Bugtraq (thread)

[SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service, Martin Schulze, 2004/08/31
[VulnWatch] Patch available for multiple critical flaws in Oracle, NGSSoftware Insight Security Research, 2004/08/31
[Full-Disclosure] UPDATED OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities, please_reply_to_security, 2004/08/31
DOS@TFS, CoolICE, 2004/08/31
[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : apache mod_digest Incorrect Client Response Verification Vulnerability, please_reply_to_security, 2004/08/31
[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : squid %-encoded characters in a URL, please_reply_to_security, 2004/08/31
Security Center and Windows XP clients in domain, albatross, 2004/08/31
Linux OpenExchange - cleartext rootpw in swap, Rene, 2004/08/31
[Full-Disclosure] Axis Network Camera and Video Server Security Advisory, product-security, 2004/08/31
D-Link DCS-900 IP camera remote exploit that change the IP, Jérôme, 2004/08/31
[vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability, lion, 2004/08/31
Cross Site Scripting in XOOPS Version 2.x Dictionary module, CyruxNET, 2004/08/31
Multiple Vulnerabilities In Xedus Webserver, GulfTech Security, 2004/08/31
[vulnwatch] WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability, lion, 2004/08/31
Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable), Steven Van Acker, 2004/08/31
DoS in Chat Anywhere 2.72a, Donato Ferrante, 2004/08/31
[vulnwatch] WS_FTP Server Denial of Service Vulnerability, lion, 2004/08/30
CuteNews News.txt writable to world, e0r, 2004/08/30
Re: 0day critical vulnerability/exploit targets Winamp users in the wild, K-OTiK Security, 2004/08/29
Check Point - Zone Labs Division - Response to "Weak Default Permissions Vulnerability", Zone Labs Product Security, 2004/08/28
Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow, Jérôme, 2004/08/28
Hastymail security update, Jason Munro, 2004/08/28
0day critical vulnerability/exploit targets Winamp users in the wild, K-OTiK Security, 2004/08/28
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server, Cisco Systems Product Security Incident Response Team, 2004/08/27
Broadcast forced exit in Ground Control II 1.0.0.7, Luigi Auriemma, 2004/08/27
[OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib), OpenPKG, 2004/08/27
MDKSA-2004:087 - Updated kernel packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/08/27
Gaucho v1.4 Build 145 Buffer Overflow, Jirtme, 2004/08/27
Keene Digital Media Server Directory Traversal, GulfTech Security, 2004/08/27
TSL-2004-0043 - multi, Trustix Security Advisor, 2004/08/27
Alpha Phising [IE 6 WinXP SP2], mikx, 2004/08/27
[Full-Disclosure] [ GLSA 200408-27 ] Gaim: New vulnerabilities, Sune Kloppenborg Jeppesen, 2004/08/27
[Full-Disclosure] [ GLSA 200408-26 ] zlib: Denial of service vulnerability, Sune Kloppenborg Jeppesen, 2004/08/27
MS XP SP2 Windows Security Center allows spoofing, Jirtme, 2004/08/27
[security bulletin] SSRT4779 - rev.0 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow, Boren, Rich (SSRT), 2004/08/27
Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State), john . courcoul, 2004/08/27
- Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State), Rishi Khan, 2004/08/27
- Re: Netscape Navigator 7.2 failure to isolate browser tabs (was Re: Computer Network Defence Vulnerability Alert State), john . courcoul, 2004/08/29
[Full-Disclosure] SGI ProPack 3: Kernel Update #3 - Security and other fixes, SGI Security Coordinator, 2004/08/26
Squirrelmail chpasswd local root bruteforce exploit, Jirtme, 2004/08/26
