full-disclosure - Trivial injection and message spoof security mailing list archives

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: choose.a.username at hushmail.com (choose.a.username@...hmail.com)
Subject: Trivial injection and message spoof security mailing list archives

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you keep an eye open for unusual messages to posted to mailing lists, you can catch some really silly errors. Today there is a bounce on neohapsis from the ezmlm program manager revealing the mailto for neohapsis vuln-dev archive.

Last year cotse.com had an errant posting on their archive for bugtraq's mailto.

Below is an injection directly to neohapsis archive. Testing cotse's, possibly the same will show up in the next hour.

http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0430.html

the message is happily lifted from humorix.org and modified accordingly.

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com

wmYEARECACYFAj1L7CkfHGNob29zZS5hLnVzZXJuYW1lQGh1c2htYWlsLmNvbQAKCRDT
5JkCl0iMkPGnAJ0VgYJQMJFgWC6SYravPE6sHr0OrQCgl5kNOKT9C6VmQHNM833pW49s
5Jg=
=TXt0
-----END PGP SIGNATURE-----

Communicate in total privacy.
Get your free encrypted email at https://www.hushmail.com/?l=2

Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople