bugtraq
By messages with attachments

Starting: Thu Jan 02 2003 - 22:20:08 CET
Ending: Sat Jan 25 2003 - 12:23:01 CET

• UT DDoS risk bugtest@sitoverde.com (Sat Jan 01 2000 - 10:43:30 CET)
  1. ut.tgz (11638 bytes)
• Trend Micro Officescan Denial of Service Marc Ruef (Mon Jul 17 2000 - 22:25:37 CEST)
  1. tmosdos.zip (13981 bytes)
• Stunnel: Format String Bug update Brian Hatch (Thu Jan 03 2002 - 07:38:53 CET)
  1. part (241 bytes)
• Heap overflow in snmpnetstat Juan M. de la Torre (Thu Jan 03 2002 - 16:11:24 CET)
  1. snmp.diff (536 bytes)
  2. snmpx.c (19634 bytes)
• Inproper input validation in Bugzilla <=2.14 - exploit funkysh (Sun Jan 06 2002 - 12:34:01 CET)
  1. buggyzilla.pl (2743 bytes)
• Linksys 'routers', SNMP issues Matthew S. Hallacy (Sun Jan 06 2002 - 13:55:17 CET)
  1. part (233 bytes)
• Re: Pine 4.33 (at least) URL handler allows embedded commands. Roman Drahtmueller (Mon Jan 07 2002 - 14:01:05 CET)
  1. pine-4.33-security.patch (4446 bytes)
• Re: IE https certificate attack Jim Knoble (Tue Jan 08 2002 - 00:22:02 CET)
  1. part (263 bytes)
• w00w00 on AIM Filter (Backdoors & SpyWare) Jordan Ritter (Tue Jan 08 2002 - 21:43:01 CET)
  1. part (233 bytes)
• xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2) zen-parse (Wed Jan 09 2002 - 10:45:13 CET)
  1. xchat.exploit (121 bytes)
• UPNP Denial of Service Gabriel Maggiotti (Wed Jan 09 2002 - 14:56:51 CET)
  1. chargen.c (2180 bytes)
  2. upnp_udp.c (2404 bytes)
• Security flaws in tinc Jerome Etienne (Wed Jan 09 2002 - 20:08:39 CET)
  1. tinc_secu.txt (5985 bytes)
• myvoicestream.com vulnerability Trey Valenta (Wed Jan 09 2002 - 23:30:38 CET)
  1. part (2640 bytes)
• Re: myvoicestream.com vulnerability Scott Dier (Thu Jan 10 2002 - 04:06:34 CET)
  1. part (190 bytes)
• Cookie modification allows unauthenticated user login in Geeklog 1.3 Adrian Chung (Thu Jan 10 2002 - 18:22:02 CET)
  1. part (233 bytes)
• Re: Unixware 7.1.1 rpc.cmsd remote exploit code. Dave Ahmad (Thu Jan 10 2002 - 18:54:34 CET)
  1. rpc.cmsd-exploit.c (5739 bytes)
• Security Update: [CSSA-2002-SCO.1] OpenServer: wu-ftpd ftpglob() vulnerability security@caldera.com (Thu Jan 10 2002 - 20:34:39 CET)
  1. part (238 bytes)
• [SECURITY] [DSA 099-1] New XChat packages fix potential IRC session hijacking Martin Schulze (Sat Jan 12 2002 - 12:46:27 CET)
  1. part (6039 bytes)
• cdrdao insecure filehandling Jens Steube (Sun Jan 13 2002 - 00:09:20 CET)
  1. cdrdaohack.sh (1237 bytes)
• [SECURITY] [DSA 100-1] New gzip packages fix potential buffer overflow Martin Schulze (Sun Jan 13 2002 - 11:08:59 CET)
  1. part (3767 bytes)
• Re: cdrdao insecure filehandling Guillaume PELAT (Tue Jan 15 2002 - 10:45:46 CET)
  1. show_file.sh (472 bytes)
• Re: cdrdao insecure filehandling Anthony DeRobertis (Tue Jan 15 2002 - 13:12:02 CET)
  1. part (241 bytes)
• FWD: IRIX nsd Vulnerability Dave Ahmad (Wed Jan 16 2002 - 01:26:39 CET)
  1. 20020102-02-I (9500 bytes)
• Re: [RHSA-2002:004-06] New groff packages available to fix security problems Colin Watson (Wed Jan 16 2002 - 06:47:31 CET)
  1. part (233 bytes)
• Re: cdrdao insecure filehandling martin f krafft (Wed Jan 16 2002 - 14:49:13 CET)
  1. part (241 bytes)
• '/usr/bin/at 31337 + vuln' problem + exploit zen-parse (Thu Jan 17 2002 - 01:19:08 CET)
  1. attn.tar.gz (3830 bytes)
• Re: uucp --config patch -- not sufficient Charles 'core' Stevenson (Sun Jan 20 2002 - 12:22:53 CET)
  1. debian-uucp.tar.gz (1489 bytes)
• security vulnerability in chuid Scott Parish (Mon Jan 21 2002 - 21:24:59 CET)
  1. part (233 bytes)
• CyberStop-Server-DoS-remote-attacks al3x hernandez (Wed Jan 23 2002 - 00:01:57 CET)
  1. CyberStop-Server-DoS-remote-attacks.txt (3598 bytes)
• Security Update: [CSSA-2001-SCO.35.2] REVISED: OpenServer: setcontext and sysi86 vulnerabilities security@caldera.com (Wed Jan 23 2002 - 02:43:23 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.2] Open UNIX, UnixWare 7: sort creates temporary files insecurely security@caldera.com (Fri Jan 25 2002 - 00:59:49 CET)
  1. part (238 bytes)
• Alteon ACEdirector signature/security bug Dave Plonka (Fri Jan 25 2002 - 23:09:40 CET)
  1. acedirector_request (1526 bytes)
• rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available) Jim Knoble (Sun Jan 27 2002 - 10:45:41 CET)
  1. part (250 bytes)
• user-mode-linux problems Andrew Griffiths (Mon Jan 28 2002 - 03:16:57 CET)
  1. mpmt.tgz (8620 bytes)
• SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446) 3APA3A (Mon Jan 28 2002 - 12:14:24 CET)
  1. stream3o.c (6815 bytes)
  2. stream3.c (6714 bytes)
• SGI IRIX: Various shells create temporary files insecurely update SGI Security Coordinator (Mon Jan 28 2002 - 22:43:27 CET)
  1. part (12086 bytes)
• sastcpd 8.0 'authprog' local root vulnerability rpc (Thu Jan 31 2002 - 07:40:58 CET)
  1. authme.sh (528 bytes)
  2. part (190 bytes)
• Re: Fairly serious vulnerability in vBulletin 2.2.0 Sam Sargeant (Thu Jan 31 2002 - 23:23:18 CET)
  1. part (233 bytes)
• Re: Lotus Domino password bypass Chad Loder (Mon Feb 04 2002 - 21:23:22 CET)
  1. part (289 bytes)
• OSX ICQ DoS Stephen (Tue Feb 05 2002 - 17:00:45 CET)
  1. osxicq.c (1603 bytes)
• Published Report of Vulnerability in Lucent VitalSuite Software Richard Hafner (Tue Feb 05 2002 - 22:25:41 CET)
  1. Lucent_VS_SB-201.pdf (9018 bytes)
• RE: Long path exploit on NTFS Elan Hasson (Thu Feb 07 2002 - 05:25:12 CET)
  1. ntfs_fucked.JPG (22894 bytes)
• Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability security@caldera.com (Thu Feb 07 2002 - 20:55:05 CET)
  1. part (238 bytes)
• Re: MSN Messenger and UDP 1900 Valdis.Kletnieks@vt.edu (Fri Feb 08 2002 - 08:00:57 CET)
  1. part (227 bytes)
• RE: -Possible- licq D.o.S Jon Keating (Fri Feb 08 2002 - 16:08:26 CET)
  1. licq.icqd-chat.patch (489 bytes)
• -possible- Bufferoverflow in ICQ 2001b tsr (Fri Feb 08 2002 - 22:38:11 CET)
  1. icqpicvuln.zip (4346 bytes)
• Re: [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities Kris Kennaway (Sat Feb 09 2002 - 02:32:16 CET)
  1. part (231 bytes)
• SNMP Vulnerabilities SGI Security Coordinator (Tue Feb 12 2002 - 23:27:57 CET)
  1. part (6743 bytes)
• Security Update: [CSSA-2002-SCO.4] Open UNIX, UnixWare 7: snmpd memory fault vulnerabilities security@caldera.com (Tue Feb 12 2002 - 23:50:26 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.5] Open UNIX, UnixWare 7: encrypted password disclosure security@caldera.com (Thu Feb 14 2002 - 21:17:25 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2001-SCO.36.2] REVISED: Open UNIX, UnixWare 7: wu-ftpd ftpglob() vulnerability security@caldera.com (Thu Feb 14 2002 - 23:36:31 CET)
  1. part (238 bytes)
• Phusion-Webserver-v1.0-Bugs&Exploits-Remotes Alex Hernandez (Sun Feb 17 2002 - 01:36:11 CET)
  1. Phusion-Webserver-v1.0-Bugs_Exploits-Remotes_.txt (15643 bytes)
• Security Update: [CSSA-2002-SCO.5.1] REVISION: Open UNIX, UnixWare 7, OpenServer: encrypted password disclosure security@caldera.com (Mon Feb 18 2002 - 18:49:16 CET)
  1. part (238 bytes)
• Re: gnujsp: dir- and script-disclosure Stefan Gybas (Wed Feb 20 2002 - 16:54:22 CET)
  1. gnujsp-1.0.0.patch (653 bytes)
