Virus.Org :: Mailing List Archives


Welcome to the Virus.Org Mailing List Archive

bugtraq Jul 02 by Date

Messages are listed by date. The last update was on 10:50 GMT Thu Jul 27. There are 539 messages.
[Thread Index] [Other Lists] [Home]

Jul 01

KPMG-2002026: Jrun sourcecode Disclosure Peter Gründl
PTL-2002-03 Betsie XSS Vuln Mark A. Rowe (PenTest)
KPMG-2002028: Sitespring Server Denial of Service Peter Gründl
ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Hank Leininger
ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Hank Leininger
Revised OpenSSH Security Advisory Markus Friedl
Proof of Concept Code for OpenSSH [EMAIL PROTECTED]
BufferOverflow in OmniHTTPd 2.09 Martin J. Muench
BufferOverflow in OmniHTTPd 2.09 Martin J. Muench
CSS in blackboard Berend-Jan Wever
Free BodyGuard Demo Dave Aitel
RE: ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Nelson Brito
Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) Dave Ahmad
Security Update: [CSSA-2002-SCO.31] UnixWare 7.1.1 Open UNIX 8.0.0 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error [EMAIL PROTECTED]
Security Update: [CSSA-2002-SCO.32] OpenServer 5.0.5 OpenServer 5.0.6 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error [EMAIL PROTECTED]

Jul 02

RE: ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Hank Leininger
BIND 9.2.1 patch, multiple RR's for singleton types. Tim Gladding
CommuniGate Pro directory listings [EMAIL PROTECTED]
Falsifying a VeriSign Seal (Japan) Noam Rathaus
XSS in Slashcode gcsb
[ESA-20020702-016] several vulnerabilities in the OpenSSH daemon EnGarde Secure Linux
Noguska Nola 1.1.1 [ Intranet Business Management Software ] [EMAIL PROTECTED]
[ESA-20020702-017] off-by-one in mod_ssl's configuration directive handling EnGarde Secure Linux
[CLA-2002:504] Conectiva Linux Security Announcement - apache [EMAIL PROTECTED]
Re: XSS in Slashcode Jamie McCarthy
PHPAuction bug [EMAIL PROTECTED]
Re: Remote DoS in AnlaogX SimpleServer:www 1.16 by way of bugtest
Re: BIND 9.2.1 patch, multiple RR's for singleton types. Jim Reid
SuSE Security Announcement: openssh (SuSE-SA:2002:024) Roman Drahtmueller
CORE-20020620: Inktomi Traffic Server Buffer Overflow Iván Arce
MDKSA-2002:040-1 - openssh update Mandrake Linux Security Team

Jul 03

Three problems in OpenSSH's ssh-keysign Charles Hannum
Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal [EMAIL PROTECTED]
Re: Three problems in OpenSSH's ssh-keysign Theo de Raadt
Re: CommuniGate Pro directory listings [EMAIL PROTECTED]
NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd)) 3APA3A
NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd)) 3APA3A
Re: BIND 9.2.1 patch, multiple RR's for singleton types. Tim Gladding
Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002) NGSSoftware Insight Security Research
SunPCi II VNC weak authentication scheme vulnerability Richard van den Berg
Security Advisory: Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability Cisco Systems Product Security Incident Response Team
[Global InterSec 2002062801] OpenSSH challenge-response buffer overflow (Update) Global InterSec Research
Squid Security Update Advisory 2002:3 Henrik Nordstrom

Jul 04

[RHSA-2002:051-16] New Squid packages available [EMAIL PROTECTED]
Re: Acrobat reader 5.05 temp file insecurity Paul Szabo
nn remote format string vulnerability zillion
UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin
UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin
Re: BIND 9.2.1 patch, multiple RR's for singleton types. der Mouse
[OpenPKG-SA-2002.006] OpenPKG Security Advisory (bind) OpenPKG
MDKSA-2002:041 - kernel 2.2 and 2.4 updates Mandrake Linux Security Team
Re: Remote buffer overflow in resolver code of libc D. J. Bernstein
[CLA-2002:505] Conectiva Linux Security Announcement - ethereal [EMAIL PROTECTED]
Re: Remote buffer overflow in resolver code of libc Florian Weimer
Worldspan DoS altomo
MDKSA-2002:042 - LPRng updates Mandrake Linux Security Team

Jul 05

UT (and other game-servers) DDOS Tom
Sybase contact Aaron C. Newman
[CLA-2002:506] Conectiva Linux Security Announcement - squid [EMAIL PROTECTED]
remote winamp 2.x exploit (all current versions) 2c79cbe14ac7d0b8472d3f129fa1df
Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel
Re: Sybase contact Ryan Russell
Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin

Jul 06

LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT kanix THE HACKER

Jul 07

MacOS X SoftwareUpdate Vulnerability Russell Harding
Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) noir sin
sparc exploit for known solaris 8 kcms_configure overflow Adam Slattery
sparc exploit for known solaris 8 kcms_configure overflow Adam Slattery
Linux kernels DoSable by file-max limit Paul Starzetz

Jul 08

KPMG-2002029: Bea Weblogic Performance Pack Denial of Service Peter Gründl
Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT Olaf Kirch
Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel
New Paper: Microsoft SQL Server Passwords NGSSoftware Insight Security Research
Re: MacOS X SoftwareUpdate Vulnerability Julian Suschlik
Technical Details of BadBlue EXT.DLL Vulnerability Matthew Murphy
Technical Details of Urlcount.cgi Vulnerability Matthew Murphy
Re: MacOS X SoftwareUpdate Vulnerability Kurt Seifried
BadBlue 1.73 EXT.DLL XSS Variant Matthew Murphy
Foundstone Advisory - Buffer Overflow in MyWebServer (fwd) Dave Ahmad
Re: Linux kernels DoSable by file-max limit Kurt Seifried
Re: Linux kernels DoSable by file-max limit [EMAIL PROTECTED]

Jul 09

SuSE Security Announcement: squid (SuSE-SA:2002:025) Roman Drahtmueller
Re: Linux kernels DoSable by file-max limit Michal Zalewski
ALERT: Working Resources BadBlue #2 (DoS, Heap Overflow) Matthew Murphy
RE: New Paper: Microsoft SQL Server Passwords Toni Lassila
Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT kanix
Exploit for previously reported DoS issues in Shambala Server 4.5 Daniel Nyström
Re: Linux kernels DoSable by file-max limit Aleksander Adamowski
Re: Linux kernels DoSable by file-max limit Paul Starzetz
Sun iPlanet Web Server Buffer Overflow (#NISR09072002) NGSSoftware Insight Security Research
KPMG-2002030: Watchguard Firebox Dynamic VPN Configuration Protocol DoS Peter Gründl
iPlanet Remote File Viewing [EMAIL PROTECTED]

Jul 10

Re: iPlanet Remote File Viewing [EMAIL PROTECTED]
Re: Linux kernels DoSable by file-max limit Jim Breton
RE: New Paper: Microsoft SQL Server Passwords Pauli Porkka
wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting Matt Moore
wp-02-0008: Apache Tomcat Cross Site Scripting Matt Moore
wp-02-0012: Carello 1.3 Remote File Execution Matt Moore
IE allows universal Cross Domain Scripting (TL#003) Thor Larholm
XSS Hole in Fluid Dynamics search Engine [EMAIL PROTECTED]
RE: XSS Hole in Fluid Dynamics Search engine Zoltan Milosevic
Multiple Security Vulnerabilities in Sharp Zaurus SURUAZ
SuSE Security Announcement: Resolver (SuSE-SA:2002:026) Olaf Kirch
Re: Multiple Security Vulnerabilities in Sharp Zaurus Stephen Harris
Re: Linux kernels DoSable by file-max limit Andrea Arcangeli
Exploit: TL003/Dot Bug = Reading Non-Parsable Files Matthew Murphy
EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability Marc Maiffret

Jul 11

Cisco VPN3000 gateway MTU overflow [EMAIL PROTECTED]
[CORE-20020528] Multiple vulnerabilities in ToolTalk Database server Iván Arce
Re: XSS in ht://Dig Geoff Hutchison
Tiny Software and Sygate contact Jonas Koch
Portcullis Security Advisory - Directory Traversal Vulnerability in SunPS iRunbook 2.5.2 [EMAIL PROTECTED]
Re: Can anyone identify this backdoor? David Jacoby
Re: Can anyone identify this backdoor? David Jacoby
Re: Multiple Security Vulnerabilities in Sharp Zaurus Jordan K Wiens
RE: Multiple Security Vulnerabilities in Sharp Zaurus Moorhouse, Walt P
Re: Cisco VPN3000 gateway MTU overflow Steve McIlwain
Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) NGSSoftware Insight Security Research
Re: MacOS X SoftwareUpdate Vulnerability Corey J. Steele
SQL Server passwords David Litchfield
RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) Hall, Philip
SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file c c
Lil'HTTP Pbcgi.cgi XSS Vulnerability Matthew Murphy
MFC ISAPI Framework Buffer Overflow Matthew Murphy
Re: Tiny Software and Sygate contact Paul Schmehl
Security Update: [CSSA-2002-SCO.28] UnixWare 7.1.1 Open UNIX 8.0.0 : rpc.ttdbserverd file creation and deletion vulnerabilities [EMAIL PROTECTED]
IRIX DNS resolver vulnerability SGI Security Coordinator
ZyXEL Prestige Router Remote Node Filtering Vulnerability still present Bernardo Pons
Popcorn vulnerabilities [EMAIL PROTECTED]
RE: Tiny Software and Sygate contact Seth Knox
[CLA-2002:507] Conectiva Linux Security Announcement - Resolver libraries [EMAIL PROTECTED]

