This isn't a DoS as such. The problem occurs because the 4.1.60 scan
engine for McAfee products isn't compatible with the 4367 DATs. In order
to use these DATs you have to update your scan engine, which probably
requires disabling WebShield and running the SuperDAT updater--this is
what I had to do

[ more ]  [ reply ]

vendor: ArbitroWeb

about: An anonymous web surfing proxy written in PHP. ArbitroWeb will redirect all web requests thru it's set of scripts, all URL's contained will be adjusted/mangled to it's own scripts.

date: june 22nd, 2004

vendor status: ?

problem: javascript can be injected into the /?r

[ more ]  [ reply ]

Hey all,

We have been having some technical issues with the servers
hosting the list. Please bear with us, the messages
are being delivered. My apologies for the late approvals,
many messages have not come through until late yesterday
and today. Please contact me if your post didn't make it.

I

[ more ]  [ reply ]

Linux kernel IEEE 1394(Firewire) driver - integer overflows
-----------------------------------------------------------

Link:
http://www.linux1394.org/index.php

Driver Description:
IEEE 1394 is a standard defining a high speed serial bus. This bus is also named
FireWire by Apple or i.Link by Son

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : kernel
SUMMARY : Fixes for kernel vulnerabili

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list!@ hehehehe ;PPpPPPPPp

It appear Max Vozeler who wrap he packages for he debian friends did
travel back in time with he timemachine of many speed. Friend GOBBLES
not buy into whole space/time discussion ;PPpPPPP But anyways here
is friend GOBBLE

[ more ]  [ reply ]

> -----Original Message-----
> From: Jelmer [mailto:jkuperus (at) planet (dot) nl [email concealed]]
> Sent: Friday, June 11, 2004 3:22 PM
> To: 'Thor Larholm'; Drew Copley;
> full-disclosure (at) lists.netsys (dot) com [email concealed]; bugtraq (at) securityfocus (dot) com [email concealed]
> Cc: ntbugtraq (at) listserv.ntbugtraq (dot) com [email concealed]
> Subject: RE: COELACANTH: Phreak Phishing Expedi

[ more ]  [ reply ]

Hello All,

Norton CE found five instances of the Eicar_test_file in roughly 8
seconds. It quarantined the .zip file.

Hello,

Here is what I have from TrendMicro IWSS v1

A virus (Compressed_Huge_File, Eicar_test_file, Eicar_test_file,
Eicar_test_file, Eicar_test_file, Eicar_test_file, Eicar_t

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment 2.4 security update #22
Number : 20040605-01-U
Date : June 21, 2004
Fixed in

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

+-----------------------------------------------------------------------
-+
| Guardian Digital Security Advisory June 21, 2004 |
| http://www.guardiandigital.com ESA-20040621-005 |
|

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment 3 Security Update #4
Number : 20040604-01-U
Date : June 21, 2004
Fixed in :

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 522-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Matt Zimmerman
June 19th, 2004

[ more ]  [ reply ]

rssh is a small shell whose purpose is to restrict users to using scp
or sftp, and also provides the facilities to place users in a chroot
jail. It can also be used to lock users out of a system completely.
William F. McCaw identified a minor security flaw in rssh when used
with chroot jails.

The

[ more ]  [ reply ]

ATTENTION ALL SITES USING OSTICKET. PLEASE DISABLE UPLOADS.

June 17 2004. Multiple Problems with osTicket

Software Data:

OSTICKET, http://www.osticket.com/

"Need to test the system before you install? Then try our demo version of the latest release of osTicket.

DEMO DISABLED"

Note: W

[ more ]  [ reply ]

[tested]
Internet Explorer 6 SP1 running on Windows XP(Home Edition) Service Pack 1a
Updated on 2004/07/21 GMT+800

[intro]
"the-insider" exploit was first noticed by the-insider:
http://umbrella.name/iebug.com/display-singlemessage.php?readmsg:fulldis
closure_message-2004060050
and then documented

[ more ]  [ reply ]

Sorry about my previous post, Norton picked up the html code an filtered my
e-mail. Here is the original post without the html flags

Hello,

My apologise if I am posting in the wrong list but I am not sure if this is
a known issue in Ad-aware or if this even is an issue with Ad-aware.

I have writt

[ more ]  [ reply ]

========================================================================
===
_
|_ . _ _ _ (_ _
|_ | | ) \/ _) (_) | (_|
/

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

TITLE: Security flaw in DLINK 614+ - SOHO routers (http://www.dlink.com)

TYPE: Script injection over DHCP

QUOTE from DLINK:

The AirPlus DI-614+ combines the latest advancements in 802.11b
silicon chip
design from Texas Instruments, utilizing their p

[ more ]  [ reply ]

#######################################################################

Luigi Auriemma

Application: Unreal Engine
http://unreal.epicgames.com
Vulnerable games:
- DeusEx <= 1.112fm
- Devastation

[ more ]  [ reply ]

ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability

http://www.kurczaba.com/securityadvisories/0406214.htm
-------------------------------------------------------------

Vulnerability ID Number:
0406214

Overview:
A vulnerability has been found in the 'Mobile Code' filter in ZoneAlarm Pro

Vendor:
Zon

[ more ]  [ reply ]

NETGEAR FVS318 Web-Based Administration DoS

http://www.kurczaba.com/securityadvisories/0406211.htm
-------------------------------------------------------------

Vulnerability ID Number:
0406211

Overview:
A vulnerability has been found in the Netgear FVS318 VPN Router Web-Based Administration.

[ more ]  [ reply ]

Hello Bugtraq,

Sqwebmail (http://www.inter7.com/sqwebmail/) is a web cgi client for
sending and receiving email using Maildir mailboxes.

During a web application security evaluation on Sqwebmail 4.0.4.20040524
we have found a XSS (Cross Site Scripting) vulnerability inside the
print_header_uc() fu

[ more ]  [ reply ]