bugtraq mailing list - 2004/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2004/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 10	² 35	³ 6	⁴ 12	⁵ 19	⁶ 5	⁷
⁸ 13	⁹ 19	¹⁰ 19	¹¹ 33	¹² 23	¹³ 12	¹⁴ 2
¹⁵ 14	¹⁶ 9	¹⁷ 19	¹⁸ 17	¹⁹ 22	²⁰ 12	²¹ 4
²² 14	²³ 42	²⁴ 33	²⁵ 39	²⁶ 27	²⁷ 7	²⁸ 4
²⁹ 8	³⁰ 15

Messages by day:

November 1 (10 messages)

XDICT Buffer OverRun Vulnerability,funny :-) ("Sowhat ." <smaillist@...il.com>)
[USN-13-1] groff utility vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-14-1] xpdf vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
New Whitepaper - "Second-order Code Injection Attacks" ("Gunter Ollmann" <gunter@...software.com>)
Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (Anton R Ivanov <arivanov@...segv.cx>)
[SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Critical Vulnerability in Altiris Deployment Server architecture (Brian Gallagher <bugtraq@...mondsea.com>)
p h i s h i n g p h o r p h u n p h o r p h u q u e s a k e ("http-equiv@...ite.com " <1@...ware.com>)
[USN-15-1] lvm10 vulnerability (Martin Pitt <martin.pitt@...onical.com>)

November 2 (35 messages)

[OpenPKG-SA-2004.045] OpenPKG Security Advisory (mysql) (OpenPKG <openpkg@...npkg.org>)
[SECURITY] [DSA 580-1] New iptables packages fix modprobe failure (joey@...odrom.org (Martin Schulze))
Re: [ GLSA 200411-01 ] ppp: Remote denial of service vulnerability (Paul Mackerras <paulus@...ba.org>)
TSLSA-2004-0055 - multi (Trustix Security Advisor <tsl@...stix.org>)
MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) ("Berend-Jan Wever" <skylined@...p.tudelft.nl…)
[OpenPKG-SA-2004.050] OpenPKG Security Advisory (libxml) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2004.049] OpenPKG Security Advisory (gd) (OpenPKG <openpkg@...npkg.org>)
Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities (roozbeh afrasiabi <roozbeh_afrasiabi@...oo.com>)
Safari vulnerable to URL spoofing (Gilbert Verdian <gverdian@...research.org>)
[CLA-2004:881] Conectiva Security Announcement - rsync (Conectiva Updates <secure@...ectiva.com.br>)
Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (Henning Brauer <henning@...nbsd.org>)
Re: MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) ("morning_wood" <se_cur_ity@...mail.com>)
Medium Risk Vulnerability in WinRAR ("NGSSoftware Insight Security Research" <nisr@...software.com>)
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication (Cisco Systems Product Security Incident Response Team <psir…)
Exploiting default exception handler to increase exploit stability on win32 (tal zeltzer <tal.zeltzer@...il.com>)
zlib 1.2.2 released (Mark Adler <madler@...mni.caltech.edu>)
MDKSA-2004:117 - Updated gaim packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Multiple Vulnerabilities in Web Forums Server (R00tCr4ck <root@...erspy.org>)
MDKSA-2004:118 - Updated perl-Archive-Zip packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:119 - Updated MySQL packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:120 - Updated mpg123 packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:121 - Updated netatalk packages fix temporary file vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:122 - Updated mod_ssl packages fix information disclosure vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:123 - Updated perl-MIME-tools packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: New Whitepaper - "Second-order Code Injection Attacks" (Crispin Cowan <crispin@...unix.com>)
zlib 1.2.2 released (Mark Adler <madler@...mni.caltech.edu>)
MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (fwd) (Michal Zalewski <lcamtuf@...edump.cx>)
Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (wit… ("Elia Florio" <eflorio@...aster.it>)
[SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: debian dhcpd, old format string bug (Javier Fernandez-Sanguino <jfernandez@...minus.com>)
Re: New Whitepaper - "Second-order Code Injection Attacks" ("Jeff Williams" <jeff.williams@...ectsecurity.com>)
Microsoft ISA Server Authentication Bypassing ("Jérôme" ATHIAS <jerome.athias@...amail.com>)
URL spoofing bug (with iframes) in Microsoft Internet Explorer (11/02/2004) ("Benjamin Tobias Franz" <0-1-2-3@....de>)
[USN-16-1] perl vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)

November 3 (6 messages)

[Hat-Squad] SQL injection and XSS Vulnerabilities in HELM (Hat-Squad Security Team <bugtraq@...-squad.com>)
RE: New Whitepaper - "Second-order Code Injection Attacks" ("Gunter Ollmann (NGS)" <gunter@...software.com>)
RE: Microsoft ISA Server Authentication Bypassing ("Jim Harrison (ISA)" <jmharr@...rosoft.com>)
Re: New Whitepaper - "Second-order Code Injection Attacks" (Nicolas Gregoire <ngregoire@...probe.com>)
[SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory (joey@...odrom.org (Martin Schulze))
[CLA-2004:882] Conectiva Security Announcement - squid (Conectiva Updates <secure@...ectiva.com.br>)

November 4 (12 messages)