  2. gnujsp-1.0.1.patch (734 bytes)
• Security Update: [CSSA-2002-SCO.6] security@caldera.com (Thu Feb 21 2002 - 23:05:25 CET)
  1. part (238 bytes)
• RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall] Peter Bieringer (Fri Feb 22 2002 - 19:23:07 CET)
  1. part (233 bytes)
• [Fwd: RE: UPDATE: [wcolburn@nmt.edu: SMTP relay through checkpoint fire wall]] Corey J. Steele (Mon Feb 25 2002 - 22:39:02 CET)
  1. signature.asc (233 bytes)
  2. signature.asc (233 bytes)
• Colbalt-RAQ-v4-Bugs&Vulnerabilities Alex Hernandez (Thu Feb 28 2002 - 15:33:17 CET)
  1. Colbalt-RAQ-v4-Bugs_Vulnerabilities.txt (5237 bytes)
• Cobalt-RAQ-4-Bugs&Vulnerabilities Alex Hernandez (Fri Mar 01 2002 - 00:57:07 CET)
  1. Cobalt-RAQ-4-Bugs_Vulnerabilities.txt (5236 bytes)
• RE: IIS SMTP component allows mail relaying via Null Session Toni Lassila (Mon Mar 04 2002 - 07:13:03 CET)
  1. smime.p7s (2215 bytes)
• [H20020304]: Remotely exploitable format string vulnerability in ntop hologram (Mon Mar 04 2002 - 13:46:18 CET)
  1. H20020304.txt (3170 bytes)
• Security Update: [CSSA-2002-SCO.7] OpenServer: multiple vulnerabilities in squid security@caldera.com (Mon Mar 04 2002 - 20:34:30 CET)
  1. part (238 bytes)
• Endymion SakeMail and MailMan File Disclosure Vulnerability rudi carell (Tue Mar 05 2002 - 17:47:38 CET)
  1. mailman.txt (1199 bytes)
  2. sakemail.txt (1492 bytes)
• [PINE-CERT-20020301] OpenSSH off-by-one Joost Pol (Thu Mar 07 2002 - 14:25:20 CET)
  1. pine-cert-20020301.txt.asc (1959 bytes)
• linux <=2.4.18 x86 traps.c problem Avery Buffington (Fri Mar 08 2002 - 17:46:32 CET)
  1. smime.p7s (2205 bytes)
• OpenSSH 2.9.9p2 packages for Immunix 6.2 with latest fix Greg KH (Sun Mar 10 2002 - 19:53:23 CET)
  1. part (233 bytes)
• Security Update: [CSSA-2002-SCO.8] OpenServer: dlvr_audit: exploitable buffer overflow security@caldera.com (Tue Mar 12 2002 - 01:12:20 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.9] OpenServer: IPFilter may incorrectly pass packets security@caldera.com (Tue Mar 12 2002 - 02:10:17 CET)
  1. part (238 bytes)
• exploiting the zlib bug in openssh H D Moore (Tue Mar 12 2002 - 10:57:29 CET)
  1. ssh_zlib.diff (20378 bytes)
  2. png_of_doom.png (2755 bytes)
  3. libpng_zlib_test.diff (2858 bytes)
• Security Update: [CSSA-2002-SCO.10] OpenServer: OpenSSH channel code vulnerability security@caldera.com (Tue Mar 12 2002 - 23:48:40 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.11] Open UNIX, UnixWare: OpenSSH channel code vulnerability security@caldera.com (Wed Mar 13 2002 - 01:33:04 CET)
  1. part (238 bytes)
• SOLARIS LOGIN remote via telnetd Morgan (Thu Mar 14 2002 - 13:41:04 CET)
  1. login-ex.c (18275 bytes)
• phpBB2 remote execution command nullbyte (Mon Mar 18 2002 - 17:47:34 CET)
  1. phpBB2.tar.gz (6085 bytes)
• Hosting Directory Traversal madness... Phuong Nguyen (Mon Mar 18 2002 - 23:44:14 CET)
  1. fix.zip (4489 bytes)
• Re: Identifying Kernel 2.4.x based Linux machines using UDP Charles-Edouard Ruault (Tue Mar 19 2002 - 20:09:05 CET)
  1. default_ttl.patch.gz (639 bytes)
• Re: [VulnWatch] Bypassing libsafe format string protection Steve Beattie (Wed Mar 20 2002 - 19:24:18 CET)
  1. part (233 bytes)
• Security Update: [CSSA-2002-SCO.12] Open UNIX, UnixWare 7: rpc.cmsd can be remotely exploited security@caldera.com (Thu Mar 21 2002 - 00:12:33 CET)
  1. part (238 bytes)
• Vulnerability in Apache for Win32 batch file processing - Remote command execution Ory Segal (Thu Mar 21 2002 - 18:06:46 CET)
  1. apache_advisory.txt (3334 bytes)
• UniNet InfoSec Conference Seth Arnold (Fri Mar 22 2002 - 03:31:31 CET)
  1. part (233 bytes)
• XSS + Info leak @ www.myownemail.com elaborate ruse (Fri Mar 22 2002 - 18:00:01 CET)
  1. myownemail.com.txt (2350 bytes)
• Re: Identifying Kernel 2.4.x based Linux machines using UDP Fyodor (Sat Mar 23 2002 - 10:43:02 CET)
  1. part (351 bytes)
• d_path() truncating excessive long path name vulnerability Wojciech Purczynski (Tue Mar 26 2002 - 14:40:20 CET)
  1. dpathx.c (1168 bytes)
• Re: DoS in debian (potato) proftpd martin f krafft (Wed Mar 27 2002 - 00:37:59 CET)
  1. part (241 bytes)
• OpenSSH channel_lookup() off by one exploit Morgan (Thu Mar 28 2002 - 04:23:51 CET)
  1. osshchan.tgz (20241 bytes)
• Security Update: [CSSA-2002-007.0] Linux: Updated Caldera Public Keys security@caldera.com (Fri Mar 29 2002 - 02:18:24 CET)
  1. part (238 bytes)
• Re: Identifying Kernel 2.4.x based Linux machines using UDP Phil (Fri Mar 29 2002 - 18:33:18 CET)
  1. default_ttl.patch.gz (639 bytes)
• Security Update: [CSSA-2002-008.0] Linux: CUPS buffer overflow when reading names of attributes security@caldera.com (Fri Mar 29 2002 - 19:49:04 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-009.0] Linux: X server allows access to any shared memory on the system security@caldera.com (Fri Mar 29 2002 - 20:35:56 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-010.0] Linux: ftp vulnerability in squid security@caldera.com (Fri Mar 29 2002 - 20:41:05 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-011.0] Linux: mod_ssl Buffer Overflow Condition security@caldera.com (Fri Mar 29 2002 - 20:46:10 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-012.0] Linux: OpenSSH channel code vulnerability security@caldera.com (Fri Mar 29 2002 - 20:56:23 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-013.0] Linux: Name Service Cache Daemon (nscd) advisory security@caldera.com (Fri Mar 29 2002 - 21:29:45 CET)
  1. part (238 bytes)
• Re: DoS in debian (potato) proftpd: 1.2.0pre10-2.0potato1 martin f krafft (Fri Mar 29 2002 - 22:40:02 CET)
  1. part (241 bytes)
• Security Update: [CSSA-2002-005.0] Linux - LD_LIBRARY_PATH problem in KDE sessions security@caldera.com (Sat Mar 30 2002 - 00:21:17 CET)
  1. part (238 bytes)
• Re: squirrelmail 1.2.5 email user can execute command Konstantin Riabitsev (Sun Mar 31 2002 - 23:21:40 CEST)
  1. signature.asc (241 bytes)
• icecast 1.3.11 remote shell/root exploit - #temp dizznutt@my.security.nl (Tue Apr 02 2002 - 09:51:55 CEST)
  1. icx.c (13494 bytes)
• Icecast temp patch (OR: Patches? We DO need stinkin' patches!!@$!) Neeko Oni (Wed Apr 03 2002 - 22:42:03 CEST)
  1. ice-patch (453 bytes)
• IRIX SNMP Vulnerabilities SGI Security Coordinator (Wed Apr 03 2002 - 23:03:42 CEST)
  1. part (11366 bytes)
• Security Update: [CSSA-2002-014.0] Linux: rsync supplementary groups vulnerability security@caldera.com (Thu Apr 04 2002 - 02:10:50 CEST)
  1. part (238 bytes)
• Full analysis of multiple remotely exploitable bugs in Icecast 1.3.11 dizznutt@my.security.nl (Thu Apr 04 2002 - 15:51:51 CEST)
  1. icecast.txt (4808 bytes)
• Security Update: [CSSA-2002-015.0] Linux: Double free in zlib (libz) vulnerability security@caldera.com (Fri Apr 05 2002 - 02:38:11 CEST)
  1. part (238 bytes)
• MDKSA-2002:026 - libsafe update Mandrake Linux Security Team (Fri Apr 12 2002 - 05:23:55 CEST)
  1. part (231 bytes)
• Security Update: [CSSA-2002-SCO.16] UnixWare 7.1.1 : Multiple Vulnerabilities in BIND security@caldera.com (Sat Apr 13 2002 - 01:46:08 CEST)
  1. part (238 bytes)
