Bugtraq mailing list archives

Re: freebsd libncurses overflow

From: deraadt () CVS OPENBSD ORG (Theo de Raadt)
Date: Wed, 26 Apr 2000 01:09:53 -0600

PS. Not speaking on behalf of FreeBSD.


Speaking on behalf of OpenBSD, and a quite bit drunk from the really
delicious Guiness (TM) I had just recently:

not vulnerable, blah, blah, blah

Current thread:

IE 5 security vulnerablity - circumventing Cross-frame security policy using Java/JavaScript (and disabling Active Scripting is not that easy) Georgi Guninski (Apr 18)
- RFP2K03: Contemplations on dvwssr.dll and its affects on life rain forest puppy (Apr 20)
- Microsoft Security Bulletin (MS00-026) Microsoft Product Security (Apr 20)
- Re: IE 5 security vulnerablity - circumventing Cross-frame security policy using Java/JavaScript (and disabling Active Scripting is not that easy) TAKAGI, Hiromitsu (Apr 20)
  - freebsd libncurses overflow Przemyslaw Frasunek (Apr 24)
    - Re: freebsd libncurses overflow Kris Kennaway (Apr 24)
    - Re: freebsd libncurses overflow Kris Kennaway (Apr 24)
    - Re: freebsd libncurses overflow Przemyslaw Frasunek (Apr 25)
    - Re: freebsd libncurses overflow Bill Fumerola (Apr 24)
    - Re: freebsd libncurses overflow Theo de Raadt (Apr 26)
    - Denial of Service Against pcAnywhere. Vacuum (Apr 25)
  - Re: IE 5 security vulnerablity - circumventing Cross-framesecurity policy using Java/JavaScript (and disabling ActiveScripting is not that easy) Georgi Guninski (Apr 24)
  - Hotmail security hole - injecting JavaScript in IE using "@import url(http://host/hostile.css)" Georgi Guninski (Apr 24)
- ZoneAlarm Wally Whacker (Apr 20)
  - Re: ZoneAlarm Gary Buckmaster (Apr 22)
  - CVS DoS Michal Szymanski (Apr 23)
    - Re: CVS DoS Kris Kennaway (Apr 24)
    - Re: CVS DoS Kris Kennaway (Apr 24)
    - finding Meeting Maker passwords using tcpdump mhpower () MIT EDU (Apr 24)
    - ZoneAlarm Vulnerability Alfred Huger (Apr 25)

(Thread continues...)