Bugtraq: by date

393 messages starting Jan 31 03 and ending Feb 28 03
Date index | Thread index | Author index


Friday, 31 January

silc question - insecure memory cdowns

Saturday, 01 February

locator exploit Dave Aitel

Monday, 03 February

GLSA: Mail-SpamAssasin Daniel Ahlberg
GLSA: slocate Daniel Ahlberg
phpMyShop (php) Frog Man
myphpPagetool (php) Frog Man
Denial of service against Kazaa Media Desktop v2 Marc Ruef
ASA-0001: OpenBSD chpass/chfn/chsh file content leak Marc Bevand
Re: DoS against DHCP infrastructure with isc dhcrelay Thomas Lotterer
Re: GLSA: Mail-SpamAssasin Eric Vollmer
PHP-Nuke Avatar Code injection vulnerability delusion
MDKSA-2003:013 - Updated MySQL packages fix DoS vulnerability Mandrake Linux Security Team
MDKSA-2003:012 - Updated vim packages fix arbitrary command execution vulnerability Mandrake Linux Security Team
BDT_AV200212140001: Insecure default: Using pam_xauth for su from sh-utils package Andreas Beck
Re: To diversify and survive: the application of population biology concept into computer Crispin Cowan

Tuesday, 04 February

Opera's Security Model is Highly Vulnerable (GM#002-OP) GreyMagic Software
Re: Preventing exploitation with rebasing David Litchfield
Re: PHP-Nuke Avatar Code injection vulnerability delusion
Weak password protection in WebSphere 4.0.4 XML configuration export Jan P. Monsch
Re: Preventing exploitation with rebasing sd
Sniffing Opera's Tracks (GM#006-OP) GreyMagic Software
Re: Preventing exploitation with rebasing Eugene Tsyrklevich
Putting the "NSA Data Overwrite Standard" Legend to Death... Jonathan G. Lampe
Majordomo info leakage, all versions Marco van Berkum
[RHSA-2003:025-20] Updated 2.4 kernel fixes various vulnerabilities bugzilla
Re: Preventing exploitation with rebasing Torbjörn Hovmark
Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Simple Nomad
Re[2]: Preventing exploitation with rebasing dullien
Opera Images (GM#004-OP) GreyMagic Software
RE: Preventing exploitation with rebasing Anonymous
Re: Preventing exploitation with rebasing David Litchfield
dynamic and static code injection as well as population concept Peter Huang
Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Brian Hatch
Quake3 engine autodownload issues. Thilo Schulz
Re: Opera: What's Next (GM#005-OP) chorn
RE: Preventing exploitation with rebasing Jason Coombs
TOPo 1.43 and prior - Path Disclosure (in.php, out.php) Rynho Zeros Web
Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Kurt Seifried
Re: Putting the "NSA Data Overwrite Standard" Legend to Death... Stephen D. B. Wolthusen
FreeBSD Security Advisory FreeBSD-SA-03:01.cvs FreeBSD Security Advisories