[HV-MED] Zip/Linux long path buffer overflow (vuln@...view.com)
Norton AntiVirus 2004/2005 Scripting Vulnerability Pt.3 (Includes PoC VBScript Code) (Daniel Milisic <dmilisic@...ealbox.com>)
Re: Norton AntiVirus 2004/2005 Scripting Vulnerability Pt.3 (Includes PoC VBScript Code) (3APA3A <3APA3A@...URITY.NNOV.RU>)
[CLA-2004:885] Conectiva Security Announcement - apache (Conectiva Updates <secure@...ectiva.com.br>)
Re: Norton AntiVirus 2004/2005 Scripting Vulnerability Pt.3 (Includes PoC VBScript Code) (GuidoZ <uberguidoz@...il.com>)
[CLA-2004:884] Conectiva Security Announcement - gaim (Conectiva Updates <secure@...ectiva.com.br>)
Cross-Site-Scripting Vulnerability in Microsoft.com ("Rafel Ivgi, The-Insider" <rivgi@...jan.com>)
[CLA-2004:883] Conectiva Security Announcement - subversion (Conectiva Updates <secure@...ectiva.com.br>)
[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability (joey@...odrom.org (Martin Schulze))
SSC Advisory TSA-052 (Callwave.com) (Secure Science Corporation Advisory Notice <bugtraq@...urescience.net>)
SSC Advisory TSA-052 (Callwave.com) (Secure Science Corporation Advisory Notice <bugtraq@...urescience.net>)
Re: [ GLSA 200411-09 ] shadow: Unauthorized modification of account information (Solar Designer <solar@...nwall.com>)

November 5 (19 messages)

[USN-17-1] passwd vulnerability (Martin Pitt <martin.pitt@...onical.com>)
MDKSA-2004:124 - Updated xorg-x11 packages fix libXpm overflow vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
[HV-LOW] Symantec LiveUpdate issues may cause DoS (vuln@...view.com)
Re: Cross-Site-Scripting Vulnerability in Microsoft.com (offtopic <offtopic@...l.ru>)
[FLSA-2004:2076] Updated foomatic package fixes security vulnerability (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
HTTP : Linux, Rusia, Cisco, Open Wall, etc (Richard Tan <richard_tan3000@...oo.co.uk>)
Re: [HV-MED] Zip/Linux long path buffer overflow (Martin Pitt <martin.pitt@...onical.com>)
In-game format string bug in the Lithtech engine (Luigi Auriemma <aluigi@...istici.org>)
[USN-18-1] zip vulnerability (Martin Pitt <martin.pitt@...onical.com>)
MDKSA-2004:125 - Updated iptables packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:126 - Updated shadow-utils packages fix security bypass vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:127 - Updated libxml and libxml2 packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: New Whitepaper - "Second-order Code Injection Attacks" ("Gunter Ollmann (NGS)" <gunter@...software.com>)
Re: debian dhcpd, old format string bug (Martin Schulze <joey@...odrom.org>)
Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems. (ShineShadow <ss_contacts@...mail.com>)
FW: Hacker Group back again, this time claiming to have source code to Cisco PIX firewall ("Graham, Brian" <Brian.Graham@...t.com>)
TSLSA-2004-0056 - apache (Trustix Security Advisor <tsl@...stix.org>)
Re: [HV-MED] Zip/Linux long path buffer overflow (Josh Bressers <bressers@...hat.com>)
SSC Advisory TSA-053 (Ureach.com) (Secure Science Corporation Advisory Notice <bugtraq@...urescience.net>)

November 6 (5 messages)

Making distinctions between similar-looking vulnerabilities ("Steven M. Christey" <coley@...re.org>)
RE: New Whitepaper - "Second-order Code Injection Attacks" ("Gunter Ollmann (NGS)" <gunter@...software.com>)
[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour (joey@...odrom.org (Martin Schulze))
[USN-19-1] squid vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Resources consumption in 602 Lan Suite 2004.0.04.0909 (Luigi Auriemma <aluigi@...istici.org>)

November 8 (13 messages)

MSIE src&name property disclosure ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
Re: MSIE src&name property disclosure (Michal Zalewski <lcamtuf@...ttot.org>)
Retina Vuln Scanner Problems. ("Robinson, Sonja" <SRobinson@...USA.com>)
Re: MSIE src&name property disclosure (Dave Aitel <dave@...unitysec.com>)
TRUSTe.org Cross-Site-Scripting Phishing oppurtunities (Andrew Smith <stfunub@...il.com>)
[SECURITY] [DSA 587-1] New freeam packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7 ("Gerald (Jerry) Carter" <jerry@...ba.org>)
Microsoft Internet Explorer permits to examine the existence of local files ("Benjamin Tobias Franz" <0-1-2-3@....de>)
DOS against Java JNDI/DNS (Kurt Huwig <k.huwig@...-ag.de>)
Re: MSIE src&name property disclosure (Paul Schmehl <pauls@...allas.edu>)
Offline WPA-PSK auditing tool (coWPAtty) (Joshua Wright <jwright@...borg.com>)
[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files (joey@...odrom.org (Martin Schulze))
Re: MSIE src&name property disclosure (Michal Zalewski <lcamtuf@...edump.cx>)

November 9 (19 messages)

up-imapproxy DoS vulnerabilities (Timo Sirainen <tss@....fi>)
[USN-20-1] Ruby CGI module vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: MSIE src&name property disclosure (Gadi Evron <ge@...uxbox.org>)
Security Contact for T-Mobile? (Jake Appelbaum <jacob@...elbaum.net>)
[SECURITY] [DSA 586-1] New ruby packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme… (Menashe Eliezer <menashe@...jan.com>)
[CLA-2004:888] Conectiva Security Announcement - libtiff3 (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2004:886] Conectiva Security Announcement - xpdf (Conectiva Updates <secure@...ectiva.com.br>)
MDKSA-2004:128 - Updated ruby packages fix remote DoS vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Evidence Mounts that the Vote Was Hacked (Atom 'Smasher' <atom@...picious.org>)
BoF in Windows 2000: ddeshare.exe (Jack C <jack@...pinc.com>)
[SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: BoF in Windows 2000: ddeshare.exe ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
Re: [HV-LOW] Symantec LiveUpdate issues may cause DoS (<secure@...antec.com>)
Re: New URL spoofing bug in Microsoft Internet Explorer (roozbeh afrasiabi <roozbeh_afrasiabi@...oo.com>)
[SECURITY] [DSA 589-1] New libgd1 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
New MaxPatrol Demo Available ("pigrelax" <pigrelax@...dex.ru>)
[SECURITY] [DSA 591-1] New libgd2 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Update: Web browsers - a mini-farce (MSIE gives in) (Heikki Kortti <hkortti@...enomicon.com>)