[Full-Disclosure] [ GLSA 200408-25 ] MoinMoin: Group ACL bypass, Joshua J. Berry, 2004/08/26
Easy File Sharing Webserver v1.25 Vulnerabilities, GulfTech Security, 2004/08/26
bug found, Mathieu Lacroix, 2004/08/26
Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability - [Full-Disclosure] iDEFENSE Security Advisory 08.25.04, Jérôme, 2004/08/26
CDE libDtHelp LOGNAME Buffer Overflow Vulnerability, Jérôme, 2004/08/26
- RE: CDE libDtHelp LOGNAME Buffer Overflow Vulnerability, Thor Larholm, 2004/08/31
[NGSEC-2004-7] NtRegmon, local system denial of service., labs@NGSEC, 2004/08/26
Computer Network Defence Vulnerability Alert State, Andy Cuff, 2004/08/26
Vulnerability: OpenBSD 3.5 Kernel Panic., Vafa Izadinia, 2004/08/26
RealVNC 4.0 DoS, Allan Zhang, 2004/08/26
RE: Running renamed executables with CMD.EXE, Michael Wojcik, 2004/08/26
multiple vulnerabilities in lukemftpd/tnftpd, venglin, 2004/08/26
Dynix Webpac Input Validation, Wil Allsopp, 2004/08/26
Anonymous Surfing Via Gmail Login Window - Poor Sanitization, Punabi MC, 2004/08/26
- Re: Anonymous Surfing Via Gmail Login Window - Poor Sanitization, Markus Ackermann, 2004/08/27
Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow, Steve, 2004/08/26
- RE: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow, Andreas Freyvogel, 2004/08/27
- Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow, Kyle Maxwell, 2004/08/27
- Re: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow, Jay D. Dyson, 2004/08/27
IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service, Advisories, 2004/08/25
A new website to search & submit win exploits, Dav1d, 2004/08/25
[Full-Disclosure] [ GLSA 200408-24 ] Linux Kernel: Multiple information leaks, Tim Yamin, 2004/08/25
[Full-Disclosure] [sb] [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities, Kurt Lieber, 2004/08/25
Window Washer 5.5: False Sense of Security, First Last, 2004/08/25
Yahoo! E-mail Service Vulnerability, Dror Shalev, 2004/08/25
[Full-Disclosure] Re: Images being pulled in Outlook 2003 even though don't download pictures is set?, Jason Coombs PivX Solutions, 2004/08/25
- [Full-Disclosure] Re: Images being pulled in Outlook 2003 even though don't download pictures is set?, vesselen.mironov, 2004/08/25
WebAPP directory traversal and ability to retrieve the DES encrypted password hash, Jérôme, 2004/08/25
What A Drag! -revisited-, mikx, 2004/08/25
PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities, Nikyt0x Argentina, 2004/08/25
Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability, ktha, 2004/08/25
Possible Security Issues In LiveWorld Products, GulfTech Security, 2004/08/25
[Full-Disclosure] [ GLSA 200408-23 ] kdelibs: Cross-domain cookie injection vulnerability, Joshua J. Berry, 2004/08/24
Internet Explorer Local File/Directory Detection, Rynho Zeros Web, 2004/08/24
[Full-Disclosure] Limited buffer overflow in Painkiller 1.31, Luigi Auriemma, 2004/08/24
[Full-Disclosure] ANNOUNCE: VulnDisco RADIUS protocol testsuite v1.0, Evgeny Demidov, 2004/08/24
[Full-Disclosure] RE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities, Gervase Markham, 2004/08/24
[Full-Disclosure] Microsoft updates documentation on Windows time synchronization, 3APA3A, 2004/08/24
- RE: [Full-Disclosure] Microsoft updates documentation on Windows time synchronization, Nicolas villatte, 2004/08/24
A word of caution on the use of suphp, Steven Van Acker, 2004/08/24
New google's top query?, Jérôme, 2004/08/24
- Re: New google's top query?, Luke Burton, 2004/08/26
- Re: New google's top query?, Alex Keller, 2004/08/27
  - Re: New google's top query?, Justin Wheeler, 2004/08/27
