Mailing List Archive For secprog@securityfocus.com Jan 2003 By Thread

• RE: Application to Application authentication models.... Glenn_Everhart(at)bankone.com (Fri Jan 31 2003 - 16:32:16 EST)
• RE: Application to Application authentication models.... NESTING, DAVID M (SBCSI) (Fri Jan 31 2003 - 15:13:27 EST)
• Re: Application to Application authentication models.... r s (Fri Jan 31 2003 - 11:10:57 EST)
• Re: safe strcpy()? Dave Aitel (Thu Jan 30 2003 - 16:58:58 EST)
• Re: safe strcpy()? Crispin Cowan (Thu Jan 30 2003 - 14:08:58 EST)
• RE: safe strcpy()? Ed Carp (Wed Jan 29 2003 - 20:53:37 EST)
• Re: safe strcpy()? Timo Sirainen (Wed Jan 29 2003 - 20:47:04 EST)
• Re: safe strcpy()? Crispin Cowan (Thu Jan 30 2003 - 01:19:47 EST)
• Re: safe strcpy()? Ed Carp (Wed Jan 29 2003 - 20:54:43 EST)
• Re: safe strcpy()? Ben Pfaff (Wed Jan 29 2003 - 18:40:16 EST)
• Re: safe strcpy()? Dave Aitel (Wed Jan 29 2003 - 16:25:02 EST)
• RE: safe strcpy()? Daniel Reed (Wed Jan 29 2003 - 17:04:58 EST)
• RE: safe strcpy()? Michael Howard (Wed Jan 29 2003 - 16:06:41 EST)
• Security Auditing Report Conventions and Standards Sandeep Giri (Wed Jan 29 2003 - 02:00:07 EST)
• Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 23:05:22 EST)
• Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 20:36:44 EST)
• RE: safe strcpy()? Ed Carp (Tue Jan 28 2003 - 20:06:48 EST)
• RE: safe strcpy()? Hall, Philip (Tue Jan 28 2003 - 23:00:33 EST)
• Re: safe strcpy()? mlh(at)zip.com.au (Tue Jan 28 2003 - 22:12:53 EST)
• RE: safe strcpy()? Michael Howard (Tue Jan 28 2003 - 19:40:07 EST)
• Re: safe strcpy()? Steffen Dettmer (Tue Jan 28 2003 - 19:09:55 EST)
• Re: safe strcpy()? mlh(at)zip.com.au (Tue Jan 28 2003 - 18:37:36 EST)
• Re: Can System() of Perl be bypassed? Brian Reichert (Tue Jan 28 2003 - 17:58:24 EST)
• Re: safe strcpy()? Crispin Cowan (Tue Jan 28 2003 - 17:49:45 EST)
• RE: Can System() of Perl be bypassed? NESTING, DAVID M (SBCSI) (Tue Jan 28 2003 - 17:35:30 EST)
• RE: PGP scripting... Michael McKay (Tue Jan 28 2003 - 16:25:14 EST)
• RE: malicious code Steven M. Christey (Tue Jan 28 2003 - 16:30:18 EST)
• RE: Application to Application authentication models.... NESTING, DAVID M (SBCSI) (Tue Jan 28 2003 - 17:12:25 EST)
• Application to Application authentication models.... r s (Tue Jan 28 2003 - 15:46:09 EST)
• Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 13:37:37 EST)
• Re: safe strcpy()? Brandon Erhart (Tue Jan 28 2003 - 12:21:19 EST)
• Re: safe strcpy()? Michal Zalewski (Tue Jan 28 2003 - 05:09:08 EST)
• Re: safe strcpy()? Ed Carp (Tue Jan 28 2003 - 04:44:24 EST)
• Re: safe strcpy()? Michal Zalewski (Tue Jan 28 2003 - 04:14:37 EST)
• RE: malicious code Jason Coombs (Tue Jan 28 2003 - 03:07:16 EST)
• Re: safe strcpy()? Crispin Cowan (Tue Jan 28 2003 - 02:57:37 EST)
• Re: malicious code lists(at)notatla.demon.co.uk (Tue Jan 28 2003 - 02:20:10 EST)
• safe strcpy()? Ed Carp (Tue Jan 28 2003 - 01:56:13 EST)
• Re: malicious code Crispin Cowan (Tue Jan 28 2003 - 00:31:59 EST)
• Re: malicious code Jeff Williams (Mon Jan 27 2003 - 21:34:48 EST)
• Re: malicious code David Wagner (Mon Jan 27 2003 - 17:21:29 EST)
