SecurityFocus

Windows Media Player directory traversal vulnerability 2003-05-07
Jouko Pynnonen (jouko solutions fi)

Problem: Multiple Web Browsers do not do not validate CN on certificates. 2003-05-07
Simson L. Garfinkel (simsong nitroba com)

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities 2003-05-07
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Multiple Buffer Overflow Vulnerabilities in SLMail (#NISR07052003A) 2003-05-07
NGSSoftware Insight Security Research (nisr nextgenss com)

Multiple Vulnerabilities in SLWebmail 2003-05-07
NGSSoftware Insight Security Research (nisr nextgenss com)

SAP database local root vulnerability during installation. (fwd) 2003-05-07
Larry W. Cashdollar (lwc vapid ath cx)

Re: youbin local root exploit + advisory 2003-05-06
Jeremy C. Reed (reed reedmedia net)

Siemens Mobile Phone - Buffer Overflow 2003-05-06
subj (r2subj3ct dwclan org)

[SECURITY] [DSA 300-1] New Balsa packages fix buffer overflow 2003-05-06
joey infodrom org (Martin Schulze)

youbin local root exploit + advisory 2003-05-06
Knud Erik Højgaard (address-modified-due-to-out-of-office-and-gay-antivirus-marking-perl-scripts-as-trojans---kain ircop dk)

[SECURITY] [DSA 299-1] New leksbot packages fix improper setuid-root execution 2003-05-06
Matt Zimmerman (mdz debian org)

RE: Microsoft IIS Authentication Manager Account Conformation Vuln? 2003-05-06
Russ (Russ Cooper rc on ca)

Crash in Internet Explorer 6.0 Sp1 2003-05-05
David F. Madrid (conde0 telefonica net)

Security Update: [CSSA-2003-017.0] OpenLinux: Various serious Samba vulnerabilities 2003-05-02
security sco com

Security Update: [CSSA-2003-018.0] OpenLinux: file command buffer overflow 2003-05-02
security sco com

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 (1328) 2003-05-06
Dennis Rand (der infowarfare dk)

[CLA-2003:640] Conectiva Security Announcement - vnc 2003-05-05
Conectiva Updates (secure conectiva com br)

CORE-2003-0303: Multiple Vulnerabilities in Mirabilis ICQ client 2003-05-05
CORE Security Technologies Advisories (advisories coresecurity com)

Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow 2003-05-05
Cesar (cesarc56 yahoo com)

Microsoft Biztalk Server DTA vulnerable to SQL injection 2003-05-05
Cesar (cesarc56 yahoo com)

[CLA-2003:639] Conectiva Security Announcement - krb5 2003-05-05
Conectiva Updates (secure conectiva com br)

Security Update: [CSSA-2003-019.0] OpenLinux: tcp SYN with FIN packets are not discarded 2003-05-05
security sco com

Key validity bug in GnuPG 1.2.1 and earlier 2003-05-04
David Shaw (dshaw jabberwocky com)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-05
Marco Ivaldi (raptor mediaservice net)

CommuniGatePro 4.0.6 [EXPLOIT] 2003-05-04
Yaroslav Polyakov (xenon sysattack com)

SILLY BEHAVIOR Part III : Internet Explorer 5.5 - 6.0 2003-05-04
http-equiv@excite.com (1 malware com)

Mod_Survey SYSBASE vulnerability 2003-05-04
Joel Palmius (joel palmius mh se)

kermit buffer overflow on hp-ux 2003-05-05
John Morris (jrm atl hp com)

Re: from bugtraq: HP-UX 11.0 /usr/bin/kermit (fwd) 2003-05-02
Frank da Cruz (fdc columbia edu)

Re: Dynamic DNS "Spoofing" & IRC 2003-05-03
Darren Reed (avalon caligula anu edu au)

Re: from bugtraq: HP-UX 11.0 /usr/bin/kermit (fwd) 2003-05-03
Elmar Knipp (Elmar Knipp knipp de)

Microsoft IIS Authentication Manager Account Conformation Vuln? 2003-05-03
JeiAr (jeiar kmfms com)

rwrite buffer overflow in hp-ux 2003-05-03
John Morris (jrm atl hp com)

Code Injection Vulnerabilities in WebcamXP Chat Feature 2003-05-02
Frame4 Security Systems (webmaster frame4 com)

Re: from bugtraq: HP-UX 11.0 /usr/bin/kermit (fwd) 2003-05-02
Frank da Cruz (fdc columbia edu)

HP-UX 11.0 /usr/lbin/rwrite 2003-05-02
bt delfi lt

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-02
Marco Ivaldi (raptor mediaservice net)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-01
Nicolas Couture (nc stormvault net)

HP-UX 11.0 /usr/bin/kermit 2003-05-02
bt delfi lt

Re: Dynamic DNS "Spoofing" & IRC 2003-05-02
Thomas Wouters (meeling xhoy nl)

Re: Dynamic DNS "Spoofing" & IRC 2003-05-02
Niels Bakker (niels=bugtraq bakker net)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-02
Karl-Heinz Haag (k haag linux-ag com)

GLSA: openssh (200305-01) 2003-05-02
Daniel Ahlberg (aliz gentoo org)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-02
Michael Shigorin (mike osdn org ua)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-01
Thilo Schulz (arny ats s bawue de)

Re: Dynamic DNS "Spoofing" & IRC 2003-05-02
c4 (c4 jolt nu)

Re: Dynamic DNS "Spoofing" & IRC 2003-05-02
Markus Kovero (muikku muikkuverkko net)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-02
Marco Ivaldi (raptor mediaservice net)

[RHSA-2003:113-01] Updated mod_auth_any packages available 2003-05-02
redhat-announce-list-admin redhat com

