Bugtraq: by thread

Bugtraq: by thread

Previous period

257 messages starting Mar 01 99 and ending Mar 31 99
Date index | Thread index | Author index

Re: AltaVista Firewall97 Jochen Thomas Bauer (Mar 01)
[0z0n3] XCmail remotely exploitable vulnerability Arthur (Mar 01)
Multiple IMail Vulnerabilites Marc (Mar 01)
New OpenBSD security-related patches Theo de Raadt (Mar 02)
Defeating Solaris/SPARC Non-Executable Stack Protection John McDonald (Mar 02)
Remote OS Deception? Robert Wick (Mar 03)
- Security Conference Announcement: the Black Hat Briefings '99 Dominique Brezinski (Mar 03)
- Oracle Plaintext Password James Kivisild (Mar 04)
- Linux /usr/bin/gnuplot overflow xnec () INFERNO TUSCULUM EDU (Mar 04)
  - Re: Linux /usr/bin/gnuplot overflow Lars Hecking (Mar 05)
    - Re: Linux /usr/bin/gnuplot overflow Hans-Bernhard Broeker (Mar 05)
    - Re: Linux /usr/bin/gnuplot overflow Andrea Arcangeli (Mar 05)
    - buffer overflow in /usr/bin/cancel Josh A. Strickland (Mar 05)
    - Re: Linux /usr/bin/gnuplot overflow -- SuSE hasnt fixed lsof Mario Lorenz (Mar 05)
    - Update to Microsoft Security Bulletin (MS99-006) aleph1 () UNDERGROUND ORG (Mar 05)
    - More Internet Explorer zone confusion Jim Paris (Mar 05)
    - Re: More Internet Explorer zone confusion Walt Armour (Mar 08)
    - Re: More Internet Explorer zone confusion Jeremy Nimmer (Mar 08)
    - Re: More Internet Explorer zone confusion Jim Paris (Mar 08)
    - ISAPI Extension vulnerability allows to execute code as SYSTEM Aleph One (Mar 08)
    - Re: More Internet Explorer zone confusion David E. Smith (Mar 08)
    - Little exploit for startup scripts (SCO 5.0.4p). leshka (Mar 07)
    - Re: Little exploit for startup scripts (SCO 5.0.4p). Peter van Dijk (Mar 07)
    - Re: Little exploit for startup scripts (SCO 5.0.4p). Taneli Leppä (Mar 08)
    - Call for Papers: CQRE Detlef Hühnlein (Mar 08)
    - Re: Little exploit for startup scripts (SCO 5.0.4p). Jon Coyle (Mar 08)
Re: Linux /usr/bin/gnuplot overflow Speed (Mar 04)
- Re: Linux /usr/bin/gnuplot overflow Rich Lafferty (Mar 05)
- <Possible follow-ups>
- Re: Linux /usr/bin/gnuplot overflow Marc SCHAEFER (Mar 06)
- Re: Linux /usr/bin/gnuplot overflow Marc Heuse (Mar 06)
- Re: Linux /usr/bin/gnuplot overflow Marc Heuse (Mar 08)
IMAIL password recovery is trivial. Steven Alexander (Mar 04)
Re: More Internet Explorer zone confusion Oliver Lineham (Mar 08)
- <Possible follow-ups>
- Re: More Internet Explorer zone confusion iversen (Mar 08)
  - WinFreez.c Delmore (Mar 05)
  - The FPSC-IRCD.txt advisory syg FPSC (Mar 07)
    - Digital Unix 4 protected password database. James Clement (Mar 08)
    - Re: Digital Unix 4 protected password database. Chris Johnson (Mar 09)
    - Re: Digital Unix 4 protected password database. Jon Morgan (Mar 10)
    - Re: Digital Unix 4 protected password database. Alec Muffett (Mar 10)
    - Re: Digital Unix 4 protected password database. Keith Piepho (Mar 10)
    - Re: Digital Unix 4 protected password database. Solar Designer (Mar 13)
    - Default password in Bay Networks switches. Jan B. Koum (Mar 10)
    - Re: Default password in Bay Networks switches. Dax Kelson (Mar 10)
    - Re: Default password in Bay Networks switches. Dax Kelson (Mar 10)
    - Re: Default password in Bay Networks switches. Igor Sviridov (Mar 11)
