bugtraq mailing list - 2004/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2004/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 16	² 16	³ 8	⁴	⁵ 6
⁶ 9	⁷ 11	⁸ 7	⁹ 4	¹⁰ 11	¹¹ 3	¹² 10
¹³ 18	¹⁴ 27	¹⁵ 25	¹⁶ 39	¹⁷ 24	¹⁸ 25	¹⁹ 9
²⁰ 8	²¹ 15	²² 22	²³ 25	²⁴ 4	²⁵ 15	²⁶ 10
²⁷ 20	²⁸ 33	²⁹ 27	³⁰ 41

Messages by day:

September 1 (16 messages)

UPDATED OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities (please_reply_to_security@....com)
Multiple Vulnerabilities in phpScheduleIt (Joxean Koret <joxeankoret@...oo.es>)
Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Patch available for multiple critical flaws in Oracle ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
SUSE Security Announcement: kernel (SUSE-SA:2004:028) (Thomas Biege <thomas@...e.de>)
RE: Security Center and Windows XP clients in domain ("David Webster" <dwebster@...tig.com>)
ADVISORY: http response splitting hole in Comersus shopping cart ("Maestro De-Seguridad" <maestrodeseguridad@...os.com>)
Re: Security Center and Windows XP clients in domain ("Thor" <thor@...merofgod.com>)
Patch available for IBM DB2 Universal Database flaws ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
Cross-Site Scripting Vulnerability in Newtelligence DasBlog ("Dominick Baier" <seclists@...stprivilege.com>)
New security tools and papers released (shadown <shadown@...il.com>)
[security bulletin] SSRT3657 rev.3 HP-UX CDE libDtHelp buffer overflow ("Boren, Rich (SSRT)" <rich.boren@...com>)
RE: Security Center and Windows XP clients in domain, 20040831062712.31317.qmail@....securityfocus.com (Sym Security <secure@...antec.com>)
[nisr@...tgenss.com: Patch available for multiple critical flaws in Oracle] (David Ahmad <da@...urityfocus.com>)

September 2 (16 messages)

[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (SHATTER <shatter@...secinc.com>)
RE: CuteNews News.txt writable to world (Albert Puigsech Galicia <ripe@...9ezine.org>)
MITKRB5-SA-2004-002: double-free vulnerabilities (Tom Yu <tlyu@....edu>)
MSInfo Buffer Overflow ("E.Kellinis" <me@...her.org.uk>)
Multiple Vulnerabilities In phpWebsite ("GulfTech Security" <security@...ftech.org>)
Opera DOS (Stevo <steve01@...llo.at>)
SSHD / AnonCVS Nastyness (Dragos Ruiu <dr@....net>)
Exploit: AIM Exploit (Ignore Previous Post) (John Bissell <monkey321_1@...mail.com>)
MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: SUSE Security Announcement: kernel (SUSE-SA:2004:028) (Paul Starzetz <paul@...rzetz.de>)
Re: Linux OpenExchange - cleartext rootpw in swap (Valdis.Kletnieks@...edu)
Password Protect XSS and SQL-Injection vulnerabilities. (Criolabs <security@...olabs.net>)
[hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews (Exoduks <exoduks@...il.com>)
TSL-2004-0045 - kerberos5 (Trustix Security Advisor <tsl@...stix.org>)
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server ("SHATTER (Application Security, Inc.)" <vrathod@...secinc.com>)
WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code ("Jérôme" ATHIAS <jerome.athias@...amail.com>)

September 3 (8 messages)

SUSE Security Announcement: zlib (SUSE-SA:2004:029) (Thomas Biege <thomas@...e.de>)
MailWorks Professional - Authentication bypass (headpimp@...p-industries.com)
Kerio Personal Firewall's Application Launch Protection Can Be Disabled by Direct Service Table Restoration ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
[XSS] PHP-Nuke 7.4 Remote Privilege Escalation (Pierquinto Manco <mantra@....it>)
Dynalink routers backdoor? (fabio <ctrlaltca@...ero.it>)
Re: Linux OpenExchange - cleartext rootpw in swap (Joshua Goodall <joshua@...nternet.com.au>)
MailWorks Professional - Authentication Bypass (headpimp@...p-industries.com)
Finger Google v1.0 released (shadown <shadown@...il.com>)

September 5 (6 messages)

FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities ("Thor Larholm" <thor@...x.com>)
Engenio/LSI Logic controllers denial of service/data corruption (Jedi/Sector One <j@...eftpd.org>)
[XSS] PHP-Nuke 7.4 ViewAdmin Bug (Pierquinto Manco <mantra@....it>)
[XSS] PHP-Nuke 7.4 DelAdmin Bug (Pierquinto Manco <mantra@....it>)
Broadcast shutdown in Call of Duty 1.4 (Luigi Auriemma <aluigi@...istici.org>)
FUll Path Disclosure in YABBSE (Ahmad Muammar <y3dips@...o.or.id>)

September 6 (9 messages)

