abarkle3@....com>)
• UPDATED: MS Word - password protection vulnerabilty (Andrew Barkley <abarkle3@....com>)
• Re: [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities (Ulf Härnhammar <Ulf.Harnhammar.9485@...dent.uu.se>)

• OpenLinux: mc Updated packages resolve local buffer overflow vulnerability (please_reply_to_security@....com)
• OpenLinux: mutt remote buffer overflow (please_reply_to_security@....com)
• SGI Advanced Linux Environment security update #16 (SGI Security Coordinator <agent99@....com>)
• SGI Advanced Linux Environment security update #15 (SGI Security Coordinator <agent99@....com>)
• NetSupport School Pro: Password encryption weaknesses ("spiffomatic 64" <spiffomatic64@...mail.com>)
• Re: Immunity Advisory: Solaris local kernel root (Dave Aitel <dave@...unitysec.com>)
• Blogger XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• Blogger XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• R: UPDATED: MS Word - password protection vulnerabilty (s.zdrojewski@...irtualcommunity.net)
• NetSupport School Pro: Password Encryption Weaknesses ("spiffomatic 64" <spiffomatic64@...mail.com>)
• Tomcat 5.0.14: remote DoS (WU Fei Liang <cms01017@...-hagenberg.ac.at>)
• [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta] (Janek Vind <come2waraxe@...oo.com>)
• [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (Janek Vind <come2waraxe@...oo.com>)
• Blogger XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• RE: MS Word - password protection vulnerabilty ("C Ryll" <carolynryll@...mail.com>)
• MS Outlook/Outlook Express Preview Pane Security Issue ("Jeff Uslan" <jeff_uslan@...akeasy.net>)
• phpBB2 2.0.8 privmsg.php SQL injection patch (critical). (Shaun Colley <shaunige@...oo.co.uk>)
• RE: MS Outlook/Outlook Express Preview Pane Security Issue ("Drew Copley" <dcopley@...e.com>)
• LNSA-#2004-0006: bug workaround for Apache 2.0.48 (Vincenzo Ciaglia <ciaglia@...wosix.org>)
• freshmeat.net: XSS Attack due to improper comment filtering. (Steve Kemp <steve@...ve.org.uk>)

• Re: MS Outlook/Outlook Express Preview Pane Security Issue ("Nexus" <nexus@...rol.i-way.co.uk>)
• bblog 0.7.2 cross site scripting (<penfold@...fnep.com>)
• Nstxd vulnerability (laurent oudot <oudot@...ack.org>)
• Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (JeiAr <security@...ftech.org>)
• Strange traffic - Outgoing TCP 3127/3198 (Not mydoom) New worm? ("Steve Browning" <browningsteve@...mail.com>)
• Another ISS BlackIce & RealSecure Update ? (K-OTiK Security <Special-Alerts@...tik.com>)
• Another ISS BlackIce & RealSecure Update ? (Jeff <secfocus@...rox.com>)
• New worm? (Karousel <no.email@....com>)
• systrace silently patches full local bypass vulnerability on Linux (spender@...ecurity.net)

• iss_pam1.dll remote exploits ("Sam" <Sam@...57.org>)
• [ GLSA 200403-05 ] Linux kernel do_mremap local privilege escalation vulnerability (Tim Yamin <plasmaroo@...too.org>)
• [ GLSA 200403-05 ] UUDeview MIME Buffer Overflow (Tim Yamin <plasmaroo@...too.org>)

