Bugtraq: by author

3APA3A
- Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (Feb 19 2004)
- Re[2]: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
- Re: RFC: virus handling (Jan 28 2004)
ACROS Security
- ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS (Feb 10 2004)
ActualMInd
- Web Blog 1.1 Remote Execute Commands Bug (Jan 29 2004)
Adam Langley
- Re: XFree86 vulnerability exploit (Feb 13 2004)
Adam Laurie
- Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior (Feb 06 2004)
Adam Zabrocki
- 0verkill - little simple vulnerability. (Feb 01 2004)
Advisories
- Mac OS X pppd format string vulnerability (Feb 23 2004)
- Microsoft Virtual PC Services Insecure Temporary File Creation (Feb 10 2004)
advisory_at_security-corporation.com
- [SCSA-027] PHP-Nuke 6.9 SQL Injection Vulnerability (Feb 01 2004)
advisory_at_stgsecurity.com
- STG Security Advisory: [SSA-20040217-06] Apache for cygwin directory traversal vulnerability (Feb 23 2004)
alex medvedev
- Re: AIX password enumeration possible (Feb 11 2004)
Alexander Antipov
- snort rules for ICQ http/https tunnels (Feb 24 2004)
Alexander GQ Gerasiov
- Re: [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts (Feb 07 2004)
Alun Jones
- RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (Feb 19 2004)
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 17 2004)
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 12 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
Andre Ludwig
- RE: [Full-Disclosure] RE: W2K source "leaked"? (Feb 12 2004)
Andreas Marx
- Re: Decompression Bombs [...missed something] (Feb 07 2004)
- Re: Hysterical first technical alert from US-CERT (Feb 05 2004)
Andreas Sandblad
- Sandblad #13: Cross-domain exploit on zombie document with event handlers (Feb 25 2004)
- Sandblad #12: Inject javascript url in history list (revisited) (Feb 03 2004)
Andrew Fried
- Re: Hysterical first technical alert from US-CERT (Feb 05 2004)
Andrew Harwood
- RE: MS to stop allowing passwords in URLs (Feb 03 2004)
Andrey G. Sergeev (AKA Andris)
- RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) (Jan 29 2004)
Andrey Kolishak
- Re[2]: http://www.smashguard.org (Feb 07 2004)
Andrey Smirnov
- Extremail Security Problem (Feb 26 2004)
André Malo
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 12 2004)
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 04 2004)
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 02 2004)
Angelo Rosiello
- PSOProxy's exploit for Windows by Rosiello Security (Feb 25 2004)
Ansgar -59cobalt- Wiechers
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
Anthony Saffer
- Re: Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
Antonio Messina
- Re: sqwebmail web login (Feb 03 2004)
Ari Gordon-Schlosberg
- Re: Remote Administrator 2.x: highly possible remote hole or back door (Feb 23 2004)
Atom 'Smasher'
- Re: new WIN virus? (Jan 29 2004)
- Re: new WIN virus? (Jan 29 2004)
Aviram Jenik
- Broker FTP DoS (Message Server) (Feb 17 2004)
Axel Beckert - ecos gmbh
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 13 2004)
axl rose
- Critical WFTPD buffer overflow vulnerability (Feb 28 2004)
- Multiple WFTPD Denial of Service vulnerabilities (Feb 28 2004)
backspace
- Another YabbSE SQL Injection (Feb 16 2004)
badpack3t
- KarjaSoft Sami HTTP Server 1.0.4 Buffer Overflow (Feb 16 2004)
Bartosz Kwitkowski
- Re: HelpCtr - allow open any page or run (Feb 11 2004)
- Re: HelpCtr - allow open any page or run (Feb 10 2004)
- HelpCtr - allow open any page or run (Feb 07 2004)
Ben
- Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 (Feb 25 2004)
Ben Wheeler
- Re: RFC: virus handling (Feb 04 2004)
Bender
- XFree86 vulnerability exploit (Feb 11 2004)
Berend-Jan Wever
- Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow (Feb 11 2004)
Bernie, CTA
- Re: [security] Re: Major hack attack on the U.S. Senate (Feb 03 2004)
Bill Gallagher
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 12 2004)
Bill Stoddard
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 12 2004)
Bipin Gautam.
- Re: Decompression Bombs (Feb 10 2004)
- Re: Decompression Bombs [...missed something] (Feb 06 2004)
Bjørnar Bjørgum Larsen
- Two checkpoint fw-1/vpn-1 vulns (Feb 05 2004)
bkbll
- [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability (Feb 26 2004)
bladi
- Windows2000 who relase the code? (Feb 12 2004)
bool_at_gte.net
- Internet Explorer and Microsoft clipboard poor security policy (Feb 11 2004)
Boyce, Nick
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
brandon pierce
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (Feb 18 2004)
Brian Bothwell
- Re: sqwebmail web login (Feb 02 2004)
Brian Dessent
- Re: Decompression Bombs (Feb 09 2004)
Brian_J_Soby_at_raytheon.com
- Symantec Gateway Security Management Service Cross Site Scripting (Feb 27 2004)
Bruce Khodabakhsh
- DallasCon 2004 Information Security Conference and Boot Camp (Feb 11 2004)
Bruno Morisson
- Red-M Red-Alert Multiple Vulnerabilities (Feb 09 2004)
Buck Huppmann
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 14 2004)
bugzilla_at_redhat.com
- [RHSA-2004:091-01] Updated libxml2 packages fix security vulnerability (Feb 25 2004)
- [RHSA-2004:063-01] Updated mod_python packages fix denial of service vulnerability (Feb 25 2004)
- [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities (Feb 18 2004)
- [RHSA-2004:048-01] Updated PWLib packages fix protocol security issues (Feb 13 2004)
- [RHSA-2004:059-01] Updated XFree86 packages fix privilege escalation vulnerability (Feb 13 2004)
- [RHSA-2004:051-01] Updated mutt packages fix remotely-triggerable crash (Feb 11 2004)
- [RHSA-2004:030-01] Updated NetPBM packages fix multiple temporary file vulnerabilities (Feb 05 2004)
- [RHSA-2004:020-01] Updated mailman packages close cross-site scripting vulnerabilities (Feb 05 2004)
Byron Copeland
- Re: W2K source "leaked"? (Feb 13 2004)
carlo_at_cs.dartmouth.edu
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 13 2004)
Carson Gaspar
- Re: Calife heap corrupt / potential local root exploit (Feb 27 2004)
Casper Dik
- Re: RFC: virus handling (Feb 03 2004)
Cedric Cochin
- PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior (Feb 10 2004)
- Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior (Feb 03 2004)
- PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior (Jan 29 2004)
Charles Clancy
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 09 2004)
Charles R. Anderson
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (Feb 18 2004)
Charley Hamilton
- Re: CoDeX-W0rm - what happened here? (Feb 03 2004)
Cheng Peng Su
- New phpBB ViewTopic.php Cross Site Scripting Vulnerability (Feb 28 2004)
- Cross Site Scripting in WebzEdit (Feb 21 2004)
- ezBoard Cross Site Scripting Vulnerability (Feb 23 2004)
- Possible new cross zone scripting in IE (Feb 10 2004)
- Possible Cross Site Scripting in Discuz! Board (Feb 05 2004)
Chris Adams
- Re: Multiple issues with Mac OS X AFP client (Feb 27 2004)
- Multiple issues with Mac OS X AFP client (Feb 27 2004)
Chris Calabrese
- Re: Windows XP explorer.exe heap overflow. (Feb 23 2004)
Chris Green
- Re: Decompression Bombs (Feb 09 2004)
Christian Vogel
- Re: Major hack attack on the U.S. Senate (Feb 03 2004)
Christopher Carboni
- Exploit based on leaked code released. (Feb 16 2004)
Chuck Rock
- CoDeX-W0rm - what happened here? (Feb 01 2004)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities (Feb 19 2004)
- Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability (Feb 03 2004)
Conectiva Updates
- [CLA-2004:821] Conectiva Security Announcement - XFree86 (Feb 20 2004)
- [CLA-2004:820] Conectiva Security Announcement - kernel (Feb 20 2004)
- [CLA-2004:813] Conectiva Security Announcement - gaim (Feb 10 2004)
- [CLA-2004:812] Conectiva Security Announcement - vim (Feb 10 2004)
- [CLA-2004:811] Conectiva Security Announcement - libtool (Feb 05 2004)
Craig Morrison
- Re: RFC: virus handling (Jan 28 2004)
Crispin Cowan
- Re: http://www.smashguard.org (Feb 07 2004)
Curt Purdy
- RE: [inbox] W2K source "leaked"? (Feb 13 2004)
cyborgirl_at_libero.it
- Eggrop bug (Feb 08 2004)
Dan Yefimov
- Re: Second critical mremap() bug found in all Linux kernels (Feb 18 2004)
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 04 2004)
Daniel Kabs [ML]
- smbmount disrupts Windows file sharing. (Feb 02 2004)
- Re: [Full-Disclosure] smbmount disrupts Windows file sharing. (Feb 04 2004)
daniel uriah clemens
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Daniel.Capo_at_tco.net.br
- Re: Major hack attack on the U.S. Senate (Feb 03 2004)
Daniele Orlandi
- Re: RFC: virus handling (Jan 28 2004)
Darragh Bailey
- RE: Hysterical first technical alert from US-CERT (Feb 05 2004)
Darren Reed
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 11 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 11 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
Darren Tucker
- Re: AIX password enumeration possible (Feb 17 2004)
Darwin Mecham
- blocking gzip encoded files (Feb 23 2004)
Dave Aronson
- Re: Hacking USB Thumbdrives, Thumprint authentication (Feb 06 2004)
- Re: RFC: virus handling (Jan 28 2004)
Dave Clendenan
- Re: RFC: virus handling (Feb 03 2004)
Dave McCormick
- Re: MS to stop allowing passwords in URLs (Feb 02 2004)
Dave Paris
- RE: http://www.smashguard.org (Feb 03 2004)
Dave Tarbatt
- APC 9606 SmartSlot Web/SNMP management card "backdoor" (Feb 16 2004)
Dave Warren
- Re: getting rid of outbreaks and spam (Feb 06 2004)
- Re: MS to stop allowing passwords in URLs (Feb 02 2004)
Dave Weis
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 09 2004)
David B Harris
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
David Bachtel
- RE: Decompression Bombs (Feb 05 2004)
David Brodbeck
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 09 2004)
- RE: RFC: virus handling (Feb 03 2004)
David Cantrell
- YABB information leakage on failed login (Feb 17 2004)
David F. Skoll
- Re: Why are postmasters distributing the MyDoom virus? (Feb 10 2004)
- Re: RFC: virus handling (Feb 02 2004)
David Monosov
- APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (Feb 19 2004)
David Schwartz
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
- RE: Major hack attack on the U.S. Senate (Feb 03 2004)
David Wilson
- RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 23 2004)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 13 2004)
David.Cross_at_ngc.com
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 10 2004)
Davide Del Vecchio
- Symantec FireWall/VPN Appliance model 200 leak of security (Feb 15 2004)
Dennis Freise
- Re: clamav 0.65 remote DOS exploit (Feb 10 2004)
der Mouse
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 11 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (Feb 03 2004)
Disclosure From OSSI
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 12 2004)
- Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
DiSToAGe
- [Fwd: zyxel prestige ethernet information leakage] (Feb 07 2004)
Dmitry
- Re: X-Cart vulnerability (Feb 04 2004)
Donato Ferrante
- Denial Of Service in FreeChat 1.1.1a (Feb 26 2004)
- Multiple Remote Buffer Overflow in Avirt Soho 4.3 (Feb 23 2004)
- Remote Buffer Overflow in Avirt Voice 4.0 (Feb 23 2004)
- Remote Buffer Overflow in PSOProxy 0.91 (Feb 20 2004)
- Denial Of Service in Vizer Web Server 1.9.1 (Feb 17 2004)
- Denial Of Service in ChatterBox 2.0 (Jan 30 2004)
dotsecure_at_hushmail.com
- Beagle.b@mm spreading at a steady pace. (Feb 17 2004)
- Windows 2000 Source Leak Verified. Get ready for the havoc. (Feb 12 2004)
- Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
DownBload
- Calife heap corrupt / potential local root exploit (Feb 27 2004)
Dr Andrew C Aitchison
- Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (Feb 14 2004)
Dr. Peter Bieringer
- Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate (Feb 16 2004)
Dragos Ruiu
- Re: Windows XP explorer.exe heap overflow. (Feb 26 2004)
- Fwd: Re: NT/W2K Source leak (Feb 13 2004)
- Re: vulnerabilities of postscript printers (Jan 30 2004)
Drew Copley
- RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (Feb 20 2004)
- RE: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (Feb 20 2004)
- RE: [Full-Disclosure] Re: W2K source "leaked"? (Feb 13 2004)
- RE: W2K source "leaked"? (Feb 12 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
Edgar Barbosa
- Bypassing PatchFinder 2 (Feb 15 2004)
Eggers, Bill A [LTD]
- RE: Hysterical first technical alert from US-CERT (Feb 03 2004)
Eli K.