Multiple Cross Site Scripting Vulnerabilities in eGroupWare, Joxean Koret, 2004/08/24
DoS in Bird Chat 1.61, Donato Ferrante, 2004/08/23
MusicDaemon <= 0.0.3 /etc/shadow Stealer / DoS Exploit, Tal0n, 2004/08/23
Bugs fixed in Version 1.4.3, Joxean Koret, 2004/08/23
IE, Firefox, Opera DoS, exploits, 2004/08/23
- Re: IE, Firefox, Opera DoS, Dan Pixley, 2004/08/25
  - RE: IE, Firefox, Opera DoS, GulfTech Security, 2004/08/26
    - RE: IE, Firefox, Opera DoS (*not* a DoS, not even close), Steve R, 2004/08/28
KDE Security Advisory: Konqueror Cross-Domain Cookie Injection, Waldo Bastian, 2004/08/23
[Full-Disclosure] Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Serkan Akpolat, 2004/08/23
- [Full-Disclosure] Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Rodrigo Barbosa, 2004/08/24
  - [Full-Disclosure] Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Serkan Akpolat, 2004/08/24
- Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Jan Minar, 2004/08/25
  - Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Serkan Akpolat, 2004/08/27
[Full-Disclosure] [ GLSA 200408-21 ] Cacti: SQL injection vulnerability, Kurt Lieber, 2004/08/23
JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks, Dr Ponidi, 2004/08/23
[Full-Disclosure] ERRATA: [ GLSA 200406-14 ] aspell: Buffer overflow in word-list-compress, Kurt Lieber, 2004/08/23
[Full-Disclosure] [gentoo-announce] ERRATA: [ GLSA 200408-21 ] Cacti: SQL injection vulnerability, Sune Kloppenborg Jeppesen, 2004/08/23
[Full-Disclosure] [gentoo-announce] [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities, Kurt Lieber, 2004/08/23
Multiple vulnerabilities in MyDMS, Jose Antonio, 2004/08/22
Mantis Bugtracker Remote PHP Code Execution Vulnerability, Jose Antonio, 2004/08/22
[Full-Disclosure] [ GLSA 200408-20 ] Qt: Image loader overflows, Joshua J. Berry, 2004/08/22
Cross Site Scripting Vulnerability in Sympa, Jose Antonio, 2004/08/22
Multiple Vulnerabilities in Mantis Bugtracker, Jose Antonio, 2004/08/22
EXPLOIT: Qt bmp heap overflow, infamous41md, 2004/08/22
MDKSA-2004:086 - Updated kdelibs and kdebase packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/08/22
[Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers, bashis, 2004/08/22
- Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers, morning_wood, 2004/08/22
- Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers, bashis, 2004/08/24
- Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers, morning_wood, 2004/08/25
- Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers, bashis, 2004/08/27
NetBSD Security Advisory 2004-009: ftpd root escalation, NetBSD Security-Officer, 2004/08/22
Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer, Audun Larsen, 2004/08/22
BadBlue Webserver v2.5 Denial Of Service Vulnerability, GulfTech Security, 2004/08/22
[Fwd: Re: [vchkpw] vpopmail <= 5.4.2 (sybase vulnerability) (fwd)], Myron Davis, 2004/08/22
Buffer overflow in sarad, Matthias Bethke, 2004/08/21
What A Drag II XP SP2, http-equiv@excite.com, 2004/08/21
- What A Drag II XP SP2, http-equiv@excite.com, 2004/08/22
Unsecure file permission of ZoneAlarm pro., Bipin Gautam, 2004/08/21
- Re: Unsecure file permission of ZoneAlarm pro., Bipin Gautam, 2004/08/26
- RE: Unsecure file permission of ZoneAlarm pro., Simon Zuckerbraun, 2004/08/28
XV multiple buffer overflows, exploit included, infamous41md, 2004/08/21
Xines_Mine.c Open Security Group Advisory, c0ntex, 2004/08/21
[Full-Disclosure] CAU-2004-0002 - imwheel Predictable PidFile Name Race Condition, I)ruid, 2004/08/20