Jul 12

RE: Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) Aaron C. Newman
Re: ZyXEL Prestige Router Remote Node Filtering Vulnerability still present Daniel Roethlisberger
[SPSadvisory#47]RealONE Player Gold / RealJukebox2 skin file download vulnerability webmaster
[SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow webmaster
Vulnerability found: The Adobe eBook Library Vladimir Katalov
Vulnerability found: The Adobe eBook Library Vladimir Katalov
[fw-wiz] The answer to the PIX encryption issue Damir Rajnovic
The answer to the PIX encryption issue Damir Rajnovic
Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability [EMAIL PROTECTED]
Re: MacOS X SoftwareUpdate Vulnerability gabriel rosenkoetter
Several problems in CARE 2002 [EMAIL PROTECTED]
Multiple vulnerabilities in atphttpd-0.4b qitest1
Re: Cisco VPN3000 MTU overflow (fragmentation issue) [EMAIL PROTECTED]
Re: Vulnerability found: The Adobe eBook Library c c
5 bugs D4rkGr3y
@stake Advisory: Multiple Vulnerabilities with Pingtel xpressa SIP Phones @stake advisories
SQL Server passwords [EMAIL PROTECTED]
FreeBSD Security Advisory FreeBSD-SA-02:29.tcpdump FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-02:30.ktrace FreeBSD Security Advisories
Re: MFC ISAPI Framework Buffer Overflow Chris Wysopal
MFC Overflow Test Code Matthew Murphy

Jul 13

Three BadBlue Vulnerabilities Matthew Murphy
SGI Apache Web Server Chunk Handling vulnerability SGI Security Coordinator
Hosting Controller Vulnerability Ben M
RE: MacOS X SoftwareUpdate Vulnerability [EMAIL PROTECTED]

Jul 14

Error in MS mail handler - noncritical but a problem Fred Cohen
Re: Hosting Controller Vulnerability James Griffin
Double Choco Latte multiple vulnerabilities Ulf Harnhammar
Re: Hosting Controller Vulnerability Muhammad Faisal Rauf Danka

Jul 15

Re: Hosting Controller Vulnerability Ben M
Re: [VulnWatch] 5 bugs Kurt Seifried
pwc.20020630.nims_3.0.3_imapd.a [EMAIL PROTECTED]
pwc.20020630.nims_modweb.b [EMAIL PROTECTED]
TSLSA-2002-0061 - bind Trustix Secure Linux Advisor
TSLSA-2002-0062 - squid Trustix Secure Linux Advisor
RE: New Paper: Microsoft SQL Server Passwords John Tolmachofft
Tivoli TMF Endpoint Buffer Overflow Mark A. Rowe (PenTest)
Tivoli TMF ManagedNode Buffer Overflow Mark A. Rowe (PenTest)
Re: Cisco VPN3000 gateway MTU overflow Pete Davis
RE: MacOS X SoftwareUpdate Vulnerability Hundley, Gordon - Princeton
FreeBSD Security Advisory FreeBSD-SA-02:31.openssh FreeBSD Security Advisories
Re: [VulnWatch] 5 bugs Simon Hausmann
@stake Advisory: Norton Personal Internet Firewall HTTP Proxy Vulnerability [EMAIL PROTECTED]
Remote ICQ Sound Desactivation xLaNT
Again NULL and addslashes() (now in 123tkshop) [EMAIL PROTECTED]
Re: Remote ICQ Sound Desactivation Adam [wp-ckkl]
Re: Remote ICQ Sound Desactivation Adam [wp-ckkl]

Jul 16

Security Update: [CSSA-2002-SCO.33] OpenServer 5.0.5 OpenServer 5.0.6 : timed does not enforce nulls [EMAIL PROTECTED]
Security Update: [CSSA-2002-SCO.34] OpenServer 5.0.5 OpenServer 5.0.6 : uux status file name buffer overflow [EMAIL PROTECTED]
AIM forced behavior "issue" orb
Outpost24 Advisory: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability Lucas Lundgren
Sniffable Switch Project [EMAIL PROTECTED]
ICQ and MSIE allow execution of arbitrary code Jelmer
Re: Sniffable Switch Project Cedric Blancher
Re: Sniffable Switch Project Frédéric Raynal
[RHSA-2002:134-12] Updated mod_ssl packages available [EMAIL PROTECTED]
MDKSA-2002:043 - bind update Mandrake Linux Security Team
Security Update: [CSSA-2002-031.0] Linux: mod_ssl off-by-one error [EMAIL PROTECTED]

