Remote exploit for squid-2.2-STABLE5 or below.
812fce62394bc0e251588aa9af7d50731d9621e19a0263b63dceba4d3492ccb0
The version of lpr that was distributed with Debian GNU/Linux 2.1 suffers from a couple of problems. There was a race in lpr that could be exploited by users to print files they can not normally read, and lpd did not check permissions of queue-files. As a result by using the -s flag it could be tricked into printing files a user can otherwise not read. This has been fixed in version 0.46-1-0slink1. We recommend you upgrade your lpr package immediately. Debian security homepage here.
0e87d8210d38143d57f0251abf1b80fc8c61dfcb5ca60645c696d90c09041c9c
A simple guide on what IP masquerading is, what is it good for, how to work with it etc for newbies in that subject.
a8374609c77bf091c7d1940e63b17d077f5d6d8d672ca0960035a504a19f7620
Advisory RFP9907 - You, your servers, RDS, and thousands of script kiddies. .gov, .mil, and even microsoft.com haven fallen lately to the hands of website defacers. Turns out, it's all been because of RDS. This paper is the straight story on fixing the RDS hole.
a1562ec8e6c3de504d8609d33290529e67aa77bd45c35abf8a3f834df5775bd8
Sendmail 8.x.x - any user may rebuild aliases database causing local denial of service.
ee87fe08a43899cadbac39a3e8a3cf5421bda9c8ff62986e65f41d6271f83a96
[ Windows Security Digest ] 1999 - November 2. Contains analysis of 8 windows vulnerabilities that have come out in the past 2 weeks, plus Ongoing MDAC Attacks Against IIS, IIS 5.0's New Security Features, Tools of the Trade, Top 10 Cracks of All Time, and Internet Scanner vs CyberCop. www.ntsecurity.net
a5b0722634118b6f7925bcfc66f9a6e384388015d987e474d69a1d92fb1bb48a
A scanner for the infamous Back Orifice program. This is many times faster than the ping sweeper built in to the original client program. I have included the ability to notify detected victims by sending them a BO messagebox message directly from within the program. This is intended as a vigilante tool to notify victims who unknowingly have the trojan on their system. Archive password is set to p4ssw0rd. Use at your own risk.
ab621f8f8467be5903834ceaf7b26b57f370f5ad827e9d952a9d5e14d7997907