full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 39	² 6	³ 10	⁴ 8	⁵ 3	⁶ 7
⁷ 23	⁸ 32	⁹ 31	¹⁰ 24	¹¹ 13	¹² 1	¹³ 1
¹⁴ 12	¹⁵ 10	¹⁶ 21	¹⁷ 22	¹⁸ 7	¹⁹ 24	²⁰ 40
²¹ 19	²² 18	²³ 47	²⁴ 13	²⁵ 8	²⁶ 12	²⁷ 10
²⁸ 19	²⁹ 10	³⁰ 16

Messages by day:

April 1 (39 messages)

RFC 3514 released (johnc at grok.org.uk (John Cartwright))
iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player (labs at idefense.com (iDEFENSE Labs))
(no subject) (harden at softhome.net (harden@...thome.net))
RFC 3514 released (krblack at penguinpackets.com (Kelly Black))
RFC 3514 released (avalon at caligula.anu.edu.au (Darren Reed))
grsecurity: Another one bites the dust... (jeff at xiir.net (Jeff))
grsecurity: Another one bites the dust... (amadei at dandy.net (Stephen Amadei))
grsecurity: Another one bites the dust... (amadei at dandy.net (Stephen Amadei))
grsecurity: Another one bites the dust... (brian at brianhouk.com (Brian Houk))
RFC 3514 released (patrick at pwhsnet.com (Patrick Fish))
Re: grsecurity: Another one bites the dust... (madduck at madduck.net (martin f krafft))
RFC 3514 released (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
Animal Rights Hacktivism - They Got One (ciso at hushmail.com (ciso@...hmail.com))
RFC 3514 released (niels=netsys at bakker.net (Niels Bakker))
grsecurity: Another one bites the dust... (jeff at xiir.net (Jeff))
serious vulnerability present. all doomed. over. (throwaway at dione.ids.pl (Security Experts, Liability Limited))
RFC 3514 released (scheidell at secnap.net (Michael Scheidell))
RFC 3514 released (jeremy at gaddis.org (Jeremy Gaddis))
grsecurity: Another one bites the dust... (kelledin at skarpsey.dyndns.org (Kelledin))
[SCSA-015] Remote Denial of Service Vulnerability in PowerFTP (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
grsecurity: Another one bites the dust... (smenard at nbnet.nb.ca (smenard))
grsecurity: Another one bites the dust... (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
grsecurity: Another one bites the dust... (drew at overt.org (Andrew Hintz (Drew)))
grsecurity: Another one bites the dust... (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
FW: Nmap compliance with new RFC 3514 (ben at twowaytv.co.uk (Ben Tyson-Norrman))
RFC 3514 released (dufresne at winternet.com (Ron DuFresne))
[RHSA-2003:101-01] Updated OpenSSL packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:095-03] New samba packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:084-01] Updated vsftpd packages re-enable tcp_wrappers support (bugzilla at redhat.com (bugzilla@...hat.com))
RFC 3514 released (blancher at cartel-securite.fr (Cedric Blancher))
MDKSA-2003:040 - Updated Eterm packages fix escape sequence insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:041 - Updated mutt packages fix exploitable buffer overflow (security at linux-mandrake.com (Mandrake Linux Security Team))
SuSE Security Announcement: sendmail (SuSE-SA:2003:023) (draht at suse.de (Roman Drahtmueller))
MDKSA-2003:042 - Updated sendmail packages fix local and remote vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:043 - Updated krb5 packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
grsecurity: Another one bites the dust... (madsaxon at direcway.com (madsaxon))
SRT2003-04-01-1231 - Progress DLC overflows (dotslash at snosoft.com (KF))
grsecurity: Another one bites the dust... (rgerhards at hq.adiscon.com (Rainer Gerhards))
Solaris hack (earl_keyser at wayzata.k12.mn.us (Earl Keyser))

April 2 (6 messages)

[RHSA-2003:091-01] Updated kerberos packages fix various vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Sendmail parseaddr security vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read (dotslash at snosoft.com (KF))
Syscall implementation could lead to whether or not a file exists (andrewg at d2.net.au (Andrew Griffiths))
Syscall implementation could lead to whether or not a file exists (andrewg at d2.net.au (Andrew Griffiths))

April 3 (10 messages)

Re: California State Bill SB1386 (cta at hcsin.net (Bernie, CTA))
[INetCop Security Advisory] Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. (xploit at hackermail.com (dong-h0un U))
[RHSA-2003:128-01] Updated Eye of GNOME packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:060-01] Updated NetPBM packages fix multiple vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Compaq/HP WBEM stuff (fwd) (mcw at ns.wcd.se (bashis))
[SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
[SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow (dotslash at snosoft.com (KF))
passlogd sniffer remote buffer overflow root exploit. (xploit at hackermail.com (dong-h0un U))
[RHSA-2003:109-03] Updated balsa and mutt packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))

April 4 (8 messages)

SuSE Security Announcement: openssl (SuSE-SA:2003:024) (krahmer at suse.de (Sebastian Krahmer))
[SECURITY] [DSA 278-1] New sendmail packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
NetBSD Security Advisory 2003-006: Cryptographic weaknesses in Kerberos v4 protocol (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-009: sendmail buffer overrun in prescan() address parser (security-officer at netbsd.org (NetBSD Security Officer))
SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call (dotslash at snosoft.com (KF))
Webdav Exploit - "Re-Exploiting" not re: (se_cur_ity at hotmail.com (Hotmail))
Security Industry at its best (yossarian at planet.nl (yossarian))

April 5 (3 messages)

Re: improper scan abuse (steve at bytebusters.ca (Stephen Menard))
Re: improper scan abuse (benjamin at seattlefenix.net (Benjamin Krueger))
IIS 5.0 Webdav Rootkit (se_cur_ity at hotmail.com (Hotmail))