Jul 17

Wiki module postnuke Cross Site Scripting Vulnerability Pistone
KPMG-2002031: Jigsaw Webserver Path Disclosure Peter Gründl
KPMG-2002032: Macromedia Sitespring Cross Site Scripting Peter Gründl
KPMG-2002033: Resin DOS device path disclosure Peter Gründl
KPMG-2002034: Jigsaw Webserver DOS device DoS Peter Gründl
Re: Sniffable Switch Project martin f krafft
Exploit for a security hole in the pickle module for Python versions <= 2.1.x Jeff Epler
Norton AV 2002 rewriting SMTP, breaking TLS Dale Clapperton (lists)
Re: ICQ and MSIE allow execution of arbitrary code Stan Bubrouski
Re:[VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting [EMAIL PROTECTED]
Re:[VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting [EMAIL PROTECTED]
asciiSECURE advisory (2002-07-17/1) lumpy
Re: KPMG-2002033: Resin DOS device path disclosure [EMAIL PROTECTED]
[CLA-2002:512] Conectiva Linux Security Announcement - libpng [EMAIL PROTECTED]
Re: Sniffable Switch Project martin f krafft
[AP] Oracle Reports Server Information Disclosure Vulnerability skp
Fwd: non-disclosed info in Outlook can lead to potential serious Social Attack. Intel Nop
MDKSA-2002:044 - squid update Mandrake Linux Security Team
Administrivia: Symantec acquiring SecurityFocus [EMAIL PROTECTED]
WINAMP also allows execution of arbitrary code (probably a lot more programs aswell) Jelmer
Java webstart also allows execution of arbitrary code Jelmer

Jul 18

MERCUR Mailserver advisory/remote exploit 2c79cbe14ac7d0b8472d3f129fa1df
Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller Ron Ray
Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code Bojidar Alexandrov
wwwoffle-2.7b and prior segfaults with negative Content-Length value qitest1
Re: ICQ and MSIE allow execution of arbitrary code Jelmer

Jul 19

[Full-Disclosure] Geeklog XSS and CRLF Injection Ulf Harnhammar
Geeklog XSS and CRLF Injection Ulf Harnhammar
Linux kernel setgid implementation flaw FozZy
tru64 proof of concept /bin/su non-exec bypass [EMAIL PROTECTED]
Vulnerability found: Adobe Acrobat eBook Reader and Content Server [EMAIL PROTECTED]
Re: Linux kernel setgid implementation flaw FozZy
Re: [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting Matt Moore
Re: [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting Matt Moore
Re: Domain password logon authentication bug in Windows 2000 Advanced Server Domain Controller 3APA3A
Re: Linux kernel setgid implementation flaw Wietse Venema
RE: Norton AV 2002 rewriting SMTP, breaking TLS Russell Mann
FireDeamon exploit Curt Purdy
RE: Norton AV 2002 rewriting SMTP, breaking TLS Owen, Greg
Re: Linux kernel setgid implementation flaw FozZy
Re: Linux kernel setgid implementation flaw FozZy
ANNOUNCING: Debian GNU/Linux 3.0 martin f krafft

Jul 20

AIM Exploit!! tuna
[Full-Disclosure] BadBlue 302 Status Message XSS Matthew Murphy
BadBlue 302 Status Message XSS Matthew Murphy
[Full-Disclosure] Outlook Express Attachment Property Spoofing Vulnerabilities Matthew Murphy
[Full-Disclosure] Re: Outlook Express Attachment Property Spoofing Vulnerabilities Jack
Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code [EMAIL PROTECTED]
Re: BadBlue - Unauthorized Administrative Command Execution ellipse
[Full-Disclosure] BadBlue - Unauthorized Administrative Command Execution Matthew Murphy
BadBlue - Unauthorized Administrative Command Execution Matthew Murphy
Re: AIM Exploit!! john smith
[Full-Disclosure] Netscape Communicator META Refresh Denial of Service Matthew Murphy

Jul 21

[Full-Disclosure] PHP Resource Exhaustion Denial of Service Matthew Murphy
PHP Resource Exhaustion Denial of Service Matthew Murphy
[Full-Disclosure] PHP Resource Exhaustion Denial of Service Matthew Murphy
[Full-Disclosure] PHP Resource Exhaustion Denial of Service Matthew Murphy
[Full-Disclosure] PHP Resource Exhaustion Denial of Service Matthew Murphy
[Full-Disclosure] PHP Resource Exhaustion Denial of Service Matthew Murphy
Nanog traceroute format string exploit. SpaceWalker
Nanog traceroute format string exploit. SpaceWalker

