bugtraq mailing list - 2004/06

Messages by day:

June 1 (18 messages)

• Re: Possible bug in PHPNuke and other CMS (Sam Bashton <sam@...upport.co.uk>)
• OSVDB Post Go-Live Update, 3000 Stable Entries (jkouns@...nsecurityfoundation.org)
• RE: LinkSys WRT54G administration page availble to WAN ("Alan W. Rateliff, II" <lists@...eliff.net>)
• Re: Possible bug in PHPNuke and other CMS (Luca Falavigna <fala83@...ero.it>)
• Re: LinkSys WRT54G administration page availble to WAN (Steffen Mueller <steffen.mueller@...ion-it.de>)
• Re: Possible bug in PHPNuke and other CMS (Peter Hagstrøm <ph@...dcode.dk>)
• RE: LinkSys WRT54G administration page availble to WAN ("Alan W. Rateliff, II" <lists@...eliff.net>)
• Mollensoft Lightweight FTP Server CWD Buffer Overflow (Aviram Jenik <aviram@...ondsecurity.com>)
• Re: LinkSys WRT54G administration page availble to WAN (Matthew Caron <matt@...tcaron.net>)
• Re: LinkSys WRT54G administration page availble to WAN ("Matthew Gillespie" <mgillespie@...ket.net>)
• Firebird Database Remote Database Name Overflow (Aviram Jenik <aviram@...ondsecurity.com>)
• Re: Possible bug in PHPNuke and other CMS (Alexander GQ Gerasiov <bugtaq@...pp.ru>)
• [Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle (Squid <squidsecurity@...hmail.com>)
• [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier (Squid <squidsecurity@...hmail.com>)
• [Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke (Squid <squidsecurity@...hmail.com>)
• Re: LinkSys WRT54G administration page availble to WAN (Valdis.Kletnieks@...edu)
• MITKRB5-SA-2004-001: buffer overflows in krb5_aname_to_localname (Tom Yu <tlyu@....edu>)
• Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (lupe@...e-christoph.de (Lupe Christoph))

• MDKSA-2004:053 - Updated xpcd package fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:055 - Updated apache2 package fix vulnerability in mod_ssl (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:054 - Updated mod_ssl package fix remote vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (Roman Medina <roman@...labs.com>)
• Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (Matt Zimmerman <mdz@...ian.org>)
• Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (Cory Donnelly <lists2@...you.com>)
• TSSA-2004-008 - apache (tinysofa Security Team <security@...ysofa.org>)
• TSSA-2004-009 - kerberos5 (tinysofa Security Team <security@...ysofa.org>)
• TSLSA-2004-0031 - apache (Trustix Security Advisor <tsl@...stix.org>)
• TSLSA-2004-0032 - kerberos (Trustix Security Advisor <tsl@...stix.org>)
• [SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access (Matt Zimmerman <mdz@...ian.org>)
• ERRATA: [ GLSA 200405-25 ] tla: Multiple vulnerabilities in included libneon (Thierry Carrez <koon@...too.org>)
• Additional information on WRT54G administration page ("Alan W. Rateliff, II" <alan2@...eliff.net>)
• Re: LinkSys WRT54G administration page availble to WAN ("Jason Munro" <jason@...bev.com>)
• MS KB article suggests turning off encrypted passwords for Mac clients ("Steve Shockley" <steve.shockley@...ckley.net>)
• RE: Additional information on WRT54G administration page ("Mike Riella" <mriella@...-pitco.com>)
• Remote SMTP authentication audit tool? ("Byron Pezan" <mbp@...bit.net>)
• RE: LinkSys WRT54G administration page availble to WAN ("Humes, David G." <David.Humes@...apl.edu>)

• [VulnDiscuss] Re: [Full-Disclosure] Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (Roman Medina <roman@...labs.com>)
• [SECURITY] [DSA 499-2] New rsync packages fix directory traversal bug (Matt Zimmerman <mdz@...ian.org>)
• Format String Vulnerability in Tripwire (Paul Herman <pherman@...nchfries.net>)
• [Fwd: Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird] ("KF (lists)" <kf_lists@...netops.com>)
• Phishing for Opera (GM#007-OP) (GreyMagic Software <security@...ymagic.com>)
• Mkdir buffer overflow vulnerability in Unix Seventh Edition. (Tim Newsham <newsham@...a.net>)
• Simple Yahoo! Mail Cross-Site Scripting (GM#006-MC) (GreyMagic Software <security@...ymagic.com>)
• DoS vuln in various versions of Linksys routers. (b0f www.b0f.net <b0fnet@...oo.com>)
• TREND MICRO: The Protector Becomes The Vector [technical exercise: cross-application-scripting] ("http-equiv@...ite.com" <1@...ware.com>)
• PHP Include Exploit in Mail Manage EX v3.1.8 and maybe others. ("JvdR" <thewarlock@...e.nl>)
• DOS@...nosv ("CoolICE" <CoolICE@...na.com>)
• Netgear WG602 Accesspoint vulnerability (Tom Knienieder <knienieder@...msin.ch>)
• RE: Remote SMTP authentication audit tool? ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
• [SECURITY] [DSA 513-1] New log2mail packages fix format string vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• NetBSD Security Advisory 2004-008: CVS server vulnerability (NetBSD Security-Officer <security-officer@...bsd.org>)
• Re: LinkSys WRT54G administration page availble to WAN ("Peter Becker" <peter.becker@...rkassel.de>)