Privacy Compromise Ifriends Webcam 2003-05-02
morning_wood (se_cur_ity hotmail com)

Re: April appeared to be a month of IE bugs. Here's another one. 2003-05-02
Joachim Stro"mbergson (Joachim Strombergson InformAsic com)

[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution 2003-05-02
joey infodrom org (Martin Schulze)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-01
ilja van sprundel (ilja netric org)

Dynamic DNS "Spoofing" & IRC 2003-05-01
Intel Nop (0x90 invisiblenet net)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-01
Nicolas Couture (nc stormvault net)

re:Latest MS SQL Server vulnerabilities revealed 2003-05-01
Cesar (cesarc56 yahoo com)

Integer Manipulation Attacks 2003-05-01
Michael Howard (mikehow microsoft com)

RE: eBay Security Contact 2003-05-01
Anthony Patti (gps augustmail com)

Multiple Vulnerabilities in Splatt Forum 4.0 2003-05-01
Frame4 Security Systems (webmaster frame4 com)

Re: [Full-Disclosure] eBay Security Contact 2003-05-01
Anne Carasik (gator cacr caltech edu)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-05-01
Shiva Persaud (shivapd us ibm com)

eBay Security Contact 2003-05-01
mattmurphy@kc.rr.com (mattmurphy kc rr com)

Re: [Full-Disclosure] eBay Security Contact 2003-05-01
Kevin Spett (kspett spidynamics com)

Cisco Security Advisory: Cisco ONS15454, ONS15327, ONS15454SDH, and ONS15600 Nessus Vulnerabilities 2003-05-01
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-04-30
Damien Miller (djm mindrot org)

re:Latest MS SQL Server vulnerabilities revealed 2003-04-30
Michael - (michael nix org)

Re: Latest MS SQL Server vulnerabilities revealed 2003-04-30
Jeff Moss (jmoss blackhat com)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-04-30
Darren Tucker (dtucker zip com au)

Red Hat IA64 products still missing fixes for the ptrace vs kmod vulnerability 2003-04-30
Christoph Hellwig (hch infradead org)

[CLA-2003:633] REVISED: Conectiva Security Announcement - glibc 2003-04-30
Conectiva Updates (secure conectiva com br)

Re: April appeared to be a month of IE bugs. Here's another one. 2003-04-29
Cove Schneider (cove wildpackets com)

[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit 2003-04-30
joey infodrom org (Martin Schulze)

SILLY BEHAVIOR Part II : Internet Explorer 5.5 - 6.0 2003-05-01
http-equiv@excite.com (1 malware com)

[SECURITY] [DSA 296-1] New kdebase packages fix arbitrary command execution 2003-04-30
joey infodrom org (Martin Schulze)

RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS 2003-04-30
jasonk (jasonk bluedevel com)

Re: April appeared to be a month of IE bugs. Here's another one. 2003-04-29
Cove Schneider (cove wildpackets com)

Re: Qpopper v4.0.x poppassd local root exploit 2003-04-30
Randall Gellens (rg_public 1 flagg qualcomm com)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-05-01
Dan Harkless (bugtraq harkless org)

Re: OpenSSH/PAM timing attack allows remote users identification 2003-05-01
Ethan Benson (erbenson alaska net)

[CLA-2003:635] Conectiva Security Announcement - balsa 2003-04-30
Conectiva Updates (secure conectiva com br)

Re: April appeared to be a month of IE bugs. Here's another one. 2003-05-01
ERRor (error pochtamt ru)

[RHSA-2003:133-01] Updated man packages fix minor vulnerability 2003-05-01
bugzilla redhat com

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-05-01
Darren Tucker (dtucker zip com au)

[SECURITY] [DSA 297-1] New snort packages fix remote root exploits 2003-05-01
joey infodrom org (Martin Schulze)

[CLA-2003:633] Conectiva Security Announcement - glibc 2003-04-30
Conectiva Updates (secure conectiva com br)

[CLA-2003:614] REVISED: Conectiva Security Announcement - sendmail 2003-04-30
Conectiva Updates (secure conectiva com br)

Re: Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-04-30
Valdis Kletnieks vt edu

[CLA-2003:632] Conectiva Security Announcement - apache 2003-04-30
Conectiva Updates (secure conectiva com br)

[ESA-20030430-013] 'snort' stream4 preprocessor integer overflow vulnerability 2003-04-30
EnGarde Secure Linux (security guardiandigital com)

[ESA-20030430-014] 'tcpdump' multiple vulnerabilities 2003-04-30
EnGarde Secure Linux (security guardiandigital com)

Portable OpenSSH: Dangerous AIX linker behavior (aixgcc.adv) 2003-04-30
Damien Miller (djm mindrot org)

OpenSSH/PAM timing attack allows remote users identification 2003-04-30
Marco Ivaldi (raptor mediaservice net)

RE: [Opera 7] Yet Another Story of "Phantom of the Opera" 2003-04-30
GreyMagic Software (security greymagic com)

[SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions 2003-04-30
joey infodrom org (Martin Schulze)

Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service 2003-04-30
Cisco Systems Product Security Incident Response Team (psirt cisco com)

GLSA: balsa (200304-10) 2003-04-30
Daniel Ahlberg (aliz gentoo org)

Latest MS SQL Server vulnerabilities revealed 2003-04-29
Cesar (cesarc56 yahoo com)

Re: Windows Server 2003 Security Guide available 2003-04-29
Lucas Holt (luke foolishgames com)

RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash 2003-04-29
kajbaf (kajbaf cse shirazu ac ir)

[RHSA-2003:093-01] Updated MySQL packages fix vulnerabilities 2003-04-29
bugzilla redhat com