Jul 22

Vulnerability found: Adobe Acrobat eBook Reader and Content Server Vladimir Katalov
Vulnerability found: Adobe Acrobat eBook Reader and Content Server Vladimir Katalov
[Full-Disclosure] Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
[Full-Disclosure] Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
[Full-Disclosure] Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
[Full-Disclosure] Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
[Full-Disclosure] Pyramid BenHur Firewall active FTP portfilter ruleset results in a firewall leak Dr. Peter Bieringer
PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Marko Karppinen
Advisory 02/2002: PHP remote vulnerability e-matters Security
Re: Norton AV 2002 rewriting SMTP, breaking TLS Adam Shostack
Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack David Walker
RE: PHP Resource Exhaustion Denial of Service Russ Garrett
[Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Lupe Christoph
Pablo Sofware Solutions FTP server Directory Traversal Vulnerability Securiteinfo.com
Security Update: [CSSA-2002-SCO.35] OpenServer 5.0.5 OpenServer 5.0.6 : crontab format string vulnerability [EMAIL PROTECTED]
SSH Protocol Trick [EMAIL PROTECTED]

Jul 23

Re: SSH Protocol Trick H D Moore
Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Kyuzo
Announcement: injectso-0.2 Shaun Clowes
Announcement: injectso-0.2 Shaun Clowes
Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 John Pettitt
Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack Andrew Church
Re: Forged FROM addresses/non-disclosed info in Outlook can lead to potential serious Social Attack Neil W Rickert
MailMax security advisory/exploit/patch 2c79cbe14ac7d0b8472d3f129fa1df
Re: SSH Protocol Trick stealth
PHRACK 59 OFFICIAL RELEASE Phrack Staff
Re: SSH Protocol Trick Richard Miller
Re: SSH Protocol Trick Richard Miller
Re: Vulnerability found: Adobe Acrobat eBook Reader and Content Server Klaus-J. Wolf
Re: SSH Protocol Trick stealth
VU#197395 Microsoft IIS SMTP encapsulated e-mail address vulnerability - update [EMAIL PROTECTED]
Pressing CTRL in IE is dangerous - Sandblad advisory #8 Andreas Sandblad
Re: PHP Resource Exhaustion Denial of Service vjt
Re: SSH Protocol Trick Mikael Olsson
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta kelli burkinshaw
Re: Nanog traceroute format string exploit. Ryan Mansager
Re: Nanog traceroute format string exploit. Ryan Mansager

Jul 24

Re: [Admin/Spamassasin] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Steven Champeon
Cobalt Qube 3 Administration page pokley
cross-site scripting bug of Mailman office
RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 Thor Larholm
Re: Pressing CTRL in IE is dangerous - Sandblad advisory #8 Peter Pentchev
Potential remote root in CodeBlue log scanner Demi Sex God from Hell
Denial of Service bug in Pine 4.44 Martin J. Muench
Denial of Service bug in Pine 4.44 Martin J. Muench
VMware GSX Server Remote Buffer Overflow Mingyan Liu
Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) [EMAIL PROTECTED]
Re: Nanog traceroute format string exploit. Olaf Kirch
Re: Nanog traceroute format string exploit. Olaf Kirch
REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Andrea Lisci
How to reproduce PHP segfault. Joseph S. Testa II
Mozilla cookie stealing - Sandblad advisory #9 Andreas Sandblad
RE: Pressing CTRL in IE is dangerous - Sandblad advisory #8 GreyMagic Software
VNC authentication weakness [EMAIL PROTECTED]
Re: Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1) [EMAIL PROTECTED]
Icq 2001&2002 vulnerability Michael
Apple OSX and iDisk and Mail.app Randal L. Schwartz
Re: VNC authentication weakness David Frascone
Cisco Security Advisory: Heap Overflow in Solaris cachefs Daemon Cisco Systems Product Security Incident Response Team
[ESA-20020724-018] Buffer overflow in BIND4-derived resolver code. EnGarde Secure Linux
Interface promiscuity obscurity in Linux Ricardo Branco
Re: VNC authentication weakness Jack Lloyd
Re: Apple OSX and iDisk and Mail.app Dale Southard
Re: VNC authentication weakness Iván Arce
Re: Apple OSX and iDisk and Mail.app osx_guru
Re: SSH Protocol Trick Markus Friedl
Pegasus mail DoS Auriemma Luigi
Re: Apple OSX and iDisk and Mail.app [EMAIL PROTECTED]
[RHSA-2002:139-10] Updated glibc packages fix vulnerabilities in resolver [EMAIL PROTECTED]
CacheFlow CacheOS Cross-site Scripting Vulnerability T.Suzuki
Re: Apple OSX and iDisk and Mail.app Daryl Tester
Re: Interface promiscuity obscurity in Linux Rasmus Bøg Hansen
Re: Apple OSX and iDisk and Mail.app Eric Hall
Re: Interface promiscuity obscurity in Linux [EMAIL PROTECTED]

