Bugtraq: by date

311 messages starting Oct 31 01 and ending Nov 30 01
Date index | Thread index | Author index


Wednesday, 31 October

Re: Bug in scp v3.0.1 Matt Forrest
Re: Bug in scp v3.0.1 Brad Arlt
Re: Bug in scp v3.0.1 Nate Eldredge
Re: Lotus Domino View ACL by-pass (#NISR29102001C) Russell Handorf
RE: Bug in scp v3.0.1 Jonathan A. Zdziarski
Re: Lotus Domino View ACL by-pass (#NISR29102001C) Darren Davison

Thursday, 01 November

[RHSA-2001:138-10] Comprehensive Printing Update bugzilla
Vulnerability in Viralator proxy extension Peter Conrad
Formatting string bug on cyrus-sasl library Kari Hurtta
Security Update: [CSSA-2001-037.0] Linux - libdb buffer overflow problem Support Info
Fuse Talk vulnerability Anthony Cole
[ESA-20011101-01] webalizer: cross-site scripting vulnerability EnGarde Secure Linux
MDKSA-2001:084 - util-linux update Linux Mandrake Security Team
MDKSA-2001:083 - htdig update Linux Mandrake Security Team
Re: MacOS 9.x, Internet Explorer, Local Vulnerability CDE Francis
Three Windows XP UPNP DOS attacks 'ken'@FTU
Microsoft Security Bulletin MS01-054 Microsoft Product Security

Friday, 02 November

Progres Databse PROMSGS Format strings issue. KF

Saturday, 03 November

Microsoft ISA Server Fragmented Udp Flood Vulnerability Tamer Sahin
SuSE Security Announcement: kernel (update) (SuSE-SA:2001:039) Roman Drahtmueller
Downloading individual patch for MS01-054 Eric

Sunday, 04 November

xmms/xchat full access shared memory segments Julien VANEGUE
vulnerability diagnosis in "nessus" incorrect... Bruce Campbell
Minor IE System Info Disclosure dzzie

Monday, 05 November

Re: vulnerability diagnosis in "nessus" incorrect... Renaud Deraison
def-2001-31 andreas junestam
RH Linux Tux HTTPD DoS Aiden ORawe
New getAccess[tm] Vulnerability rudi carell
Entrust Bulletin E01-005: GetAccess Access Service vulnerability Eric Skinner

Thursday, 08 November

IBM AS/400 HTTP Server '/' attack 'ken'@FTU
[CLA-2001:434] Conectiva Linux Security Announcement - w3m secure
RE: IBM AS/400 HTTP Server '/' attack Chris Best
Re: IBM AS/400 HTTP Server '/' attack Felix Huber
Re: IBM AS/400 HTTP Server '/' attack Joe Laffey
RE: Microsoft ISA Server Fragmented Udp Flood Vulnerability Microsoft Security Response Center
Blocking Nimda and kin Brett Glass
ZoneAlarm Pro Local Internet not only Locally! Philip Wagenaar
Security Update: [CSSA-2001-38.0] Linux - syncookies firewall breaking problem Support Info
[ESA-20011106-01] kernel: Syncookie vulnerability EnGarde Secure Linux
Copying and Deleting Files Using PHP-Nuke masa
SuSE Security Announcement: webalizer (SuSE-SA:2001:040) Thomas Biege
Re: def-2001-31 johncybpk
Microsoft IE cookies readable via about: URLS Jouko Pynnonen
IP ID could allow to scan a masquerade network. Elie aka "Lupin" Bursztein
CERT Advisory CA-2001-30 Multiple Vulnerabilities in lpd CERT Advisory
Security Update: [CSSA-2001-SCO.30] Open UNIX, UnixWare 7: DCE SPC library buffer overflow security-alert
[CLA-2001:433] Conectiva Linux Security Announcement - procmail secure
Security Update: [CSSA-2001-SCO.31] OpenServer: Sendmail debug input validation buffer overflow security-alert
Important Information Regarding MS01-054 and WindowsME Microsoft Product Security
Re: Blocking Nimda and kin Peter W
Re: ZoneAlarm Pro Local Internet not only Locally! Kutulu
Re: Blocking Nimda and kin Brett Glass
ClearCase db_loader TERM environment variable buffer overflow vulnerability xundi
[RHSA-2001:147-09] remote exploit possible in lpd bugzilla
Microsoft Security Bulletin MS01-055 Microsoft Product Security
Re: IBM AS/400 HTTP Server '/' attack Thor

