Bugtraq mailing list archives

1st quarter (Jan-Mar) 1997, sorted by thread

About this archive
Most recent messages
Messages sorted by: [ date ][ subject ][ author ]
Other time periods
Search the archive

Starting: Thu 02 Jan 1997 - 20:58:06 CST
Ending: Mon 31 Mar 1997 - 11:39:19 CST
Messages: 347

XDM bug Angel Ortiz
Happy New Year from BugTraq Aleph One
Re: Temporary Files (was Re: mktemp() and friends) Chet Ramey
Re: XDM bug Steve \
- Re: XDM bug jamie
- Re: XDM bug Alex Belits
- Re: XDM bug Mr. ManX
serious security bug in wu-ftpd v2.4 Aleph One
- Re: serious security bug in wu-ftpd v2.4 Rene Janssen
- Re: serious security bug in wu-ftpd v2.4 Wietse Venema
- Re: serious security bug in wu-ftpd v2.4 der Mouse
Irix: netprint story Yuri Volobuev
Buffer overflow in the query cgi. Apropos of Nothing
- Re: Buffer overflow in the query cgi. Thomas H. Ptacek
Re: BoS: serious security bug in wu-ftpd v2.4 Dave Kinchlea
- BoS: serious security bug in wu-ftpd v2.4 -- PATCH Dave Kinchlea
- Re: BoS: serious security bug in wu-ftpd v2.4 -- PATCH Henrik P Johnson
Irix: csetup hole Yuri Volobuev
Re: serious security bug in wu-ftpd v2.4 -- PATCH Bjorn Wesen
signal handling Peter Jeremy
- Re: signal handling Alex Belits
- Re: signal handling solar@ideal.ru
CERT Advisory CA-97.01 - Multi-platform Unix FLEXlm CERT Advisory
AUTOSOFT/RTS holes Brian Mitchell
ACKs by CERT--Ask & You Shall Receive? James Seymour
false alarm: query cgi problem Apropos of Nothing
- Re: false alarm: query cgi problem der Mouse
- Re: false alarm: query cgi problem Zygo Blaxell
SGI Security Advisory 19970102-01-PX - XFS Filesystem Security SGI Security Coordinator
Windows95, w 2 network cards and Internal networks causing unre Sami A. Yousif
Re: Windows95, Gilles Soulet
not so false alarm: query cgi problem Apropos of Nothing
- Re: not so false alarm: query cgi problem M Lyons
extra long URL attack strick -- henry strickland
- Re: extra long URL attack John Robert LoVerso
- Re: extra long URL attack Jyri Kaljundi
- Re: extra long URL attack Sam Schlansky
- Re: extra long URL attack M Shariful Anam
- Re: extra long URL attack Marc Slemko
AIX for PowerPC exploit Georgi Guninski
Security release: Apache 1.1.2 Brian Behlendorf
Apache 1.1.1 overflow David Sacerdote
Stronghold v1.3.3: Security Release Sean B. Hamor
[linux-security] SECURITY: Important bug fix for /sbin/login Erik Troan
Smashing the stack on a DEC Alpha Lamont Granquist
- Re: Smashing the stack on a DEC Alpha Digital Dreamer
- Re: Smashing the stack on a DEC Alpha Julian Assange
FreeBSD Security Advisory: SA-96:21 - talkd FreeBSD Security Officer
- Re: FreeBSD Security Advisory: SA-96:21 - talkd Theo de Raadt
[linux-security] write(1) leak David Holland
[linux-security] write(1) leak David Holland
talkd problem Theo de Raadt
- Re: talkd problem David Holland
Smashing the stack Zygo Blaxell
- Re: Smashing the stack David Holland
- Re: Smashing the stack Bill Sommerfeld
- Re: Smashing the stack Terrell Thacker