Cross-Site Scripting Vulnerability in Newtelligence DasBlog ("Dominick Baier" <seclists@...stprivilege.com>)
OpenCA Security Advisory: Cross Site Scripting vulnerability ("Martin Bartosch" <martin.bartosch@....de>)
SUSE Security Announcement: apache2 (SUSE-SA:2004:030) (krahmer@...e.de (Sebastian Krahmer))
serverview 3.0 - insecure file permissions (Rene <l0om@...luded.org>)
[ GLSA 200409-10 ] multi-gnome-terminal: Information leak (Thierry Carrez <koon@...too.org>)
Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) (Jedi/Sector One <j@...eftpd.org>)
[RLSA_01-2004] QNX PPPoEd local root vulnerabilities (Julio Cesar Fort <julio@...slabs.com.br>)
cdrdao local root exploit ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Apple, Apple Remote Desktop client (Adam Shostack <adam@...eport.org>)

September 7 (11 messages)

[XSS] PHP-Nuke 7.4 Newsletter Injection Bug (Pierquinto Manco <mantra@....it>)
Good Patch to Multiple [XSS] Vulnerabilities in PHP-Nuke 7.4 (Pierquinto Manco <pierquinto@...il.com>)
[XSS] PHP-Nuke 7.4 AddMsg Bug (Pierquinto Manco <mantra@....it>)
PHP-Nuke 7.4 Multiple XSS Vulnerabilities Patch (Pierquinto Manco <mantra@....it>)
Bug XSS in PsNews 1.1 (Michal Blaszczak <wacky@...ponie.org>)
Site News Authentication Error May Let Local Users Add Messages ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
mpg123 buffer overflow vulnerability ("Davide Del Vecchio" <dante@...ghieri.org>)
[SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability (snsadv@....co.jp (snsadv))
Re: cdrdao local root exploit (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: [XSS] PHP-Nuke 7.4 Bugs ("Blaine Elzey" <lz@...arine.net>)
Short Paper on "the warez scene" (Andrew Smith <stfunub@...il.com>)

September 8 (7 messages)

Cerulean Studios Trillian 0.74i buffer overflow in MSN module (Komrade <giocasati@...erfree.it>)
MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Insecure Temporary File Creation Vulnerability in Net-Acct ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: [XSS] PHP-Nuke 7.4 Bugs (Peter Lowe <pgl@...o.org>)
[XSS]/SQL Injection PHP-Nuke Delete Message(s) Bug (bima tampan <iko94@...oo.com>)

September 9 (4 messages)

MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Multiple vulnerabilities 1n BBS E-Market Professional (Ahmad Muammar <y3dips@...o.or.id>)
Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities ("http-equiv@...ite.com" <1@...ware.com>)

September 10 (11 messages)

Off-by-one bug in Halo 1.04 (Luigi Auriemma <aluigi@...istici.org>)
SQL-Injection in Subjects 2.0 for Postnuke (Criolabs <security@...olabs.net>)
F-Secure Internet Gatekeeper Content Scanning Server Denial of Service [iDEFENSE] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
OpenOffice World-Readable Temporary Files Disclose Files to Local Users ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
CAU-EX-2004-0002: cdrecord-suidshell.sh ("I)ruid" <druid@...ghq.org>)
BlackJumboDog FTP Server version 3.6.1 Buffer Overflow [Exploit included] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
New Data Wipe Tools ("Thomas C. Greene" <thomas.greene@...register.co.uk>)
Bug XSS in PsNews 1.1 (Michal Blaszczak <wacky@...ponie.org>)
[CLA-2004:860] Conectiva Security Announcement - krb5 (Conectiva Updates <secure@...ectiva.com.br>)
Axis Network Camera and Video Server Security Advisory (product-security@...s.com)
Multiple vulnerabilities in Icewarp Web Mail 5.2.7 (ShineShadow <ss_contacts@...mail.com>)

September 11 (3 messages)

cdrecord local root exploit (newbug Tseng <newbug@...oot.org>)
[CLA-2004:863] Conectiva Security Announcement - wv (Conectiva Updates <secure@...ectiva.com.br>)
Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service ("Wolfpaw - Dale Corse" <admin-lists@...fpaw.net>)

September 12 (10 messages)

Serv-U up to 5.2 Denial of Service (Patrick <patrickthomassen@...il.com>)
Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service ("David S. Miller" <davem@...emloft.net>)
Re: New Data Wipe Tools ("Thomas C. Greene" <thomas.greene@...register.co.uk>)
Re: New Data Wipe Tools (Jake Appelbaum <jacob@...elbaum.net>)
RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service ("Wolfpaw - Dale Corse" <admin@...fpaw.net>)
Re: New Data Wipe Tools (Brendan Murray <brendan@...fhoundsecurity.com>)
Remote buffer overflow in Apache mod_ssl when reverse proxying SSL ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service ("David S. Miller" <davem@...emloft.net>)
Re: [grsec] Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service (Igmar Palsenberg <maillist@...media.nl>)
Gadu-Gadu (all versions with image-send feature) Heap Overflow (Sec-Labs Team <noreply@...-labs.hack.pl>)

