SecurityFocus

Re: [Full-Disclosure] Cross-Site Scripting in Unparsable XML Files (GM#013-IE) 2003-06-17
Kevin Spett (kspett spidynamics com)

Re: [Full-Disclosure] Cross-Site Scripting in Unparsable XML Files (GM#013-IE) 2003-06-17
jelmer (kuper237 planet nl)

MIPSPro Compiler Predictable Temp File vulnerability 2003-06-17
SGI Security Coordinator (agent99 sgi com)

Portmon file arbitrary read/write access vulnerability 2003-06-17
David Hancock (dmhancoc us ibm com)

[slackware-security] 2.4.21 kernels available (SSA:2003-168-01) 2003-06-18
Slackware Security Team (security slackware com)

MHFTPD vulnerability 2003-06-18
Frank Denis (j 42-networks com)

phpMyAdmin XSS Vulnerabilities, Transversal Directory Attack , Information Encoding Weakness and Path Disclosures 2003-06-18
Lorenzo Manuel Hernandez Garcia-Hierro (security lorenzohgh com)

Denial of service in Cajun P13x/P33x switch family firmware 3.x 2003-06-18
Jacek Lipkowski (sq5bpf andra com pl)

[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities 2003-06-18
Matt Zimmerman (mdz debian org)

cdrtools exploit 2003-06-17
Claes Nyberg (md0claes mdstud chalmers se)

Portmon file arbitrary read/write access vulnerability 2003-06-16
Luca Ercoli (luca ercoli inwind it)

[SECURITY] [DSA-322-1] New typespeed packages fix buffer overflow 2003-06-17
Matt Zimmerman (mdz debian org)

dune[0.6.7+-]: remote buffer overflow exploit. (httpd) 2003-06-17
Vade 79 (v9 fakehalo deadpig org)

[SECURITY] [DSA-323-1] New noweb packages fix insecure temporary file creation 2003-06-17
Matt Zimmerman (mdz debian org)

ZH2003-2SP Security Patch for atftp 0.6.*-0.7 2003-06-16
Astharot (secfoc email it)

Re: Cross-Site Scripting in Unparsable XML Files (GM#013-IE) 2003-06-17
Matt Moore (matt moore pentest-limited com)

Linux 2.0 remote info leak from too big icmp citation 2003-06-17
Philippe Biondi (biondi cartel-securite fr)

Re: pMachine (PHP) : Include() Security Hole 2003-06-15
martin f krafft (madduck madduck net)

Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) 2003-06-17
GreyMagic Software (security greymagic com)

Cross-Site Scripting in Unparsable XML Files (GM#013-IE) 2003-06-17
GreyMagic Software (security greymagic com)

[CLA-2003:661] Conectiva Security Announcement - apache 2003-06-16
Conectiva Updates (secure conectiva com br)

MDKSA-2003:067 - Updated ethereal packages fix multiple vulnerabilities 2003-06-16
Mandrake Linux Security Team (security linux-mandrake com)

MDKSA-2003:068 - Updated gzip packages fix insecure temporary file creation 2003-06-16
Mandrake Linux Security Team (security linux-mandrake com)

Dantz Retrospect Client 5.0.540 for Mac OS X - permission issues 2003-06-16
Alan McCarty (amccarty ecornell com)

Multiple Vulnerabilities Found in Mailtraq (DoS, Password Decryption, Directory Traversal) 2003-06-16
SecurITeam BugTraq Monitoring (bugtraq securiteam com)

Multiple Vulnerabilities In Snitz Forums 2003-06-16
JeiAr (jeiar kmfms com)

XSS Vulnerability in LedNews (CGI/Perl) v0.7 2003-06-15
gilbert vilvoorde (gilbert_vilvoorde hotmail com)

Directory traversal vulnerability on Xoops/E-xoops CMS module "tutorials" 2003-06-16
ac3 (ac3 www security-lab org)

Improving Web Application Security: Threats and Countermeasures 2003-06-16
Michael Howard (mikehow microsoft com)

Next kon2root - Redhat 9 2003-06-16
c0ntex (c0ntex hushmail com)

FW: iDEFENSE Security Advisory 06.16.03: Linux-PAM getlogin() Spoofing Vulnerability 2003-06-16
Dave Ahmad (da securityfocus com)