[security bulletin] SSRT3460 rev.3 HP-UX Network traffic can cause programs to fail, Boren, Rich (SSRT), 2004/08/20
SUSE Security Announcement: qt3 (SUSE-SA:2004:027), Thomas Biege, 2004/08/20
Breaking windows LM hashes using the Time-Memory Trade-Off : Optimization & new tool, Jérôme, 2004/08/20
recent iDefense advisories not being posted to bugtraq includes CVS information disclosure bug (CAN-2004-0778), Marc Bejarano, 2004/08/20
SHA-0 Broken, MD5 Rumored Broken, Jérôme, 2004/08/20
- Re: SHA-0 Broken, MD5 Rumored Broken, Anthony Nemmer, 2004/08/20
  - Re: SHA-0 Broken, MD5 Rumored Broken, stanislav shalunov, 2004/08/21
Immunity, Inc. Release: libdisassemble, dave, 2004/08/20
Open Security Group Advisory #6, c0ntex, 2004/08/20
MDKSA-2004:085 - Updated qt3 packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/08/19
CESA-2004-004: qt, chris, 2004/08/19
MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability, Mandrake Linux Security Team, 2004/08/19
- Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??), Joel D. Kinard, 2004/08/25
  - Re: MDKSA-2004:084 - Updated spamassassin packages fixes possible malformed message vulnerability (OpenBSD 3.5 too??), Gabriel Kihlman, 2004/08/26
[Full-Disclosure] [gentoo-announce] [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability, Joshua J. Berry, 2004/08/19
- Re: [ GLSA 200408-19 ] courier-imap: Remote Format String Vulnerability, infamous41md, 2004/08/22
MDKSA-2004:083 - Updated rsync packages fix remotely-exploitable vulnerability, Mandrake Linux Security Team, 2004/08/19
[Full-Disclosure] Security aspects of time synchronization infrastructure, 3APA3A, 2004/08/19
- RE: [Full-Disclosure] Security aspects of time synchronization infrastructure, joe, 2004/08/19
  - Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure, 3APA3A, 2004/08/20
    - RE: Re[2]: [Full-Disclosure] Security aspects of time synchronization infrastructure, joe, 2004/08/20
Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption, Jérôme, 2004/08/19
Vulnerabilities in Merak Webmail Server., Criolabs, 2004/08/19
Multiple vulnerabilities in PHP-FUSION, Ahmad Muammar, 2004/08/19
Cross-Site Scripting (XSS) in Php-Nuke 7.1.0, Abu Lafy, 2004/08/18
- Re: Cross-Site Scripting (XSS) in Php-Nuke 7.1.0, Anthony Petito, 2004/08/21
Opera Local File/Directory Detection (GM#009-OP), GreyMagic Software, 2004/08/18
[NGSEC-2004-6] IPD, local system denial of service., labs@NGSEC, 2004/08/18
LNSA-#2004-0017: rsync (Aug, 17 2004), Vincenzo Ciaglia, 2004/08/18
vpopmail <= 5.4.2 (sybase vulnerability), Jérôme, 2004/08/18
- [2Cents on] vpopmail <= 5.4.2 (sybase vulnerability), bugtraq, 2004/08/21
TSLSA-2004-0042 - rsync, Trustix Security Advisor, 2004/08/18
SQL Injection in CACTI, Fernando Quintero, 2004/08/18
- Re: SQL Injection in CACTI, Thomas Chiverton, 2004/08/18
  - Re: SQL Injection in CACTI, Cedric Blancher, 2004/08/20
- Re: SQL Injection in CACTI, Andy Markert, 2004/08/19
[Full-Disclosure] [ GLSA 200408-18 ] xine-lib: VCD MRL buffer overflow, Kurt Lieber, 2004/08/18
TSSA-2004-020-ES - rsync, tinysofa Security Team, 2004/08/18
First vulnerabilities in the SP2 - XP ?..., Jérôme, 2004/08/18
- Re: First vulnerabilities in the SP2 - XP ?..., Oliver Schneider, 2004/08/18
  - RE: First vulnerabilities in the SP2 - XP ?..., Larry Seltzer, 2004/08/20
- Re: First vulnerabilities in the SP2 - XP ?..., Colin Alston, 2004/08/18
- Re: First vulnerabilities in the SP2 - XP ?..., Radoslav DejanoviÄ, 2004/08/19
- Re: First vulnerabilities in the SP2 - XP ?..., Robert Decker, 2004/08/20
- RE: First vulnerabilities in the SP2 - XP ?..., Thor Larholm, 2004/08/20