• Re: Remote buffer overflow in Webalizer Franck Coppola (Tue Apr 16 2002 - 00:59:16 CEST)
  1. patch.webalizer (768 bytes)
• Melange Chat POC DOS dvdman (Tue Apr 16 2002 - 04:04:57 CEST)
  1. Melange.chat.pl (1416 bytes)
• [CERT-intexxia] AOLServer DB Proxy Daemon Format String Vulnerability Benoît Roussel (Tue Apr 16 2002 - 13:53:22 CEST)
  1. SA1052-300102_aolserver-3.4.2-security-patched (605 bytes)
  2. SA1052-300102_aolserver-3.4.2-security-patched.sig (66 bytes)
• Security Update: [CSSA-2002-016.0] Linux: horde/imp cross scripting vulnerabilities security@caldera.com (Tue Apr 16 2002 - 23:21:29 CEST)
  1. part (238 bytes)
• Howto exploit a remote format bug automatically Frédéric Raynal (Thu Apr 18 2002 - 16:25:37 CEST)
  1. REMOTEFMT-HOWTO.txt (26890 bytes)
• Re: Amazon.com Password limit jon schatz (Fri Apr 19 2002 - 08:51:33 CEST)
  1. signature.asc (233 bytes)
• Re: Howto exploit a remote format bug automatically Fredrik Widlund (Fri Apr 19 2002 - 13:57:52 CEST)
  1. fox0.1.tgz (4502 bytes)
• Vulnerability in PostCalendar gcsb (Sat Apr 20 2002 - 09:51:53 CEST)
  1. PostCalendar-3.02-patch.tar.gz (18316 bytes)
• Re: Bug in QPopper (All Versions?) Tim Jackson (Sat Apr 20 2002 - 15:18:42 CEST)
  1. part (190 bytes)
• ALERT! ALERT! ALERT! ALERT! ALERT! hehehehe ;Pppppp gobbles@hushmail.com (Sat Apr 20 2002 - 22:24:42 CEST)
  1. screen-stuff.tgz (4176 bytes)
  2. screen-stuff.tgz.sig (247 bytes)
• arp problem Bart³omiej (Sun Apr 21 2002 - 14:45:15 CEST)
  1. part (190 bytes)
• PsyBNC Remote Dos POC dvdman (Tue Apr 23 2002 - 05:29:05 CEST)
  1. PsyBNC2.3.pl (1360 bytes)
• IRIX hpsnmpd vulnerability SGI Security Coordinator (Wed Apr 24 2002 - 18:52:06 CEST)
  1. part (10601 bytes)
• Microsoft Baseline Security Analyzer exploit (Exposed vulnerabilities' list) Menashe Eliezer (Thu Apr 25 2002 - 03:06:32 CEST)
  1. Microsoft_Response_to_MBSA_security_advisory.txt (2567 bytes)
• Security Update: [CSSA-2002-017.0] Linux: squid compressed DNS answer message boundary failure security@caldera.com (Fri Apr 26 2002 - 02:30:36 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-018.0] Linux: Race condition in fileutils security@caldera.com (Tue Apr 30 2002 - 00:46:22 CEST)
  1. part (238 bytes)
• 3CDaemon DoS exploit skyrim msh (Tue Apr 30 2002 - 06:43:53 CEST)
  1. msh3comdos.c (4352 bytes)
• RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS) Rui Miguel Silva Seabra (Tue Apr 30 2002 - 19:43:47 CEST)
  1. signature.asc (233 bytes)
• Security Update: [CSSA-2002-019.0] Linux: imlib processes untrusted images security@caldera.com (Tue Apr 30 2002 - 21:53:46 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.17] OpenServer 5.0.5 : sar -o buffer overflow security@caldera.com (Thu May 02 2002 - 03:03:15 CEST)
  1. part (238 bytes)
• Re: Flaw caused by default rulesets in many desktop firewalls under windows Frank Knobbe (Sat May 11 2002 - 05:34:45 CEST)
  1. signature.asc (351 bytes)
• Re: Unfortunate interaction between EZMLM and MessageLabs virus scanning Stephen Cope (Sat May 11 2002 - 06:14:51 CEST)
  1. part (251 bytes)
• Bug in mnogosearch-3.1.19 qitest1 (Sat May 11 2002 - 19:08:15 CEST)
  1. mnogosearch-3.1.19.patch (526 bytes)
• Security Update: [CSSA-2002-020.0] Linux: icecast buffer overflows and denial-of-service security@caldera.com (Mon May 13 2002 - 23:28:15 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-018.1] Linux: REVISED: Race condition in fileutils security@caldera.com (Tue May 14 2002 - 22:28:29 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-021.0] Linux: imapd buffer overflow when fetching partial mailbox attributes security@caldera.com (Wed May 15 2002 - 22:02:30 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-022.0] Linux: OpenSSH ticket and token passing buffer overflow security@caldera.com (Thu May 16 2002 - 01:53:33 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-023.0] Linux: PHP multipart/form-data vulnerabilities security@caldera.com (Fri May 17 2002 - 20:20:54 CEST)
  1. part (238 bytes)
• Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II) Ory Segal (Sun May 19 2002 - 10:00:57 CEST)
  1. 8.3_Advisory.txt (4872 bytes)
• Re: ps under FreeBSD Torbjorn Kristoffersen (Mon May 20 2002 - 04:29:37 CEST)
  1. ps.c.diff (1353 bytes)
• CAPZLOCK SECURITY ADVISORY NO. 1 capzlock@hushmail.com (Mon May 20 2002 - 16:29:32 CEST)
  1. capzlock-1.txt (3118 bytes)
  2. capzlock-1.txt.sig (247 bytes)
• Security Update: [CSSA-2002-SCO.19] OpenServer 5.0.5 OpenServer 5.0.6 : yppasswdd remotely exploitable buffer overflow security@caldera.com (Tue May 21 2002 - 02:55:25 CEST)
  1. part (238 bytes)
• Cisco IOS ICMP redirect DoS FX (Tue May 21 2002 - 12:37:09 CEST)
  1. CiscoICMP.txt (3186 bytes)
• YoungZSoft CMailServer overflow, PATCH + WAREZ!@#! 2c79cbe14ac7d0b8472d3f129fa1df55@hushmail.com (Tue May 21 2002 - 23:49:54 CEST)
  1. cmeexp.c (11552 bytes)
  2. cmeexp.c.sig (247 bytes)
  3. cmepatch.c (1311 bytes)
  4. cmepatch.c.sig (247 bytes)
• Re: Efficient Networks Contact info Pedro Paulo Ferreira Bueno (Thu May 23 2002 - 17:51:23 CEST)
  1. smime.p7s (3183 bytes)
• [Fwd: Updated version of SSH Secure Shell available] Stephanie Schiebert (Thu May 23 2002 - 19:22:29 CEST)
  1. signature.asc (175 bytes)
• Security Update: [CSSA-2002-SCO.20] OpenServer 5.0.5 OpenServer 5.0.6 : popper buffer overflow and denial-of-service security@caldera.com (Fri May 24 2002 - 01:53:09 CEST)
  1. part (238 bytes)
• Cisco IDS Device Manager 3.1.1 Advisory Andrew.Lopacki@amsouth.com (Fri May 24 2002 - 20:42:07 CEST)
  1. ids.txt.asc (3376 bytes)
• Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar Martijn Boerwinkel (Sun May 26 2002 - 17:59:33 CEST)
  1. signature.asc (233 bytes)
• Re: Problems with various windows FTP servers Stephen Cope (Tue May 28 2002 - 12:13:01 CEST)
  1. part (251 bytes)
• Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely security@caldera.com (Wed May 29 2002 - 01:05:40 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely security@caldera.com (Wed May 29 2002 - 01:07:42 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.23] Open UNIX 8.0.0 UnixWare 7.1.1 : ftpd allows data connection hijacking via PASV mode security@caldera.com (Thu May 30 2002 - 20:30:43 CEST)
  1. part (238 bytes)
• solaris lpd thing ron1n . (Mon Jun 03 2002 - 15:17:02 CEST)
  1. remorse.tar.gz (11687 bytes)
• QNX badc0ded@badc0ded.com (Mon Jun 03 2002 - 18:56:21 CEST)
  1. qnx.txt (2133 bytes)
• Security Update: [CSSA-2002-024.0] Volution Manager: Directory Administrator password in cleartext security@caldera.com (Mon Jun 03 2002 - 22:58:59 CEST)
  1. part (238 bytes)
• Re: MIME::Tools Perl module and virus scanners Bennett Todd (Tue Jun 04 2002 - 15:32:06 CEST)
  1. part (233 bytes)
• Security Update: [CSSA-2002-025.0] Linux: tcpdump AFS RPC and NFS packet vulnerabilities security@caldera.com (Wed Jun 05 2002 - 21:30:17 CEST)
  1. part (238 bytes)
• Re: Three possible DoS attacks against some IOS versions. Big Poop (Sun Jun 09 2002 - 14:41:25 CEST)
  1. hsrp.tar.gz (5448 bytes)
• remote DoS in Mozilla 1.0 Tom (Mon Jun 10 2002 - 10:20:06 CEST)
  1. part (233 bytes)