• [RHSA-2004:134-01] Updated squid package fixes security vulnerability (bugzilla@...hat.com)
• LNSA-#2004-0007: Multiple security problems in Ethereal (Vincenzo Ciaglia <ciaglia@...wosix.org>)
• new internet explorer exploit (was new worm) (Jelmer <jkuperus@...net.nl>)
• Re: New worm? (Gadi Evron <ge@...uxbox.org>)
• Re: New worm? (Charles Hamby <fixer@....net>)
• Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] (Benjamin Tolman <rituel@...la.fr>)
• Ethereal(v0.10.0-0.10.2) IGAP Dissector Message Overflow Exploit ("Eye on Security India" <eos-india@...uxmail.org>)
• iss_pam1.dll remote exploits ("Sam" <Sam@...57.org>)
• phpBB 2.0.8 Exploit (JeiAr <security@...ftech.org>)
• PhotoPost PHP Pro Multiple Vulnerabilities (JeiAr <security@...ftech.org>)
• Multiple Vulnerabilities in Cloisterblog web blog/journal (Dotho <dotho@...code.org>)
• re: New worm? ("http-equiv@...ite.com" <1@...ware.com>)
• A-CART Pro & A-CART 2.0 Input Validation Holes ("Manuel Lopez" <mantra@...o.org>)
• FreeBSD Security Advisory FreeBSD-SA-04:06.ipv6 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• WebCT Campus Edition 4.1 - Cross site scripting using CSS @import (Simon Boulet <simon.boulet@...ahost.net>)
• vuln ("ShelzZ" <shelzz@...l.ru>)
• [ GLSA 200403-08 ] oftpd DoS vulnerability (Kurt Lieber <klieber@...too.org>)
• [ GLSA 200403-07 ] Multiple remote overflows and vulnerabilities in Ethereal (Kurt Lieber <klieber@...too.org>)
• [SECURITY] [DSA 469-1] New libpam-pgsql packages fix SQL injection (joey@...odrom.org (Martin Schulze))
• [ GLSA 200403-06 ] Multiple remote buffer overflow vulnerabilities in Courier (Kurt Lieber <klieber@...too.org>)
• [ GLSA 200403-09 ] Buffer overflow in Midnight Commander (Kurt Lieber <klieber@...too.org>)
• Addressing Cisco Security Issues ("Geo." <geoincident1@...info.org>)
• AW: new internet explorer exploit (was new worm) ("Ron Stiemer" <r.stiemer@...-worldwide.tv>)
• IE ms-its: and mk:@MSITStore: vulnerability (roozbeh afrasiabi <roozbeh_afrasiabi@...oo.com>)
• RE: new internet explorer exploit (was new worm) ("Drew Copley" <dcopley@...e.com>)
• Re: systrace silently patches full local bypass vulnerability on Linux (stealth <stealth@...fault.net>)
• Re: Addressing Cisco Security Issues (Jason Dodson <mindchild@...oo.com>)
• Re: new internet explorer exploit (was new worm) (Void <void@...t.net>)
• Re: Addressing Cisco Security Issues ("Micheal Patterson" <micheal@...incorporated.com>)

• Re: Re: Addressing Cisco Security Issues ("Exibar" <exibar@...lair.com>)
• RE: new internet explorer exploit (was new worm) ("Thor Larholm" <thor@...x.com>)
• RE: Addressing Cisco Security Issues ("Lou Zirko" <lzirko@....net>)
• Re: Addressing Cisco Security Issues (Clayton Kossmeyer <ckossmey@...co.com>)
• Re: new internet explorer exploit (was new worm) ("Berend-Jan Wever" <SkyLined@...p.tudelft.nl>)
• Re: RE: new internet explorer exploit (was new worm) (Valdis.Kletnieks@...edu)
• Exensive cPanel Cross Site Scripting (sullo@...t.net)
• RE: Addressing Cisco Security Issues ("Burton M. Strauss III" <security@...llNetSolutions.com>)
• RE: RE: new internet explorer exploit (was new worm) ("Drew Copley" <dcopley@...e.com>)
• Re: RE: new internet explorer exploit (was new worm) (Valdis.Kletnieks@...edu)
• Re: RE: Addressing Cisco Security Issues (Michael Reilly <michaelr@...co.com>)
• Re: Addressing Cisco Security Issues (neal rauhauser <neal@...ts.rauhauser.net>)
• Re: Addressing Cisco Security Issues ("Geoincidents" <geoincidents@...info.org>)
• Re: Addressing Cisco Security Issues ("Geoincidents" <geoincidents@...info.org>)
• Re: new internet explorer exploit (was new worm) (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: new internet explorer exploit (was new worm) (Jelmer <jkuperus@...net.nl>)
• security enforcement - new monitor for winnt (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Re: systrace silently patches full local bypass vulnerability on Linux (KurruPt - FiLe <cybershamen@...oo.com>)
• TSLSA-2004-0015 - tcpdump (Trustix Security Advisor <tsl@...stix.org>)
• clamd - NEVER use "%f" in your "VirusEvent" (Rene <l0om@...luded.org>)
• TSLSA-2004-0017 - apache (Trustix Security Advisor <tsl@...stix.org>)
• Re: IE ms-its: and mk:@MSITStore: vulnerability ("Lise Moorveld" <lise_moorveld@...mail.com>)
• Re: security enforcement - new monitor for winnt ("Amir Mohammadkhani-Aminabadi" <amir.mohammadkhani@...surance.de>)
• Heap overflow in MPlayer ("blexim" <blexim@...h.com>)
• Re: security enforcement - new monitor for winnt ("http-equiv@...ite.com" <1@...ware.com>)
• MPlayer Security Advisory #002 - HTTP parsing vulnerability (Gabucino <gabucino-nospam@...ayerhq.hu>)
• Problem with customized login pages for Oracle SSO (advisories@...ison-gurkha.com)
• Re: systrace silently patches full local bypass vulnerability on Linux (marius aamodt eriksen <marius@...ch.edu>)
• Linbit linbox Multiple Vulnerabilities (Martin Eiszner <martin@...sec.org>)
• R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities (advisory@...id7.com)
• NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. ("Paul" <paul@...nkey2000.com>)
• RE: RE: new internet explorer exploit (was new worm) ("Drew Copley" <dcopley@...e.com>)
• RE: new internet explorer exploit (was new worm) ("Drew Copley" <dcopley@...e.com>)
• phpkit suffers (reale stupid) XSS vuln. (Yanosz <yanosz@....net>)
• White Paper - Web Application Worms: Myth or Reality? ("Imperva Application Defense Center" <adc@...erva.com>)

