Further Information

ESB-2003.0850 -- bind-announce -- BIND 8.4.3 deprecated - (12/12/2003)

AL-2003.24 -- rsync Security Advisory - The rsync team has received evidence that a vulnerability in rsync was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server. (05/12/2003)

ESB-2003.0820 -- GnuPG Security Advisory -- GnuPG's ElGamal signing keys compromised - (28/11/2003)

ESB-2003.0819 -- ISC Announcement - BIND 8.4.3 maintenance release -- Security Fix: Negative Cache Poison Fix - BIND DNS server version 8.4.3 is available, fixing a Negative Cache Poison vulnerability which may allow a remote attacker to cause a denial of service for specific domains. (28/11/2003)

ESB-2003.0814 -- CERT Summary -- CERT Summary CS-2003-04 - (25/11/2003)

ESB-2003.0774 -- RHSA-2003:323-01 -- Updated Ethereal packages fix security issues - (11/11/2003)

ESB-2003.0698 -- CERT Advisory CA-2003-26 -- Multiple Vulnerabilities in SSL/TLS Implementations - (03/10/2003)

ESB-2003.0687 -- CERT Advisory Notice -- Clarifications regarding recent vulnerabilities in OpenSSH - Clarifications regarding several recent vulnerabilities affecting OpenSSH (30/09/2003)

AL-2003.17 -- Sendmail prescan() buffer overflow vulnerability - New sendmail buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code (potentially as root) or cause a denial of service. (18/09/2003)

AL-2003.16 -- Buffer Management Vulnerability in OpenSSH - Sites running OpenSSH prior to 3.7, and any implementations of code derived from OpenSSH prior to 3.7, to evaluate their exposure to this vulnerabilities and to apply the vendor patches, and/or network filters as deemed necessary. (17/09/2003)

ESB-2003.0633 -- CERT Summary CS-2003-03 -- CERT Summary - (09/09/2003)

ESB-2003.0563 -- CERT Advisory CA-2003-21 -- GNU Project FTP Server Compromise - (14/08/2003)

ESB-2003.0535 -- FreeBSD-SA-03:08.realpath -- Single byte buffer overflow in realpath(3) - (04/08/2003)

ESB-2003.0482 -- The Apache Software Foundation Announcement -- Apache 2.0.47 Released - (11/07/2003)

ESB-2003.0392 -- CERT Summary CS-2003-02 -- CERT Summary - (04/06/2003)

ESB-2003.0380 -- The Apache Software Foundation Announcement -- Apache 2.0.46 Released - (29/05/2003)

ESB-2003.0325 -- NGSSoftware Insight Security Research Advisory -- Oracle Database Link Buffer Overflow - (30/04/2003)

ESB-2003.0295 -- CERT Advisory CA-2003-13 -- Multiple Vulnerabilities in Snort - (21/04/2003)

ESB-2003.0287 -- Core Security Technologies Advisory -- Snort TCP Stream Reassembly Integer Overflow Vulnerability - (16/04/2003)

AL-2003.06 -- Security bugfix for Samba - A vulnerability has been discovered in Samba, that if exploited correctly, leads to an anonymous user gaining root access on a Samba serving system. All versions of Samba up to and including Samba 2.2.8 are vulnerable. An active exploit of the bug has been reported in the wild. (08/04/2003)

ESB-2003.0244 -- The Apache Software Foundation Announcement -- Apache 2.0.45 Released - (03/04/2003)

ESB-2003.0227 -- Sendmail Consortium Announcement -- sendmail 8.12.9 available - (31/03/2003)

AL-2003.05 -- Buffer Overflow in Sendmail - There is a vulnerability in sendmail that can be exploited to cause a denial-of-service condition and could allow a remote attacker to execute arbitrary code with the privileges of the sendmail daemon, typically root. (30/03/2003)

ESB-2003.0200 -- Core Security Technologies Advisory -- Vulnerability in Mutt Mail User Agent - (21/03/2003)

ESB-2003.0191 -- MIT krb5 Security Advisory 2003-003 -- Faulty length checks in xdrmem_getbytes - (20/03/2003)

AU-2003.006 -- AusCERT Update - Update to Recent Samba and Microsoft WebDAV Security Bulletins - This AusCERT Update is to provide you with additional information regarding two recent security bulletins; ESB-2003.0171 "Samba" and AL-2003.02 "Microsoft IIS WebDAV Remote Compromise Vulnerability". Both bulletins discuss vulnerabilities with impacts of root/Administrator compromise. (19/03/2003)

ESB-2003.0145 -- iDEFENSE Security Advisory 03.04.03 -- Locally Exploitable Buffer Overflow in file(1) - (05/03/2003)

AU-2003.004 -- AusCERT Update - Possible False Positive Attack Signatures in Sendmail Error Logs - (05/03/2003)

AU-2003.003 -- AusCERT Update - Sendmail Proof of Concept Code Available - New Version of BIND - (05/03/2003)

ESB-2003.0134 -- CERT Advisory CA-2003-07 -- Remote Buffer Overflow in Sendmail - (04/03/2003)

ESB-2003.0135 -- Sendmail Consortium Announcement -- sendmail 8.12.8 available - Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.8. It contains a fix for a critical security problem discovered by Mark Dowd of ISS X-Force. (04/03/2003)

AA-2003.01 -- Sendmail Vulnerability - AusCERT has received information that a vulnerability exists in all versions of sendmail, an open source SMTP mail server. This vulnerability may allow remote users to gain root privileges. (04/03/2003)

ESB-2003.0132 -- iDEFENSE Security Advisory 02.27.03 -- TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing - (28/02/2003)

ESB-2003.0111 -- OpenSSL Security Advisory -- Timing-based attacks on SSL/TLS with CBC encryption - (21/02/2003)

ESB-2003.0108 -- CERT Advisory CA-2003-05 -- Multiple Vulnerabilities in Oracle Servers - (20/02/2003)


Previous  1, 2, 3 ... , 107, 108, 109  Next denotes AusCERT member only content.