April 6 (7 messages)

Re: improper scan abuse (smcmahon at eiv.com (Shawn McMahon))
*BSD passlogd remote root exploit. (xploit at hackermail.com (dong-h0un U))
Seti@...e information leakage and remote compromise (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Seti@...e exploit (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Re: improper scan abuse (smenard at nbnet.nb.ca (S Menard))
Re: IIS 5.0 Webdav Rootkit (defaillance at hushmail.com (defaillance@...hmail.com))
Re: Syscall implementation could lead to whether or not a file exists (pavel at suse.cz (Pavel Machek))

April 7 (23 messages)

Re: Syscall implementation could lead to whether or not a file exists (andrewg at d2.net.au (andrewg@...net.au))
[SECURITY] [DSA 274-2] New mutt packages fix arbitrary code execution in potato (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
Syscall implementation could lead to whether or not a file exists (arjanv at redhat.com (Arjan van de Ven))
U.S. military helps fund Calgary hacker with $2.3 million (guninski at guninski.com (Georgi Guninski))
Coppermine Photo Gallery remote compromise (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
MDKSA-2003:044 - Updated samba packages fix remote root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
U.S. military helps fund Calgary hacker with $2.3 million (vasil at cs.utk.edu (David Vasil))
U.S. military helps fund Calgary hacker with $2.3 million (codex at phate.net (Codex))
FreeBSD Security Notice FreeBSD-SN-03:01 (security-advisories at freebsd.org (FreeBSD Security Advisories))
FW: FreeBSD Security Notice FreeBSD-SN-03:01 (MarkC at mtbaker.wednet.edu (Mark Challender))
U.S. military helps fund Calgary hacker with $2.3 million (BlueBoar at thievco.com (Blue Boar))
Dangerous permissions in unitedlinux (kain at ircop.dk (Knud Erik Højgaard))
[SECURITY] [DSA 280-1] New samba packages fix remote root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
U.S. military helps fund Calgary hacker with $2.3 million (pekkas at netcore.fi (Pekka Savola))
U.S. military helps fund Calgary hacker with $2.3 million (smcmahon at eiv.com (Shawn McMahon))
Dangerous permissions in unitedlinux (draht at suse.de (Roman Drahtmueller))
U.S. military helps fund Calgary hacker with $2.3 million (WChang at pickatime.com (Wayne Chang))
SuSE Security Announcement: samba (SuSE-SA:2003:025) (draht at suse.de (Roman Drahtmueller))
U.S. military helps fund Calgary hacker with $2.3 million (BlueBoar at thievco.com (Blue Boar))
Coppermine Photo Gallery remote compromise (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
False-negatives in several Vulnerability Assessment tools (ngregoire at exaprobe.com (Nicolas Gregoire))
mIRC "dcc filename spoofing" (kain at ircop.dk (Knud Erik Højgaard))

April 8 (32 messages)

mIRC "dcc filename spoofing" (gossi at lab6.com (Gossi The Dog))
Unchecked Buffer in Opera 7.02 (conde0 at telefonica.net (David F.Madrid))
[RHSA-2003:137-01] New samba packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
U.S. military helps fund Calgary hacker with $2.3 million (guninski at guninski.com (Georgi Guninski))
Unchecked Buffer in Opera 7.02 (vdongen at hetisw.nl (I.R.van Dongen))
[RHSA-2003:036-01] Updated mgetty packages available (bugzilla at redhat.com (bugzilla@...hat.com))
FreeBSD Security Notice FreeBSD-SN-03:02 (security-advisories at freebsd.org (FreeBSD Security Advisories))
[SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x (labs at idefense.com (iDEFENSE Labs))
Fwd: Internet Security Update (brad.knowles at skynet.be (Brad Knowles))
Fwd: Internet Security Update (ward at pong.be (Ward Vandewege))
VIRUS WARNING! (was:Fwd: Internet Security Update) (kevin.riggins at comdev.com (Kevin Riggins))
Fwd: Internet Security Update (jstewart at lurhq.com (Joe Stewart))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET SECURITY UPDATE (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
Fwd: Internet Security Update (dotslash at snosoft.com (KF))
Fwd: Internet Security Update (terrell at coyoterock.com (Terrell Gilliland))
Fwd: Internet Security Update (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
Fwd: Internet Security Update (digitz at shaw.ca (digitz))
Fwd: Internet Security Update (nicob at nicob.net (Nicob))
Full-Disclosure digest, Vol 1 #715 - 2 msgs Contains a virus (jgonzalez at autocraft.com (Juan Gonzalez))
Fwd: Internet Security Update (WPatterson at njtransit.com (WPatterson@...ransit.com))
VIRUS WARNING! (was:Fwd: Internet Security Update) (lhand at co.la.ca.us (Larry Hand))
Fwd: Internet Security Update (dufresne at winternet.com (Ron DuFresne))
'internet security update' hoax and stuff... (soare at ss.pub.ro (Ovidiu COJOCARU))
Fwd: Internet Security Update (nick at virus-l.demon.co.uk (Nick FitzGerald))
Multiple Vulnerabilities in libc RPC functions on IRIX (agent99 at sgi.com (SGI Security Coordinator))
RE: Full-Disclosure digest, Vol 1 #715 - 2 msgs (Steve.Jeffers at Avnet.com (Jeffers, Steve (AZ)))
Exploit Code Released for Apache 2.x Memory Leak (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET SECURITY UPDATE (brad.knowles at skynet.be (Brad Knowles))
Fwd: Internet Security Update (brad.knowles at skynet.be (Brad Knowles))
Fwd: Internet Security Update (brad.knowles at skynet.be (Brad Knowles))
Spam Arrest stupidity (nick at virus-l.demon.co.uk (Nick FitzGerald))