Wednesday, 05 February

Unreal engine: results of my research Auriemma Luigi
RE: Opera: What's Next (GM#005-OP) Bjornar B. Larsen
Re: Preventing exploitation with rebasing dullien
Exploit for CVS double free() for Linux pserver Igor Dobrovitski
The Advantages of Block-Based Protocol Analysis for Security Testing Dave Aitel
GLSA: qt-dcgui Daniel Ahlberg
Opera: What's Next (GM#005-OP) GreyMagic Software
SummerCon 2003 Official Announcement Mark F. Trumpbour
RE: To diversify and survive: the application of population biolo gy concept into computer Ballowe, Charles
[RHSA-2003:017-06] Updated PHP packages available bugzilla
Preventing exploitation with rebasing David Litchfield
GLSA: bladeenc Daniel Ahlberg
internet explorer local file reading jelmer
Re: internet explorer local file reading Andreas Sandblad
Re: silc question - insecure memory Florian Weimer
To diversify and survive: the application of population biology concept into computer Peter Huang
Re: [VulnDiscuss] Re: Preventing exploitation with rebasing Halvar Flake
Re: Can't Preventing exploitation with rebasing bugtraq
Re: Preventing exploitation with rebasing David Litchfield
Re: Preventing exploitation with rebasing Brian Hatch
Re: Preventing exploitation with rebasing Charlie Root
RE: Preventing exploitation with rebasing Riley Hassell
Announce: Browser Security Test Released Alla Bezroutchko
[CLA-2003:567] Conectiva Linux Security Announcement - mcrypt secure
Re: Preventing exploitation with rebasing David Litchfield
MDKSA-2003:014 - Updated kernel packages fix a number of bugs Mandrake Linux Security Team
Re[2]: Can't Preventing exploitation with rebasing dullien
Bladeenc 0.94.2 code execution Auriemma Luigi
Observation on randomization/rebiasing... Nicholas Weaver
Re: Preventing exploitation with rebasing Alan DeKok
Re: Preventing exploitation with rebasing Dave Aitel
Re: Preventing exploitation with rebasing Bugtraq User
RE: Tech Article: HTTP Content Filter Analysis - Finjan SurfinGate V5.6 Menashe Eliezer
PHPMyNewsLetter 0.6.11 - customize.php include problem Ueli Kistler
Re: Preventing exploitation with rebasing D.C. van Moolenbroek
Re: Preventing exploitation with rebasing Michal Zalewski
Re: [VulnDiscuss] Preventing exploitation with rebasing Michal Zalewski
Phantom of the Opera (GM#003-OP) GreyMagic Software
Re: GLSA: Mail-SpamAssasin Mark Martinec
Re: Preventing exploitation with rebasing Crispin Cowan
RE: Observation on randomization/rebiasing... Jason Coombs
Re: Preventing exploitation with rebasing Alun Jones
Re: Preventing exploitation with rebasing David S Goldberg
Re: Preventing exploitation with rebasing Todd Sabin
MDKSA-2003:015 - Updated slocate packages fix buffer overflow Mandrake Linux Security Team

Thursday, 06 February

[RHSA-2003:037-09] Updated Xpdf packages fix security vulnerability bugzilla
showHelp("file:") disables security in IE - Sandblad advisory #11 Andreas Sandblad
[RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading bugzilla
FW: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs
[RHSA-2003:040-07] Updated openldap packages available bugzilla
Re: CuteFTP 5.0 XP, Buffer Overflow Kanatoko
FW-1 NG FP3 Bug - Data flow problem when transferring large files Igor U.Miturin
AbsoluteTelnet 2.00 buffer overflow. Knud Erik Højgaard
Preventing /*exploitation with*/ rebasing Riley Hassell
RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) John Howie
Re: Preventing exploitation with rebasing Deus, Attonbitus
RE: Observation on randomization/rebiasing... Jason Coombs
Re: Preventing exploitation with rebasing Richard Moore
Re: Preventing exploitation with rebasing Seth Breidbart
Preventing exploitation with rebasing Fred Cohen
Re: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Florian Weimer
RE: MSDE contained in... R. Michael Williams
Re: Weak password protection in WebSphere 4.0.4 XML configuration export Arun Kumar
RE: Observation on randomization/rebiasing... Michael Wojcik

Friday, 07 February

HPUX Wall Buffer Overflow Scotty
Re: Preventing /*exploitation with*/ rebasing dullien
[RHSA-2003:044-20] Updated w3m packages fix cross-site scripting issues bugzilla
RE: Preventing exploitation with rebasing Ilya Dubinsky
RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs
Re: Preventing exploitation with rebasing Carolyn Meinel
RE: Preventing exploitation with rebasing Jason Coombs
RE: Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) Jason Coombs
[RHSA-2003:056-08] Updated kernel-utils packages fix setuid vulnerability bugzilla

Saturday, 08 February

Yet another plaintext attack to ZIP encryption scheme. alias
Re: Preventing /*exploitation with*/ rebasing Shaun Clowes