• malicious code Jeff Williams (Sat Jan 25 2003 - 14:13:49 EST)
• Re: Standards for developing secure software Luciano Miguel Ferreira Rocha (Mon Jan 27 2003 - 15:01:15 EST)
• Re: Standards for developing secure software Valdis.Kletnieks(at)vt.edu (Mon Jan 27 2003 - 15:25:36 EST)
• Re: Standards for developing secure software Pavel Kankovsky (Mon Jan 27 2003 - 05:17:05 EST)
• Re: Standards for developing secure software David Wheeler (Mon Jan 27 2003 - 11:04:59 EST)
• Re: Standards for developing secure software George Dinwiddie (Sun Jan 26 2003 - 10:10:20 EST)
• webserver cgi question Rob McMillen (Sun Jan 26 2003 - 09:42:42 EST)
• Re: Standards for developing secure software Pavel Kankovsky (Sat Jan 25 2003 - 17:07:03 EST)
• Re: Standards for developing secure software Ben Pfaff (Sat Jan 25 2003 - 13:21:51 EST)
• Re: Effective, Real and Group id switching for daemons lists(at)notatla.demon.co.uk (Sat Jan 25 2003 - 07:16:06 EST)
• RE: Standards for developing secure software jasonk (Sat Jan 25 2003 - 07:48:29 EST)
• Effective, Real and Group id switching for daemons John Hanna (Fri Jan 24 2003 - 17:19:22 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Fri Jan 24 2003 - 18:45:38 EST)
• Re: protecting perl script source Dr. Ernst Molitor (Sat Jan 25 2003 - 03:52:17 EST)
• Re: Standards for developing secure software Valdis.Kletnieks(at)vt.edu (Fri Jan 24 2003 - 18:33:26 EST)
• Re: protecting perl script source John Hanna (Fri Jan 24 2003 - 15:01:20 EST)
• Re: protecting perl script source frank (at) absoluta.org ( Frank Ned ) (Fri Jan 24 2003 - 13:44:56 EST)
• RE: PGP scripting (reprise) lsi (Fri Jan 24 2003 - 06:15:35 EST)
• RE: Secure programming FAQ? Pete Herzog (Fri Jan 24 2003 - 05:43:35 EST)
• protecting perl script source John Hanna (Fri Jan 24 2003 - 13:58:21 EST)
• RE: Standards for developing secure software Stormwalker (Fri Jan 24 2003 - 09:02:41 EST)
• RE: Standards for developing secure software Ogle Ron (Rennes) (Fri Jan 24 2003 - 04:47:20 EST)
• Re: PGP scripting... Andre Mariën (Fri Jan 24 2003 - 02:04:41 EST)
• Re: PGP scripting... Andre Mariën (Fri Jan 24 2003 - 04:54:40 EST)
• RE: Standards for developing secure software Glynn Clements (Thu Jan 23 2003 - 22:42:44 EST)
• RE: Can System() of Perl be bypassed? epicmc(at)optonline.net (Fri Jan 24 2003 - 06:25:20 EST)
• Re: Standards for developing secure software Adrian Wiesmann (Fri Jan 24 2003 - 04:05:13 EST)
• RE: Secure programming FAQ? drG4nj[Bl4ck Tigerz] (Fri Jan 24 2003 - 04:10:54 EST)
• RE: PGP scripting... Jason Coombs (Fri Jan 24 2003 - 02:35:57 EST)
• Re: Can System() of Perl be bypassed? Glynn Clements (Thu Jan 23 2003 - 18:00:40 EST)
• Re: Secure programming FAQ? Jose Nazario (Thu Jan 23 2003 - 20:03:42 EST)
• Secure programming FAQ? jeremyd(at)linkline.com (Thu Jan 23 2003 - 19:18:07 EST)
• Re: Standards for developing secure software Alex Russell (Thu Jan 23 2003 - 18:24:15 EST)
• RE: PGP scripting... Jason Coombs (Thu Jan 23 2003 - 19:22:18 EST)
• Re: Can System() of Perl be bypassed? Luciano Miguel Ferreira Rocha (Thu Jan 23 2003 - 19:27:49 EST)
• Re: Standards for developing secure software Ed Carp (Thu Jan 23 2003 - 17:43:41 EST)