November 10 (19 messages)

Vulnerabilities in JAF CMS (y3dips@....securityfocus.com, [ echo|staff ]@securityfocus.com@....securityfocus.com <y3dips@...o.or.id>)
[USN-21-1] libgd vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-22-1] samba vulnerability (Martin Pitt <martin.pitt@...onical.com>)
EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service ("Marc Maiffret" <mmaiffret@...e.com>)
Re: Evidence Mounts that the Vote Was Hacked ("Jay D. Dyson" <jdyson@...achery.net>)
Re: BoF in Windows 2000: ddeshare.exe (Valdis.Kletnieks@...edu)
[SquirrelMail Security Advisory] Cross Site Scripting in encoded text (Jonathan Angliss <jon@...irrelmail.org>)
Re: Evidence Mounts that the Vote Was Hacked (Jei <jei@...hut.fi>)
Linux ELF loader vulnerabilities (Paul Starzetz <ihaquer@...c.pl>)
Security Contact Info for IPSWITCH ("Tom" <tommy@...videsecurity.com>)
Nortel Networks Contivity VPN Client information leakage vulnerability ("Network Intelligence (I) Pvt. Ltd." <info@....co.in>)
Multiple Vulnerabilities in WebCalendar (Joxean Koret <joxeankoret@...oo.es>)
BNC 2.8.9 remote buffer overflow (LSS Security <exposed@....hr>)
Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: BoF in Windows 2000: ddeshare.exe ("J. S. Connell" <ankh@...uck.gen.nz>)
Re: Evidence Mounts that the Vote Was Hacked ("Jay D. Dyson" <jdyson@...achery.net>)
04WebServer Three Vulnerabilities ("Jérôme" ATHIAS <jerome@...ias.fr>)
Unsecure Ftpd on HP PSC 2510 Printer (Justin Rush <jrush@...ut.wisc.edu>)
Re: Nortel Networks Contivity VPN Client information leakage vulnerability (Quincy Jackson <qjacks0n@...oo.com>)

November 11 (33 messages)

RE: Evidence Mounts that the Vote Was Hacked ("Gary Halleen \(ghalleen\)" <ghalleen@...co.com>)
Re: Evidence Mounts that the Vote Was Hacked (Tom Le <dottom@...il.com>)
Re: Evidence Mounts that the Vote Was Hacked (Michael Poole <mdpoole@...ilus.org>)
Re: Evidence Mounts that the Vote Was Hacked ("Jay D. Dyson" <jdyson@...achery.net>)
Re: Security Contact Info for IPSWITCH (Sullo <sullo@...t.net>)
Re: Evidence Mounts that the Vote Was Hacked ("Jay D. Dyson" <jdyson@...achery.net>)
RE: Re: Evidence Mounts that the Vote Was Hacked ("Carlos Kramer" <csk_1975@...mail.com>)
Hotfoon Ver 4.0 Highv Risk (saudi linux <ksa2ksa@...oo.com>)
RE: Re: Evidence Mounts that the Vote Was Hacked ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: Evidence Mounts that the Vote Was Hacked (Rick Crelia <rick.crelia@...gonstate.edu>)
Re: Linux ELF loader vulnerabilities (Ted Percival <ted@...hp.com.au>)
Re: Evidence Mounts that the Vote Was Hacked (Keith Oxenrider <koxenrider@...-biotech.com>)
[SquirrelMail Security Advisory] Cross Site Scripting in encoded text ("Jonathan Angliss" <jon@...irrelmail.org>)
Re: Evidence Mounts that the Vote Was Hacked (Peter Conrad <conrad@...ano.de>)
Re: Evidence Mounts that the Vote Was Hacked (Atom 'Smasher' <atom@...picious.org>)
Re: Re: Linux ELF loader vulnerabilities (Jirka Kosina <jikos@...os.cz>)
RE: Norton AntiVirus Script Blocking Exploit -- Symantec's response (Daniel Milisic <dmilisic@...ealbox.com>)
Re: Evidence Mounts that the Vote Was Hacked (bkfsec <bkfsec@....lonestar.org>)
Re: RE: Norton AntiVirus Script Blocking Exploit -- Symantec's response ("Jeff Donahue" <jeff@...net.com.uy>)
Re: Evidence Mounts that the Vote Was Hacked (Matt.Carpenter@...icor.com)
Re: Evidence Mounts that the Vote Was Hacked ("Matthew Farrenkopf" <farrenkm@...u.edu>)
SQL injection in vBulletin forums (last10.php) ("Dr. Death" <drdeath4ever@...mail.com>)
Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Contact in HP related to OpenView / Coda (Noam Rathaus <noamr@...ondsecurity.com>)
Zone Labs IMsecure Active Link Filter Bypass (Kurczaba Associates advisories <advisories@...czaba.com>)
[USN-24-1] openssl script vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-23-1] apache2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: New URL spoofing bug in Microsoft Internet Explorer ("http-equiv@...ite.com " <1@...ware.com>)
Re: Re: Evidence Mounts that the Vote Was Hacked (Valdis.Kletnieks@...edu)
[ GLSA 200411-19 ] Pavuk: Multiple buffer overflows (Luke Macken <lewk@...too.org>)
Re: Linux ELF loader vulnerabilities (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
[ GLSA 200411-18 ] Apache 2.0: Denial of Service by memory consumption (Matthias Geerdsen <vorlon@...too.org>)
[waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions] (Janek Vind <come2waraxe@...oo.com>)