• Re: Netgear WG602 Accesspoint vulnerability (lupe@...e-christoph.de (Lupe Christoph))
• Re: Format String Vulnerability in Tripwire (Ron Forrester <rjf@...pwire.com>)
• MDKSA-2004:056 - Updated krb5 packages fix buffer overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [FLSA-2004:1620] Updated cvs resolves security vulnerabilities (fedora-legacy-announce@...hat.com)
• UPDATED: MITKRB5-SA-2004-001: krb5_aname_to_localname (Tom Yu <tlyu@....edu>)
• HERT Relaunch (gaius <gaius@...t.org>)
• RE: PING: Outlook 2003 Spam ("Spencer, Mark" <mspencer@...dentdata.com>)
• CPANEL Vuln : HTML injection (qbann targ <web@...micrealms.com>)
• NYC Security Shindig Version 2.0 (with punch and pie!) (Dave Aitel <dave@...unitysec.com>)
• Cross-site scripting vulnerability in Crafy Syntax Live Help 2.7.3 and below ("John C. Hennessy" <jchennessy@...ts.net>)
• RE: Remote SMTP authentication audit tool? ("Bojan Zdrnja" <Bojan.Zdrnja@....hr>)
• Re: Possible bug in PHPNuke and other CMS (BlueRaven <blue@...enconsulting.it>)
• Re: Netgear WG602 Accesspoint vulnerability (Mathias Kuester <mathen@...elhot.de>)
• RE: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability ("James C Slora Jr" <Jim.Slora@...a.com>)
• [openwebmail] Fw: Re: XSS bug. ("A. Ramos" <aramosf@...ec.net>)
• RE: PING: Outlook 2003 Spam ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Format String Vulnerability in Tripwire (Ron Forrester <rjf@...pwire.com>)
• bss-based buffer overflow in l2tpd (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• Colin McRae Rally 04 broadcast clients crash (Luigi Auriemma <aluigi@...ervista.org>)
• Re: LinkSys WRT54G administration page availble to WAN (Paul Wouters <paul@...net.nl>)
• Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite ("Integrigy Security" <alerts@...egrigy.com>)
• The Linksys WRT54G "security problem" doesn't exist ("David Pipe" <David_Pipe@...-rad.com>)

• [SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc) (joey@...odrom.org (Martin Schulze))
• Re: LinkSys WRT54G administration page availble to WAN (Jerry Zwanenburg <J.Zwanenburg@...llo.nl>)
• Re: Format String Vulnerability in Tripwire (Ron Forrester <rjf@...pwire.com>)
• Re: [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier (Remy Wetzels <r.wetzels@...llo.nl>)
• Re: The Linksys WRT54G "security problem" doesn't exist (<caldcv@...dents.fccj.org>)
• Bank of America security e-mail address (<caldcv@...dents.fccj.org>)
• RE: The Linksys WRT54G "security problem" doesn't exist ("Alan W. Rateliff, II" <lists@...eliff.net>)
• Re: The Linksys WRT54G "security problem" doesn't exist (insecure <insecure@...ritech.net>)
• Administrivia: Summer autoreply troll (David Ahmad <da@...urityfocus.com>)
• Re: Netgear WG602 Accesspoint vulnerability (lupe@...e-christoph.de (Lupe Christoph))
• [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)

• Re: Netgear WG602 Accesspoint vulnerability (Jaco Swart <jaco@...ocks.co.uk>)
• Re: Netgear WG602 Accesspoint vulnerability (James Garrison <jhg@...ensgroup.com>)
• Re: Netgear WG602 Accesspoint vulnerability (James Garrison <jhg@...ensgroup.com>)
• RE: Re: Netgear WG602 Accesspoint vulnerability ("Jan-Peter Koopmann" <Jan-Peter.Koopmann@...eidos.de>)

• Re: Netgear WG602 Accesspoint vulnerability (Rip Toren <rtoren@...ures-inc.com>)
• Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Jelmer <jkuperus@...net.nl>)
• RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Chris Carlson" <chris@...pucounts.com>)
• RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Larry Seltzer" <larry@...ryseltzer.com>)
• RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Jelmer <jkuperus@...net.nl>)
• TREND MICRO: The Protector Becomes The Vector Take II ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Netgear WG602 Accesspoint vulnerability (RISKO Gergely <xmicro@...ko.hu>)
• Linksys WRT54G - Advice for european users (Christer Palm <palm@...ui.se>)
• Re: Netgear WG602 Accesspoint vulnerability (<auron@...cn.co.uk>)
• Linksys BEFSR41 DHCP vulnerability server leaks network data (Lance Armstrong <mishlai@...mail.com>)
• Re: Bank of America security e-mail address (Marc Bejarano <bugtraq@...j.org>)
• Re: [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier (Squid <squidsecurity@...hmail.com>)
• cPanel mod_php suEXEC Taint Vulnerability (Rob Brown <rob@...uad.com>)
• MS ISA SP2 out last month ("Paul Appleby" <Appleby@...s.org>)

• OBJECT Bugs or Features ("James C Slora Jr" <Jim.Slora@...a.com>)
• RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Larry Seltzer" <larry@...ryseltzer.com>)
• Re: Netgear WG602 Accesspoint vulnerability (Hostmaster <hostmaster@...emedien.net>)
• [product-security@...le.com: APPLE-SA-2004-06-07 Security Update 2004-06-07] (David Ahmad <da@...urityfocus.com>)
• Multiple vulnerabilities PHP-Nuke ("Dark Bicho" <k1ll3rb0y@...mail.com>)
• Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Gadi Evron <ge@...uxbox.org>)
• Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("http-equiv@...ite.com" <1@...ware.com>)
• RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Jelmer <jkuperus@...net.nl>)
• RE: Linksys WRT54G - Advice for european users ("Connor, Ethan M. W" <emconnor@...dersonbrothers.com>)
• RE: The Linksys WRT54G "security problem" doesn't exist ("David Gillett" <gillettdavid@...a.edu>)
• Re: Internet Explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (<ctor@...hmail.com>)
• Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Gadi Evron <ge@...uxbox.org>)
• Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Gadi Evron <ge@...uxbox.org>)
• [sb] RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Chris Carlson" <chris@...pucounts.com>)
• n0t (Marcin Ulikowski <r3b00t@...ec.pl>)
• SMC 7008ABRv2 and 7004VBRv1 updated firmware corrects port 1900 issue. (user86 <user86@...thlink.net>)
• Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities (<lw@...ia.edu.pl>)
• Linksys Web Camera File Inclusion Vuln (John Doe <scriptX_@...mail.com>)
• Re: Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Michael Evanchik" <Mike@...haelEvanchik.com>)
• RE: Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Jelmer <jkuperus@...net.nl>)
• Re: Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Gadi Evron <ge@...uxbox.org>)
• RE: Multiple vulnerabilities PHP-Nuke (Jeruvy <jeruvy@...w.ca>)
• Various crashs and fun in Race Driver 1.20 (Luigi Auriemma <aluigi@...ervista.org>)
• Re: OBJECT Bugs or Features (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Vulnerability: Arbitrary File Access & DoS in Crystal Reports ("Imperva Application Defense Center" <adc@...erva.com>)
• U.S. Robotics Broadband Router 8003 admin password visible (Fernando Sanchez <fer@....fi.udc.es>)
• Re: Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("http-equiv@...ite.com" <1@...ware.com>)
• Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• RE: Linksys WRT54G - Advice for european users ("micm" <micm@...h.org.uk>)
• KM-2004-01: Cross-Site Scripting in Blosxom writeback (Kyle Maxwell <kylem@...ll.org>)