• Re: Standards for developing secure software Ed Carp (Thu Jan 23 2003 - 16:57:08 EST)
• RE: Standards for developing secure software Gustaf Bjorksten (Thu Jan 23 2003 - 01:55:44 EST)
• Re: Can System() of Perl be bypassed? Brian Hatch (Thu Jan 23 2003 - 17:15:43 EST)
• Re: Standards for developing secure software Valdis.Kletnieks(at)vt.edu (Thu Jan 23 2003 - 14:52:00 EST)
• Re: Can System() of Perl be bypassed? Sandeep Giri (Thu Jan 23 2003 - 02:08:15 EST)
• Re: Standards for developing secure software Alex Russell (Thu Jan 23 2003 - 16:52:10 EST)
• Re: Can System() of Perl be bypassed? Brian Hatch (Thu Jan 23 2003 - 13:44:29 EST)
• RE: PGP scripting (reprise) Peter Gutmann (Wed Jan 22 2003 - 21:43:44 EST)
• RE: Standards for developing secure software Witness (Thu Jan 23 2003 - 13:22:41 EST)
• RE: Standards for developing secure software security(at)pablowe.net (Thu Jan 23 2003 - 13:18:10 EST)
• Re: Can System() of Perl be bypassed? Ian Charnas (Thu Jan 23 2003 - 00:50:05 EST)
• Re: Can System() of Perl be bypassed? FBO (Thu Jan 23 2003 - 04:32:27 EST)
• RE: Can System() of Perl be bypassed? Tom Arseneault (Wed Jan 22 2003 - 18:10:39 EST)
• Re: Can System() of Perl be bypassed? Dana Epp (Wed Jan 22 2003 - 17:26:17 EST)
• Re: Can System() of Perl be bypassed? Glynn Clements (Wed Jan 22 2003 - 17:37:14 EST)
• Re: Can System() of Perl be bypassed? Ilya Martynov (Wed Jan 22 2003 - 17:09:56 EST)
• RE: Can System() of Perl be bypassed? NESTING, DAVID M (SBCSI) (Wed Jan 22 2003 - 16:30:17 EST)
• Re: Can System() of Perl be bypassed? Brian Hatch (Wed Jan 22 2003 - 16:58:01 EST)
• RE: PGP scripting (reprise) Robert B. Morson (Wed Jan 22 2003 - 11:38:56 EST)
• Can System() of Perl be bypassed? Sandeep Giri (Wed Jan 22 2003 - 02:03:27 EST)
• RE: PGP scripting... Glynn Clements (Wed Jan 22 2003 - 15:06:05 EST)
• RE: Standards for developing secure software Witness (Tue Jan 21 2003 - 01:41:55 EST)
• RE: PGP scripting... Beatie, Breck (ISSMountain View) (Wed Jan 22 2003 - 15:27:01 EST)
• Re: PGP scripting (reprise) Jack Lloyd (Wed Jan 22 2003 - 14:09:05 EST)
• RE: PGP scripting... Jason Coombs (Tue Jan 21 2003 - 13:20:01 EST)
• RE: PGP scripting... Beatie, Breck (ISSMountain View) (Tue Jan 21 2003 - 12:13:08 EST)
• PGP scripting (reprise) lsi (Sat Jan 18 2003 - 10:19:08 EST)
• Re: PGP scripting... Andre Mariën (Thu Jan 09 2003 - 04:47:55 EST)
• Re: Writing Secure code David Wheeler (Mon Jan 13 2003 - 17:44:33 EST)
• Re: Preventing ptrace() David Wagner (Mon Jan 13 2003 - 15:20:44 EST)
• RE: PGP scripting... Michael McKay (Mon Jan 13 2003 - 13:46:34 EST)
• RE: PGP scripting... Ogle Ron (Rennes) (Thu Jan 09 2003 - 04:02:46 EST)
• Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 23:59:30 EST)
• Re: Writing Secure code L. Adrian Griffis (Mon Jan 13 2003 - 12:27:38 EST)
• Writing Secure code David Wheeler (Mon Jan 13 2003 - 10:37:34 EST)
• Re: Preventing ptrace() Glynn Clements (Mon Jan 13 2003 - 07:23:40 EST)
• Re: Preventing ptrace() Steffen Dettmer (Mon Jan 13 2003 - 04:34:16 EST)
• RE: PGP scripting... Jason Coombs (Mon Jan 13 2003 - 01:42:57 EST)
• Re: PGP scripting... Craig Davison (Sun Jan 12 2003 - 18:58:30 EST)