Jul 25

Uninets StatsPlus 1.25 script injection vulnerabilities BrainRawt .
Re: Interface promiscuity obscurity in Linux Glynn Clements
Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) Dave Ahmad
Microsoft Security Bulletin MS02-036: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138) (fwd) Dave Ahmad
Microsoft Security Bulletin MS02-038: Cumulative Patch for SQL Server 2000 Service Pack 2 (Q316333) (fwd) Dave Ahmad
Microsoft Security Bulletin MS02-039: Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875) (fwd) Dave Ahmad
KaZaa v1.7.1 Denial of Service Attack [EMAIL PROTECTED]
Re: Interface promiscuity obscurity in Linux Frédéric Raynal
ISS Brief: Remote Buffer Overflow Vulnerability in Microsoft Exchange Server (fwd) Dave Ahmad
Re: VNC authentication weakness Andreas Beck
Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) NGSSoftware Insight Security Research
Re: Interface promiscuity obscurity in Linux Paul Starzetz
Novell GroupWise 6.0.1 Support Pack 1 Bufferoverflow Marco van Berkum
Re: Interface promiscuity obscurity in Linux [EMAIL PROTECTED]
Medium security hole affecting W3Mail Tim Brown
Re: Interface promiscuity obscurity in Linux Ademar de Souza Reis Jr.
Re: Acrobat reader 5.05 temp file insecurity [EMAIL PROTECTED]
[Full-Disclosure] Re: REFRESH: EUDORA MAIL 5.1.1 Doug Monroe
Re: REFRESH: EUDORA MAIL 5.1.1 Doug Monroe
Re: REFRESH: EUDORA MAIL 5.1.1 Doug Monroe
[Full-Disclosure] ezContents multiple vulnerabilities Ulf Harnhammar
ezContents multiple vulnerabilities Ulf Harnhammar
UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
[Full-Disclosure] UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
PGP 7.04 Patch Modifies the Password Cache Setting [EMAIL PROTECTED]
Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Jeff Kell
[Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Jeff Kell
Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Jeff Kell
26 June 2002 Cumulative Patch for Windows Media Player (Q320920) Szulc Roger
Re: Interface promiscuity obscurity in Linux Casper Dik
Re: Microsoft Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) (Version 2.0) (fwd) Knud Erik Højgaard
Re: Interface promiscuity obscurity in Linux Jim Mellander
Re: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) David Beards
RE: PGP 7.04 Patch Modifies the Password Cache Setting Cohen, Steve
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta kelli burkinshaw
SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. c c

Jul 26

Re: VNC authentication weakness David Wagner
Re: VMware GSX Server Remote Buffer Overflow Eric Horschman
IPSwitch IMail ADVISORY/EXPLOIT/PATCH 2c79cbe14ac7d0b8472d3f129fa1df
Re: REFRESH: EUDORA MAIL 5.1.1 William Anthony Timmins
Re: VNC authentication weakness Constantin Kaplinsky
RE: VNC authentication weakness Andrew van der Stock
Re: VNC authentication weakness Mitch Adair
[Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Nick FitzGerald
Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Nick FitzGerald
Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 Nick FitzGerald
SECURITY.NNOV: multiple vulnerabilities in JanaServer 3APA3A
Re: VNC authentication weakness Kragen Sitaker
Re: [Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
Re: [Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
Re: [Full-Disclosure] Re: UPDATE: Re: REFRESH: EUDORA MAIL 5.1.1 [EMAIL PROTECTED]
Re: Announcement: injectso-0.2 Barton Miller
Re: Announcement: injectso-0.2 Barton Miller
Re: Announcement: injectso-0.2 Barton Miller
Re: VNC authentication weakness Jose Nazario
RE: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920) Coffin, Chris
[Full-Disclosure] Re: REFRESH: EUDORA MAIL 5.1.1 Bill Timmins
Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd) Kanatoko
RE: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Burton M. Strauss III
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin
Re: VNC authentication weakness Ariel Waissbein