April 9 (31 messages)

Fwd: Internet Security Update (erc at pobox.com (Ed Carp))
Fwd: Internet Security Update (dufresne at winternet.com (Ron DuFresne))
Spam Arrest stupidity (dufresne at winternet.com (Ron DuFresne))
Spam Arrest stupidity (BlueBoar at thievco.com (Blue Boar))
RE: Full-Disclosure digest, Vol 1 #715 - 2 msgs (shrdlu at deaddrop.org (Etaoin Shrdlu))
Spam Arrest stupidity (mosten at bleepyou.com (Michael Osten))
Spam Arrest stupidity (mosten at bleepyou.com (Michael Osten))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (spamarrest at virus-l.demon.co.uk (Nick FitzGerald))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET SECURITY UPDATE (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
GLSA: apache (200304-01) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:137-02] New samba packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: samba (200304-02) (aliz at gentoo.org (Daniel Ahlberg))
List Charter (johnc at grok.org.uk (John Cartwright))
Spam Arrest stupidity (measl at mfn.org (J.A. Terranson))
Spam Arrest stupidity (lists.netsys.com at jscript.dk (Thor Larholm))
GLSA: setiathome (200304-03) (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 282-1] New glibc packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
'internet security update' hoax and stuff... (smcmahon at eiv.com (Shawn McMahon))
Spam Arrest stupidity (smcmahon at eiv.com (Shawn McMahon))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (lsanders at ittc.ku.edu (Larry Sanders))
Spam Arrest stupidity (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA 269-2] New heimdal packages fix authentication failure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (brad.knowles at skynet.be (Brad Knowles))
[RHSA-2003:139-01] Updated httpd packages fix security vulnerabilities. (bugzilla at redhat.com (bugzilla@...hat.com))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (mosten at bleepyou.com (Michael Osten))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (dufresne at winternet.com (Ron DuFresne))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (erc at pobox.com (Ed Carp))
RE : MCAFEE E-MAIL SCAN ALERT!~ (madsaxon at direcway.com (madsaxon))
Samba Security Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (IS… (labs at idefense.com (iDEFENSE Labs))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (ward at pong.be (Ward Vandewege))

April 10 (24 messages)

Fwd: Samba Security Vulnerability on IRIX (chris1 at mail3.bunt.com (chris1@...l3.bunt.com))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (security at brvenik.com (Jason))
MDKSA-2003:038-1 - Updated 2.4 kernel packages fix ptrace vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET SECURITY UPDATE (jurjen at quadpro.stupendous.org (Jurjen Oskam))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (jurjen at quadpro.stupendous.org (Jurjen Oskam))
Unchecked Buffer in Opera 7.02 (0164455001 at netcabo.pt (0164455001))
Recommendations for a Passive Web Content Monitoring solution? (nick at ethicsdesign.com (Nick Jacobsen))
This list (ssteenkamp at aosl.co.za (Stephan Steenkamp))
Recommendations for a Passive Web Content Monitoring solution? (bernz at bernztech.org (David Bernick))
GLSA: kde-3.x (200304-04) (aliz at gentoo.org (Daniel Ahlberg))
OSS passive firewall (f0x at squirrelsoup.net (f0x@...irrelsoup.net))
Recommendations for a Passive Web Content Monitoring solution? (dotslash at snosoft.com (KF))
Recommendations for a Passive Web Content Monitoring solution? (E.H.Beekman at amc.uva.nl (Ewald Beekman))
OSS passive firewall (dufresne at winternet.com (Ron DuFresne))
Recommendations for a Passive Web Content Monitoring solution? (erc at pobox.com (Ed Carp))
xfsdump creates files insecurely on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Recommendations for a Passive Web Content Monitoring solution? (nick at ethicsdesign.com (Nick Jacobsen))
Recommendations for a Passive Web Content Monitoring solution? (andreq at infolink.com.br (Andre Luis Quintaes Guimaraes))
Recommendations for a Passive Web Content M onitoring solution? (Matthew.Wagenknecht at Quantum.com (Matthew Wagenknecht))
Recommendations for a Passive Web Content Monitoring solution? (erc at pobox.com (Ed Carp))
Recommendations for a Passive Web Content Monitoring solution? (listuser at seifried.org (Kurt Seifried))
Recommendations for a Passive Web Content Monitoring solution? (jhealy+full-disclosure at logn.net (Jason Healy))
Recommendations for a Passive Web Content Monitoring solution? (salgatt at turtleshell.net (Scott M. Algatt))
Recommendations for a Passive Web Content Monitoring solution? (rgerhards at hq.adiscon.com (Rainer Gerhards))

April 11 (13 messages)

[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder (bugzilla at redhat.com (bugzilla@...hat.com))
Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability (alerts at integrigy.com (Integrigy Security Alerts))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Recommendations for a Passive Web Content Monitoring solution? (Max.Rapaille at nbb.be (Rapaille Max))
Recommendations for a Passive Web Content Monitoring solution? (ssteenkamp at aosl.co.za (Stephan Steenkamp))
MCAFEE E-MAIL SCAN ALERT!~FWD: INTERNET S (gossi at lab6.com (Gossi The Dog))
GLSA: kde-2.x (200304-05) (aliz at gentoo.org (Daniel Ahlberg))
PA-RISC return into libc (bt at delfi.lt (bt@...fi.lt))
KDE Security Advisory: PS/PDF file handling vulnerability (mueller at kde.org (Dirk Mueller))
IRIX ToolTalk Vulnerabilities Update (agent99 at sgi.com (SGI Security Coordinator))
Brocade Firmware SNMP Vulnerability (agent99 at sgi.com (SGI Security Coordinator))
R7-0013: Heap Corruption in Gaim-Encryption Plugin (advisory at rapid7.com (Rapid 7 Security Advisories))