• Security Update: [CSSA-2002-SCO.24] Open UNIX 8.0.0 : BIND 9 Denial-of-Service vulnerability security@caldera.com (Tue Jun 11 2002 - 00:31:35 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.25] OpenServer 5.0.5 OpenServer 5.0.6 : snmpd denial-of-service vulnerabilities. security@caldera.com (Tue Jun 11 2002 - 01:50:01 CEST)
  1. part (238 bytes)
• 13 local PoC root exploit programs for Progress Database KF (Tue Jun 11 2002 - 04:13:30 CEST)
  1. working.tar (30720 bytes)
• Security Update: [CSSA-2002-026.0] Linux: ghostscript arbitrary command execution security@caldera.com (Wed Jun 12 2002 - 03:16:26 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.26] OpenServer 5.0.6a : squid compressed DNS answer message boundary failure security@caldera.com (Fri Jun 14 2002 - 01:59:03 CEST)
  1. part (238 bytes)
• tracesex.pl : TrACESroute 6.0 GOLD local format string exploit thc [@drug.org] (Mon Jun 17 2002 - 20:01:04 CEST)
  1. tracesex.pl (3035 bytes)
• Security Update: [CSSA-2002-027.0] Linux: fetchmail imap message count vulnerability security@caldera.com (Tue Jun 18 2002 - 00:01:50 CEST)
  1. part (238 bytes)
• ColdFusion MX Cross Site Scripting vulnerability Ory Segal (Tue Jun 18 2002 - 19:15:39 CEST)
  1. ColdFusion_MX_CSS.txt (1743 bytes)
• Re: ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server Dave Aitel (Tue Jun 18 2002 - 21:55:23 CEST)
  1. apachefun.tar (20480 bytes)
  2. signature.asc (233 bytes)
• Security Update: [CSSA-2002-SCO.27] UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability security@caldera.com (Wed Jun 19 2002 - 00:37:31 CEST)
  1. part (238 bytes)
• [AP] Cisco vpnclient buffer overflow methodic (Wed Jun 19 2002 - 17:50:13 CEST)
  1. 0002_AP.vpnclient.txt (2309 bytes)
• Remote Apache 1.3.x Exploit gobbles@hushmail.com (Wed Jun 19 2002 - 21:45:24 CEST)
  1. apache-scalp.c (10811 bytes)
  2. apache-scalp.c.sig (247 bytes)
• Security Update: [CSSA-2002-028.0] Linux: dhcpd dynamic DNS format string vulnerability security@caldera.com (Wed Jun 19 2002 - 23:43:59 CEST)
  1. part (238 bytes)
• Half-life fake players bug Auriemma Luigi (Thu Jun 20 2002 - 21:00:03 CEST)
  1. hl.zip (19118 bytes)
• Re: XSS in CiscoSecure ACS v3.0 Lisa Napier (Fri Jun 21 2002 - 04:15:50 CEST)
  1. part (169 bytes)
• [AP] YaBB Cross-Site Scripting vulnerability methodic (Fri Jun 21 2002 - 17:08:24 CEST)
  1. 0003_AP.yabb.txt (2616 bytes)
• AdvServer DoS elaborate ruse (Fri Jun 21 2002 - 21:22:53 CEST)
  1. ACF1848.txt (3168 bytes)
• Security Update: [CSSA-2002-029.0] Linux: Apache Web Server Chunk Handling Vulnerability security@caldera.com (Sat Jun 22 2002 - 02:01:28 CEST)
  1. part (238 bytes)
• Ending a few arguments with one simple attachment. gobbles@hushmail.com (Sat Jun 22 2002 - 06:44:43 CEST)
  1. apache-nosejob.c (25073 bytes)
  2. apache-nosejob.c.sig (247 bytes)
• blowchunks - protecting existing apache servers until upgrades arrive Cris Bailiff (Sat Jun 22 2002 - 08:19:54 CEST)
  1. BlowChunks.pl (1939 bytes)
  2. mod_blowchunks.c (2294 bytes)
• Security Update: [CSSA-2002-SCO.30] UnixWare 7.1.1 Open UNIX 8.0.0 : dtprintinfo buffer overflow with Help search security@caldera.com (Wed Jun 26 2002 - 02:34:08 CEST)
  1. part (238 bytes)
• Remote buffer overflow in resolver code of libc Mark Lastdrager (Wed Jun 26 2002 - 09:37:16 CEST)
  1. pine-cert-20020601.txt (1292 bytes)
• [sp00fed packet] Whois vulnerability Zeux (Thu Jun 27 2002 - 14:00:43 CEST)
  1. advisory1 (1336 bytes)
• Security Update: [CSSA-2002-030.0] Linux: OpenSSH Vulnerabilities in Challenge Response Handling security@caldera.com (Thu Jun 27 2002 - 20:52:21 CEST)
  1. part (238 bytes)
• Re: Apache worm in the wild flynn@energyhq.homeip.net (Fri Jun 28 2002 - 13:38:34 CEST)
  1. part (187 bytes)
• Proof of Concept Code for OpenSSH gobbles@hushmail.com (Mon Jul 01 2002 - 19:32:00 CEST)
  1. sshutup-theo.tar.gz (14816 bytes)
  2. sshutup-theo.tar.gz.sig (247 bytes)
• RE: ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored Nelson Brito (Mon Jul 01 2002 - 22:53:38 CEST)
  1. part (2486 bytes)
• Security Update: [CSSA-2002-SCO.31] UnixWare 7.1.1 Open UNIX 8.0.0 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error security@caldera.com (Tue Jul 02 2002 - 00:15:43 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.32] OpenServer 5.0.5 OpenServer 5.0.6 : Apache Web Server Chunk Handling Vulnerability / mod_ssl off-by-one error security@caldera.com (Tue Jul 02 2002 - 00:17:29 CEST)
  1. part (238 bytes)
• BIND 9.2.1 patch, multiple RR's for singleton types. Tim Gladding (Tue Jul 02 2002 - 06:33:44 CEST)
  1. rdataslab.c.patch (1076 bytes)
• Re: Multiple vulnerabilities in atphttpd-0.4b badc0ded@badc0ded.com (Tue Jul 02 2002 - 10:34:30 CEST)
  1. atp-exploit.c (1989 bytes)
• Re: Remote DoS in AnlaogX SimpleServer:www 1.16 by way of bugtest (Tue Jul 02 2002 - 21:46:04 CEST)
  1. http.tgz (4544 bytes)
• Re: CommuniGate Pro directory listings tfm@tfm.org (Wed Jul 03 2002 - 11:28:06 CEST)
  1. cgp_dir.txt (2900 bytes)
• SunPCi II VNC weak authentication scheme vulnerability Richard van den Berg (Wed Jul 03 2002 - 17:38:42 CEST)
  1. vncsunpci.c (14695 bytes)
• remote winamp 2.x exploit (all current versions) 2c79cbe14ac7d0b8472d3f129fa1df (Fri Jul 05 2002 - 17:13:43 CEST)
  1. wapatch.zip (26598 bytes)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel (Fri Jul 05 2002 - 18:07:16 CEST)
  1. signature.asc (233 bytes)
• LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT kanix THE HACKER (Sat Jul 06 2002 - 15:45:17 CEST)
  1. fartsy.pl (3748 bytes)
• sparc exploit for known solaris 8 kcms_configure overflow Adam Slattery (Sun Jul 07 2002 - 18:49:51 CEST)
  1. kcms_sparc.c (8870 bytes)
• Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT Olaf Kirch (Mon Jul 08 2002 - 13:03:04 CEST)
  1. lalla.c (326 bytes)
• Re: UnBodyGuard a.k.a Bouncer (Solaris kernel function hijacking) (fwd) Dave Aitel (Mon Jul 08 2002 - 16:23:48 CEST)
  1. signature.asc (233 bytes)
• Security Update: [CSSA-2002-SCO.28] UnixWare 7.1.1 Open UNIX 8.0.0 : rpc.ttdbserverd file creation and deletion vulnerabilities security@caldera.com (Thu Jul 11 2002 - 19:34:43 CEST)
  1. part (238 bytes)
• IRIX DNS resolver vulnerability SGI Security Coordinator (Thu Jul 11 2002 - 21:03:59 CEST)
  1. part (5614 bytes)
• Popcorn vulnerabilities bugtest@sitoverde.com (Thu Jul 11 2002 - 21:16:49 CEST)
  1. popcorn.tgz (6974 bytes)
• Vulnerability found: The Adobe eBook Library Vladimir Katalov (Fri Jul 12 2002 - 13:56:03 CEST)
  1. vuln-adobe-library.txt (3792 bytes)
• Re: MacOS X SoftwareUpdate Vulnerability gabriel rosenkoetter (Fri Jul 12 2002 - 15:14:49 CEST)
  1. part (187 bytes)
• Re: [VulnWatch] 5 bugs Simon Hausmann (Mon Jul 15 2002 - 19:04:49 CEST)
  1. part (233 bytes)
• @stake Advisory: Norton Personal Internet Firewall HTTP Proxy Vulnerability advisories@atstake.com (Mon Jul 15 2002 - 21:42:13 CEST)
  1. a071502-1.txt (3862 bytes)
• Remote ICQ Sound Desactivation xLaNT (Mon Jul 15 2002 - 22:43:12 CEST)
  1. blank.scm (265 bytes)