Jul 27

Phenoelit Advisory, 0815 ++ * - Cisco_tftp kim0
Phenoelit Advisory, 0815 ++ * - Cisco_tftp kim0
0815 ++ */ SEH_Web kim0
0815 ++ */ SEH_Web kim0
Phenoelit Advisory #0815 ++-+ dp_300 (DLINK) kim0
Phenoelit Advisory #0815 ++-+ dp_300 (DLINK) kim0
Phenoelit ADvisory 0815 ++ ** Ascend kim0
Phenoelit ADvisory 0815 ++ ** Ascend kim0
Phenoelit Advisory 0815 ++ // Xedia kim0
Phenoelit Advisory 0815 ++ // Xedia kim0
Phenoelit Advisory 0815 ++ -- Brick kim0
Phenoelit Advisory 0815 ++ -- Brick kim0
Phenoelit Advisory #0815 +-- kim0
Phenoelit Advisory #0815 +-- kim0
Phenoelit Advisory 0815 ++ /+ HP ProCurve kim0
Phenoelit Advisory 0815 ++ /+ HP ProCurve kim0
Phenoelit Advisory #0815 +-+ kim0
Phenoelit Advisory #0815 +-+ kim0
phpBB/gender mod allows get admin privilege, exploit/patch langtuhaohoa caothuvolam
phenoelit advisory, Brother Printers ++/- kim0
Re: Phenoelit Advisory, 0815 ++ * - Cisco_tftp Mike Caudill
Re: Phenoelit Advisory, 0815 ++ * - Cisco_tftp Mike Caudill
WHERE'S THE CA$H: Internet Explorer 6.00. Outlook Express 6.00 [EMAIL PROTECTED]
WHERE'S THE CA$H: Internet Explorer 6.00. Outlook Express 6.00 [EMAIL PROTECTED]
Easy Homepage Creator Vulnerability Arek Suroboyo
Easy Guestbook Vulnerabilities Arek Suroboyo

Jul 28

Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Russell Harding
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Bela Lubkin
Re: VNC authentication weakness Theo de Raadt
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta Jim Paris

Jul 29

php dotProject by pass authentication pokleyzz
Re: Eat gopher! JW Oh
RAZOR advisory: Linux util-linux chfn local root vulnerability Michal Zalewski
[RHSA-2002:132-14] Updated util-linux package fixes password locking race [EMAIL PROTECTED]
Hoax Exploit John Korsak
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta VanDyke Technical Support
HylaFAX - Various Vulnerabilities Fixed Lee Howard
KDE 2/3 artsd 1.0.0 local root exploit kokane
Abyss Web Server version 1.0.3 shows file and directory content Securiteinfo.com
XWT Foundation Advisory: Firewall circumvention possible with all browsers Adam Megacz
Re: VNC authentication weakness David Wagner
Re: [VulnWatch] KDE 2/3 artsd 1.0.0 local root exploit H D Moore
Re: Hoax Exploit Tom Fischer
Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta VanDyke Technical Support
Fake Identd - Remote root exploit Jedi/Sector One
Re: Hoax Exploit (2c79cbe14ac7d0b8472d3f129fa1df55 RETURNS) 2c79cbe14ac7d0b8472d3f129fa1df55 2c79cbe14ac7d0b8472d3f129fa1df55
Re: XWT Foundation Advisory: Firewall circumvention possible with all browsers Peter Watkins
MDKSA-2002:045 - mm update Mandrake Linux Security Team
Re: VNC authentication weakness Nate Lawson
RE: XWT Foundation Advisory Microsoft Security Response Center
Code injection Vulnerability in endity.com's shoutBOX <-delusion->

Jul 30

Re: XWT Foundation Advisory Peter Watkins
Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andrew Pimlott
RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers Jason Coombs
RE: XWT Foundation Advisory Thor Larholm
OpenSSL Security Altert - Remote Buffer Overflows Ben Laurie
Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Szemkel
Re: VNC authentication weakness David Malone
OpenSSL patches for other versions Ben Laurie
[RHSA-2002:155-11] Updated openssl packages fix remote vulnerabilities [EMAIL PROTECTED]
Windows mplay32 buffer overflow 'ken'@FTU
[OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) OpenPKG
TSLSA-2002-0063 - openssl Trustix Secure Linux Advisor
[OpenPKG-SA-2002.008] OpenPKG Security Advisory (openssl) OpenPKG
TSLSA-2002-0064 - util-linux Trustix Secure Linux Advisor
[ESA-20020730-019] several vulnerabilities in the openssl library EnGarde Secure Linux
[Full-Disclosure] [ESA-20020730-019] several vulnerabilities in the openssl library EnGarde Secure Linux
Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Michal Zalewski
LinuxSecurity Magazine Online - First Edition Renato Murilo Langona
Vulnerability: protected Adobe eBooks can be copied between computers [EMAIL PROTECTED]
Vulnerability: protected Adobe eBooks can be copied between computers [EMAIL PROTECTED]
Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andrew Pimlott
GLSA: OpenSSL Daniel Ahlberg
RE: warning Thor Larholm
IPSwitch IMail Advisory #2 [EMAIL PROTECTED]
Cisco Security Advisory: TFTP Long Filename Vulnerability Cisco Systems Product Security Incident Response Team
Re: VNC authentication weakness Mike Porter
RE: XWT Foundation Advisory: Firewall circumvention possible with all browsers GreyMagic Software
SuSE Security Announcement: openssl (SuSE-SA:2002:027) Roman Drahtmueller
Re: OpenSSL patches for other versions Ademar de Souza Reis Jr.
Re: XWT Foundation Advisory Adam Megacz
FreeBSD Security Advisory FreeBSD-SA-02:23.stdio [REVISED] FreeBSD Security Advisories
RE: XWT Foundation Advisory Jason Coombs
[ADVISORY]: Arbitrary file disclosure vulnerability in Sympoll 1.2 David Raeman
MDKSA-2002:046 - openssl update Mandrake Linux Security Team
Bug in Eupload [Zero_Byte]