• Re: OBJECT Bugs or Features ("http-equiv@...ite.com" <1@...ware.com>)
• Aspell 'word-list-compress' stack overflow vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• unauthorized deletion of IPsec SAs in isakmpd, still (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• Re: Re: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) (Gadi Evron <ge@...tistical.reprehensible.net>)
• [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability (Kurt Lieber <klieber@...too.org>)
• Advisory 09/2004: More CVS remote vulnerabilities (Stefan Esser <s.esser@...atters.de>)
• Re: OBJECT Bugs or Features (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. ("JvdR" <thewarlock@...e.nl>)
• Trend Officescan local privilege escalation ("Donald Reid" <donald_reid@...mail.com>)
• Re: n0t (Michal Zalewski <lcamtuf@...edump.cx>)
• SUSE Security Announcement: cvs (SuSE-SA:2004:015) (thomas@...e.de (Thomas Biege))
• Major Cpanel Expliot HTML Injection (Virtual Nova Web Hosting services virtualnova.net <verb0s@...tualnova.net>)
• TSSA-2004-010 - squid (tinysofa Security Team <security@...ysofa.org>)
• Potential Security Flaw in Symantec Gateway Security 360R (Dev Null <devnull@....net>)
• RE: Question About Ethics and Full Disclosure ("Joe Klein" <jsklein@...dspring.com>)
• Re: Linksys WRT54G - Advice for european users (Richard Bjerregaard <bjerregaard@...e.dk>)
• Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• RE: OBJECT Bugs or Features (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
• [FULL DISCLOSURE] ASPDOTNETSTOREFRONT Improper Session Validation ("Tom" <tommy@...videsecurity.com>)
• Re: OBJECT Bugs or Features (Valdis.Kletnieks@...edu)

• Metasploit Framework v2.1 (H D Moore <sflist@...italoffense.net>)
• [FULL DISCLOSURE] ASPDOTNETSTOREFRONT Cross-Site Scripting Vulnerability ("Tom" <tommy@...videsecurity.com>)
• SUSE Security Announcement: squid (SuSE-SA:2004:016) (thomas@...e.de (Thomas Biege))
• MDKSA-2004:059 - Updated squid packages fix remotely exploitable vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• ADVISORY: ASPDOTNETSTOREFRONT Improper Upload Validation ("Tom" <tommy@...videsecurity.com>)
• RE: OBJECT Bugs or Features ("James C Slora Jr" <Jim.Slora@...a.com>)
• Mkdir exploit for PDP-11 doesn't work (Jonathan S <js@...llo.gti.net>)
• FreeBSD Security Advisory FreeBSD-SA-04:12.jailroute (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• [sb] [ GLSA 200406-05 ] Apache: Buffer overflow in mod_ssl ("Thierry Carrez" <koon@...too.org>)
• Re: unauthorized deletion of IPsec SAs in isakmpd, still (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• FD info prompts M$ to summon the FBI on spy-vertisers ("http-equiv@...ite.com" <1@...ware.com>)
• MDKSA-2004:058 - Updated cvs packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: Multiple vulnerabilities PHP-Nuke (Squid <squidsecurity@...hmail.com>)
• RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Drew Copley" <dcopley@...e.com>)
• [SECURITY] [DSA 517-1] New CVS packages fix buffer overflow (joey@...odrom.org (Martin Schulze))
• Edimax 7205APL (<msl@...mans-industries.nl>)
• [security bulletin] SSRT3456 HP-UX ftp remote unauthorized access ("Boren, Rich (SSRT)" <rich.boren@...com>)

• Blackboard Learning System - Stealing documents out of the digital dropbox (Maarten Verbeek <system_error@...dora.be>)
• 10 Month Old Vulnerability Continues to Be Core For Exploits ("Drew Copley" <dcopley@...e.com>)
• RE: Question About Ethics and Full Disclosure ("Syste Op" <sysop5@...mail.com>)
• MDKSA-2004:060 - Updated ksymoops packages fix symlink vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• RE: [Fwd: COELACANTH: Phreak Phishing Expedition] ("Drew Copley" <dcopley@...e.com>)
• RE: COELACANTH: Phreak Phishing Expedition] ("Thor Larholm" <thor@...x.com>)
• EEYE: RealPlayer embd3260.dll Error Response Heap Overflow ("Derek Soeder" <dsoeder@...e.com>)
• RE: COELACANTH: Phreak Phishing Expedition ("Thor Larholm" <thor@...x.com>)
• [sb] RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) ("Drew Copley" <dcopley@...e.com>)
• Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. ("JvdR" <thewarlock@...e.nl>)
• TSLSA-2004-0033 - squid (Trustix Security Advisor <tsl@...stix.org>)
• Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. (Mike Healan <mike@...wareinfo.com>)
• [0xbadc0ded #04] smtp.proxy <= 1.1.3 (Joel Eriksson <je-secfocus@...nux.com>)
• RE: Question About Ethics and Full Disclosure ("Drew Copley" <dcopley@...e.com>)
• NetBSD kernel swapctl(2) vulnerability ("Evgeny Demidov" <demidov@...g.net>)
• Re: Question About Ethics and Full Disclosure (Stefan de Bruijn <s.t.j.debruijn@...dent.utwente.nl>)
• Multiple vulnerabilities in RealPlayer (#NISR11062004) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• RE: Potential Security Flaw in Symantec Gateway Security 360R (Symantec Product Security Team <secure@...antec.com>)
• [SNS Advisory No.74] Webmin Access Control Rule Bypass Vulnerability (snsadv@....co.jp (snsadv))
• FOUND: COELACANTH: Phreak Phishing Expedition ("http-equiv@...ite.com" <1@...ware.com>)
• Notes: COELACANTH: Phreak Phishing Expedition ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Multiple Vulnerabilities in Invision Power Board v1.3.1 Final. (Hillel Himovich <hll@...vision.net.il>)
• [OpenPKG-SA-2004.028] OpenPKG Security Advisory (subversion) (OpenPKG <openpkg@...npkg.org>)
• RE: COELACANTH: Phreak Phishing Expedition] ("Drew Copley" <dcopley@...e.com>)
• Re: Blackboard Learning System - [addition] (Maarten Verbeek <system_error@...dora.be>)
• RE: COELACANTH: Phreak Phishing Expedition] ("Thor Larholm" <thor@...x.com>)