April 12 (1 message)

[SECURITY] [DSA 284-1] New kdegraphics packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)

April 13 (1 message)

Multiple vulnerabilities in SheerDNS (j at pureftpd.org (Jedi/Sector One))

April 14 (12 messages)

(no subject) (fcordova at icon.net.mx (Fernando Córdova Suárez))
Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach (aviram at beyondsecurity.com (Aviram Jenik))
linux type definitions (trpz at broken.org (n d))
linux type definitions (tss at iki.fi (Timo Sirainen))
GLSA: kde-2.x (200304-05.1) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:126-01] Updated gtkhtml packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts…)
linux type definitions (tmh at whitefang.com (Thamer Al-Harbash))
Instaboard 1.3 SQL Injection (jdew at yggdrasil.ca (Jim Dew))
Instaboard 1.3 SQL Injection (jdew at cleannorth.org (Jim Dew))
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX (agent99 at sgi.com (SGI Security Coordinator))

April 15 (10 messages)

GLSA: kdegraphics-3.1.x (200304-04.1) (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 287-1] New EPIC packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
[SECURITY] [DSA 287-1] New EPIC packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
[SCSA-016] Multiple vulnerabilities in Ez publish (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
[SCSA-016] Multiple vulnerabilities in Ez publish (msopacua at idg.nl (Melvyn Sopacua))
[SCSA-016] Multiple vulnerabilities in Ez publish (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
MDKSA-2003:045 - Updated evolution packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:046 - Updated gtkhtml packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
SRT2003-04-15-1029 - Progres BINPATHX overflow (dotslash at snosoft.com (KF))

April 16 (21 messages)

OS X DirectoryService DoS {@...ke adv: a041003-1} (neeko at haackey.com (Neeko Oni))
Twilight Utilities TW-WebServer/1, 3, 2, 0 DoS (badpack3t at security-protocols.com (badpack3t))
SFAD03-001: iWeb Mini Web Server Remote Directory Traversal (subversive at linuxmail.org (subversive ))
Re: [issa-international] Re: Confidentiality statement on email (cta at hcsin.net (Bernie, CTA))
MDKSA-2003:047 - Updated xfsdump packages fix insecure file creation (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:048 - Updated eog packages fix arbitrary command execution (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: [issa-international] Re: Confidentiality statement on email (jkinz at kinz.org (Jeff Kinz))
Re: [issa-international] Re: Confidentialit y statement on email (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Thomas E Cooper/Boulder/IBM is out of the office. (tcooper at us.ibm.com (Thomas E Cooper))
Re: [issa-international] Re: Confidentialit y statement on email (madsaxon at direcway.com (madsaxon))
Re: [issa-international] Re: Confidentiality statement on email (yossarian at planet.nl (yossarian))
Re: [issa-international] Re: Confidentiality statement on email (cta at hcsin.net (Bernie, CTA))
Thomas E Cooper/Boulder/IBM is out of the office. (scheidell at secnap.net (Michael Scheidell))
Thomas E Cooper/Boulder/IBM is out of the office. (erc at pobox.com (Ed Carp))
Thomas E Cooper/Boulder/IBM is out of the office. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Thomas E Cooper/Boulder/IBM is out of the office. (neeko at haackey.com (Neeko Oni))
Thomas E Cooper/Boulder/IBM is out of the office. (Scheidell at secnap.com (Scheidell@...nap.com))
Apache mod_access_referer denial of service issue (zillion at safemode.org (zillion))
Internet Attacks... worms possibly? (chris at implexantsystems.com (Chris))
Thomas E Cooper/Boulder/IBM is out of the o ffice. (david.vincent at mightyoaks.com (David Vincent))
[VulnWatch] Apache mod_access_referer denial of service issue (zillion at safemode.org (zillion))

April 17 (22 messages)

Thomas E Cooper/Boulder/IBM is out of the office. (madsaxon at direcway.com (madsaxon))
[SCSA-017] Directory Traversal Vulnerability in EZ Server (gregory.lebras at security-corporation.com (Gregory Le Bras | Security Corporation))
[sean@...elan.com: DoS and cable cuts take toll on entire country of Pakistan] (len at netsys.com (Len Rose))
Thomas E Cooper/Boulder/IBM is out of the office. (mark0071m at yahoo.com (Mark))
Thomas E Cooper/Boulder/IBM is out of the office. (security at brvenik.com (Jason))
CampusWide BlackBoard security problems. (f0x at squirrelsoup.net (Gabe Arnold))
Thomas E Cooper/Boulder/IBM is out of the office. (cairnsc at carbon.net (Cade Cairns))
Thomas E Cooper/Boulder/IBM is out of the office. (steve.wray at paradise.net.nz (Steve Wray))
[SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Administrivia: Vacation Messages (johnc at grok.org.uk (John Cartwright))
OS X DirectoryService DoS {@...ke adv: a041003-1} (subversive at linuxmail.org (subversive ))
Thomas E Cooper/Boulder/IBM is out of the office. (smcmahon at eiv.com (Shawn McMahon))
[SECURITY] [DSA 289-1] New rinetd packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@l…)
Re: False-negatives in several Vulnerability Assessment tools (ngregoire at exaprobe.com (Nicolas Gregoire))
Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
DoS - Microsoft Internet Explorer 6.0 SP1 OBJECT tag bug (rde at ins-business.com (Ryan Emerle))
Hey Jitsu, wherever you are, I'll miss you... (galiarept at phreaker.net (GaLiaRePt))
DoS - Microsoft Internet Explorer 6.0 SP1 OBJECT tag bug (mattmurphy at kc.rr.com (Matthew Murphy))
MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution (security at linux-mandrake.com (Mandrake Linux Security Team))
Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Fwd: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))