- Re: Smashing the stack Thomas Pornin
- Re: Smashing the stack Terrell Thacker
sendmail 8.8.5 released Eric Allman
From the sendmail 8.8.5 patch Aleph One
NT4 bug? Or bug in my hardware? Jason T. Luttgens
- Re: NT4 bug? Or bug in my hardware? Kevin Connolly
- Re: NT4 bug? Or bug in my hardware? Aaron Spangler
- Re: NT4 bug? Or bug in my hardware? Peter Hartzler
- Re: NT4 bug? Or bug in my hardware? Peter Berendi
NT RPC Service Bug Aleph One
- Re: NT RPC Service Bug David LeBlanc
Re: [NTSEC] Forwarded From Bugtraq: NT4 bug? Or bug in my Michael Nelson
NT RPC Hotfix Aleph One
- Re: NT RPC Hotfix dsiebert@icaen.uiowa.edu
- Re: NT RPC Hotfix Darren Reed
- Re: NT RPC Hotfix Brad.Powell
- Re: NT RPC Hotfix Yuri Volobuev
AOL client port and possible security risk. Sami A. Yousif
GNU tar vulnerability Ben Elliston
- Re: GNU tar vulnerability der Mouse
[NTSEC] NT vulnerable to DOS attack on more than just port 135 Bob Beck
Re: [NTSEC] CPU Usage, Known NT 4.0 Security bugs Russ
[NTSEC] (It gets worse) NT vulnerable to DOS attack on more than Bob Beck
Re: [NTSEC] CPU Usage, Known NT 4.0 Security bugs Aleph One
Ut oh..another port on NT4 Jason T. Luttgens
- Re: Ut oh..another port on NT4 jwp@CHEM.UCSD.EDU
- Re: Ut oh..another port on NT4 Ben Laurie
Administrativia Aleph One
ADVISORY : Microsoft DNS Denial of Service Jonathan Wilkins
L0pht Advisory: Solaris libc - getopt(3) Jonathan Wilkins
- Re: L0pht Advisory: Solaris libc - getopt(3) Adam Morrison
CERT Advisory CA-97.04 - talkd Vulnerability Aleph One
Ingreslock Misconfiguration? Khelbin Sunvold
- Re: Ingreslock Misconfiguration? Matt
Another NT CPU Hog ? Gilles Soulet
- Re: Another NT CPU Hog ? Christian Morley
Buffer overrun condition in "gethostbyname()" library function Aleph One
Vulnerability with Large UID's and GID's in HP-UX 10.20 Aleph One
Pilot Private Data Not So Private Aleph One
[NTSEC] CPU 100% Update (fwd) Aleph One
- Re: [NTSEC] CPU 100% Update (fwd) Alfred Huger
WinNT 4.0 and NT Backup Dave Beck
Re: Solaris2 libc/getopt bug Doug Hughes
- Re: Solaris2 libc/getopt bug Casper Dik
modifing libc to discover gets()/sprintf() calls Chris Sheldon
- Re: modifing libc to discover gets()/sprintf() calls Julian Assange
- Re: modifing libc to discover gets()/sprintf() calls Alan Cox
NT4 / IIS troubles Max Newbould
Addition to NT4/IIS troubles Max Newbould
Re: BoS: Re: Smashing the stack Terry Lambert
Announcing the NTBugTraq mailing list Russ
Critical Security Problem in 4.4BSD crt0 Thomas H. Ptacek
- Re: [H-BUGTRAQ] Critical Security Problem in 4.4BSD crt0 A Bruce in the land of the Bruces
- Re: [H-BUGTRAQ] Critical Security Problem in 4.4BSD crt0 Lex Spoon
- Re: Critical Security Problem in 4.4BSD crt0 Charles M. Hannum
Re: Critical Security Problem in 4.4BSD crt0 Dan Cross
Problems with locale routines in general... Thomas H. Ptacek
Linux rcp bug Miroslav Pikus
- Re: Linux rcp bug Thomas Roessler
Patches for 2.1.6-RELEASE locale stuff... tenser@SPITFIRE.ECSEL.PSU.EDU
