Further Information

AL-2003.17 -- Sendmail prescan() buffer overflow vulnerability - New sendmail buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code (potentially as root) or cause a denial of service. (18/09/2003)

AL-2003.16 -- Buffer Management Vulnerability in OpenSSH - Sites running OpenSSH prior to 3.7, and any implementations of code derived from OpenSSH prior to 3.7, to evaluate their exposure to this vulnerabilities and to apply the vendor patches, and/or network filters as deemed necessary. (17/09/2003)

ESB-2003.0633 -- CERT Summary CS-2003-03 -- CERT Summary - (09/09/2003)

ESB-2003.0563 -- CERT Advisory CA-2003-21 -- GNU Project FTP Server Compromise - (14/08/2003)

ESB-2003.0548 -- Sun(sm) Alert Notification -- Security Vulnerability in SSL/TLS Block Ciphers May Affect Sun ONE/iplanet Web Server and Application Server - (07/08/2003)

ESB-2003.0535 -- FreeBSD-SA-03:08.realpath -- Single byte buffer overflow in realpath(3) - (04/08/2003)

ESB-2003.0482 -- The Apache Software Foundation Announcement -- Apache 2.0.47 Released - (11/07/2003)

ESB-2003.0392 -- CERT Summary CS-2003-02 -- CERT Summary - (04/06/2003)

ESB-2003.0380 -- The Apache Software Foundation Announcement -- Apache 2.0.46 Released - (29/05/2003)

ESB-2003.0328 -- OpenSSH Security Bulletin -- Dangerous AIX linker behavior (aixgcc.adv) - (30/04/2003)

ESB-2003.0325 -- NGSSoftware Insight Security Research Advisory -- Oracle Database Link Buffer Overflow - (30/04/2003)

ESB-2003.0295 -- CERT Advisory CA-2003-13 -- Multiple Vulnerabilities in Snort - (21/04/2003)

ESB-2003.0287 -- Core Security Technologies Advisory -- Snort TCP Stream Reassembly Integer Overflow Vulnerability - (16/04/2003)

AL-2003.06 -- Security bugfix for Samba - A vulnerability has been discovered in Samba, that if exploited correctly, leads to an anonymous user gaining root access on a Samba serving system. All versions of Samba up to and including Samba 2.2.8 are vulnerable. An active exploit of the bug has been reported in the wild. (08/04/2003)

ESB-2003.0244 -- The Apache Software Foundation Announcement -- Apache 2.0.45 Released - (03/04/2003)

ESB-2003.0227 -- Sendmail Consortium Announcement -- sendmail 8.12.9 available - (31/03/2003)

AL-2003.05 -- Buffer Overflow in Sendmail - There is a vulnerability in sendmail that can be exploited to cause a denial-of-service condition and could allow a remote attacker to execute arbitrary code with the privileges of the sendmail daemon, typically root. (30/03/2003)

ESB-2003.0214 -- CERT Advisory CA-2003-11 -- Multiple Vulnerabilities in Lotus Notes and Domino - (27/03/2003)

ESB-2003.0200 -- Core Security Technologies Advisory -- Vulnerability in Mutt Mail User Agent - (21/03/2003)

ESB-2003.0191 -- MIT krb5 Security Advisory 2003-003 -- Faulty length checks in xdrmem_getbytes - (20/03/2003)

AL-2003.03 -- Integer overflow in Sun RPC XDR library routines - (20/03/2003)

AU-2003.006 -- AusCERT Update - Update to Recent Samba and Microsoft WebDAV Security Bulletins - This AusCERT Update is to provide you with additional information regarding two recent security bulletins; ESB-2003.0171 "Samba" and AL-2003.02 "Microsoft IIS WebDAV Remote Compromise Vulnerability". Both bulletins discuss vulnerabilities with impacts of root/Administrator compromise. (19/03/2003)

ESB-2003.0145 -- iDEFENSE Security Advisory 03.04.03 -- Locally Exploitable Buffer Overflow in file(1) - (05/03/2003)

AU-2003.004 -- AusCERT Update - Possible False Positive Attack Signatures in Sendmail Error Logs - (05/03/2003)

AU-2003.003 -- AusCERT Update - Sendmail Proof of Concept Code Available - New Version of BIND - (05/03/2003)

ESB-2003.0144 -- IBM SECURITY ADVISORY -- sendmail buffer overflow vulnerability - (04/03/2003)

ESB-2003.0134 -- CERT Advisory CA-2003-07 -- Remote Buffer Overflow in Sendmail - (04/03/2003)

ESB-2003.0135 -- Sendmail Consortium Announcement -- sendmail 8.12.8 available - Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.8. It contains a fix for a critical security problem discovered by Mark Dowd of ISS X-Force. (04/03/2003)

AA-2003.01 -- Sendmail Vulnerability - AusCERT has received information that a vulnerability exists in all versions of sendmail, an open source SMTP mail server. This vulnerability may allow remote users to gain root privileges. (04/03/2003)

ESB-2003.0132 -- iDEFENSE Security Advisory 02.27.03 -- TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing - (28/02/2003)

ESB-2003.0111 -- OpenSSL Security Advisory -- Timing-based attacks on SSL/TLS with CBC encryption - (21/02/2003)

ESB-2003.0108 -- CERT Advisory CA-2003-05 -- Multiple Vulnerabilities in Oracle Servers - (20/02/2003)

ESB-2003.0099 -- NGSSoftware Insight Security Research Advisories NISR16022003a, NISR16022003b, NISR16022003c and NISR16022003e -- Multiple Oracle Database Vulnerabilities - (18/02/2003)

ESB-2003.0097 -- iDEFENSE Security Advisory 02.12.03 -- Buffer Overflow in AIX libIM.a - (18/02/2003)

ESB-2003.0026 -- CERT Advisory CA-2003-01 -- Buffer Overflows in ISC DHCPD Minires Library - (16/01/2003)


Previous  1, 2, 3 ... , 119, 120, 121  Next denotes AusCERT member only content.