Were you able to see what process(es) were driving up CPU usage?
Reinstalling windows probably would fix it but that doesn't tell what is
hanging.

-----Original Message-----
From: Scott Gifford [mailto:sgifford (at) suspectclass (dot) com [email concealed]]
Sent: Saturday, April 17, 2004 1:07 PM
To: phaser-X
Cc: bugtraq@secu

[ more ]  [ reply ]

In-Reply-To: <200404170420.32857.matias (at) neiff.com (dot) ar [email concealed]>

Hi,

Did u drink to much when writing this `advisory'? No seriously, you even made a typo in the title of your thread!

did you inform the people at Squirrelmail about this? I located the exact vuln in chpasspwd.c:

----

char User[STR_MAX];

[ more ]  [ reply ]

Hi all ...

Following my post on bugtraq last Fri and after having waded through the
deluge of replies, here is a quick recap of things:

1) Thu morning several of my users could not login. WinXP and Win2k
complained that the time between the server and client is different. I can
workaround th

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

************************************************************************
************
Netwosix Linux Security Advisory #2004-0011 <http://www.netwosix.org>
- ------------------------------------------------------------------------
-----------

Package nam

[ more ]  [ reply ]

#####################################################################

Advisory Name : phpBB 2.0.8a and lower - IP spoofing vulnerability

Release Date : Apr 18, 2004

Application : phpBB

Version : phpBB 2.0.8a and previous versions

Platform : PHP

Vendor URL : http://www.phpbb.com/

Author

[ more ]  [ reply ]

(As usual, and obviously: not speaking on behalf of my employer.)

I didn't see anything unusual, neither with my Win2k nor with my WinXP boxes.

It'd be a machine specific or something conflicts with some DLL(s).

It is usual to replace some DLL(s) when install some program(s).

Cheers.

Nelson B

[ more ]  [ reply ]

{=======================================================================
=========}

{ [waraxe-2004-SA#019] }

{=======================================================================
=========}

{

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

************************************************************************
************
Netwosix Linux Security Advisory #2004-0012 <http://www.netwosix.org>
- ------------------------------------------------------------------------
-----------

Package nam

[ more ]  [ reply ]

Hi ..

So, after my previous two mails, I managed to solve the problem (I think)

1) I rebooted the PDC and one of the clients started working. It was the
only one that worked immediately so I think a reboot was required for the
PDC. That set me thinking.

2) I tried rebooting the BDC but that

[ more ]  [ reply ]

Hi,

ssmtp 2.50.6 create a logfile /tmp/ssmtp.log. The data in this logfile
is user specified. It's possible to overwrite any file with
the permissons of the ssmtp program (normally root). The
vulnerable call is in log_event. log_event vulnerable call:

#ifdef LOGFILE
if((fp = fopen("/tmp/s

[ more ]  [ reply ]

Dear List,

Imperva(tm)'s Application Defense Center has released a new white paper.

The paper, titled 'SQL Injection Signatues Evasion', is based on
research done at Imperva's ADC, and shows that providing protection
against SQL injection using signatures alone is not enough. The paper
demonstrate

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --====----====----====----====----====----====----====----====----====--
--===--
Product: phpBB modified by Przemo
Version: v1.8
Vendor: http://przemo.org/phpBB2/
Discover by: Officerrr <officerrr at poligon.com.pl>
Vendor Response: Not contacted yet.

[ more ]  [ reply ]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application: BitDefender Scan Online(ActiveX)
Vendors: http://www.bitdefender.com/scan/Msie/index.php
Platforms: Windows
Bug: Remote File Download & Execute & Private Information
Disclosure
Risk:

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200404-15
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200404-16
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200404-14
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

This is a functionality regression that has been around for some time.
The weird part of the MS04-011 patch is that it only occurs on Windows
2003.

KB261328: Cipher Strength Appears as 0-Bit in Internet Explorer
http://support.microsoft.com/?kbid=261328

SYMPTOMS
In Microsoft Internet Explorer, yo

[ more ]  [ reply ]

In-Reply-To: <20040417145002.14889.qmail (at) www.securityfocus (dot) com [email concealed]>

the bug has been fixed in the latest updates of NAV 2002 [was that a silent patch???]

>

>Norton AntiVirus nested file manual scan bypass.....

>

>Product Version: Norton Antivirus 2002 (~Only tested On...~)

>Risk Impact: Me

[ more ]  [ reply ]

Donato Ferrante

Application: Fastream NETFile FTP/Web Server
http://www.fastream.com/

Version: 6.5.1.980

Bug: Denial Of Service

Date: 19-Apr-2004

Author: Donato Ferrante
e-mail: fdonato (at) autistici (dot) org [email concealed]

[ more ]  [ reply ]

> From: Dan Harkless <bugtraq (at) harkless (dot) org [email concealed]>

> No, but I experienced a *third* issue after applying the updates on
> my Win2K box. After being up for a couple of minutes, it would
> freeze for a moment and then very briefly display a black screen
> saying:
>
> PAGE_FAULT_IN_NONPAGED_<something>

t

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 492-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Matt Zimmerman
April 18th, 2004

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] tcpdump denial of service (SSA:2004-108-01)

Upgraded tcpdump packages are available for Slackware 8.1, 9.0,
9.1, and -current to fix denial-of-service issues. Sites using
tcpdump should upgrade to the new packages.

More details

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 488-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Matt Zimmerman
April 16th, 2004

[ more ]  [ reply ]