-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200309-14
- - - ---------------------------------------------------------------------

          PACKAGE : openssh
          SUMMARY : multipl

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

========================================================================
=====
FreeBSD-SA-03:14.arp Security Advisory
The FreeBSD Project

Topic: de

[ more ]  [ reply ]

Released Date 09/23/2003

TITLE
=====
TCLHttpd 3.4.2 - Multiple Vulnerabilities

DESCRIPTION
===========
"TclHttpd is used both as a general-purpose Web
server, and as a framework for building server
applications. It implements Tcl (http://www.tcl.tk),
including the Tcl Resource Center and Scriptics

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

+-----------------------------------------------------------------------
-+
| Guardian Digital Security Advisory September 24, 2003 |
| http://www.guardiandigital.com ESA-20030924-026 |
|

[ more ]  [ reply ]

Hi,

I just discovered that VeriSign's SiteFinder Web site is leaking data
submitted in Web forms to its marketing analysis partner, Omniture.
Forms can easily contain personal information such as an email address.
For the problem to occur, a Web form must use the GET method.

This data spill prob

[ more ]  [ reply ]

This is just a simple exploit utilizing the Object Data vulnerability
discovered by Drew Copley, coupled with the GreyMagic no-script HTML
rendering as demonstrated earlier on this list and others by jelmer.

Tell your user to go install MS03-032, which he obviously did not do as
MS03-032 patches th

[ more ]  [ reply ]

Mark,
The code you just sent looks familiar to a SPAM I received
attempting to hijack users' e-gold accounts. Out of curiosity I
followed that link which loaded start.html (attached). What worries me
is that I'm running IE 6.0.2800.1106 with all the latest patches from
Microsoft and this page (st

[ more ]  [ reply ]

Hi Mark,

www.Haxr.org uses the "XML Page Object Type Validation
Vulnerability" [1] to infect IE users automatically.
Here is the code from the site:

<span datasrc="#oExec" datafld="counter"
dataformatas="html"></span>
<xml id="oExec">
<security>
<counter>
<![CDATA[
<object data=tracker.php></obje

[ more ]  [ reply ]

PROTEGO Security Advisory #PSA200302
Topic: MondoSoft File Creation vulnerability
Application : MondoSearch 4.4, 5.0, and 5.1
Author: Jens H. Christensen (jhc at protego.dk)
Advisory URL: http://www.protego.dk/advisories/200302.html
Identifiers: CERT: VU# 756556
Vendor Name: MondoSoft
Vendor URL:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] WU-FTPD Security Advisory (SSA:2003-259-03)

Upgraded WU-FTPD packages are available for Slackware 9.0 and
- -current. These fix a problem where an attacker could use a
specially crafted filename in conjunction with WU-FTPD's
con

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] New OpenSSH packages (SSA:2003-266-01)

Upgraded OpenSSH 3.7.1p2 packages are available for Slackware 8.1,
9.0 and -current. This fixes security problems with PAM
authentication. It also includes several code cleanups from Solar

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] ProFTPD Security Advisory (SSA:2003-259-02)

Upgraded ProFTPD packages are available for Slackware 8.1, 9.0 and
- -current. These fix a security issue where an attacker could gain
a root shell by downloading a specially crafted f

[ more ]  [ reply ]

To: bugtraq (at) securityfocus (dot) com [email concealed] announce (at) lists.caldera (dot) com [email concealed] full-disclosure (at) lists.netsys (dot) com [email concealed]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________
______

SCO Security Advisory

Subject: OpenServer 5.0.7 OpenServer 5.0.6 OpenServer

[ more ]  [ reply ]

Erwan David:
> I'll add 5. consider data encoding as broken and return an error.
> The base64 specification specifies how to encode. If you get
> padding character inside data, it's no more base64 encoded data.

The base64 specification specifies how to decode, too. And it specifies how to handle un

[ more ]  [ reply ]

> From: N407ER [mailto:n407er (at) myrealbox (dot) com [email concealed]]
> Sent: Tuesday, September 23, 2003 10:43 AM
>
> By this logic, all webservers which unintentionally accept traffic
> without somehow verifying that a typo did not take place violate the
> ECPA. Thats ridiculous. Do you really want a precedent where,

[ more ]  [ reply ]

Hi, can anyone shed some light on this for me? If this is new, its
going to spread like wildfire. AOL or incidents lists have yet to
reply.... it appears to be a legitimate threat as I have at least one
user "infected" already.. Thank you..

-Mark Coleman

--------------

Hi, please find atta

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

Internet Security Systems Security Brief
September 23, 2003

ProFTPD ASCII File Remote Compromise Vulnerability

Synopsis:

ISS X-Force has discovered a flaw in the ProFTPD Unix FTP server. ProFTPD
is a highly configurable FTP (File Transfer Protocol) server for

[ more ]  [ reply ]

"By this logic, all webservers which unintentionally accept traffic
without somehow verifying that a typo did not take place violate the
ECPA. Thats ridiculous. Do you really want a precedent where, if someone
accidentally POSTs bank information to your site instead of the URL
they

[ more ]  [ reply ]

From: Adam Zabrocki <pi3ki31ny (at) wp (dot) pl [email concealed]>
> .... but in the system (linux) is restriction for path_name = 4095 and in
this example we should build minimum path_name = 32778 :-) (Shall it is
possibly to bypass it?)

Linux 2.2.x and some early 2.4.x kernel versions defines PATH_MAX to be 4095
characters,

[ more ]  [ reply ]

What about this section:

" Because it is used only for padding at the end of the data, the
occurrence of any '=' characters may be taken as evidence that the
end of the data has been reached (without truncation in transit). No
such assurance is possible, however, when the number of octets
transmit

[ more ]  [ reply ]

did an audit of mpg123(my mp3 player of choice), found a remotely

exploitable bug in audio streaming service(httpget.c); applies to v0.59r

and v0.59s(pre, up to current as of writing this). the exploit comments

explain how it works and how to find the memory addresses needed(if not

already a

[ more ]  [ reply ]