full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	² 7
³ 16	⁴ 13	⁵ 12	⁶ 10	⁷ 18	⁸ 4	⁹ 8
¹⁰ 4	¹¹ 10	¹² 5	¹³ 13	¹⁴ 11	¹⁵ 1	¹⁶ 6
¹⁷ 21	¹⁸ 16	¹⁹ 12	²⁰ 7	²¹ 18	²² 8	²³ 2
²⁴ 15	²⁵ 23	²⁶ 10	²⁷ 7	²⁸ 10	²⁹ 3	³⁰ 5
³¹ 14

Messages by day:

March 1 (2 messages)

web-erp 0.1.4 database access vulnerability (rfox at amerisuk.com (Ryan Fox))
cryptome.org hacked by bighawk of hackweiser (dev-null at no-id.com (dev-null@...id.com))

March 2 (7 messages)

Penetration Testing or Vulnerability Scanning? (rizwanalikhan74 at yahoo.com (Rizwan Ali Khan))
Penetration Testing or Vulnerability Scanning? (rizwanalikhan74 at yahoo.com (Rizwan Ali Khan))
gid games via toppler (kain at ircop.dk (Knud Erik Højgaard))
Penetration Testing or Vulnerability Scanning? (shrdlu at deaddrop.org (Etaoin Shrdlu))
[SCSA-008] Cross Site Scripting & Script Injection Vulnerability in PY-Livredor (gregory.lebras at security-corp.org (Gregory Le Bras | Security Corporation))
Penetration Testing or Vulnerability Scanning? (aeonflux at aeonflux.no-ip.com (aeonflux))
Re: Terminal Emulator Security Issues (pavel at suse.cz (Pavel Machek))

March 3 (16 messages)

Penetration Testing or Vulnerability Scanning? (hellnbak at nmrc.org (hellNbak))
GLSA: eterm (200303-1) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: vte (200303-2) (aliz at gentoo.org (Daniel Ahlberg))
Implementation flaws in Adobe Document Server for Reader Extensions (vkatalov at elcomsoft.com (vkatalov@...omsoft.com))
(no subject) (blaqhatz at webmail.co.za (l33t guy))
[blaqhatz] Pastel Accounting - password security issues (blaqhatz at webmail.co.za (l33t guy))
[RHSA-2003:073-06] Updated sendmail packages fix critical security issues (bugzilla at redhat.com (bugzilla@...hat.com))
Mail Header Buffer Overflow In Sendmail (agent99 at sgi.com (SGI Security Coordinator))
Sendmail buffer overflow vulnerability in AIX. (shivapd at us.ibm.com (Shiva Persaud))
FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
[Snort-2003-001] Buffer overflow in Snort RPC preprocessor (roesch at sourcefire.com (Martin Roesch))
MDKSA-2003:027 - Updated tcpdump packages fix denial of service vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
SuSE Security Announcement: sendmail (SuSE-SA:2003:013) (draht at suse.de (Roman Drahtmueller))
MDKSA-2003:028 - Updated sendmail packages fix remotely exploitable buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Sendmail Exploits for Dummies (kspett at spidynamics.com (Kevin Spett))
Security Update: [CSSA-2003-SCO.3] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : ftp vulnerability with pipe symbols i… (security at caldera.com (security@...de…)

March 4 (13 messages)

NetBSD Security Advisory 2003-001: Encryption weakness in OpenSSL code (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-002: Malformed header Sendmail Vulnerability (security-officer at netbsd.org (NetBSD Security Officer))
GLSA: sendmail (200303-4) (aliz at gentoo.org (Daniel Ahlberg))
Fwd: CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
[SECURITY] [DSA-257-1] sendmail remote exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SAP R/3, account locking and RFC SDK (ngregoire at exaprobe.com (Nicolas Gregoire))
FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail [REVISED] (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) (labs at idefense.com (iDEFENSE Labs))
Fw: BIND 9.2.2 Vulnerabilities? (hggdh at attbi.com (HggdH))
Security Update: [CSSA-2003-008.0] Linux: php bypass safe_mode and injected control chars vulnerabilities (security at caldera.com (security@...dera.com))
[SECURITY] [DSA-257-2] sendmail-wide remote exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SSH/OPENSSH HOLE ALL VERSIONS. (diacetyl at hushmail.com (diacetyl@...hmail.com))
SSH/OPENSSH HOLE ALL VERSIONS. (inouk at toutatis.igt.net (Eric LeBlanc))

