NTBugtraq (thread)

New URL spoofing bug in Microsoft Internet Explorer, Benjamin Franz, 2004/10/29
- Re: New URL spoofing bug in Microsoft Internet Explorer, Russ, 2004/10/29
  - Re: New URL spoofing bug in Microsoft Internet Explorer, Angus Scott-Fleming, 2004/10/31
  - Re: New URL spoofing bug in Microsoft Internet Explorer, Marjolein Katsma, 2004/10/31
  - Re: New URL spoofing bug in Microsoft Internet Explorer, Russ Thomas, 2004/10/31
- Re: New URL spoofing bug in Microsoft Internet Explorer, http-equiv@excite.com , 2004/10/30
- Re: New URL spoofing bug in Microsoft Internet Explorer, James C Slora Jr, 2004/10/31
- Re: New URL spoofing bug in Microsoft Internet Explorer, Yergeau, Tom, 2004/10/31
Presentation: Bypassing client application protection techniques with notepad, 3APA3A, 2004/10/29
Logon Hours and Local Admin Equivalence, William Lowry, 2004/10/28
Problems with MS04-032, Russ, 2004/10/28
EEYE: RealPlayer Zipped Skin File Buffer Overflow, Marc Maiffret, 2004/10/28
Any Authenticated User can Restart or Shutdown a Remote WinXP computer, G. Dell'Abate, 2004/10/26
Getting pop up, Philip Walley, 2004/10/26
Rendering large binary file as HTML makes Mozilla Firefox stop responding or crash, Peter Kruse, 2004/10/26
MinorRev: Microsoft Security Bulletin MS04-037 - Vulnerability in Windows Shell Could Allow Remote Code Execution (841356), Russ Cooper, 2004/10/26
BHO KB Link - How to Disable Third-Party Tool Bands and Browser Helper Objects, Duane Maurer II, 2004/10/26
Windows file I/O not internationalized, Paul Szabo, 2004/10/26
- Re: Windows file I/O not internationalized, Liu Die Yu, 2004/10/28
MSXML Service Packs, Joe Dance, 2004/10/26
- Re: MSXML Service Packs, Doug Neal, 2004/10/28
Proactive desktop protection (need beta testers), Bill Stout, 2004/10/21
[Full-Disclosure] Re: [Unpatched] New 0day exploit for XPSP2, Juergen Schmidt, 2004/10/20
[Full-Disclosure] RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2, Thor Larholm, 2004/10/20
- [Full-Disclosure] re: How to Break Windows XP SP2 + Internet Explorer 6 SP2, Michael Evanchik, 2004/10/26
3D-FTP vulnerable to DoS Attack, Cybertrion Systems, 2004/10/20
How to Break Windows XP SP2 + Internet Explorer 6 SP2, http-equiv@excite.com, 2004/10/20
- Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2, Steve Boyce, 2004/10/26
  - Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2, Tod Beardsley, 2004/10/28
pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security, Dragos Ruiu, 2004/10/20
Secunia Research: Multiple Browsers Tabbed Browsing Vulnerabilities, Jakob Balle, 2004/10/20
Administrivia #29691: TruSecure Global Risk Index Survey, Russ Cooper, 2004/10/19
- Re: Administrivia #29691: TruSecure Global Risk Index Survey, Russ, 2004/10/26
[Full-Disclosure] Major Client Crash in 3D FTP, Bakchodiya, 2004/10/19
[Full-Disclosure] Microsoft Windows Huge Text Processing Instability, Kaveh Mofidi, 2004/10/17
- Re: [Full-Disclosure] Microsoft Windows Huge Text Processing Instability, James Tucker, 2004/10/18
  - Reply: [Full-Disclosure] Microsoft Windows Huge Text Processing Instability, Kaveh Mofidi, 2004/10/19
[Full-Disclosure] Re: Writing Trojans that bypass Windows XP Service Pack 2 Firewall, mrinfosec, 2004/10/15
Re: Microsoft Security Bulletin MS04-038 - Cumulative Security Update for Internet Explorer (834707), Russ, 2004/10/15
Most Oct 2004 patches for NT won't install on Workstation, Reed Darsey, 2004/10/15
- Re: Most Oct 2004 patches for NT won't install on Workstation, Reed Darsey, 2004/10/26
Interesting thing about ICF and SP2, Erik Pace Birkholz, 2004/10/15
- Re: Interesting thing about ICF and SP2, Matt Ostiguy, 2004/10/15