- Re: First vulnerabilities in the SP2 - XP ?..., Matthew Roberts, 2004/08/21
  - RE: First vulnerabilities in the SP2 - XP ?..., Larry Seltzer, 2004/08/24
[Full-Disclosure] [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG, Kurt Lieber, 2004/08/18
- Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG, Jim Paris, 2004/08/22
  - Re: [ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG, Solar Designer, 2004/08/22
[Full-Disclosure] [ GLSA 200408-17 ] rsync: Potential information leakage, Kurt Lieber, 2004/08/18
[Full-Disclosure] Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection, Rohit Dube, 2004/08/18
- Re: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection, George Capehart, 2004/08/22
  - RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection, Rohit Dube, 2004/08/25
SUSE Security Announcement: rsync (SUSE-SA:2004:026), Thomas Biege, 2004/08/18
gv buffer overflows: here, there, and everywhere, infamous41md, 2004/08/18
pscript.de PFORUM XSS Vulnerability, Christoph Jeschke, 2004/08/18
NullyFake - Site Spoofing in MSIE, Liu Die Yu, 2004/08/18
[Full-Disclosure] IpSwitch IMail Server <= ver 8.1 User Password Decryption, Adik, 2004/08/16
- [Full-Disclosure] Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption, Dave Warren, 2004/08/18
  - [Full-Disclosure] Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption, buggy, 2004/08/18
- [Full-Disclosure] Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption, David E. Smith, 2004/08/19
- RE: [Full-Disclosure] IpSwitch IMail Server <= ver 8.1 User Password Decryption, Bill Roemhild, 2004/08/18
[Full-Disclosure] [ GLSA 200408-14 ] acroread: UUDecode filename buffer overflow, Sune Kloppenborg Jeppesen, 2004/08/15
[Full-Disclosure] [ GLSA 200408-15 ] Tomcat: Insecure Installation, Sune Kloppenborg Jeppesen, 2004/08/15
Posible security bug in phpMyWebhosting, Matias Neiff, 2004/08/14
- Re: Posible security bug in phpMyWebhosting, Müller, 2004/08/20
  - Re: Posible security bug in phpMyWebhosting, Daniel Souza, 2004/08/21
    - Re: Posible security bug in phpMyWebhosting, Udo Mueller, 2004/08/21
- Re: Fwd: Re: Posible security bug in phpMyWebhosting, Matias Neiff, 2004/08/24
SpecificMAIL Technical Brief, Nick D., 2004/08/14
- Re: SpecificMAIL Technical Brief, Skip Carter, 2004/08/18
QuiXplorer directory traversal, Cyrille Barthelemy, 2004/08/14
Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues, advisories, 2004/08/14
MDKSA-2004:082 - Updated mozilla packages fix multiple vulnerabilities, Mandrake Linux Security Team, 2004/08/13
[Full-Disclosure] SGI Advanced Linux Environment 3 Security Update #9, SGI Security Coordinator, 2004/08/13
[Full-Disclosure] SGI Advanced Linux Environment 2.4 security update #24, SGI Security Coordinator, 2004/08/13
recent gaim advisory, infamous41md, 2004/08/13
MDKSA-2004:081 - Updated gaim packages fix remotely exploitable vulnerabilities, Mandrake Linux Security Team, 2004/08/13
NGSEC's response to Idefense overflow protections whitepaper. (PART II), lists@NGSEC, 2004/08/13
Advanced usage of system() function., Adam Zabrocki, 2004/08/13
New Paper: Microsoft Windows, a lower Total Cost of Ownership, Dave Aitel, 2004/08/13
NETGEAR DG834G SPECIAL FEATURES, thanasonic, 2004/08/12
- Re: NETGEAR DG834G SPECIAL FEATURES, Uday Moorjani, 2004/08/13
- RE: NETGEAR DG834G SPECIAL FEATURES, Andre Lorbach, 2004/08/13
- Re: NETGEAR DG834G SPECIAL FEATURES, thanasonic, 2004/08/14
  - Re: NETGEAR DG834G SPECIAL FEATURES, Dave Paris, 2004/08/14
- Re: NETGEAR DG834G SPECIAL FEATURES, Paul James, 2004/08/28
  - Re: NETGEAR DG834G SPECIAL FEATURES, Rodrigo Barbosa, 2004/08/28