September 13 (18 messages)

problem in voip environment ("Pasquiet Loic (M.)" <Loic.Pasquiet@...ytechnique.fr>)
[CLA-2004:864] Conectiva Security Announcement - kde (Conectiva Updates <secure@...ectiva.com.br>)
[OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) (OpenPKG <openpkg@...npkg.org>)
Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL (3APA3A <3APA3A@...URITY.NNOV.RU>)
[CLA-2004:865] Conectiva Security Announcement - zlib (Conectiva Updates <secure@...ectiva.com.br>)
Correction to latest Colsaire advisories (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: New Data Wipe Tools (Derek Martin <code@...zashack.org>)
Posible Inclusion File in Perl Desk (Nikyt0x Argentina <nikyt0x@...mail.com>)
Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) ("Gerald (Jerry) Carter" <jerry@...ba.org>)
Re: cdrecord local root exploit (Sean Davis <dive@...ersgame.net>)
Directory Traversal Vulnerability in TwinFTP Server allows overwriting ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service (Ron DuFresne <dufresne@...ternet.com>)
@stake advisory: Lexar JumpDrive Secure Password Extraction ("Chris Wysopal" <weld@...take.com>)
[RLSA_02-2004] QNX Photon multiple buffer overflows (Julio Cesar Fort <julio@...slabs.com.br>)
Insecure file permissions in the Firefox browser for Linux >= v0.9 (Max <spamhole@....at>)
Samba nmbd Invalid Length Denial of Service Vulnerability [iDEFENSE] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Zyxel Prestige 681 SDSL router information leak (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
The ArpSucker is b0rn! Be yourself, be the net. (Alpt <alpt@...aknet.org>)

September 14 (27 messages)

[RLSA_03-2004] QNX ftp client format string bug (Julio Cesar Fort <julio@...slabs.com.br>)
[RLSA_04-2004] QNX crrtrap possible race condition vulnerability (Julio Cesar Fort <julio@...slabs.com.br>)
QNX crrtrap possible race condition vulnerability ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
New Security paper released (shadown <shadown@...il.com>)
RE: New Data Wipe Tools ("Altheide, Cory B. (IARC)" <AltheideC@...doe.gov>)
@stake advisory: Pingtel Xpressa Denial of Service ("Advisories" <advisories@...take.com>)
MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: cdrecord local root exploit (Sean Davis <dive@...ersgame.net>)
RE: Linux 2.4.27 SECURITY BUG - TCP Local (probable Remote) Denial of Service ("Ivan Groenewald" <ivang2@...ahost.co.uk>)
Re: The ArpSucker is b0rn! Be yourself, be the net. (Stefan.Laudat@...ianztiriac.ro)
Re: cdrecord local root exploit (Volker Kuhlmann <list0570@...adise.net.nz>)
Re: Re: The ArpSucker is b0rn! Be yourself, be the net. (VX Dude <vxdude2003@...oo.com>)
Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue ("advisories" <advisories@...saire.com>)
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory (joey@...odrom.org (Martin Schulze))
Corsaire Security Advisory - Multiple vendor MIME separator issue ("advisories" <advisories@...saire.com>)
Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue ("advisories" <advisories@...saire.com>)
SUS 2.0.2 local root vulnerability (LSS Security <exposed@....hr>)
Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue ("advisories" <advisories@...saire.com>)
TSL-2004-0046 - multi (Trustix Security Advisor <tsl@...stix.org>)
Rainbow tables for LM/NTLMv1 authentication (Hidenobu Seki <seki@....yamatake.co.jp>)
[XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug (bima tampan <iko94@...oo.com>)
ADVISORY: http response splitting in snipsnap ("Maestro De-Seguridad" <maestrodeseguridad@...os.com>)
Re: Re: The ArpSucker is b0rn! Be yourself, be the net. (Barrie Dempster <barrie@...oot-robot.net>)
Inkra 1504GX DoS vulnerability in conducting IP protocol (felix zhou <felix__zhou@...mail.com>)
Re: Re: The ArpSucker is b0rn! Be yourself, be the net. (nirvana <karmic_nirvana@...oo.com>)
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution [MS04-028] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability ("Jérôme" ATHIAS <jerome.athias@...amail.com>)

September 15 (25 messages)

RE: The ArpSucker is b0rn! Be yourself, be the net. ("Compton, Rich" <RCompton@...rtercom.com>)
Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("advisories" <advisories@...saire.com>)
Corsaire Security Advisory - Multiple vendor MIME field quoting issue ("advisories" <advisories@...saire.com>)
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Nick D." <ndebaggis@...izon.net>)
Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue ("advisories" <advisories@...saire.com>)
Re: The ArpSucker is b0rn! Be yourself, be the net. (Gregory Steuck <greg@...04.nest.cx>)
Corsaire Security Advisory - Multiple vendor MIME field whitespace issue ("advisories" <advisories@...saire.com>)
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("David F. Skoll" <dfs@...ringpenguin.com>)
Re: Correction to latest Colsaire advisories ("advisories" <advisories@...saire.com>)
New Mozilla, Firefox and Thunderbird releases fix critical security issues (GaÃ«l Delalleau <gael.delalleau+moz@....org>)
SMC7004VWBR / SMC7008ABR "spoofing" vulnerability. (Jimmy Scott <jimmy@...t-solutions.be>)
[OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) (OpenPKG <openpkg@...npkg.org>)
McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
SA04-002 - Apache config file env variable buffer overflow (jonas.thambert@....se)
[OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell) (OpenPKG <openpkg@...npkg.org>)
myServer 0.7 Directory Traversal Vulnerability ("Securiteinfo.com" <webmaster@...uriteinfo.com>)
MDKSA-2004:093 - Updated squid packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
SUSE Security Announcement: apache2 (SUSE-SA:2004:032) (Ludwig Nussel <lnussel@...e.de>)
MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
PHP Vulnerability N. 1 (Stefano Di Paola <stefano.dipaola@...ec.it>)
[SECURITY] [DSA 545-1] New cupsys packages fix denial of service (joey@...odrom.org (Martin Schulze))
Php Vulnerability N. 2 (Stefano Di Paola <stefano.dipaola@...ec.it>)
Re: McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] (bashis <mcw@....se>)
SUSE Security Announcement: cups (SUSE-SA:2004:031) (krahmer@...e.de (Sebastian Krahmer))