November 12 (23 messages)

security hole (http response splitting) in phpwebsite ("Maestro De-Seguridad" <maestrodeseguridad@...os.com>)
RE: Evidence Mounts that the Vote Was Hacked ("David Hayden" <dahayden@...bhayden.com>)
Re: RE: Evidence Mounts that the Vote Was Hacked (Adam Jacob Muller <adam@...linux.us>)
RE: RE: Evidence Mounts that the Vote Was Hacked ("Larry Seltzer" <larry@...ryseltzer.com>)
[CLA-2004:889] Conectiva Security Announcement - sasl2 (Conectiva Updates <secure@...ectiva.com.br>)
Re: RE: Evidence Mounts that the Vote Was Hacked (Adam Jacob Muller <adam@...linux.us>)
Re: Re: Evidence Mounts that the Vote Was Hacked (Matt.Carpenter@...icor.com)
Re: Evidence Mounts that the Vote Was Hacked (Jake Appelbaum <jacob@...elbaum.net>)
Re: Unsecure Ftpd on HP PSC 2510 Printer (Lawrence MacIntyre <macintyrelp@...l.gov>)
Re: Linux ELF loader vulnerabilities (Jirka Kosina <jikos@...os.cz>)
Unofficial Internet Explorer FRAME/IFRAME fix (Thomas Rogg <tr-lists@...rryware.de>)
Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (Gregory Duchemin <c3rb3r@...patico.ca>)
[SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability (joey@...odrom.org (Martin Schulze))
Vulnerability not with vBulletin ("Kier Darby" <kier@...lletin.com>)
Re: Unsecure Ftpd on HP PSC 2510 Printer (KF_lists <kf_lists@...netops.com>)
Re: Unsecure Ftpd on HP PSC 2510 Printer (Lawrence MacIntyre <macintyrelp@...l.gov>)
Re: Unsecure Ftpd on HP PSC 2510 Printer (KF_lists <kf_lists@...netops.com>)
Re: Unsecure Ftpd on HP PSC 2510 Printer (Lawrence MacIntyre <macintyrelp@...l.gov>)
Sudo version 1.6.8p2 now available (fwd) (je@...ure.net)
Crash in Secure Network Messenger 1.4.2 (Luigi Auriemma <aluigi@...istici.org>)
SQL Injection in phpBT (bug.php) (jessica soules <admin@...dark.com>)
phpBB Code EXEC (v2.0.10) (jessica soules <admin@...dark.com>)
RE: Contact in HP related to OpenView / Coda (Arndt.WA@...ces.gc.ca)

November 13 (12 messages)

TWiki search function allows arbitrary shell command execution (Hans Ulrich Niedermann <hun@...ue.de>)
Fw: Will you lot PISS OFF? (Re: Re: Evidence Mounts that the Vote Was Hacked) (Matt.Carpenter@...icor.com)
Re: Re: Evidence Mounts that the Vote Was Hacked (Valdis.Kletnieks@...edu)
Re: Re: Evidence Mounts that the Vote Was Hacked (Paul Schmehl <pauls@...allas.edu>)
Re: RE: Contact in HP related to OpenView / Coda (kf_lists <kf_lists@...netops.com>)
Eudora 6.2 attachment spoof (psz@...hs.usyd.edu.au (Paul Szabo))
IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command ("Jérôme" ATHIAS <jerome@...ias.fr>)
SQL Injection in phpBT (bug.php - Add) ("Jérôme" ATHIAS <jerome@...ias.fr>)
SQL Injection in phpBT (bug.php) add project (jessica soules <admin@...dark.com>)
Multiple XSS holes in TheFaceBook (Alex Lanstein <alex.lanstein@...il.com>)
Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Security flaw in ALCATEL/THOMSON Speed Touch Pro ADSL modems (Gregory Duchemin <c3rb3r@...patico.ca>)

November 14 (2 messages)

Re: Crash in Secure Network Messenger 1.4.2 ("r`Futile" <clearscreen@...antrope.com>)
Format string bug in Army Men RTS (Luigi Auriemma <aluigi@...istici.org>)

November 15 (14 messages)

Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow (Stefan Esser <s.esser@...atters.de>)
[SNS Advisory No.79] A Possibility of Cookie Overwrite in Microsoft Internet Explorer ("Jérôme" ATHIAS <jerome@...ias.fr>)
Multiple vulnerabilities in Hired Team: Trial (Shine engine) (Luigi Auriemma <aluigi@...istici.org>)
Re: 04WebServer Three Vulnerabilities (<chewkeong@...urity.org.sg>)
Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow (Stefan Esser <s.esser@...atters.de>)
XSS in TheFaceBook round 2 (Alex Lanstein <alex.lanstein@...il.com>)
iDEFENSE Security Advisory 11.15.04: Multiple Security Vulnerabilities in Fcron ("customer service mailbox" <customerservice@...fense.com>)
RE: MSIE src&name property disclosure ("joe" <mvp@...ware.net>)
[USN-25-1] libgd2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Format string bug in Army Men RTS ("Manowar" <manowar@....ro>)
RE: MSIE src&name property disclosure ("joe" <mvp@...ware.net>)
[SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd ("Gerald (Jerry) Carter" <jerry@...ba.org>)
SUSE Security Announcement: samba (SUSE-SA:2004:040) (Marcus Meissner <meissner@...e.de>)
The true story of TWiki vuln (exploit included) (Roman Medina-Heigl Hernandez <roman@...labs.com>)

November 16 (9 messages)

