Bugtraq: by date

150 messages starting Sep 28 97 and ending Oct 31 97
Date index | Thread index | Author index


Sunday, 28 September

TCPwrappers race condition Thamer Al-Herbish

Monday, 29 September

Re: msql access control thoth () PURPLEFROG COM

Wednesday, 01 October

Security Bulletin for telnet services in HP-UX rel. 10.30 Aleph One
rlogin authentication bug Aleph One
rlogin authentication bug Aleph One
Notice: serious security problem in Cisco PPP/CHAP John Bashinski
underestimating crackers Tim Newsham
[RISKS DIGEST 19.40] Possible breakthrough in NP-completeness Brian Tao

Thursday, 02 October

IE4 and channels Alan Cox
IE4 and channels Jon Cargille
Possible weakness in LPD protocol Bennett Samowich
NT Domain Authentication Protocol - draft Aleph One
NP-complete solution given is exponential Aleph One
Sec. Bulletin for mediainit(1) in HP-UX 9.X and 10.X Aleph One
Re: NP-completeness algorithm: errata Aleph One
Re: Possible weakness in LPD protocol Thomas Roessler
SNI-19:BSD lpd vulnerability Oliver Friedrichs
Re: TCPwrappers race condition der Mouse
Re: IE4 and channels Phillip Hallam-Baker
Re: underestimating crackers John Bashinski

Friday, 03 October

Re: TCPwrappers race condition Nicolai E M Plum
Re: Possible weakness in LPD protocol Warner Losh
Re: TCPwrappers race condition Wietse Venema
Majordomo 1.94.4 released -- SECURITY FIXES Aleph One
web.sql vulnerability Aleph One
Re: Possible weakness in LPD protocol Oliver Friedrichs
Re: TCPwrappers race condition John W. Temples
Re: Possible weakness in LPD protocol Christopher Masto
Re: Possible weakness in LPD protocol Eivind Eklund
xc Aleph One
Re: TCPwrappers race condition Wietse Venema
Solaris 2.6 and sockets Wojciech Tryc

Saturday, 04 October

DUnix 4.x: way to fix tcp/ip sequence predictability (fwd) Jeremy Fischer
HP Laserjet 4M Plus DirectJet Problem Klaus Steding-Jessen
Re: HP Laserjet 4M Plus DirectJet Problem Darren Reed
Re: Solaris 2.6 and sockets Theo de Raadt

Sunday, 05 October

Re: Solaris 2.6 and sockets Thamer Al-Herbish
Re: TCPwrappers race condition der Mouse
Re: HP Laserjet 4M Plus DirectJet Problem Bill Paul
Re: TCPwrappers race condition Thamer Al-Herbish
Re: Possible weakness in LPD protocol Doug Hughes
Re: HP Laserjet 4M Plus DirectJet Problem David LeBlanc

Monday, 06 October

Re: Solaris 2.6 and sockets Casper Dik
HP-UX tcp_random_seq Aleph One
Flaw in DNS Phillip R. Jaenke
Re: Solaris 2.6 and sockets Edsel Adap
KSR[T] Advisory #3: updatedb / crontabs KSR[T]

Tuesday, 07 October

Re: HP-UX tcp_random_seq Casper Dik
X Security: a summary Lionel Cons

Wednesday, 08 October

Re: Possible weakness in LPD protocol Brett Lymn
L0pht Advisory: IMAP4rev1 imapd server We got Food - Fuel - Ice-cold Beer - and X.509 certificates
Another way to exploit local classes in Java Andre L. Dos Santos
Re: L0pht Advisory: IMAP4rev1 imapd server Marc Slemko
SNMP Insecurity Aleph One
Malicious Linux modules Runar Jensen

Thursday, 09 October

Re: L0pht Advisory: IMAP4rev1 imapd server Casper Dik
Security flaw in PGPverify of INN Lutz Donnerhacke
Re: L0pht Advisory: IMAP4rev1 imapd server Kragen Sitaker

Friday, 10 October

Security flaw in Count.cgi (wwwcount) Razvan Dragomirescu

Saturday, 11 October

Huge security holes in Microsoft FP98 server extensions for Apache Marc Slemko
Re: Huge security holes in Microsoft FP98 server extensions for Aleph One
DOS PC FTP SERVER Efrain Torres Mejia
_very_ poor ISN generation on Ascend MAX (fwd) Marc Slemko

Sunday, 12 October

`smurf' multi-broadcast icmp attack T. Freak
Re: Solaris 2.6 and sockets Eivind Eklund
Security flaws in Yahoo Mail andrew shieh

Monday, 13 October

Re: DOS PC FTP SERVER David LeBlanc
Re: Security flaw in Count.cgi (wwwcount) Jaroslav Benkovsky
Re: Security flaws in Yahoo Mail Marc Slemko
Re: `smurf' multi-broadcast icmp attack Craig A. Huegen
Re: `smurf' multi-broadcast icmp attack Ben
broadcast ip scanning script hyped
Re: HP Laserjet 4M Plus DirectJet Problem lee () SWIFTMAIL COM
smurf.c ported to freebsd and friends Jimbo Bahooli