- Re: Patches for 2.1.6-RELEASE locale stuff... Wojtek Pilorz
Re: Linux rcp bug Miroslav Pikus
[linux-security] Linux virus Aleph One
- Re: [linux-security] Linux virus Jim Dennis
- Re: [linux-security] Re: Linux virus Leejay Wu
- Re: [linux-security] Re: Linux virus Alan Cox
- [linux-security] Re: Linux virus Aleph One
- Re: [linux-security] Re: Linux virus Tim Atluru
[linux-security] Re: Linux virus Aleph One
- Re: [linux-security] Re: Linux virus Flack Man
- Re: [linux-security] Re: Linux virus Scott VanRavenswaay
In regards to the Linux 'Bliss' Virus. Alfred Huger
CERT Advisory CA-97.06 - Vulnerability in rlogin/term Aleph One
setlocale() bug in all released versions of FreeBSD (SA-97:01) Aleph One
Wierd behavior of MS's NT4 DNS Jason T. Luttgens
HPSBUX9702-052 Security Vulnerability in the rlogin executable Aleph One
bliss version 0.4.0 nobody@INTERNIC.NET
New OFFICIAL patch for BSD/OS 2.1 (*SECURITY*) (fwd) Josh Gilliam
Bliss: The Facts Jared Mauch
view-source myst
IRIX: Bug in startmidi David Hedley
- Re: IRIX: Bug in startmidi Nafees Bin Zafar
- Re: IRIX: Bug in startmidi Yuri Volobuev
- Re: IRIX: Bug in startmidi Jon Lewis
- Re: IRIX: Bug in startmidi Astley Chan
- Re: IRIX: Bug in startmidi Steve M. Acheson
Re: Bliss: The Facts (fwd) Aleph One
Minicom 1.75 Vulnerability Dmitry E. Kim
- Re: [linux-security] Minicom 1.75 Vulnerability John Henders
- Re: [linux-security] Minicom 1.75 Vulnerability Miquel van Smoorenburg
Security Advisory: A simple TCP spoofing attack Oliver Friedrichs
- Re: Security Advisory: A simple TCP spoofing attack Wietse Venema
Security hole in Solaris 2.X ffbconfig + exploit Cristian SCHIPOR
Re: IRIX: Bug in startmidi Yuri Volobuev
OSF/1 Buffer Overrun? Aaron Spangler
bliss: what is wrong with this ? Marin Purgar - PMC
[Exploit?] Microsoft DNS denial of service. Rikhardur Egilsson
Security Advisory - Recent compromise of freefall.freebsd.org Aleph One
Security Bulletins Digest Aleph One
buffer overflow in configurable fingerd? M Shariful Anam
- Re: buffer overflow in configurable fingerd? Ken Hollis
Security Bulletins Digest Aleph One
Linux NLSPATH buffer overflow solar@IDEAL.RU
- Re: Linux NLSPATH buffer overflow Dan Stromberg
- Re: Linux NLSPATH buffer overflow Alan Cox
- Re: Linux NLSPATH buffer overflow Mihai Sandu
- Re: Linux NLSPATH buffer overflow Jeff Uphoff
CIAC Bulletin H-27: HP-UX vgdisplay Buffer Overrun Vulnerability Aleph One
screen 3.05.02 Khelbin Sunvold
- Re: screen 3.05.02 Khelbin Sunvold
- Re: screen 3.05.02 test
- Re: screen 3.05.02 Mr. Cyb
FreeBSD,rlogin and coredumps. Roelof W Temmingh
- Re: FreeBSD,rlogin and coredumps. David Greenman
- Re: FreeBSD,rlogin and coredumps. Adrian Chadd
- Re: FreeBSD,rlogin and coredumps. Jamshid Abedi
- Re: FreeBSD,rlogin and coredumps. jamie
- Re: FreeBSD,rlogin and coredumps. Nathan Torkington
- Re: FreeBSD,rlogin and coredumps. Daniel O'Callaghan
- Re: FreeBSD,rlogin and coredumps. Simon Karpen
- Re: FreeBSD,rlogin and coredumps. Michael Lerperger