Re: MSIE src&name property disclosure (Dave Aitel <dave@...unitysec.com>)
Re: Eudora 6.2 attachment spoof (Steve Dorner <sdorner@...lcomm.com>)
Google Desktop Search ignores Preferences (Elliott BÃ¤ck <ecb29@...nell.edu>)
Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution (Florian Weimer <fw@...eb.enyo.de>)
Airport x-ray software creating images of phantom weapons? ("Jason Coombs" <jasonc@...ence.org>)
Skype callto:// BoF technical details ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
[SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Flaws in SP2 security features, part II (Juergen Schmidt <ju@...sec.de>)
Re: Skype callto:// BoF technical details ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)

November 17 (19 messages)

[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke] (Janek Vind <come2waraxe@...oo.com>)
TSLSA-2004-0058 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: Airport x-ray software creating images of phantom weapons? (David Maxwell <david@...f.net>)
Re: New URL spoofing bug in Microsoft Internet Explorer (q q <systemcracker@...il.com>)
Re: Skype callto:// BoF technical details (Fabian Becker <neonomicus@....de>)
[USN-26-1] bogofilter vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[USN-27-1] libxpm4 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: New URL spoofing bug in Microsoft Internet Explorer (GuidoZ <uberguidoz@...il.com>)
Re: Airport x-ray software creating images of phantom weapons? (James Davis <jamesd@....net>)
SUSE Security Announcement: xshared, XFree86-libs, xorg-x11-libs (SUSE-SA:2004:041) (Thomas Biege <thomas@...e.de>)
Click and Build eCommerce Platform Cross Site Scripting (Andrew Smith <stfunub@...il.com>)
MDKSA-2004:135 - Updated apache2 packages fix request DoS (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities (Stefan Esser <s.esser@...atters.de>)
[USN-28-1] sudo vulnerability (Martin Pitt <martin.pitt@...onical.com>)
MDKSA-2004:132 - Updated gd packages fix integer overflows (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:134 - Updated apache packages fix buffer overflow in mod_include (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Airport x-ray software creating images of phantom weapons? ("David D.W. Downey" <pgpkeys@...keys.net>)
RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (rexolab <research@...otec.com>)

November 18 (17 messages)

MDKSA-2004:133 - Updated sudo packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: RE: Airport x-ray software creating images of phantom weapons? ("Esler, Joel - Contractor" <joel.esler@...rt-s.army.mil>)
Re: Airport x-ray software creating images of phantom weapons? (Valdis.Kletnieks@...edu)
Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (Jerome ATHIAS <jerome@...ias.fr>)
RE: New URL spoofing bug in Microsoft Internet Explorer ("Michael Silk" <michaels@....com.au>)
Re: Airport x-ray software creating images of phantom weapons? (Joel Merrick <joel@...vicestyle.com>)
Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (Hans-Bernhard Broeker <broeker@...sik.rwth-aachen.de>)
Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (rexolab <research@...otec.com>)
FreeBSD Security Advisory FreeBSD-SA-04:16.fetch (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[USN-29-1] samba vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[CLA-2004:890] Conectiva Security Announcement - libxml2 (Conectiva Updates <secure@...ectiva.com.br>)
EXEC exploit in phpBB - fix ("Paul S. Owen" <paul0x01@...rstreak.net>)
[CLA-2004:892] Conectiva Security Announcement - MySQL (Conectiva Updates <secure@...ectiva.com.br>)
AppServ 2.5.x and Prior Exploit (saudi linux <ksa2ksa@...oo.com>)
[MaxPatrol] SQL-injection in Invision Power Board 2.x (Alexander Anisimov <anisimov@...ecurity.com>)
Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (Rafael San Miguel Carrasco <smcsoc@...oo.es>)
Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions. (Reed Arvin <reedarvin@...il.com>)

November 19 (22 messages)

[USN-30-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: Vulnerabilities in forum phpBB2 with Cash_Mod (all ver.) (Robert Hetzler <mods@...e.ca>)
University Researchers Challenge Bush Win In Florida ("Jason Coombs" <jasonc@...ence.org>)
RE: EXEC exploit in phpBB - fix ("Ron Brinker" <rbrinker@...eworthyms.com>)
A Brief Analysis of Bofra/MyDoom.AG/AH (Bryan Burns <bburns@...iper.net>)
Apache 2.0.52 DoS Exploit v2 (Daniel Guido <dguido@...il.com>)
Inofficial updates to 758884/NISCC/DNS (Roy Arends <roy@...s.ec>)
Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. (broeker@...sik.rwth-aachen.de)
Privilege escalation in Mailtraq Version 2.6.1.1677. (Reed Arvin <reedarvin@...il.com>)
SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (JÃ©rÃ´me ATHIAS <jerome.athias@...e.fr>)
Java Vulnerabilities in Opera 7.54 (Marc Schoenefeld <schonef@...-muenster.de>)
Zone Labs Ad-Blocking Instability (Nicolas Robillard <nicolas.robillard@...lavalin.com>)
Zone Labs Security Advisory: Ad-Blocking Instability ("Zone Labs Product Security" <Product-Security@...elabs.com>)
EXEC exploit in phpBB - new release ("Paul S. Owen" <paul0x01@...rstreak.net>)
Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues ("advisories" <advisories@...saire.com>)
Privilege escalation flaw in AClient Service for Windows (Version 5.6.181). (Reed Arvin <reedarvin@...il.com>)
MDKSA-2004:136 - Updated samba packages fix remote vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
SecurityForest - Public Release #1 (loni@...urityforest.com)
Re: University Researchers Challenge Bush Win In Florida (Paul Schmehl <pauls@...allas.edu>)
FreeBSD Security Advisory FreeBSD-SA-04:16.fetch (security-advisories@...ebsd.org)
Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue ("advisories" <advisories@...saire.com>)
Addendum, recent Linux <= 2.4.27 vulnerabilities (Paul Starzetz <ihaquer@...c.pl>)

November 20 (12 messages)