Friday, 09 November

Analysis of SSH crc32 compensation attack detector exploit Dave Dittrich
Extracting a 3DES key from an IBM 4758 aleph1
Re: Microsoft IE cookies readable via about: URLS Nick FitzGerald
Re: Microsoft Security Bulletin MS01-055 CDE Francis
Imp Webmail session hijacking vulnerability Joao Pedro Goncalves

Saturday, 10 November

IMP 2.2.7 (SECURITY) released Brent J. Nordquist
Re: Microsoft IE cookies readable via about: URLS Jeffrey W. Dronenburg

Monday, 12 November

Stock portfolio sent via clear text in Datek Streamer® application Chris Grout
RE: Microsoft IE cookies readable via about: URLS Oliver Petruzel
Re: Microsoft Security Bulletin MS01-055 Tobias DiPasquale
Re: Microsoft IE cookies readable via about: URLS Clover Andrew
Fwd: Possible DDOS network being built through ssh1 crc compromised hosts William Salusky
Re: Microsoft Security Bulletin MS01-055 Clover Andrew
Re: Microsoft IE cookies readable via about: URLS Thomas Reinke
Re: Microsoft IE cookies readable via about: URLS Valdis . Kletnieks
MS SQL 7.0 DTS saved packages contain plain text passwords Floyd Russell
ISS Security Advisory: Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service X-Force
RADIX1112200102 research
RADIX1112200103 research
RADIX1112200101 research
CERT Advisory CA-2001-31 Buffer Overflow in CDE Subprocess Control Service CERT Advisory
OpenSSH & S/Key information leakage Joel Maslak
RE: Microsoft IE cookies readable via about: URLS Per Arne Johansson
Security Update: [CSSA-2001-SCO.32] Open UNIX, UnixWare 7: buffer overflow in ppp utilities security
An Analysis of the RADIUS Authentication Protocol Joshua Hill

Tuesday, 13 November

More problems with RADIUS (protocol and implementations) 3APA3A
UPDATED: Cisco SSH Advisory Damir Rajnovic
Re: OpenSSH & S/Key information leakage Markus Friedl
FW: [advisory] SSRT0767u Potential rpc.ttdbserverd buffer overflow Boren, Rich (SSRT)
Brute-Forcing Web Application Session IDs dendler
security bulletins digest IT Resource Center
[body_4436058-1602048802 () hermes java sun com: Sun Security Bulletin #00212] Patrick Oonk
[RHSA-2001:148-09] Red Hat Linux 7.1 Korean installation program creates files with bad umask bugzilla
Re: More problems with RADIUS (protocol and implementations) aland
Re: IBM AS/400 HTTP Server '/' attack Mike Turk
Re: ZoneAlarm Pro Local Internet not only Locally! Justin Morgan
Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln zeno
Subversive Dynamic Linking on UNIX Platforms grugq
Re: More problems with RADIUS (protocol and implementations) Joshua Hill
Re: More problems with RADIUS (protocol and implementations) Miquel van Smoorenburg
Microsoft Security Bulletin MS01-054 (Version 2.0) Microsoft Product Security

Wednesday, 14 November

Security Bugware Announcement Security Bugware Team
[SECURITY] [DSA 086-1] New versions of ssh-nonfree & ssh-socks fix buffer overflow Michael Stone
Re: Microsoft IE cookies readable via about: URLS Kristian Strickland
RE:Radix Research Reports RADIX1112200101, RADIX1112200102, and RADIX1112200103 Microsoft Security Response Center
Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Cisco Systems Product Security Incident Response Team
SCO skunkware top format strings issue KF
Microsoft Security Bulletin MS01-055 (Version 2.0) Microsoft Product Security
Re: Analysis of SSH crc32 compensation attack detector exploit Dave Dittrich
more RADIUS authentication attack scenarios 3APA3A
Re: Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln Klaxon
Re: Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln zeno
Cisco Security Advisory: Multiple Vulnerabilities in Access Control List Implementation for Cisco 12000 Series Internet Router Cisco Systems Product Security Incident Response Team
Xato Advisory: Win2k/XP Terminal Services IP Spoofing sozni
Re: Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln Ben Okopnik

Thursday, 15 November

NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Nsfocus Security Team
the other IE cookie stealing bug (MS01-055) Marc Slemko
Postfix session log memory exhaustion bugfix Wietse Venema
Several javascript vulnerabilities in Opera Georgi Guninski
UBB vulnerablietis + about: using example kyprizel
Re: Microsoft IE cookies readable via about: URLS Peter W
Digital Unix CDE dtaction vulnerability concept of proof code SeungHyun Seo
Security Update: [CSSA-2001-SCO.33] OpenServer 5.0.5: nmap port scanner can kill inetd security
Re: OpenSSH & S/Key information leakage Alan J Rosenthal
Cisco Security Advisory: IOS ARP Table Overwrite Vulnerability Cisco Systems Product Security Incident Response Team
Re: UBB vulnerablietis + about: using example David Dreezer
AT&T/@Home Cable Modem Enumeration uid0
Re: Digital Unix CDE dtaction vulnerability concept of proof code Dan Stromberg
Charter One Bank privacy/security hole Dustin Miller
Re: Several javascript vulnerabilities in Opera Andreas Sandblad
RE: Microsoft IE cookies readable via about: URLS Kristian Strickland
/usr/bin/write (solaris2.x) Segmentation Fault SChoe
Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Jim
RE: Digital Unix CDE dtaction vulnerability concept of proof code Durell, Matthew
Re: /usr/bin/write (solaris2.x) Segmentation Fault Rich Teer

Friday, 16 November

Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution Cabezon Aurélien
buffer overflow in solaris 'format' command [non-root] Mike Furr
[CLA-2001:437] Conectiva Linux Security Announcement - imp secure

Monday, 19 November

Re: OpenSSH & S/Key information leakage Robert Bihlmeyer
Security Update: [CSSA-2001-SCO.34] Open UNIX, UnixWare 7: xlock buffer overflow security
RE: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overf low Vulnerability Hack Kampbjørn
Re: the other IE cookie stealing bug (MS01-055) CDE Francis
How to use Google to find confidential informations Vincent GAILLOT
Cross Site Scripting holes abound security
Re: OpenSSH & S/Key information leakage Pavel Kankovsky
Trouble with cookies and redirect Ulf Harnhammar
MSIE 5.5/6 Q312461 patch disclose patch information KOJIMA Hajime
CfP: 18th annual Chaos Communication Congress, Berlin, Germany 18C3 Crew
Re: Analysis of SSH crc32 compensation attack detector exploit Florian Weimer
Gallery Addon for PhpNuke remote file viewing vulnerability Cabezon Aurélien
(2) IE cookies assigned to RAM disk survive reboot -- and history too Thomas C. Greene
IE cookies assigned to RAM disk survive reboot Thomas C. Greene
Re: How to use Google to find confidential informations Michele Finelli
RE: Charter One Bank privacy/security hole Dustin Miller
RE: IE cookies assigned to RAM disk survive reboot Moorhouse, Walt P
Re: IE cookies assigned to RAM disk survive reboot ian . cowan

Tuesday, 20 November

OpenSSH 3.0.1 (fwd) Jonas Eriksson
Vendors For WU-FTPD Please Read Vulnerability Help
Microsoft admits IE security alert lapse Alfred Huger
IIS logging issue onesemicolon
A Cryptanalysis of the High-bandwidth Digital Content Protection System aleph1
Hypermail SSI Vulnerability qDefense Penetration Testing
RE: MSIE 5.5/6 Q312461 patch disclose patch information SCG - Network Administrator
Microsoft Security Bulletin MS01-056 Microsoft Product Security
Multiple Local Sendmail Vulnerabilities SGI Security Coordinator
Off-by-one vulnerability in thttpd!!! bugtraq
MDKSA-2001:085 - procmail update Linux Mandrake Security Team
MS IE Password inputs Jon Embury
CERT Summary CS-2001-04 CERT Advisory
MDKSA-2001:086 - tetex update Linux Mandrake Security Team
MDKSA-2001:053-1 - gnupg update Linux Mandrake Security Team
ISS Security Advisory: Remote Logic Flaw Vulnerability in HP-UX Line Printer Daemon X-Force
Re: MS IE Password inputs Mattie Casper
MDKSA-2001:082-1 - kernel22 update Linux Mandrake Security Team
MDKSA-2001:079-1 - kernel 2.4 update Linux Mandrake Security Team

Wednesday, 21 November

Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Indigo
SuSE 7.3 : Kernel 2.4.10-4GB Bug Juergen Pabel
Legato Networker vulnerability 10function
CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon CERT Advisory
PhpNuke Admin password can be stolen ! Cabezon Aurélien
Security Testing Workshop in Barcelona pete
Re: MS IE Password inputs Cody Smith
Advisory: Berkeley pmake Paul Starzetz
Re: SuSE 7.3 : Kernel 2.4.10-4GB Bug Luciano Miguel Ferreira Rocha
Re: IBM AS/400 HTTP Server '/' attack Thomas Reinke
CITRIX & Microsoft Windows Terminal Services False IP Address Vulnerability Pedro Quintanilha
MDKSA-2001:087 - expect update Linux Mandrake Security Team
WebFree E-Commerce "Secure Data" Is Not Secure Jonathan G. Lampe
Mac Netscape password fields behr
Buffer overflow in Windows XP "helpctr.exe" mozoral
MDKSA-2001:088 - squid update Linux Mandrake Security Team

Friday, 23 November

Re: SuSE 7.3 : Kernel 2.4.10-4GB Bug Seth Arnold
SuSE Security Announcement: susehelp Sebastian Krahmer
Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability securityfocus.com.drew
Hi analysist
Re: SuSE 7.3 : Kernel 2.4.10-4GB Bug Andrea Arcangeli
Secure Computing SafeWord uses vulnerable ssh server Leif Nixon
Xircom REX6000 PDA Password Retrieval Daniel Jonsson
SuSE Security Announcement: cyrus-sasl (SuSE-SA:2001:042) Thomas Biege
more information about Phpnuke issue, postnuke vulnerable too ! Cabezon Aurélien
NetBSD Security Advisory 2001-018 Remote Buffer Overflow Vulnerability in LPD NetBSD Security Officer
Information Leak Bug in Netscape Mail bugtraq
[NetGuard Security] NSI Rwhoisd another Remote Format String Vulnerability alert7
double dot vulnerability on a site running Informix database. Beck Mr . R
NetCraft Site/Banner HTML Insertion Vulnerability Felipe Moniz
Redhat Stronghold Secure Server File System Disclosure Vulnerabil ity Bernard Margelin
Re: Off-by-one vulnerability in thttpd!!! David Rude II
Re: Advisory: Berkeley pmake Nicolas Gregoire
Fwd: An Important Message From HostRocket § o m e 1
Re: Information Leak Bug in Netscape Mail Scott Dier