September 16 (39 messages)

MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue (David Covin <dcovin@....mgh.harvard.edu>)
CESA-2004-005: gtk+ XPM decoder (chris@...ry.beasts.org)
[ANNOUNCE] Apache HTTP Server 2.0.51 Released ("Sander Striker" <striker@...che.org>)
Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
RE: McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] (Francis Favorini <francis.favorini@...e.edu>)
Re: Correction to latest Colsaire advisories (Andreas Marx <amarx@...a-it.de>)
CESA-2004-004: libXpm (chris@...ry.beasts.org)
Re: RE: McAfee VirusScan Privilege Escalation Vulnerability (bashis <mcw@....se>)
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
RE: Correction to latest Colsaire advisories ("David Litchfield" <davidl@...software.com>)
iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability ("customer service mailbox" <customerservice…)
[ GLSA 200409-19 ] Heimdal: ftpd root escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: cdrecord local root exploit (Marcus Meissner <meissner@...e.de>)
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("David F. Skoll" <dfs@...ringpenguin.com>)
Fwd: Theo's presentation on exploit prevention (Bas Alberts <bas.alberts@...unitysec.com>)
Re: The ArpSucker is b0rn! Be yourself, be the net. (H D Moore <fdlist@...italoffense.net>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Colin.Scott@...lc.com)
MDKSA-2004:097 - Updated cups packages fix DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("pingywon MCSE" <pingywon@...mail.com>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Harrison Gladden <linuxguru80@...oo.com>)
Re: cdrecord local root exploit (Coleman <cokane@...ane.org>)
[OpenPKG-SA-2004.041] OpenPKG Security Advisory (spamassassin) (OpenPKG <openpkg@...npkg.org>)
FlowSecurity.org: Local Stack Overflow on htpasswd apache 1.3.31 advsory. (Luiz Fernando <luiz.fc@...il.com>)
RE: Vulnerability in IBM Windows XP: default hi dden Administrator account allows local Administrator access (Stephen Agar <Stephen.Agar@...cc.org>)
RE: Correction to latest Colsaire advisories ("advisories" <advisories@...saire.com>)
[SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows (joey@...odrom.org (Martin Schulze))
wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities (Paul Johnston <paul@...tpoint.ltd.uk>)
Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow (sheep explode <sheep.explode@...il.com>)
www.proboards.com / YaBB XSS Vuln (<admin@...tflash.com>)
Freeze in Pigeon Server 3.02.0143 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
TSLSA-2004-0047 - multi (Trustix Security Advisor <tsl@...stix.org>)
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Angelidis, Fotis(NSASOUDABAY)" <AngelidisF@....souda.navy.mil>)
Re: cdrecord local root exploit ("Jason T. Miller" <jasomill@...ffstall.com>)
MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
ADVISORY: security hole (http response splitting) in snitz forums 2000 ("Maestro De-Seguridad" <maestrodeseguridad@...os.com>)

September 17 (24 messages)

JPEG Processing BOF Proof Of Concept ("GulfTech Security" <security@...ftech.org>)
Microsoft WordPerfect 5.x Converter Heap Overflow ("NGSSoftware Insight Security Research" <nisr@...software.com>)
Re: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow (Gary Warner <gar@...gar.com>)
[sudo-announce] Sudo version 1.6.8p1 now available (fwd) (je@...ure.net)
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Parks, Matt" <Matt.Parks@....gov>)
iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability ("customer service mailbox" <customerservice@...fense.com>)
MDKSA-2004:099 - Updated XFree86 packages fix libXpm overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
XSA-2004-5: heap overflow in DVD subpicture decoder (Michael Roitzsch <mroi@...rs.sourceforge.net>)
XSA-2004-4: multiple string overflows (Michael Roitzsch <mroi@...rs.sourceforge.net>)
IE6 + XP SP2 Vulnerability (cns <cns@...e.fr>)
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
[exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit (admin@...loitwatch.org)
Re: [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit (Gadi Evron <ge@...uxbox.org>)
[security bulletin] SSRT4739 rev.0 HP WebJetadmin arbitrary command execution ("Boren, Rich (SSRT)" <rich.boren@...com>)
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue (Borja Marcos <borjam@...enet.es>)
RsyncX vulnerabilities (Matt Johnston <matt@....asn.au>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Chris Norton" <kicktd_list@...mail.com>)
ANNOUNCE: VulnDisco RADIUS testsuite v1.2 ("Evgeny Demidov" <demidov@...g.net>)
Re: www.proboards.com / YaBB XSS Vuln (Patrick Clinger <pclinger@...boards.com>)
RE: JPEG Processing BOF Proof Of Concept ("Cassidy Macfarlane" <cmacfarlane@...mmond-Miller.co.uk>)
RE: www.proboards.com / YaBB XSS Vuln ("GulfTech Security" <security@...ftech.org>)
GoogleToolbar:About -- Allows Script Injection (ViPeR <viper31337@...oo.co.in>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Wilson, Contractor" <mwwilson@...o.hpc.mil…)