Monday, 10 February

Buffer OverFlow in SQLBase 8.1.0 - NII Advisory Arjun Pednekar
Bug in Netgear FM114P Wireless Router firmware Björn Stickler
Gallery 1.3.3 error
Eggdrop arbitrary connection vulnerability Paul Starzetz
breakpoint the stack buffer overflow from executing malicious code like SQL Slammer worm Peter Huang
#!ICadv-02.09.03: nethack 3.4.0 local buffer overflow tsao_4sh0
Cedric Email Reader (PHP) MGhz
Domestic Security Enhancement Act of 2003 Jason Coombs
RTS CryptoBuddy Multiple Encryption Implementation Vulnerabilities Mike
Opera Username Buffer Overflow Vulnerability nesumin
Re: Domestic Security Enhancement Act of 2003 David Terrell
Java-Applet crashes Opera 6.05 and 7.01 Marc Schoenefeld
Re: Eggdrop arbitrary connection vulnerability D.C. van Moolenbroek
iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix iDEFENSE Labs
RE: Astaro Security Linux Firewall - HTTP Proxy vulnerability Markus Hennig

Tuesday, 11 February

Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Davide Del Vecchio
Followup: breakpoint the stack buffer overflow from executing maliciouscode like SQL Slammer worm Peter Huang
[SECURITY] [DSA 249-1] New w3mmee packages fix cookie information leak Martin Schulze
SECURITY.NNOV: Kaspersky Antivirus DoS 3APA3A
Field Notice - IOS Accepts ICMP Redirects in Non-default Configuration Settings Damir Rajnovic
[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution Martin Schulze
SECURITY.NNOV: Far buffer overflow 3APA3A
Re: #!ICadv-02.09.03: nethack 3.4.0 local buffer overflow Peter Pentchev
Re: Gallery 1.3.3 netsecurity
Re: junkbuster 2.0-1 proxy relaying spam VU#150227 CERT(R) Coordination Center
Re: Eggdrop arbitrary connection vulnerability Matthew S. Hallacy
SECURITY.NNOV: Windows NT 4.0/2000 cmd.exe long path buffer overflow/DoS 3APA3A
Epic Games threatens to sue security researchers Thor Larholm
Re: SPRINT ADSL [Zyxel 645 Series Modem] http-equiv () excite com
Security bug in CGI::Lite::escape_dangerous_chars() function Ronald F. Guilmette
Re: Epic Games threatens to sue security researchers Mark Rein
Re: Epic Games threatens to sue security researchers dave

Wednesday, 12 February

MDKSA-2002:062-1 - Updated postgresql packages fix various buffer overflows Mandrake Linux Security Team
[LSD] Codes for Java and JVM security vulnerabilities Last Stage of Delirium
[RHSA-2003:029-06] Updated lynx packages fix CRLF injection vulnerability bugzilla
IRIX IP denial-of-service fixes and tunings SGI Security Coordinator
iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a iDEFENSE Labs
Abyss WebServer Brute Force Vulnerability thomas adams
CodeCon Registration Deadline Approaching Len Sassaman
libIM.a buffer overflow vulnerability Shiva Persaud
Solaris Signals Jon Masters
Lotus Domino DOT Bug Allows for Source Code Viewing Faz
Re: Security bug in CGI::Lite::escape_dangerous_chars() function tee
Cross Site Scripting Advisory. uk2sec

Thursday, 13 February

HPUX disable buffer overflow vulnerability Davide Del Vecchio
[CLA-2003:568] Conectiva Linux Security Announcement - mozilla secure
RE: Security bug in CGI::Lite::escape_dangerous_chars() function Hard Coder
[RHSA-2003:035-10] Updated PAM packages fix bug in pam_xauth module bugzilla
Re: Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Fredrik Björk
Re: Solaris Signals Jon Masters
Re: Solaris Signals Frank v Waveren
[RHSA-2003:015-05] Updated fileutils package fixes race condition in recursive operations bugzilla
Code Red Revisited and Stack-Based Exception Handler Frame Bug Peter Huang
New freeware tools available from WebCohort Eyal Udassin
Re: Security bug in CGI::Lite::escape_dangerous_chars() function John Madden
Re: HPUX disable buffer overflow vulnerability Marc1
[SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak Martin Schulze
Getting stored passwords in plain text from CheetaChat b0f www . b0f . net
Re: Lotus Domino DOT Bug Allows for Source Code Viewing JRedmond
Re: Code Red Revisited and Stack-Based Exception Handler Frame Bug Roland Postle