Re: Re: Airport x-ray software creating images of phantom weapons? (Valdis.Kletnieks@...edu)
Re: University Researchers Challenge Bush Win InFlorida (Bart.Lansing@...ls.com)
Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity... (K-OTiK Security <Special-Alerts@...tik.com>)
Re: Re: Airport x-ray software creating images of phantom weapons? (Adam Jacob Muller <adam@...linux.us>)
[ GLSA 200411-27 ] Fcron: Multiple vulnerabilities (lewk@...too.org)
TWiki exploit (search.pm / CAN-2004-1037) (Roman Medina-Heigl Hernandez <roman@...labs.com>)
phpBB 2.0.10 execute command by pokleyzz <pokleyzz at scan-associates.net> ("pigrelax" <pigrelax@...dex.ru>)
Re: University Researchers Challenge Bush Win In Florida (Daniel Veditz <dveditz@...zio.com>)
Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (security curmudgeon <jericho@...rition.org>)
IpbProArace 2.5.x SQL injection. (axl daivy <axlownz@...il.com>)
[ECL] WCI TC-IDE embedded linux vulnerabilities (ECL team <team@...ipse.org.il>)
Re: SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit (Jerome ATHIAS <jerome@...ias.fr>)

November 21 (4 messages)

Re: University Researchers Challenge Bush Win InFlorida (Paul Schmehl <pauls@...allas.edu>)
Re: University Researchers Challenge Bush Win In Florida (Paul Schmehl <pauls@...allas.edu>)
Re: University Researchers Challenge Bush Win In Florida (Stef <stefmit@...il.com>)
Re: University Researchers Challenge Bush Win In Florida (vord <vordhosbn@...il.com>)

November 22 (14 messages)

Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
CoffeeCup FTP Clients Buffer Overflow Vulnerability (Komrade <unsecure@...ervista.org>)
WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability (Komrade <unsecure@...ervista.org>)
TSLSA-2004-0061 - multi (Trustix Security Advisor <tsl@...stix.org>)
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
Broadcast client crash in Halo 1.05 (Luigi Auriemma <aluigi@...istici.org>)
Re: Changes to the filesystem while find is running - comments? ("Dmitry V. Levin" <ldv@...linux.org>)
Re: Changes to the filesystem while find is running - comments? (John Levon <levon@...ementarian.org>)
GFHost PHP GMail remote command execution exploit that achieves webserver id privileges (Jerome ATHIAS <jerome@...ias.fr>)
Re: Changes to the filesystem while find is running - comments? (psz@...hs.usyd.edu.au (Paul Szabo))
Re: University Researchers Challenge Bush Win InFlorida (Valdis.Kletnieks@...edu)
Router ZyXEL Prestige 650 HW http remote admin. (Francisco "José" Canela <darkydelphi@...il.com>)
Re: Changes to the filesystem while find is running - comments? ("Dmitry V. Levin" <ldv@...linux.org>)
Re: University Researchers Challenge Bush Win InFlorida (Paul Schmehl <pauls@...allas.edu>)

November 23 (42 messages)

Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
RE: University Researchers Challenge Bush Win In Florida ("Cupps, James" <James.Cupps@...pi.com>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Re: University Researchers Challenge Bush Win In Florida (bkfsec <bkfsec@....lonestar.org>)
PHPKIT SQL Injection, XSS (Steve <steve01@...llo.at>)
iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrary Package Access Vulnerability ("customer service mailbox" <customerservice@...fense.com>)
Re: Changes to the filesystem while find is running - comments? (psz@...hs.usyd.edu.au (Paul Szabo))
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
Re: University Researchers Challenge Bush Win In Florida ("J.A. Terranson" <measl@....org>)
Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities (Stefan Esser <s.esser@...atters.de>)
[SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration (<chewkeong@...urity.org.sg>)
Re: Changes to the filesystem while find is running - comments? ("Martin Buchholz" <Martin.Buchholz@....COM>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
IPFront - Release (Hernan Racciatti <hracciatti@...il.com>)
Hardware support for XP SP2 DEP not enabled by default ? (Nicolas RUFF <ruff.lists@...lweb.fr>)
Winamp - Buffer Overflow In IN_CDDA.dll ("Brett Moore" <brett.moore@...urity-assessment.com>)
MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
echalk vuln (kevin anonymous <undergroundwars@...il.com>)
Re: Changes to the filesystem while find is running - comments? (psz@...hs.usyd.edu.au (Paul Szabo))
[USN-31-1] cyrus21-imapd vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Broadcast memory corruption in Soldier of Fortune II 1.03 (Luigi Auriemma <aluigi@...istici.org>)
RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability ("Sherlock, Nathan" <Nathan.Sherlock@...trimark.com>)
Fotolog.net cross-site scripting vulnerabilities [RLSA_05-2004] (Jerome ATHIAS <jerome@...ias.fr>)
Prozilla Remote Exploit (Serkan Akpolat <sakpolat@....net>)
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
Re: Changes to the filesystem while find is running - comments? ("James Youngman" <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? ("James Youngman" <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? (psz@...hs.usyd.edu.au (Paul Szabo))
Re: Changes to the filesystem while find is running - comments? ("Martin Buchholz" <Martin.Buchholz@....COM>)
MDKSA-2004:137 - Updated libxpm4 packages fix libXpm vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? ("Paul Szabo" <psz@...hs.usyd.edu.au>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? ("Paul Szabo" <psz@...hs.usyd.edu.au>)
Re: Changes to the filesystem while find is running - comments? ("Martin Buchholz" <Martin.Buchholz@....COM>)
Re: Changes to the filesystem while find is running - comments? ("Troy" <tjk@...oft.com>)
RE: iDEFENSE Security Advisory 11.22.04: Sun Java Plugin Arbitrar y Package Access Vulnerability ("Randal, Phil" <prandal@...efordshire.gov.uk>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Sun Java Plugin arbitrary package access vulnerability (Jouko Pynnonen <jouko@....fi>)
Re: Changes to the filesystem while find is running - comments? ("Martin Buchholz" <Martin.Buchholz@....COM>)