- Re: Windows XP explorer.exe heap overflow. (Feb 24 2004)
Eli Kara
- Re: Windows XP explorer.exe heap overflow. (Feb 25 2004)
Eloy A. Paris
- Re: Bank of America Contact (Feb 24 2004)
Eric 'MightyE' Stevens
- Re: Hacking USB Thumbdrives, Thumprint authentication (Feb 10 2004)
Eric McCarty
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
Eric Murray
- Re: Hacking USB Thumbdrives, Thumprint authentication (Feb 09 2004)
Eric Schultze
- RE: Another Low Blow From Microsoft: MBSA Failure (Feb 10 2004)
evol_at_ruiner.halo.nu
- Re: Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
Federico Petronio
- Re: Snort-inline (Feb 04 2004)
Felipe Franciosi
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
Fergus Brooks
- RE: MS to stop allowing passwords in URLs (Feb 02 2004)
Ferruh Mavituna
- Brinkster Multiple Vulnerabilities (Feb 09 2004)
- Dotnetnuke Multiple Vulnerabilities (Feb 06 2004)
first last
- RE: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (Feb 19 2004)
- Multiple WinXP kernel vulns can give user mode programs kernel mode privileges (Feb 18 2004)
- RE: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
flashsky fangxing
- MS ASN library is fraught not only with integer overflow, but also with stack overflow. (Feb 19 2004)
Florian Weimer
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 14 2004)
Francis Favorini
- RE: MS to stop allowing passwords in URLs (Feb 03 2004)
Frank Knobbe
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
Frank Louwers
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 18 2004)
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
Fredrik Björk
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" (Feb 18 2004)
FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-04:03.jail (Feb 27 2004)
- FreeBSD Security Advisory FreeBSD-SA-04:02.shmat (Feb 05 2004)
Fyodor
- Nmap Security Scanner 3.50 Released (Feb 26 2004)
Gadi Evron
- laptop security (Feb 28 2004)
- article: Theft of Client Information at a Major Israeli Bank's "Information Fortress". (Feb 19 2004)
- article: Alleged Trojan horse in Israeli Anti-Ballistic Missile System (Feb 18 2004)
- OT: reports of a Trojan horse in the Arrow project (Feb 16 2004)
- ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
- W2K source "leaked"? (Feb 12 2004)
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 10 2004)
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 09 2004)
- Outbreak warning: possibly Mydoom.C (Feb 09 2004)
- Biometric systems security [WAS: Re: Hacking USB Thumbdrives, Thumprint authentication] (Feb 06 2004)
- announce: new mailing list - application security research - from vulnerabilities to code injection. (Feb 04 2004)
- getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (Feb 03 2004)
- Refuting tall-tales and stories about the Mydoom worms (Jan 30 2004)
- another Trojan with the ADO hole? + a twist in the story (Jan 31 2004)
- Re: [Full-Disclosure] outbreak warning: new Myydoom.B is out (Jan 28 2004)
- Mydoom DDoS attack time table (Jan 31 2004)
- outbreak warning: new Myydoom.B is out (Jan 28 2004)
Georg Lutz
- Re: vulnerabilities of postscript printers (Jan 28 2004)
Georg Schwarz
- Re: Why are postmasters distributing the MyDoom virus? (Feb 10 2004)
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (Feb 04 2004)
Gervase Markham
- RE: blocking gzip encoded files (Feb 24 2004)
Giuseppe
- Re: Eggrop bug (Feb 10 2004)
Glynn Clements
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
Gregor Lawatscheck
- Re: new WIN virus? (Jan 29 2004)
gsicht gsicht
- buffer overflow in Robot FTP Server (Feb 15 2004)
- crob ftpd Denial of Service (Feb 12 2004)
Guille -bisho-
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 10 2004)
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (Feb 09 2004)
Gunnar
- Re: MS to stop allowing passwords in URLs (Feb 04 2004)
Harley David
- RE: Why are postmasters distributing the MyDoom virus? (Feb 10 2004)
Hilmi Ozdoganoglu
- RE: http://www.smashguard.org (Feb 06 2004)
- http://www.smashguard.org (Jan 30 2004)
Himeur Nourredine
- formmail (PHP) Upload file using CSS (Feb 06 2004)
- Les Commentaires (PHP) Include file (Feb 03 2004)
Ho Chaw Ming
- Re: W2K source "leaked"? (Feb 16 2004)
http-equiv_at_excite.com
- Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (Feb 20 2004)
- Re: Possible new cross zone scripting in IE (Feb 10 2004)
Hugo van der Kooij
- Re: SNMP community string disclosure in Linksys WAP55AG (Feb 18 2004)
icbm
- XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow (Feb 09 2004)
iDefense Labs
- iDEFENSE Security Advisory 02.23.04: Darwin Streaming Server Remote Denial of Service Vulnerability (Feb 23 2004)
- iDEFENSE Security Advisory 02.17.04: Ipswitch IMail LDAP Daemon Remote Buffer Overflow (Feb 17 2004)
- iDEFENSE Security Advisory 02.11.04: XFree86 Font Information File Buffer Overflow II (Feb 12 2004)
- iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (Feb 10 2004)
idlabs-advisories_at_idefense.com
- iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability (Feb 27 2004)
- iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass (Feb 27 2004)
Immunix Security Team
- Immunix Secured OS 7+ kernel update (Feb 26 2004)
- Immunix Secured OS 7.3 XFree86 update (Feb 12 2004)
intuit bug_hunter
- TYPSoft FTP Server 1.10 may be crashed (Feb 04 2004)
intuit e.b.
- TYPSoft FTP Server 1.10 multiple vulnerabilities (Feb 23 2004)
- Smallftpd 1.0.3 DoS (Feb 17 2004)
- CesarFTP 0.99 : 100% employment of computer resources (Feb 17 2004)
- Xlight ftp server 1.52 RETR bug (Feb 15 2004)
- Sami FTP Server 1.1.3 multiple vulnerabilities (Feb 13 2004)
- Remote crash Xlight ftp server 1.52 (Feb 05 2004)
Ivan Arce
- Re: Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
Iván Rodriguez Almuiña
- GateKeeper Pro 4.7 buffer overflow (Feb 22 2004)
- iMail 8.05 LDAP service remote exploit (Feb 19 2004)
J.
- RE: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 14 2004)
James A. Thornton
- Re: getting rid of outbreaks and spam (junk) [WAS: Re: RFC: virus handling] (Feb 03 2004)
James C Slora Jr
- RE: CoDeX-W0rm - what happened here? (Feb 04 2004)
James C. Slora Jr.