Friday, 14 February

MDKSA-2003:016 - Updated util-linux packages provide stronger randomness in mcookie Mandrake Linux Security Team
[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak Martin Schulze
IndyNews - PhpNuke module: several problems Elisa Manara
Re: Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability Jørgensen
Re: Solaris Signals ari
HPUX disable buffer overflow vulnerability HP S/W Security Team
Re: Solaris Signals Casper Dik
@stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack @stake Advisories

Monday, 17 February

Riched20.DLL attribute label buffer overflow vulnerability Jie Dong
The First Honeyd Challenge Niels Provos
Oracle unauthenticated remote system compromise (#NISR16022003a) NGSSoftware Insight Security Research
[immune advisory] Mulitple vulnerabilities found in BisonFTP Immune Advisory
GLSA: mailman Daniel Ahlberg
Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b) NGSSoftware Insight Security Research
Oracle9i Application Server Format String Vulnerability (#NISR16022003d) NGSSoftware Insight Security Research
Oracle TZ_OFFSET Remote System Buffer Overrun (#NISR16022003c) NGSSoftware Insight Security Research
Lotus Domino Web Server iNotes Overflow (#NISR17022003b) NGSSoftware Insight Security Research
Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) NGSSoftware Insight Security Research
Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) NGSSoftware Insight Security Research
Oracle bfilename function buffer overflow vulnerability (#NISR16022003e) NGSSoftware Insight Security Research
Domino Advisories UPDATE Mark Litchfield
PHP Security Advisory: CGI vulnerability in PHP version 4.3.0 Jani Taskinen
Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability security
Re: Opera Username Buffer Overflow Vulnerability nesumin
GLSA: syslinux Daniel Ahlberg
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency Martin Schulze
GLSA: w3m Daniel Ahlberg
/usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX choi sungwoon
[argv] BitchX-353 Vulnerability argv

Tuesday, 18 February

[SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability Tamer Sahin
php-Board (php) Frog Man
DotBr (PHP) Frog Man
Presentation on Writing Secure Programs for Linux and Unix in Maryland dwheeler
Re: Riched20.DLL attribute label buffer overflow vulnerability 3APA3A
GLSA: nethack Daniel Ahlberg
[OpenPKG-SA-2003.010] OpenPKG Security Advisory (php) OpenPKG
Kietu ( PHP ) Frog Man
[OpenPKG-SA-2003.009] OpenPKG Security Advisory (w3m) OpenPKG
[OpenPKG-SA-2003.011] OpenPKG Security Advisory (lynx) OpenPKG
Re: /usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX Shiva Persaud
D-Forum (PHP) Frog Man
SuSE Security Announcement: imp (SuSE-SA:2003:0008) Thomas Biege
SuSE Security Announcement: mod_php4 (SuSE-SA:2003:0009) Thomas Biege
CSSA-2003-007.0 Advisory withdrawn. Re: Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability security
Re: CSSA-2003-007.0 Advisory withdrawn. Mark J Cox
MDKSA-2003:017 - Updated pam packages fix root authorization handling in pam_xauth module Mandrake Linux Security Team
MDKSA-2003:018 - Updated apcupsd packages fix buffer overflow and remove vulnerability Mandrake Linux Security Team

