bugtraq mailing list - 2004/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2004/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 30	² 6	³ 7	⁴
⁵ 21	⁶ 23	⁷ 31	⁸ 22	⁹ 23	¹⁰ 3	¹¹ 2
¹² 14	¹³ 8	¹⁴ 17	¹⁵ 8	¹⁶ 20	¹⁷ 26	¹⁸ 2
¹⁹ 31	²⁰ 24	²¹ 18	²² 11	²³ 13	²⁴ 5	²⁵
²⁶ 12	²⁷ 20	²⁸ 13	²⁹ 18	³⁰ 31

Messages by day:

April 1 (30 messages)

[CLA-2004:834] Conectiva Security Announcement - openssl (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2004:835] Conectiva Security Announcement - ethereal (Conectiva Updates <secure@...ectiva.com.br>)
Open Source Vulnerability Database Opens for Public Access (fbr <fbr@....net>)
TOOL: Adder - runtime patching in python ("Oliver Lavery" <oliver.lavery@...patico.ca>)
Re: cdp buffer overflow vulnerability (Vade 79 <v9@...ehalo.deadpig.org>)
RE: Followup: vuln in WinBlox monitor for winnt ("Oliver Lavery" <oliver.lavery@...patico.ca>)
OpenLinux: util-linux could leak sensitive data (please_reply_to_security@....com)
Re: new internet explorer exploit (was new worm) (mgotts@...ads.com)
Google using Expired Cert and SSLv2 ("Matthew S. Hamrick" <mhamrick@...ptonomicon.net>)
RE: cdp buffer overflow vulnerability ("Dave Paris" <dparis@...orks.com>)
Re: IPv4 fragmentation --> The Rose Attack ("Crist J. Clark" <cristjc@...cast.net>)
OpenLinux: vim arbitrary commands execution through modelines (please_reply_to_security@....com)
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : perl unsafe Safe compartment (please_reply_to_security@....com)
[CLA-2004:836] Conectiva Security Announcement - libxml2 (Conectiva Updates <secure@...ectiva.com.br>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Maarten <fulldisc@...ratux.org>)
RE: Addressing Cisco Security Issues ("Bruce Martins" <BMartins@...end.COM>)
Re: Bugfinder Being Indicted As Criminal ("Counterfei France (futureworlds <nobody@...l.futureworlds.it>)
Re: NetSky.q Virus. Looking for more detailed information on how the DOS will be performed. ("Paul" <paul@...nkey2000.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France ("Joe Polk" <listuser@...elinux.com>)
Re: IPv4 fragmentation --> The Rose Attack (stanislav shalunov <shalunov@...ernet2.edu>)
Pikachu -Turn on WEP ! (Himanshu Singh <crypto@...thome.net>)
Releasing full source code of WinBlox (Liu Die Yu <liudieyuinchina@...oo.com.cn>)
Re: IPv4 fragmentation --> The Rose Attack (Chris Brenton <cbrenton@...isbrenton.org>)
Index viewing in imgSvr 0.4 ("Donato Ferrante" <fdonato@...istici.org>)
[SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa) (joey@...odrom.org (Martin Schulze))
Re: Google using Expired Cert and SSLv2 (Ivaylo Kostadinov <ivaylo.kostadinov@...puting-services.oxford.ac.uk>)
Re: Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Valdis.Kletnieks@...edu)
RE: new internet explorer exploit (was new worm) ("Castigliola, Angelo" <ACastigliola@...mprovident.com>)
Securing Xp: XpLizer - the best WindowsXp Hardening tool with source code! ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
[OpenPKG-SA-2004.008] OpenPKG Security Advisory (squid) (OpenPKG <openpkg@...npkg.org>)

April 2 (6 messages)

Re: Pikachu -Turn on WEP ! (christophe barbe <christophe@...tlegrid.net>)
Buffer Overflow in HAHTsite Scenario Server 5.1 ("Dennis Rand" <dra@...tego.dk>)
Netsky.R, auto execute w/ IE6 ? (BugtraQ <bugtraqFolder@...services.com>)
Enterprise Application Security (Dave Aitel <dave@...unitysec.com>)
[SECURITY] [DSA 471-1] New interchange packages fix information leak (joey@...odrom.org (Martin Schulze))
IRIX ftpd ftp_syslog issue with anonymous FTP (SGI Security Coordinator <agent99@....com>)

April 3 (7 messages)

IRIX Update Some Network Drivers May Leak Data (SGI Security Coordinator <agent99@....com>)
Re: Advisory 03/2004: Multiple (13) Ethereal remote overflows (Bob Niederman <btrq@...-n.com>)
eMule v0.42d Buffer Overflow (Kostya Kortchinsky <kostya.kortchinsky@...ater.fr>)
Remote Exploit for Aborior's Encore Web Forum ("XNUXER RESEARCH" <xnuxer@...kermail.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (K-OTiK Security <Special-Alerts@...tik.com>)
[securityzone@...romedia.com: New Macromedia Security Zone Bulletin Posted] (David Ahmad <da@...urityfocus.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Chris Wysopal <cwysopal@...take.com>)

April 5 (21 messages)

Nullsoft Winamp 'in_mod.dll' Heap Overflow ("Peter Winter-Smith" <peter@...software.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Fozzy <fozzy@...france.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Renaud Deraison <deraison@...sus.org>)
[SECURITY] [DSA 472-1] New fte packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 474-1] New squid packages fix ACL bypass (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 473-1] New oftpd packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa) (joey@...odrom.org (Martin Schulze))
[OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc) (OpenPKG <openpkg@...npkg.org>)
NGSSoftware Insight Security Research Advisory ("Peter Winter-Smith" <peter@...software.com>)
Fw: new IE vurn ("Philip Barnham" <phycho@...ktech.org.uk>)
Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 (Ory Segal <ory.segal@...ctuminc.com>)
SuSEs YaST Online Update - possible symlink attack (Rene <l0om@...luded.org>)
Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
Re: new IE vurn ("Gavin Hanover" <ghanover@...ntipress.com>)
[Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability (idlabs-advisories@...fense.com)
Texutil symlink vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
Automated wireless client penetration tool "hotspotter" released. (Max Moser <mmo@...ote-exploit.org>)
Advisory: Multiple Vulnerabilities in Monit ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)
IBM Director 3.1 Windows Agent Remote DoS (Juanma Merino <t3k@...rnet.com>)
Format string bug in IGI 2: Covert Strike 1.3 (Luigi Auriemma <aluigi@...ervista.org>)

April 6 (23 messages)

Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (K-OTiK Security <Special-Alerts@...tik.com>)
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (K-OTiK Security <Special-Alerts@...tik.com>)
MSWebDVD Class(mswebdvd.dll) Null Pointer Assignment ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Macromedia Flash Player 7.0 r19 - Null Pointer Assignment(Remote Crash) ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Paper: Comparing binaries with graph isomorphisms (Todd Sabin <tsabin@...or.bindview.com>)
Vuln Info Disclosure may become illegal in France [was: Re: Bugfinder Being Indicted As Criminal] (Fozzy <fozzy@...france.com>)
MDKSA-2004:026 - Updated mplayer packages fix remotely exploitable vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[ GLSA 200404-01 ] Insecure sandbox temporary lockfile vulnerabilities in Portage (Tim Yamin <plasmaroo@...too.org>)
[SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability (Matt Zimmerman <mdz@...ian.org>)
LNSA-#2004-0008: Multiple security problems in Monit (Vincenzo Ciaglia <ciaglia@...wosix.org>)
Adobe Photoshop 8.0 (CS) - Local Path Disclosure and causing I.E D.O.S ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Re: IBM Director 3.1 Windows Agent Remote DoS ("Vess Nedevski" <vdn4844@....org>)
Support Contact Info ("Mark Litchfield" <mark@...software.com>)
[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
[ GLSA 200404-02 ] KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability (Aida Escriva-Sammer <aescriva@...too.org>)
[product-security@...le.com: APPLE-SA-2004-04-05 Security Update 2004-04-05]] (David Ahmad <da@...urityfocus.com>)
RE: Netsky.R, auto execute w/ IE6 ? (BugtraQ <bugtraqFolder@...services.com>)
blaxxun3D(blaxxun Platform) 7 - Remote Buffer Overflow ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Re: Netsky.R, auto execute w/ IE6 ? (<vbsubmit@...mail.com>)
Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0 ("Foundstone Labs" <labs@...ndstone.com>)
GNU Sharutils buffer overflow vulnerability. (Shaun Colley <shaunige@...oo.co.uk>)
[ GLSA 200404-03 ] Tcpdump Vulnerabilities in ISAKMP Parsing ("Joshua J. Berry" <condordes@...too.org>)
Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S) ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)

April 7 (31 messages)

Papers: The Invisible Catalog ("Pete Herzog" <pete@...com.org>)
Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
[ GLSA 200404-04 ] Multiple vulnerabilities in sysstat (Kurt Lieber <klieber@...too.org>)
Solaris vfs_getvfssw() local kernel exploit ("Sam" <Sam@...57.org>)
REAL One Player R3T File Format Stack Overflow ("NGSSoftware Insight Security Research" <mark@...software.com>)
Re: Advisory: Multiple Vulnerabilities in Monit (Evgeny Legerov <e.legerov@...uadra.com>)
[ GLSA 200404-05 ] ipsec-tools contains an X.509 certificates vulnerability (Kurt Lieber <klieber@...too.org>)
[SECURITY] [DSA 478-1] New tcpdump packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
Re: eSignal v7 remote buffer overflow (Scott Johnson <scott_johnson_esignal@...oo.com>)
Kerio Personal Firewall 4 and IE 6 "Bug" ("E.Kellinis" <me@...her.org.uk>)
Release of Cisco Attack tool Asleap (Joshua Wright <jwright@...borg.com>)
Re: SuSEs YaST Online Update - possible symlink attack (Roman Drahtmueller <draht@...e.de>)
Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ GLSA 200404-06 ] Util-linux login may leak sensitive data (Kurt Lieber <klieber@...too.org>)
[ GLSA 200404-07 ] ClamAV RAR Archive Remote Denial Of Service Vulnerability (Kurt Lieber <klieber@...too.org>)
CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle attack… (Ralf Spenneberg <ralf@...nneberg.net>)
Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] ("T.J. Ferraro" <tjtoocool@...eaker.net>)
Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: IPv4 fragmentation --> The Rose Attack (Ventsislav Genchev <vigour@...antis.bg>)
Solaris vfs_getvfssw() local kernel exploit ("Sam" <Sam@...57.org>)
Re: GNU Sharutils buffer overflow vulnerability. (Didier Arenzana <darenzana@...oo.fr>)
[OpenPKG-SA-2004.010] OpenPKG Security Advisory (tcpdump) (OpenPKG <openpkg@...npkg.org>)
Metasploit Framework 2.0 Released! (H D Moore <sflist@...italoffense.net>)
Re: GNU Sharutils buffer overflow vulnerability. ("Carlos Eduardo Pinheiro" <cbc99@....com.br>)
Internet Explorer 6 - Crash ("E.Kellinis" <me@...her.org.uk>)
RE: Kerio Personal Firewall 4 and IE 6 "Bug" (Noah Dunker <ndunker@...c.net>)
RE: Kerio Personal Firewall 4 and IE 6 "Bug" (Noah Dunker <ndunker@...c.net>)
[OpenPKG-SA-2004.011] OpenPKG Security Advisory (sharutils) (OpenPKG <openpkg@...npkg.org>)
Kerio Personal Firewall 4.0.13 - Remote DoS (Crash) ("E.Kellinis" <me@...her.org.uk>)
Re: GNU Sharutils buffer overflow vulnerability (Shaun Colley <shaunige@...oo.co.uk>)

April 8 (22 messages)

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC] (S G Masood <sgmasood@...oo.com>)
SGI Advanced Linux Environment security update #17 (SGI Security Coordinator <agent99@....com>)
Re: Kerio Personal Firewall 4 and IE 6 "Bug" ("E.Kellinis" <me@...her.org.uk>)
Re: Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow, Apr 7 2004 2:22AM (Sym Security <secure@...antec.com>)
[ GLSA 200404-08 ] GNU Automake symbolic link vulnerability (Kurt Lieber <klieber@...too.org>)
[waraxe-2004-SA#015 - Multiple vulnerabilities in NukeCalendar v1.1.a] (Janek Vind <come2waraxe@...oo.com>)
Phrack #62 Call for Papers (Richard Miller <rm@...fault.net>)
Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
[waraxe-2004-SA#014 - Cross-Site Scripting aka XSS in AzDGDatingLite] (Janek Vind <come2waraxe@...oo.com>)
Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache (Ioannis Migadakis <jmig@...l.gr>)
New Worm/Virus April 8th ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
LNSA-#2004-0009: GNU Automake symbolic link vulnerability (Vincenzo Ciaglia <ciaglia@...wosix.org>)
LNSA-#2004-0009: GNU Automake symbolic link vulnerability (Vincenzo Ciaglia <ciaglia@...wosix.org>)
[OpenPKG-SA-2004.012] OpenPKG Security Advisory (fetchmail) (OpenPKG <openpkg@...npkg.org>)
Re: IPv4 fragmentation --> The Rose Attack (Paul Starzetz <ihaquer@...c.pl>)
LNSA-#2004-0010: login may leak sensitive data (Vincenzo Ciaglia <ciaglia@...wosix.org>)
RE: [AppSec-research] New Worm/Virus April 8th ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
Microsoft IE iframe src DoS already reported to Microsoft ("'ken'@FTU" <ken@...security.com>)
Re: IPv4 fragmentation --> The Rose Attack (Darren Reed <avalon@...igula.anu.edu.au>)
Re: Microsoft IE iframe src DoS already reported to Microsoft (Valdis.Kletnieks@...edu)
PSR - #2004-001 Remote - LCDProc (Priv8 Security Research <security@...v8security.com>)
RE: New Worm/Virus April 8th (securityguy@...extreme.com)

April 9 (23 messages)

PSR - #2004-002 Remote - LCDProc (Priv8 Security Research <security@...v8security.com>)
US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler (CERT Advisory <cert-advisory@...t.org>)
Netsky Variants (Byron Copeland <nodialtone@...cast.net>)
[ GLSA 200404-09 ] Cross-realm trust vulnerability in Heimdal (Kurt Lieber <klieber@...too.org>)
[ GLSA 200404-12 ] Scorched 3D server chat box format string vulnerability (Kurt Lieber <klieber@...too.org>)
[ GLSA 200404-11 ] Multiple Vulnerabilities in pwlib (Aida Escriva-Sammer <aescriva@...too.org>)
Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (K-OTiK Security <Special-Alerts@...tik.com>)
MDKSA-2004:027 - Updated ipsec-tools packages fix vulnerability in racoon (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: IPv4 fragmentation --> The Rose Attack (<gandalf@...ital.net>)
monit 4.1 POC (gsicht gsicht <nothing.king@...email.de>)
DoS in Crackalaka 1.0.8 ("Donato Ferrante" <fdonato@...istici.org>)
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Chris Johnson <johnson@....mgh.harvard.edu>)
Browser bugs [DoS] ... where will you draw a line? (Bipin Gautam <visitbipin@...mail.com>)
DoS in Rsniff 1.0 (Luigi Auriemma <aluigi@...ervista.org>)
RE: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) ("Richard M. Smith" <rms@...puterbytesman.com>)
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Geoffrey <esoteric@...mes25.net>)
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Chris Johnson <johnson@....mgh.harvard.edu>)
Re: DoS in Rsniff 1.0 (Luigi Auriemma <aluigi@...ervista.org>)
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Chris Wysopal <cwysopal@...take.com>)
RE: Browser bugs [DoS] ... where will you draw a line? ("Drew Copley" <dcopley@...e.com>)
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Romain Francoise <romain@...bokech.com>)
Re: IPv4 fragmentation --> The Rose Attack (Darren Reed <avalon@...igula.anu.edu.au>)
ANNOUNCE: SecLegal mailing list ("Thor Larholm" <thor@...x.com>)

April 10 (3 messages)

Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (Nicob <nicob@...ob.net>)
RE: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) ("Amer Karim" <amerk@...tilis-sys.com>)
Backdoor in X-Micro WLAN 11b Broadband Router (RISKO Gergely <xmicro@...ko.hu>)

April 11 (2 messages)

Re: GNU Sharutils buffer overflow vulnerability. (Dan Yefimov <dan@...M.integrate.com.ru>)
Re: IPv4 fragmentation --> The Rose Attack (Darren Reed <avalon@...igula.anu.edu.au>)

April 12 (14 messages)

Monit <= 4.2 Remote Root Exploit ("Eye on Security India" <eos-india@...uxmail.org>)
Re: IPv4 fragmentation --> The Rose Attack (<gandalf@...ital.net>)
Re: IPv4 fragmentation --> The Rose Attack (<gandalf@...ital.net>)
Possible DoS on Linux kernel 2.4 and 2.6 using sigqueue overflow. ("Nikita V. Youshchenko" <yoush@...msu.su>)
Citadel/UX 6.20 fixes local permissions vulnerability (error@...adel.org (IO ERROR))
UPDATE: Cisco Security Notice: Dictionary Attack on Cisco LEAP Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Gnome nautilus bug (gsicht gsicht <nothing.king@...email.de>)
Multiple Vulnerabilities In Tiki CMS/Groupware [ TikiWiki ] (JeiAr <security@...ftech.org>)
IE 6 Print Without Prompt (Ben Garvey <bengarvey@...cast.net>)
[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2] (Janek Vind <come2waraxe@...oo.com>)
eMule <= 0.42d Remote Exploit ("kcope" <kingcope@....net>)
BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE) (Felipe Neuwald <felipe.neuwald@...eno.com.br>)
Adobe Acrobat Reader PDF file DoS vulnerability (Arman Nayyeri <arman-n@...eaker.net>)
[waraxe-2004-SA#018 - Admin-level authentication bypass in phpnuke 6.x-7.2] (Janek Vind <come2waraxe@...oo.com>)

April 13 (8 messages)

Yahoo! Messenger 5.6 & Trillian (All Versions) - User Credential Disclosure Vulnerability ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
[CLA-2004:838] Conectiva Security Announcement - squid (Conectiva Updates <secure@...ectiva.com.br>)
Microsoft Outlook Express EML file Crash vulnerability (Arman Nayyeri <arman-n@...eaker.net>)
[CLA-2004:837] Conectiva Security Announcement - mod_python (Conectiva Updates <secure@...ectiva.com.br>)
[waraxe-2004-SA#016 - Cross-Site Scripting aka XSS in phpnuke 6.x-7.2 part 3] (Janek Vind <come2waraxe@...oo.com>)
new strange worm (Alex Gen <alexei.h@...ay.se>)
RE: IPv4 fragmentation --> The Rose Attack ("Taylan Develioglu" <percival@...null.nl>)
Microsoft Internet Explorer BMP file memory DoS vulnerability (Arman Nayyeri <arman-n@...eaker.net>)

April 14 (17 messages)

UPDATE: LCDproc Buffer Overflow and Format String Vulnerabilities (Rene Wagner <reenoo@....de>)
Eudora 6.0.3 nested MIME DoS (psz@...hs.usyd.edu.au (Paul Szabo))
NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding (NSFOCUS Security Team <security@...ocus.com>(by way of NSFOCUS Security Tea…)
MS04-011 SSL Remote DoS PoC (David Barroso Berrueta <dbarroso@...sec.com>)
[RHSA-2004:154-01] Updated CVS packages fix security issue (bugzilla@...hat.com)
[RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon (bugzilla@...hat.com)
EEYE: Windows Local Security Authority Service Remote Buffer Overflow ("Marc Maiffret" <mmaiffret@...e.com>)
EEYE: Windows Expand-Down Data Segment Local Privilege Escalation ("Marc Maiffret" <mmaiffret@...e.com>)
[Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support Center Argument Injection Vulnerability (idlabs-advisories@...fense.com)
RE: Microsoft Outlook Express EML file Crash vulnerability ("Kamran Muzaffer" <kmahmed@...er.net.pk>)
[SECURITY] [DSA 483-1] New mysql packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
SUSE Security Announcement: cvs (SuSE-SA:2004:008) (krahmer@...e.de (Sebastian Krahmer))
Re: BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE) (Damien Miller <djm@...drot.org>)
4 new Microsoft patches to close 20 vulnerabilities ("Thor Larholm" <thor@...x.com>)
[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390) (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 480-1] New Linux 2.4.17 and 2.4.18 packages fix local root exploit (hppa) (joey@...odrom.org (Martin Schulze))
Re: Microsoft Internet Explorer BMP file memory DoS vulnerability (jeremy@...d.org)

April 15 (8 messages)

[ GLSA 200404-13 ] CVS Server and Client Vulnerabilities (Kurt Lieber <klieber@...too.org>)
[SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection (pokley <pokleyzz@...n-associates.net>)
[RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon (bugzilla@...hat.com)
[SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability ("Vivek Rathod (Application Security, Inc.)" <vrathod@...secinc.com>)
SCT javascript execution vulnerability ("spiffomatic 64" <spiffomatic64@...mail.com>)
[SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386) (joey@...odrom.org (Martin Schulze))
Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Include vulnerability in GEMITEL v 3.50 ("jaguar" <webmaster@...ab.com>)

April 16 (20 messages)

ZA Security Hole ("Damjan Kreft" <damjan.kreft@...l.net>)
FW: [Unpatched] 4 new Microsoft patches, 4 old updated, 24 vulnerabilities ("Thor Larholm" <thor@...x.com>)
US-CERT Technical Cyber Security Alert TA04-104A -- Multiple Vulnerabilities in Microsoft Products (CERT Advisory <cert-advisory@...t.org>)
[OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql) (OpenPKG <openpkg@...npkg.org>)
Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. ("Manuel Lopez" <mantra@...o.org>)
FreeBSD Security Advisory FreeBSD-SA-04:07.cvs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[Full-Disclosure] iDEFENSE Security Advisory 04.15.04: RealNetworks Helix Universal Server Denial of Service Vulnerability (idlabs-advisories@...fense.com)
Hi! Antiviruses Comparison - A Little Research Results ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
SCT javascript execution vulnerability (spiffomatic64@...mail.com)
Re: Backdoor in X-Micro WLAN 11b Broadband Router (Mariano Firpo <marianofirpo@...icro.com>)
Re: ZA Security Hole ("Pablo G. Sabbatella" <pgs@...ozene.com.ar>)
TSLSA-2004-0020 - kernel (Trustix Security Advisor <tsl@...stix.org>)
[OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) (OpenPKG <openpkg@...npkg.org>)
Re: ZA Security Hole (Samps <samps@...jocks.com>)
Re: ZA Security Hole (Hugo van der Kooij <hvdkooij@...derkooij.org>)
[securityzone@...romedia.com: New Macromedia Security Zone Bulletin Posted] (David Ahmad <da@...urityfocus.com>)
"Delete anti-virus and firewall software" --Microsoft (Kim Scarborough <kjs@...icago.edu>)
After Ms patches last Wed ... (aborg@....org.mt)
[OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (OpenPKG <openpkg@...npkg.org>)
void.at - neon format string bugs (Thomas Wana <greuff@...d.at>)

April 17 (26 messages)

Office XP Update: March 23, 2004 (insecure <insecure@...ritech.net>)
xine security announcement XSA-2004-2 (Michael Roitzsch <mroi@...rs.sourceforge.net>)
xine security announcement XSA-2004-1 (Michael Roitzsch <mroi@...rs.sourceforge.net>)
Re: After Ms patches last Wed ... (phaser-X <px@...oday.net>)
Re: SCT javascript execution vulnerability (Valdis.Kletnieks@...edu)
RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 ("Thor Larholm" <thor@...x.com>)
Re: SCT javascript execution vulnerability (jnielsen@....com)
Network Intelligence Advisory - Denial of Service Vulnerability in ColdFusion MX ("K. K. Mookhey" <cto@....co.in>)
Internet Explorer XSS published unpatched in SP1 AND SP2 ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Norton AntiVirus nested file manual scan bypass..... (Bipin Gautam <visitbipin@...mail.com>)
[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 489-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (joey@...odrom.org (Martin Schulze))
[SCSA-028] Nuked-Klan Multiple Vulnerabilities (advisory@...urity-corporation.com)
[SECURITY] [DSA 431-2] New perl packages fix information leak in suidperl (Matt Zimmerman <mdz@...ian.org>)
Re: After Ms patches last Wed ... ("Andy Shaw" <andy@...t.no>)
Squirrelmail Chpasswod bof (Matias Neiff <matias@...ff.com.ar>)
MS04-011 SSL Remote DoS PoC (David Barroso Berrueta <dbarroso@...sec.com>)
[SECURITY] [DSA 490-1] New Zope packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
Re: After Ms patches last Wed ... (Dan Harkless <bugtraq@...kless.org>)
RE: After Ms patches last Wed ... ("Alun Jones" <alun@...is.com>)
[BUG-CORRECTION] IISShield "Server" header costumization ("Tiago Halm" <thalm@...cabo.pt>)
[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips) (joey@...odrom.org (Martin Schulze))
Re: After Ms patches last Wed ... (Scott Gifford <sgifford@...pectclass.com>)
[SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory (Matt Zimmerman <mdz@...ian.org>)
NEW backdoor in X-Micro WLAN 11b Broadband Router (RISKO Gergely <xmicro@...ko.hu>)

April 18 (2 messages)

LNSA-#2004-0011: CVS Server and Client Vulnerabilities (Vincenzo Ciaglia <ciaglia@...wosix.org>)
LNSA-#2004-0012: Multiple format string vulnerabilities in neon (Vincenzo Ciaglia <ciaglia@...wosix.org>)

April 19 (31 messages)

[ GLSA 200404-16 ] Multiple new security vulnerabilities in monit (Kurt Lieber <klieber@...too.org>)
[ GLSA 200404-15 ] XChat 2.0.x SOCKS5 Vulnerability (Kurt Lieber <klieber@...too.org>)
[ GLSA 200404-14 ] Multiple format string vulnerabilities in cadaver (Kurt Lieber <klieber@...too.org>)
[slackware-security] tcpdump denial of service (SSA:2004-108-01) (Slackware Security Team <security@...ckware.com>)
Re: Squirrelmail Chpasswod bof (Jonathan Angliss <jon@...irrelmail.org>)
[SECURITY] [DSA 492-1] New iproute packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
Re: After Ms patches last Wed ... (Jerry Winegarden <jbw@...e.edu>)
BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
after ms patches... (kincses zoli <kincses@...sar.elte.hu>)
Re: After Ms patches last Wed ... (plasmahh@...ormatik.uni-bremen.de)
DoS in NETFile FTP/Web Server ("Donato Ferrante" <fdonato@...istici.org>)
Re: Squirrelmail Chpasswod bof (martin f krafft <madduck@...duck.net>)
Re: After Ms patches last Wed ... ("T.H. Haymore" <bonk@...chat.chatsystems.com>)
Re: After Ms patches last Wed ... (Alex Cruz <alex@...lug.net>)
Re: Norton AntiVirus nested file manual scan bypass..... (Bipin Gautam <visitbipin@...mail.com>)
New Paper - SQL Injection Signatures Evasion ("Imperva Application Defense Center" <adc@...erva.com>)
ssmtp insecure file creation (priestmaster@....at)
MS Patches last Wed - SOLUTION (aborg@....org.mt)
[waraxe-2004-SA#019 - Critical sql injection bug in Phorum 3.4.7] (Janek Vind <come2waraxe@...oo.com>)
phpBB 2.0.8a and lower - IP spoofing vulnerability (Ready Response <wang@...-x.co.uk>)
RE: After Ms patches last Wed ... ("Brito, Nelson (ISS Brazil)" <NBrito@....net>)
MS Patches last Mon - Recap (aborg@....org.mt)
Re: Squirrelmail Chpasswod bof (Peter Geissler <blasty@...kz.nl>)
RE: After Ms patches last Wed ... ("David Hayden" <dahayden@...bhayden.com>)
Idea of CAW (Creation of Attack Wood) (kincses zoli <kincses@...sar.elte.hu>)
MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: After Ms patches last Wed ... (phaser-X <px@...oday.net>)
phpBB modified by Przemo arbitary code execution (Dariusz 'Officerrr' Kolasinski <ofi@...igon.com.pl>)
Re: Squirrelmail Chpasswod bof (<rip@...rflow.no>)
Microsoft Help and Support Center argument injection vulnerability (Jouko Pynnonen <jouko@....fi>)
Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (Shaun Colley <shaunige@...oo.co.uk>)

April 20 (24 messages)

Eudora 6.1 is evil (psz@...hs.usyd.edu.au (Paul Szabo))
Zaep AntiSpam Cross Site Scripting (Aviram Jenik <aviram@...ondsecurity.com>)
Solaris 9 patch 113579-03 introduces a NIS security bug (Chris Thompson <cet1@....cam.ac.uk>)
[slackware-security] utempter security update (SSA:2004-110-01) (Slackware Security Team <security@...ckware.com>)
KPhone STUN DoS (Malformed STUN Packets) (Aviram Jenik <aviram@...ondsecurity.com>)
Re: After Ms patches last Wed ... (geoff.froh@...sho.org)
RE: "Delete anti-virus and firewall software" --Microsoft ("Thor Larholm" <thor@...x.com>)
phpBB modified by Przemo arbitary code execution (Dariusz 'Officerrr' Kolasinski <ofi@...igon.com.pl>)
[slackware-security] cvs security update (SSA:2004-108-02) (Slackware Security Team <security@...ckware.com>)
Re: BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (Ovidiu Constantin <oconstantin@...defender.com>)
Linux kernel setsockopt MCAST_MSFILTER integer overflow (Wojciech Purczynski <cliph@...c.pl>)
Exchange pop3 remote exploit ("securma massine " <securma@...amail.com>)
NcFTP - password leaking (Konstantin Gavrilenko <mlists@...ont.com>)
MDKSA-2004:033 - Updated xine-ui packages fix temporary file insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:032 - Updated libneon packages fix temporary file insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:034 - Updated MySQL packages fix temporary file insecurities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:035 - Updated samba packages fix privilege escalation vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: NcFTP - password leaking (Frank v Waveren <fvw@....cx>)
NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP (David Ahmad <da@...urityfocus.com>)
Re: BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (Sami POTIRCA <spotirca@...defender.com>)
Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: ZA Security Hole (David Wilson <David.Wilson@...de.com>)
US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP (CERT Advisory <cert-advisory@...t.org>)
Format String in Cherokee (CoKi <coki@...ystem.com.ar>)

April 21 (18 messages)

Re: Idea of CAW (Creation of Attack Wood) (Magosányi Árpád <mag@...uel.tii.matav.hu>)
[cliph@...c.pl: Linux kernel setsockopt MCAST_MSFILTER integer overflow] (David Ahmad <da@...urityfocus.com>)
Re: After Ms patches last Wed ... (Greg Kujawa <greg.kujawa@...mondcellar.com>)
Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS-Based Cisco Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
WinSCP Denial of Service (Luca Ercoli <luca.e@...web.com>)
Cisco Security Advisory: Vulnerabilities in SNMP Message Processing (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS Based Cisco Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: NcFTP - password leaking (Alex Behar <alex@...ipse.org.il>)
US-CERT Technical Cyber Security Alert TA04-111B -- Cisco IOS SNMP Message Handling Vulnerability (CERT Advisory <cert-advisory@...t.org>)
Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (Xin LI <delphij@...ntfree.net>)
[RHSA-2004:166-01] Updated kernel packages resolve security vulnerabilities (bugzilla@...hat.com)
IETF Draft on Transmission Control Protocol security considerations ("Thor Larholm" <thor@...x.com>)
[PNSA 2004-2] PostNuke Security Advisory PNSA 2004-2 (Valerio Santinelli <tanis@...ralogica.it>)
Vulnerabilities in long-lived TCP connections on SGI systems (SGI Security Coordinator <agent99@....com>)
Re: ZA Security Hole (Patrick Brauch <pab@...sec.de>)
[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Idea of CAW (Creation of Attack Wood) (Jan Minar <jjminar@...tmail.fm>)
Advanced Guestbook 2.2 -- SQL Injection Exploit (JQ <idiosyncrasie@...all.nl>)

April 22 (11 messages)

[waraxe-2004-SA#022 - Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2] (Janek Vind <come2waraxe@...oo.com>)
NetBSD Security Advisory 2004-006: TCP protocol and implementation vulnerability (NetBSD Security-Officer <security-officer@...bsd.org>)
[waraxe-2004-SA#021 - Multiple vulnerabilities in phprofession 2.5 module for PostNuke] (Janek Vind <come2waraxe@...oo.com>)
EEYE: Yahoo! Mail Account Filter Overflow Hijack ("Drew Copley" <dcopley@...e.com>)
NetBSD Security Advisory 2004-005: Denial of service vulnerabilities in OpenSSL (NetBSD Security-Officer <security-officer@...bsd.org>)
SGI Advanced Linux Environment security update #18 (SGI Security Coordinator <agent99@....com>)
RE: ZA Security Hole ("Zone Labs Product Security" <Product-Security@...elabs.com>)
Yahoo! Messenger 5.6 - Multiple Remote Crashes(yinsthelper.dll) ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
MDKSA-2004:031-1 - Updated utempter packages fix several vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[slackware-security] xine security update (SSA:2004-111-01) (Slackware Security Team <security@...ckware.com>)
Arbitrary file overwriting in Unreal engine through UMOD (Luigi Auriemma <aluigi@...ervista.org>)

