The fun is MS says we fixed "shell" but it's still active for me.

Ferruh.Mavituna
http://ferruh.mavituna.com
PGPKey : http://ferruh.mavituna.com/PGPKey.asc

> -----Original Message-----
> From: full-disclosure-admin (at) lists.netsys (dot) com [email concealed] [mailto:full-disclosure-
> admin (at) lists.netsys (dot) com [email concealed]] On Behalf Of To

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HP SECURITY BULLETIN

HPSBUX01059 REVISION: 0

SSRT4704 rev.0 HP-UX wu-ftpd local unauthorized access

-----------------------------------------------------------------
NOTICE:
There are no restrictions for distribution of this Bulletin
provi

[ more ]  [ reply ]

{=======================================================================
=========}

{ [waraxe-2004-SA#034] }

{=======================================================================
=========}

{

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______

SUSE Security Announcement

Package: php4/mod_php4
Announcement-ID: SUSE-SA:2004:021
Date: Frida

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: ipsec-tools
Advisory ID

[ more ]  [ reply ]

There are interesting articles on overcoming buffer overflow detectors
in this issue.

However a technique they do not discuss runs something like this:

Instrument the program loader so that instead of simply relocating
subroutine entry points, it makes up its own code to insert jacket
calls aroun

[ more ]  [ reply ]

EXECUTIVE SUMMARY

This paper provides a brief overview of basic Domain Name System (DNS) spoofing attacks against
DNS client resolvers. Technical challenges are proposed that should help to both identify
attempted attacks and prevent them from being successful. Relevant Request for Comments (RFC

[ more ]  [ reply ]

We are proud to announce the release of our latest white paper
titled 0x00 vs ASP file upload scripts.

.Abstract.
The affects of the `Poison NULL byte` have not been widely
explored in ASP, but as with other languages the NULL byte
can cause problems when ASP passes data to objects.

Many upload sy

[ more ]  [ reply ]

Hello List!

I've noticed the following "weird" behaviour of the Trend Micro Officescan
client vers. 5.58 update to pattern 1.936.00 Engine 7.100 for WinXP/2k/NT:

The AV client is protected for unloading the Realtime Scan agent prompting
for a password (which I don't know of course). Moreover I

[ more ]  [ reply ]

In MS02-022 the only workaround Microsoft lists is this: "Do not open or
save .job files that you receive from untrusted sources."

As you mentioned, this vulnerability can be triggered automatically
without user interaction and without opening or saving .job files by
navigating to an explorer folde

[ more ]  [ reply ]

My bad, I meant to say MS04-022 which correctly list a patch for Windows
XP. I tried correcting my error in an immediate followup post and wrote
bugtraq-owner (at) securityfocus (dot) com [email concealed] to clarify but the original post got
approved.

Regards

Thor Larholm

-----Original Message-----
From: Mark Litchfield [

[ more ]  [ reply ]

Thor wrote about IconHandler starting mstask. Are there any other dangerous
IconHandler entries: is there a way we can reassure ourselves that the
others are safe?

Being curious, on Win2k, I copied cmd.exe (from winnt\system32) as xyz.pif;
then (right-click) Properties, Program crashes explorer. Is

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : kernel
SUMMARY : Fixes for kernel vulnerabili

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200407-13
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: php
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: freeswan
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Denial of Service (DoS) in Microsoft SMS Client

Classification:
===============
Level: low-[MED]-high-crit
ID: HEXVIEW*2004*07*14*1

Overview:
=========
Microsoft Systems Management Server provides configuration management
solution for Windows platform

[ more ]  [ reply ]

> -----Original Message-----
> From: Ferruh Mavituna [mailto:ferruh (at) mavituna (dot) com [email concealed]]
> Sent: Wednesday, July 14, 2004 7:52 AM
> To: 'L33tPrincess'; bugtraq (at) securityfocus (dot) com [email concealed];
> full-disclosure (at) lists.netsys (dot) com [email concealed]
> Subject: RE: [Full-Disclosure] Re: IE Shell URI Download and
> Execute, POC
>
> > Is

[ more ]  [ reply ]

Hello,

i dont know if my foundation is acceptable or not but here we go i post it...

when u right an SQL query in the highlight section of the PHPBB u'll get all of the page highlighted

example :

forums/viewtopic.php?t=[NUMBER HERE]&highlight=Bug,SELECT * FROM $table

Thank You

[ more ]  [ reply ]

========================================================================
===
_
|_ . _ _ _ (_ _
|_ | | ) \/ _) (_) | (_|
/

[ more ]  [ reply ]