[SECURITY] [DSA-321-1] New radiusd-cistron packages fix buffer overflow 2003-06-14
Matt Zimmerman (mdz debian org)

SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue 2003-06-14
KF (dotslash snosoft com)

SRT2003-06-13-0945 - Progress PATH based dlopen() issue 2003-06-14
KF (dotslash snosoft com)

[SECURITY] [DSA-320-1] New mikmod packages fix buffer overflow 2003-06-13
Matt Zimmerman (mdz debian org)

BAZARR THUG LIFE , DONT READ OR VIRUS INFECT YOU 2003-06-12
bazarr@ziplip.com (bazarr ziplip com)

[SECURITY] [DSA-319-1] New webmin packages fix remote session ID spoofing 2003-06-12
Matt Zimmerman (mdz debian org)

[SECURITY] [DSA-318-1] New lyskom-server packages fix denial of service 2003-06-12
Matt Zimmerman (mdz debian org)

Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User Accounts access 2003-06-13
Lorenzo Hernandez Garcia-Hierro (novappc novappc com)

SuSE Security Announcement: radiusd-cistron (SuSE-SA:2003:030) 2003-06-13
Thomas Biege (thomas suse de)

[ANNOUNCE] kses 0.1.0 2003-06-13
Ulf Harnhammar (ulfh update uu se)

Cross site scripting in Post-Nuke 2003-06-13
David F. Madrid (idoru videosoft net uy)

SRT2003-06-12-0853 - ike-scan local root format string issue 2003-06-13
KF (dotslash snosoft com)

MDKSA-2003:066 - Updated kernel packages fix multiple vulnerabilities 2003-06-11
Mandrake Linux Security Team (security linux-mandrake com)

Re: Etherleak information leak in Windows Server 2003 drivers 2003-06-11
Ofir Arkin (ofir sys-security com)

Denial of Service Attack against ArGoSoft Mail Server Version 1.8 2003-06-11
Rushjo@tripbit.org (rushjo tripbit org)

Low risk vulnerabilities in ftp file list handling 2003-06-11
alan dhcp22 swansea linux org uk

[OpenPKG-SA-2003.031] OpenPKG Security Advisory (gzip) 2003-06-11
OpenPKG (openpkg openpkg org)

Directory traversal in NucaWeb Server 2003-06-10
Over_G (overg mail ru)

Re: Apache 2.x APR Exploit Code 2003-06-09
Lars Eilebrecht (lars apache org)

Immunix Secured OS 7+ tetex update 2003-06-09
Immunix Security Team (security immunix com)

[SECURITY] [DSA-312-1] New powerpc kernel fixes several vulnerabilities 2003-06-10
Matt Zimmerman (mdz debian org)

Linux 2.0 remote info leak from too big icmp citation 2003-06-09
Philippe Biondi (biondi cartel-securite fr)

[SmartFTP] Two Buffer Overflow Vulnerabilities 2003-06-09
:: Operash :: (nesumin softhome net)

[LeapFTP] "PASV" Reply Buffer Overflow Vulnerability 2003-06-09
:: Operash :: (nesumin softhome net)

[FlashFXP] Two Buffer Overflow Vulnerabilities 2003-06-09
:: Operash :: (nesumin softhome net)

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities 2003-06-09
Matt Zimmerman (mdz debian org)

[FTP Voyager] File List Buffer Overflow Vulnerability 2003-06-09
:: Operash :: (nesumin softhome net)

Several bugs found in "Spyke's PHP Board" 2003-06-09
Marc Bromm (theblacksheep fastmail fm)

Nokia GGSN (IP650 Based) DoS 2003-06-09
@stake Advisories (advisories atstake com)

[LSD] HP-UX security vulnerabilities 2003-06-10
Last Stage of Delirium (contact lsd-pl net)

PSOFT H-Sphere Cross Site Scripting Vulnerabilities 2003-06-09
Lorenzo Hernandez Garcia-Hierro (novappc novappc com)

WebSetup / WebMin Security Vulnerability on IRIX 2003-06-09
SGI Security Coordinator (agent99 sgi com)

Re: Algorimic Complexity Attacks 2003-06-08
Nicholas Weaver (nweaver CS berkeley edu)

Re: Algorimic Complexity Attacks 2003-06-08
Pavel Kankovsky (peak argo troja mff cuni cz)