Wednesday, 19 February

Cpanel 5 and below remote command execution and local root vulnerabilities pokleyzz
GLSA: mod_php php Daniel Ahlberg
[ESA-20030219-003] Several PHP vulnerabilities EnGarde Secure Linux
[OpenPKG-SA-2003.012] OpenPKG Security Advisory (dhcpd) OpenPKG
NSPW 2003 Call For Papers Abe Singer
Re: /usr/bin/enq and /usr/bin/X11/aixterm exploit in AIX Keith Stevenson
OpenSSL 0.9.7a and 0.9.6i released Jonas Eriksson
GLSA: mod_php (200302-09.1) Daniel Ahlberg
[OpenPKG-SA-2003.013] OpenPKG Security Advisory (openssl) OpenPKG
RE: Ericsson HM220dp ADSL modem Insecure Web Administration Vulne rability EAB
[SNS Advisory No.61] Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerability snsadv () lac co jp

Thursday, 20 February

Master Servers: yet another DDoS... Auriemma Luigi
myphpnuke xss Tacettin Karadeniz
MDKSA-2003:019 - Updated php packages fix buffer overflow vulnerability Mandrake Linux Security Team
Fwd: CERT Advisory CA-2003-05 Multiple Vulnerabilities in Oracle Servers Muhammad Faisal Rauf Danka
Call For Papers Announcement: Black Hat Briefings Amsterdam Jeff Moss
New version of ike-scan (IPsec IKE scanner) available - v1.1 Roy Hills
XSS and Path Disclosure in Sage euronymous
[ESA-20030220-004] MySQL double free vulnerability EnGarde Secure Linux
[ESA-20030220-005] OpenSSL timing-based attack vulnerability EnGarde Secure Linux
Cisco IOS OSPF exploit FX
GLSA: openssl (200302-10) Daniel Ahlberg
[RHSA-2003:057-06] Updated shadow-utils packages fix exposure bugzilla
GLSA: bitchx (200302-11) Daniel Ahlberg
[saag] Of potential interest -- Citibank tries to gag crypto bug disclosure (fwd) Dave Ahmad
login_ldap security announcement Peter Werner
phpBB Security Bugs Lucas Armstrong
PHPNuke SQL Injection Lucas Armstrong
[CLA-2003:569] Conectiva Linux Security Announcement - kde secure

Friday, 21 February

Cisco Security Advisory: Multiple Product Vulnerabilities found by PROTOS SIP Test Suite Cisco Systems Product Security Incident Response Team
MDKSA-2003:021 - Updated krb5 packages fix vulnerability in FTP client Mandrake Linux Security Team
Re: Riched20.DLL attribute label buffer overflow vulnerability Thor Larholm
Re: PHPNuke SQL Injection Martin Eiszner
Perl2Exe EXEs Can Be Decompiled (update) Domainbox, Tim Abenath
Re: PHPNuke SQL Injection / General SQL Injection David Walker
Myguestbook (PHP) Frog Man
[RHSA-2003:041-12] Updated VNC packages fix replay and cookie vulnerabilities bugzilla
Bypassing Personal Firewalls xenophi1e
[SECURITY] [DSA 252-1] New slocate packages fix local root exploit Martin Schulze
Re: twlc advisory: all versions of php nuke are vulnerable... Jessica Smith
MDKSA-2003:020 - Updated openssl packages fix timing-based attack vulnerability Mandrake Linux Security Team
Rogue buffer overflow Ulf Harnhammar
TSLSA-2003-0005 - openssl Trustix Secure Linux Advisor
RE: PHPNuke SQL Injection Oriol Carreas
Re: Master Servers: yet another DDoS... Greg Steuck
Re: phpBB Security Bugs Konrad Rieck
RE: Bypassing Personal Firewalls Drew Copley
RE: Bypassing Personal Firewalls Drew Copley
Re: Cisco IOS OSPF exploit Mike Caudill
RE: Bypassing Personal Firewalls Oliver Lavery