- Re: RFC: virus handling (Feb 03 2004)
James Green
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 17 2004)
James Riden
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- Re: getting rid of outbreaks and spam (junk) (Feb 04 2004)
Jamie Fisher
- Cross Site Scripting in VBulletin forum software (Feb 12 2004)
Janek Vind
- [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 (Feb 23 2004)
- [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0 (Feb 08 2004)
- [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 (Feb 08 2004)
- [waraxe-2004-SA#001] - Script injection in GBook for Php-Nuke ver. 1.0 (Feb 02 2004)
Jared M Breland
- Re: Second critical mremap() bug found in all Linux kernels (Feb 18 2004)
Jedi/Sector One
- Buffer overflow in mnoGoSearch (Feb 15 2004)
Jeff Fisher
- Re: Eggrop bug (Feb 09 2004)
Jensen, Greg
- FW: CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability (Feb 12 2004)
- CA Response: eTrust InoculateIT/Antivirus 6.0 for Linux vulnerability (Feb 11 2004)
Jeremy Mates
- Re: RFC: virus handling (Jan 28 2004)
Jesse Keating
- [FLSA-2004:1232] Updated slocate resolves security vulnerabilites (Feb 11 2004)
- [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) (Jan 31 2004)
- [FLSA-2004:1193] Updated ethereal resolves security vulnerabilites (Jan 31 2004)
Joe Blatz
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
Joe DeMarco
- RE: Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
Joe Weisenberger
- RE: MS to stop allowing passwords in URLs (Feb 03 2004)
John Compton
- Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
John D. Hardin
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
John Fitzgibbon
- Re: RFC: virus handling (Jan 28 2004)
John.Airey_at_rnib.org.uk
- RE: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 10 2004)
Johnson, Jeff FOR:EX
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Interne t Explorer (Feb 10 2004)
Jon W
- Re: Bank of America Contact (Feb 23 2004)
Joost Pol
- [PINE-CERT-20040201] reference count overflow in shmat() (Feb 05 2004)
Josep L. Guallar-Esteve
- Re: blocking gzip encoded files (Feb 24 2004)
Joseph S. Myers
- Re: Symlink Vulnerability in GNU libtool <1.5.2 (Feb 03 2004)
Joshua Levitsky
- Re: Microsoft ASN.1 (Half a sploit) (Feb 18 2004)
- Re: ASN.1 vulnerability -is- on Win98 (Feb 18 2004)
- ASN.1 vulnerability -is- on Win98 (Feb 17 2004)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 13 2004)
Joshua Miller
- LiveJournal XSS (Feb 19 2004)
Jouko Pynnonen
- Directory traversal in RealPlayer allows code execution (Feb 10 2004)
jsm_at_polyomino.org.uk
- Re: Symlink Vulnerability in GNU libtool <1.5.2 (Feb 03 2004)
Just1n T1mberlake
- PunkBuster SQL Injection Attack (Feb 18 2004)
K-OTiK Security
- Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) (Feb 18 2004)
- Re: Microsoft ASN.1 (Half a sploit) (Feb 15 2004)
- Re: Outbreak warning: possibly Mydoom.C (Now Doomjuice.A) (Feb 09 2004)
- MyDoom.A Machines : The new P2P Sharing Network ... (Feb 10 2004)
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 09 2004)
- Re: new WIN virus? (Jan 29 2004)
Keith Clifton
- Re: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (Feb 19 2004)
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 18 2004)
Khalid J Hosein
- Re: clamav 0.65 remote DOS exploit (Feb 09 2004)
Knight Commander
- Invision Power Board SQL injection! (Feb 28 2004)
kquest_at_toplayer.com
- RE: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability (Feb 18 2004)
- bid: 9660 : Microsoft IIS Unspecified Remote Denial Of Service Vu lnerability (Feb 18 2004)
kradhatman_at_hushmail.com
- RE: ISS Security Rip: Microsoft ASN.1 (Half a sploit) (Feb 13 2004)
labs
- iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability (Feb 04 2004)
Lance James
- Re: Bank of America Contact (Feb 23 2004)
- Bank of America contact (Feb 19 2004)
langtuhaohoa caothuvolam
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (Feb 05 2004)
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 03 2004)
Larry Seltzer
- RE: Windows XP explorer.exe heap overflow. (Feb 25 2004)
- RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 09 2004)
- RE: getting rid of outbreaks and spam (Feb 06 2004)
- RE: [security] Re: Major hack attack on the U.S. Senate (Feb 05 2004)
- RE: Hysterical first technical alert from US-CERT (Feb 04 2004)
- Hysterical first technical alert from US-CERT (Feb 03 2004)
Leon Harris
- Re: http://www.smashguard.org (Feb 03 2004)
li0n7
- PSOProxy <= 0.91 remote buffer overflow (exploit) (Feb 21 2004)
Li0n7_at_voila.fr
- lbreakout2 < 2.4beta-2 local exploit (Feb 22 2004)
lion
- [HUC] Serv-U FTPD 2.x/3.x/4.x/5.x "MDTM" Command Remote Exploit (Feb 27 2004)
- [HUC] Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V2.0 (Feb 02 2004)
LordInfidel_at_directionweb.com
- RE: Remote Administrator 2.x: highly possible remote hole or back door (Feb 18 2004)
- RE: W2K source "leaked"? (Feb 13 2004)
Luigi Auriemma
- Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more) (Feb 24 2004)
- Remote crash in Ghost Recon engine (Feb 24 2004)
- Remote server crash in Haegemonia <= 1.07 (Feb 24 2004)
- Remote server crash in Team Factor <= 1.25 (Feb 23 2004)
- Broadcast client buffer-overflow in Purge Jihad <= 2.0.1 (Feb 16 2004)
- Denial of Service in Ratbag's game engine (Feb 11 2004)
- Denial of Service in Monkey httpd <= 0.8.1 (Feb 11 2004)
- Re: TrackMania Demo Denial of Service (Feb 09 2004)
- Remote crash of Chaser game <= 1.50 (Feb 03 2004)
Lyal Collins
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 12 2004)
LynX
- problems with database files in 'SignatureDB' (Feb 15 2004)
Macroscape Solutions
- Checkpoint 4.1 Vulnerability (Feb 05 2004)
Mandrake Linux Security Team
- MDKSA-2004:015-1 - Updated x86_64 kernel packages fix multiple vulnerabilities (Feb 25 2004)
- MDKSA-2004:016 - Updated mtools packages fix local root vulnerability (Feb 25 2004)