• Re: White Paper - Web Application Worms: Myth or Reality? (Nicholas Weaver <nweaver@...berkeley.edu>)
• Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. (Joe Stewart <jstewart@...hq.com>)
• [RHSA-2004:137-01] Updated Ethereal packages fix security issues (bugzilla@...hat.com)
• CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities (S-Quadra Security Research <research@...uadra.com>)
• MDKSA-2004:024 - Updated ethereal packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:025 - Updated squid packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [ GLSA 200403-14 ] Multiple Security Vulnerabilities in Monit (Aida Escriva-Sammer <aescriva@...too.org>)
• [ GLSA 200403-12 ] OpenLDAP DoS Vulnerability ("Joshua J. Berry" <condordes@...too.org>)
• [ GLSA 200403-10 ] Fetchmail 6.2.5 fixes a remote DoS (Kurt Lieber <klieber@...too.org>)
• [ GLSA 200403-13 ] Remote buffer overflow in MPlayer (Kurt Lieber <klieber@...too.org>)
• cdp buffer overflow vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• [ GLSA 200403-11 ] Squid ACL [url_regex] bypass vulnerability (Kurt Lieber <klieber@...too.org>)
• Re: new internet explorer exploit (was new worm) (roozbeh afrasiabi <roozbeh_afrasiabi@...oo.com>)
• Re: IE ms-its: and mk:@MSITStore: vulnerability (roozbeh afrasiabi <roozbeh_afrasiabi@...oo.com>)
• Re: security enforcement - new monitor for winnt (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• RE: security enforcement - new monitor for winnt (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
• Followup: vuln in WinBlox monitor for winnt ("Oliver Lavery" <oliver.lavery@...patico.ca>)
• NOT GOOD: Outlook Express 6 + Internet Explorer 6 ("http-equiv@...ite.com" <1@...ware.com>)
• RogerWilco: new funny bugs (Luigi Auriemma <aluigi@...ervista.org>)
• IPv4 fragmentation --> The Rose Attack (<gandalf@...ital.net>)
• Re: cdp buffer overflow vulnerability - updated details (Shaun Colley <shaunige@...oo.co.uk>)
• [CLA-2004:833] Conectiva Security Announcement - mc (Conectiva Updates <secure@...ectiva.com.br>)
• RE: Followup: vuln in WinBlox monitor for winnt ("Drew Copley" <dcopley@...e.com>)
• RE: security enforcement - new monitor for winnt ("Oliver Lavery" <olavery@...x.com>)
• Bugfinder Being Indicted As Criminal ("Counterfeiter") in France ("Drew Copley" <dcopley@...e.com>)
• Re: IPv4 fragmentation --> The Rose Attack (stanislav shalunov <shalunov@...ernet2.edu>)

432 messages

Powered by blists - more mailing lists