• RE: PGP scripting... Michael McKay (Sun Jan 12 2003 - 01:34:45 EST)
• Re: PGP scripting... Pavel Kankovsky (Sun Jan 12 2003 - 15:23:53 EST)
• Re: PGP scripting... Peter Jeremy (Sat Jan 11 2003 - 17:31:49 EST)
• Re: PGP scripting... David Wagner (Sat Jan 11 2003 - 15:38:28 EST)
• RE: PGP scripting... Jason Coombs (Fri Jan 10 2003 - 20:46:02 EST)
• Re: PGP scripting... Ed Carp (Fri Jan 10 2003 - 14:30:42 EST)
• RE: PGP scripting... Kenneth Buchanan (Thu Jan 09 2003 - 09:01:15 EST)
• RE: PGP scripting... Dawes, Rogan (ZA - Johannesburg) (Thu Jan 09 2003 - 02:31:36 EST)
• Re: PGP scripting... Crispin Cowan (Sat Jan 11 2003 - 03:56:35 EST)
• Re: Preventing ptrace() Glynn Clements (Fri Jan 10 2003 - 15:32:52 EST)
• Re: PGP scripting... Elliott Mitchell (Fri Jan 10 2003 - 22:27:38 EST)
• Re: Standards for developing secure software dirk.dussart(at)pwc.be (Thu Jan 09 2003 - 10:01:44 EST)
• Re: PGP scripting... John Viega (Wed Jan 08 2003 - 21:08:15 EST)
• RE: PGP scripting... Jason Coombs (Fri Jan 10 2003 - 18:00:29 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Fri Jan 10 2003 - 14:31:54 EST)
• Re: PGP scripting... Andrew MacKenzie (Fri Jan 10 2003 - 13:45:07 EST)
• Re: Preventing ptrace() Timo Sirainen (Thu Jan 09 2003 - 20:53:36 EST)
• Re: PGP scripting... Brian Hatch (Thu Jan 09 2003 - 10:57:19 EST)
• Re: Preventing ptrace() Jason Lunz (Thu Jan 09 2003 - 16:15:06 EST)
• Re: PGP scripting... Steffen Dettmer (Wed Jan 08 2003 - 18:25:58 EST)
• RE: PGP scripting... Tom Arseneault (Wed Jan 08 2003 - 19:27:38 EST)
• Re: PGP scripting... Darryl Luff (Wed Jan 08 2003 - 19:51:18 EST)
• RE: Suggestions for third-party code review consultants? Sinan Eren (Wed Jan 08 2003 - 19:29:50 EST)
• Re: PGP scripting... David Wagner (Wed Jan 08 2003 - 17:32:11 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Wed Jan 08 2003 - 18:00:53 EST)
• Re: RE: PGP scripting... Mark Reardon (Wed Jan 08 2003 - 15:59:05 EST)
• RE: PGP scripting... Glenn_Everhart(at)bankone.com (Wed Jan 08 2003 - 14:39:30 EST)
• RE: PGP scripting... Jason Coombs (Wed Jan 08 2003 - 14:26:04 EST)
• Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 14:23:21 EST)
• Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 14:15:40 EST)
• Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 14:08:10 EST)
• RE: PGP scripting... Chris Matthews (Wed Jan 08 2003 - 09:13:55 EST)
• Re: Suggestions for third-party code review consultants? Nicole Nicholson (Wed Jan 08 2003 - 11:49:38 EST)
• RE: PGP scripting... Ogle Ron (Rennes) (Wed Jan 08 2003 - 10:55:33 EST)
• Re: PGP scripting... Steffen Dettmer (Wed Jan 08 2003 - 03:26:07 EST)
• RE: PGP scripting... Keith Smith (Wed Jan 08 2003 - 03:05:32 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Tue Jan 07 2003 - 23:12:18 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Tue Jan 07 2003 - 23:17:07 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Wed Jan 08 2003 - 10:56:40 EST)
• Re: PGP scripting... lsi (Wed Jan 08 2003 - 08:12:46 EST)
• Re: PGP scripting... Frank Knobbe (Wed Jan 08 2003 - 01:47:37 EST)
• Re: Standards for developing secure software Stefan Schildt (Wed Jan 08 2003 - 02:55:47 EST)