- RE: Interesting thing about ICF and SP2, Moser, Scott, 2004/10/15
- RE: Interesting thing about ICF and SP2, Jim Harrison (ISA), 2004/10/15
  - Re: Interesting thing about ICF and SP2, Thor, 2004/10/18
  - Re: Interesting thing about ICF and SP2, Thor, 2004/10/19
ACROS Security: Session Fixation in JRun Management Console, ACROS Security, 2004/10/14
ACROS Security: HTML Injection in JRun Management Console, ACROS Security, 2004/10/14
ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response, ACROS Security, 2004/10/14
Windows Update Issue, Daniel Goymer, 2004/10/14
- Re: Windows Update Issue, Russ, 2004/10/15
SetWindowLong Shatter Attacks, Brett Moore, 2004/10/14
Buffer Overflow In Microsoft Excel, Brett Moore, 2004/10/14
IISShield and ASP.NET canonicalization, Tiago Halm, 2004/10/13
MS04-028 Enterprise Scanning Tool KB location, Russ, 2004/10/13
ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer, ACROS Security, 2004/10/13
EEYE: Windows VDM #UD Local Privilege Escalation, Derek Soeder, 2004/10/13
EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability, Derek Soeder, 2004/10/13
Regression in IE: Accessing remote/local content in IE (GM#009-IE), GreyMagic Security, 2004/10/13
CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities, CORE Security Technologies Advisories, 2004/10/12
- Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities, wirepair, 2004/10/12
MajorRev: v2.0 Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-038 - Cumulative Security Update for Internet Explorer (834707), Russ Cooper, 2004/10/12
- Scanner released to detect and repair MS04-028 infected JPEG files, Wayne - diamondcs.com.au, 2004/10/26
Alert: Microsoft Security Bulletin MS04-037 - Vulnerability in Windows Shell Could Allow Remote Code Execution (841356), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-036 - Vulnerability in NNTP Could Allow Remote Code Execution (883935), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-035 - Vulnerability in SMTP Could Allow Remote Code Execution (885881), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-034 - Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-033 - Vulnerability in Microsoft Excel Could Allow Remote Code Execution (886836), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-032 - Security Update for Microsoft Windows (840987), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-029 - Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-031 - Vulnerability in NetDDE Could Allow Remote Code Execution (841533), Russ Cooper, 2004/10/12
Alert: Microsoft Security Bulletin MS04-030 - Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service (824151), Russ Cooper, 2004/10/12
FYI: New location for the MS Knowledgebase, Russ, 2004/10/12
[Full-Disclosure] Writing Trojans that bypass Windows XP Service Pack 2 Firewall, americanidiot, 2004/10/12
- Message not available
  - Re: [Full-Disclosure] Writing Trojans that bypass Windows XP Service Pack 2 Firewall, Martin Mkrtchian, 2004/10/15
    - Re: [Full-Disclosure] Writing Trojans that bypass Windows XP Service Pack 2 Firewall, devis, 2004/10/16
MonkeyShell: using XML-RPC for access to a remote shell, Abe Usher, 2004/10/11
- Re: MonkeyShell: using XML-RPC for access to a remote shell, Darryl Luff, 2004/10/12
- Re: MonkeyShell: using XML-RPC for access to a remote shell, Barry Dorrans, 2004/10/15
[Full-Disclosure] Eudora 6.2.0.7 attachment spoof, Paul Szabo, 2004/10/10
Win XP SP 2 update operations update, Rob, grandpa of Ryan, Trevor, Devon & Hannah, 2004/10/09
Disclosure Debate - yet again, Russ, 2004/10/08
- Re: Disclosure Debate - yet again, Patrick Trapp, 2004/10/09
- Re: Disclosure Debate - yet again, Kurt, 2004/10/09