    - Re: Default password in Bay Networks switches. Rolf Obrecht (Mar 12)
    - Re: The FPSC-IRCD.txt advisory Bjarni R. Einarsson (Mar 09)
    - Windows NT Screen Saver Vulnerability Aleph One (Mar 09)
  - Re: More Internet Explorer zone confusion Tilman Schmidt (Mar 08)
    - 64 bit Solaris 7 procfs bug Toomas Soome (Mar 09)
    - Re: More Internet Explorer zone confusion Jim Frost (Mar 09)
- Re: More Internet Explorer zone confusion Paul Leach (Mar 08)
  - Re: More Internet Explorer zone confusion Christopher Masto (Mar 08)
Update: HP printer vulnerabilities bwoodard () CISCO COM (Mar 08)
Netscape Communicator find() vulnerabilities Georgi Guninski (Mar 08)
SMTP server account probing Brett Glass (Mar 08)
- Re: SMTP server account probing Frank Miller (Mar 09)
- Re: SMTP server account probing John E. Martin (Mar 09)
  - Re: SMTP server account probing Brett Glass (Mar 09)
    - Re: SMTP server account probing Nick Andrew (Mar 09)
    - Re: SMTP server account probing Brian Behlendorf (Mar 09)
  - Re: SMTP server account probing Valdis.Kletnieks () VT EDU (Mar 09)
    - Re: SMTP server account probing Scott Fendley (Mar 09)
    - Re: SMTP server account probing Alexander Bochmann (Mar 10)
    - Re: SMTP server account probing Alan Cox (Mar 09)
  - Re: SMTP server account probing Ryan Permeh (Mar 09)
  - Re: SMTP server account probing Keith Woodworth (Mar 09)
  - Linux Blind TCP Spoofing Security Research Labs (Mar 09)
    - Re: Linux Blind TCP Spoofing John D. Hardin (Mar 09)
  - Winfreeze.c for Solaris ... Max Schubert (Mar 09)
- Re: SMTP server account probing GvS (Mar 09)
- Re: SMTP server account probing David Gale (Mar 09)
  - Re: SMTP server account probing James Lick (Mar 09)
  - Administrivia Aleph One (Mar 10)
- <Possible follow-ups>
- Re: SMTP server account probing Stefan Monnier (Mar 09)
- Re: SMTP server account probing Jose C. Oon (Mar 09)
- Re: SMTP server account probing Tobias J. Kreidl (Mar 10)
  - Re: SMTP server account probing typo () INFERNO TUSCULUM EDU (Mar 13)
X server font path buffer overflow vulnerability SGI Security Coordinator (Mar 08)
Re: More Internet Explorer zone confusion (new issue) Paul Leach (Mar 08)
- Re: More Internet Explorer zone confusion (new issue) Jeremie (Mar 08)
Re: buffer overflow in /usr/bin/cancel Anonymous (Mar 09)
Re: Linux Blind TCP Spoofing Jochen Thomas Bauer (Mar 10)
Re: Digital Unix 4 protected password database. Darren J Moffat - Enterprise Services OS Product Support Group (Mar 10)
- <Possible follow-ups>
- Re: Digital Unix 4 protected password database. der Mouse (Mar 10)
  - New Security Vulnerability in WinNT Alexandre Stervinou (Mar 12)
  - Re: Digital Unix 4 protected password database. Tim Pierce (Mar 12)
- Re: Digital Unix 4 protected password database. Nate Lawson (Mar 12)
  - Re: Digital Unix 4 protected password database. Alec Muffett (Mar 15)
- Re: Digital Unix 4 protected password database. Alec Muffett (Mar 16)
SMTP Abuse - Extracted domains from glpro.exe application Frank Miller (Mar 10)
Re: Linux Blind TCP Spoofing (fwd) John D. Hardin (Mar 10)
Re: 64 bit Solaris procfs bug Ed Arnold (Mar 10)
Re: Default password in Bay Networks switches. Jon Green (Mar 10)
- Re: Default password in Bay Networks switches. Dmitry Kohmanyuk Дмитрий Кохманюк (Mar 11)
- <Possible follow-ups>