March 5 (12 messages)

SSH/OPENSSH HOLE ALL VERSIONS. (ull-disclosure at lists.netsys.com (ull-disclosure@...ts.netsys.com))
SSH/OPENSSH EXPLOIT + iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1) (zen-parse at gmx.net (zen-parse))
[RHSA-2003:042-07] Updated squirrelmail packages close cross-site scripting vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: tcpdump (200303-5) (aliz at gentoo.org (Daniel Ahlberg))
shopfactory shopping cart (maartenh at phreaker.net (Maarten Hartsuijker))
Posible PayPall Scam? FW: Your PayPal account is Limited. (epic at hack3r.com (Epic))
Posible PayPall Scam? FW: Your PayPal account is Limited. (rms at computerbytesman.com (Richard M. Smith))
Posible PayPall Scam? FW: Your PayPal account is Limited. (info at transientimages.net (Information from transientimages.net))
Posible PayPall Scam? FW: Your PayPal account is Limited. (hellnbak at nmrc.org (hellNbak))
Re: Sendmail exploit released??? (root at shustrik.com (Shustrik))
Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X (security at caldera.com (security@...dera.com))
Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X (security at caldera.com (security@...dera.com))

March 6 (10 messages)

Posible PayPall Scam? FW: Your PayPal ac (nick at virus-l.demon.co.uk (Nick FitzGerald))
GLSA: snort (200303-6) (aliz at gentoo.org (Daniel Ahlberg))
Posible PayPall Scam? FW: Your PayPal ac (niels=netsys at bakker.net (Niels Bakker))
[SCSA-009] Remote Command Execution Vulnerability in PHP Ping (gregory.lebras at security-corp.org (Gregory Le Bras | Security Corporation))
[RHSA-2003:039-06] Updated im packages fix insecure handling of temporary files (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:062-11] Updated OpenSSL packages fix timing attack (bugzilla at redhat.com (bugzilla@...hat.com))
Re: [RHSA-2003:062-11] Updated OpenSSL packages fix timing attack (rinunez at usb.ve (Ricardo Núñez))
Security Update: [CSSA-2003-009.0] Linux: slocate command line buffer overflows (security at sco.com (security@....com))
MDKSA-2003:029 - Updated snort packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:030 - Updated file packages fix stack overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))

March 7 (18 messages)

SCO, Intellectual Property and their [Tcpdump] advisories. (silvio at big.net.au (Silvio Cesare))
Security Certifications (rizwanalikhan74 at yahoo.com (Rizwan Ali Khan))
GLSA: snort (200303-6.1) (aliz at gentoo.org (Daniel Ahlberg))
Security Certifications (llevier at argosnet.com (Laurent LEVIER))
RES: Security Certifications (pbueno at metrored.com.br (Pedro Paulo Ferreira Bueno))
[RHSA-2003:086-07] Updated file packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Security Certifications (dufresne at winternet.com (Ron DuFresne))
GLSA: mysqlcc (200303-7) (aliz at gentoo.org (Daniel Ahlberg))
[argv] PHC Threatcon Monitor & Hacklog Vulnerable (argv at hushmail.com (ARGV))
[ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. (security at guardiandigital.com (EnGarde Secure Linux))
Security Certifications (hellnbak at nmrc.org (hellNbak))
Security Certifications (Cheri.Sigmon at LACKLAND.AF.MIL (Sigmon Cheri Y GS-09 DLIELC/LETA))
[ESA-20030307-008] 'file' ELF parsing routine buffer overflow vulnerability. (security at guardiandigital.com (EnGarde Secure Linux))
Security Certifications (B3r3n at argosnet.com (B3r3n))
Security Update: [CSSA-2003-SCO.4] UnixWare 7.1.1 Open UNIX 8.0.0 UnixWare 7.1.3 : Lax permissions on /dev/X (dotslash at snosoft.com (KF))
[argv] PHC Threatcon Monitor & Hacklog Vulnerable (d4yj4y at yahoo.com (Day Jay))
Security Certifications (broe at tcshealthcare.com (Bill Roe))
Security Certifications (JStClair at vredenburg.com (St. Clair, James))