• Multiple vulnerabilities in RealPlayer (#NISR11062004) ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
• RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition ("Drew Copley" <dcopley@...e.com>)
• RE: COELACANTH: Phreak Phishing Expedition] (Jelmer <jkuperus@...net.nl>)
• RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• RE: COELACANTH: Phreak Phishing Expedition] (Benjamin Franz <snowhare@...ongo.org>)
• RE: RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition (Jelmer <jkuperus@...net.nl>)
• [FMADV] Subversion <= 1.04 Heap Overflow (ned <nd@...inemenace.org>)
• SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition ("http-equiv@...ite.com" <1@...ware.com>)
• MS web designers -- "What Security Initiative?" (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: MS web designers -- "What Security Initiative?" (David Maxwell <david@....net>)
• Re: Potential Security Flaw in Symantec Gateway Security 360R (ed p <firewall1e@...scape.net>)
• RE: Multiple vulnerabilities PHP-Nuke (Jeruvy <jeruvy@...w.ca>)
• Eudora SPAM Issues.. (ICI Security Team <Security@...initeConsulting.net>)

• RE: MS web designers -- "What Security Initiative?" ("Morning Wood" <se_cur_ity@...mail.com>)
• [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache) (OpenPKG <openpkg@...npkg.org>)
• SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition ("http-equiv@...ite.com" <1@...ware.com>)
• Advisory 10/2004: Chora CVS/SVN Viewer remote vulnerability (Stefan Esser <s.esser@...atters.de>)
• Antivirus/Trojan/Spyware scanners DoS! (bipin gautam <visitbipin@...oo.com>)
• MDKSA-2004:056-1 - Updated krb5 packages fix buffer overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)

• [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) (OpenPKG <openpkg@...npkg.org>)
• [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3] (Janek Vind <come2waraxe@...oo.com>)
• COELACANTH: After Math ("http-equiv@...ite.com" <1@...ware.com>)
• Infosec News Blog (m5754074@...ubis.com)
• RE: Antivirus/Trojan/Spyware scanners DoS! ("Aditya, ALD [Aditya Lalit Deshmukh]" <aditya.deshmukh@...ine.gateway.technolabs.net>)
• VP-ASP Shopping Cart Multiple Vulnerabilities ("Thomas Ryan" <tommy@...videsecurity.com>)
• COELACANTH: After Math ("http-equiv@...ite.com" <1@...ware.com>)
• VICE emulator format string vulnerability (Spiro Trikaliotis <trik-news@....de>)
• Re: Potential Security Flaw in Symantec Gateway Security 360R (Dev Null <devnull@....net>)
• Re: The Linksys WRT54G "security problem" doesn't exist (<caldcv@...dents.fccj.org>)
• PHP escapeshellarg Windows Vulnerability ("Daniel Fabian" <d.fabian@...-consult.com>)
• RE: Linksys WRT54G - Advice for european users ("Connor, Ethan M. W" <emconnor@...dersonbrothers.com>)
• Skype URI callto username overflow (Hillel Himovich <hll@...vision.net.il>)
• Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: (GOTO Masanori <gotom@...ian.or.jp>)
• COELACANTH: Phreak Phishing Expedition ("http-equiv@...ite.com" <1@...ware.com>)
• New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection ("Rusty Chiles" <rustychiles@....net>)
• [SECURITY] [DSA 518-1] New kdelibs packages fix URI handler vulnerabilities (joey@...odrom.org (Martin Schulze))
• Linksys Web Camera Cross-site Scripting Vuln (Tyler Guenter aka scriptX <scriptX_@...mail.com>)
• Antivirus/Trojan/Spyware scanners DoS! (Bipin Gautam <visitbipin@...mail.com>)
• Multiple Antivirus Scanners DoS attack. ("bipin gautam" <visitbipin@...mail.com>)
• Re: Multiple Antivirus Scanners DoS attack. ("Ethy H. Brito" <ethy@...xo.com.br>)
• Antivirus/Trojan/Spyware scanners DoS [summary] (Bipin Gautam <visitbipin@...mail.com>)
• Re: Eudora SPAM Issues.. (Followup) (ICI Security Team <Security@...initeConsulting.net>)
• Re: Mkdir exploit for PDP-11 doesn't work (Denis Solaro <dsolaro@...enet.de>)

• IRIX syssgi system call vulnerability and other security fixes (SGI Security Coordinator <agent99@....com>)
• RE: Antivirus/Trojan/Spyware scanners DoS! ("Romulo M. Cholewa" <rmc@....eti.br>)
• authentication bug in KAME's racoon (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection ("Romulo M. Cholewa" <rmc@....eti.br>)
• Re: MS web designers -- "What Security Initiative?" (Greg Kujawa <greg.kujawa@...mondcellar.com>)
• RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection ("Drew Copley" <dcopley@...e.com>)
• Re: Eudora SPAM Issues.. ("Greg A. Woods" <woods@...rd.com>)
• [ESA-1] Denial of Service in thy (Jerome <jethro@...island.org>)
• RE: Multiple Antivirus Scanners DoS attack. ("Messer, Jon" <JMesser@...co.com>)
• [security bulletin] SSRT4717 rev.0 HP Tru64 UNIX SSL/TLS Potential Remote Denial of Service (DoS) ("Boren, Rich (SSRT)" <rich.boren@...com>)
• MAGIC XSS INTO THE DNS: coelacanth ("http-equiv@...ite.com" <1@...ware.com>)
• RE: Multiple Antivirus Scanners DoS attack. ("Bo Rasmussen" <brr@...esign.dk>)
• ActiveX control download and redirection ("Martijn Brinkers" <m.brinkers@...ox.com>)
• Re: authentication bug in KAME's racoon (Michal Ludvig <michal@...ix.cz>)
• Unprivilegued settings for FreeBSD kernel variables (Radko Keves <rado@...tra.sk>)
• Web Wiz Forums Registration Rules XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• RE: Internet Explorer Remote Null Pointer Crash(mshtml.dll) ("Thor Larholm" <thor@...x.com>)
• Re: MS web designers -- "What Security Initiative?" (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Web Wiz Forums Registration Rules XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• Symantec Enterprise Firewall DNSD cache poisoning Vulnerability (fryxar <fryxar@...afull.com>)
• [SECURITY] [DSA 519-1] New CVS packages fix several potential security problems (joey@...odrom.org (Martin Schulze))