Apache 2.x APR Exploit Code 2003-06-08
mattmurphy@kc.rr.com (mattmurphy kc rr com)

[SECURITY] [DSA-310-1] New xaos packages fix improper setuid-root execution 2003-06-09
Matt Zimmerman (mdz debian org)

Etherleak information leak in Windows Server 2003 drivers 2003-06-09
NGSSoftware Insight Security Research (nisr nextgenss com)

Cross-Platform Browser vulnerabilities - Critical 2003-06-07
meme-boi (meme-boi nothotmail org)

IE-object tag longtype exploit 2003-06-07
Alumni (alumni ok kz)

Re: zenTrack Remote Command Execution Vulnerabilities 2003-06-07
gr00vy (groovy2600 yahoo com ar)

man[v1.5l] catalog format strings patch. 2003-06-07
Vade 79 (v9 fakehalo deadpig org)

Re: Algorimic Complexity Attacks 2003-06-07
Nicholas Weaver (nweaver CS berkeley edu)

[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation 2003-06-07
Matt Zimmerman (mdz debian org)

Re: Algorimic Complexity Attacks 2003-06-07
Pavel Kankovsky (peak argo troja mff cuni cz)

[SECURITY] [DSA-309-1] New eterm packages fix buffer overflow 2003-06-07
Matt Zimmerman (mdz debian org)

Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit) 2003-06-07
Fozzy (fozzy dmpfrance com)

atftpd bug 2003-06-06
gz (techieone softhome net)

zenTrack Remote Command Execution Vulnerabilities 2003-06-06
farking i-ownur info

NOVL-2003-2966181 - HTTPSTK DOS 2003-06-06
Security@securityfocus.com, Alerts@securityfocus.com,Novell@securityfocus.com, Inc. (secure novell com)

NOVL-2003-2966205 - iChain 2.2 Field Patch 1a 2003-06-06
Security@securityfocus.com, Alerts@securityfocus.com,Novell@securityfocus.com, Inc. (secure novell com)

NOVL-2003-2966207 - iChain 2.1 Field Patch 3 2003-06-06
Ed Reed (ereed novell com)

SuSE Security Announcement: cups (SuSE-SA:2003:028) 2003-06-06
Sebastian Krahmer (krahmer suse de)

SuSE Security Announcement: pptpd (SuSE-SA:2003:029) 2003-06-06
Sebastian Krahmer (krahmer suse de)

Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 (SP2) - IMAP protocol 2003-06-06
Dennis Rand (der infowarfare dk)

Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS 2003-06-06
Benjamin A. Okopnik (ben callahans org)

Critical Vulnerabilities In Max Web Portal 2003-06-06
JeiAr (jeiar kmfms com)

[RHSA-2003:192-01] Updated KDE packages fix security issue 2003-06-05
bugzilla redhat com

[RHSA-2003:070-01] Updated hanterm packages provide security fixes 2003-06-06
bugzilla redhat com

linux)zblast/xzb[v1.2]: local buffer overflow. (games) 2003-06-05
Vade 79 (v9 fakehalo deadpig org)

BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS 2003-06-05
bazarr@ziplip.com (bazarr ziplip com)

MDKSA-2003:064 - Updated kon2 packages fix buffer overflow vulnerability 2003-06-05
Mandrake Linux Security Team (security linux-mandrake com)

Re: Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web Server v2.0.2 Beta 1 2003-06-05
Holger Zimmermann (zimpel users sourceforge net)

Monkey Http Daemon 2003-06-05
Martin (broadcast o0 dyndns org)

OpenSSH remote clent address restriction circumvention 2003-06-05
Mike Harding (mvh welkyn com)

Solaris syslogd overflow 2003-06-04
David Thiel (lx redundancy redundancy org)

Immunix Secured OS 7+ LPRng update 2003-06-05
Immunix Security Team (security immunix com)

ImageFolio All Versions : admin.cgi Directory transversal and file delete exploit. 2003-06-05
Paul Craig (pimp brainwave net nz)

Microsoft Internet Explorer %USERPROFILE% Folder Disclosure Vulnerability 2003-06-05
Eiji James Yoshida (ptrs-ejy bp iij4u or jp)

AdSubtract Proxy ACL Bypass Vulnerability 2003-06-05
advisories lurhq com