September 18 (25 messages)

RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Wilson, Contractor" <mwwilson@...o.hpc.mil…)
RE: Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("pingywon MCSE" <pingywon@...mail.com>)
FreeBSD kernel buffer overflow (gerarra@....it)
Important message to Bugtraq Subscribers! (Daniel Bertrand <danb@...urityfocus.com>)
Re: [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POCExploit ("Clemens, Dan" <Dan.Clemens@...lthsouth.com>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Chris Norton" <kicktd_list@...mail.com>)
Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("advisories" <advisories@...saire.com>)
Re: FreeBSD kernel buffer overflow (Wesley Shields <wxs@....rit.edu>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Shawn McMahon <smcmahon@....com>)
Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. (khoaimi <kh0aimi@...oo.com>)
Re: Multiple Vulnerabilities in phpScheduleIt (Nick Korbel <nkorbel@...mail.com>)
Re: FreeBSD kernel buffer overflow (Tim Newsham <newsham@...a.net>)
Sudo Exploit by Rosiello Security (Angelo Rosiello <angelo@...iello.org>)
Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code) (kers0r <root@...lum-nz.com>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
RhinoSoft DNS4ME HTTP Server Vulnerabilities ("GulfTech Security" <security@...ftech.org>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
Re:[2] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("David F. Skoll" <dfs@...ringpenguin.com>)
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("Greg A. Woods" <woods@...rd.com>)
Re: GoogleToolbar:About -- Allows Script Injection ("Rafel Ivgi, The-Insider" <theinsider@....net.il>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Shawn McMahon <smcmahon@....com>)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Michael Scheidell" <scheidell@...nap.net>)
Debian netkit telnetd vulnerability (Michal Zalewski <lcamtuf@...ttot.org>)

September 19 (9 messages)

Microsoft WordPerfect 5.x Converter Heap Overflow ("NGSSoftware Insight Security Research Advisory" <nisr@...software.com>)
wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities (Paul Johnston <paul@...tpoint.ltd.uk>)
Local root compromise possible with getmail (David Watson <baikie@...hat.freeserve.co.uk>)
Re: GoogleToolbar:About -- Allows Script Injection (Liu Die Yu <liudieyu@...rella.name>)
Re: GoogleToolbar:About -- Allows Script Injection (ViPeR <viper31337@...oo.co.in>)
The remote Openssh User-Level-Denial-Of-Service (Alpt <alpt@...aknet.org>)
AOL Groups/AIM Information Disclosure (Link Linkovich <linkovich@...il.com>)
Re: The remote Openssh User-Level-Denial-Of-Service (3APA3A <3APA3A@...URITY.NNOV.RU>)
Crash in Lords of the Realm III 1.01 (Luigi Auriemma <aluigi@...istici.org>)

September 20 (8 messages)

Tool announcement: fakebust (Michal Zalewski <lcamtuf@...ttot.org>)
Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0 (Matthias Wimmer <m@...ias.net>)
RE: [SPAM] - Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access… ("Michael Scheidell" <scheidell@...nap.n…)
Default username/password pairs in ON Command CCM 5.x database backend (Jonas Olsson <jonas.olsson@...eit.se>)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access ("Larry Mitchell" <lists@...sd.com>)
Vulnerabilities in TUTOS (Joxean Koret <joxeankoret@...oo.es>)
FreeBSD Security Advisory FreeBSD-SA-04:14.cvs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
CoD United Offensive boom boom (Luigi Auriemma <aluigi@...istici.org>)

September 21 (15 messages)

Serious Security Issue in Windows XP SP2's Firewall (Andreas Marx <amarx@...a-it.de>)
[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
Vulnerabilities in TUTOS (Joxean Koret <joxeankoret@...oo.es>)
glFTPd local stack buffer overflow (CoKi <coki@...ystem.com.ar>)
Re: Posible security bug in phpMyWebhosting (Udo Mueller <info@...ol.de>)
Multiple Full Disclosure Path in postnuke 0.750 phoenix ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability. (Tim Broeker <tim@...ctricjet.com>)
Multiple Full Disclosure Path in postnuke 0.750 phoenix (FAiN182 <fain182@...inito.it>)
[sb] [ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities ("Thierry Carrez" <koon@...too.org>)
Re: Debian netkit telnetd vulnerability (Solar Designer <solar@...nwall.com>)
Multiple Vulnerabilities In EmuLive Server4 ("GulfTech Security" <security@...ftech.org>)
And More Advanced SQL Injection... (Stefano Di Paola <stefano.dipaola@...ec.it>)
CA UniCenter Management Portal Username Enumeration Vulnerability (thomas adams <tgadams@...lsouth.net>)
Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004) (Luigi Auriemma <aluigi@...istici.org>)
Re: glFTPd local stack buffer overflow (Bloody_A <bloody_a@...tpd.com>)

September 22 (22 messages)