November 24 (33 messages)

[CLA-2004:894] Conectiva Security Announcement - shadow-utils (Conectiva Updates <secure@...ectiva.com.br>)
Re: Changes to the filesystem while find is running - comments? (Tim Nelson <security@...alive.biz>)
Re: Sun Java Plugin arbitrary package access vulnerability (Ken S <ken.securitylist@...il.com>)
Re: Changes to the filesystem while find is running - comments? (Steve Revilak <srevilak@...akeasy.net>)
Windows Mobile Pocket PC Security (kers0r <root@...lum-nz.com>)
Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows (icbm <icbm@...57.org>)
Incorrect reporting of the Bofra/The Register exploit (<matt@...ho.com>)
Re: Router ZyXEL Prestige 650 HW http remote admin. (Hugo van der Kooij <hvdkooij@...derkooij.org>)
Re: Changes to the filesystem while find is running - comments? (Ognyan Kulev <ogi@....uni-sofia.bg>)
Re: Changes to the filesystem while find is running - comments? ("James Youngman" <bugtraq@...ession.spiral-arm.org>)
MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Changes to the filesystem while find is running - comments? ("James Youngman" <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? (Casper.Dik@....COM)
SecureCRT - Remote Command Execution ("Brett Moore" <brett.moore@...urity-assessment.com>)
MDKSA-2004:138 - Updated XFree86 packages fix libXpm vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
[CLA-2004:896] Conectiva Security Announcement - bugzilla (Conectiva Updates <secure@...ectiva.com.br>)
Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration (<dullien@....de>)
STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability (<advisory@...security.com>)
Buffer Overflow in Open Dc Hub 0.7.14 ("Donato Ferrante" <fdonato@...istici.org>)
Re: Incorrect reporting of the Bofra/The Register exploit (Florian Laws <florian@...d.s.bawue.de>)
[SECURITY] [DSA 596-1] New sudo packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 596-2] New sudo packages removes debug output (joey@...odrom.org (Martin Schulze))
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
Re: Changes to the filesystem while find is running - comments? (Casper.Dik@....COM)
Re: Changes to the filesystem while find is running - comments? ("Martin Buchholz" <Martin.Buchholz@....COM>)
Re: Changes to the filesystem while find is running - comments? (<Casper.Dik@....COM>)
Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11 (Luigi Auriemma <aluigi@...istici.org>)
Re: Changes to the filesystem while find is running - comments? ("Doug Moen" <doug.moen@...ecoat.com>)
Re: Changes to the filesystem while find is running - comments? (Casper.Dik@....com)
Re: Changes to the filesystem while find is running - comments? (Tim Nelson <security@...alive.biz>)
[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution (joey@...odrom.org (Martin Schulze))

November 25 (39 messages)

STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability (<advisory@...security.com>)
Re: Changes to the filesystem while find is running - comments? (devnull@...ents.Montreal.QC.CA)
STG Security Advisory: [SSA-20041122-11] JSPWiki XSS vulnerability (<advisory@...security.com>)
Re: Router ZyXEL Prestige 650 HW http remote admin. (Steve Clement <steve@....lu>)
Re: Changes to the filesystem while find is running - comments? (<Casper.Dik@....COM>)
[SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities (<chewkeong@...urity.org.sg>)
MSIE flaws: nested array sort() loop Stack overflow exception ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
FIREFOX flaws: nested array sort() loop Stack overflow exception ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
Re: Changes to the filesystem while find is running - comments? ("Troy" <tjk@...oft.com>)
Re: Sun Java Plugin arbitrary package access vulnerability (Alla Bezroutchko <alla@...nit.be>)
Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoratio… (Ralph Harvey <ralph.harvey@...vx.com>)
[USN-32-1] mysql vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: Router ZyXEL Prestige 650 HW http remote admin. (Laurent Papier <papier@....fr>)
STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability (<advisory@...security.com>)
RE: FIREFOX flaws: nested array sort() loop Sta ck overflow exception ("Randal, Phil" <prandal@...efordshire.gov.uk>)
Re: Changes to the filesystem while find is running - comments? ("James Youngman" <bugtraq@...ession.spiral-arm.org>)
Re: Sun Java Plugin arbitrary package access vulnerability (Ken S <ken.securitylist@...il.com>)
[SECURITY] [DSA 598-1] New yardradius packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Atari800 - local root. (Adam Zabrocki <pi3ki31ny@...pl>)
XSS in Brazilian Insite products (Carlos Ulver <carlos.ulver@...il.com>)
Re: Changes to the filesystem while find is running - comments? (Elizabeth Zwicky <zwicky@...atcircle.com>)
EZshopper is still vulnerable against Directory Traversal. (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
More Browser flaws on MACOSX: nested array sort() loop Stack overflow exception ("Marco Mella" <marco.mella@...ecomitalia.it>)
To anybody who's offended by my disclosure policy ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
More Browser on Macosx flaws: nested array sort() loop Stack overflow exception ("Marco Mella" <marco.mella@...ecomitalia.it>)
Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability ("Exchange" <pauls@...allas.edu>)
Re: Liferay Cross Site Scripting Flaw (michael young <myoung@...eray.com>)
Re: Sun Java Plugin arbitrary package access vulnerability (Peter Greenwood <peterg@...l.demon.co.uk>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Gadi Evron <ge@...uxbox.org>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception ("James Tait" <james.tait@...ddreams.org>)
Re: To anybody who's offended by my disclosure policy (Gadi Evron <ge@...uxbox.org>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Gadi Evron <ge@...uxbox.org>)
More Browser on Macosx flaws: nested array sort() loop Stack overflow exception (Marco Mella <mxmella@...oo.it>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Juan Carlos Navea <loconet@...il.com>)
Re: [Full-Disclosure] FIREFOX flaws: nested array sort() loop Stack overflow exception (Heikki Toivonen <heikki@...foundation.org>)
Rumours about Opera (Marc Schoenefeld <schonef@...-muenster.de>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory] (Jerome ATHIAS <jerome.athias@...e.fr>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)