    - RE: NETGEAR DG834G SPECIAL FEATURES, prj, 2004/08/27
  - Re: NETGEAR DG834G SPECIAL FEATURES, Luca Berra, 2004/08/31
[Full-Disclosure] [ GLSA 200408-12 ] Gaim: MSN protocol parsing function buffer overflow, Sune Kloppenborg Jeppesen, 2004/08/12
[Full-Disclosure] [ GLSA 200408-13 ] kdebase, kdelibs: Multiple security issues, Sune Kloppenborg Jeppesen, 2004/08/12
JS/Zerolin, T.H. Haymore, 2004/08/12
- Re: JS/Zerolin, Nicolas Gregoire, 2004/08/13
  - Re: JS/Zerolin, T.H. Haymore, 2004/08/13
- Re: JS/Zerolin, K-OTiK Security, 2004/08/14
- RE: JS/Zerolin, Thor Larholm, 2004/08/14
SUSE Security Announcement: gaim (SUSE-SA:2004:025), Thomas Biege, 2004/08/12
[CLA-2004:858] Conectiva Security Announcement - squirrelmail, Conectiva Updates, 2004/08/12
Metasploit Framework v2.2, H D Moore, 2004/08/12
[Full-Disclosure] [ GLSA 200408-11 ] Nessus: "adduser" race condition vulnerability, Sune Kloppenborg Jeppesen, 2004/08/12
[Full-Disclosure] [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow, Sune Kloppenborg Jeppesen, 2004/08/12
- Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow, infamous41md, 2004/08/12
- [Full-Disclosure] Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow, Dan Margolis, 2004/08/14
  - Re: [Full-Disclosure] Re: [ GLSA 200408-10 ] gv: Exploitable Buffer Overflow, Barrie Dempster, 2004/08/14
SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest), Secure Science Corporation Advisory Notice, 2004/08/12
- Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest), Joe Eversole, 2004/08/12
  - Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest), Lance James, 2004/08/13
- Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest), Brad Herbert, 2004/08/13
Clearswift Mimesweeper Path Traversal Vulnerability, Kroma Pierre, 2004/08/12
- Re: Clearswift Mimesweeper Path Traversal Vulnerability, Pete Simpson, 2004/08/12
KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities, Waldo Bastian, 2004/08/12
[Full-Disclosure] [ GLSA 200408-09 ] Roundup filesystem access vulnerability, Kurt Lieber, 2004/08/12
[Full-Disclosure] ISS BlackIce Server Protect Unprivileged User Attack, Thomas Ryan, 2004/08/12
- Re: [Full-Disclosure] ISS BlackIce Server Protect Unprivileged User Attack, kf_lists, 2004/08/12
- RE: ISS BlackIce Server Protect Unprivileged User Attack, Herman Frederick Ebeling Jr., 2004/08/13
- [Full-Disclosure] ISS BlackIce Server Protect Unprivileged User Attack, Thomas Ryan, 2004/08/13
[Full-Disclosure] ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows, Pentest Security Advisories, 2004/08/12
EXPLOIT libpng, infamous41md, 2004/08/12
NGSEC's response to Idefense overflow protections whitepaper., lists@NGSEC, 2004/08/12
- RE: NGSEC's response to Idefense overflow protections whitepaper., Richard Johnson, 2004/08/12
[Full-Disclosure] RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability, Thor Larholm, 2004/08/12
Driver for display goes to a infinite loop by viewing a html!, Bipin Gautam, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Conor Byrne, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Eddie Block, 2004/08/12
  - [Full-Disclosure] Re: Driver for display goes to a infinite loop by viewing a html!, Steve Clement, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Anthony Petito, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Steven Leikeim, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Jack C, 2004/08/12
  - Re: Driver for display goes to a infinite loop by viewing a html!, Christopher X. Candreva, 2004/08/12