April 18 (7 messages)

OS X DirectoryService DoS {@...ke adv: (neeko at haackey.com (Neeko Oni))
Another credit card scam, site appears to still be active (BlueBoar at thievco.com (Blue Boar))
RE: [ISN] DARPA pulls OpenBSD funding (jasonc at science.org (Jason Coombs))
Another credit card scam, site appears to still be active (se_cur_ity at hotmail.com (Hotmail))
XSS Flaw in Tryit Editor v1.3 (se_cur_ity at hotmail.com (Hotmail))
Panelist Needed (Sharla at TechnologyForums.com (Sharla Warren))
Another credit card scam, site appears to still be active (dan at cardcops.com (Dan Clements))

April 19 (24 messages)

RE: [ISN] DARPA pulls OpenBSD funding (pauls at utdallas.edu (Paul Schmehl))
FW: FEEDBACK: Testing Microsoft and the DMCA (jasonc at science.org (Jason Coombs))
FW: FEEDBACK: Testing Microsoft and the DMCA (se_cur_ity at hotmail.com (Hotmail))
FW: FEEDBACK: Testing Microsoft and the DMCA (webmaster at econ.usu.edu (Irwan Budiman))
RE: [ISN] DARPA pulls OpenBSD funding (yossarian at planet.nl (yossarian))
RE: [ISN] DARPA pulls OpenBSD funding (guninski at guninski.com (Georgi Guninski))
RE: [ISN] DARPA pulls OpenBSD funding (purdy at tecman.com (Curt Purdy))
RE: [ISN] DARPA pulls OpenBSD funding (pauls at utdallas.edu (Paul Schmehl))
RE: [ISN] DARPA pulls OpenBSD funding (pauls at utdallas.edu (Paul Schmehl))
RE: [ISN] DARPA pulls OpenBSD funding (mattmurphy at kc.rr.com (Matthew Murphy))
RE: [ISN] DARPA pulls OpenBSD funding (devon at lithiumnode.com (Timmah))
RE: [ISN] DARPA pulls OpenBSD funding (BlueBoar at thievco.com (Blue Boar))
RE: [ISN] DARPA pulls OpenBSD funding (pauls at utdallas.edu (Paul Schmehl))
requires full discussion of political and legal aspects of security (jasonc at science.org (Jason Coombs))
RE: [ISN] DARPA pulls OpenBSD funding (erc at pobox.com (Ed Carp))
RE: [ISN] DARPA pulls OpenBSD funding (cptnug-fulldisclosure at batray.net (Cptnug))
RE: [ISN] DARPA pulls OpenBSD funding (denis at dimick.net (Denis Dimick))
RE: [ISN] DARPA pulls OpenBSD funding (denis at dimick.net (Denis Dimick))
RE: [ISN] DARPA pulls OpenBSD funding (erc at pobox.com (Ed Carp))
requires full discussion of political and legal aspects of security (cnupt42 at eml.cc (cnupt42@....cc))
requires full discussion of political and legal aspects of security (mattmurphy at kc.rr.com (Matthew Murphy))
RE: [ISN] DARPA pulls OpenBSD funding (BlueBoar at thievco.com (Blue Boar))
requires full discussion of political and legal aspects of security (eric.lauzon at abovesecurity.com (Eric Lauzon))
RE: [ISN] DARPA pulls OpenBSD funding (purdy at tecman.com (Curt Purdy))

April 20 (40 messages)

requires full discussion of political and legal aspects of security (azmodan at linux.online.no (Mads Tansø))
RE: [ISN] DARPA pulls OpenBSD funding (yossarian at planet.nl (yossarian))
Race in XP SCM Service Shutdown Mechanism (mattmurphy at kc.rr.com (Matthew Murphy))
RE: [ISN] DARPA pulls OpenBSD funding (avalon at caligula.anu.edu.au (Darren Reed))
FW: FEEDBACK: Testing Microsoft and the DMCA (jasonc at science.org (Jason Coombs))
RE: [ISN] DARPA pulls OpenBSD funding (avalon at caligula.anu.edu.au (Darren Reed))
RE: [ISN] DARPA pulls OpenBSD funding (yossarian at planet.nl (yossarian))
RE: [ISN] DARPA pulls OpenBSD funding (smcmahon at eiv.com (Shawn McMahon))
FW: FEEDBACK: Testing Microsoft and the DMCA (pandora at swi.com.br (pandora@....com.br))
RE: [ISN] DARPA pulls OpenBSD funding (smcmahon at eiv.com (Shawn McMahon))
RE: FEEDBACK: Testing Microsoft and the DMCA (erc at pobox.com (Ed Carp))
RE: [ISN] DARPA pulls OpenBSD funding (niels=netsys at bakker.net (Niels Bakker))
RE: [ISN] DARPA pulls OpenBSD funding (erc at pobox.com (Ed Carp))
RE: [ISN] DARPA pulls OpenBSD funding (purdy at tecman.com (Curt Purdy))
RE: [ISN] DARPA pulls OpenBSD funding (purdy at tecman.com (Curt Purdy))
RE: [ISN] DARPA pulls OpenBSD funding (pandora at swi.com.br (pandora@....com.br))
RE: [ISN] DARPA pulls OpenBSD funding (yossarian at planet.nl (yossarian))
RE: [ISN] DARPA pulls OpenBSD funding (erc at pobox.com (Ed Carp))
RE: [ISN] DARPA pulls OpenBSD funding (azmodan at linux.online.no (Mads Tansø))
RE: Rijndael (devon at lithiumnode.com (Timmah))
RE: [ISN] DARPA pulls OpenBSD funding (steve at entrenchtech.com (Steve Manzuik))
RE: Rijndael (yossarian at planet.nl (yossarian))
multi-copies (gadgeteer at elegantinnovations.org (Gadgeteer))
FW: FEEDBACK: Testing Microsoft and the DMCA (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Rijndael (devon at lithiumnode.com (Timmah))
RE: [ISN] DARPA pulls OpenBSD funding (avalon at caligula.anu.edu.au (Darren Reed))
RE: [ISN] DARPA pulls OpenBSD funding (smcmahon at eiv.com (Shawn McMahon))
RE: [ISN] DARPA pulls OpenBSD funding (pauls at utdallas.edu (Paul Schmehl))
RE: FEEDBACK: Testing Microsoft and the DMCA (pauls at utdallas.edu (Paul Schmehl))
RE: Rijndael (ben at algroup.co.uk (Ben Laurie))
RE: FEEDBACK: Testing Microsoft and the DMCA (smcmahon at eiv.com (Shawn McMahon))
RE: FEEDBACK: Testing Microsoft and the DMCA (erc at pobox.com (Ed Carp))
RE: FEEDBACK: Testing Microsoft and the DMCA (pandora at swi.com.br (pandora@....com.br))
BadBlue Remote Administrative Access Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))
RE: FEEDBACK: Testing Microsoft and the DMCA (BlueBoar at thievco.com (Blue Boar))
Monkey HTTPd Remote Buffer Overflow (mattmurphy at kc.rr.com (Matthew Murphy))
RE: FEEDBACK: Testing Microsoft and the DMCA (measl at mfn.org (J.A. Terranson))
RE: [ISN] DARPA pulls OpenBSD funding (yossarian at planet.nl (yossarian))
RE: [ISN] DARPA pulls OpenBSD funding (codex at bogus.net (Codex))
(no subject) (xkola at terra.com.br (Leandro A. Kohler))