November 26 (27 messages)

Re: Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Dragos Ruiu <dr@....net>)
MSIE & FIREFOX flaws: "detailed" advisory and comments that you probably don't want to read anyway ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Changes to the filesystem while find is running - comments? (Tim Nelson <security@...alive.biz>)
[CLA-2004:899] Conectiva Security Announcement - samba (Conectiva Updates <secure@...ectiva.com.br>)
[SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: Changes to the filesystem while find is running - comments? (James Youngman <bugtraq@...ession.spiral-arm.org>)
phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure (Cyrille Barthelemy <cb-lse@...ance.com>)
Re: MSIE flaws: nested array sort() loop Stack overflow exception (Gadi Evron <ge@...uxbox.org>)
Re: MSIE flaws: nested array sort() loop Stack overflow exception ("isno" <isno@...cus.org>)
php-4.3.7 Memory Limit Vuln POC ("Gyan chawdhary" <gunnu45@...mail.com>)
MDKSA-2004:139 - Updated cyrus-imapd packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:140 - Updated a2ps packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Changes to the filesystem while find is running - comments? (Martin Buchholz <Martin.Buchholz@....COM>)
MDKSA-2004:141 - Updated zip packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] ("alex cottle" <eddie5659@...mail.com>)
Re: Atari800 - local root. (fwd) (Petr Stehlik <pstehlik@...hics.cz>)
Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability (Chris Withers <chris@...plistix.co.uk>)
php 4.3.7 memory limit POC exploit ("Gyan chawdhary" <gunnu45@...mail.com>)
FluxBox crash vulnerability (Quith <quith@...ux-hell.net>)
PnTresMailer code browser 6.03 Vulnerabilities ("John Cobb" <johnc@...ytes.com>)
Phpbb id: 10701 update and Attachmodule add-on Directory Traversal (zee@...bnc.it)
Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] (K-OTiK Security <Special-Alerts@...tik.com>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Jose Nazario <jose@...key.org>)
Java version downgrading proof-of-concept (<auto333584@...hmail.com>)
Immunity, Inc Advisor (Nicolas Waisman <nicolas.waisman@...unitysec.com>)

November 27 (7 messages)

Re: To anybody who's offended by my disclosure policy (kf_lists <kf_lists@...netops.com>)
[CLA-2004:900] Conectiva Security Announcement - sun-jre (Conectiva Updates <secure@...ectiva.com.br>)
Re: To anybody who's offended by my disclosure policy (Gadi Evron <ge@...uxbox.org>)
Re: To anybody who's offended by my disclosure policy (Gadi Evron <ge@...uxbox.org>)
Re: To anybody who's offended by my disclosure policy (JxT <jxt.lists@...il.com>)
Setiri + Invisible browsers != browsers (Haroon Meer <haroon@...sepost.com>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Heikki Toivonen <heikki@...foundation.org>)

November 28 (4 messages)

Microsoft Help ActiveX Control Related Topics Local Content Accessing Vulnerability (Paul <paul@...yhats.cjb.net>)
Macromedia provided wrong "Solution" in mpsb02-08 (Liu Die Yu <liudieyu@...rella.name>)
Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 (Liu Die Yu <liudieyu@...rella.name>)
Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004) (Luigi Auriemma <aluigi@...istici.org>)

November 29 (8 messages)

Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (exon <exon@...e.se>)
Re: FIREFOX flaws: nested array sort() loop Stack overflow exception (Esben Stien <executiv@...ine.no>)
ncpfs buffer overflow (Karol WiÄ™sek <appelast@...mnbass.art.pl>)
[OpenPKG-SA-2004.051] OpenPKG Security Advisory (imapd) (OpenPKG <openpkg@...npkg.org>)
[SECURITY] [DSA 601-1] New libgd1 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Buffer-overflow in Orbz 2.10 (Luigi Auriemma <aluigi@...istici.org>)
[USN-33-1] libgd vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14. (Reed Arvin <reedarvin@...il.com>)

November 30 (15 messages)

[SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 (Liu Die Yu <liudieyu@...rella.name>)
Privilege escalation flaw in MDaemon 7.2. (Reed Arvin <reedarvin@...il.com>)
Password Disclosure for SMB Shares in KDE's Konqueror ("Daniel Fabian" <df@...-consult.com>)
TSL-2004-0063 - multi (Trustix Security Advisor <tsl@...stix.org>)
Linux Netwosix NEPOTE Updated! (Vincenzo Ciaglia <ciaglia@...wosix.org>)
[SHK-001]Payflow Link Default Config may lead to Hidden Field Modification ("M. Shirk" <shirkdog_list@...mail.com>)
[USN-34-1] OpenSSH information leakage (Martin Pitt <martin.pitt@...onical.com>)
Remote Mercury32 Imap exploit ("JohnH" <johnh@...netops.com>)
MDKSA-2004:137-1 - Updated libxpm4 packages correct issues with previous update (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Privilege escalation flaw in MDaemon 7.2. (kf_lists <kf_lists@...netops.com>)
CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability (Hongzhen Zhou <felix__zhou@...mail.com>)
Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4 (Luigi Auriemma <aluigi@...istici.org>)
[USN-35-1] imagemagick vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Web Application DoS ("kcope" <kingcope@....net>)

494 messages

Powered by blists - more mailing lists