Bug in apache httpd 1.1.3 Mihai Ibanescu
- Re: Bug in apache httpd 1.1.3 Dean Gaudet
NetBIOS Auditing Tool Oliver Friedrichs
Announce new phf prober release Ray W. Hiltbrand
- Re: Announce new phf prober release J. Bouvrie
Re: FreeBSD,rlogin and coredumps. David Greenman
New CIFS paper up for grabs *Hobbit*
NT password dictionary attack. Paul Ashton
Re: Coredumps and setuids .. interesting.. Daniel O'Callaghan
Security Bulletins Digest Aleph One
NT stuart@brody.sonnet.co.uk
- Re: NT Y W Ko
playing buffer overflows on inn Thomas Roessler
NIS/YP hole (again) jack0
Std C Lib Functions that do not ..... Tim Bass
! [ADVISORY] Major Security Hole in MS ASP Mark Joseph Edwards
Security Bulletins Digest Aleph One
in.telnetsnoopd [slackware] JS/Illz
- Re: in.telnetsnoopd [slackware] 8LGM Security Advisories
- Re: in.telnetsnoopd [slackware] Roscinante
- Re: in.telnetsnoopd [slackware] Roscinante
Re: [NTSEC] ! [ADVISORY] Major Security Hole in MS ASP Paul Leach
screen 3.07.02 Khelbin
NIS/YP hole ultima@CORINNE.MAC.EDU
Security hole in Solaris 2.5 (sdtcm_convert) + exploit Cristian SCHIPOR
- Re: Security hole in Solaris 2.5 (sdtcm_convert) + exploit Casper Dik
- Re: Security hole in Solaris 2.5 (sdtcm_convert) + exploit Adam Morrison
- Re: Security hole in Solaris 2.5 (sdtcm_convert) + exploit Adam Morrison
- Re: Security hole in Solaris 2.5 (sdtcm_convert) + exploit Shumon Huque
- Re: Security hole in Solaris 2.5 (sdtcm_convert) + exploit Brian Parent
libX11 David Sacerdote
- Re: libX11 Paul Szabo
- Re: libX11 Alex Belits
- Re: libX11 David Holland
- Re: libX11 David Sacerdote
CIAC Bulletin H-32: HP-UX ppl Core Dump Vulnerability Aleph One
IRIX 5.3 /var/rfindd/fsdump - exploit Chris Sheldon
- Re: IRIX 5.3 /var/rfindd/fsdump - exploit Larry Glaze
- Re: IRIX 5.3 /var/rfindd/fsdump - exploit Yuri Volobuev
Re: [NTSEC] ! [ADVISORY] Major Security Hole in MS ASP Mitja Kolsek
BIG Security Hole in Solaris 2.X (X)passwd + exploit Cristian SCHIPOR
- Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit Jukka Oraj{rvi
- Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit Santithorn Bunchua
- Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit Cy Schubert - ITSD Open Systems Group
[ANNOUNCE] MSIE/Netscape Java hacks (fwd) Ben Laurie
Re[2]: [NTSEC] ! [ADVISORY] Major Security Hole in MS ASP daragh_malone@TELECOM.IE
** >= Ascend 5.0A SECURITY ALERT ** Kit Knox
Re: (ASCEND) ** >= Ascend 5.0A SECURITY ALERT ** Kevin Smith
Re: (ASCEND) ** >= Ascend 5.0A SECURITY ALERT ** Matt Holdrege
Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit (fwd) Aggelos P. Varvitsiotis
- Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit (fwd) Casper Dik
- Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit (fwd) Brian Parent
"New" Java hole Gary McGraw
- Re: "New" Java hole Ben Laurie
- Re: "New" Java hole Alan Cox
L0pht: Kerberos 4 Attack tool Gary McGraw
More on the Java holes Gary McGraw
Fw: IIS Hotfix Available Derrick Bennett
imapd and ipop3d hole David Sacerdote