• RE: Internet Explorer Remote Null Pointer Crash(mshtml.dll) ("http-equiv@...ite.com" <1@...ware.com>)
• [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability (snsadv@....co.jp (snsadv))
• RE: New IRC Trojan -Symantec and Trend Micro Unable To Stop Infection (Jelmer <jkuperus@...net.nl>)
• [VulnDiscuss] Web Wiz Forums Registration Rules XSS Vulnerability ("Ferruh Mavituna" <ferruh@...ituna.com>)
• IBM acpRunner Activex Dangerous Methods Vulnerability ("Drew Copley" <dcopley@...e.com>)
• "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability ("Drew Copley" <dcopley@...e.com>)
• RE: [ GLSA 200406-10 ] Gallery: Privilege escalation vulnerability ("Bob Walton" <bob@...ecsystems.com>)
• RE: MAGIC XSS INTO THE DNS: coelacanth ("Drew Copley" <dcopley@...e.com>)
• Cisco Security Advisory: Cisco IOS Malformed BGP packet causes reload (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• TSLSA-2004-0034 - kernel (Trustix Security Advisor <tsl@...stix.org>)
• Re: Unprivilegued settings for FreeBSD kernel variables (des@....no (Dag-Erling Smørgrav))
• First documented cell phone virus //no code or 0-days// just info ("System Administrator" <lowdownhaxor@...mail.com>)
• RE: Multiple Antivirus Scanners DoS attack. ("Brian Christmas" <bchristmas@...wardtechnology.net>)
• Re: Symantec Enterprise Firewall DNSD cache poisoning Vulnerability (Sym Security <secure@...antec.com>)

• Re: authentication bug in KAME's racoon (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• Caveat Lector: Beastie Boys Evil (Dragos Ruiu <dr@....net>)
• Linux Kernel i2c Integer Overflow Vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• Re: Multiple Antivirus Scanners DoS attack. (Tucker <sopapa@...retta.com.ar>)
• Problem With IP Logging In Invision Power Board? (GulfTech Security <security@...ftech.org>)
• webauction (bq@....at)
• Checkpoint Firewall-1 IKE Vendor ID information leakage (Roy Hills <Roy.Hills@...-monitor.com>)
• Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: (GOTO Masanori <gotom@...ian.or.jp>)
• Re: Multiple Antivirus Scanners DoS attack. (<jspanitz@...ls.com>)
• Is predictable spam filtering a vulnerability? ("R Armiento" <rar_bt@...iento.se>)
• phpMyChat 0.14.5 (HEX <hex@....net.ru>)
• Re: [ GLSA 200406-12 ] Webmin: Multiple vulnerabilities (Larry <lists@...sd.com>)
• SUSE Security Announcement: kernel (SuSE-SA:2004:017) (thomas@...e.de (Thomas Biege))
• Re: Re: [ GLSA 200406-12 ] Webmin: Multiple vulnerabilities (Valdis.Kletnieks@...edu)
• XSS in Snitz Forum 2000 ("Pete Foster" <petef@...-tec.co.uk>)

• [SECURITY] [DSA 520-1] New krb5 packages fix buffer overflows (Matt Zimmerman <mdz@...ian.org>)
• Re: Linux Kernel i2c Integer Overflow Vulnerability (Alexander Nyberg <alexn@...ia.com>)
• Re: authentication bug in KAME's racoon (Michal Ludvig <michal@...ix.cz>)
• Fwd : FD/IE: Popup object fakes the location field (<liudieyu@...rella.name>)
• USB risks (continued) (Gadi Evron <ge@...tistical.reprehensible.net>)
• Singapore password file exploit ("Mr. Anderson" <dt_student@...mail.com>)
• RE: Caveat Lector: Beastie Boys Evil (Chris Merkel <chrism@...-synthetics.com>)
• TSLSA-2004-0035 - kernel (Trustix Security Advisor <tsl@...stix.org>)
• "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability ("Drew Copley" <dcopley@...e.com>)
• Re: Caveat Lector: Beastie Boys Evil (<jonspanos@...oo.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables ("Eygene A. Ryabinkin" <rea@....mbslab.kiae.ru>)
• Re: Unprivilegued settings for FreeBSD kernel variables (Manuel Bouyer <bouyer@...ioche.eu.org>)
• Re: Is predictable spam filtering a vulnerability? (Joel Eriksson <je-secfocus@...nux.com>)
• RE: Is predictable spam filtering a vulnerability? ("Aaron Cake" <aaron@...pm.com>)
• Re: Caveat Lector: Beastie Boys Evil (Shaun Lipscombe <shaun.lipscombe@...l.co.uk>)
• RE: Is predictable spam filtering a vulnerability? ("Hamlesh Motah" <admin@...lesh.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables ("Jason V. Miller" <jmiller@...urityfocus.com>)
• Code execution in the Unreal Engine through \secure\ packet (Luigi Auriemma <aluigi@...istici.org>)
• Re: Problem With IP Logging In Invision Power Board? (Brian Dessent <brian@...sent.net>)
• Re: Symantec Enterprise Firewall DNSD cache poisoning Vulnerability (Peter Jelver <pj@...c.dk>)

• ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS (Erik Sperling Johansen <einride@...ride.org>)
• Re: Linux Kernel i2c Integer Overflow Vulnerability (Greg KH <greg@...ah.com>)
• Re: Is predictable spam filtering a vulnerability? ("David F. Skoll" <dfs@...ringpenguin.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables (Christian Ullrich <chris@...ullrich.de>)
• Re: Caveat Lector: Beastie Boys Evil ("KF (lists)" <kf_lists@...netops.com>)
• TSL-2004-0036 - kerberos (Trustix Security Advisor <tsl@...stix.org>)
• Re: Linux Kernel i2c Integer Overflow Vulnerability (Shaun Colley <shaunige@...oo.co.uk>)
• Starwood security contacts ("Liu, Jinsong" <JLiu@...eseeker.com>)
• Virus scan attack (Nate Nord <natenord@...imus.com>)
• Re: MAGIC XSS INTO THE DNS: coelacanth (<qazxdrgb@...mail.com>)
• RE: Caveat Lector: Beastie Boys Evil ("Wolf, Glenn" <glenn.wolf@...inc.com>)
• RE: Antivirus/Trojan/Spyware scanners DoS! (<secfocuslist@...oo.com>)
• Re: Multiple Antivirus Scanners DoS attack. (Jacek Osiecki <pingwinus@...zta.fm>)
• Re: Unprivilegued settings for FreeBSD kernel variables (Ivaylo Kostadinov <ivaylo.kostadinov@...puting-services.oxford.ac.uk>)
• Re: Is predictable spam filtering a vulnerability? (Ilya Sher <ilya79@...com.net.il>)
• exploiting overflowed kmalloc() memory? (infamous41md@...pop.com)
• RE: SECURE SOCKETS LAYER COELACANTH: Phreak Phishing Expedition (Jelmer <jkuperus@...net.nl>)
• Re: USB risks (continued) (RSnake <rsnake@...cking.com>)
• Re: Re: USB risks (continued) (Harlan Carvey <keydet89@...oo.com>)
• USB risks - working autorun example (fwd from pen-test) (Gadi Evron <ge@...tistical.reprehensible.net>)
• Re: Re: USB risks (continued) (Jp Wise <jpwise@...thome.net>)
• Internet Scanner 7 Restriction Bypass Vulnerability (Chris Hurley <churley@...ureddecisions.com>)
• [SECURITY] [DSA 516-1] New odbc-postgresql packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Re: USB risks - working autorun example (fwd from pen-test) (Harlan Carvey <keydet89@...oo.com>)
• Re: Is predictable spam filtering a vulnerability? (Jon Fiedler <jmf9@...u.edu>)
• Re: Is predictable spam filtering a vulnerability? ("David F. Skoll" <dfs@...ringpenguin.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables (Valdis.Kletnieks@...edu)
• Re: Is predictable spam filtering a vulnerability? (Gadi Evron <ge@...uxbox.org>)
• RE: Is predictable spam filtering a vulnerability? ("Romulo M. Cholewa" <rmc@....eti.br>)
• Re: Is predictable spam filtering a vulnerability? (Jason Coombs <jasonc@...ence.org>)
• RE: Is predictable spam filtering a vulnerability? ("Andrew Hunter" <andiroohunter@....com>)

• RE: Antivirus/Trojan/Spyware scanners DoS! (Security List <secfocuslist@...oo.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables (Henning Brauer <hb-bugtraq@...s.de>)
• Re: Caveat Lector: Beastie Boys Evil (PC Sage <swayze@...age.biz>)
• RE: Is predictable spam filtering a vulnerability? (Lance James <lance.james@...bone.com>)
• Re: Caveat Lector: Beastie Boys Evil ("Hamilton Frail" <h.frail@...pond.com>)
• Re: Is predictable spam filtering a vulnerability? ("Bill Burge" <bill@...ge.com>)
• Re: Is predictable spam filtering a vulnerability? (PSE-L@...l.professional.org (Sean Straw / PSE))
• Script injection in DNSONE appliance (c3rb3r <c3rb3r@...patico.ca>)
• Re: USB risks (continued) ("Kevin Davis" <computerguy@....rr.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables ("blexim" <blexim@...h.com>)
• Security flaw in rssh (Derek Martin <code@...zashack.org>)

• SUSE Security Announcement: subversion (SuSE-SA:2004:018) (security@...e.de)
• time (Greg Obremski <obremski@...placed.net>)
• Re: Is predictable spam filtering a vulnerability? (krispykringle@...too.org)
• Re: Unprivilegued settings for FreeBSD kernel variables ("Jason V. Miller" <jmiller@...urityfocus.com>)
• Re: Caveat Lector: Beastie Boys Evil (Ron Thigpen <rthigpen@...rr.com>)
• MDKSA-2004:057 - Updated tripwire packages fix format string vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability (snsadv@....co.jp (snsadv))
• Re: Multiple Antivirus Scanners DoS attack. (Yosif Sleman <sleman@...pranet.gob.mx>)
• Re: [SECURITY] [DSA 139-1] New super packages fix local root exploit (<gobbles@...hmail.com>)
• Troubles with Wireless pentest (sammy adedayo <sammyscity@...oo.com>)
• [ESA-20040621-005] 'kernel' Several vulnerabilities (EnGarde Secure Linux <security@...rdiandigital.com>)
• RE: COELACANTH: Phreak Phishing Expedition] ("Drew Copley" <dcopley@...e.com>)
• Re: Troubles with Wireless pentest (Filipe Almeida <filipe.almeida@...il.com>)
• Re: Is predictable spam filtering a vulnerability? (Kyle Wheeler <kyle-bugtraq@...oryhole.net>)
• SGI Advanced Linux Environment 3 Security Update #3 (SGI Security Coordinator <agent99@....com>)

• SGI Advanced Linux Environment 2.4 security update #21 (SGI Security Coordinator <agent99@....com>)
• TSSA-2004-011 - kernel (tinysofa Security Team <security@...ysofa.org>)
• XSS vulnerability in Sqwebmail 4.0.4 (Luca Legato <luca.legato@...iaservice.net>)
• DLINK 614+, script injection vulnerability (c3rb3r <c3rb3r@...patico.ca>)
• IE/0DAY -> Insider Prototype (<liudieyu@...rella.name>)
• ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability (Kurczaba Associates advisories <advisories@...czaba.com>)
• Re: Multiple Antivirus Scanners DoS attack. (Jason Haar <Jason.Haar@...mble.co.nz>)
• Re: Virus scan attack ("Joao B. Diehl" <diehl@....inpe.br>)
• SGI Advanced Linux Environment 3 Security Update #4 (SGI Security Coordinator <agent99@....com>)
• SGI Advanced Linux Environment 2.4 security update #22 (SGI Security Coordinator <agent99@....com>)
• Multiple osTicket exploits! (Guy Pearce <dt_student@...mail.com>)
• NETGEAR FVS318 Web-Based Administration DoS (Kurczaba Associates advisories <advisories@...czaba.com>)
• Re: Is predictable spam filtering a vulnerability? (Chris Brown <chris@...etex.com>)
• Unusual Activity in Ad-aware 6 Personal, Build 6.181 ("fedhead" <fedhead@...ers.com>)
• Re: [SECURITY] [DSA 139-1] New super packages fix local root exploit (Max Vozeler <max@...terhof.net>)
• Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password) ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
• Re: Troubles with Wireless pentest ("zcrips xrabbitz" <zcrips_xrabbitz@...mail.com>)
• [SECURITY] [DSA 522-1] New super packages fix format string vulnerability (Matt Zimmerman <mdz@...ian.org>)
• Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 (Steve Ryan <sirsteve@...ernetcds.com>)
• Re: Virus scan attack (Vincent Archer <var@...y-all.com>)
• Antivirus/Trojan/Spyware scanners DoS! ("No Spam" <NoSpam@...ach.com>)
• linux kernel IEEE1394(Firewire) driver integer overflow vulnerabilities (infamous41md@...pop.com)
• Re: exploiting overflowed kmalloc() memory? (infamous42md@...pop.com)
• Administrivia: Technical difficulties (David Ahmad <da@...urityfocus.com>)
• mcafee dat corrupted? (was: Virus scan attack) (Diyan Christian <diyan@...ra.net.id>)
• Re: Virus Scan Attack ("Paul Knibbs" <pknibbs@...co.uk>)
• [ESA-20040621-005] 'kernel' Several vulnerabilities (EnGarde Secure Linux <security@...rdiandigital.com>)
• Re: Unprivilegued settings for FreeBSD kernel variables (wietse@...cupine.org (Wietse Venema))
• MDKSA-2004:061 - Updated dhcp packages fix buffer overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)