Sunday, 23 February

buffer overrun in zlib 1.1.4 Richard Kettlewell
RE: Bypassing Personal Firewalls John Howie
Re: Cisco IOS OSPF exploit KF
Re: Perl2Exe EXEs Can Be Decompiled (update) Kain
Re: phpBB Security Bugs Lucas Armstrong
[SCSA-007] Cross Site Scripting Vulnerabilities in WWWBoard Grégory
Re: phpBB Security Bugs Christian Vogel
[SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan Grégory
Weak Encryption Scheme in Telindus 112x eflorio
eject 2.0.10 vulnerability nordi
exploit for Cpanel 5 remote command execution. evilcow
Re: Bypassing Personal Firewalls Shaun Clowes
GLSA: (200302-12) Daniel Ahlberg
Re: PHPNuke SQL Injection / General SQL Injection MightyE

Monday, 24 February

O UT LO OK E XPRE SS 6 .00 : broken http-equiv () excite com
Webmin 1.050 - 1.060 remote exploit Carl Livitt
moxftp arbitrary code execution poc/advisory Knud Erik Højgaard
GLSA: usermin (200302-14) Daniel Ahlberg
FreeBSD Security Advisory FreeBSD-SA-03:03.syncookies FreeBSD Security Advisories
[SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2" snsadv () lac co jp
RE: Bypassing Personal Firewalls Oliver Lavery
Re: buffer overrun in zlib 1.1.4 Carlo Marcelo Arenas Belon
Re: Bypassing Personal Firewalls Johan Verrept
GLSA: apcupsd (200302-13) Daniel Ahlberg
sircd proof-of-concept / advisory Knud Erik Højgaard
poc zlib sploit just for fun :) Crazy Einstein
[LSD] Win32 assembly components Last Stage of Delirium
Re: O UT LO OK E XPRE SS 6 .00 : broken Thor Larholm
multiple vulnerabilities in glftpd Karol Więsek
GLSA: tightvnc (200302-15) Daniel Ahlberg
Vulnerability for Platinum FTP version 1.0.11 Pui Kin Ser
Re[2]: PHPNuke SQL Injection / General SQL Injection alias
Re: Bypassing Personal Firewalls Torbjörn Hovmark
Mambo SiteServer exploit gains administrative privileges Simen Bergo
Nessus 2.0 is out Renaud Deraison
Re: Bypassing Personal Firewalls Zow
WihPhoto (PHP) Frog Man
Securing Windows 2000 Server Documentation Michael Howard
Re: Riched20.DLL attribute label buffer overflow vulnerability Raistlin
Re: Bypassing Personal Firewalls Shaun Clowes
Re: buffer overrun in zlib 1.1.4 Thamer Al-Harbash
[SECURITY] [DSA 253-1] New OpenSSL packages fix timing-based attack vulnerability Martin Schulze
RE: Bypassing Personal Firewalls John Howie
[CLA-2003:570] Conectiva Linux Security Announcement - openssl secure
Terminal Emulator Security Issues H D Moore
GLSA: vnc (200302-16) Daniel Ahlberg
Platform independent allocating sprintf (was Re: buffer overrun Forrest J. Cavalier III

Tuesday, 25 February

MDKSA-2003:023 - Updated lynx packages fix CRLF injection vulnerability Mandrake Linux Security Team
QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities @stake Advisories
clarkconnect(d) information disclosure Knud Erik Højgaard
[RHSA-2003:053-10] Updated vte packages fix gnome-terminal vulnerability bugzilla
PHP code injection in CuteNews Over_G
nCipher Advisory #7: Unexpected copies of imported software keys nCipher Support
[ESA-20030225-006] WebTool session ID spoofing vulnerability. EnGarde Secure Linux
Re: Terminal Emulator Security Issues Michael Jennings
Re: Terminal Emulator Security Issues H D Moore
Re: Riched20.DLL attribute label buffer overflow vulnerability Marc Ruef
Re: Terminal Emulator Security Issues Juraj Ziegler
Re: poc zlib sploit just for fun :) Kelledin
Netscape 6/7 crashes by a simple stylesheet... jux
Re: Netscape 6/7 crashes by a simple stylesheet... jim . r . halfpenny
RE: Ericsson HM220dp ADSL modem Insecure Web Administration Vulne rability EAB
MDKSA-2003:022 - Updated vnc packages fix cookie vulnerability Mandrake Linux Security Team
Re: Platform independent allocating sprintf (was Re: buffer overrun James Antill
VERITAS Software Technical Advisory (fwd) Dave Ahmad
[sorcerer-spells] ZLIB-SORCERER2003-02-25 Michael Walton
Nokia 6210 DoS SMS Issue @stake Advisories
Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II http-equiv () excite com
Re: Netscape 6/7 crashes by a simple stylesheet... dwm
Re: Netscape 6/7 crashes by a simple stylesheet... John Wofford

