bugtraq mailing list - 2004/08

Messages by day:

August 1 (1 message)

• [sb] Re: Re: Mozilla Firefox Certificate Spoofing ("Juan Carlos Navea" <loconet@...il.com>)

• DOS@...TTPS ("CoolICE" <CoolICE@...na.com>)
• Re: Citadel/UX Remote DoS Vulnerability (error@...adel.org (IO ERROR))
• SoX Exploiter by Rosiello Security (Angelo Rosiello <angelo@...iello.org>)
• RE: Sonicwall diag tool includes VPN credentlials ("Eric McCarty" <eric@...mpd.com>)
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox) (Justin Polazzo <jo@...o.net>)
• RE: New possible scam method : forged websites using XUL (Firefox) ("Thomas T. Evans, III" <ttevans@...kcorp.net>)
• Re: Sonicwall diag tool includes VPN credentlials ("neil gardner" <neil.gardner@...iedtelesyn.co.nz>)
• Re: New possible scam method : forged websites using XUL (Firefox) ("Peter J. Holzer" <hjp@....ac.at>)
• Re[2]: Aladdin response regarding eSafe (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Security contact for RSA Security (Amit Klein <amit.klein@...ctuminc.com>)
• 7a69Adv#13 - USRobotics AP Wireless Denial of Service (Albert Puigsech Galicia <ripe@...9ezine.org>)
• SA-20040802 GnuTLS certificate chain verification bug (Patrik Hornik <patrik@...nik.sk>)
• Fortinet Firewalls (Ben <btyson-norrman@...waytv.co.uk>)
• RE: Sonicwall diag tool includes VPN credentlials (Stephan Sachweh <Stephan.Sachweh@...las.com>)
• Comersus 5.098 XSS Vulnerable (Abdul Azis <az001@...sa.com>)
• SideFind (aborg@....org.mt)
• Re: Fortinet Firewalls (Paul Schmehl <pauls@...allas.edu>)
• Re: New possible scam method : forged websites using XUL (Firefox) (Nicholas Knight <nknight@...awaynet.com>)
• OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform) (Juan Manuel Pascual <jmpascual@...n3s.com>)
• RE: Sonicwall diag tool includes VPN credentlials ("Jody McCluggage" <jody@...landmhrb.org>)
• RE: Fortinet Firewalls ("Bryan K. Watson" <bwatson@...tracers.com>)
• Re: Fortinet Firewalls (Ben <btyson-norrman@...waytv.co.uk>)
• RE: SideFind ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
• Re: New possible scam method : forged websites using XUL (Firefox) ("Marc" <md@...ensa.com>)

• EXPLOIT for Re: [VSA0402] OpenFTPD format string vulnerability (infamous41md@...pop.com)
• Re: New possible scam method : forged websites using XUL (Firefox) ("Peter J. Holzer" <hjp@....ac.at>)
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox) ("Peter J. Holzer" <hjp@....ac.at>)
• Re: Fwd: New possible scam method : forged websites using XUL (Firefox) (Barry Fitzgerald <bkfsec@....lonestar.org>)
• DoS in Webbsyte Chat 0.9.0 ("Donato Ferrante" <fdonato@...istici.org>)
• [SECURITY] [DSA 535-1] New squirrelmail packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• CDE libDtHelp and dtlogin vulnerabilities on IRIX (SGI Security Coordinator <agent99@....com>)
• Re: New possible scam method : forged websites using XUL (Firefox) (Kim Scarborough <kjs@...icago.edu>)

• Re: New possible scam method : forged websites using XUL (Firefox) (Michael Reilly <michaelr@...co.com>)
• Clear text password exposure in Datakey's tokens and smartcards (vuln@...view.com)
• Re: Clear text password exposure in Datakey's tokens and smartcards (Lionel Ferette <lionel.ferette@...net.be>)
• Bug@...tpd ("CoolICE" <CoolICE@...na.com>)
• Linux kernel file offset pointer races (Paul Starzetz <ihaquer@...c.pl>)
• SUSE Security Announcement: libpng (SUSE-SA:2004:023) (Thomas Biege <thomas@...e.de>)
• [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png) (OpenPKG <openpkg@...npkg.org>)
• vulnerabilities in JetboxOne CMS (ahmad muammar <y3dips@...o.or.id>)
• New MyDoom variant (<albatross@....it>)
• GoScript Remote Command Execution (Francisco Alisson <dominusvis@...ck21.com.br>)
• Multiple vulnerabilities in eNdonesia CMS (ahmad muammar <y3dips@...o.or.id>)
• CESA-2004-001: libpng (chris@...ry.beasts.org)
• Multiple Vulnerabilities in Free Web Chat ("Donato Ferrante" <fdonato@...istici.org>)
• Re: New MyDoom variant ("Paul Kurczaba" <paul@...pis.com>)
• CORE-2004-0705: Vulnerabilities in PuTTY and PSCP (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Re: Clear text password exposure in Datakey's tokens and smartcards (Toomas Soome <Toomas.Soome@...rolink.ee>)
• Re: CVS woes: .cvspass ("Greg A. Woods" <woods@...rd.com>)
• MDKSA-2004:079 - Updated libpng packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)