March 8 (4 messages)

[argv] PHC Threatcon Monitor & Hacklog Vulnerable (hellnbak at nmrc.org (hellNbak))
NII Advisory - Buffer Overflow in SQLBase (Revised) (info at nii.co.in (Network Intelligence India Pvt. Ltd.))
Ethereal format string bug, yet still ethereal much better than windows (guninski at guninski.com (Georgi Guninski))
Worm.Dvldr analysis report (benjurry at szcert.org (benjurry))

March 9 (8 messages)

Security Certifications (security at fastmail.fm (Leo Security))
Security Certifications (rrm at phrick.net (rrm))
GLSA: netscape-flash (200303-9) (aliz at gentoo.org (Daniel Ahlberg))
SSH/OPENSSH HOLE ALL VERSIONS. (aeonflux at aeonflux.no-ip.com (aeonflux))
List Charter (johnc at grok.org.uk (John Cartwright))
[argv] sockz loves file exploit exploit (argv at hushmail.com (ARGV))
[argv] PHC hacklog part deux (No way, fool...) (argv at hushmail.com (ARGV))
GLSA: ethereal (200303-10) (aliz at gentoo.org (Daniel Ahlberg))

March 10 (4 messages)

Bypassing Black Ice PC protection? (netw3_security at hushmail.com (Curt Wilson))
[SECURITY] [DSA 258-1] New ethereal packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
Security Certifications (kspett at spidynamics.com (Kevin Spett))
Bypassing Black Ice PC protection? (netw3_security at hushmail.com (Curt Wilson))

March 11 (10 messages)

Bypassing Black Ice PC protection? (darwin at netmadeira.com (Darwin))
Bypassing Black Ice PC protection? (netw3_security at hushmail.com (Curt Wilson))
Problem installing Linksys network card with Suse Linux 7.2 (itmisc at yahoo.com (it misc))
Problem installing Linksys network card with Suse Linux 7.2 (itmisc at yahoo.com (it misc))
Security Certifications (purdy at tecman.com (Curt Purdy))
Bypassing Black Ice PC protection? (darwin at netmadeira.com (Darwin))
Bypassing Black Ice PC protection? (netw3_security at hushmail.com (Curt Wilson))
SOHO Routefinder 550 VPN, DoS and Buffer Overflow (kruse at krusesecurity.dk (Peter Kruse))
SMS Text Message Bombing | SMS Text Message Advertising (d4yj4y at yahoo.com (Day Jay))
Packit 0.5.0 Released! (full-disclosure at intrusense.com (Darren Bounds))

March 12 (5 messages)

Fwd: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
RE: Full-Disclosure digest, Vol 1 #649 - 5 msgs (Paul.Hillier at landg.com (Hillier, Paul))
NetBSD Security Advisory 2003-003 Buffer Overflow in file(1) (security-officer at netbsd.org (NetBSD Security Officer))
MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command (security at linux-mandrake.com (Mandrake Linux Security Team))
[SECURITY] [DSA-259-1] qpopper user privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))

March 13 (13 messages)

Kimberly Ohser/BETANOTES is out of the office. (kohser at betasys.com (kohser@...asys.com))
Kimberly Ohser/BETANOTES is out of the office. (tcannon at noops.org (Thomas Cannon))
R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication (advisory at rapid7.com (Rapid 7 Security Advisories))
R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow (advisory at rapid7.com (Rapid 7 Security Advisories))
R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression (advisory at rapid7.com (Rapid 7 Security Advisories))
[SECURITY] [DSA-260-1] New file package fixes buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SuSE Security Announcement: lprold (SuSE-SA:2003:0014) (thomas at suse.de (Thomas Biege))
SuSE Security Announcement: tcpdump (SuSE-SA:2003:0015) (thomas at suse.de (Thomas Biege))
hack.co.za is back online (ronald.gula at verizon.net (Ron Gula))
Kimberly Ohser/BETANOTES is out of the office. (cepacolmax at hushmail.com (cepacolmax@...hmail.com))
SuSE Security Announcement: lprold (SuSE-SA:2003:0014) (thomas at suse.de (Thomas Biege))
Kimberly Ohser/BETANOTES is out of the office. (attica at stackheap.org (Attica))
Protegrity buffer overflow (protegritysecvuln at yahoo.com (sss sss))