April 21 (19 messages)

RE: Rijndael (poirotsj at info-integrity.com (Steve Poirot))
FW: FEEDBACK: Testing Microsoft and the DMCA (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: [ISN] DARPA pulls OpenBSD funding (phobie at host.sk (riki))
FW: FEEDBACK: Testing Microsoft and the DMCA (spork at inch.com (Charles Sprickman))
RE: [ISN] DARPA pulls OpenBSD funding (avalon at caligula.anu.edu.au (Darren Reed))
RE: Rijndael (ben at algroup.co.uk (Ben Laurie))
Paypal scam uses Korean school Web server (rms at computerbytesman.com (Richard M. Smith))
RE: [ISN] DARPA pulls OpenBSD funding (dufresne at winternet.com (Ron DuFresne))
RE: [ISN] DARPA pulls OpenBSD funding (dufresne at winternet.com (Ron DuFresne))
RC4 and Lotus Notes (aliver at xexil.com (aliver@...il.com))
RC4 and Lotus Notes (derek at ihtfp.com (Derek Atkins))
RC4 and Lotus Notes (cz at hykw.jp (HAYAKAWA Hitoshi))
FW: FEEDBACK: Testing Microsoft and the DMCA (pauls at utdallas.edu (Schmehl, Paul L))
Remote Vulnerabilties in mod_ntlm (mattmurphy at kc.rr.com (Matthew Murphy))
Re: RC4 and Lotus Notes (aliver at xexil.com (aliver@...il.com))
FW: FEEDBACK: Testing Microsoft and the DMCA (dufresne at winternet.com (Ron DuFresne))
PTNews v1.7.7 - Access to administrator functions without authentification (webmaster at securiteinfo.com (scrap))
Building an extremely large link (conde0 at telefonica.net (David F. Madrid))
AN HTTPd Sample Script File Truncation (mattmurphy at kc.rr.com (Matthew Murphy))

April 22 (18 messages)

Xeneo Web Server 2.2.9.0 Denial Of Service Vulnerability (badpack3t at security-protocols.com (badpack3t))
GLSA: snort (200304-05) (aliz at gentoo.org (Daniel Ahlberg))
RE: [ISN] DARPA pulls OpenBSD funding (phobie at host.sk (riki))
[SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions (debian-security-announce at lists.debian.org (debian-security-announce@...t…)
UDP bypassing in Kerio Firewall 2.1.4 (conde0 at telefonica.net (David F. Madrid))
Break-in discovery and forensics tools (pauls at utdallas.edu (Schmehl, Paul L))
Break-in discovery and forensics tools (devon at lithiumnode.com (Timmah))
[NGSEC-2003-5] YABB SE, remote command execution (labs at ngsec.com (labs@...EC))
State "Super-DMCA" Legislation: MPAA's Stealth Attack on Your Living Room (guninski at guninski.com (Georgi Guninski))
Office 2000 bug, Regristration (alex.elger at micronage.com (Alex Elger))
Break-in discovery and forensics tools (mike at megaglobal.net (Michael))
Break-in discovery and forensics tools (madsaxon at direcway.com (madsaxon))
Break-in discovery and forensics tools (steve.wray at paradise.net.nz (Steve Wray))
SRT2003-04-22-1336 - SAP DB Development Tools install flaw (dotslash at snosoft.com (KF))
MDKSA-2003:050 - Updated apache packages fix denial of service vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Permanent crash in Opera 7.10 (conde0 at telefonica.net (David F. Madrid))
State "Super-DMCA" Legislation: MPAA's Stealth Attack on Your Living Room (yossarian at planet.nl (yossarian))

April 23 (47 messages)