• Re: New MyDoom variant (Bryan Burns <bburns@...iper.net>)
• Re: New MyDoom variant ("Elliott C. Bäck" <ecb29@...nell.edu>)
• Re: Clear text password exposure in Datakey's tokens and smartcards ("Kevin Sheldrake" <kev@...ctriccat.co.uk>)
• Re: Clear text password exposure in Datakey's tokens and smartcards (Lee Dilkie <lee_dilkie@...el.com>)
• [SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
• Opera: Location, Location, Location (GreyMagic Software <security@...ymagic.com>)
• TSLSA-2004-0040 - libpng (Trustix Security Advisor <tsl@...stix.org>)
• International DNS compromise? (Zhen Shi <zhenshi99@...oo.com>)
• MS04-025 - Ignorance is truly bliss.... (hellNbak <hellnbak@...c.org>)
• Re: International DNS compromise? (john <john@...d-weed.com>)
• Re: International DNS compromise? ("Troy" <tjk@...oft.com>)
• Re: New MyDoom variant ("James C. Slora Jr." <Jim.Slora@...a.com>)
• local denial of Service, Yellowdog linux to 3.0.1 (<pmoses@...sics.ucsd.edu>)
• CVStrac Remote Arbitrary Code Execution exploit (Richard Ngo <rtngo@...oo.com>)
• Re: CVS woes: .cvspass (Delian Krustev <krustev@...stev.net>)
• Microsoft Internet Explorer 6 Protocol Handler Vulnerability ("Robillard, Nicolas" <nicolas.robillard@...lavalin.com>)
• Re: New MyDoom variant (Marc Hultquist <marc@....co.za>)
• Re: New MyDoom variant ("Thor" <thor@...merofgod.com>)
• Re: International DNS compromise? (John Kinsella <jlk@...ashyour.com>)
• RE: International DNS compromise? (travis.alexander@...amas.org)
• Re: New MyDoom variant ("Mary Landesman" <mlande@...lsouth.net>)
• Re: CVS woes: .cvspass ("Greg A. Woods" <woods@...rd.com>)

• Re: New MyDoom variant ("Purple Pony" <kbgl5d702@...akemail.com>)
• RE: New MyDoom variant ("Security Guy" <securityguy@...extreme.com>)
• RE: Clear text password exposure in Datakey's tokens and smartcards ("Lyal Collins" <lyalc@...mail.com.au>)
• Re: MS04-025 - Ignorance is truly bliss.... (Ferguson@...sys.com, Ann <annfer@...k.wafel.com>)
• RE: Clear text password exposure in Datakey's tokens and smartcards ("Israel Torres" <israel.torres@...litronic.com>)
• Re: Clear text password exposure in Datakey's tokens and smartcards (Seth Breidbart <sethb@...ix.com>)
• RE: Clear text password exposure in Datakey's tokens and smartcards (Bart.Lansing@...ls.com)
• [CLA-2004:857] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
• [CLA-2004:856] Conectiva Security Announcement - libpng (Conectiva Updates <secure@...ectiva.com.br>)
• Opera: Location, Location, Location (GM#008-OP) (GreyMagic Software <security@...ymagic.com>)
• [security bulletin] SSRT4782 rev. 1 HP-UX CIFS Server potential remote root access ("Boren, Rich (SSRT)" <rich.boren@...com>)
• Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability (Jouko Pynnonen <jouko@....fi>)
• Re: Re: MS04-025 - Ignorance is truly bliss.... (Georgi Guninski <guninski@...inski.com>)
• Re: CVS woes: .cvspass (Delian Krustev <krustev@...stev.net>)
• Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability ("Uday Moorjani" <umoorjani@...adoo.fr>)
• Re: CVS woes: .cvspass (Andy Dustman <farcepest@...il.com>)
• [security bulletin] SSRT4777 HP-UX Apache, PHP remote code execution, Denial of Service ("Boren, Rich (SSRT)" <rich.boren@...com>)
• [security bulletin] SSRTSSRT4778 Rev.0 Mozilla Application Suite for HP Tru64 UNIX libpng Potential Overflows ("Boren, Rich (SSRT)" <rich.boren@...com>)
• GNU/Linux 'info Buffer Overflow (Josh Martin <skizzles@...il.com>)
• [OpenPKG-SA-2004.036] OpenPKG Security Advisory (cvstrac) (OpenPKG <openpkg@...npkg.org>)
• Remote Command Execution (Francisco Alisson <dominusvis@...ck21.com.br>)
• Re: CVStrac Remote Arbitrary Code Execution exploit (Richard Hipp <drh@...ci.com>)
• Re: International DNS compromise? (<bill@...-inc.us>)
• Re: GNU/Linux 'info Buffer Overflow (Valdis.Kletnieks@...edu)
• Anyone know IBM's security address? ("Michael Scheidell" <scheidell@...nap.net>)
• xss in moodle (post.php) (Javier Ubilla Brenni <javierubilla@...mac.com>)
• RE: International DNS compromise? ("Mike Clark" <mclark@...arpathnet.com>)
• Re: GNU/Linux 'info Buffer Overflow (Niels Bakker <niels-bugtraq@...ker.net>)
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards ("Kevin Sheldrake" <kev@...ctriccat.co.uk>)

• RE: International DNS compromise? (Troy Monaghen <troy@...aghen.com>)
• Re: International DNS compromise? ("Rio Martin." <rio@...tin.mu>)
• Re: Remote crash in tcpdump from OpenBSD (Balaram Amgoth <ramgoth@...oo.com>)
• Re: International DNS compromise? (Danny <nocmonkey@...il.com>)
• Re: Anyone know IBM's security address? (Jedi/Sector One <j@...eftpd.org>)
• Winmx Software making calls to Port 25 (Retro Granny <retrogranny@...scape.net>)
• RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards (Dana Hudes <dhudes@...-ip.info>)
• RE: International DNS compromise? ("Johan Nilsson" <johan.nilsson@...s.com>)
• Re: International DNS compromise? ("John F. Waymouth" <bugtraq@...mouth.org>)
• Re: International DNS compromise? ("Troy" <tjk@...oft.com>)
• Re: CVS woes: .cvspass (Tilman Schmidt <Tilman.Schmidt@...st.de>)
• SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (Jordan Pilat <cacophony@...create.org>)
• Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards ("Kevin Sheldrake" <kev@...ctriccat.co.uk>)
• Re: Re: Anyone know IBM's security address? (jmpascual <pask@...n3s.com>)
• Re: Anyone know IBM's security address? (troy@...tin.ibm.com)
• Re: Re: Anyone know IBM's security address? ("Oliver@...yhat.de" <Oliver@...yhat.de>)
• Type xxs (<root@...ffomatic64.com>)
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (Stefan Seifert <nine@...onation.org>)
• [PHP Bug] How to hide a HTTP request in the apache logs (Anthony Debhian <anthony.debhian@...y-for.info>)
• Airpwn & libpng holes (Matt Venzke <mvenzke@...il.com>)
• Re: CVS woes: .cvspass ("Greg A. Woods" <woods@...rd.com>)
• Re: GNU/Linux 'info Buffer Overflow (Roman Werpachowski <roman@...dent.ifpan.edu.pl>)
• Re: CVS woes: .cvspass (Robin Rosenberg <robin.rosenberg.lists@...ire.com>)
• EXPLOIT Re: Pavuk Digest Authentication Buffer Overflow (infamous41md@...pop.com)
• Re: Remote crash in tcpdump from OpenBSD (Otto Moerbeek <otto@...jf.net>)
• Re: Winmx Software making calls to Port 25 (Retro Granny <retrogranny@...scape.net>)
• Re: CVS woes: .cvspass (Robin Rosenberg <robin.rosenberg.lists@...ire.com>)
• Re: GNU/Linux 'info Buffer Overflow ("Janusz A. Urbanowicz" <alex@...on.fantastyka.net>)

• Re: Re: Anyone know IBM's security address? + Google Hack (<vesselen.mironov@...h.ai>)
• SecurityLab.ru report: The Most Critical Vulnerabilities in July 2004 ("pigrelax" <pigrelax@...dex.ru>)

• RE: Clear text password exposure in Datakey's tokens and smartcards (Curt Sampson <cjs@...ic.net>)
• RE: DOS@...TTPS ("Peter Fregon" <peter@...lenable.com>)
• RE: Clear text password exposure in Datakey's tokens and smartcards (Bart.Lansing@...ls.com)
• SUSE Security Announcement: kernel (SUSE-SA:2004:024) (Thomas Biege <thomas@...e.de>)
• Java XSLT security advisory addendum (Marc Schoenefeld <schonef@...-muenster.de>)
• Remote Command Execution (Francisco Alisson <dominusvis@...ck21.com.br>)
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (Radoslav Dejanović <radoslav.dejanovic@...us.hr>)
• Re: Winmx Software making calls to Port 25 (Radoslav Dejanović <radoslav.dejanovic@...us.hr>)
• TSLSA-2004-0041 - kernel (Trustix Security Advisor <tsl@...stix.org>)
• Re: [PHP Bug] How to hide a HTTP request in the apache logs (Steve Brown <sbrown@...ckstuffusa.com>)
• Windows doesn't verify digital signature of CRL files (Faro Poplar <faropoplar@...oo.com>)
• Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability (Matthias Leisi <matthias@...rum.ch>)
• CORE-2004-0714: Cfengine RSA Authentication Heap Corruption (CORE Security Technologies Advisories <advisories@...esecurity.com>)