March 14 (11 messages)

Hacktivist Group? (ciso at hushmail.com (ciso@...hmail.com))
FW: The U.S. should not invade Iraq at this time (jasonc at science.org (Jason Coombs))
FW: The U.S. should not invade Iraq at this time (lost at stryk.freeserve.co.uk (Simon Lorentsen))
FW: The U.S. should not invade Iraq at this time (alexander.bartolich at gmx.at (Alexander Bartolich))
FW: The U.S. should not invade Iraq at this time (zen at kill-9.it (Zen))
[SECURITY] [DSA 261-1] New tcpdump packages fix denial of service vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
Kimberly Ohser/BETANOTES is out of the office. (steve.wray at paradise.net.nz (Steve Wray))
SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities (dotslash at snosoft.com (KF))
[VulnWatch] SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities (dotslash at snosoft.com (dotslash@...soft.com))
[VulnWatch] SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities (dotslash at snosoft.com (KF))
[VulnWatch] SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities (dotslash at snosoft.com (KF))

March 15 (1 message)

[SECURITY] [DSA-262-1] samba security fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))

March 16 (6 messages)

A response to Bruce Schneier on MS patch management and Sapphire (jasonc at science.org (Jason Coombs))
MDKSA-2003:032 - Updated samba packages fix remote root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Denial-Of-Service holes in JDK 1.4.1_01 (fwd) (schonef at uni-muenster.de (Marc Schoenefeld))
Timing attack against RSA private keys. (hack4life at hushmail.com (hack4life@...hmail.com))
Vulnerabilities in the Kerberos version 4 protocol (hack4life at hushmail.com (hack4life@...hmail.com))
Overflow in SunRPC-derived XDR libraries (hack4life at hushmail.com (hack4life@...hmail.com))

March 17 (21 messages)

[SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability (ts at securityoffice.net (Tamer Sahin))
AOL's Billion SPAM March on Cyberspace (jasonc at science.org (Jason Coombs))
Remote DoS/DDoS in Creative Audigy Sound Cards (tbl at obstinate.org (Mike Joyce))
[ADVISORY] Timing Attack on OpenSSL (ben at algroup.co.uk (Ben Laurie))
GLSA: samba (200303-11) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: qpopper (200303-12) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:072-08] Updated Gnome-lokkit packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:054-00] Updated rxvt packages fix various vulnerabilites (bugzilla at redhat.com (bugzilla@...hat.com))
Re: [ADVISORY] Timing Attack on OpenSSL (cfowler at outpostsentinel.com (Christopher Fowler))
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
[RHSA-2003:098-00] Updated 2.4 kernel fixes vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Re: [ADVISORY] Timing Attack on OpenSSL (jaltman at columbia.edu (Jeffrey Altman))
[OT] Re: Quick Question (guninski at guninski.com (Georgi Guninski))
S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server (llmora at s21sec.com (Lluis Mora))
[OT] Re: Quick Question (hellnbak at nmrc.org (hellNbak))
[SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corpora…)
Administrivia: Pressured to delete archive entry (len at netsys.com (Len Rose))
Re: [SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability (andrewg at d2.net.au (andrewg@...net.au))
Administrivia: Pressured to delete archive entry (steve.wray at paradise.net.nz (Steve Wray))
[OT] Re: Quick Question (guninski at guninski.com (Georgi Guninski))
Administrivia: Pressured to delete archive entry (guninski at guninski.com (Georgi Guninski))

March 18 (16 messages)