Sunday, 25 November

Re: Information Leak Bug in Netscape Mail Stephen Cope
Internet Explorer allows reading of local files by remote webpages Markus Kern

Monday, 26 November

File extensions spoofable in MSIE download dialog Jouko Pynnonen
[CLA-2001:439] Conectiva Linux Security Announcement - postfix secure
Javascript can bypass user preference for cookie prompt in IE5.50.4134.0100 Derek Johnson
NMRC Advisory - NetDynamics Session ID is Reusable Information Anarchy 2K01
[CERT-intexxia] Auto Nice Daemon Format String Vulnerability Benoît Roussel
Malicious use of grc.com Magni
Re: File extensions spoofable in MSIE download dialog Georgi Guninski
RE: File extensions spoofable in MSIE download dialog Jonathan G. Lampe
Re: Mac Netscape password fields CDE Francis
Various IRIX shells create temporary files insecurely SGI Security Coordinator
RE: File extensions spoofable in MSIE download dialog Jouko Pynnonen
Xitami Webserver stores admin password in clear text. Larry W. Cashdollar
MDKSA-2001:079-2 - kernel updaet Linux Mandrake Security Team
Announcement : The Open Web Application Security Project Mark Curphey
IRIX Netscape Directory Server contains multiple vulnerabilities SGI Security Coordinator

Tuesday, 27 November

[CERT-intexxia] libgtop_daemon Remote Format String Vulnerability Benoît Roussel
Re: double dot vulnerability on a site running Informix database. Joel Michael
W32/BadTrans.B-mm [Was: File extensions spoofable in MSIE download dialog] http-equiv () excite com
Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Indigo
IIS Server Side Include Buffer overflow exploit code Indigo
Anonymiser.com might reveal your IP Klaxon
Sendpage (Perl CGI) Remote Execution Vulnerability Pedram Amini
[CLA-2001:440] Conectiva Linux Security Announcement - rpm secure
[RHSA-2001:157-06] Updated wu-ftpd packages are available bugzilla

Wednesday, 28 November

Re: Xitami Webserver stores admin password in clear text. Tom Micklovitch
Re: double dot vulnerability on a site running Informix database. Randolf Richardson
Audiogalaxy again big bon
MDKSA-2001:077-1 - apache update Linux Mandrake Security Team
UNICOS LOCAL HOLE ALL VERSIONS Mickey Mouse
*ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Dave Ahmad
Security Update: [CSSA-2001-039.0] Linux - IMP/HORDE cross site scripting vulnerability Support Info
Cisco Security Advisory: A Vulnerability in IOS Firewall Feature Set Cisco Systems Product Security Incident Response Team
Security Update [CSSA-2001-040.0] Linux - Format String Problem in Cyrus-SASL Support Info
Cgisecurity.com Advisory #7: Mailman Email Archive Cross Site Scripting zeno
Re: Sendpage (Perl CGI) Remote Execution Vulnerability John Imrie
JRun SSI Request Body Parsing Netcraft Security
[RHSA-2001:156-05] Updated postfix packages are available bugzilla
def-2001-32 George Hedfors
Re: Sendpage (Perl CGI) Remote Execution Vulnerability Seth Arnold
Re: Audiogalaxy again (Cross Site Scripting Vuln) John Scimone
PowerFTP-server-Bugs&Exploits-Remotes al3x hernandez
MDKSA-2001:077-2 - apache update for Single Network Firewall Linux Mandrake Security Team
TWIG default configurations may lead to insecure auth-cookie password storage Gonçalo Gomes
SuSE Security Announcement: wuftpd (SuSE-SA:2001:043) Roman Drahtmueller
Re: Xitami Webserver stores admin password in clear text. Larry W. Cashdollar
Security Update [CSSA-2001-041.0] Linux - Vulnerability in wu-ftpd Support Info
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability script0r
Re: [CERT-intexxia] libgtop_daemon Remote Format String Vulnerability Flavio Veloso
Firewall-1 remote SYSTEM shell buffer overflow Indigo
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Andre Oppermann
WU-FTPD 2.6.1 diff glob.c patch Mark Canter
CORE-20011001: Wu-FTP glob heap corruption vulnerability Iván Arce
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Todd C. Miller
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Brad
Immunix OS 7.0 wu-ftpd update Immunix Security Team
SafeWord Agent for SSH (secure shell) vulnerability Tony Chimienti
Re: Xitami Webserver stores admin password in clear text. Bernd Luevelsmeyer