- Re: Disclosure Debate - yet again, Michael Watterson, 2004/10/09
- Re: Disclosure Debate - yet again, Matthew Ramadanovic, 2004/10/09
ActiveFile, XP+SP2, file download does not work, Bobby Ballard, 2004/10/08
High CPU = Poor disk I/O on Svr2003?, Joe Pochedley, 2004/10/08
More details on ASP.NET vulnerability, Mark Burnett, 2004/10/08
Who needs Real Player?, Bartlett,James D, 2004/10/08
Re: ASP.Net vulnerability, Russ, 2004/10/08
[Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Drew Copley, 2004/10/07
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Martin Viktora, 2004/10/08
  - Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, dave, 2004/10/08
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Jason Coombs PivX Solutions, 2004/10/07
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Tim Johnson, 2004/10/08
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Martin Viktora, 2004/10/08
  - Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Matthew S. Cramer, 2004/10/09
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, David Kennedy CISSP, 2004/10/08
- Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities, Ernst Lopes Cardozo, 2004/10/09
Microsoft Knowledge Base Article - 887459, John Galt, 2004/10/07
ASP.Net vulnerabillity, Steve Shockley, 2004/10/07
- Re: ASP.Net vulnerability, Brett Hill, 2004/10/07
[VulnWatch] Patch available for high risk flaws in the AtHoc Toolbar, NGSSoftware Insight Security Research, 2004/10/07
Darn if you do Darn if you don't., Castigliola, Angelo, 2004/10/07
- Message not available
  - Re: Darn if you do Darn if you don't., Brian S. Bergin, 2004/10/07
Patch available for high risk flaws in the AtHoc Toolbar, NGSSoftware Insight Security Research, 2004/10/07
- Patch available for high risk flaws in the AtHoc Toolbar, NGSSoftware Insight Security Research, 2004/10/07
nmapbot: using instant messaging as a remote administration tool, Abe Usher, 2004/10/07
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Drews, Jane E, 2004/10/07
Re: Need to purge vulnerable gdiplus.dll?, Don Arthurs, 2004/10/07
- Re: Need to purge vulnerable gdiplus.dll?, Ben, 2004/10/07
- Re: Need to purge vulnerable gdiplus.dll?, Ben Conrad, 2004/10/07
New Microsoft Security Response Center PGP Key [pgp], Microsoft Security Response Center, 2004/10/07
EEYE: RealPlayer pnen3260.dll Heap Overflow, Marc Maiffret, 2004/10/07
[VulnWatch] Patch available for multiple high risk vulnerabilities in RealPlayer, NGSSoftware Insight Security Research, 2004/10/07
Patch available for multiple high risk vulnerabilities in RealPlayer, NGSSoftware Insight Security Research, 2004/10/07
- Patch available for multiple high risk vulnerabilities in RealPlayer, NGSSoftware Insight Security Research, 2004/10/07
  - Disclosure policy in Re: RealPlayer vulnerabilities, Martin Viktora, 2004/10/07
[VulnWatch] Patch available for critical IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research, 2004/10/07
Patch available for critical IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research, 2004/10/07
- Patch available for critical IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research, 2004/10/07
CWS = Crummy Windows Security, Andrew Aronoff, 2004/10/01
- Re: CWS = Crummy Windows Security, Louis Solomon [SteelBytes], 2004/10/07
- Re: CWS = Crummy Windows Security, Ron Parker, 2004/10/07
- Possible new SP2 bug, Mitch Stein, 2004/10/07
- Re: CWS = Crummy Windows Security, Ron Parker, 2004/10/07
- Re: CWS = Crummy Windows Security, Mark Tassin, 2004/10/07
- Re: CWS = Crummy Windows Security, Andrew Aronoff, 2004/10/08
- Re: CWS = Crummy Windows Security, Bartlett,James D, 2004/10/08
- Re: CWS = Crummy Windows Security, Ron Parker, 2004/10/08