Break-in discovery and forensics tools (eecue at eecue.com (eecue))
Gator: REAL EXPOSED (se_cur_ity at hotmail.com (Hotmail))
OS X DirectoryService attack {Updated} (neeko at haackey.com (Neeko Oni))
State "Super-DMCA" Legislation: MPAA's Stealth Attack on Your Living Room (alex at opsys.com (Alex Lopez))
Break-in discovery and forensics tools (fulldisclosure at secspace.de (Volker Kindermann))
Intel Netstructure VPN Client password file? (nick at ethicsdesign.com (Nick Jacobsen))
Secunia Research: Xeneo Web Server URL Encoding Denial of Service (che at secunia.com (Carsten H. Eiram))
Re: Break-in discovery and forensics tools (yannicksan at free.fr (yannick san))
Break-in discovery and forensics tools (yannicksan at free.fr (yannick san))
Break-in discovery and forensics tools (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Break-in discovery and forensics tools (dmuell at gmx.net (Dirk Mueller))
Anti-Hacker kit (earl_keyser at wayzata.k12.mn.us (Earl Keyser))
[SECURITY] [DSA 292-2] New mime-support packages fix temporary file race conditions (debian-security-announce at lists.debian.org (debian-security-announce@...t…)
[SECURITY] [DSA 293-1] New kdelibs packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
[RHSA-2003:032-01] Updated tcpdump packages fix various vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
SAP database local root vulnerability during installation. (lwc at vapid.ath.cx (Larry W. Cashdollar))
Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability (psirt at cisco.com (Cisco Systems Product Security …)
SAP database local root vulnerability during installation. (fwd) (lwc at vapid.ath.cx (Larry W. Cashdollar))
Forensics CD (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-an…)
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
Secunia Research: Xeneo Web Server URL Encoding Denial of Service (badpack3t at security-protocols.com (badpack3t))
Break-in discovery and forensics tools (GGolomb at enterasys.com (Golomb, Gary))
Break-in discovery and forensics tools (smcmahon at eiv.com (Shawn McMahon))
Xeneo Webserver Vulnerability (ts at securityoffice.net (Tamer Sahin))
Secunia Research: Xeneo Web Server URL Encoding Denial of Service (galiarept at phreaker.net (GaLiaRePt))
Break-in discovery and forensics tools (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Break-in discovery and forensics tools (rms at computerbytesman.com (Richard M. Smith))
Re: Xeneo Webserver Vulnerability (badpack3t at security-protocols.com (badpack3t))
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
Break-in discovery and forensics tools (smcmahon at eiv.com (Shawn McMahon))
Break-in discovery and forensics tools (rgerhards at hq.adiscon.com (Rainer Gerhards))
Break-in discovery and forensics tools (steve at entrenchtech.com (Steve Manzuik))
Break-in discovery and forensics tools (tbird at precision-guesswork.com (Tina Bird))
Xeneo Webserver Vulnerability (jb at secunia.com (Jakob Balle))
[RHSA-2003:076-01] Updated ethereal packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Forensics CD (fulldisclosure at secspace.de (Volker Kindermann))
Secunia Research: Xeneo Web Server URL Encoding Denial of Service (se_cur_ity at hotmail.com (Hotmail))
Xeneo Webserver Vulnerability (badpack3t at security-protocols.com (badpack3t))
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
Break-in discovery and forensics tools (dufresne at winternet.com (Ron DuFresne))
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
admissability of logs in court (tbird at precision-guesswork.com (Tina Bird))
[SCSA-018] Disclosure of authentication information in Sambar Server (gregory.lebras at security-corporation.com (Gregory LEBRAS))
[VulnWatch] Secunia Research: Xeneo Web Server URL Encoding Denial of Service (che at secunia.com (Carsten H. Eiram))
[VulnWatch] Secunia Research: Xeneo Web Server URL Encoding Denial of Service (che at secunia.com (Carsten H. Eiram))

April 24 (13 messages)

Xeneo Web Server 2.2.10.0 Buffer Overflow Vulnerability (badpack3t at security-protocols.com (badpack3t))
Xeneo Web Server 2.2.10.0 Buffer Overflow Vulnerability (se_cur_ity at hotmail.com (Hotmail))
SuSE Security Announcement: KDE (SuSE-SA:2003:026) (krahmer at suse.de (Sebastian Krahmer))
NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS (security at nsfocus.com (NSFOCUS Security Team))
Break-in discovery and forensics tools (Brad.Bemis at airborne.com (Brad Bemis))
RE: Xeneo Web Server 2.2.10.0 Buffer Overflow Vulnerability (rshan at comcast.net (Robert Shanahan))
Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Break-in discovery and forensics tools (batsy at vapour.net (batz))
Break-in discovery and forensics tools (se_cur_ity at hotmail.com (Hotmail))
[RHSA-2003:112-01] Updated squirrelmail packages fix cross-site scripting vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:118-01] Updated mICQ packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows. (dotslash at snosoft.com (KF))

April 25 (8 messages)

MDKSA-2003:051 - Updated ethereal packages fix remote vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
pissed off (cyn0n at myrealbox.com (cyn0n@...ealbox.com))
[k-otik] The French Security List (En Fran�ais) (australia001 at yahoo.com.au (-== Jammino ==-))
Cross site scripting in Onecenter Forum 4.0 (conde0 at telefonica.net (David F. Madrid))
pissed off (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update (agent99 at sgi.com (SGI Security Coordinator))
RE: Windows Server 2003 Security Guide available (jasonc at science.org (Jason Coombs))
Vulnerability in nsd LDAP Implementation on IRIX (agent99 at sgi.com (SGI Security Coordinator))

April 26 (12 messages)