- Re: Default password in Bay Networks switches. Greg Galloway (Mar 12)
  - Re: Default password in Bay Networks switches. Jan B. Koum (Mar 12)
  - Microsoft Security Bulletin (MS99-008) aleph1 () UNDERGROUND ORG (Mar 13)
Re: Winfreeze.c for Solaris ... Delmore (Mar 11)
Re: 64 Bit Solaris 7 procfs bug Toomas Soome (Mar 11)
Cisco security notice: Cisco 7xx TCP and HTTP vulnerabilities security-alert () cisco com (Mar 11)
ISS Security Advisory: Remote Reconfiguration and Denial of X-Force (Mar 11)
[Fwd: Shockwave 7 Security Hole] Sean Coates (Mar 11)
CFP: RAID99 - Recent Advances in Intrusion Detection Marc Dacier (Mar 11)
sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 11)
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Tim Pierce (Mar 12)
- <Possible follow-ups>
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Peter W (Mar 13)
- Re: sendmail 8.9.3 patches to curb RCPT harvesters Andy Church (Mar 13)
  - /usr/bin/doscmd on BSDI kasper (Mar 13)
    - Re: /usr/bin/doscmd on BSDI Warner Losh (Mar 17)
  - Re: sendmail 8.9.3 patches to curb RCPT harvesters Aggelos P. Varvitsiotis (Mar 15)
  - Lynx 2.8 overflow Mixter (Mar 15)
  - ISS Security Advisory: LDAP Buffer overflow against Microsoft X-Force (Mar 16)
  - Microsoft Security Bulletin (MS99-009) aleph1 () UNDERGROUND ORG (Mar 16)
Announce: vpnd 1.0.0 released A. Steinmetz (Mar 12)
Bug in IRC services fractalg (Mar 12)
- Re: Bug in IRC services Kevin Day (Mar 12)
- Re: Bug in IRC services David Schwartz (Mar 12)
- <Possible follow-ups>
- Re: Bug in IRC services Taral (Mar 12)
  - Re: Bug in IRC services Pedro Ribeiro (Mar 13)
    - Bug in IRC services Leal Duarte (Mar 13)
    - erps kasper (Mar 13)
    - GLPro.exe spam fix Kerb (Mar 14)
    - Microsoft's SMTP service broken/stupid Chris Adams (Mar 14)
    - Re: Microsoft's SMTP service broken/stupid Alan Brown (Mar 16)
- Re: Bug in IRC services Andy Church (Mar 12)
Netscape upgrade Keith Young (Mar 15)
- <Possible follow-ups>
- Re: Netscape upgrade Chris Price (Mar 16)
- Re: Netscape upgrade Georgi Guninski (Mar 16)
NetBSD Security Advisory 1999-006 matthew green (Mar 17)
Re: Netscape 4.51 Upgrade Boyce, Nick (Mar 17)
Re: Microsoft's SMTP service broken/stupid David Lemson (Mar 17)
- <Possible follow-ups>
- Re: Microsoft's SMTP service broken/stupid Bob Beck (Mar 17)
- Re: Microsoft's SMTP service broken/stupid David Lemson (Mar 17)
ISSalert: ISS Security Advisory: Short-Term High-Risk aleph1 () UNDERGROUND ORG (Mar 17)
NetBSD Security Advisory 1999-007 matthew green (Mar 18)
Re: /usr/bin/doscmd on BSDI Keith Bostic (Mar 18)
Security Bulletins Digest aleph1 () UNDERGROUND ORG (Mar 18)
- <Possible follow-ups>
- Security Bulletins Digest aleph1 () UNDERGROUND ORG (Mar 25)
IE5 - same vulnerabilities, only some fixed Most Psychoid (Mar 19)
- <Possible follow-ups>
- Re: IE5 - same vulnerabilities, only some fixed Stepan Stadnyk (Mar 19)
- Re: IE5 - same vulnerabilities, only some fixed Alan Chapman (Mar 22)
- Re: IE5 - same vulnerabilities, only some fixed Jim Reavis (Mar 25)
Promail trojan Patrick Oonk (Mar 19)
New Patches Address Privacy Concerns (fwd) Jon Katz (Mar 19)
The default permissions on /dev/kmem is insecure. Aleph One (Mar 19)
Eudora Attachment Buffer Overflow whiz (Mar 19)
wu-ftpd overflow. CyberPsychotic (Mar 21)