Internet Explorer Bug Aleph One
- Re: Internet Explorer Bug John Pettitt
- Re: Internet Explorer Bug Alan Cox
- Re: Internet Explorer Bug Mikael Pawlo
SECURITY: Important fixes for IMAP Erik Troan
MSNBC News screen saver (same problem) (fwd) Josh Needleman
/usr/sbin/dop and DEC Unix 4.0* jon.thingvold@USIT.UIO.NO
wanted: toneloc files Evil Pete
Re: (ASCEND) ** >= Ascend 5.0A SECURITY ALERT ** Kevin Smith
Linux SuperProbe exploit solar@IDEAL.RU
John the Ripper v1.4 solar@IDEAL.RU
FreeBSD lpd Security Vulnerability Oliver Friedrichs
Bug in connect() for aix 4.1.4 ? Cahya Wirawan
- Re: Bug in connect() for aix 4.1.4 ? Steve Campbell
- Re: Bug in connect() for aix 4.1.4 ? Rikhardur Egilsson
- Re: Bug in connect() for aix 4.1.4 ? Frank Hofmann
- Re: Bug in connect() for aix 4.1.4 ? Ollivier Robert
I.I.S and Security - No authentication of scripts. daragh_malone@TELECOM.IE
- Re: I.I.S and Security - No authentication of scripts. Greg Haverkamp
Yet another Internet Explorer bug... Aleph One
4.4BSD NFS File Handles David Sacerdote
4.4BSD NFS File Handles Aleph One
- Re: 4.4BSD NFS File Handles Rob Millner
I.I.S 3.0: Another slight security concern ? daragh_malone@TELECOM.IE
COLD FUSION BUG Bill Staples
Solaris 2.5 'nispopulate' vulnerability Rune Braathen
Re: Bug in connect() ? Frank Hofmann
- Re: Bug in connect() ? Frank Hofmann
BIND-4.9.5-P1 DoS Attack Jared Mauch
Lynx/MSIE denial-of-service Doctor Who
- Re: Lynx/MSIE denial-of-service Christopher Blizzard
xterm segfaults from environment variables - too obvious David Luyer
- Re: xterm segfaults from environment variables - too obvious Alex Belits
SGI Security Advisory 19970301-01-P - IRIX 5.x and 6.x fsdump Aleph One
Re: Bug in connect() for aix 4.1.4 ? Steve Campbell
- Re: Bug in connect() for aix 4.1.4 ? Valdis.Kletnieks@VT.EDU
Secuirty Hole In Older Perl Installs... Ken Robson
- Re: Secuirty Hole In Older Perl Installs... Christian Groessler
Division of Privilege (DoP) - Potential Security Vulnerability Aleph One
runpipe v1.2 with security hole fix Aleph One
Re: xterm segfaults from environment variables - too obvious Alex Belits
- Re: xterm segfaults from environment variables - too obvious David Luyer
Exploit for buffer overflow in /bin/eject - Solaris 2.X - Cristian SCHIPOR
- Re: Exploit for buffer overflow in /bin/eject - Solaris 2.X - Jonathan Sturges
- Re: Exploit for buffer overflow in /bin/eject - Solaris 2.X - Jonathan Sturges
- Re: Exploit for buffer overflow in /bin/eject - Solaris 2.X - The Nocturnal Prince
- Re: Exploit for buffer overflow in /bin/eject - Solaris 2.X - Casper Dik
- Re: Exploit for buffer overflow in /bin/eject - Solaris 2.X - Casper Dik
Repeat announcement of the NTBugTraq mailing list Russ
Shockwave Security Alert Aleph One
gzip security problem Aleph One
gzip security problem Aleph One
Shockwave Security Alert Aleph One
- Re: Shockwave Security Alert Joseph Fish
Frotpage Extensions and Unix Roland Spatzenegger
- Re: Frotpage Extensions and Unix M.