April 23 (13 messages)

TCP Reset Attacks: Paper and Code Now Availble (sullo@...t.net)
Cross Site Scripting fusion news ("k1LL3r B0y" <k1ll3rb0y@...mail.com>)
Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble ("Kurt Seifried" <listuser@...fried.org>)
[VulnDiscuss] Re: TCP Reset Attacks: Paper and Code Now Availble (sullo@...t.net)
Re: [VulnDiscuss] Re: TCP Reset Attacks: Paper and Code Now Availble (Florian Weimer <Weimer@...T.Uni-Stuttgart.DE>)
Re: Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (Brent.Wolfram@....com)
Re: Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (<id3nt@...h.com>)
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble ("Kurt Seifried" <listuser@...fried.org>)
Cisco Survey Information Disclosure (<id3nt@...h.com>)
Netegrity SiteMinder Affiliate Agent Cookie Overflow (<advisories@...take.com>)
Potential Microsoft PCT worm (MS04-011) ("advisories" <advisories@...saire.com>)
EEYE: Symantec Multiple Firewall TCP Options Denial of Service ("Derek Soeder" <dsoeder@...e.com>)
RE: [Full-Disclosure] EEYE: Symantec Multiple Firewall TCP Options Denial of Service (Sym Security <secure@...antec.com>)

April 24 (5 messages)

[waraxe-2004-SA#025 - Multiple vulnerabilities in Protector System 1.15b1 for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)
[waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6] (Janek Vind <come2waraxe@...oo.com>)
[ GLSA 200404-17 ] ipsec-tools and iputils contain a remote DoS vulnerability (Kurt Lieber <klieber@...too.org>)
Apache - all versions vulnerability in OLD procesors. (Adam Zabrocki <pi3ki31ny@...pl>)
Netegrity SiteMinder Affiliate Agent Cookie Overflow (advisories <advisories@...take.com>)

April 26 (12 messages)

Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)
Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)
RE: New Paper - SQL Injection Signatures Evasion ("Imperva Application Defense Center" <adc@...erva.com>)
Re: New Paper - SQL Injection Signatures Evasion ("K. K. Mookhey" <cto@....co.in>)
RE: US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP (<soby@...hmail.com>)
Re: Apache - all versions vulnerability in OLD procesors. (Chris Adams <cmadams@...aay.net>)
Re: Apache - all versions vulnerability in OLD procesors. (Chris Adams <cmadams@...aay.net>)
[HOTFIX] setsockopt kernel vulnerability (nolife <nolife@...segv.cc>)
Re: Apache - all versions vulnerability in OLD procesors. ("Peter J. Holzer" <hjp@....ac.at>)
Samsung SmartEther SS6215S Switch (Kyle Duren <acidrain_ask@...itha.com>)
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)

April 27 (20 messages)

Spammers can hide behind 'Email a friend/article' scripts. (<cyber_flash@...mail.com>)
Horde webmail: mysql access (sig@...ming.tolna.net)
Multiple Vulnerabilities In OpenBB (JeiAr <security@...ftech.org>)
[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm) (joey@...odrom.org (Martin Schulze))
[ GLSA 200404-18 ] Multiple Vulnerabilities in ssmtp ("Joshua J. Berry" <condordes@...too.org>)
Perl code exploting TCP not checking RST ACK. (K sPecial <KsPecial@...zemail.com>)
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (Daniel Regalado Arias <dan57170@...oo.com>)
Remote Format String Vulnerabilities in eXtremail (Luca Ercoli <luca.e@...web.com>)
Multiple vulnerabilities PHP-Nuke Video Gallery Module for PHP-Nuke ("k1LL3r B0y" <k1ll3rb0y@...mail.com>)
RE: Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Rodrigo Gutierrez" <rodrigo@...ellicomp.cl>)
Re: RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (Daniel Regalado Arias <dan57170@...oo.com>)
Re: Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Milan 't4c' Berger" <t4c@...if.de>)
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("KF (lists)" <kf_lists@...netops.com>)
[ GLSA 200404-20 ] Multiple vulnerabilities in xine ("Joshua J. Berry" <condordes@...too.org>)
Re: HP Web JetAdmin vulnerabilities. (FX <fx@...noelit.de>)
Re: Apache - all versions vulnerability in OLD procesors. (Adam Zabrocki <pi3ki31ny@...pl>)
Source Code To Test IPv4 fragmentation --> The Rose Attack (Gandalf The White <gandalf@...ital.net>)
[ GLSA 200404-19 ] Buffer overflows and format string ("Joshua J. Berry" <condordes@...too.org>)
Re: Perl code exploting TCP not checking RST ACK. (Michael Gschwandtner <r3d5un@...etz.com>)
MDKSA-2004:037 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)

April 28 (13 messages)