Thursday, 29 November

RE: File extensions spoofable in MSIE download dialog StatiC
Firewall-1 remote SYSTEM shell buffer overflow Indigo
NAI Webshield SMTP for WinNT MIME header vuln that allows BadTrans to pass] Jari Helenius
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability David Brownlee
[CLA-2001:442] Conectiva Linux Security Announcement - wu-ftpd secure
RE: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Junius, Martin
Re: def-2001-32 3APA3A
RE: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Craig Leikis
Re: File extensions spoofable in MSIE download dialog chef
RE: File extensions spoofable in MSIE download dialog Jonathan G. Lampe
RE: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Sandor W. Sklar
UUCP Izik
comphack - Compaq Insight Manager Remote SYSTEM shell Indigo
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Fyodor
Re: def-2001-32 - Allaire JRun directory browsing vulnerability Felix Huber
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability GiulioMaria Fontana
Re: SafeWord Agent for SSH (secure shell) vulnerability Leif Nixon
RE: def-2001-32 - Allaire JRun directory browsing vulnerability George Hedfors
Re: Audiogalaxy again David Lodge
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Flavio Veloso
Re: File extensions spoofable in MSIE download dialog 'StatiC'

Friday, 30 November

Re: def-2001-32 - Allaire JRun directory browsing vulnerability Felix Huber
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Rick Kelly
Immunix 7.0 wu-ftpd format string bug Immunix Security Team
Security Update: [CSSA-2001-SCO.35] OpenServer: setcontext and sysi86 vulnerabilities security
Alert: Vulnerability in frox transparent ftp proxy. James Hollingshead
Fw: Firewall-1 remote SYSTEM shell buffer overflow Scott Walker Register
Rapid 7 Advisory R7-0001: Alchemy Eye HTTP Remote Command Execution Rapid 7 Security Advisories
MDKSA-2001:089 - postfix update Linux Mandrake Security Team
Vulnerabilities in PGPMail.pl joetesta
CERT Advisory CA-2001-33 Multiple Vulnerabilities in WU-FTPD CERT Advisory
IRIX Predictable IP ID vulnerability SGI Security Coordinator
Aspupload installs exploitable scripts brett
IRIX Gauntlet Vulnerabilities SGI Security Coordinator
Re: NAI Webshield SMTP for WinNT MIME header vuln that allows BadTrans to pass] Joe Yandle
IRIX nedit vulnerability SGI Security Coordinator
IRIX CDE vulnerabilities SGI Security Coordinator
Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability Fred Mobach
[RHSA-2001:154-06] Updated OpenSSH packages available bugzilla
MDKSA-2001:090 - wu-ftpd update Linux Mandrake Security Team
[CLA-2001:443] Conectiva Linux Security Announcement - wu-ftpd secure
Re: def-2001-32 - Allaire JRun directory browsing vulnerability null null
Denial of Service in Lotus Domino 5.08 and earlier HTTP Server Hendrik-Jan Verheij
Redhat 7.0 local root (via uucp) (attempt 2) zen-parse
Rapid 7 Advisory R7-0002: Alchemy Eye Remote Unauthenticated Log Viewing Rapid 7 Security Advisories
Re: UUCP Bob Howard