• First symbian OS trojan discovered in the wild (kers0r <root@...lum-nz.com>)
• Re: [PHP Bug] How to hide a HTTP request in the apache logs (Max Valdez <maxvalde@....unam.mx>)
• RE: Clear text password exposure in Datakey's tokens and smartcards ("Lyal Collins" <lyalc@...mail.com.au>)
• MDKSA-2004:080 - Updated shorewall packages fix temporary file vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• iDEFENSE - New Tricks [web censorship!] (Ben Ryan <ben@...c.edu.au>)
• RE: Anyone know IBM's security address? ("Michael Scheidell" <scheidell@...nap.net>)
• [security bulletin] SSRT4788 rev. 0 HP-UX Apache Remote arbitrary code execution ("Boren, Rich (SSRT)" <rich.boren@...com>)
• [security bulletin] SSRT4785 rev. 0 HP-UX Process Resource Manager (PRM) potential data corruption ("Boren, Rich (SSRT)" <rich.boren@...com>)
• Re: Windows doesn't verify digital signature of CRL files (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• Corsaire Security Advisory - Port80 Software ServerMask inconsistencies ("advisories" <advisories@...saire.com>)
• Re: Windows doesn't verify digital signature of CRL files ("Neil Gierman" <ngierman@...drunn.com>)
• Corsaire Security Advisory - Sygate Secure Enterprise replay issue ("advisories" <advisories@...saire.com>)
• Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue ("advisories" <advisories@...saire.com>)
• spamcop.net allows everyone to grab mail addresses and reset passwords (Henning Schmiedehausen <hps@...ermeta.de>)
• Corsaire Security Advisory - Sygate Enforcer discovery packet DoS issue ("advisories" <advisories@...saire.com>)
• RE: Anyone know IBM's security address? ("Discini, Sonny" <Sonny.Discini@...tgomerycountymd.gov>)
• Re: Windows doesn't verify digital signature of CRL files (Valdis.Kletnieks@...edu)
• Re: Windows doesn't verify digital signature of CRL files (Jack Lloyd <lloyd@...dombit.net>)

• Re: Windows doesn't verify digital signature of CRL files (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability (<homicidal@...il.com>)
• ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows (Pentest Security Advisories <alerts@...test.co.uk>)
• Driver for display goes to a infinite loop by viewing a html! (Bipin Gautam <visitbipin@...mail.com>)
• BlackICE unprivileged local user attack ("Paul Craig - Pimp Industries" <headpimp@...p-industries.com>)
• HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5 (Amit Klein <amit.klein@...ctuminc.com>)
• Re: Windows doesn't verify digital signature of CRL files (Thomas Walpuski <thomas-bugtraq@...roved.org>)
• EXPLOIT libpng (infamous41md@...pop.com)
• Re: Driver for display goes to a infinite loop by viewing a html! (Conor Byrne <conorb@...il.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Jack C <jack@...pinc.com>)
• Clearswift Mimesweeper Path Traversal Vulnerability (Kroma Pierre <kroma@...s.de>)
• Windows doesn't verify digital signature of CRL files ("Michael Howard" <mikehow@...rosoft.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! ("Christopher X. Candreva" <chris@...tnet.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Anthony Petito <anthonypetito@...il.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Steven Leikeim <steven@...l.ucalgary.ca>)
• RE: Driver for display goes to a infinite loop by viewing a html! ("Eggers, Bill A [LTD]" <William.A.Eggers@...l.sprint.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Mike Pumford <mpumford@...-data.co.uk>)
• RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability ("Thor Larholm" <tlarholm@...x.com>)
• NGSEC's response to Idefense overflow protections whitepaper. (lists@...EC <lists@...ec.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Eddie Block <lists@...cked.org>)
• KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities (Waldo Bastian <bastian@....org>)
• Re: Clearswift Mimesweeper Path Traversal Vulnerability (Pete Simpson <pete.simpson@...arswift.com>)
• ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows ("Pentest Security Advisories" <alerts@...test.co.uk>)

• ISS BlackIce Server Protect Unprivileged User Attack ("Thomas Ryan" <tommy@...videsecurity.com>)
• SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (Secure Science Corporation Advisory Notice <bugtraq@...urescience.net>)
• RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability ("Thor Larholm" <tlarholm@...x.com>)
• Re: ISS BlackIce Server Protect Unprivileged User Attack (kf_lists <kf_lists@...netops.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (Steve Clement <steve@....lu>)
• Metasploit Framework v2.2 (H D Moore <sflist@...italoffense.net>)
• [CLA-2004:858] Conectiva Security Announcement - squirrelmail (Conectiva Updates <secure@...ectiva.com.br>)
• SUSE Security Announcement: gaim (SUSE-SA:2004:025) (Thomas Biege <thomas@...e.de>)
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (Joe Eversole <jeversol@...il.com>)
• RE: NGSEC's response to Idefense overflow protections whitepaper. ("Richard Johnson" <rjohnson@...fense.com>)
• Re: Driver for display goes to a infinite loop by viewing a html! (3APA3A <3APA3A@...URITY.NNOV.RU>)
• JS/Zerolin ("T.H. Haymore" <bonk@...chat.chatsystems.com>)
• NETGEAR DG834G SPECIAL FEATURES (<thanasonic@...k.gr>)