SGI ProPack v2.4: Kernel update #3 (SGI Security Coordinator <agent99@....com>)
Multiple vulnerabilities paFileDB ("k1LL3r B0y" <k1ll3rb0y@...mail.com>)
Re: Spammers can hide behind 'Email a friend/article' scripts. (matthias@...rum.ch)
Re: Spammers can hide behind 'Email a friend/article' scripts. (3APA3A <3APA3A@...URITY.NNOV.RU>)
resources consumption in DiGi WWW Server ("Donato Ferrante" <fdonato@...istici.org>)
Re: Squirrelmail Chpasswod bof (p dont think <pdontthink@...rynerds.com>)
Re: Apache - all versions vulnerability in OLD procesors. (Peter Pentchev <roam@...glet.net>)
[ESA-20040428-004] 'kernel' Several security and bug fixes (EnGarde Secure Linux <security@...rdiandigital.com>)
Re: Horde webmail: mysql access ("Christopher T. Beers" <ctbeers@....edu>)
[ESA-20040428-004] 'kernel' Several security and bug fixes (EnGarde Secure Linux <security@...rdiandigital.com>)
SMC Routers have remote administration enabled by default (user86 <user86@...thlink.net>)
SGI Advanced Linux Environment security update #19 (SGI Security Coordinator <agent99@....com>)
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("Bryce Porter" <bporter@...rt.net>)

April 29 (18 messages)

Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (BlueRaven <blue@...enconsulting.it>)
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. ("KF (lists)" <kf_lists@...netops.com>)
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (psz@...hs.usyd.edu.au (Paul Szabo))
Re[2]: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (3APA3A <3APA3A@...URITY.NNOV.RU>)
MDKSA-2004:038 - Updated sysklogd packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: SMC Routers have remote administration enabled by default (user86 <user86@...thlink.net>)
Re: SMC Routers have remote administration enabled by default (user86 <user86@...thlink.net>)
MS04011 Lsasrv.dll RPC buffer overflow remote exploit (PoC) (houseofdabus HOD <houseofdabus@...ox.ru>)
Re: SMC Routers have remote administration enabled by default ("Michael Curtis" <email@...to.us>)
Re: phpBB 2.0.8a and lower - IP spoofing vulnerability (Xin LI <delphij@...ntfree.net>)
Re: HP Web JetAdmin vulnerabilities. (Samuel Walker <jackwalker@...rr.com>)
[slackware-security] kernel security updates (SSA:2004-119-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution (joey@...odrom.org (Martin Schulze))
New Worm??? - High level of activity on port 445 (Tony Abell <TonAbe@...tool.com>)
RE: New Worm??? - High level of activity on port 445 ("Roger A. Grimes" <roger@...neretcs.com>)
[ GLSA 200404-21 ] Multiple Vulnerabilities in Samba ("Joshua J. Berry" <condordes@...too.org>)
RE: New Worm??? - High level of activity on port 445 ("Jodrell Dimaculangan" <jodrell@...li.com>)
3com NBX VOIP NetSet Denial of Service Attack ("Michael Scheidell" <scheidell@...nap.net>)

April 30 (31 messages)

RE: New Worm??? - High level of activity on port 445 ("Thor Larholm" <thor@...x.com>)
[RHSA-2004:177-01] An updated X-Chat package fixes vulnerability in Socks-5 proxy (bugzilla@...hat.com)
[RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities (bugzilla@...hat.com)
[RHSA-2004:182-01] Updated httpd packages fix mod_ssl security issue (bugzilla@...hat.com)
SECURITY.NNOV: Sambar security quest (3APA3A <3APA3A@...URITY.NNOV.RU>)
Smart Card ("Michael Silk" <silkm@...hmail.com>)
Re: Smart Card (pgut001@...auckland.ac.nz (Peter Gutmann))
SquirrelMail Cross Scripting Attacks.... (Alvin Alex <alvin_gboy@...mail.com>)
MDKSA-2004:040 - Updated libpng packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[OpenPKG-SA-2004.017] OpenPKG Security Advisory (png) (OpenPKG <openpkg@...npkg.org>)
[SECURITY] [DSA 498-1] New libpng packages fix denial of service (joey@...odrom.org (Martin Schulze))
cqure.net.20040430.citrixmetaframe (Patrik Karlsson <patrik@...re.net>)
A technical description of the SSL PCT vulnerability (CVE-2003-0719) (Juliano Rizzo <juliano.rizzo@...est.com>)
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
TSLSA-2004-0025 - multi (Trustix Security Advisor <tsl@...stix.org>)
Cross Site Scripting in Moodle < 1.3 (Bartek Nowotarski <silence10@...pl>)
[OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd) (OpenPKG <openpkg@...npkg.org>)
MDKSA-2004:039 - Updated mc packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
HP Web Jetadmin (John Morris <jrm@....hp.com>)
TSLSA-2004-0024 - rsync (Trustix Security Advisor <tsl@...stix.org>)
Dameware Mini Remote Control Version 4.2 � Weak Key Agreement Scheme (ax09001h <ax09001h@...mail.com>)
[RHSA-2004:175-01] Updated utempter package fixes vulnerability (bugzilla@...hat.com)
[RHSA-2004:181-01] Updated libpng packages fix crash (bugzilla@...hat.com)
[RHSA-2004:163-01] Updated OpenOffice packages fix security vulnerability in neon (bugzilla@...hat.com)
Re: Smart Card (Eric Murray <ericm@....com>)
[RHSA-2004:173-00] Updated mc packages resolve several vulnerabilities (bugzilla@...hat.com)
Re: SquirrelMail Cross Scripting Attacks.... (Jonathan Angliss <jon@...irrelmail.org>)
RE: After Ms patches last Wed ... ("David Hayden" <dahayden@...bhayden.com>)
IE Certificate Stealing (Phising) bug ("E.Kellinis" <me@...her.org.uk>)
Multi stage attacks on networks? (Sudhakar-bugtraq Govindavajhala <sudhakar@...Princeton.EDU>)
Re: SMC Routers have remote administration enabled by default ("Martin Nedbal" <awe@...trum.cz>)

459 messages

Powered by blists - more mailing lists