• Re: PGP scripting... Ed Carp (Tue Jan 07 2003 - 22:03:33 EST)
• Re: PGP scripting... Brian Hatch (Tue Jan 07 2003 - 19:53:26 EST)
• Re: PGP scripting... Frank Knobbe (Tue Jan 07 2003 - 21:19:42 EST)
• Re: PGP scripting... Marcin Owsiany (Tue Jan 07 2003 - 20:30:29 EST)
• RE: PGP scripting... Andres Palomares (Tue Jan 07 2003 - 19:50:48 EST)
• Re: PGP scripting... lsi (Tue Jan 07 2003 - 19:38:42 EST)
• Re: PGP scripting... Marcin Owsiany (Tue Jan 07 2003 - 18:00:58 EST)
• RE: PGP scripting... Keith Smith (Tue Jan 07 2003 - 18:29:08 EST)
• Re: PGP scripting... Andrew MacKenzie (Tue Jan 07 2003 - 18:35:13 EST)
• Re: PGP scripting... John Hanna (Tue Jan 07 2003 - 17:38:15 EST)
• Re: PGP scripting... Andrew Steingruebl (Tue Jan 07 2003 - 17:10:28 EST)
• Re: Standards for developing secure software Steven M. Christey (Tue Jan 07 2003 - 16:49:03 EST)
• Re: PGP scripting... Andrew Steingruebl (Tue Jan 07 2003 - 16:58:55 EST)
• Re: PGP scripting... Mindaugas Zaksauskas (Tue Jan 07 2003 - 14:44:48 EST)
• Re: PGP scripting... Valdis.Kletnieks(at)vt.edu (Tue Jan 07 2003 - 15:19:24 EST)
• RE: PGP scripting... Chris Matthews (Tue Jan 07 2003 - 13:38:16 EST)
• RE: PGP scripting... Michael McKay (Tue Jan 07 2003 - 14:16:13 EST)
• Re: PGP scripting... Alex Russell (Tue Jan 07 2003 - 15:19:20 EST)
• Re: PGP scripting... Ed Carp (Tue Jan 07 2003 - 13:53:59 EST)
• Re: PGP scripting... Giorgio Zoppi (deneb) (Tue Jan 07 2003 - 16:58:01 EST)
• RE:Writing Secure code[update] dirk.dussart(at)pwc.be (Tue Jan 07 2003 - 11:22:51 EST)
• Suggestions for third-party code review consultants? jet (Tue Jan 07 2003 - 14:11:35 EST)
• Re: PGP scripting... Mindaugas Zaksauskas (Tue Jan 07 2003 - 14:46:32 EST)
• PGP scripting... Andrew MacKenzie (Tue Jan 07 2003 - 12:02:13 EST)
• Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Sverre H. Huseby (Sat Jan 04 2003 - 17:15:34 EST)
• Re: Writing Secure code[update] Warwick Molloy (Fri Jan 03 2003 - 19:31:56 EST)
• RE:Writing Secure code[update] Pavel Kankovsky (Fri Jan 03 2003 - 14:00:26 EST)
• Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Jeff Williams (at) Aspect (Fri Jan 03 2003 - 14:01:43 EST)
• Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Kevin Spett (Fri Jan 03 2003 - 12:01:39 EST)
• Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Dave Aitel (Fri Jan 03 2003 - 11:16:50 EST)
• Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Kevin Spett (Fri Jan 03 2003 - 11:01:20 EST)
• RE: Writing Secure code[update] Jeremy Epstein (Fri Jan 03 2003 - 10:29:27 EST)
• Re: Preventing ptrace() Timo Sirainen (Thu Jan 02 2003 - 23:38:18 EST)
• RE: Writing Secure code Timo Sirainen (Thu Jan 02 2003 - 23:36:53 EST)
• Re: Standards for developing secure software Peter Gutmann (Thu Jan 02 2003 - 22:47:15 EST)
• Re: Writing Secure code[update] Alex Russell (Thu Jan 02 2003 - 18:55:19 EST)
• Standards for developing secure software David Wheeler (Thu Jan 02 2003 - 11:02:30 EST)
• Re: Writing Secure code[update] Crispin Cowan (Wed Jan 01 2003 - 23:17:57 EST)
• RE:Writing Secure code[update] charles lindsay (Wed Jan 01 2003 - 20:54:56 EST)
• Re: Writing Secure code[update] K K Mookhey (Wed Jan 01 2003 - 07:21:20 EST)