=====
[xCrZx]

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-03
- ------------------------------------------------------------------------
---

GLSA: 200311-03
package: net-misc/hyla

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : zebra
SUMMARY : Fix for denial of service vul

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-02
- ------------------------------------------------------------------------
---

GLSA: 200311-02
package: net-www/opera

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-01
- ------------------------------------------------------------------------
---

GLSA: 200311-01
package: kde-base/kdeb

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200310-03
- ------------------------------------------------------------------------
---

PACKAGE : net-www/apache
SUMM

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment security update #5
Number : 20031101-01-U
Date : November 19, 2003
Reference

[ more ]  [ reply ]

Hello again,

I'm afraid that I have had a couple of reports which state that the

Proof of Concept code which I have written for IA WebMail does not work.

This is often due to the fact that I close the socket immediately as the

malicious data is sent, and so the server does not follow the

[ more ]  [ reply ]

=======================================================
  HPUX dtmailpr buffer overflow vulnerability
=======================================================

Davide Del Vecchio Adv#8

Discovered in: 14/07/2003
Date: 19/11/2003
Tested on HP-UX B.11.00

Description:

  The dtmailpr program reads a

[ more ]  [ reply ]

There is a bug in how the authentication mode works with the web-based

administration page.

This page resides, in the Web Servers with Sharepoint, in

http://www.example.com/_layouts/settings.htm or

http://www.example.com/some_directory/_layouts/settings.htm

This page is usually protecte

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrake Linux Security Update Advisory
_______________________________________________________________________

Package name: glibc
Advisory ID:

[ more ]  [ reply ]

Hello all,

As I stated in my advisory I would release a proof of concept code

after a short period of time which the vendor could use to fix this

and any other bugs for the new release. It has now been in excess

of two weeks, and I have been informed that a fix is almost if not

completely r

[ more ]  [ reply ]

I've received a strange HTTP request on my web site from two different sources. The request is logged as:

SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x0
2

\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02

\xb1\x02\xb1\x02\xb1\x0

[ more ]  [ reply ]

Dear bugtraq (at) securityfocus (dot) com [email concealed],

Probably is known, but is not documented:

Vendor: Valve software
Software: hlds, all versions (including steam).
Problem: Information leak, DoS
Author: SYZo[SND]

Problem:

in server configuration, if allowdownload = 1, it's possible to download
any file from direct

[ more ]  [ reply ]

I like the idea of this, but am concerned by the terminology.

<flame-bait>
What's being proposed is an organization of *vulnerability* researchers.
There are MANY other kinds of security researchers, including those who
design new forms of access controls, security models, intrusion detection
syste

[ more ]  [ reply ]

Application: Kerio Winroute Firewall 5.10
Vendor: Kerio Technologies Inc.
Vendor Site: http://www.kerio.com
Remote: Yes
Exploitable: Yes
Risk level: Critical (if proxy requires authentication)
Authors: Alexander Antipov & 3APA3A (aka Pig Killer)
Authors Sites: http://www.securitylab.ru http://www.s

[ more ]  [ reply ]

YAK! 2.1.0 still vulnerable

===========================

for file transfer yak uses ftp mode. Yak!

listens on port 3535 for file transfer in ftp mode.

vulnerability in the previous version was, they

were using constant username and pass

combination for ftp login.

2.1.0 version seems to

[ more ]  [ reply ]

>> I don't think those capable of actually doing research require hand holding by anyone.

I don't think there is any need to be so negative : -(

Bugtraq is such a group in existence already, but is more of informal
gathering of like-minded people.

In Asia and the Middle East, Security Associates

[ more ]  [ reply ]

Thor and Russ,

Adam Shostack and I have been thinking about a researchers'
organization for a while, too. We thought that an important first
step would be to host a vulnerability research workshop that would
discuss many of the key issues facing researchers, including the needs
for a researcher-f

[ more ]  [ reply ]