Tuesday, 14 October

Re: Security flaw in PGPverify of INN Peter Simons
CERT Vendor-Initiated Bulletin VB-97.11 - NEC Corp. Aleph One
Alert Seattle Lab Sendmail v2.5 for NT vulnerable David LeBlanc
Re: Security flaws in Yahoo Mail Andrew Brown

Thursday, 16 October

Re: `smurf' multi-broadcast icmp attack Therapy?
Re: `smurf' multi-broadcast icmp attack Jon Lewis
Re: `smurf' multi-broadcast icmp attack Brad Powell
Update - Seattle Lab Slmail v2.5 for NT vulnerable David LeBlanc
wwwcount remote exploit Nicolas Dubee
Run, RunOnce and Uninstall Registry Keys Vulnerability Aleph One

Friday, 17 October

Re: wwwcount remote exploit (@ Solaris) Jan Wedekind
Security Hole in Explorer 4.0 Aleph One
computer immunology VaX#n8
Jabadoo Security Hack Aleph One

Saturday, 18 October

Re: WinNT syscalls insecurity Roger Espel Llima

Sunday, 19 October

WinNT syscalls insecurity Solar Designer
Re: WinNT syscalls insecurity Bst Perez Companc
Re: WinNT syscalls insecurity David LeBlanc
Vulnerability in PHP Example Logging Scripts bryan berg
Followup to PHP bug bryan berg

Monday, 20 October

LPRng security Aleph One

Tuesday, 21 October

Remotely kill Solaris syslogd lb - STAFF
Re: Remotely kill Solaris syslogd Andrew Reynhout
Oops: Re: Remotely kill Solaris syslogd Andrew Reynhout
Re: remotely kill solaris syslogd Chris Wilson
Responses to syslogd killing lb
SNI-19: BSD lpd vulnerabilities (UPDATE) Secure Networks Inc.
Re: Responses to syslogd killing Zack Weinberg
Re: WinNT syscalls insecurity Solar Designer
SNI-20: Telnetd tgetent vulnerability Secure Networks Inc.
Re: SNI-20: Telnetd tgetent vulnerability Theo de Raadt
Re: remotely kill solaris syslogd Jason R Mastaler

Wednesday, 22 October

Majordomo and EXPN James Ponder
Re: Majordomo and EXPN Christopher M. Conway
Re: SNI-20: Telnetd tgetent vulnerability Aleph One
ISS Security Alert X-Force
Re: ISS Security Alert Aleph One
BSDI termcap exploit Joseph_K
BSDI xterm_color/kterm exploit Ladislav Bukvicka

Thursday, 23 October

Re: ISS Security Alert David LeBlanc
Possible SERIOUS bug in open()? Aleph One
Re: Possible SERIOUS bug in open()? Aleph One
Re: remotely kill solaris syslogd Paul Tatarsky
IRIX /var/inst/patchbase Paul Tatarsky

Friday, 24 October

Cute SPARC CPU bug Charles M. Hannum
Re: Cute SPARC CPU bug Charles M. Hannum
a bug in IRIX open() as well [was Re: Possible SERIOUS bug in Mike Kienenberger
Re: Redir games with ARP and ICMP John McDonald
Vulnerability in metamail Alan Cox
Re: Cute SPARC CPU bug Dmitry Kohmanyuk Дмитрий Кохманюк
Re: Possible SERIOUS bug in open()? Theo de Raadt
Re: Possible SERIOUS bug in open()? Theo de Raadt
More info on SPARC CPU bug Charles M. Hannum
Re: Possible SERIOUS bug in open()? Mark E. Mallett

Saturday, 25 October

Re: SECURITY: groff, rhs-printfilters, tetex, metamail fixes Savochkin Andrey Vladimirovich
Re: IRIX /var/inst/patchbase Alain Renaud
KSR[T] Advisory #004: printfilter / groff / lpd KSR[T]
Re: Possible SERIOUS bug in open()? Tim Newsham
Re: Possible SERIOUS bug in open()? Mark E. Mallett
SECURITY: metamail update (fwd) Raymond Dijkxhoorn
Re: Vulnerability in metamail der Mouse
Re: Vulnerability in metamail Kev

Monday, 27 October

CERT Vendor-Initiated Bulletin VB-97.12 - opengroup Aleph One

Tuesday, 28 October

Sun Security Bulletin #00155 (fwd) Howie
Sun Security Bulletin #00156 (fwd) Howie
Sun Security Bulletin #00157 Aleph One
Sun Security Bulletin #00158 Aleph One
IBM-ERS Security Vulnerability Alert: Buffer overflows in the ers () VNET IBM COM

Wednesday, 29 October

Security Vulnerability in CDE on HP-UX 10.0[1,2,3] Aleph One
IBM-ERS Security Vulnerability Alert: Buffer overflow and ers () VNET IBM COM
IBM-ERS Security Vulnerability Alert: The AIX piodmgrsu command ers () VNET IBM COM
IBM-ERS Security Vulnerability Alert: The AIX ftp client ers () VNET IBM COM
FreeBSD Security Advisory: FreeBSD-SA-97:05.open Aleph One

Thursday, 30 October

Re: IBM-ERS Security Vulnerability Alert: The AIX ftp client Miguel Angel Rodriguez Jodar
Re: FW: Apache Fix Jonathan H. Pickard

Friday, 31 October

Re: [seg-l] Passwords en Cisco (fwd) Gustavo A. Lozano