- MDKSA-2004:015 - Updated kernel packages fix multiple vulnerabilities (Feb 24 2004)
- MDKSA-2004:014 - Updated metamail packages fix buffer overflow vulnerabilities (Feb 18 2004)
- MDKSA-2004:013 - Updated mailman packages close various cross-site scripting vulnerabilities. (Feb 13 2004)
- MDKSA-2004:012 - Updated XFree86 packages fix buffer overflow vulnerabilities (Feb 13 2004)
- MDKSA-2004:010 - Updated mutt packages fix remote crash (Feb 11 2004)
- MDKSA-2004:011 - Updated NetPBM packages fix a number of temporary file bugs. (Feb 11 2004)
- MDKSA-2004:009 - Updated glibc packages fix resolver vulnerabilities (Feb 04 2004)
- MDKSA-2004:006-1 - Updated gaim packages fix multiple vulnerabilities (Jan 30 2004)
mantra_at_lkm-zx.net
- Multiple Vulnerabilities in PHPX (Feb 03 2004)
Manuel López
- Re: Asp Portal Multiple Vulnerabilities (Feb 14 2004)
- ASP Portal Multiple Vulnerabilities (Feb 13 2004)
- XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal (Feb 10 2004)
Marc Bejarano
- fix for recently disclosed Oracle interval conversion overflows? (Feb 20 2004)
- Microsoft Windows 2000 source code leaked (Feb 12 2004)
Marc Maiffret
- EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow (Feb 26 2004)
- EEYE: ZoneLabs SMTP Processing Buffer Overflow (Feb 19 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- EEYE: Microsoft ASN.1 Library Bit String Heap Corruption (Feb 10 2004)
- EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
Marc Schoenefeld
- IBM cloudscape SQL Database (DB2J) vulnerable to remote command injection (Feb 05 2004)
Marc-Christian Petersen
- Re: Hotfix for new mremap vulnerability (Feb 20 2004)
Marco Marabelli
- sqwebmail web login (Jan 31 2004)
Marco van Berkum
- Symlink vulnerabilities in mailmgr (Feb 12 2004)
Mariusz Woloszyn
- Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution (Feb 23 2004)
- Re: Two checkpoint fw-1/vpn-1 vulns (Feb 06 2004)
- Re: Major hack attack on the U.S. Senate (Jan 29 2004)
Mark Litchfield
- Re: Update - CheckPoint Vulnerabilities (Feb 12 2004)
- Update - CheckPoint Vulnerabilities (Feb 11 2004)
Mark Renouf
- Re: clamav 0.65 remote DOS exploit (Feb 09 2004)
Markus Müller
- Linux 2.4.24 with vserver 1.24 exploit (Feb 05 2004)
Markus Wernig
- Re: Two checkpoint fw-1/vpn-1 vulns (Feb 06 2004)
markus-1977_at_gmx.net
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 04 2004)
- Re: new WIN virus? (Jan 29 2004)
Martin
- aimSniff.pl file "deletion" (local) (Feb 11 2004)
- Re: Oracle toplink mapping workbench password algorithm (Jan 28 2004)
Martin Schulze
- [SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips) (Feb 26 2004)
- [SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64) (Feb 20 2004)
- [SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390) (Feb 19 2004)
- [SECURITY] [DSA 441-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (Feb 18 2004)
- [SECURITY] [DSA 439-1] New Linux 2.4.16 packages fix several local root exploits (arm) (Feb 18 2004)
- [SECURITY] [DSA 440-1] New Linux 2.4.17 packages fix several local root exploits (powerpc/apus) (Feb 18 2004)
- [SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc) (Feb 18 2004)
- [SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities (Feb 05 2004)
- [SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (Feb 03 2004)
- [SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit (Feb 03 2004)
Mary Landesman
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 09 2004)
- Re: Hysterical first technical alert from US-CERT (Feb 05 2004)
Massimo Arrigoni
- Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities (Feb 18 2004)
Matt Zimmerman
- [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows (Feb 27 2004)
- [SECURITY] [DSA 445-1] New lbreakout2 packages fix buffer overflow (Feb 21 2004)
- [SECURITY] [DSA 447-1] New hsftp packages fix format string vulnerability (Feb 22 2004)
- [SECURITY] [DSA 446-1] New synaesthesia packages fix insecure file creation (Feb 21 2004)
- [SECURITY] [DSA 448-1] New pwlib packages fix multiple vulnerabilities (Feb 22 2004)
- [SECURITY] [DSA 436-2] New mailman packages fix bug introduced in DSA 436-1 (Feb 21 2004)
- [SECURITY] [DSA 443-1] New xfree86 packages fix multiple vulnerabilities (Feb 19 2004)
- [SECURITY] [DSA 429-2] New gnupg packages fix cryptographic weakness (Feb 13 2004)
- [SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying (Feb 11 2004)
- [SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities (Feb 08 2004)
- [SECURITY] [DSA 435-1] New mpg123 packages fix heap overflow (Feb 06 2004)
- [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl (Feb 01 2004)
Matthew Dharm
- Re: RFC: virus handling (Feb 03 2004)
Matthias Leu
- Decompression Bombs (Feb 03 2004)
Matus UHLAR - fantomas
- Re: Remote exploit in Gallery 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1 (Jan 27 2004)
Maxim Polyakov
- Re: TYPSoft FTP Server 1.10 may be crashed (Feb 04 2004)
McAllister, Andrew
- RE: MS to stop allowing passwords in URLs (Summary) (Feb 03 2004)
- MS to stop allowing passwords in URLs (Jan 28 2004)
mgotts_at_2roads.com
- Re: blocking gzip encoded files (Feb 23 2004)
- RE: Remote Administrator 2.x: highly possible remote hole or back door (Feb 20 2004)
- Re: Why are postmasters distributing the MyDoom virus? (Feb 10 2004)
Michael Evanchik
- Aol Instant Messenger/Microsoft Internet Explorer remote code execution (Feb 18 2004)
Michael H. Warfield
- Re: ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Michael Kjorling
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
Michael Marziani
- RE: CoDeX-W0rm - what happened here? (Feb 03 2004)
Michael Samuel
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Michael Shekman
- Alcatel Omniswitch 7000 series (Feb 19 2004)
Michael Shigorin
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 14 2004)
Michael Wojcik
- RE: Windows XP explorer.exe heap overflow. (Feb 23 2004)