• [CLA-2004:845] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
• Re: Virus scan attack (Victor Julien <victor@...nl>)
• ArbitroWeb v0.6 Javascript injection vulnerability (Josh Gilmour <joshg@...qwest.com>)
• Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 (Greg Kujawa <greg.kujawa@...mondcellar.com>)
• [SECURITY] [DSA 521-1] New sup packages fix format string vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• RE: Antivirus/Trojan/Spyware scanners DoS! (Ian Bergman <Ian@...events.com>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (Martin Mačok <martin.macok@...erground.cz>)
• Re: Caveat Lector: Beastie Boys Evil ("Jonas Mixter" <jonas.mixter@...tport.se>)
• Re: Is predictable spam filtering a vulnerability? (Luca Berra <bluca@...edia.it>)
• Re: Is predictable spam filtering a vulnerability? (Crispin Cowan <crispin@...unix.com>)
• [SECURITY] [DSA 523-1] New www-sql packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
• Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 (Noone@...here.com)
• Re[2]: Caveat Lector: Beastie Boys Evil ("Matthew Leeds" <mleeds@...leeds.net>)
• DHCP Vuln // no code 0day // ("System Administrator" <lowdownhaxor@...mail.com>)
• Re: [security] Unusual Activity in Ad-aware 6 Personal, Build 6.181 (Shawn McMahon <smcmahon@....com>)
• [OT] Safe spam filtering methods (was: Is predictable spam filtering a vulnerability?) ("The Fungi" <fungi@...goth.org>)
• Re: Virus scan attack ("Joe Fubar" <fubar1@....net>)
• Microsoft MN-500 Wireless Router Web-Based Administration DoS (Kurczaba Associates advisories <advisories@...czaba.com>)
• Re: Unusual Activity in Ad-aware 6 Personal, Build 6.181 ("Russell J. Wood" <rjw@...n-cpp.net>)
• DLINK 704, script injection vulnerability (c3rb3r <c3rb3r@...patico.ca>)
• Re: Is predictable spam filtering a vulnerability? (Phil Barnett <philb@...lb.us>)
• Re: IE/0DAY -> Insider Prototype ("Fabricio A. Angeletti" <hellmind@...ten.daemon.sh>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) ("David F. Skoll" <dfs@...ringpenguin.com>)
• MDKSA-2004:062 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Linux Broadcom 5820 Cryptonet Driver Integer Overflow (infamous41md@...pop.com)

• Solution for bugtraq id 10570 (Epic Games Unreal Engine Memory Corruption Vulnerability) ("Gerco Dries" <gerco@...ies.com>)
• [SNS Advisory No.76] Printing from Internet Explorer Lets Users to Cause DoS (snsadv@....co.jp (snsadv))
• RE: COELACANTH: Phreak Phishing Expedition] (Jelmer <jkuperus@...net.nl>)
• SUSE Security Announcement: dhcp-server (SuSE-SA:2004:019) (Thomas Biege <security@...e.de>)
• RE: Unusual Activity in Ad-aware 6 Personal, Build 6.181 ("fedhead" <fedhead@...ers.com>)
• Spammer jailed ("Ralph W. Reid" <rreid@...set.net>)
• vBulletin HTML Injection Vuln (Cheng Peng Su <apple_soup@....com>)
• Re: Is predictable spam filtering a vulnerability? (PSE-L@...l.professional.org (Sean Straw / PSE))
• RE: Is predictable spam filtering a vulnerability? (silently drop ping messages) (David Brodbeck <DavidB@...l.interclean.com>)
• Re: Is predictable spam filtering a vulnerability? (silently drop ping messages) (Stephen Warren <swarren@...dotorg.org>)
• New ssharp version available (stealth <stealth@...fault.net>)
• Re: Is predictable spam filtering a vulnerability? (Valdis.Kletnieks@...edu)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (Valdis.Kletnieks@...edu)
• Rlpr Advisory (jaguar@...inemenace.org)

• WIndows XP UPNP exploit ArgoXP.c (jocanor jocanor <jocanor2002@...mail.com>)
• ZWS Newsletter & Mailing List Manager (GaMeS GaMeS <bzh_mrim@...oo.fr>)
• Re: Is predictable spam filtering a vulnerability? ("Michael A. Dickerson" <mikey@...gingtree.com>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (der Mouse <mouse@...ents.Montreal.QC.CA>)
• Re: Is predictable spam filtering a vulnerability? (John Fitzgibbon <bugtraq@...tz.com>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (PSE-L@...l.professional.org (Sean Straw / PSE))
• Vulnerability Alert Services ("Andy Cuff" <lists@...uritywizardry.com>)
• Security Advisory : FreeBSD local DoS (Marceta Milos <root@...cetam.net>)
• Zone Labs response to "ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability" ("Zone Labs Product Security" <Product-Security@...elabs.com>)
• [security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack ("Boren, Rich (SSRT)" <rich.boren@...com>)
• Re: New malware to infect IIS and from there jump to clients (<bills.bitch@...hmail.com>)
• Re: Is predictable spam filtering a vulnerability? (PSE-L@...l.professional.org (Sean Straw / PSE))
• Symantec DeepSight Threat Management System Analysis: Client-side Exploitation (David Ahmad <da@...urityfocus.com>)
• Mac OS X stores login/Keychain/FileVault passwords on disk (Matt Johnston <matt@....asn.au>)
• Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• Security Advisory: FreeBSD local DoS (Marceta Milos <root@...cetam.net>)
• format string vulnerability in Gnats (Khan Shirani <khan_shirani@...oo.com>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (der Mouse <mouse@...ents.Montreal.QC.CA>)

