GLSA: evolution (200303-18)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - GENTOO LINUX SECURITY ANNOUNCEMENT 200303-18 - - - PACKAGE : evolution SUMMARY :

GLSA: kernel (200303-17)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - GENTOO LINUX SECURITY ANNOUNCEMENT 200303-17 - - - PACKAGE : kernel SUMMARY : ptrace

SuSE Security Announcement: ethereal (SuSE-SA:2003:019)

-BEGIN PGP SIGNED MESSAGE- __ SuSE Security Announcement Package:ethereal Announcement-ID:SuSE-SA:2003:019 Date: Friday,

SuSE Security Announcement: file (SuSE-SA:2003:017)

-BEGIN PGP SIGNED MESSAGE- __ SuSE Security Announcement Package:file Announcement-ID:SuSE-SA:2003:017 Date: Friday, Mar

[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 265-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze March 21st, 2003

Edonkey and Overnet resources consumption

## Applications: Edonkey2000 (http://www.edonkey2000.com) Overnet (http://www.overnet.com) Versions: 0.45 and previous versions (only the GUI program) Platforms:Windows only Bug: The programs

SuSE Security Announcement: qpopper (SuSE-SA:2003:018)

-BEGIN PGP SIGNED MESSAGE- __ SuSE Security Announcement Package:qpopper Announcement-ID:SuSE-SA:2003:018 Date: Friday,

New attack vectors and a vulnerability dissection of MS03-007

The patch announced by Microsoft on the 17th March 2003 fixed a security vulnerability in the core of the Windows 2000 operating system. This flaw was actively being exploited through WebDAV requests to Microsoft's Internet Information Server 5. It must be stressed that IIS was simply the attack

[ESA-20030321-010] 'glibc' RPC XDR decoder vulnerability

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ++ | EnGarde Secure Linux Security Advisory March 21, 2003 | | http://www.engardelinux.org/ ESA-20030321-010

Re: Check Point FW-1 NG FP3 FP3 HF1: DoS attack against syslog daemon possible

Has anyone tested these vulnerabilities on NG FP1 or are they strictly related to FP3? Eric Hines -Original Message- From: Dr. Peter Bieringer [mailto:[EMAIL PROTECTED] Sent: Friday, March 21, 2003 6:47 AM To: Maillist Bugtraq; Maillist full-disclosure Subject: Check Point FW-1 NG FP3

Guestbook tr3.a

Product : Guestbook tr3.a Version : First WebSite : http://www.planetmoon.net Problem : Viewing passwords file Description: In this script passwords are in passwd.txt file In Shrot, all who want see the passwords can make it. Exploit:

[Sorcerer-spells] OPENSSL-SORDCERER2003-03-21

Sorcerer Update Advisory Tap Into the Source Source Name:openssl-0.9.7a Advisory ID:SORCERER2003-03-21-0 Date:

[RHSA-2003:108-01] Updated Evolution packages fix multiple vulnerabilities

- Red Hat Security Advisory Synopsis: Updated Evolution packages fix multiple vulnerabilities Advisory ID: RHSA-2003:108-01 Issue date:2003-03-21 Updated on:2003-03-21 Product:

IRM 004: ActiveSync Version 3.5 Denial of Service Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 004 ActiveSync version 3.5 Denial of Service Vulnerability Vulnerablity Type / Importance: Denial of Service / High Problem discovered: November 26th 2002 Vendor contacted: November 26th 2002

Stunnel: RSA timing attacks / key discovery

Release Date: 2003-Mar-21 Package: stunnel Versions: Stunnel 3.xx = 22 Stunnel 4.xx = 04 Problem type: Key discovery / Information Leakage Exploit script:None publicly available Severity: High

FreeBSD Security Advisory FreeBSD-SA-03:06.openssl

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 = FreeBSD-SA-03:06.opensslSecurity Advisory The FreeBSD Project Topic:

RE: Check Point FW-1 NG FP3 FP3 HF1: DoS attack against syslog daemon possible

Alright. I was just concerned because of the wording Checkpoint used on their web site. Prior to the release of NG FP3 HF2... I'm going to assume they were referring to the HF2 portion of that, and not FP3 Eric Hines -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: Check Point FW-1 NG FP3 FP3 HF1: DoS attack against syslog daemonpossible

The daemon was apparently only introduced since FP3 Hines, Eric

NT Service Killer

Introduction Picture yourself as a win32 programmer, you were provided with local administrator rights. You are in charge of developing NT system services, i.e. applications that do not need opened session to be running. During the debugging phase, you might need to stop your service prototype.

ProtWare HTML Guardian has pathetic encryption

For $40 or $70, ProtWare's HTML Guardian (http://www.protware.com) claims to encrypt html code and javascripts, [making] it impossible to reuse them. Unfortunately, HTML Guardian does not do anything more than to obfuscate the HTML source code. There is no encryption. In fact, the JavaScript

GLSA: rxvt (200303-16)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - GENTOO LINUX SECURITY ANNOUNCEMENT 200303-16 - - - PACKAGE : rxvt SUMMARY : dangerous

[sorcerer-spells] MUTT-SORCERER2003-03-19

Sorcerer Update Advisory Tap Into the Source Source Name:mutt-1.4.1i Advisory ID:SORCERER2003-03-19 Date:

Re: [INetCop Security Advisory] ++Danger++ Outblaze Web based e-mail that is exposed in very dangerous state !!!

Suresh Ramasubramanian [20/03/03 11:54 +0530]: INetCop Security Advisory #2003-0x82-014.c Exploit can succeed manufacturing user's cookie. Your submission to bugtraq is pretty sketchy - there are no details, nor is there any proof of concept / sample code. Thanks to dong-h0un U

SimpleChat

Product : SimpleChat! Version : 1.3 WebSite : http://hot-things.net Problem : Private info viewing Description: In a directory /data/ the file containing the information on users of a chat lays (taking place in a chat at present), to which any interested person can receive

GLSA: openssl (200303-15)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - GENTOO LINUX SECURITY ANNOUNCEMENT 200303-15 - - - PACKAGE : openssl SUMMARY : timing

Check Point FW-1 NG FP3 FP3 HF1: DoS attack against syslog daemonpossible

Hi all, interesting for all Check Point FW-1 NG users which have enabled the since FP3 included syslog daemon. Peter (P) (C) 2003 AERAsec Network Services and Security GmbH URLs: http://www.aerasec.de/ http://www.aerasec.de/security/advisories/txt/