Jul 31

[Full-Disclosure] Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm [EMAIL PROTECTED]
Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm [EMAIL PROTECTED]
[Full-Disclosure] Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm [EMAIL PROTECTED]
[Full-Disclosure] Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm [EMAIL PROTECTED]
Directory traversal vulnerability in sendform.cgi Steven M. Christey
Directory traversal vulnerability in sendform.cgi Steven M. Christey
It takes two to tango Richard M. Smith
bug in KSTAT Dallachiesa Michele
Re: RAZOR advisory: Linux util-linux chfn local root vulnerability Andreas Beck
RE: It takes two to tango Mark L. Jackson
[RHSA-2002:153-07] Updated mm packages fix temporary file handling [EMAIL PROTECTED]
Re: It takes two to tango Chris Paget
FreeBSD Security Advisory FreeBSD-SA-02:32.pppd FreeBSD Security Advisories
Comment on DMCA, Security, and Vuln Reporting Richard Forno
Comment on DMCA, Security, and Vuln Reporting Richard Forno
The SUPER Bug [EMAIL PROTECTED]
Re: It takes two to tango Jose Nazario
[CLA-2002:513] Conectiva Linux Security Announcement - openssl [EMAIL PROTECTED]
Re: It takes two to tango Greg A. Woods
RE: It takes two to tango (or samba for that matter) Gibby McCaleb
Re: It takes two to tango Chris Paget
FW: Parachat DoS Vulnerability Matt Smith
SuSE Security Announcement: mod_ssl, mm (SuSE-SA:2002:028) Roman Drahtmueller
Re: It takes two to tango Mike Forrester
Re: It takes two to tango Stan Bubrouski
Remote Buffer Overflow Vulnerability in Sun RPC Dave Ahmad
Announcing: The Zardoz 'Security Digest' Archives Curator
Re: It takes two to tango Tom Perrine
Re: It takes two to tango Branson Matheson
[Full-Disclosure] Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl [EMAIL PROTECTED]
Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl [EMAIL PROTECTED]
[Full-Disclosure] Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl [EMAIL PROTECTED]
[Full-Disclosure] Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl [EMAIL PROTECTED]
RE: It takes two to tango Scott, Richard
Re: It takes two to tango Ltlw0lf
Re: It takes two to tango Riad S. Wahby
TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC Claudio Ortiz Meinberg
RE: Comment on DMCA, Security, and Vuln Reporting Wolf, Glenn
RE: Comment on DMCA, Security, and Vuln Reporting Wolf, Glenn
FW: It takes two to tango (or samba for that matter) Gibby McCaleb
Re: It takes two to tango Randy Hinders
Re: [Full-Disclosure] it's all about timing John Scimone
Re: [Full-Disclosure] it's all about timing John Scimone
Re: [Full-Disclosure] it's all about timing John Scimone
Re: [Full-Disclosure] it's all about timing John Scimone
Fwd: Re: [Full-Disclosure] for the record... (Tru64 / Compaq) John Scimone
RE: It takes two to tango John Howie
[Full-Disclosure] it's all about timing Florin Andrei
it's all about timing Florin Andrei
[Full-Disclosure] it's all about timing Florin Andrei
[Full-Disclosure] it's all about timing Florin Andrei
OpenSSL Vulnerabilities Tina Bird
Re: It takes two to tango Derek D. Martin

Aug 01

Re: It takes two to tango Re: [Full-Disclosure] OT: Snosoft vs HP Ron DuFresne
Re: It takes two to tango Kyle R. Hofmann
[Full-Disclosure] for the record... (Tru64 / Compaq) KF
FreeBSD Security Advisory FreeBSD-SA-02:34.rpc FreeBSD Security Advisories
[Full-Disclosure] Re: it's all about timing Adam Megacz

Copyright (c) Virus.Org 1997-2006.
All Trademarks Acknowledged.
Please view our Terms and Conditions and our Privacy Policy.