• Re: Driver for display goes to a infinite loop by viewing a html! (Frank Nospam <fuy1@...c.edu>)
• Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability (High Pressure <pressure@...il.com>)
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) ("Brad Herbert" <bherbert@...thwastesystems.com>)
• Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (infamous41md@...pop.com)
• ISS BlackIce Server Protect Unprivileged User Attack ("Thomas Ryan" <tommy@...videsecurity.com>)
• Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) (Lance James <lancej@...urescience.net>)
• NGSEC's response to Idefense overflow protections whitepaper. (PART II) (lists@...EC <lists@...ec.com>)
• New Paper: Microsoft Windows, a lower Total Cost of Ownership (Dave Aitel <dave@...unitysec.com>)
• MDKSA-2004:081 - Updated gaim packages fix remotely exploitable vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• recent gaim advisory (infamous41md@...pop.com)
• Re: NETGEAR DG834G SPECIAL FEATURES ("Uday Moorjani" <umoorjani@...adoo.fr>)
• MDKSA-2004:082 - Updated mozilla packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Advanced usage of system() function. (Adam Zabrocki <pi3ki31ny@...pl>)
• RE: NETGEAR DG834G SPECIAL FEATURES ("Andre Lorbach" <alorbach@....adiscon.com>)
• Re: JS/Zerolin ("T.H. Haymore" <bonk@...chat.chatsystems.com>)
• Re: JS/Zerolin (Nicolas Gregoire <ngregoire@...probe.com>)
• Re: NETGEAR DG834G SPECIAL FEATURES (<thanasonic@...k.gr>)
• Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues ("advisories" <advisories@...saire.com>)
• Re: JS/Zerolin (K-OTiK Security <Special-Alerts@...tik.com>)
• Re: NETGEAR DG834G SPECIAL FEATURES (Dave Paris <dparis@...orks.com>)
• RE: ISS BlackIce Server Protect Unprivileged User Attack ("Herman Frederick Ebeling Jr." <hfebelingjr@...os.com>)

• SGI Advanced Linux Environment 3 Security Update #9 (SGI Security Coordinator <agent99@....com>)
• SGI Advanced Linux Environment 2.4 security update #24 (SGI Security Coordinator <agent99@....com>)
• Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (Dan Margolis <krispykringle@...too.org>)
• QuiXplorer directory traversal (Cyrille Barthelemy <cb-lse@...ance.com>)
• SpecificMAIL Technical Brief ("Nick D." <ndebaggis@...izon.net>)
• RE: JS/Zerolin ("Thor Larholm" <tlarholm@...x.com>)
• Re: Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow (Barrie Dempster <barrie@...oot-robot.net>)

• Posible security bug in phpMyWebhosting (Matias Neiff <matias@...ff.com.ar>)

• [SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management (joey@...odrom.org (Martin Schulze))
• SUSE Security Announcement: rsync (SUSE-SA:2004:026) (Thomas Biege <thomas@...e.de>)
• gv buffer overflows: here, there, and everywhere (infamous41md@...pop.com)
• NullyFake - Site Spoofing in MSIE (Liu Die Yu <liudieyu@...rella.name>)
• pscript.de PFORUM XSS Vulnerability (Christoph Jeschke <ponders.bugtraq@...or.de>)
• TSSA-2004-020-ES - rsync (tinysofa Security Team <security@...ysofa.org>)
• IpSwitch IMail Server <= ver 8.1 User Password Decryption (Adik <netninja@...mail.kg>)

• Re: SpecificMAIL Technical Brief (Skip Carter <skip@...geta.com>)
• RE: IpSwitch IMail Server <= ver 8.1 User Password Decryption ("Bill Roemhild" <broemhild@...itiveplace.org>)
• First vulnerabilities in the SP2 - XP ?... ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• SQL Injection in CACTI (Fernando Quintero <nando@...red.net>)
• Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection ("Rohit Dube" <rohit@...tikalsolutions.com>)
• [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access (joey@...odrom.org (Martin Schulze))
• [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (Kurt Lieber <klieber@...too.org>)
• Re: SQL Injection in CACTI (Thomas Chiverton <thomas.chiverton@...efinger.com>)
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption (Dave Warren <dave.warren@...ilsplayground.net>)
• [SECURITY] [DSA 539-1] New kdelibs packages fix denial of service (joey@...odrom.org (Martin Schulze))
• TSLSA-2004-0042 - rsync (Trustix Security Advisor <tsl@...stix.org>)
• [ GLSA 200408-17 ] rsync: Potential information leakage (Kurt Lieber <klieber@...too.org>)
• vpopmail <= 5.4.2 (sybase vulnerability) ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Opera Local File/Directory Detection (GM#009-OP) (GreyMagic Software <security@...ymagic.com>)
• [NGSEC-2004-6] IPD, local system denial of service. (labs@...EC <labs@...ec.com>)
• LNSA-#2004-0017: rsync (Aug, 17 2004) (Vincenzo Ciaglia <ciaglia@...wosix.org>)
• [ GLSA 200408-18 ] xine-lib: VCD MRL buffer overflow (Kurt Lieber <klieber@...too.org>)
• Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (Abu Lafy <off@...mail.com>)

• Re: First vulnerabilities in the SP2 - XP ?... (Colin Alston <karnaugh@...naugh.za.net>)
• Re: First vulnerabilities in the SP2 - XP ?... ("Oliver Schneider" <Borbarad@...pro.net>)
• Vulnerabilities in Merak Webmail Server. (Criolabs <security@...olabs.net>)
• MDKSA-2004:083 - Updated rsync packages fix remotely-exploitable vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption (buggy@...kless.com)
• Open Security Group Advisory #6 (<c0ntex@...n-security.org>)
• Re: First vulnerabilities in the SP2 - XP ?... (Radoslav Dejanović <radoslav.dejanovic@...us.hr>)
• Cisco Security Advisory: Cisco IOS Malformed OSPF Packet Causes Reload (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• [SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation (joey@...odrom.org (Martin Schulze))
• Multiple vulnerabilities in PHP-FUSION (Ahmad Muammar <y3dips@...o.or.id>)
• SHA-0 Broken, MD5 Rumored Broken ("Jérôme" ATHIAS <jerome.athias@...amail.com>)