- Re: wu-ftpd overflow. Gregory A Lundberg (Mar 25)
X11R6 NetBSD Security Problem in.telnetd (Mar 21)
- Re: X11R6 NetBSD Security Problem in.telnetd (Mar 21)
  - Re: X11R6 NetBSD Security Problem Petras Sinkevicius (Mar 26)
- FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 22)
  - ANNOUNCE: New Security Tool: HostSentry 0.02 Alpha Craig H. Rowland (Mar 25)
  - Re: FrontPage + Apache + FreeBSD Roberto Grassi (Mar 26)
    - Re: FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 26)
- abuse of nickserv Nelson Little (Mar 23)
- Linux 2.2.3 patch to prevent FIN/NULL/XMAS scans Taral (Mar 24)
- not only NetBSD [was Re: X11R6 NetBSD Security Problem] Pavel Machek (Mar 26)
- Re: X11R6 NetBSD Security Problem Matthieu Herrb (Mar 26)
  - Re: X11R6 NetBSD Security Problem Kevin Vajk (Mar 28)
- wu-ftp 2.4.2 (release VR16) /bin/ftponly [ (Mar 27)
- SuSE Security Announcement - XFree86 Marc Heuse (Mar 28)
- <Possible follow-ups>
- Re: X11R6 NetBSD Security Problem /usr/libexec/telnetd (Mar 25)
ftp exploit Pieter Nieuwenhuijsen (Mar 22)
- <Possible follow-ups>
- Re: ftp exploit duke (Mar 23)
  - Re: ftp exploit Aleph One (Mar 26)
- ftp exploit Martin Bartosch (Mar 23)
OpenSSL/SSLeay Security Alert Ben Laurie (Mar 22)
New OpenBSD security patches Richard Trott (Mar 23)
- <Possible follow-ups>
- Re: New OpenBSD security patches Charles M. Hannum (Mar 25)
comment about ftp exploit Alex Yu (Mar 23)
Index Server 2.0 and the Registry Mnemonix (Mar 23)
Re: LNotes encryption IAKOVLEV () FR IBM COM (Mar 23)
WUftp scanner baku () EXCITE COM (Mar 24)
- Re: WUftp scanner Gregory A Lundberg (Mar 25)
- Re: WUftp scanner Scott Stone (Mar 26)
ISS Security Advisory: Remote Denial of Service Vulnerability in X-Force (Mar 24)
Cisco security notice: Cisco Catalyst Supervisor Remote Reload psirt () cisco com (Mar 24)
IE5 Feature/security hole Anthony Pijerov (Mar 24)
- Re: IE5 Feature/security hole Eilon Lipton (Mar 25)
- <Possible follow-ups>
- Re: IE5 Feature/security hole Juha Jäykkä (Mar 28)
  - XFree86 3.3.3 on RedHat 5.2. Why is RedHat waiting?? Domas Mituzas (Mar 29)
    - Re: XFree86 3.3.3 on RedHat 5.2. Why is RedHat waiting?? sillyhead (Mar 30)
    - XFree86 security problem Patrick J. Volkerding (Mar 31)
  - Re: IE5 Feature/security hole Eilon Lipton (Mar 29)
DoS for Linux 2.1.89 - 2.2.3: 0 length fragment bug John McDonald (Mar 24)
another ftp exploit Pieter Nieuwenhuijsen (Mar 25)
Netscape Communicator 4.51 allows sniffing of URLs from another Georgi Guninski (Mar 25)
Adminitrivia Aleph One (Mar 25)
ADM Worm. Worm for Linux x86 found in wild. Ben Cantrick (Mar 25)
- Re: ADM Worm. Worm for Linux x86 found in wild. Jim Paris (Mar 25)
- Re: ADM Worm. Worm for Linux x86 found in wild. Mixter (Mar 26)
- Malicious code detection and full disclosure Nate Lawson (Mar 27)
  - Re: Malicious code detection and full disclosure Nick FitzGerald (Mar 29)
    - Re: Malicious code detection and full disclosure Alan Cox (Mar 29)
- <Possible follow-ups>
- Re: ADM Worm. Worm for Linux x86 found in wild. Dep. de Teleinformática (Mar 26)
- Re: ADM Worm. Worm for Linux x86 found in wild. Dep. de Teleinformática (Mar 26)
Re: FrontPage + Apache + FreeBSD Forrest J. Cavalier III (Mar 25)
- <Possible follow-ups>
- Re: FrontPage + Apache + FreeBSD Paul Schandel (Mar 26)
  - Possible security hole Christoforos Karatzinis (Mar 26)