    - Re: Driver for display goes to a infinite loop by viewing a html!, Mike Pumford, 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, 3APA3A, 2004/08/12
- RE: Driver for display goes to a infinite loop by viewing a html!, Eggers, Bill A [LTD], 2004/08/12
- Re: Driver for display goes to a infinite loop by viewing a html!, Frank Nospam, 2004/08/13
- RE: Driver for display goes to a infinite loop by viewing a html!, Christopher Wagner, 2004/08/21
HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5, Amit Klein, 2004/08/12
BlackICE unprivileged local user attack, Paul Craig - Pimp Industries, 2004/08/12
[VulnWatch] ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows, Pentest Security Advisories, 2004/08/12
AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability, homicidal, 2004/08/12
- RE: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability, Thor Larholm, 2004/08/12
  - Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability, High Pressure, 2004/08/13
[Full-Disclosure] [ GLSA 200408-08 ] Cfengine : RSA Authentication Heap Corruption, Kurt Lieber, 2004/08/12
[Full-Disclosure] [sb] [ GLSA 200408-07 ] Horde-IMP: Input validation vulnerability for Internet Explorer users, Kurt Lieber, 2004/08/12
Corsaire Security Advisory - Port80 Software ServerMask inconsistencies, advisories, 2004/08/12
Corsaire Security Advisory - Sygate Enforcer discovery packet DoS issue, advisories, 2004/08/12
MDKSA-2004:080 - Updated shorewall packages fix temporary file vulnerabilities, Mandrake Linux Security Team, 2004/08/11
spamcop.net allows everyone to grab mail addresses and reset passwords, Henning Schmiedehausen, 2004/08/11
[security bulletin] SSRT4785 rev. 0 HP-UX Process Resource Manager (PRM) potential data corruption, Boren, Rich (SSRT), 2004/08/11
[Full-Disclosure] RE: Anyone know IBM's security address?, Michael Scheidell, 2004/08/11
- [Full-Disclosure] RE: Anyone know IBM's security address?, Discini, Sonny, 2004/08/11
[Full-Disclosure] iDEFENSE - New Tricks [web censorship!], Ben Ryan, 2004/08/11
[Full-Disclosure] [ GLSA 200408-07 ] Horde-IMP: Input validation vulnerability for Internet Explorer users, Kurt Lieber, 2004/08/11
Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue, advisories, 2004/08/10
Corsaire Security Advisory - Sygate Secure Enterprise replay issue, advisories, 2004/08/10
[security bulletin] SSRT4788 rev. 0 HP-UX Apache Remote arbitrary code execution, Boren, Rich (SSRT), 2004/08/10
First symbian OS trojan discovered in the wild, kers0r, 2004/08/10
CORE-2004-0714: Cfengine RSA Authentication Heap Corruption, CORE Security Technologies Advisories, 2004/08/10
[Full-Disclosure] [ GLSA 200408-06 ] SpamAssassin: Denial of Service vulnerability, Sune Kloppenborg Jeppesen, 2004/08/09
Windows doesn't verify digital signature of CRL files, Faro Poplar, 2004/08/09
- Re: Windows doesn't verify digital signature of CRL files, Thomas Walpuski, 2004/08/11
  - Re: Windows doesn't verify digital signature of CRL files, Neil Gierman, 2004/08/10
    - Re: Windows doesn't verify digital signature of CRL files, Jack Lloyd, 2004/08/12
    - Re: Windows doesn't verify digital signature of CRL files, Thomas Walpuski, 2004/08/12
    - Re: Windows doesn't verify digital signature of CRL files, Thomas Walpuski, 2004/08/12
  - Re: Windows doesn't verify digital signature of CRL files, Valdis . Kletnieks, 2004/08/12
- Windows doesn't verify digital signature of CRL files, Michael Howard, 2004/08/12
TSLSA-2004-0041 - kernel, Trustix Security Advisor, 2004/08/09
Java XSLT security advisory addendum, Marc Schoenefeld, 2004/08/09
Re: [PHP Bug] How to hide a HTTP request in the apache logs, Steve Brown, 2004/08/09