[] New samba packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[OT] Re: Quick Question (hellnbak at nmrc.org (hellNbak))
Administrivia: Pressured to delete archive entry (nicob at nicob.net (Nicob))
Administrivia: Pressured to delete archive entry (guninski at guninski.com (Georgi Guninski))
Administrivia: Pressured to delete archive entry (vdongen at hetisw.nl (I.R.van Dongen))
Administrivia: Pressured to delete archive entry (jon at terrasecurity.co.uk (jon@...rasecurity.co.uk))
[ESA-20030318-009] Several 'kernel' vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))
Administrivia: Pressured to delete archive entry (ben at bssc.edu.au (Ben Ryan))
GLSA: man (200303-13) (aliz at gentoo.org (Daniel Ahlberg))
Administrivia: Pressured to delete archive entry (yossarian at planet.nl (yossarian))
GLSA: mysql (200303-14) (aliz at gentoo.org (Daniel Ahlberg))
[ESA-20030318-009] Several 'kernel' vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))
MDKSA-2003:033 - Updated zlib packages fix buffer overrun vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
ptrace exploit workaround (juraj at bednar.sk (Juraj Bednar))
ptrace exploit workaround (juraj at bednar.sk (Juraj Bednar))
[ESA-20030318-009] Several 'kernel' vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))

March 19 (12 messages)

Administrivia: Pressured to delete archive entry (steve.wray at paradise.net.nz (Steve Wray))
ptrace exploit workaround (luna at aditel.org (Jose Carlos Luna Duran))
SuSE Security Announcement: samba (SuSE-SA:2003:015) (marc at suse.de (Marc Heuse))
SuSE Security Announcement: samba (SuSE-SA:2003:016) (marc at suse.de (Marc Heuse))
[SECURITY] [DSA 264-1] New lxr packages fix information disclosure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: Some XSS vulns (mcbethh at op.pl (mcbethh@...pl))
SMB/CIFS Security Vulnerability in Samba on IRIX (agent99 at sgi.com (SGI Security Coordinator))
[OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding (bodo at openssl.org (Bodo Moeller))
[SCSA-011] Path Disclosure Vulnerability in XOOPS (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder (bugzilla at redhat.com (bugzilla@...hat.com))
Java Security Fixes on IRIX (agent99 at sgi.com (SGI Security Coordinator))
iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine (labs at idefense.com (iDEFENSE Labs))

March 20 (7 messages)

[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: openssl (200303-15) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: rxvt (200303-16) (aliz at gentoo.org (Daniel Ahlberg))
[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20030320-010] Several vulnerabilities in the OpenSSL toolkit. (security at guardiandigital.com (EnGarde Secure Linux))
The Spacewalker (dvdman at hush.com (dvdman@...h.com))
FreeBSD Security Advisory FreeBSD-SA-03:05.xdr (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))

March 21 (18 messages)

Microsoft's new warning about the old SQL server/MSDE problem (rms at computerbytesman.com (Richard M. Smith))
Microsoft's new warning about the old SQL server/MSDE problem (BlueBoar at thievco.com (Blue Boar))
Microsoft's new warning about the old SQL server/MSDE problem (jasonc at science.org (Jason Coombs))
[RHSA-2003:108-01] Updated Evolution packages fix multiple vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: kernel (200303-17) (aliz at gentoo.org (Daniel Ahlberg))
duck (trpz at broken.org (n d))
SuSE Security Announcement: file (SuSE-SA:2003:017) (thomas at suse.de (Thomas Biege))
Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (pbieringer at aerasec.de (Dr. Peter Bieringer))
SuSE Security Announcement: qpopper (SuSE-SA:2003:018) (thomas at suse.de (Thomas Biege))
SuSE Security Announcement: ethereal (SuSE-SA:2003:019) (thomas at suse.de (Thomas Biege))
Microsoft's new warning about the old SQL server/MSDE problem (steve.wray at paradise.net.nz (Steve Wray))
[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: evolution (200303-18) (aliz at gentoo.org (Daniel Ahlberg))
[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (pbieringer at aerasec.de (Dr. Peter Bieringer))
CERT: Vulnerability in web redirectors (hack4life at hushmail.com (hack4life@...hmail.com))
Stunnel: RSA timing attacks / key discovery (bri at ifokr.org (Brian Hatch))
FreeBSD Security Advisory FreeBSD-SA-03:06.openssl (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))