• Breaking windows LM hashes using the Time-Memory Trade-Off : Optimization & new tool ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• recent iDefense advisories not being posted to bugtraq includes CVS information disclosure bug (CAN-2004-0778) (Marc Bejarano <bugtraq@...j.org>)
• RE: First vulnerabilities in the SP2 - XP ?... ("Larry Seltzer" <larry@...ryseltzer.com>)
• [security bulletin] SSRT3460 rev.3 HP-UX Network traffic can cause programs to fail ("Boren, Rich (SSRT)" <rich.boren@...com>)
• Re: SQL Injection in CACTI (Cedric Blancher <blancher@...tel-securite.fr>)
• Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption ("David E. Smith" <dave@...hnopagan.org>)
• MDKSA-2004:085 - Updated qt3 packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Re: SQL Injection in CACTI (Andy Markert <amarkert@...lespeed.com>)

• CESA-2004-004: qt (chris@...ry.beasts.org)
• Security aspects of time synchronization infrastructure (3APA3A <3APA3A@...urity.nnov.ru>)
• RE: Security aspects of time synchronization infrastructure ("joe" <mvp@...ware.net>)
• Immunity, Inc. Release: libdisassemble (dave <dave@...unitysec.com>)
• Re: Posible security bug in phpMyWebhosting (Udo "Müller" <info@...ol.de>)
• Re: SHA-0 Broken, MD5 Rumored Broken ("Anthony Nemmer" <intertwingled@...st.net>)
• Re: First vulnerabilities in the SP2 - XP ?... (Robert Decker <rdecker@...systems.com>)
• RE: First vulnerabilities in the SP2 - XP ?... ("Thor Larholm" <tlarholm@...x.com>)
• MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• SUSE Security Announcement: qt3 (SUSE-SA:2004:027) (Thomas Biege <thomas@...e.de>)
• Re[2]: Security aspects of time synchronization infrastructure (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Microsoft Windows XP SP2 ("http-equiv@...ite.com" <1@...ware.com>)
• [2Cents on] vpopmail <= 5.4.2 (sybase vulnerability) (bugtraq@...ondsecurity.com)
• Re: Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (Anthony Petito <anthonypetito@...il.com>)
• Xines_Mine.c Open Security Group Advisory (<c0ntex@...n-security.org>)
• RE: Driver for display goes to a infinite loop by viewing a html! (Christopher Wagner <chrisw@...aids.com>)
• RE: Re[2]: Security aspects of time synchronization infrastructure ("joe" <mvp@...ware.net>)
• NetBSD Security Advisory 2004-009: ftpd root escalation (NetBSD Security-Officer <security-officer@...bsd.org>)
• XV multiple buffer overflows, exploit included (infamous41md@...pop.com)
• Unsecure file permission of ZoneAlarm pro. (Bipin Gautam <visitbipin@...mail.com>)
• What A Drag II XP SP2 ("http-equiv@...ite.com" <1@...ware.com>)

• Re: Posible security bug in phpMyWebhosting (Udo Mueller <info@...ol.de>)
• Re: First vulnerabilities in the SP2 - XP ?... (Matthew Roberts <webmaster@...thew1471.co.uk>)
• Re: Posible security bug in phpMyWebhosting ("Daniel Souza" <daniel.souza@...tecnologia.com.br>)
• CAU-2004-0002 - imwheel Predictable PidFile Name Race Condition ("I)ruid" <druid@...ghq.org>)
• Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (Jim Paris <jim@...n.com>)
• Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer (Audun Larsen <larsen@...s.com>)
• Re: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection (George Capehart <gwc@....org>)
• What A Drag II XP SP2 ("http-equiv@...ite.com" <1@...ware.com>)
• Buffer overflow in sarad (Matthias Bethke <Matthias.Bethke@....net>)
• [Fwd: Re: [vchkpw] vpopmail <= 5.4.2 (sybase vulnerability) (fwd)] ("Myron Davis" <myrond@...mail.org>)
• BadBlue Webserver v2.5 Denial Of Service Vulnerability ("GulfTech Security" <security@...ftech.org>)
• Re: SHA-0 Broken, MD5 Rumored Broken (stanislav shalunov <shalunov@...ernet2.edu>)
• Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability (infamous41md@...pop.com)
• Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG (Solar Designer <solar@...nwall.com>)
• MDKSA-2004:086 - Updated kdelibs and kdebase packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Multiple Vulnerabilities in Mantis Bugtracker (Jose Antonio <joxeankoret@...oo.es>)
• EXPLOIT: Qt bmp heap overflow (infamous41md@...pop.com)
• Cross Site Scripting Vulnerability in Sympa (Jose Antonio <joxeankoret@...oo.es>)

