SecurityFocus

Possible XSS vuln in VCard4J 2004-01-01
Just1n T1mberlake (hotpackets hellokitty com)

Re: multiple payload handling flaws in isakmpd, again 2004-01-01
Thomas Walpuski (thomas thinknerd de)

Announcing Userland Exec 2004-01-01
the grugq (grugq hcunix net)

multiple payload handling flaws in isakmpd, again 2003-12-31
Thomas Walpuski (thomas thinknerd de)

MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability 2003-12-31
Mandrake Linux Security Team (security linux-mandrake com)

Re: Local Denial Of Service Attack Against Apple MacOS X, MacOS X Server, and Darwin. 2003-12-31
William A. Carrel (william a carrel org)

RE: IE 5.22 on Mac Transmitting HTTP Referer from Secure Page 2003-12-30
tlarholm pivx com

TOCTOU with NT System Service Hooking 2003-12-30
Andrey Kolishak (andr sandy ru)

Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity 2003-12-30
Bharat Mediratta (bharat menalto com)

RE: php-ping: Executing arbritary commands 2003-12-29
Golden_Eternity (bugtraq bhodisoft com)

Re: php-ping: Executing arbritary commands 2003-12-30
ppp-design (security ppp-design de)

[SECURITY] [DSA 405-1] New xsok packages fix local group games exploit 2003-12-30
joey infodrom org (Martin Schulze)

IE 5.x-6.0 allows executing arbitrary programs using showHelp() 2003-12-30
Arman Nayyeri (arman-n Phreaker net)

Gallery v1.3.3 Cross Site Scripting Vulnerabillity 2003-12-30
The-Insider (nuritrv18 bezeqint net)

NetObserve Security Bypass Vulnerability 2003-12-29
Peter Winter-Smith (peter4020 hotmail com)

Cross Site Scripting vulnerability in miniBB 1.7 (latest) and earlier 2003-12-28
Chintan Trivedi (chesschintan hotmail com)

RE: DANGER ZONE: Internet Explorer 2003-12-29
http-equiv@excite.com (1 malware com)

RE: DANGER ZONE: Internet Explorer 2003-12-29
tlarholm pivx com

Buffer-overflow in Jordan's telnet server 2003-12-29
Luigi Auriemma (aluigi altervista org)

[Hat-Squad] Remote buffer overflow in Mdaemon Raw message Handler 2003-12-29
Hat-Squad Security Team (service hat-squad com)

php-ping: Executing arbritary commands 2003-12-29
ppp-design (security ppp-design de)

SQL Injection in phpBB's groupcp.php 2003-12-29
Jay Gates (zarath knightsofchaos com)

GLSA: cvs (200312-08) 2003-12-29
Rajiv Aaron Manglani (rajiv gentoo org)

Landesk Management Suite IRCRBOOT.DLL buffer overflow 2003-12-27
Tri Huynh (trihuynh zeeup com)

PHP-NUKE 7.0 FINAL (and olders) sql injection 2003-12-27
r00t rsteam ru

Hijacking Apache https by mod_php 2003-12-26
Steve Grubb (linux_4ever yahoo com)

New VISA scam exploits IE vulnerability 2003-12-24
Marek Szuba (cyberman if pw edu pl)

Re: Reported Command Injection in Squirrelmail GPG 2003-12-26
Brian G. Peterson (brian braverock com)

directory traversal bug in Pserv 3.0b2 2003-12-24
Donato Ferrante (fdonato autistici org)

DANGER ZONE: Internet Explorer 2003-12-26
http-equiv@excite.com (1 malware com)

Bugtraq Security Systems ADV-0001 2003-12-24
Bugtraq Security Systems (research bugtraq org)

OpenBB 1.06 SQL Injection 2003-12-26
n teusink planet nl

IE 5.22 on Mac Transmitting HTTP Referer from Secure Page 2003-12-24
deane deanebarker net

Remote Code Execution in Knowledge Builder. 2003-12-24
Zero_X www.lobnan.de Team (zero-x linuxmail org)

Re: An undetectable Online Bank Vulnerability? 2003-12-24
Seth Arnold (sarnold wirex com)

Multiple Vulns in Psychoblogger beta1 2003-12-23
Andrew Smith (parenthesis elitehaven net)

QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users 2003-12-23
Dr`Ponidi Haryanto (drponidi hackermail com)

Re: phpBB v2.06 search_id sql injection exploit 2003-12-23
Micheal Cottingham (micheal michealcottingham com)

[Opera 7] Arbitrary File Delete Vulnerability 2003-12-23
:: Operash :: (nesumin softhome net)

Re: Internet Explorer URL parsing vulnerability 2003-12-23
nesumin (nesumin softhome net)

ProjectForum Multiple Vulnerabilities 2003-12-22
Peter Winter-Smith (peter4020 hotmail com)

Directory traversal bug in DCAM server <= 8.2.5 2003-12-22
Luigi Auriemma (aluigi altervista org)

Re: Remote crash in tcpdump from OpenBSD 2003-12-21
mrh_tech yahoo com

CesarFTP v0.99g CPU OverLoad [Proof of concept] 2003-12-22
zib zib (zibelette aol com)

An undetectable Online Bank Vulnerability? 2003-12-21
Mark Peterson (apalamen sbcglobal net)

osCommerce SQL Injection && DoS && Cross Site Scripting 2003-12-22
JeiAr (security gulftech org)

XSS vulnerability in XOOPS 2.0.5.1 2003-12-21
Chintan Trivedi (chesschintan hotmail com)

