Further Information

AL-2003.05 -- Buffer Overflow in Sendmail - There is a vulnerability in sendmail that can be exploited to cause a denial-of-service condition and could allow a remote attacker to execute arbitrary code with the privileges of the sendmail daemon, typically root. (30/03/2003)

ESB-2003.0200 -- Core Security Technologies Advisory -- Vulnerability in Mutt Mail User Agent - (21/03/2003)

ESB-2003.0191 -- MIT krb5 Security Advisory 2003-003 -- Faulty length checks in xdrmem_getbytes - (20/03/2003)

AU-2003.006 -- AusCERT Update - Update to Recent Samba and Microsoft WebDAV Security Bulletins - This AusCERT Update is to provide you with additional information regarding two recent security bulletins; ESB-2003.0171 "Samba" and AL-2003.02 "Microsoft IIS WebDAV Remote Compromise Vulnerability". Both bulletins discuss vulnerabilities with impacts of root/Administrator compromise. (19/03/2003)

ESB-2003.0145 -- iDEFENSE Security Advisory 03.04.03 -- Locally Exploitable Buffer Overflow in file(1) - (05/03/2003)

AU-2003.004 -- AusCERT Update - Possible False Positive Attack Signatures in Sendmail Error Logs - (05/03/2003)

AU-2003.003 -- AusCERT Update - Sendmail Proof of Concept Code Available - New Version of BIND - (05/03/2003)

ESB-2003.0134 -- CERT Advisory CA-2003-07 -- Remote Buffer Overflow in Sendmail - (04/03/2003)

ESB-2003.0135 -- Sendmail Consortium Announcement -- sendmail 8.12.8 available - Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.8. It contains a fix for a critical security problem discovered by Mark Dowd of ISS X-Force. (04/03/2003)

AA-2003.01 -- Sendmail Vulnerability - AusCERT has received information that a vulnerability exists in all versions of sendmail, an open source SMTP mail server. This vulnerability may allow remote users to gain root privileges. (04/03/2003)

ESB-2003.0132 -- iDEFENSE Security Advisory 02.27.03 -- TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing - (28/02/2003)

ESB-2003.0111 -- OpenSSL Security Advisory -- Timing-based attacks on SSL/TLS with CBC encryption - (21/02/2003)

ESB-2003.0109 -- HEWLETT-PACKARD SECURITY BULLETIN -- HP Tru64 UNIX, HP-UX, Potential BIND Security Vulnerabilities - (21/02/2003)

ESB-2003.0108 -- CERT Advisory CA-2003-05 -- Multiple Vulnerabilities in Oracle Servers - (20/02/2003)

ESB-2003.0100 -- NGSSoftware Insight Security Research Advisory NISR16022003d -- Oracle9i Application Server Format String Vulnerability - (19/02/2003)

ESB-2003.0099 -- NGSSoftware Insight Security Research Advisories NISR16022003a, NISR16022003b, NISR16022003c and NISR16022003e -- Multiple Oracle Database Vulnerabilities - (18/02/2003)

ESB-2003.0098 -- PHP Security Advisory -- CGI vulnerability in PHP version 4.3.0 - (18/02/2003)

ESB-2003.0032 -- RHSA-2002:297-17 -- Updated vim packages fix modeline vulnerability - (17/01/2003)

ESB-2003.0026 -- CERT Advisory CA-2003-01 -- Buffer Overflows in ISC DHCPD Minires Library - (16/01/2003)

ESB-2002.666 -- COMPAQ SECURITY BULLETIN SSRT2301 -- HP Tru64 UNIX uudecode Potential Security Vulnerability - (29/11/2002)

ESB-2002.640 -- COMPAQ SECURITY BULLETIN -- SSRT2266 HP Tru64 UNIX IGMP Potential (DoS) Security Vulnerability - (15/11/2002)

ESB-2002.609 -- (Compaq) SECURITY BULLETIN -- SSRT2265 HP TruCluster Server Interconnect Potential Security Vulnerability - (06/11/2002)

ESB-2002.572 -- Compaq Security Bulletin (SSRT0818U) -- HP Tru64 UNIX V5.1A zlib Potential Security Vulnerability - (16/10/2002)

ESB-2002.555 -- Compaq Security Bulletin (SSRT2339 and SSRT2368) -- HP Tru64 UNIX Potential Security Vulnerability - (09/10/2002)

ESB-2002.554 -- Compaq Security Bulletin (SSRT2208) -- HP Tru64 UNIX /usr/sbin/routed Potential Security Vulnerability - (09/10/2002)

ESB-2002.530 -- Compaq Security Advisory (SSRT2362) -- WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability - (27/09/2002)

ESB-2002.500 -- Compaq Security Advisory (SSRT-547) -- HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP - (11/09/2002)

ESB-2002.483 -- Compaq Security Bulletin (SSRT2275 & SSRT2229) -- HP Tru64 UNIX - Potential Buffer Overflows & Potential Denial of Service - (02/09/2002)

ESB-2002.482 -- Compaq Security Bulletin (SSRT2310a) -- HP Tru64 UNIX & HP OpenVMS Potential OpenSSL Security Vulnerability - (02/09/2002)

ESB-2002.481 -- Compaq Security Advisory (SSRT2271) -- SANworks Management Appliance & Potential SQL Server/MSDE Security Vulnerability - (02/09/2002)

ESB-2002.468 -- CERT Advisory CA-2002-19 -- Buffer Overflows in Multiple DNS Resolver Libraries UPDATED - (28/08/2002)

AU-2002.005 -- AusCERT Update - SSL Vulnerabilities in IE and Konqueror (UPDATE) - (16/08/2002)

ESB-2002.394 -- CERT Advisory CA-2002-25 -- Integer Overflow In XDR Library - (06/08/2002)

ESB-2002.392 -- Compaq Security Advisory (SSRT2257) -- HP Tru64 UNIX /usr/bin/su buffer overflow potential exploit - (02/08/2002)

ESB-2002.381 -- CERT Advisory CA-2002-24 -- Trojan Horse OpenSSH Distribution - (02/08/2002)


Previous  1, 2, 3 ... , 104, 105, 106  Next denotes AusCERT member only content.