• Mantis Bugtracker Remote PHP Code Execution Vulnerability (Jose Antonio <joxeankoret@...oo.es>)
• Multiple vulnerabilities in MyDMS (Jose Antonio <joxeankoret@...oo.es>)
• [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (bashis <mcw@....se>)
• Re: [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers ("morning_wood" <se_cur_ity@...mail.com>)

• JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks ("Dr Ponidi" <drponidi@...kermail.com>)
• KDE Security Advisory: Konqueror Cross-Domain Cookie Injection (Waldo Bastian <bastian@....org>)
• Multiple Cross Site Scripting Vulnerabilities in eGroupWare (Joxean Koret <joxeankoret@...oo.es>)
• DoS in Bird Chat 1.61 ("Donato Ferrante" <fdonato@...istici.org>)
• Re: Fwd: Re: Posible security bug in phpMyWebhosting (Matias Neiff <matias@...ff.com.ar>)
• RE: First vulnerabilities in the SP2 - XP ?... ("Larry Seltzer" <larry@...ryseltzer.com>)
• IE, Firefox, Opera DoS (<exploits@...d.net>)
• Bugs fixed in Version 1.4.3 (Joxean Koret <joxeankoret@...oo.es>)
• MusicDaemon <= 0.0.3 /etc/shadow Stealer / DoS Exploit (Tal0n <cyber_talon@...mail.com>)
• New google's top query? ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Yahoo! E-mail Service Vulnerability (Dror Shalev <drorshalev@...jan.com>)
• Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (Serkan Akpolat <sakpolat@....net>)

• A word of caution on the use of suphp (Steven Van Acker <deepstar@...ssis.org>)
• Running renamed executables with CMD.EXE ("Geoff Vass" <geoff@...zow.com.au>)
• Microsoft updates documentation on Windows time synchronization (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (bashis <mcw@....se>)
• ANNOUNCE: VulnDisco RADIUS protocol testsuite v1.0 ("Evgeny Demidov" <demidov@...g.net>)
• Window Washer 5.5: False Sense of Security (First Last <wbglinks@...links.net>)
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (Jan Minar <jjminar@...tmail.fm>)
• WebAPP directory traversal and ability to retrieve the DES encrypted password hash ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• What A Drag! -revisited- ("mikx" <mikx@...x.de>)
• Hastymail security update ("Jason Munro" <jason@...bev.com>)
• Internet Explorer Local File/Directory Detection ("Rynho Zeros Web" <aberastegue@....net>)
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (Rodrigo Barbosa <rodrigob@...spammers.org>)
• Limited buffer overflow in Painkiller 1.31 (Luigi Auriemma <aluigi@...istici.org>)
• Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??) ("Joel D. Kinard" <jdkinard@...oo.com>)
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (Serkan Akpolat <sakpolat@....net>)
• Possible Security Issues In LiveWorld Products ("GulfTech Security" <security@...ftech.org>)

• RE: Microsoft updates documentation on Windows time synchronization ("Nicolas villatte" <Nicolas.Villatte@...alvas.be>)
• RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection ("Rohit Dube" <rohit@...tikalsolutions.com>)
• Re: IE, Firefox, Opera DoS (Dan Pixley <danpixley@....net>)
• Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability (<ktha@...h.com>)
• [SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting (joey@...odrom.org (Martin Schulze))
• PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities (Nikyt0x Argentina <nikyt0x@...mail.com>)
• Easy File Sharing Webserver v1.25 Vulnerabilities ("GulfTech Security" <security@...ftech.org>)
• Re: Images being pulled in Outlook 2003 even though don't download pictures is set? ("Jason Coombs PivX Solutions" <jcoombs@...X.com>)
• Re: Images being pulled in Outlook 2003 even though don't download pictures is set? (<vesselen.mironov@...h.ai>)
• [sb] [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities ("Kurt Lieber" <klieber@...too.org>)
• bug found (Mathieu Lacroix <Daemonz@...eotron.ca>)
• Vulnerability: OpenBSD 3.5 Kernel Panic. ("Vafa Izadinia" <vafa@...h.ai>)
• A new website to search & submit win exploits (Dav1d <dav1d_cn@...mail.com>)
• [NGSEC-2004-7] NtRegmon, local system denial of service. (labs@...EC <labs@...ec.com>)
• Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??) (Gabriel Kihlman <gk@...cken.kth.se>)
• IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service ("Advisories" <advisories@...plc.com>)
• Re: [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers ("morning_wood" <se_cur_ity@...mail.com>)
• Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow ("Steve" <stevemeeters@...ite.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• RealVNC 4.0 DoS (Allan Zhang <zhangliangsd@...mail.com>)
• RE: Running renamed executables with CMD.EXE (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
• Re: NETGEAR DG834G SPECIAL FEATURES (Paul James <prj@...thlabs.co.uk>)