March 22 (8 messages)

Microsoft runs early April Fools ad (rms at computerbytesman.com (Richard M. Smith))
Ptrace Exploit (skbenja at attbi.com (Stephen Benjamin))
CERT: Vulnerability in web redirectors (kurt at seifried.org (Kurt Seifried))
GLSA: mutt (200303-19) (aliz at gentoo.org (Daniel Ahlberg))
CERT: Vulnerability in web redirectors (guninski at guninski.com (Georgi Guninski))
Fw: CERT: Vulnerability in web redirectors (http-equiv at malware.com (http-equiv@...ite.com))
Microsoft runs early April Fools ad (yossarian at planet.nl (yossarian))
CERT: Vulnerability in web redirectors (dgl at dgl.cx (David Leadbeater))

March 23 (2 messages)

Prrivacy Vunerability Ifriends IFCAM96D (se_cur_ity at hotmail.com (Hotmail))
Microsoft runs early April Fools ad (guninski at guninski.com (Georgi Guninski))

March 24 (15 messages)

GLSA: openssl (200303-20) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: bitchx (200303-21) (aliz at gentoo.org (Daniel Ahlberg))
Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged (vkatalov at elcomsoft.com (Vladimir Katalov))
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SuSE Security Announcement: mutt (SuSE-SA:2003:020) (thomas at suse.de (Thomas Biege))
[SECURITY] [DSA 267-1] New lpr packages fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
paFileDB 3.x SQL Injection Vulnerability (flur at flurnet.org (flur))
Microsoft runs early April Fools ad (core.lists.full-disclosure at corest.com (Gerardo Richarte))
[ESA-20030324-012] 'MySQL' root exploit. (security at guardiandigital.com (EnGarde Secure Linux))
Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged (msopacua at idg.nl (Melvyn Sopacua))
Multiple Vulnerabilities and Enhancements in ftpd on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Microsoft runs early April Fools ad (guninski at guninski.com (Georgi Guninski))
Sprint Local Phone Service vulnerabilites (dotslash at snosoft.com (KF))
Sprint Local Phone Service vulnerabilites (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (kluge at fujitsu.com.au (Steffen Kluge))

March 25 (23 messages)

GLSA: glibc (200303-22) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
[RHSA-2003:095-02] New samba packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: mod_ssl (200303-23) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (arjanv at redhat.com (Arjan van de Ven))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (michael.boman at securecirt.com (Michael Boman))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (alexander.bartolich at gmx.at (Alexander Bartolich))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
[SECURITY] [DSA 268-1] New mutt packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (shrdlu at deaddrop.org (Etaoin Shrdlu))
unreleased php-nuke sql injections (Tibor.Pittich at phuture.sk (Tibor Pittich))
[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (fulldisclosure at aphroland.org (nate))
SuSE Security Announcement: kernel (SuSE-SA:2003:021) (draht at suse.de (Roman Drahtmueller))
GLSA: stunnel (200303-24) (aliz at gentoo.org (Daniel Ahlberg))
MDKSA-2003:034 - Updated rxvt packages fix escape sequence insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:035 - Updated openssl packages fix RSA-related insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:037 - Updated glibc packages fix vulnerabilities in RPC XDR decoder (security at linux-mandrake.com (Mandrake Linux Security Team))
unreleased php-nuke sql injections (yossarian at planet.nl (yossarian))
unreleased php-nuke sql injections (fnab at acerbus.com (fnab@...rbus.com))
unreleased php-nuke sql injections (Tibor.Pittich at phuture.sk (Tibor Pittich))
adobe password protect. (attica at stackheap.org (Attica))
Microsoft runs early April Fools ad (poirotsj at gci.net (Steve Poirot))

March 26 (10 messages)