Michal Medvecky
- Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
Michal Zalewski
- Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Micheal Cottingham
- Re: Fw: phpBB privmsg.php XSS vulnerability patch. (Jan 28 2004)
Mike Bobbitt
- Re: Another YabbSE SQL Injection (Feb 16 2004)
Mike Healan
- Re: virus handling (Jan 28 2004)
Miskell, Craig
- RE: APC 9606 SmartSlot Web/SNMP management card "backdoor" - Telnet can't be disabled. (Feb 19 2004)
morning_wood
- Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! (Feb 10 2004)
Moshe Jacobson
- AIM worm spreading around? (Feb 11 2004)
Mr Serbia
- Advisory ! (Jan 30 2004)
Myron Davis
- Re: Decompression Bombs (Feb 09 2004)
- RE: Decompression Bombs (Feb 07 2004)
N407ER
- Re: MS to stop allowing passwords in URLs (Feb 02 2004)
Navaneetharangan
- RE: Hacking USB Thumbdrives, Thumprint authentication (Feb 06 2004)
nCipher Support
- nCipher Advisory #9: Host-side attackers can access secret data (Feb 23 2004)
NESTING, DAVID M (SBCSI)
- RE: MS to stop allowing passwords in URLs (Feb 04 2004)
NetBSD Security-Officer
- PGP signatures on recent NetBSD Security Advisories (Feb 19 2004)
- NetBSD Security Advisory 2004-002: Inconsistent IPv6 path MTU discovery handling (Feb 19 2004)
- NetBSD Security Advisory 2004-003: OpenSSL 0.9.6 ASN.1 parser vulnerability (Feb 19 2004)
- NetBSD Security Advisory 2004-004: shmat reference counting bug (Feb 19 2004)
- NetBSD Security Advisory 2004-001: Insufficient packet validation in racoon IKE daemon (Feb 19 2004)
Nexus
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
NGSoftware Insight Security Research
- Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer (Feb 04 2004)
Nicholas Weaver
- Re: http://www.smashguard.org (Feb 07 2004)
- Re: http://www.smashguard.org (Feb 03 2004)
Nick FitzGerald
- RE: [Full-Disclosure] Re: W2K source "leaked"? (Feb 14 2004)
- RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 10 2004)
- Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser) (Feb 09 2004)
- Re: MS to stop allowing passwords in URLs (Feb 05 2004)
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
Nick Gudov
- WebCortex Webstores2000 version 6.0 multiple security vulnerabilities (Feb 18 2004)
Nicob
- Re: Update - CheckPoint Vulnerabilities (Feb 12 2004)
Nicolai van der Smagt
- Re: SNMP community string disclosure in Linksys WAP55AG (Feb 19 2004)
Nicolas Gregoire
- Re: MyDoom.A Machines : The new P2P Sharing Network ... (Feb 11 2004)
- Re: vulnerabilities of postscript printers (Feb 10 2004)
Nigel Horne
- Re: clamav 0.65 remote DOS exploit (Feb 09 2004)
nimber
- Security Advisory: CSS Vulnerability in Web Froums Server 1.6 (Feb 02 2004)
NN Poster
- SNMP community string disclosure in Linksys WAP55AG (Feb 17 2004)
N|ghtHawk
- Re: HelpCtr - allow open any page or run (Feb 10 2004)
Oliver Eikemeier
- Re: clamav 0.65 remote DOS exploit (Feb 10 2004)
- Re: clamav 0.65 remote DOS exploit (Feb 09 2004)
- clamav 0.65 remote DOS exploit (Feb 09 2004)
Oliver Goebel
- FYI: CAIF Format Specification (Feb 22 2004)
Oliver Lavery
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
Oliver Schneider
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 12 2004)
Ollivier Robert
- Re: Calife heap corrupt / potential local root exploit (Feb 27 2004)
- Re: Calife heap corrupt / potential local root exploit (Feb 27 2004)
opticfiber
- Re: [work] Re: W2K source "leaked"? (Feb 16 2004)
Pablo Santana
- AllMyLinks PHP Code Injection vulnerability (Feb 14 2004)
- AllMyVisitors PHP Code Injection vulnerability (Feb 14 2004)
- AllMyGuests PHP Code Injection vulnerability (Feb 14 2004)
Patrick J. Volkerding
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
Patrick Proniewski
- Re: RFC: virus handling (Jan 28 2004)
Paul Murphy
- RE: getting rid of outbreaks and spam (junk) (Feb 05 2004)
Paul Smith
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
Paul Starzetz
- Second critical mremap() bug found in all Linux kernels (Feb 18 2004)
Pavel harry_x Palát
- Hotfix for new mremap vulnerability (Feb 19 2004)
Pavel Kankovsky
- Re: RFC: virus handling (Jan 28 2004)
Pavel Levshin
- Re: Remote Administrator 2.x: highly possible remote hole or backdoor (Feb 19 2004)
- Remote Administrator 2.x: highly possible remote hole or backdoor (Feb 16 2004)
- Re: RFC: virus handling (Jan 29 2004)
Pentest Security Advisories
- ptl-2004-01: Multiple vulnerabilities in Nokia phones (Feb 08 2004)
Pete Finnigan
- Re: Oracle toplink mapping workbench password algorithm (Jan 29 2004)
Peter Buijsman
- RE: Serv-U "MDTM" buffer overflow PoC DoS exploit (Feb 26 2004)
Peter J. Holzer
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 17 2004)
- Re: Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 11 2004)
- Re: RFC: content-filter and AV notifications (Was: Re: RFC: virus handling) (Feb 03 2004)
Peter Pentchev
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 10 2004)
Peter Winter-Smith
- Web Crossing 4.x/5.x Denial of Service Vulnerability (FIX) (Feb 23 2004)
- The Palace 3.x (Client) Stack Overflow Vulnerability (Feb 07 2004)
- Web Crossing 4.x/5.x Denial of Service Vulnerability (Feb 03 2004)
peter.huang_at_ossecurity.ca
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
Phan
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (Feb 05 2004)
Philip
- X-Cart vulnerability (Feb 03 2004)
Philip Rowlands
- Re: Hysterical first technical alert from US-CERT (Feb 04 2004)
Piotr KUCHARSKI
- Re: RFC: virus handling (Jan 28 2004)
please_reply_to_security_at_sco.com
- OpenLinux: Perl Safe.pm unsafe access (Feb 20 2004)
- OpenLinux: Multiple vulnerabilities were discovered in the saned daemon (Feb 19 2004)
- OpenLinux: Fetchmail 6.2.4 and earlier remote dennial of service (Feb 19 2004)
- OpenLinux: Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (Feb 19 2004)
- OpenLinux: mpg123 remote denial of service and heap-based buffer overflow (Feb 19 2004)