PoPToP Exploit. (blightninjas at hushmail.com (blightninjas@...hmail.com))
pissed off (msopacua at idg.nl (Melvyn Sopacua))
SPOOFED HOTMAIL ADDRESS --- http://www.security-hotmail.com/ (se_cur_ity at hotmail.com (morning_wood))
pissed off (ts at securityoffice.net (Tamer Sahin))
NII Advisory - Path Disclosure in Cold Fusion MX Server (info at nii.co.in (Network Intelligence India Pvt. Ltd.))
pissed off (kain at ircop.dk (Knud Erik Højgaard))
pissed off (blancher at cartel-securite.fr (Cedric Blancher))
pissed off (badpack3t at security-protocols.com (badpack3t))
[k-otik] The French Security List (En Fran çais) (adf at code511.com (adf--at--Code511.com))
Re: [k-otik.com] The French Security List (En Fran �ais) (australia001 at yahoo.com.au (-== Jammino ==-))
State "Super-DMCA" Legislation: MPAA's Stealth Attack on Your Living Room (poirotsj at gci.net (Steve Poirot))
Buffer overflow in Internet Explorer's HTTP parsing code (jouko at solutions.fi (Jouko Pynnonen))

April 27 (10 messages)

State "Super-DMCA" Legislation: MPAA's Stealth Attack on Your Living Room (guninski at guninski.com (Georgi Guninski))
Anyone have the SECURITY admin email for Frontrange/Goldmine? (scheidell at secnap.net (Michael Scheidell))
3com NBX IP Phone Call manager Denial of Service - Update (scheidell at secnap.net (Michael Scheidell))
pissed off (hd at securityoffice.net (Halil Demirezen))
pissed off (hd at securityoffice.net (Halil Demirezen))
RE: Windows Server 2003 Security Guide available (greg-bugtraq at nest.cx (Greg Steuck))
pissed off (sixsigma98 at hotmail.com (J G))
pissed off (steve.wray at paradise.net.nz (Steve Wray))
pissed off (msopacua at idg.nl (Melvyn Sopacua))
pissed off (fxr at hushmail.com (fxr@...hmail.com))

April 28 (19 messages)

power, corruption and lies (was RE: Re[2]: pissed off) (steve.wray at paradise.net.nz (Steve Wray))
RE: power, corruption and lies (jasonc at science.org (Jason Coombs))
RE: power, corruption and lies (steve.wray at paradise.net.nz (Steve Wray))
RE: power, corruption and lies (steve.wray at paradise.net.nz (Steve Wray))
RE: power, corruption and lies (se_cur_ity at hotmail.com (morning_wood))
GLSA: snort (200304-06) (aliz at gentoo.org (Daniel Ahlberg))
IIS Security and Programming Countermeasures e-book (jasonc at science.org (Jason Coombs))
pissed off (ts at securityoffice.net (Tamer Sahin))
GLSA: monkeyd (200304-07) (aliz at gentoo.org (Daniel Ahlberg))
RE: power, corruption and lies (yossarian at planet.nl (yossarian))
GLSA: monkeyd (200304-07.1) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: pptpd (200304-08) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: mgetty (200304-09) (aliz at gentoo.org (Daniel Ahlberg))
Qpopper v4.0.x poppassd local root exploit (xploit at hackermail.com (dong-h0un U))
pissed off (steve at videogroup.com (Steve))
RE: power, corruption and lies (dufresne at winternet.com (Ron DuFresne))
pissed off (madsaxon at direcway.com (madsaxon))
pissed off (pauls at utdallas.edu (Schmehl, Paul L))
RE: power, corruption and lies (steve.wray at paradise.net.nz (Steve Wray))

April 29 (10 messages)

MDKSA-2003:052 - Updated snort packages fix remote vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
whingeing, moaning and bitching (novathugz at hotmail.com (_ _))
[RHSA-2003:079-01] Updated zlib packages fix gzprintf buffer overflow vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Robert S Johnson is out of the office. (rsjohnson at nyse.com (rsjohnson@...e.com))
Robert S Johnson is out of the office. (sam.pointer at hpdsoftware.com (Sam Pointer))
[En Fran�ais] Oracle - Sun Solaris - Kerio Firewall (australia001 at yahoo.com.au (- Advisories Fr -))
[RHSA-2003:093-01] Updated MySQL packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
OT - Hawash charged (pauls at utdallas.edu (Schmehl, Paul L))
[En Français] Oracle - Sun Solaris - Kerio Firewall (adf at code511.com (adf--at--Code511.com))
Latest MS SQL Server vulnerabilities revealed. (cesarc56 at yahoo.com (Cesar))

April 30 (16 messages)

Robert S Johnson is out of the office. (tcannon at noops.org (Thomas Cannon))
Robert S Johnson is out of the office. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Robert S Johnson is out of the office. (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Administrivia: Vacation Messages - Update (johnc at grok.org.uk (John Cartwright))
[SECURITY] [DSA 296-1] New kdebase packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
GLSA: balsa (200304-10) (aliz at gentoo.org (Daniel Ahlberg))
Administrivia: Vacation Messages - Update (nick at virus-l.demon.co.uk (Nick FitzGerald))
Administrivia: Vacation Messages - Update (johnc at grok.org.uk (John Cartwright))
OpenSSH/PAM timing attack allows remote users identification (raptor at mediaservice.net (Marco Ivaldi))
Administrivia: Vacation Messages - Update (dotslash at snosoft.com (KF))
Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service (psirt at cisco.com (Cisco Systems Produc…)
[SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions (debian-security-announce at lists.debian.org (debian-security-announ…)
Latest MS SQL Server vulnerabilities revealed. (michael at nix.org (Michael -))
Robert S Johnson is out of the office. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Administrivia: Vacation Messages - Update (nick at virus-l.demon.co.uk (Nick FitzGerald))

506 messages