Wednesday, 26 February

Secunia Research: Opera browser Cross Site Scripting Jakob Balle
SuSE Security Announcement: libmcrypt (SuSE-SA:2003:0010) Thomas Biege
SuSE Security Announcement: openssl (SuSE-SA:2003:011) Roman Drahtmueller
[VSA0307] Battlefield 1942 remote DoS VOID.AT Security
[VSA0308] Half-Life AMX-Mod remote (root) hole VOID.AT Security
Security Patchs for PHP Products #2 Frog Man
GOnicus System Administrator php injection Karol Wiesek
Re: Netscape 6/7 crashes by a simple stylesheet... Raj Mathur
Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II Jens Knoell
Re: Terminal Emulator Security Issues Michael Jennings
RE: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II Dike
Re: Netscape 6/7 crashes by a simple stylesheet... Peter Lindgren
./makeunicode2.py release announcement 0 0

Thursday, 27 February

MDKSA-2003:026 - Updated shadow-utils packages fix improper mailspool ownership Mandrake Linux Security Team
Re: Secunia Research: Opera browser Cross Site Scripting Axel Beckert - ecos gmbh
Re: Netscape 6/7 crashes by a simple stylesheet... Greg Steuck
MS-Windows ME IE/Outlook/HelpCenter critical vulnerability Fozzy
ISMAIL (All Versions) Remote Buffer Overrun NGSSoftware Insight Security Research
[SECURITY] [DSA 254-1] New NANOG traceroute packages fix buffer overflow Martin Schulze
Ecardis Password Reseting Vulnerability Haluk AYDIN
Re: Netscape 6/7 crashes by a simple stylesheet... Frankie
MDKSA-2003:025 - Updated webmin packages fix session ID spoofing vulnerability Mandrake Linux Security Team
Re: poc zlib sploit just for fun :) Ralf S. Engelschall
Re: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II D'Amato Luigi
Re: [VSA0307] Battlefield 1942 remote DoS VOID.AT Security
Buffer Overrun Vulnerability in /sbin/ps on IRIX SGI Security Coordinator
SuSE Security Announcement: hypermail (SuSE-SA:2003:0012) Thomas Biege
iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing iDEFENSE Labs
Invision Power Board (PHP) Frog Man
Re: MS-Windows ME IE/Outlook/HelpCenter critical vulnerability Fozzy
Mandrake 9.0 local root exploit Priv8 Security
[SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability Martin Schulze

Friday, 28 February

[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file Martin Schulze
NetPBM, multiple vulnerabilities Alan Cox
Re: Mandrake 9.0 local root exploit KF
JRun: The Easiness of Session Fixation Christoph Schnidrig
Re: Netscape Communicator 4.x sensitive informations in configuration file Byron York
axis2400 webcams Martin Eiszner
Netscape Communicator 4.x sensitive informations in configuration file Marc Ruef
ftp.exe anf tftp.exe buffer overflows Max
RE: axis2400 webcams Barry Zubel
typo3 issues Martin Eiszner
Security contact at SMC Charles M. Richmond
Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities Joe Testa
Re: The Easiness of Session Fixation Kevin Spett
re: Security contact at SMC Gshively
Re: PHP code injection in CuteNews Steve Grubb
Re: Mandrake 9.0 local root exploit Vincent Danen
Re: Netscape Communicator 4.x sensitive informations in configuration file Nicolas RUFF (lists)
Re: Bypassing Personal Firewalls Darwin
Re: Netscape Communicator 4.x sensitive informations in configuration file Paul Szabo