• Security Update: [CSSA-2002-SCO.33] OpenServer 5.0.5 OpenServer 5.0.6 : timed does not enforce nulls security@caldera.com (Tue Jul 16 2002 - 02:05:04 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.34] OpenServer 5.0.5 OpenServer 5.0.6 : uux status file name buffer overflow security@caldera.com (Tue Jul 16 2002 - 02:06:03 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-031.0] Linux: mod_ssl off-by-one error security@caldera.com (Wed Jul 17 2002 - 00:16:10 CEST)
  1. part (238 bytes)
• Re: Sniffable Switch Project martin f krafft (Wed Jul 17 2002 - 12:37:40 CEST)
  1. part (241 bytes)
• Re: Sniffable Switch Project martin f krafft (Wed Jul 17 2002 - 20:47:35 CEST)
  1. part (241 bytes)
• MERCUR Mailserver advisory/remote exploit 2c79cbe14ac7d0b8472d3f129fa1df (Thu Jul 18 2002 - 02:29:48 CEST)
  1. mercrexp.c (10946 bytes)
• Linux kernel setgid implementation flaw FozZy (Fri Jul 19 2002 - 04:54:18 CEST)
  1. drop_gid.c (1354 bytes)
• ANNOUNCING: Debian GNU/Linux 3.0 martin f krafft (Sat Jul 20 2002 - 01:13:48 CEST)
  1. part (241 bytes)
• Nanog traceroute format string exploit. SpaceWalker (Sun Jul 21 2002 - 14:09:24 CEST)
  1. tracerouteexp.tgz (4087 bytes)
• Security Update: [CSSA-2002-SCO.35] OpenServer 5.0.5 OpenServer 5.0.6 : crontab format string vulnerability security@caldera.com (Mon Jul 22 2002 - 23:44:23 CEST)
  1. part (238 bytes)
• MailMax security advisory/exploit/patch 2c79cbe14ac7d0b8472d3f129fa1df (Tue Jul 23 2002 - 11:06:24 CEST)
  1. mmpatch.zip (30064 bytes)
• Re: PHP Resource Exhaustion Denial of Service vjt (Tue Jul 23 2002 - 22:22:22 CEST)
  1. part (190 bytes)
• Re: Pressing CTRL in IE is dangerous - Sandblad advisory #8 Peter Pentchev (Wed Jul 24 2002 - 10:42:01 CEST)
  1. part (188 bytes)
• Re: Nanog traceroute format string exploit. Olaf Kirch (Wed Jul 24 2002 - 14:43:11 CEST)
  1. exp.fix (339 bytes)
• Pegasus mail DoS Auriemma Luigi (Wed Jul 24 2002 - 23:51:09 CEST)
  1. pegasus.zip (11503 bytes)
• Re: qmailadmin SUID buffer overflow badc0ded (Thu Jul 25 2002 - 01:05:04 CEST)
  1. qmailadmin-exp.c (1394 bytes)
• Re: Interface promiscuity obscurity in Linux plattner@caltech.edu (Thu Jul 25 2002 - 01:21:46 CEST)
  1. part (190 bytes)
• IPSwitch IMail ADVISORY/EXPLOIT/PATCH 2c79cbe14ac7d0b8472d3f129fa1df (Fri Jul 26 2002 - 04:33:38 CEST)
  1. impatch.zip (30022 bytes)
• Easy Homepage Creator Vulnerability Arek Suroboyo (Sat Jul 27 2002 - 21:56:27 CEST)
  1. easyhomepage.zip (763 bytes)
• Easy Guestbook Vulnerabilities Arek Suroboyo (Sat Jul 27 2002 - 21:58:55 CEST)
  1. easyguestbook.zip (736 bytes)
• KDE 2/3 artsd 1.0.0 local root exploit kokane (Mon Jul 29 2002 - 19:55:18 CEST)
  1. bp_artsd.c (1784 bytes)
• Re: XWT Foundation Advisory Peter Watkins (Tue Jul 30 2002 - 06:57:52 CEST)
  1. part (233 bytes)
• Re: OpenSSL patches for other versions Ademar de Souza Reis Jr. (Tue Jul 30 2002 - 19:42:12 CEST)
  1. openssl-0.9.5a-security.patch (16338 bytes)
  2. openssl-0.9.6a-security.patch (16398 bytes)
  3. openssl-0.9.6b-security.patch (16354 bytes)
• Bug in Eupload [Zero_Byte] (Wed Jul 31 2002 - 01:16:44 CEST)
  1. Bug_in_Eupload.txt (2081 bytes)
• Security Update: [CSSA-2002-032.0] Linux: temporary file races in libmm security@caldera.com (Wed Jul 31 2002 - 03:20:54 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-033.0] Linux: multiple vulnerabilities in openssl security@caldera.com (Wed Jul 31 2002 - 20:16:16 CEST)
  1. part (238 bytes)
• OpenSSH Security Advisory: Trojaned Distribution Files Niels Provos (Thu Aug 01 2002 - 17:18:12 CEST)
  1. part (523 bytes)
• rpc.pcnfsd vulnerabilities on IRIX SGI Security Coordinator (Thu Aug 01 2002 - 19:38:42 CEST)
  1. part (10284 bytes)
• iPlanet vulnerabilities on IRIX SGI Security Coordinator (Thu Aug 01 2002 - 22:34:08 CEST)
  1. part (11927 bytes)
• trillian buffer overflow John C. Hennessy (Thu Aug 01 2002 - 23:52:11 CEST)
  1. trillian.txt (2556 bytes)
• Lcc-win32 infos diffusion Auriemma Luigi (Fri Aug 02 2002 - 23:07:35 CEST)
  1. italian.zip (2573 bytes)
• SPIKE 2.5 and associated vulns Dave Aitel (Tue Aug 06 2002 - 02:02:44 CEST)
  1. signature.asc (233 bytes)
• Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries security@caldera.com (Tue Aug 06 2002 - 02:12:27 CEST)
  1. part (238 bytes)
• MS SQL Server Hello Overflow NASL script Dave Aitel (Wed Aug 07 2002 - 17:10:19 CEST)
  1. signature.asc (233 bytes)
• BIND vulnerabilities in IRIX named SGI Security Coordinator (Wed Aug 07 2002 - 23:51:40 CEST)
  1. part (11412 bytes)
• Re: White paper: Exploiting the Win32 API. Simos Xenitellis (Thu Aug 08 2002 - 14:11:11 CEST)
  1. signature.asc (875 bytes)
• Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd security@caldera.com (Fri Aug 09 2002 - 02:01:17 CEST)
  1. part (238 bytes)
• Re: EEYE: Macromedia Shockwave Flash Malformed Header Overflow Scott Lampert (Fri Aug 09 2002 - 21:44:38 CEST)
  1. part (190 bytes)
• Re: Microsoft SQL Server 2000,7 OpenRowSet Buffer Overflow vulnerability (#NISR02072002) Dave Aitel (Fri Aug 09 2002 - 22:30:36 CEST)
  1. signature.asc (233 bytes)
• IRIX ftpd minor vulnerabilities SGI Security Coordinator (Wed Aug 14 2002 - 01:12:19 CEST)
  1. part (10891 bytes)
• new bugs in MyWebServer D4rkGr3y (Wed Aug 14 2002 - 21:40:55 CEST)
  1. MWS_exp.pl (7151 bytes)
• Re: "August 2002 Cumulative Update For Internet Explorer (Q323759)" & IE6 SP1 Dave English (Fri Aug 16 2002 - 12:49:35 CEST)
  1. signature.asc (178 bytes)
• Sun RPC xdr_array vulnerability on IRIX SGI Security Coordinator (Fri Aug 16 2002 - 18:36:01 CEST)
  1. part (22759 bytes)
• Re: PHP-Nuke v5.6 - Users can compromise admin accts. Konstantin Riabitsev (Fri Aug 16 2002 - 21:40:23 CEST)
  1. signature.asc (241 bytes)
• Freebsd FD exploit dvdman (Mon Aug 19 2002 - 03:01:13 CEST)
  1. iosmash2.c (2151 bytes)
• Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion and buffer overflow vulnerabilities security@caldera.com (Tue Aug 20 2002 - 00:28:26 CEST)
  1. part (238 bytes)
• NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability Ed Reed (Tue Aug 20 2002 - 18:06:57 CEST)
  1. NOVL-2002-2963297_-_NetBasic_Buffer_Overflow___Scripting_Vulnerability.txt (4106 bytes)
• NOVL-2002-2963307 - PERL Handler Vulnerability Ed Reed (Tue Aug 20 2002 - 18:10:09 CEST)
  1. NOVL-2002-2963307_-_PERL_Handler_Vulnerability.txt (3875 bytes)
• More Vulnerabilities with Pingtel xpressa SIP-based IP phones Ofir Arkin (Tue Aug 20 2002 - 23:12:16 CEST)
  1. More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt (19135 bytes)
• NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2 Ed Reed (Wed Aug 21 2002 - 21:50:01 CEST)
  1. NOVL-2002-2963349_-_Rconag6_Secure_IP_Login_Vulnerability_-_NW6SP2.txt (3305 bytes)
• Cisco IOS exploit PoC FX (Thu Aug 22 2002 - 10:03:10 CEST)
  1. UltimaRatioVegas.c (18461 bytes)
• Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg security@caldera.com (Thu Aug 22 2002 - 22:32:34 CEST)
  1. part (238 bytes)
• Re: IPv4 mapped address considered harmful Peter J. Holzer (Fri Aug 23 2002 - 09:54:56 CEST)
  1. part (428 bytes)
• Re: [luca.ercoli@inwind.it: DoS against mysqld] Simone Piunno (Fri Aug 23 2002 - 21:18:34 CEST)
  1. part (245 bytes)
• Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver security@caldera.com (Sat Aug 24 2002 - 01:37:13 CEST)
  1. part (238 bytes)
• NOVL-2002-2961546 - SNMPv1 Trap and Request HandlingVulnerabilities Ed Reed (Sat Aug 24 2002 - 14:01:13 CEST)
  1. NOVL-2002-2961546_-_SNMPv1_Trap_and_Request_Handling.txt (3866 bytes)
• Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow security@caldera.com (Tue Aug 27 2002 - 01:44:47 CEST)
  1. part (238 bytes)
• Re: IPv4 mapped address considered harmful Anthony DeRobertis (Tue Aug 27 2002 - 06:18:28 CEST)
  1. signature.asc (190 bytes)
• Re: IPv4 mapped address considered harmful Anthony DeRobertis (Tue Aug 27 2002 - 07:48:51 CEST)
  1. signature.asc (190 bytes)
• Re: IPv4 mapped address considered harmful Anthony DeRobertis (Tue Aug 27 2002 - 09:20:16 CEST)
  1. signature.asc (190 bytes)
• Re: IPv4 mapped address considered harmful Anthony DeRobertis (Tue Aug 27 2002 - 10:15:21 CEST)
  1. signature.asc (190 bytes)
• Re: SAP R/3 default password vulnerability John Eisenschmidt (Tue Aug 27 2002 - 16:01:00 CEST)
  1. part (231 bytes)
• Re: iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow Dave Aitel (Wed Aug 28 2002 - 18:39:54 CEST)
  1. signature.asc (233 bytes)
• Yet another SMB dos concept code Huagang Xie (Thu Aug 29 2002 - 02:02:13 CEST)
  1. smb.dos.diff (908 bytes)
• Windows SMB DoS - Proof of concept Frederic Deletang (Thu Aug 29 2002 - 13:58:35 CEST)
  1. smbnuke.c (22204 bytes)
  2. part (242 bytes)
• Trillian XML parser buffer overflow John C. Hennessy (Sat Aug 31 2002 - 13:29:32 CEST)
  1. trillian2.txt (656 bytes)
• Happy Labor Day from Snosoft KF (Mon Sep 02 2002 - 18:29:40 CEST)
  1. Happy_labor_day.tar (20480 bytes)
• SPIKE 2.6 Released... Dave Aitel (Wed Sep 04 2002 - 18:02:21 CEST)
  1. signature.asc (233 bytes)
• KSTAT (and maybe others) bypass Dark Angel (Fri Sep 06 2002 - 04:06:10 CEST)
  1. Phantasmagoria.tgz (13061 bytes)
• Re: MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable Dirk Mueller (Sat Sep 07 2002 - 01:07:39 CEST)
  1. crosside-3.0.diff (6827 bytes)
  2. part (190 bytes)
• Trillian weakly encrypts saved passwords Evan Nemerson (Mon Sep 09 2002 - 11:20:04 CEST)
  1. trillian-ini-decrypt.c (5539 bytes)
• [SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix Martin Schulze (Mon Sep 09 2002 - 16:49:28 CEST)
  1. part (11590 bytes)
• Unmask 1.0 Release Party at My House! Dave Aitel (Mon Sep 09 2002 - 18:23:57 CEST)
  1. signature.asc (233 bytes)
• Small bug crashes OE Raistlin (Mon Sep 09 2002 - 22:01:42 CEST)
  1. test-crash.eml (5079 bytes)
• efstool slackware 7.1 local root exploit exploit included Cloud Ass (Wed Sep 11 2002 - 04:31:46 CEST)
  1. efstool.c (1644 bytes)
• Re: slashdot / slashcode disclosing passwords Craig Dickson (Wed Sep 11 2002 - 22:39:52 CEST)
  1. part (190 bytes)
• Re: PHP fopen() CRLF Injection Stefan Esser (Thu Sep 12 2002 - 19:55:25 CEST)
  1. part (241 bytes)
• Re: Password Security Policy Question Nick Lamb (Fri Sep 13 2002 - 03:12:23 CEST)
  1. part (233 bytes)
• Bug in Opera and Konqueror Zeux (Sun Sep 15 2002 - 19:07:02 CEST)
  1. advisory2.en (3890 bytes)
• Advisory: File disclosure in DB4Web Stefan.Bagdohn@guardeonic.com (Tue Sep 17 2002 - 14:44:11 CEST)
  1. guardadv-01-2002-db4web-file-disclosure.release.txt (3216 bytes)
• Advisory: TCP-Connection risk in DB4Web Stefan.Bagdohn@guardeonic.com (Tue Sep 17 2002 - 14:44:17 CEST)
  1. guardadv-02-2002-db4web-tcp-connect-bug.release.txt (5533 bytes)
• Re: OpenSSH 3.4p1 Privsep Peter J. Holzer (Tue Sep 17 2002 - 20:09:03 CEST)
  1. part (428 bytes)
• Re: Password Security Policy Question Crispin Cowan (Wed Sep 18 2002 - 02:03:01 CEST)
  1. part (253 bytes)
• Re: Trillian .74 and below, ident flaw. netmask {enZo} (Thu Sep 19 2002 - 23:13:13 CEST)
  1. trillident.c (4555 bytes)
• remote exploitable heap overflow in Null HTTPd 0.5.0 Bert Vanmanshoven (Mon Sep 23 2002 - 01:19:48 CEST)
  1. bakkum.c (8137 bytes)
  2. netric-adv009.txt (15361 bytes)
• Borland Interbase local root exploit grazer@digit-labs.org (Wed Sep 25 2002 - 21:05:32 CEST)
  1. interbase-gds-exploit.c (1838 bytes)
• iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv David Endler (Thu Sep 26 2002 - 16:58:48 CEST)
  1. gv-exploit.pdf (1377 bytes)
• Watchguard firewall appliances security issues Joao Gouveia (Fri Sep 27 2002 - 05:20:32 CEST)
  1. signature.asc (190 bytes)
• Software Update Available for Legacy RapidStream Appliances and W atchGuard Firebox Vclass appliances Steve Fallin (Fri Sep 27 2002 - 23:16:16 CEST)
  1. RSSA.SU.AMAD.txt (4726 bytes)
• GNU tar (Re: Allot Netenforcer problems, GNU TAR flaw) Solar Designer (Sat Sep 28 2002 - 15:39:33 CEST)
  1. tar-1.13.19-owl-dot-dot.diff (407 bytes)
  2. tar-1.13.19-owl-symlinks.diff (428 bytes)
• local exploitable overflow in rogue/FreeBSD stanojr (Sat Sep 28 2002 - 20:57:18 CEST)
  1. instant-rogue-exp.sh (2961 bytes)
• MyNewsGroups :) XSS patch Ulf Harnhammar (Mon Sep 30 2002 - 01:05:39 CEST)
  1. mynewsgroups.patch (4425 bytes)
• PPTP Dave Aitel (Tue Oct 01 2002 - 17:18:36 CEST)
  1. signature.asc (233 bytes)
• Citrix Published Application Brute Forcer wirepair (Wed Oct 02 2002 - 03:33:29 CEST)
  1. pubappbrute.tar.gz (3807 bytes)
• Re: Solaris 2.6, 7, 8 Ido Dubrawsky (Wed Oct 02 2002 - 21:16:28 CEST)
  1. part (186 bytes)
• Re: [VulnWatch] Notes on the SQL Cumulative patch Dave Aitel (Thu Oct 03 2002 - 18:16:36 CEST)
  1. signature.asc (233 bytes)
• injecting commands on a ptraced telnet/ssh session by way of xenion (Fri Oct 04 2002 - 09:09:07 CEST)
  1. onelove.c (13998 bytes)
  2. 0xBE1CF7AA.asc (1980 bytes)
• prover of concept code of windows help overflow buzheng (Thu Oct 10 2002 - 21:14:02 CEST)
  1. ex.c (3535 bytes)
• Security Update: [CSSA-2002-SCO.40] OpenServer 5.0.5 OpenServer 5.0.6 : ypxfrd remote file access vulnerability security@caldera.com (Fri Oct 11 2002 - 00:53:04 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.39] OpenServer 5.0.5 OpenServer 5.0.6 : Buffer Overflow in Multiple DNS Resolver Libraries security@caldera.com (Sat Oct 12 2002 - 01:08:15 CEST)
  1. part (238 bytes)
• Ingenium Admin Password Vulnerability Brian Enigma (Tue Oct 15 2002 - 02:14:49 CEST)
  1. IngeniumDecoder.java (3206 bytes)
• securitybugware new network tool Jitsu-Disk (Tue Oct 15 2002 - 11:58:43 CEST)
  1. Announcement (6049 bytes)
• interSEC security advisory - Multiple bugs in Web602 web server Jan Kachlik (Fri Oct 18 2002 - 08:29:30 CEST)
  1. interSEC-2002-10-001.sa (1608 bytes)
• Re: NFS Denial of Service advisory from Sun Edsel Adap (Fri Oct 18 2002 - 14:55:11 CEST)
  1. part (233 bytes)
• NOCC: XSS Ulf Harnhammar (Sun Oct 20 2002 - 19:22:18 CEST)
  1. nocc.patch (860 bytes)
• Reproducing the MS DCE-RPC DOS. Joe Testa (Sun Oct 20 2002 - 23:44:15 CEST)
  1. goodies.tar.gz (7483 bytes)
  2. goodies.tar.gz.sig (65 bytes)
• Security Update: [CSSA-2002-SCO.41] UnixWare 7.1.1 Open UNIX 8.0.0 : rcp of /proc causes denial-of-service security@caldera.com (Tue Oct 22 2002 - 00:04:29 CEST)
  1. part (238 bytes)
• MS WIN RPC DoS CODE FROM SPIKE v2.7 lion (Tue Oct 22 2002 - 20:25:22 CEST)