Internet Explorer Bug #4 Aaron Spangler
- Re: Internet Explorer Bug #4 Dominique Brezinski
- Re: Internet Explorer Bug #4 Paul
- Re: Internet Explorer Bug #4 Aaron Spangler
- Re: Internet Explorer Bug #4 Alain Thivillon
- Re: Internet Explorer Bug #4 Steve Birnbaum
- Re: Internet Explorer Bug #4 Rubens Kuhl Jr.
- Re: Internet Explorer Bug #4 Rubens Kuhl Jr.
Internet explorer gives your NT password away! Paul Ashton
bin/2983: Security bug (buffer overflow) in lib/libterm/tgoto.c Aleph One
Re: bin/2983: Security bug (buffer overflow) in Eivind Eklund
ANNOUNCE Security patches for INN (pre-1.5.1 versions). Jared Mauch
Exploit for MSIE on Win95 Steve Birnbaum
http://www.security.org.il/msnetbreak/ Aleph One
Security Bulletins Digest Aleph One
INND exploit Works behind firewalls Rikhardur Egilsson
INND exploit Frank 'Scruffy' Miller
[INND exploit] The "intruder-shell" Rikhardur Egilsson
- Re: [INND exploit] The "intruder-shell" Brandon Black
- superprobexploit linux HAM SWAP-LINUX
Remake: buffer overflow in /bin/fdformat + exploit (Solaris2.X) Cristian Schipor
buffer over in hp-ux 10.20 kernel Darren Reed
buffer over in hp-ux 10.20 kernel C0WZ1LL4@NETSPACE.ORG
- Re: your mail Stefan Laudat
- Re: New Sendmail bug Jeffrey Moyer
- Re: New Sendmail bug Gonzo Granzeau
- Re: New Sendmail bug Claude Scarpelli
- Re: your mail Jamie Rishaw
- Re: your mail Illuminati Primus
- ObNag: running sendmail as root Tom Guptill
- Re: buffer over in hp-ux 10.20 kernel Security Alert
[linux-security] Re: tftpd bug (was: "Secure" tftpd source for Aleph One
- Re: [linux-security] Re: tftpd bug (was: "Secure" tftpd source Warner Losh
- Re: [linux-security] Re: tftpd bug (was: "Secure" tftpd source Alex Belits
- Re: [linux-security] Re: tftpd bug (was: "Secure" tftpd source Warner Losh
- Re: [linux-security] Re: tftpd bug (was: "Secure" tftpd source David Holland
Cisco 2509/2511 Albert Siersema
- Re: Cisco 2509/2511 Dan Brown
- Re: Cisco 2509/2511 Erdinc KAYA
- Re: Cisco 2509/2511 Gustavo A. Lozano
Latest IE FIX from MS is a HOAX Aaron Spangler
- Re: Latest IE FIX from MS is a HOAX Michael H. Warfield
Reported Sendmail 8.8.4 Exploit gshapiro@SENDMAIL.ORG
more sendmail poop *Hobbit*
minor vulnerability in ELM Dmitry E. Kim
FreeBSD-SA-97:02: Buffer overflow in lpd Aleph One
NIS+ and signed directory objects (not!) Bill Paul
ANNOUNCE : NTCrack v1.0 Jonathan Wilkins
There are more loopholes in LPD Patrick Powell
symlink bug in tin/rtin NetRunner
- Re: symlink bug in tin/rtin Nelson Murilo
- Re: symlink bug in tin/rtin Roland Rosenfeld
ANNOUNCE : NTCrack v2.0 Jonathan Wilkins
UK Encryption ban legislation {from: [comp.risks] RISKS DIGEST Jeff Uphoff

Last message date: Mon 31 Mar 1997 - 11:39:19 CST
Archived on: Fri Apr 04 1997 - 22:36:01 CST

Messages sorted by: [ date ][ subject ][ author ]
Other time periods
Search the archive

This archive was generated by hypermail 1.02.