Re: RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
ICMP spoofed source tunneling (Max Tulyev <maxtul@...an.parkline.ru>)
Pinnacle ShowCenter Skin Denial of Service (Marc Ruef <marc.ruef@...putec.ch>)
Netscape NSS Library Vulnerability Affects Sun Java Enterprise System ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (<pressinfo@...bold.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Polazzo Justin" <Justin.Polazzo@...ilit…)
New whitepaper "The Phishing Guide" ("Gunter Ollmann (NGS)" <gunter@...software.com>)
[SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution (joey@...odrom.org (Martin Schulze))
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Polazzo Justin" <Justin.Polazzo@...ilit…)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Craig Paterson <craigp@...pett.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Jaeson Schultz" <jaeson@...son.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Gene Cronk <gcronk@...g.net>)
Re: ICMP spoofed source tunneling (fenfire@...esend.de)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (steve menard <smenard@...et.nb.ca>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Gene Cronk <gcronk@...g.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Jay Hennigan <jay@...t.net>)
Remote buffer overflow in MDaemon IMAP and SMTP server ("pigrelax" <pigrelax@...dex.ru>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Homer <hparker@...ershut.net>)
Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products ("Mike Sues" <msues@...elksecurity.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Lorne J. Leitman" <leitman@...pitt.edu…)
iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability ("customer service mailbox" <customerservice@...fe…)

September 23 (25 messages)

[CLA-2004:867] Conectiva Security Announcement - spamassassin (Conectiva Updates <secure@...ectiva.com.br>)
Pinnacle ShowCenter 1.51 possible DoS ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Hollis Johnson <hollis@...co.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Rainer Duffner <rainer@...ra-secure.de>)
[CLA-2004:866] Conectiva Security Announcement - qt3 (Conectiva Updates <secure@...ectiva.com.br>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Mike Ely <me@...pehat.com>)
Macromedia Products Not Affected by MS JPEG/GDIPlus Issue (securityzone@...romedia.com (Macromedia Security Zone))
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Marvin Bellamy <marvin.bellamy@...ovisi…)
Remote buffer overflow in MDaemon IMAP and SMTP server ("pigrelax" <pigrelax@...dex.ru>)
MDKSA-2004:101 - Updated webmin packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: ICMP spoofed source tunneling (Tim Newsham <newsham@...a.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Jacob Appelbaum <jacob@...ifiedvoting.o…)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Jaeson Schultz" <jaeson@...son.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Barry Fitzgerald <bkfsec@....lonestar.o…)
Re: ICMP spoofed source tunneling (Dave Paris <dparis@...orks.com>)
MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("David Querin" <david@...urityage.com>)
Re: ICMP spoofed source tunneling (sin <lists@...ocence-lost.net>)
Re: ICMP spoofed source tunneling (fenfire@...esend.de)
Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues (Sym Security <secure@...antec.com>)
MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: New whitepaper "The Phishing Guide" (Aleksandar Milivojevic <amilivojevic@....ca>)
Multiple vulnerabilities in ActivePost Standard 3.1 (Luigi Auriemma <aluigi@...istici.org>)
[CLA-2004:868] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
Example of JPG Exploit & Shellcode ("javier falbo" <javier_falbo@...mail.com>)

September 24 (4 messages)

Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Atom 'Smasher' <atom@...picious.org>)
Promiscuous email printing in Canon imageRunner (Andrew Daviel <advax@...umf.ca>)
aspWebCalendar /aspWebAlbum: SQL injection (Pedro Sanches <pedro_sanches@...o.pt>)
TSLSA-2004-0049 - apache (Trustix Security Advisor <tsl@...stix.org>)

September 25 (15 messages)

Re: New whitepaper "The Phishing Guide" (Seth Arnold <sarnold@...unix.com>)
Buffer overflow in Zinf 2.2.1 for Win32 (Luigi Auriemma <aluigi@...istici.org>)
Microsoft's GDI Detetection Tool faults (<albatross@....it>)
NEW GDI+ JPEG Remote Exploit (John Bissell <monkey321_1@...mail.com>)
New Macromedia Security Zone Bulletins Postede (securityzone@...romedia.com (Macromedia Security Zone))
Re: Microsoft's GDI Detetection Tool faults (John Bissell <monkey321_1@...mail.com>)
RE: Correction to latest Colsaire advisories ("advisories" <advisories@...saire.com>)
Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("advisories" <advisories@...saire.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Heikki Korpela <heko@....fi>)
New XSS vulnerabilities in paFileDB 3.1 final (alireza hassani <trueend5@...oo.com>)
Re: ICMP spoofed source tunneling (<raiblehugo@...mail.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Jose Rey <jrey@...cared.com>)
Motorola Wireless Router WR850G Authentication Circumvention ("Daniel Fabian" <df@...-consult.com>)
Re: Microsoft's GDI Detetection Tool faults (Gadi Evron <ge@...uxbox.org>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Jeremy Epstein <jeremy.epstein@...metho…)

September 26 (10 messages)