• Re: New google's top query? (Luke Burton <luke.burton@...il.com>)
• Squirrelmail chpasswd local root bruteforce exploit ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Computer Network Defence Vulnerability Alert State ("Andy Cuff" <lists@...uritywizardry.com>)
• RE: Unsecure file permission of ZoneAlarm pro. (Simon Zuckerbraun <szucker@...-pr-1.com>)
• Anonymous Surfing Via Gmail Login Window - Poor Sanitization (Punabi MC <punj4b1_mc@...oo.com>)
• CDE libDtHelp LOGNAME Buffer Overflow Vulnerability ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability - [Full-Disclosure] iDEFENSE Security Advisory 08.25.04 ("Jérôme" ATHIAS <jerome.athias@...amail.…)
• RE: IE, Firefox, Opera DoS ("GulfTech Security" <security@...ftech.org>)
• Dynix Webpac Input Validation (Wil Allsopp <rogueclient@...oo.co.uk>)
• multiple vulnerabilities in lukemftpd/tnftpd (venglin@...ebsd.lublin.pl)
• Re: Unsecure file permission of ZoneAlarm pro. (Bipin Gautam <visitbipin@...mail.com>)
• Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability (Serkan Akpolat <sakpolat@....net>)
• [security bulletin] SSRT4779 - rev.0 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow ("Boren, Rich (SSRT)" <rich.boren@...com>)
• Re: New google's top query? (Alex Keller <alkeller@...u.edu>)
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow (Kyle Maxwell <krmaxwell@...il.com>)
• Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers (bashis <mcw@....se>)
• [OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib) (OpenPKG <openpkg@...npkg.org>)
• TSL-2004-0043 - multi (Trustix Security Advisor <tsl@...stix.org>)
• Re: Anonymous Surfing Via Gmail Login Window - Poor Sanitization (Markus Ackermann <maol@...link.ch>)

• MS XP SP2 Windows Security Center allows spoofing ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (john.courcoul@....com)
• Keene Digital Media Server Directory Traversal ("GulfTech Security" <security@...ftech.org>)
• RE: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow ("Andreas Freyvogel" <afreyvogel@...arket.com>)
• RE: NETGEAR DG834G SPECIAL FEATURES ("prj" <prj@...thlabs.co.uk>)
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow ("Jay D. Dyson" <jdyson@...achery.net>)
• 0day critical vulnerability/exploit targets Winamp users in the wild (K-OTiK Security <Special-Alerts@...tik.com>)
• Broadcast forced exit in Ground Control II 1.0.0.7 (Luigi Auriemma <aluigi@...istici.org>)
• SGI ProPack 3: Kernel Update #3 - Security and other fixes (SGI Security Coordinator <agent99@....com>)
• Alpha Phising [IE 6 WinXP SP2] ("mikx" <mikx@...x.de>)
• Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Check Point - Zone Labs Division - Response to "Weak Default Permissions Vulnerability" ("Zone Labs Product Security" <Product-Security@...elabs.com>)
• MDKSA-2004:087 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
• Gaucho v1.4 Build 145 Buffer Overflow ("Jérôme" ATHIAS <jerome.athias@...amail.com>)

• Re: New google's top query? (Justin Wheeler <bugtraq@...ademons.com>)
• Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (Rishi Khan <rishi@...l.edu>)
• RE: IE, Firefox, Opera DoS (*not* a DoS, not even close) (Steve R <steve_r125@...oo.co.uk>)
• Re: NETGEAR DG834G SPECIAL FEATURES (Rodrigo Barbosa <rodrigob@...spammers.org>)
• Re: 0day critical vulnerability/exploit targets Winamp users in the wild (K-OTiK Security <Special-Alerts@...tik.com>)

• Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State) (john.courcoul@....com)

• [vulnwatch] WS_FTP Server Denial of Service Vulnerability ("lion" <lion@...onker.net>)
• CuteNews News.txt writable to world (e0r <socialanxiety@...il.com>)

• RE: CDE libDtHelp LOGNAME Buffer Overflow Vulnerability ("Thor Larholm" <tlarholm@...x.com>)
• DoS in Chat Anywhere 2.72a ("Donato Ferrante" <fdonato@...istici.org>)
• [SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service (joey@...odrom.org (Martin Schulze))
• Multiple Vulnerabilities In Xedus Webserver ("GulfTech Security" <security@...ftech.org>)
• Re: NETGEAR DG834G SPECIAL FEATURES (Luca Berra <bluca@...edia.it>)
• Cross Site Scripting in XOOPS Version 2.x Dictionary module (CyruxNET <cyruxnet@...uxnet.org>)
• [vulnwatch] WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability ("lion" <lion@...onker.net>)
• Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable) (Steven Van Acker <deepstar@...ssis.org>)
• [vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability ("lion" <lion@...onker.net>)
• D-Link DCS-900 IP camera remote exploit that change the IP ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
• Security Center and Windows XP clients in domain (<albatross@....it>)
• Linux OpenExchange - cleartext rootpw in swap (Rene <l0om@...luded.org>)
• DOS@TFS ("CoolICE" <CoolICE@...na.com>)
• Axis Network Camera and Video Server Security Advisory (product-security@...s.com)
• [SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: Linux OpenExchange - cleartext rootpw in swap ("Rainer Duffner" <rainer@...ra-secure.de>)
• MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service (Tom Yu <tlyu@....edu>)
• OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability (please_reply_to_security@....com)
• OpenServer 5.0.6 OpenServer 5.0.7 : squid %-encoded characters in a URL (please_reply_to_security@....com)

428 messages

Powered by blists - more mailing lists