  1. winnuke.c (4688 bytes)
• Re: MS WIN RPC DoS CODE FROM SPIKE v2.7 Dave Aitel (Tue Oct 22 2002 - 22:21:06 CEST)
  1. signature.asc (233 bytes)
• Security Update: [CSSA-2002-036.0] Linux: remote buffer overflow in webalizer reverse lookup code security@caldera.com (Wed Oct 23 2002 - 19:42:41 CEST)
  1. part (238 bytes)
• Multiple issues in internet explorer/outlook John C. Hennessy (Thu Oct 24 2002 - 05:31:08 CEST)
  1. BL-200202.txt (2541 bytes)
• ABfrag followup / WITHOUT ATTACHMENT daniel.roberts@hushmail.com (Thu Oct 24 2002 - 16:38:36 CEST)
  1. part (2412 bytes)
• Re: Router DSL Dlink Markus Garscha (Thu Oct 24 2002 - 20:28:47 CEST)
  1. part (190 bytes)
• Security Update: [CSSA-2002-037.0] Linux: various packet handling vunerabilities in ethereal security@caldera.com (Thu Oct 24 2002 - 22:35:56 CEST)
  1. part (238 bytes)
• Security Update: [CSSA-2002-038.0] Linux: inn format string and insecure open vulnerabilities security@caldera.com (Fri Oct 25 2002 - 02:42:26 CEST)
  1. part (238 bytes)
• KRB5-SORCERER2002-10-27 Security Update ask33@linuxmountain.org (Mon Oct 28 2002 - 00:38:19 CET)
  1. KRB5-SORCERER2002-10-27 (772 bytes)
• Security Update: [CSSA-2002-041.0] Linux: pam_ldap format string vulnerability security@caldera.com (Tue Oct 29 2002 - 01:51:37 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-039.0] Linux: bzip2 file creation and symbolic link vulnerabilities security@caldera.com (Tue Oct 29 2002 - 21:18:14 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-043.0] Linux: chfn (util-linux) temp file race vulnerability security@caldera.com (Wed Oct 30 2002 - 02:25:32 CET)
  1. part (238 bytes)
• [Announce] AngeL v0.9.0 Paolo Perego (Mon Nov 04 2002 - 08:59:45 CET)
  1. signature.asc (190 bytes)
• Re: Motorola Cable Modem DOS Juraj Ziegler (Mon Nov 04 2002 - 11:06:15 CET)
  1. part (190 bytes)
• Re: Accesspoints disclose wep keys, password and mac filter (fwd) Hakan Carlsson (Tue Nov 05 2002 - 10:44:22 CET)
  1. wcrack2.c (1861 bytes)
• SnortCenter 0.9.5 temp file naming problems... Clint Byrum (Tue Nov 05 2002 - 20:04:10 CET)
  1. snortcenter_v095-tmpfix.patch (4054 bytes)
• RE: Motorola Cable Modem DOS Fulton Preston  (Wed Nov 06 2002 - 04:27:33 CET)
  1. smime.p7s (3728 bytes)
• Re: A technique to mitigate cookie-stealing XSS attacks Valdis.Kletnieks@vt.edu (Wed Nov 06 2002 - 06:16:33 CET)
  1. part (227 bytes)
• Re: When scrubbing secrets in memory doesn't work Gianni Tedesco (Wed Nov 06 2002 - 13:55:26 CET)
  1. signature.asc (233 bytes)
• QNX 6.1 TimeCreate weakness Pawel Pisarczyk (Wed Nov 06 2002 - 16:40:36 CET)
  1. timer-exploit.c (1121 bytes)
• [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update Vincent Danen (Fri Nov 08 2002 - 02:38:23 CET)
  1. PGP.sig (187 bytes)
• [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update Vincent Danen (Fri Nov 08 2002 - 02:38:23 CET)
  1. PGP.sig (187 bytes)
• Re: When scrubbing secrets in memory doesn't work Valdis.Kletnieks@vt.edu (Fri Nov 08 2002 - 05:00:15 CET)
  1. part (227 bytes)
• Re: A technique to mitigate cookie-stealing XSS attacks Peter Watkins (Fri Nov 08 2002 - 20:49:39 CET)
  1. part (233 bytes)
• NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow Ed Reed (Mon Nov 11 2002 - 18:50:24 CET)
  1. NOVL-2002-2963651_-_iManager__eMFrame__Buffer_Overflow.txt (3329 bytes)
• Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks security@caldera.com (Mon Nov 11 2002 - 21:23:14 CET)
  1. part (238 bytes)
• Re: A technique to mitigate cookie-stealing XSS attacks Seth Arnold (Mon Nov 11 2002 - 21:29:41 CET)
  1. part (241 bytes)
• NOVL-2002-2963827 - Remote Manager Security Issue - NW5.1 Ed Reed (Tue Nov 12 2002 - 17:21:37 CET)
  1. NOVL-2002-2963827_-_Remote_Manager_Security_Issue_-_NW5.1.txt (3480 bytes)
• NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2 Ed Reed (Tue Nov 12 2002 - 17:21:43 CET)
  1. NOVL-2002-2963767_-_Remote_Manager_Security_Issue_-_eDir_8.6.2.txt (3472 bytes)
• Security Update: [CSSA-2002-042.0] Linux: libpng progressive image loading vulnerabilities and other buffer overflows security@caldera.com (Tue Nov 12 2002 - 22:45:18 CET)
  1. part (238 bytes)
• Fresh hole in W3Mail (fwd) Tim Brown (Wed Nov 13 2002 - 00:28:44 CET)
  1. NDSA20021112.txt.asc (4353 bytes)
• Security Update: [CSSA-2002-SCO.42] UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities security@caldera.com (Wed Nov 13 2002 - 00:30:12 CET)
  1. part (238 bytes)
• Re: Yahoo Messenger Stale Sessions BANIER Jeremie (Thu Nov 14 2002 - 14:49:51 CET)
  1. jeremie.banier.vcf (167 bytes)
• Security Update: [CSSA-2002-045.0] Linux: python insecure temporary files in os._execvpe security@caldera.com (Thu Nov 14 2002 - 23:22:51 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-046.0] Linux: buffer overflows and other security issues in squid security@caldera.com (Fri Nov 15 2002 - 01:15:48 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-047.0] Linux: KDE SSL and XSS vulnerabilities security@caldera.com (Sat Nov 16 2002 - 01:37:45 CET)
  1. part (238 bytes)
• Update to LOM's advisory 3APA3A (Mon Nov 18 2002 - 18:39:15 CET)
  1. swfexpl.zip (1316 bytes)
• Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability security@caldera.com (Tue Nov 19 2002 - 00:30:40 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-049.0] Linux: lynx CRLF injection vulnerability security@caldera.com (Tue Nov 19 2002 - 01:26:42 CET)
  1. part (238 bytes)
• Opera 6.03/Linux crashes on HTTPS over Squid Proxy on a site Peter Bieringer (Wed Nov 20 2002 - 23:20:53 CET)
  1. part (190 bytes)
• Security Update: [CSSA-2002-052.0] Linux: sendmail smrsh bypass vulnerabilities security@caldera.com (Fri Nov 22 2002 - 00:35:43 CET)
  1. part (238 bytes)
• ClearCase DoS vulnerabilty marek.rouchal@infineon.com (Fri Nov 22 2002 - 10:30:11 CET)
  1. guardadv-03-2002-clearcaseDoS.txt (4700 bytes)
• Exploit for traceroute-nanog overflow Carl Livitt (Fri Nov 29 2002 - 18:49:48 CET)
  1. traceroute-exploit.c (17645 bytes)
• SAP database local root via symlink KF (Wed Dec 04 2002 - 15:57:30 CET)
  1. SAProot.sh (620 bytes)
• Security Update: [CSSA-2002-054.0] Linux: exploitable memory leak in ypserv security@caldera.com (Wed Dec 04 2002 - 20:06:20 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow security@caldera.com (Wed Dec 04 2002 - 22:43:50 CET)
  1. part (238 bytes)
• Multiple vulnerabilities in akfingerd Gianni Tedesco (Thu Dec 05 2002 - 19:29:45 CET)
  1. signature.asc (233 bytes)
• Cobalt RaQ4 Remote root exploit grazer@digit-labs.org (Thu Dec 05 2002 - 22:38:42 CET)
  1. raqrewt.c (5178 bytes)
• Security Update: [CSSA-2002-056.0] Linux: apache vulnerabilities in shared memory, DNS, and ApacheBench security@caldera.com (Fri Dec 06 2002 - 01:26:45 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-057.0] Linux: groff pic buffer overflow security@caldera.com (Sat Dec 07 2002 - 01:30:34 CET)
  1. part (238 bytes)
• Re: Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6 - and 3.7 Build 1190 Dr. Peter Bieringer (Mon Dec 09 2002 - 12:30:31 CET)
  1. part (188 bytes)