RE: New whitepaper "The Phishing Guide" ("Dehner, Benjamin T." <Ben.Dehner@...mont.com>)
Re: Promiscuous email printing in Canon imageRunner (Chip Mefford <cmefford@...ashington.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Claudius Li <aprentic@...tae.net>)
Motorola Wireless Router WR850G Authentication Circumvention ("Daniel Fabian" <d.fabian@...-consult.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Polazzo Justin" <Justin.Polazzo@...ilit…)
New Macromedia Security Zone Bulletins Posted (securityzone@...romedia.com (Macromedia Security Zone))
Re: New whitepaper "The Phishing Guide" (Daniel Veditz <dveditz@...zio.com>)
HTTP Response Splitting and SQL injection in megabbs forum ("pigrelax" <pigrelax@...dex.ru>)
SQL injection in BroadBoard Instant ASP Message Board ("pigrelax" <pigrelax@...dex.ru>)
Re: HTTP Response Splitting and SQL injection in megabbs forum (PD9 Software <info@...soft.com>)

September 27 (20 messages)

[CLA-2004:869] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
RE: Microsoft's GDI Detetection Tool faults ("Dowling, Gabrielle" <dowlingg@...lcrom.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Mike Healan <mike@...wareinfo.com>)
MyWebServer 1.0.3 (nekd0 <nekd0@...bler.ru>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Nick Knouf <nknouf@....EDU>)
Re: Debian netkit telnetd vulnerability (Matt Zimmerman <mdz@...ian.org>)
Re: cdrecord local root exploit (Dr Andrew C Aitchison <A.C.Aitchison@...ms.cam.ac.uk>)
IPv4 fragmentation --> The Rose Attack (Gandalf The White <gandalf@...ital.net>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Yoav Nir" <ynir@...ckpoint.com>)
[Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS (Hat-Squad Security Team <bugtraq@...-squad.com>)
Re: New whitepaper "The Phishing Guide" (Aleksandar Milivojevic <amilivojevic@....ca>)
Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("David F. Skoll" <dfs@...ringpenguin.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor (Paul Wouters <paul@...net.nl>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Seth Breidbart <sethb@...ix.com>)
GDI Virus in the wild. (Ben <ben@...ynews.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Greg A. Woods" <woods@...rd.com>)
Re: New whitepaper "The Phishing Guide" ("Greg A. Woods" <woods@...rd.com>)
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay (joey@...odrom.org (Martin Schulze))
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (<Ryan_Ward@...l.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Nicholas Knight <nknight@...awaynet.com…)

September 28 (33 messages)

Broadcast crash in Chatman 1.5.1 RC1 (Luigi Auriemma <aluigi@...istici.org>)
Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue ("David F. Skoll" <dfs@...ringpenguin.com>)
Re: aspWebCalendar /aspWebAlbum: SQL injection ("Steven" <steven@...ryapple.com>)
iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability ("customer service mailbox" <customerservice@...fense.com>)
Re: Microsoft's GDI Detetection Tool faults (Andreas Marx <amarx@...a-it.de>)
RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (David Brodbeck <DavidB@...l.interclean.co…)
Re: New whitepaper "The Phishing Guide" (Chip Andrews <chip@...security.com>)
Re: GDI Virus in the wild. (Gerry Eisenhaur <GEisenhaur@...co.com>)
Re: Microsoft's GDI Detetection Tool faults (<albatross@....it>)
Re: New whitepaper "The Phishing Guide" (Juraj Bednar <juraj@...nar.sk>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (ERACC <eracclists@...lsouth.net>)
@lex Guestbook (PHP) Include file (Himeur Nourredine <lostnoobs@...urity-challenge.com>)
RE: Promiscuous email printing in Canon imageRunner ("Matthew E. Lauterbach" <mlauterbach@...l.wtamu.edu>)
Re: New whitepaper "The Phishing Guide" (Brian Dessent <brian@...sent.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Bob Toxen <bob@...ysecurelinux.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (Jeremy Epstein <jeremy.epstein@...methods.co…)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Kurt Seifried" <bt@...fried.org>)
Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit (iggy popal <me@...ikon.de>)
Re: ICMP spoofed source tunneling (Calum <bugtraq@...strial.co.uk>)
Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (Adam Jacob Muller <adam@...linux.us>)
Re[2]: New whitepaper "The Phishing Guide" (Karsten Heidrich <karsten@...drich-da.de>)
Re: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue (David Wilson <David.Wilson@...de.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Tracy Bost <tbost@...raisalforum.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (gandalf@...ital.net)
Code execution in Icecast 2.0.1 (Luigi Auriemma <aluigi@...istici.org>)
Re: New whitepaper "The Phishing Guide" (Crispin Cowan <crispin@...unix.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Marco S Hyman <marc@...fu.org>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Enrique A. Chaparro" <echaparro@...sinect…)
MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Vignette Application Portal Unauthenticated Diagnostics ("Advisories" <advisories@...take.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor (Crispin Cowan <crispin@...unix.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Patrick J. Kobly" <patrick@...ly.com>)
Re: Microsoft's GDI Detetection Tool faults (the rxmr <the.rxmr@...il.com>)

September 29 (27 messages)

Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes ("David F. Skoll" <dfs@...ringpenguin.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Coleman <cokane@...ane.org>)
Multiple XSS Vulnerabilities in Wordpress 1.2 (Thomas Waldegger <bugtraq@...ph3us.org>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("David Schwartz" <davids@...master.com>)
MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs. (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Yahoo! Store Security Advisory (Stuart Moore <smoore.bugtraq@...urityglobal.net>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Simon <lists@...e.org.uk>)
Re: GDI Virus in the wild. (GuidoZ <uberguidoz@...il.com>)
Re[2]: Automatically passing NTLM authentication credentials on Windows XP (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re[2]: Automatically passing NTLM authentication credentials on Windows XP ("Hidenobu Seki" <urity_friday@...mail.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Matthew Keller <mgkeller@...rs.sourcefo…)
Re: Diebold Global Election Management System (GEMS) Backdoor Account (Brian Kirkbride <brian@...adtime.com>)
Php RFC1867 Upload Vuln. POC Released (Stefano Di Paola <stefano.dipaola@...ec.it>)
Re: iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D ("Lise Moorveld" <lise_moorveld@...mail.com>)
[FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities (Dominic Hargreaves <dom@...th.li>)
[FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities (Dominic Hargreaves <dom@...th.li>)
RE: Microsoft's GDI Detetection Tool faults ("Scott Jacobson" <sjacobson@...linc.com>)
directory traversal in ParaChat Server 5.5 ("Donato Ferrante" <fdonato@...istici.org>)
Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (Craig Paterson <craigp@...pett.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Dana Hudes <dhudes@...es.org>)
[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass ("Boren, Rich (SSRT)" <rich.boren@...com>)
[CLA-2004:870] Conectiva Security Announcement - imlib (Conectiva Updates <secure@...ectiva.com.br>)
Php RFC1867 Upload Vuln. POC Released (Stefano Di Paola <stefano.dipaola@...ec.it>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Jason T. Miller" <jasomill@...ffstall.com…)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to ("Gareth Humphries" <ghumphries@...z.govt.nz>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Colm Buckley <colm@...tha.org>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("David F. Skoll" <dfs@...ringpenguin.com>)

September 30 (41 messages)

RE: Promiscuous email printing in Canon imageRunner ("Eric McCarty" <eric@...mpd.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Adam Shostack <adam@...eport.org>)
Possible GDI Exploit Vector (<james_love@...lent.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor (Adam Shostack <adam@...eport.org>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Colm MacCarthaigh <colmmacc@...brick.dcu.ie…)
Re: New whitepaper "The Phishing Guide" ("Philip Stoev" <philip@...ev.org>)
MSSQL 7.0 DoS (securma@...amail.com)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Seth Breidbart <sethb@...ix.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Casper Dik <casper@...land.sun.com>)
Php RFC1867 Upload Vuln. POC Released (Stefano Di Paola <stefano.dipaola@...ec.it>)
RE: Microsoft's GDI Detetection Tool faults (mgotts@...ads.com)
Re: Default username/password pairs in ON Command CCM 5.x database backend, Sep 20 2004 2:24PM (Sym Security <secure@...antec.com>)
Crash in Alpha Black Zero 1.04 (Luigi Auriemma <aluigi@...istici.org>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Casper Dik <casper@...land.sun.com>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (Bruce Barnett <barnett+bugtraq@...moire.cr…)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("David Schwartz" <davids@...master.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (Aleksandar Milivojevic <amilivojevic@....…)
directory traversal in ParaChat Server 5.5 ("Donato Ferrante" <fdonato@...istici.org>)
[FLSA-2004:2003] Updated rsync package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2004:1840] Updated Ethereal packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Reed, Phillip C. (LNG-DAY)" <phillip.r…)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (float@...ant.net)
Re: Php RFC1867 Upload Vuln. POC Released (Florian Weimer <fw@...eb.enyo.de>)
Multiple vulnerabilities in w-agora forum ("Alexander Antipov" <antipov@...urityLab.ru>)
[FLSA-2004:1549] Updated xchat packages fix security vulnerability (Dominic Hargreaves <dom@...th.li>)
Re: Php RFC1867 Upload Vuln. POC Released (Stefano Di Paola <stefano.dipaola@...ec.it>)
[FLSA-2004:1581] Updated flim packages fix security vulnerability (Dominic Hargreaves <dom@...th.li>)
RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("Polazzo Justin" <Justin.Polazzo@...ilit…)
Re: Promiscuous email printing in Canon imageRunner (Felix Lindner <felix.lindner@...ns.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes (trh <s0le@...ll.5013.org>)
[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak (joey@...odrom.org (Martin Schulze))
TSL-2004-0050 - multi (Trustix Security Advisor <tsl@...stix.org>)
Multiple Vulnerabilities in Silent Storm Portal (R00tCr4ck <root@...erspy.org>)
Unicornscan 0.4.2 (robert@...dsecurity.com)
Samba Security Announcement -- Potential Arbitrary File Access ("Gerald (Jerry) Carter" <jerry@...ba.org>)
RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (David Brodbeck <DavidB@...l.interclean.com>)
Re: directory traversal in ParaChat Server 5.5 (Donato Ferrante <fdonato@...istici.org>)
Re: cdrecord local root exploit ("Jason T. Miller" <jasomill@...ffstall.com>)
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes ("David F. Skoll" <dfs@...ringpenguin.com>)
Multiple vulnerabilities in w-agora forum ("Alexander Antipov" <antipov@...urityLab.ru>)
RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes (Hugo van der Kooij <hvdkooij@...derkooij.…)

488 messages

Powered by blists - more mailing lists