• RE: Microsoft and Security ("Burnes, James" <james.burnes@....com>)
• artmedic_links5 PHP Script (include path) vuln (Adam n30n Simuntis <n30n@...film.net.pl>)
• multiple remote & local buffer overflows discovered in Drcatd (Khan Shirani <khan_shirani@...oo.com>)
• Re: Is predictable spam filtering a vulnerability? (silently dropping messages) (Seth Breidbart <sethb@...ix.com>)
• RE: Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Is predictable spam filtering a vulnerability? ("The Fungi" <fungi@...goth.org>)
• [SECURITY] [DSA 525-1] New apache packages fix buffer overflow in mod_proxy (Matt Zimmerman <mdz@...ian.org>)
• RE: Microsoft and Security ("Drew Copley" <dcopley@...e.com>)
• Zone Labs response to "ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability" ("Zone Labs Product Security" <Product-Security@...elabs.com>)
• RE: Is predictable spam filtering a vulnerability? (David Brodbeck <DavidB@...l.interclean.com>)
• Re: Caveat Lector: Beastie Boys Evil (Valdis.Kletnieks@...edu)

• Re: Microsoft and Security (Radoslav Dejanović <radoslav.dejanovic@...us.hr>)

• Re: USB risks (continued) (Chris Withers <chris@...plistix.co.uk>)
• nCipher Advisory #10: Pass phrases are exposed in netHSM log files (nCipher Support <technotifications@...ncipher.com>)
• Lotus Notes URL argument injection vulnerability (Jouko Pynnonen <jouko@....fi>)
• Re: Microsoft and Security ("Justin Wheeler" <jwheeler@...ademons.com>)
• ISC DHCP overflows (Gregory Duchemin <c3rb3r@...patico.ca>)
• Cross-Site Scripting CuteNews ("DarkBicho" <darkbicho@...tmail.fm>)
• DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin <c3rb3r@...patico.ca>)
• ZH2004-14SA (security advisory):Sql Injection in Infinity WEB ("D'Amato Luigi" <admin@...uritywireless.info>)
• RE: Caveat Lector: Beastie Boys Evil ("Ross M. W. Bennetts" <rbennett@....edu.au>)
• Full path disclosure csFAQ ("DarkBicho" <darkbicho@...tmail.fm>)
• DLINK 614+ - SOHO routers, DHCP service DOS (Gregory Duchemin <c3rb3r@...patico.ca>)
• MPlayer MeMPlayer.c (<c0ntex@...n-security.org>)
• Multiple vulnerabilities PowerPortal ("DarkBicho" <darkbicho@...tmail.fm>)
• Re: Re: USB risks (continued) (RSnake <rsnake@...cking.com>)
• Re: Re: USB risks (continued) ("Sam" <Sam@...all.nl>)
• Java applet crashing with native assertion (Marc Schoenefeld <schonef@...-muenster.de>)
• Scob infection statistics, etc.. ("Hubbard, Dan" <dhubbard@...sense.com>)

• RE: Microsoft and Security ("Burnes, James" <james.burnes@....com>)
• RE: Microsoft and Security (Nancy Kramer <nekramer@...dtheater.net>)
• Re: Microsoft and Security (William Warren <hescominsoon@...anuelcomputerconsulting.com>)
• Re: Microsoft and Security (Steve Kudlak <chromazine@...global.net>)
• RE: Microsoft and Security ("Mark Laurence" <m.laurence@...veindependentschool.co.uk>)
• RE: Microsoft and Security (Ron DuFresne <dufresne@...ternet.com>)
• Re: Microsoft and Security (Ron DuFresne <dufresne@...ternet.com>)
• Re: Java applet crashing with native assertion (Jack Lloyd <lloyd@...dombit.net>)
• JS.Scob.Trojan Source Code ... (K-OTiK Security <Special-Alerts@...tik.com>)
• SUPER SPOOF DELUXE Re: [Full-Disclosure] Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• Re: Microsoft and Security (William Warren <hescominsoon@...anuelcomputerconsulting.com>)
• DoS in popclient 3.0b6 (Dean White <incidents@...guard.com>)
• php codes injection in phpMyAdmin version 2.5.7. (Nasir Simbolon <nasir@...api.com>)
• TSSA-2004-012 - apache (tinysofa Security Team <security@...ysofa.org>)
• Re: DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin <c3rb3r@...patico.ca>)
• RE: Scob infection statistics, etc.. ("David Gillett" <gillettdavid@...a.edu>)
• Re: Java applet crashing with native assertion (Cesare D'Amico <cesare@....it>)

• Re: Java applet crashing with native assertion (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• RE: Scob infection statistics, etc.. ("Chinnery, Paul" <PaulC@...wm.com>)
• BHO Trojan follow-up information ("Hubbard, Dan" <dhubbard@...sense.com>)
• linux kernel Sbus PROM driver multiple integer overflows (infamous41md@...pop.com)
• DSL router Prestige 650HW-31 (Sami Gascón <samigascon@...ra.es>)
• MDKSA-2004:063 - Updated libpng packages fix potential remote compromise (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:065 - Updated apache packages fix buffer overflow vulnerability in mod_proxy (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• MDKSA-2004:064 - Updated apache2 packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Remote DoS vulnerability in Linux kernel 2.6.x (Adam Osuchowski <adwol@...sl.gliwice.pl>)
• Re: Java applet crashing with native assertion (Luciano Miguel Ferreira Rocha <strange@....no-ip.org>)
• rsbac 1.2.3 jail security problems (Bencsath Boldizsar <boldi@...l2003.etl.hu>)
• Re: Java applet crashing with native assertion (Cheese Whiz <ezbnnc@...mail.com>)
• Microsoft technologies. By default, non-HIPAA compliant? ("Anything But Microsoft" <abm@...thingbutmicrosoft.org>)
• Re: Java applet crashing with native assertion (Defakto <cantcliff@...il.com>)
• RE: Microsoft technologies. By default, non-HIPAA compliant? (Jeremy Epstein <jeremy.epstein@...methods.com>)
• SUPER SPOOF DELUXE Re: [Full-Disclosure] Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
• FW: [security bulletin] SSRT4758 rev. 0 HP-UX ObAM WebAdmin unauthorized access ("Boren, Rich (SSRT)" <rich.boren@...com>)
• RE: Microsoft technologies. By default, non-HIPAA compliant? ("Cameron, Thomas" <Thomas.Cameron@...kofamerica.com>)
• Cisco Security Advisory: Cisco Collaboration Server Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• SecurityLab report: The Top 10 Most Critical Vulnerabilities in June 2004 ("Alexander" <pigrelax@...dex.ru>)

520 messages

Powered by blists - more mailing lists