Internet Explorer file downloading security alerts bypass 2003-12-22
Hugo Vázquez Caramés (overclocking_a_la_abuela hotmail com)

phpBB v2.06 search_id sql injection exploit 2003-12-20
"f3sy1 f3sy1" (f3sy1 mail ru)

PHP-NUKE version <= 6.9 'cid' sql injection exploit 2003-12-20
r00t rsteam ru

Re: Remote crash in tcpdump from OpenBSD 2003-12-20
Przemyslaw Frasunek (venglin freebsd lublin pl)

[SCSA-024] BES-CMS including file vulnerability 2003-12-20
Security Corporation Security Advisory (advisory security-corporation com)

Re: Remote crash in tcpdump from OpenBSD 2003-12-20
Henning Brauer (hb-bugtraq bsws de)

Multicast from Orinoco wireless stations 2003-12-20
Andrew Daviel (advax triumf ca)

Re: Security bug in Xerox Document Centre 2003-12-20
brandon pierce (brandonp insynclh com)

Remote crash in tcpdump from OpenBSD 2003-12-20
Przemyslaw Frasunek (venglin freebsd lublin pl)

MDKSA-2003:118 - Updated XFree86 packages fix xdm vulnerability 2003-12-19
Mandrake Linux Security Team (security linux-mandrake com)

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-19
Andre Lorbach (alorbach ro1 adiscon com)

Directory traversal and XSS in Active Webcam <= 4.3 2003-12-19
Luigi Auriemma (aluigi altervista org)

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-19
Eric \MightyE\ Stevens (trash mightye org)

Re: Buffer overflow/privilege escalation in MacOS X - hfs.util also 2003-12-19
KF (dotslash snosoft com)

[Exploit]: DameWare Mini Remote Control Server Overflow Exploit 2003-12-19
Adik (netninja hotmail kg)

AOL Instant Messanger - Buddy Icon Warn Exploit 2003-12-19
Josh Camacho (sfocus ceromus com)

Security bug in Xerox Document Centre 2003-12-19
J.A. Gutierrez (spd shiva cps unizar es)

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-19
nagual bluemail ch

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-19
ashton (ashton joltmedia com)

Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco, 2003-12-19
Sharad Ahlawat (sha cisco com)

Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco, 2003-12-18
Chris (serlin engsoc org)

Re: Cross-site scripting vulnerability in SARA v<=4.2.7 2003-12-18
bugtraq saintcorporation com

Subscribe Me Pro/Enterprise - Remote Code Execution via Backticked Perl Variable Injection. 2003-12-18
Paul Craig - Pimp Industries (headpimp pimp-industries com)

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-18
ashton (ashton joltmedia com)

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-17
Aaron_Yemm NAI com

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-18
Alexander Demenshin (aldem-bugtraq aldem net)

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-18
Max (max maxandcarrie com)

Multiple Vulnerabilities In ASPapp Products 2003-12-18
JeiAr (security gulftech org)

Autorank PHP SQL Injection Vulnerabilities 2003-12-18
JeiAr (security gulftech org)

GLSA: lftp (200312-07) 2003-12-18
Rajiv Aaron Manglani (rajiv gentoo org)

SGI Advanced Linux Environment security update #7 2003-12-17
SGI Security Coordinator (agent99 sgi com)

SARA 5.0 2003-12-18
toddr arc com

Happy Holidays 2003-12-18
Mark Litchfield (mark ngssoftware com)

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-17
Pavel Kankovsky (peak argo troja mff cuni cz)

RE: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-18
ashton (ashton joltmedia com)

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-18
Julian Ashton (ashton joltmedia com)

Re: Cross-site scripting vulnerability in SARA v<=4.2.7 2003-12-18
toddr arc com

[RHSA-2003:405-01] Updated apache packages fix minor security vulnerability 2003-12-18
bugzilla redhat com

Re: Buffer overflow/privilege escalation in MacOS X 2003-12-18
David Riley (oscar the-rileys net)

MDKSA-2003:117 - Updated irssi packages fix remote crash 2003-12-18
Mandrake Linux Security Team (security linux-mandrake com)

CyberGuard proxy / firewall XSS 2003-12-18
Jamie Fisher (contact_jamie_fisher yahoo co uk)

Re: Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-17
Eric Anderson (anderson cs uoregon edu)

NetBSD Security Advisory 2003-018: DNS negative cache poisoning 2003-12-17
NetBSD Security Officer (security-officer NetBSD org)

Cross-site scripting vulnerability in SARA v<=4.2.7 2003-12-17
Thomas M. Payerle (payerle physics umd edu)

WebArtFactory CMS Vulnerability 2003-12-16
Noticias (noticias scientechsecurity com)

Re: ms03-043 2003-12-17
Michael H. Warfield (mhw wittsend com)

osCommerce Malformed Session ID XSS Vuln 2003-12-17
JeiAr (security gulftech org)

Edonkey/Overnet Plugins capable of Virus/Worm behavior 2003-12-17
Julian Ashton (ashton joltmedia com)

Re: Internet Explorer and Opera local zone restriction bypass 2003-12-16
william schulze (was macromedia com)

eZ remote exploit 2003-12-17
Iván Rodriguez Almuiña (kralor coromputer net)

[OpenPKG-SA-2003.052] OpenPKG Security Advisory (cvs) 2003-12-17
OpenPKG (openpkg openpkg org)

[OpenPKG-SA-2003.053] OpenPKG Security Advisory (lftp) 2003-12-17
OpenPKG (openpkg openpkg org)

Server side scripts viewing in Goahead webserver <= 2.1.7 2003-12-17
Luigi Auriemma (aluigi altervista org)