- OpenLinux: slocate local user buffer overflow (Feb 11 2004)
pna.lists
- Re: new WIN virus? (Jan 29 2004)
pokley
- phpnuke 6.9 search module exploit. (Feb 11 2004)
- [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module. (Feb 09 2004)
Rafel Ivgi, The-Insider
- InnoMedia VideoPhone Authorization Bypass (Feb 28 2004)
- LAN SUITE Web Mail 602Pro Multiple Vulnerabilities (Feb 28 2004)
- jgs webserver 0.1.0 Cross Site Scripting Vulnerabillity (Feb 24 2004)
- BadBlue 2.4 Local Path Disclosure By phptest.php (Feb 24 2004)
- New ICQ WORM (Feb 24 2004)
- Gigabyte Broadband Router - Multiple Vulnerabilities (Feb 24 2004)
- FlexWATCH-Webs 2.2 (NTSC) Authorization Bypass (Feb 24 2004)
- vBulletin PHP Forum Version (Feb 12 2004)
Rainer Gerhards
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- RE: virus handling (Jan 28 2004)
Randal, Phil
- RE: getting rid of outbreaks and spam (Feb 09 2004)
Rene
- [local problems] eTrust Virus Protection 6.0 InoculateIT for linux (Feb 09 2004)
Richard M. Smith
- Why are postmasters distributing the MyDoom virus? (Feb 07 2004)
- RE: MS to stop allowing passwords in URLs (Feb 03 2004)
RJ Auburn
- Re: ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Robbie Stone
- Re: SNMP community string disclosure in Linksys WAP55AG (Feb 19 2004)
Ron DuFresne
- Re: Major hack attack on the U.S. Senate (Feb 03 2004)
Roy Hills
- New version of ike-scan (IPsec IKE scanner) available - v1.6 (Feb 27 2004)
rsh_at_idirect.com
- Re: [security] Re: Major hack attack on the U.S. Senate (Feb 02 2004)
S-Quadra Security Research
- EarlyImpact ProductCart shopping cart software multiple security vulnerabilities (Feb 18 2004)
- CactuSoft CactuShop 5.0 Lite shopping cart software backdoor (Feb 06 2004)
Sam
- Serv-U MDTM exploits (Feb 27 2004)
Sam Schinke
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
- Re: MS to stop allowing passwords in URLs (Feb 02 2004)
Sascha Wilde
- Re: RFC: virus handling (Jan 29 2004)
SBNelson_at_thermeon.com
- RE: Decompression Bombs (Feb 09 2004)
Scott J
- AIX password enumeration possible (Feb 06 2004)
Scott James Remnant
- Re: Symlink Vulnerability in GNU libtool <1.5.2 (Feb 03 2004)
scott.jefferd_at_cantire.com
- Re: sqwebmail web login (Feb 03 2004)
scrap
- TrackMania Demo Denial of Service (Feb 08 2004)
Security Admin
- Re: Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior (Feb 05 2004)
security.advisory_at_apcc.com
- APC Security Advisory - Static factory password vulnerability (Feb 18 2004)
Seth Arnold
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 09 2004)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 05 2004)
- Re: http://www.smashguard.org (Feb 05 2004)
SGI Security Coordinator
- SGI Advanced Linux Environment security update #11 (Feb 26 2004)
- SGI Advanced Linux Environment security update #12 (Feb 26 2004)
- SGI ProPack v2.4: Kernel fixes and security update (Feb 26 2004)
- SGI Advanced Linux Environment security update #10 (Feb 11 2004)
- IRIX userland binary vulnerabilities update (Feb 05 2004)
Shaun Bertrand
- RE: virus handling (Feb 02 2004)
Shaun Colley
- Serv-U "MDTM" buffer overflow PoC DoS exploit (Feb 26 2004)
- 3Com DSL Router Long Request DoS exploit. (Feb 22 2004)
- PalmOS httpd accept() queue overflow DoS vulnerability. (Feb 08 2004)
- rxgoogle.cgi XSS Vulnerability. (Feb 04 2004)
Shawn McMahon
- Re: Hysterical first technical alert from US-CERT (Feb 08 2004)
- Re: RFC: virus handling (Feb 05 2004)
Simon
- Re: CoDeX-W0rm - what happened here? (Feb 04 2004)
Simon Brady
- Re: Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
- Re: Scope of latest RealPlayer vuln (Feb 12 2004)
- Scope of latest RealPlayer vuln (Feb 10 2004)
Slackware Security Team
- [slackware-security] Kernel security update (SSA:2004-049-01) (Feb 18 2004)
- [slackware-security] metamail security update (SSA:2004-049-02) (Feb 18 2004)
- [slackware-security] mutt security update (SSA:2004-043-01) (Feb 12 2004)
- [slackware-security] XFree86 security update (SSA:2004-043-02) (Feb 12 2004)
Slawek
- Re: Misinformation in Security Advisories (ASN.1) (Feb 17 2004)
Steen Larsen
- RE: Hysterical first technical alert from US-CERT - CERT#25304 (Feb 04 2004)
Stefan Esser
- Advisory 02/2004: Trillian remote overflows (Feb 24 2004)
Stefan Nordhausen
- Re: Symlink Vulnerability in GNU libtool <1.5.2 (Feb 04 2004)
- Re: Symlink Vulnerability in GNU libtool <1.5.2 (Feb 03 2004)
- Symlink Vulnerability in GNU libtool <1.5.2 (Jan 29 2004)
Stefan Triller
- Re: clamav 0.65 remote DOS exploit (Feb 09 2004)
Steffen Kluge
- Re: iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow (Feb 16 2004)
Stephen Martin
- RE: Hysterical first technical alert from US-CERT (Feb 10 2004)
Stephen Samuel
- Re: Hysterical first technical alert from US-CERT (Feb 05 2004)
Steve Bremer
- Re: Second critical mremap() bug found in all Linux kernels (Feb 18 2004)
Steve Friedl
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 12 2004)
Steve Kemp
- Re: [SECURITY] [DSA 451-1] New xboing packages fix buffer overflows (Feb 27 2004)
- Re: lbreakout2 < 2.4beta-2 local exploit (Feb 23 2004)
Steve Wray
- RE: [Full-Disclosure] smbmount disrupts Windows file sharing. (Feb 03 2004)
Steven M. Christey
- Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft (Feb 22 2004)
- Re: Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
Stuart Moore
- is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution) (Feb 19 2004)
sunglasses_at_bay-watch.com
- Windows XP explorer.exe heap overflow. (Feb 20 2004)
Sven Specker
- Re: AIX password enumeration possible (Feb 12 2004)
telec_at_ureach.com
- Re: W2K source "leaked"? (Feb 13 2004)
Theo de Raadt
- Re: http://www.smashguard.org (Feb 09 2004)
- Re: http://www.smashguard.org (Feb 07 2004)
thiago.vazquez_at_light.com.br
- Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 17 2004)
Thomas Biege
- SUSE Security Announcement: xf86/XFree86 (SuSE-SA:2004:006) (Feb 23 2004)
- SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:005) (Feb 18 2004)
- DIMVA 2004 deadline extended (Feb 02 2004)
Thomas M. Payerle
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 17 2004)
- Re: Major hack attack on the U.S. Senate (Feb 04 2004)
Thomas Roessler
- Mutt-1.4.2 fixes buffer overflow. (Feb 11 2004)
Thor Lancelot Simon
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 12 2004)
Thor Larholm
- Fw: [Unpatched] The Bizex worm (Feb 24 2004)
- RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution (Feb 19 2004)
- RE: Outbreak warning: possibly Mydoom.C (Feb 09 2004)
- Re: getting rid of outbreaks and spam (Feb 04 2004)
- OpenBSD IPv6 remote kernel crash (Feb 05 2004)
- RE: MS to stop allowing passwords in URLs (Feb 03 2004)
Tim
- Re: Windows XP explorer.exe heap overflow. (Feb 24 2004)
Tim Eddy
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
Tim Nelson
- Re: sqwebmail web login (Feb 04 2004)
Tim Walraven
- RE: AIM worm spreading around? (Feb 12 2004)
Tim Yamin
- [ GLSA 200402-07 ] Clamav 0.65 DoS vulnerability (Feb 18 2004)
- [ GLSA 200402-06 ] Linux kernel AMD64 ptrace vulnerability (Feb 16 2004)
- [ GLSA 200402-05 ] phpMyAdmin < 2.5.6-rc1 directory traversal attack (Feb 16 2004)
- [ GLSA 200402-03 ] Monkeyd Denial of Service vulnerability (Feb 11 2004)
- [ GLSA 200402-04 ] Gallery <= 1.4.1 and below remote exploit vulnerability (Feb 11 2004)
- [ GLSA 200402-02 ] XFree86 Font Information File Buffer Overflow (Feb 11 2004)
- [ GLSA 200402-01 ] PHP setting leaks from .htaccess files on virtual hosts (Feb 06 2004)
Timothy J.Miller
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 11 2004)
Tina Bird
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (Feb 10 2004)
tlarholm_at_pivx.com
- RE: Second critical mremap() bug found in all Linux kernels (Feb 18 2004)
- RE: Exploit based on leaked code released. (Feb 16 2004)
- RE: W2K source "leaked"? (Feb 12 2004)
- RE: W2K source "leaked"? (Feb 12 2004)
Todd C. Campbell
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 06 2004)
Tom
- Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS (Feb 19 2004)
Tom Hanlin
- Re: Technical Details of Urlcount.cgi Vulnerability (Feb 03 2004)
Tomasz Grabowski
- Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution (Feb 23 2004)
- Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users (Feb 23 2004)
Tri Huynh
- Open Journal Blog Authenticaion Bypassing Vulnerability (Feb 06 2004)
Trustix Security Advisor
- TSLSA-2004-0008 - kernel (Feb 23 2004)
- TSLSA-2004-0007 - kernel (Feb 18 2004)
- TSLSA-2004-0006 - mutt (Feb 13 2004)
Truthless
- Re: Fw: phpBB privmsg.php XSS vulnerability patch. (Feb 03 2004)
Tyler Larson
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 06 2004)
Tõnu Samuel
- Somewhat new SQL Injection concept (Feb 23 2004)
Ulf Härnhammar
- metamail format string bugs and buffer overflows (Feb 18 2004)
Ulrich Keil
- Re: [RHSA-2004:065-01] Updated kernel packages resolve security vulnerabilities (Feb 18 2004)
Urban Widmark
- Re: Samba 3.x + kernel 2.6.x local root vulnerability (Feb 11 2004)
Valdis.Kletnieks_at_vt.edu
- Re: [Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate (Feb 16 2004)
- Re: [Full-Disclosure] Misinformation in Security Advisories (ASN.1) (Feb 16 2004)
- Re: ISS Security Rip: Microsoft ASN.1 (Half a sploit) (Feb 15 2004)
- Re: [Full-Disclosure] Another Low Blow From Microsoft: MBSA Failure! (Feb 11 2004)
- Re: Hysterical first technical alert from US-CERT (Feb 06 2004)
- Re: Hysterical first technical alert from US-CERT (Feb 04 2004)
- Re: Hysterical first technical alert from US-CERT (Feb 04 2004)
Vietnamese Security Group
- Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Feb 03 2004)
- BUG IN APACHE HTTPD SERVER (current version 2.0.47) (Jan 31 2004)
Vincenzo Ciaglia
- LNSA-#2004-0003: Linux Kernel (Feb 20 2004)
- LNSA-#2004-0002: Fetchmail 6.2.4 and earlier remote denial of service (Feb 20 2004)
- LNSA-#2004-0001: mutt remote crash (Feb 15 2004)
Vinny Abello
- Re: MS to stop allowing passwords in URLs (Feb 03 2004)
Volker Kuhlmann
- Re: RFC: virus handling (Feb 03 2004)
Víctor
- Re: W2K source "leaked"? (Feb 12 2004)
- Re: W2K source "leaked"? (Feb 12 2004)
Wang Yun
- Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access The Forbidden Directory ("/WEB-INF/") (Feb 05 2004)
Ward Taylor
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer (Feb 09 2004)
WebHead
- Re: Microsoft ASN.1 (Half a sploit) (Feb 16 2004)
William A. Rowe, Jr.
- Re: BUG IN APACHE HTTPD SERVER 2.0.47/48 (to who replied me) (Feb 05 2004)
William Anderson
- SmoothWall Project Security Advisory SWP-2004:002 (Feb 26 2004)
wirepair
- Dell OpenManage Web Server Heap Overflow (Pre-Auth) (Feb 26 2004)
- Dell OpenManage Web Server Heap Overflow (Feb 26 2004)
X-Force
- ISS Security Brief: Microsoft ASN.1 Integer Manipulation Vulnerabilities (Feb 11 2004)
Zak Dechovich
- RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP (Feb 17 2004)
Zero_X www.lobnan.de Team
- Directory Traversal in Aprox PHP Portal. (Jan 31 2004)
- Vulnerabilities in Crob FTP Server V3.5.1 (Feb 01 2004)
ZetaLabs
- ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary files retrieving (Feb 23 2004)
- ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files retrieving (Feb 18 2004)
- ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro) (Feb 17 2004)
- ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote arbitrary file retrieving (Feb 17 2004)
- ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates (Feb 10 2004)
- ZH2004-04SA (security advisory): Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro (Feb 04 2004)
- ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability (Feb 02 2004)
Zhenkai Liang
- Re: W2K source "leaked"? (Feb 12 2004)
Zone Labs Product Security
- Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability (Feb 18 2004)