[RHSA-2003:088-01] New kernel 2.2 packages fix vulnerabilities (kluge at fujitsu.com.au (Steffen Kluge))
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SuSE Security Announcement: apcupsd (SuSE-SA:2003:022) (thomas at suse.de (Thomas Biege))
Timing attack against RSA private keys. (fkoeune at dice.ucl.ac.be (Francois Koeune))
Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible (pbieringer at aerasec.de (Dr. Peter Bieringer))
NetBSD Security Advisory 2003-004: Format string vulnerability in zlib gzprintf() (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-005: RSA timing attack in OpenSSL code (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-007: (Another) Encryption weakness in OpenSSL code (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-008: faulty length checks in xdrmem_getbytes (security-officer at netbsd.org (NetBSD Security Officer))
[RHSA-2003:051-01] Updated kerberos packages fix various vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))

March 27 (7 messages)

[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@…)
Fwd: CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Re: Check Point FW-1: attack against syslog daemon possible (pbieringer at aerasec.de (Dr. Peter Bieringer))
[SECURITY] [DSA 271-1] New ecartis and listar packages fix password change vulnerability (debian-security-announce at lists.debian.org (debian-security-announce…)
[SCSA-012] Multiple vulnerabilities in Sambar Server (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
[SCSA-013] Cross Site Scripting vulnerability in testcgi.exe (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
ipcs on HP-UX 11.0 (bt at delfi.lt (bt@...fi.lt))

March 28 (10 messages)

MDKSA-2003:038 - Updated 2,4 kernel packages fix ptrace vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:039 - Updated kernel22 packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
[SECURITY] [DSA 272-1] New dietlibc packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
GLSA: zlib (200303-25) (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
ipcs on HP-UX 11.0 (rdawes at deloitte.co.za (Dawes, Rogan (ZA - Johannesburg)))
ipcs on HP-UX 11.0 (jon at terrasecurity.co.uk (jon@...rasecurity.co.uk))
Secunia Research: Alexandria-dev / sourceforge multiple vulnerabilities (tk at secunia.com (Thomas Kristensen))
ipcs on HP-UX 11.0 (fabio.moraes at eds.com (Moraes, Fabio))
[SECURITY] [DSA 274-1] New mutt packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))

March 29 (3 messages)

sendmail vunerability? (tss at iki.fi (Timo Sirainen))
sendmail vunerability? (malazaba at o2.pl (nag))
Sendmail: -1 gone wild (lcamtuf at ghettot.org (Michal Zalewski))

March 30 (5 messages)

OpenSSL on Fire. (harden at softhome.net (harden@...thome.net))
GLSA: openafs (200303-26) (aliz at gentoo.org (Daniel Ahlberg))
Re: OpenSSL on Fire. (madduck at madduck.net (martin f krafft))
Fwd: CERT Advisory CA-2003-12 Buffer Overflow in Sendmail (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
FreeBSD Security Advisory FreeBSD-SA-03:07.sendmail (security-advisories at freebsd.org (FreeBSD Security Advisories))

March 31 (14 messages)

Re: OpenSSL on Fire. (mosten at bleepyou.com (Michael Osten))
[SCSA-014] Remote Denial of Service Vulnerability in EZ Server (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
Re: OpenSSL on Fire. (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
GLSA: sendmail (200303-27) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: krb5 & mit-krb5 (200303-28) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: dietlibc (200303-29) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:120-01] Updated sendmail packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:034-01] Updated dhcp packages fix possible packet storm (bugzilla at redhat.com (bugzilla@...hat.com))
SRT2003-03-31-1219 - SAP world writable server binaries (dotslash at snosoft.com (KF))
Sambar Server "Buffer OverFlow" Vulnerabilities (security at lorenzohgh.com (Lorenzo Hernandez Garcia-Hierro))
SRT2003-03-31-1219 - SAP world writable server binaries (dotslash at snosoft.com (KF))
SRT2003-03-31-1219 - SAP world writable server binaries (dotslash at snosoft.com (KF))
SRT2003-03-31-1219 - SAP world writable server binaries (dotslash at snosoft.com (KF))
SRT2003-03-31-1219 - SAP world writable server binaries (dotslash at snosoft.com (KF))

311 messages