5861 IP Filtering issues

2003-01-24 Thread Edward wilkinson
Product:Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 (Latest firmware) Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP

Nokia Product Security Contact?

2003-01-24 Thread Ollie Whitehouse
All, Does anyone have any Nokia product security contacts please? Thanks in advance, Rgds Ollie

Re: Other Security Contacts Required (AutoDesk, Motorola and Vignette)

2003-01-24 Thread Ollie Whitehouse
All, After my success with the request for a Nokia product security contact can someone please supply me with product security contacts at the following organizations: Vignette AutoDesk Motorola Thanks in advance, Rgds Ollie

Mailman: cross-site scripting bug

2003-01-24 Thread webmaster
Product: Mailman Affected Version: 2.1 not other version has been tested Vendor's URL: http://www.gnu.org/software/mailman/ Solution: TBC Author: Manuel Rodriguez Introduction: Mailman is software to help manage electronic mail discussion lists, much like Majordomo or

Test program for CVS double-free.

2003-01-24 Thread Joe Testa
Greetings-- Attached to this e-mail you'll find a Java program which probes a CVS pserver for the recent double-free() vulnerability. I've tested it on a Linux architecture only; it would be much appreciated if people would mail me back with its performance results against *BSD, AIX,

RE: DoS attack on Windows 2000 Terminal Server

2003-01-24 Thread Diogo Fernandes
Hi, all Tested on Windows 2000 Server (IE55, SP2) and Windows 2000 Server (IE55, SP3). I do not have easy access to other platforms at the moment. Tested on Windows Xp Professional, w/o SP. The problem exists. Workaround - Remove all permissions from MSGINA.DLL for Power Users, Users and

[SECURITY] [DSA 241-1] New kdeutils packages fix several vulnerabilities

2003-01-24 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 241-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze January 24th, 2003

[USG- SA- 2003.001] USG Security Advisory (slocate)

2003-01-24 Thread inkubus
-BEGIN PGP SIGNED MESSAGE- __ USG Security Advisory http://www.usg.org.uk/advisories/2003.001.txt [EMAIL PROTECTED] USG- SA- 2003.001 24- Jan- 2003 __ Package: slocate Vulnerability: local

Eudora Message Deletion Weakness

2003-01-24 Thread Blud Clot
Description: Messages thought to be deleted are still stored on the user's harddrive. Versions Affected: This was tested on the latest version, version 5.2.0.9. It is likely that many or all previous versions are also affected. Details: When a message is deleted from the trash folder in Eudora

[SECURITY] [DSA 237-1] New kdenetwork packages fix several vulnerabilities

2003-01-24 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 237-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze January 22nd, 2003