    - Re: Possible security hole Jason Costomiris (Mar 29)
    - Bypassing Excel Macro Virus Protection rotaiv (Mar 29)
  - Re: FrontPage + Apache + FreeBSD Gregory A. Carter (Mar 26)
- Re: FrontPage + Apache + FreeBSD Paul Schandel (Mar 26)
- Re: FrontPage + Apache + FreeBSD -Reply Bob McConnell (Mar 29)
Re: [Unet-Opers] abuse of nickserv (fwd) danny (Mar 25)
Re: abuse of nickserv StudNo1 (Mar 25)
Lotus Notes Encryption Bug Martin Bartosch (Mar 26)
- <Possible follow-ups>
- Re: Lotus Notes Encryption Bug IAKOVLEV () FR IBM COM (Mar 29)
ProMail trojan still available at some sites Patrick Oonk (Mar 26)
Re: another ftp exploit (fwd) Artem Malyshev (Mar 26)
Re: ADM w0rm The ADM Crew (Mar 26)
Re: Lotus Notes security advisory Kevin_Lynch/CAM/Lotus () LOTUS COM (Mar 26)
Melissa Macro Virus Aleph One (Mar 26)
- <Possible follow-ups>
- Re: Melissa Macro Virus Nate Lawson (Mar 26)
  - Re: Melissa Macro Virus Matthew Kirkwood (Mar 27)
    - Re: Melissa Macro Virus Nick FitzGerald (Mar 29)
- Re: Melissa Macro Virus Kuo, Jimmy (Mar 26)
- Re: Melissa Macro Virus Jim Reavis (Mar 26)
  - Re: Melissa Macro Virus Doug Granzow (Mar 29)
- Re: Melissa Macro Virus Brett Glass (Mar 28)
  - Bug in xfs Lukasz Trabinski (Mar 29)
    - ICQ Webserver bug Kerb (Mar 29)
    - IE 5.0 allows reading and sending local files to a remote server Georgi Guninski (Mar 30)
    - Excel Virus Seree Visitseelwat (Mar 30)
    - Re: IE 5.0 allows reading and sending local files to a remote Andrew Tulloch (Mar 31)
    - Procmail scanning for hostile macros in Microsoft document e-mail John D. Hardin (Mar 31)
    - Excel variant of Melissa Marcel de Haas (Mar 30)
    - Re: Excel variant of Melissa Ken Pfeil (Mar 31)
    - Re: Bug in xfs Roman Drahtmueller (Mar 30)
    - Re: Bug in xfs Matthieu Herrb (Mar 30)
    - Re: Bug in xfs Juha Virtanen (Mar 30)
    - Re: Bug in xfs Alan Cox (Mar 31)
    - [support_feedback () us-support external hp com: Security Bulletins Patrick Oonk (Mar 31)
  - Re: Melissa Macro Virus Bronek Kozicki (Mar 30)
    - Re: Melissa Macro Virus Brett Glass (Mar 30)
    - Re: Melissa Macro Virus Dimitry Andric (Mar 31)
    - Potential vulnerability in SCO TermVision Windows 95 client JJ Gray (Mar 31)
- Re: Melissa Macro Virus Darryl Braaten (Mar 29)
- Re: Melissa Macro Virus Rodefeld, Sonja (Mar 31)
Melissa virus code Nate Lawson (Mar 26)
Fwd: CERT Advisory CA-99.04 - Melissa Macro Virus Charles J Anthe (Mar 27)
Microsoft Security Bulletin (MS99-010) aleph1 () UNDERGROUND ORG (Mar 27)
Re: Blocking the Melissa Trojan John D. Hardin (Mar 27)
Re: Possible security hole Ryan Russell (Mar 28)
- Re: Possible security hole Darren Reed (Mar 29)
- <Possible follow-ups>
- Re: Possible security hole Cristiano Lincoln Mattos (Mar 29)
- Re: Possible security hole Warren Barrow (Mar 29)
- Re: Possible security hole Ryan Russell (Mar 29)
linux insmod bug/security vulnerability Brian Szymanski (Mar 30)
SECURITY: various packages updated (pine, mutt, sysklogd, sillyhead (Mar 30)
Re: IE 5.0 allows reading and sending local files to a remote root (Mar 30)
Caveat on Melissa Macro Virus Phil Cox (Mar 31)
ISSalert: ISS Security Advisory -- WebRamp Denial of Service aleph1 () UNDERGROUND ORG (Mar 31)
VENGINE: Polymorphizer for MS-Word macro viruses Aleph One (Mar 31)

Previous period