• Security Update: [CSSA-2002-SCO.43] UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability security@caldera.com (Mon Dec 09 2002 - 22:41:12 CET)
  1. part (238 bytes)
• Unchecked buffer in PC-cillin advisories@texonet.com (Tue Dec 10 2002 - 12:04:43 CET)
  1. TEXONET-20021210.txt (2671 bytes)
• Security Update: [CSSA-2002-058.0] Linux: buffer overflow in nss_ldap DNS SRV security@caldera.com (Wed Dec 11 2002 - 02:08:02 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2002-SCO.44] UnixWare 7.1.1 Open UNIX 8.0.0 : uudecode performs inadequate checks on user-specified output files security@caldera.com (Wed Dec 11 2002 - 19:48:07 CET)
  1. part (238 bytes)
• Advisory Title: iASP Remote Console Applet Allows Remote ph33r (Fri Dec 13 2002 - 01:35:29 CET)
  1. f8-20021212-iasp.txt (2109 bytes)
• PHP-Nuke code execution and XSS vulnerabilities Ulf Harnhammar (Mon Dec 16 2002 - 16:36:02 CET)
  1. php-nuke_webmail.zip (1479 bytes)
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B) Valdis.Kletnieks@vt.edu (Tue Dec 17 2002 - 05:56:10 CET)
  1. part (227 bytes)
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B) Stefan Esser (Tue Dec 17 2002 - 07:37:23 CET)
  1. part (241 bytes)
• Cisco IOS EIGRP Network DoS FX (Thu Dec 19 2002 - 18:06:32 CET)
  1. CiscoEIGRP.txt (3152 bytes)
• Security Update: [CSSA-2002-059.0] Linux: multiple vulnerabilities in BIND (CERT CA-2002-31) security@caldera.com (Fri Dec 20 2002 - 01:17:40 CET)
  1. part (238 bytes)
• PHP-Nuke mail CRLF Injection vulnerabilities Ulf Harnhammar (Fri Dec 20 2002 - 11:32:21 CET)
  1. php-nuke_mail_crlf.patch (3121 bytes)
• Re: iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) Joe Testa (Sat Dec 21 2002 - 20:59:06 CET)
  1. cups.txt.asc (2648 bytes)
• Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B) Andreas Tscharner (Thu Dec 26 2002 - 23:07:48 CET)
  1. part (190 bytes)
• [IPS] PUTTY SSH-Client Exploit Daniel Alcántara de la Hoz (Sat Dec 28 2002 - 16:51:46 CET)
  1. IP-putty.c (6779 bytes)
• Multiple vulnerabilities found in PlatinumFTPserver V1.0.6 Dennis Rand (Mon Dec 30 2002 - 20:34:40 CET)
  1. DoSftp.pl (900 bytes)
  2. advisory.txt (7738 bytes)
• ps information leak in FreeBSD Cache (Sun Jan 05 2003 - 21:46:50 CET)
  1. proc-patch.tar.gz (3198 bytes)
• PDS: Integer overflow in FreeBSD kernel Joost Pol (Mon Jan 06 2003 - 13:48:10 CET)
  1. pine-cert-20030101.txt.asc (4458 bytes)
• Opentype font file causes Windows to restart. Andrew (Mon Jan 06 2003 - 16:36:49 CET)
  1. restart.otf (2608 bytes)
• Re: ps information leak in FreeBSD Sean Kelly (Mon Jan 06 2003 - 22:19:36 CET)
  1. part (188 bytes)
• Multiple cgihtml vulnerabilities Chris Leishman (Tue Jan 07 2003 - 11:28:48 CET)
  1. part (241 bytes)
• Re: [VulnDiscuss] Re: Opentype font file causes Windows to restart - rename .TTF Alan Olsen (Tue Jan 07 2003 - 22:21:22 CET)
  1. signature.asc (233 bytes)
• Re: ps information leak in FreeBSD Sean Kelly (Wed Jan 08 2003 - 17:39:03 CET)
  1. part (188 bytes)
• Security Update: [CSSA-2003-001.0] Linux: fetchmail at-sign buffer overflow vulnerability security@caldera.com (Thu Jan 09 2003 - 20:55:25 CET)
  1. part (238 bytes)
• [VSA0301] Half-Life Clanmod remote (root) hole VOID.AT Security (Fri Jan 10 2003 - 18:45:51 CET)
  1. part (251 bytes)
• [VSA0302] Half-Life Adminmod remote (root) hole VOID.AT Security (Fri Jan 10 2003 - 18:46:57 CET)
  1. part (251 bytes)
• [VSA0303] Half-Life StatsMe remote (root) hole VOID.AT Security (Fri Jan 10 2003 - 18:48:22 CET)
  1. part (251 bytes)
• [VSA0304] Half-Life Client remote hole via Adminmod plugin VOID.AT Security (Fri Jan 10 2003 - 18:49:35 CET)
  1. part (251 bytes)
• [VSA0305] HLTV remote DoS VOID.AT Security (Fri Jan 10 2003 - 18:50:37 CET)
  1. part (251 bytes)
• Security Update: [CSSA-2003-002.0] Linux: Webmin Cross-site Scripting and Session ID Spoofing Vulnerabilities security@caldera.com (Fri Jan 10 2003 - 19:42:21 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2003-SCO.1] UnixWare 7.1.1 Open UNIX 8.0.0 : command line argument buffer overflow in ps security@caldera.com (Fri Jan 10 2003 - 22:40:54 CET)
  1. part (238 bytes)
• [VSA0306] YABBSE 1.4.1 SQL Injection Bugs VOID.AT Security (Sat Jan 11 2003 - 01:31:05 CET)
  1. VSA0306_yabbse.txt (1273 bytes)
• isc dhcpd 3.0 format string exploit VOID.AT Security (Sat Jan 11 2003 - 01:37:07 CET)
  1. hoagie_dhcpd.c (7260 bytes)
  2. part (241 bytes)
• [VSA0302] Half-Life Adminmod remote (root) hole VOID.AT Security (Sat Jan 11 2003 - 09:46:56 CET)
  1. part (251 bytes)
• [VSA0303] Half-Life StatsMe remote (root) hole VOID.AT Security (Sat Jan 11 2003 - 09:47:38 CET)
  1. part (251 bytes)
• Microsoft-ds xploit (UDP/TCP)... Daniel Nyström (Mon Jan 13 2003 - 09:10:58 CET)
  1. ms-ds-xploit.c (4252 bytes)
• Local/remote mpg123 exploit gobbles@hushmail.com (Mon Jan 13 2003 - 19:23:18 CET)
  1. jinglebellz.c (7456 bytes)
  2. jinglebellz.c.sig (261 bytes)
• stunnel - exploit Darell Esfandia (Wed Jan 15 2003 - 10:26:58 CET)
  1. w00nf-stunnel.c (18531 bytes)
• DoS against DHCP infrastructure with isc dhcrelay Florian Lohoff (Wed Jan 15 2003 - 15:46:14 CET)
  1. part (233 bytes)
• Security Update: [CSSA-2003-SCO.2] UnixWare 7.1.1 : multiple vulnerabilities in BIND (CERT CA-2002-31) security@caldera.com (Wed Jan 15 2003 - 20:43:26 CET)
  1. part (238 bytes)
• Re: Local/remote mpg123 exploit Daniel Kobras (Wed Jan 15 2003 - 22:19:12 CET)
  1. part (190 bytes)
• Security Update: [CSSA-2003.003.0] Linux: wget directory traversal and buffer overrun vulnerabilities security@caldera.com (Thu Jan 16 2003 - 22:38:47 CET)
  1. part (238 bytes)
• phpBB SQL Injection vulnerability Ulf Harnhammar (Fri Jan 17 2003 - 04:00:10 CET)
  1. phpbb-exploit.pl (1082 bytes)
• Re: Local/remote mpg123 exploit Gabucino (Sat Jan 18 2003 - 19:06:51 CET)
  1. part (233 bytes)
• Advisory 01/2003: CVS remote vulnerability Stefan Esser (Mon Jan 20 2003 - 22:25:23 CET)
  1. part (241 bytes)
• Security Update: [CSSA-2003-004.0] Linux: Multiple Security Vulnerabilities in the Common Unix Printing System (CUPS) security@caldera.com (Tue Jan 21 2003 - 01:58:58 CET)
  1. part (238 bytes)
• Security Update: [CSSA-2003-005.0] Linux: canna buffer overflow and denial of service security@caldera.com (Tue Jan 21 2003 - 23:09:18 CET)
  1. part (238 bytes)
• Re: TRACE used to increase the dangerous of XSS. Peter Watkins (Thu Jan 23 2003 - 21:28:24 CET)
  1. PW_strip_trace.c (1191 bytes)
• Re: Nokia Product Security Contact? Edsel Adap (Fri Jan 24 2003 - 16:41:32 CET)
  1. part (233 bytes)
• Test program for CVS double-free. Joe Testa (Fri Jan 24 2003 - 16:52:41 CET)
  1. CVSProber.tar.gz (3778 bytes)
  2. CVSProber.tar.gz.sig (65 bytes)
• RE: Mailman: cross-site scripting bug Leif Sawyer (Fri Jan 24 2003 - 22:32:37 CET)
  1. smime.p7s (2208 bytes)
• Re: [USG- SA- 2003.001] USG Security Advisory (slocate) Kevin Lindsay (Sat Jan 25 2003 - 06:42:39 CET)
  1. part (188 bytes)

Last message date: Sat Jan 25 2003 - 12:23:01 CET
Archived on: Sat Jan 25 2003 - 12:32:08 CET

This archive was generated by hypermail 2.1.3 : Sat Jan 25 2003 - 12:32:08 CET