- Re: [PHP Bug] How to hide a HTTP request in the apache logs, Max Valdez, 2004/08/10
SUSE Security Announcement: kernel (SUSE-SA:2004:024), Thomas Biege, 2004/08/09
RE: [Full-Disclosure] DOS@MEHTTPS, Peter Fregon, 2004/08/09
Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability, Radoslav DejanoviÄ, 2004/08/09
- Re: SuSE Linux K-Menu YAST Control Center Priviledge Escalation Vulnerability, Matthias Leisi, 2004/08/09
Re: Winmx Software making calls to Port 25, Radoslav DejanoviÄ, 2004/08/09
RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Bart . Lansing, 2004/08/09
- RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Lyal Collins, 2004/08/10
Remote Command Execution, Francisco Alisson, 2004/08/06
- Remote Command Execution, Francisco Alisson, 2004/08/09
Opera: Location, Location, Location (GM#008-OP), GreyMagic Software, 2004/08/06
GNU/Linux 'info Buffer Overflow, Josh Martin, 2004/08/06
[CLA-2004:856] Conectiva Security Announcement - libpng, Conectiva Updates, 2004/08/06
[security bulletin] SSRT4782 rev. 1 HP-UX CIFS Server potential remote root access, Boren, Rich (SSRT), 2004/08/06
[CLA-2004:857] Conectiva Security Announcement - apache, Conectiva Updates, 2004/08/06
Microsoft Internet Explorer 6 Protocol Handler Vulnerability, Robillard, Nicolas, 2004/08/05
- Re: Microsoft Internet Explorer 6 Protocol Handler Vulnerability, Jouko Pynnonen, 2004/08/06
Re: CVS woes: .cvspass, Delian Krustev, 2004/08/05
- Re: CVS woes: .cvspass, Greg A. Woods, 2004/08/05
- Re: CVS woes: .cvspass, Andy Dustman, 2004/08/06
local denial of Service, Yellowdog linux to 3.0.1, pmoses, 2004/08/05
CVStrac Remote Arbitrary Code Execution exploit, Richard Ngo, 2004/08/05
International DNS compromise?, Zhen Shi, 2004/08/05
- Re: International DNS compromise?, john, 2004/08/05
- Re: International DNS compromise?, John Kinsella, 2004/08/05
- Re: International DNS compromise?, Troy, 2004/08/05
- RE: International DNS compromise?, travis . alexander, 2004/08/06
Re: New MyDoom variant, James C. Slora Jr., 2004/08/05
- Re: New MyDoom variant, Mary Landesman, 2004/08/05
- Re: New MyDoom variant, Thor, 2004/08/05
- Re: New MyDoom variant, Marc Hultquist, 2004/08/06
- Re: New MyDoom variant, Purple Pony, 2004/08/06
- RE: New MyDoom variant, Security Guy, 2004/08/06
Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Kevin Sheldrake, 2004/08/05
- Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Seth Breidbart, 2004/08/06
- RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Israel Torres, 2004/08/06
- RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Lyal Collins, 2004/08/06
  - RE: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Bart . Lansing, 2004/08/06
- Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards, Lee Dilkie, 2004/08/05
[Full-Disclosure] [ GLSA 200408-05 ] Opera: Multiple new vulnerabilities, Thierry Carrez, 2004/08/05
[Full-Disclosure] MS04-025 - Ignorance is truly bliss...., hellNbak, 2004/08/05
- [Full-Disclosure] Re: MS04-025 - Ignorance is truly bliss...., Ferguson, 2004/08/06
  - Re: [Full-Disclosure] Re: MS04-025 - Ignorance is truly bliss...., Georgi Guninski, 2004/08/06
[ GLSA 200408-03 ] libpng: Numerous vulnerabilities, Sune Kloppenborg Jeppesen, 2004/08/05
TSLSA-2004-0040 - libpng, Trustix Security Advisor, 2004/08/05
[SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities, Matt Zimmerman, 2004/08/05
[ GLSA 200408-04 ] PuTTY: Pre-authentication arbitrary code execution, Sune Kloppenborg Jeppesen, 2004/08/05
Opera: Location, Location, Location, GreyMagic Software, 2004/08/05